crash with an extension [@nsIFrame::GetStyleContext]

RESOLVED WORKSFORME

Status

()

Firefox
General
--
critical
RESOLVED WORKSFORME
14 years ago
7 years ago

People

(Reporter: Chris Thomas (CTho) [formerly cst@andrew.cmu.edu cst@yecc.com], Assigned: Blake Ross)

Tracking

({crash})

1.0 Branch
x86
Windows XP
crash
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

(crash signature)

Attachments

(1 attachment)

I installed AdBlockLearner 0.8.1 (see bug 269750), and began experiencing
crashes while surfing.  Extensions, no matter how poorly written, should not
crash us.

To reproduce:
1. Install AdBlockLearner 0.8.1
2. Read some stories on cnn.com
3. Block an ad
4. Attempt to read more stories
Created attachment 165894 [details]
stack

this=0x00000000

in nsFrameManager::ReResolveStyleContext
 aFrame=0x00000000
up again in nsFrameManager::ReResolveStyleContext
 outOfFlowFrame=0x00000000

I didn't see any obvious nulls at higher points in the stack.
Two asserts that were in the console:
###!!! ASSERTION: no out-of-flow frame: 'outOfFlowFrame', file
d:/aviary/mozilla/layout/html/base/src/nsFrameManager.cpp, line 1597
###!!! ASSERTION: out-of-flow frame not a true descendant: 'outOfFlowFrame !=
resolvedChild', file d:/aviary/mozilla/layout/html/base/src/nsFrameManager.cpp, li
ne 1599

Updated

14 years ago
Severity: normal → critical
Keywords: crash
After the aviary landing on trunk, I can no longer reproduce the crash.
Blocks: 269750
Status: UNCONFIRMED → RESOLVED
Last Resolved: 13 years ago
Resolution: --- → WORKSFORME
Crash Signature: [@nsIFrame::GetStyleContext]
You need to log in before you can comment on or make changes to this bug.