Mangler crash [@ nsCSSFrameConstructor::GetFloatContainingBlock]

RESOLVED WORKSFORME

Status

()

--
critical
RESOLVED WORKSFORME
14 years ago
13 years ago

People

(Reporter: dveditz, Unassigned)

Tracking

Trunk
x86
Windows XP
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

Attachments

(1 attachment)

(Reporter)

Description

14 years ago
Michal Zalewski sends in another crashing test case. Unfortunately needs to be
trimmed a lot to find the real cause. Crashes 10/15 nightly right away, my
curent trunk debug build limps along for a bit (not quite right) then crashes later.

Not sure if the difference is optimized vs. debug, or if one of the earlier
mangler fixes got rid of the immediate crash that was masking a deeper flaw. A
few talkback stacks mention the test case "mozilla_die3" crashing with different
stacks. Here's my nightly crash stack (incident 1508445):

0x00000000
nsCSSFrameConstructor::GetFloatContainingBlock 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp,
line 7554]
nsCSSFrameConstructor::ContentAppended 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp,
line 8296]
PresShell::EndReflowBatching 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/html/base/src/nsPresShell.cpp,
line 5022]
nsDocument::GetDoctype 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/content/base/src/nsDocument.cpp,
line 2210]
nsHTMLDocument::GetElementsByTagName 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/content/html/document/src/nsHTMLDocument.cpp,
line 1399]
HTMLContentSink::ProcessSTYLETag 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/content/html/document/src/nsHTMLContentSink.cpp,
line 4352]
HTMLContentSink::Init 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/content/html/document/src/nsHTMLContentSink.cpp,
line 2062]
HTMLContentSink::NotifyAppend 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/content/html/document/src/nsHTMLContentSink.cpp,
line 4034]
HTMLContentSink::AddDocTypeDecl 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/content/html/document/src/nsHTMLContentSink.cpp,
line 3368]
CNavDTD::AddHeadLeaf 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/parser/htmlparser/src/CNavDTD.cpp,
line 3812]
CNavDTD::HandleStartToken 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/parser/htmlparser/src/CNavDTD.cpp,
line 1808]
CNavDTD::HandleToken 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/parser/htmlparser/src/CNavDTD.cpp,
line 961]
CNavDTD::BuildModel 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/parser/htmlparser/src/CNavDTD.cpp,
line 468]
nsParser::DetectMetaTag 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/parser/htmlparser/src/nsParser.cpp,
line 2213]
nsParser::ResumeParse 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/parser/htmlparser/src/nsParser.cpp,
line 1855]
nsParser::Tokenize 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/parser/htmlparser/src/nsParser.cpp,
line 2568]
nsDocumentOpenInfo::OnStopRequest 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/uriloader/base/nsURILoader.cpp,
line 360]
(Reporter)

Updated

14 years ago
Blocks: 264944
(Reporter)

Comment 1

14 years ago
Created attachment 163290 [details]
another Zalewski crash
(Reporter)

Comment 2

14 years ago
Doesn't seem to affect a 10/24 Firefox 1.0 build.

Comment 3

14 years ago
WFM with fresh (20041024) Mozilla trunk and 1.7.x builds on Windows ME.

Marking WORKSFORME per my observations and comment 2.
Status: NEW → RESOLVED
Last Resolved: 14 years ago
Resolution: --- → WORKSFORME

Updated

14 years ago
Summary: Mangler crash → Mangler crash [@ nsCSSFrameConstructor::GetFloatContainingBlock]
(Reporter)

Comment 4

14 years ago
I concur: I updated from cvs and the trunk problems went away here too.
You need to log in before you can comment on or make changes to this bug.