Closed Bug 279234 Opened 20 years ago Closed 15 years ago

crash while adding a few recipients to an email [@ DeutschSchorrWaite ]

Categories

(Core :: JavaScript Engine, defect)

Product:
Core
Component:
JavaScript Engine
Platform:
x86
Windows XP
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED WORKSFORME

People

(Reporter: io, Unassigned)

Details

(Keywords: crash)

Crash Data

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8b) Gecko/20050119
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8b) Gecko/20050119

Crash happens while composing an email and using more than one recipient
field... crashes happen sometimes while switching from the recipient to the
subject field, sometimes while adding an amount of recipients so that they can't
fit in the window without resizing it... most of times anyway, the crash doesn't
occur.
This happens with nightly build 20050119, but happened once with the nightly
build of a few days too. As far as i remember, it never happened (at least to
me) with 1.7.5

Before the crash happens, the whole Mozilla suite (any navigator or mail window)
is frozen and it's not possible to use it... after a few seconds the crash occur.

Reproducible: Sometimes

Steps to Reproduce:
it's not possible to have a testcase to reproduce the crash since it happens
randomly...



Talkback: TB3195563W
Stack Signature	 DeutschSchorrWaite 179f8bd0
Product ID	MozillaTrunk
Build ID	2005011906
Trigger Time	2005-01-21 01:49:37.0
Platform	Win32
Operating System	Windows NT 5.1 build 2600
Module	js3250.dll + (0001b9ac)
URL visited	
User Comments	
Since Last Crash	40682 sec
Total Uptime	40682 sec
Trigger Reason	Access violation
Source File, Line No.
c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/js/src/jsgc.c, line 1315
Stack Trace 	
DeutschSchorrWaite 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/js/src/jsgc.c, line
1315]
MarkGCThing 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/js/src/jsgc.c, line
1082]
js_MarkGCThing 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/js/src/jsgc.c, line
1398]
js_GC 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/js/src/jsgc.c, line
1653]
js_ForceGC 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/js/src/jsgc.c, line
1462]
nsXPCWrappedJSClass::CallMethod 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/js/src/xpconnect/src/xpcwrappedjsclass.cpp,
line 1588]
nsXPCWrappedJS::CallMethod 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/js/src/xpconnect/src/xpcwrappedjs.cpp,
line 450]
SharedStub 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/xpcom/reflect/xptcall/src/md/win32/xptcstubs.cpp,
line 147]
nsTextBoxFrame::UpdateAttributes 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/xul/base/src/nsTextBoxFrame.cpp,
line 255]
nsTextBoxFrame::Init 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/xul/base/src/nsTextBoxFrame.cpp,
line 180]
nsCSSFrameConstructor::InitAndRestoreFrame 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/base/nsCSSFrameConstructor.cpp,
line 6827]
nsCSSFrameConstructor::ConstructXULFrame 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/base/nsCSSFrameConstructor.cpp,
line 6045]
nsCSSFrameConstructor::ConstructFrameInternal 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/base/nsCSSFrameConstructor.cpp,
line 7693]
nsCSSFrameConstructor::ConstructFrame 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/base/nsCSSFrameConstructor.cpp,
line 7586]
nsCSSFrameConstructor::ProcessChildren 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/base/nsCSSFrameConstructor.cpp,
line 11831]
nsCSSFrameConstructor::ConstructXULFrame 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/base/nsCSSFrameConstructor.cpp,
line 6122]
nsCSSFrameConstructor::ConstructFrameInternal 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/base/nsCSSFrameConstructor.cpp,
line 7693]
nsCSSFrameConstructor::ConstructFrame 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/base/nsCSSFrameConstructor.cpp,
line 7586]
nsCSSFrameConstructor::ProcessChildren 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/base/nsCSSFrameConstructor.cpp,
line 11831]
nsCSSFrameConstructor::ConstructXULFrame 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/base/nsCSSFrameConstructor.cpp,
line 6122]
nsCSSFrameConstructor::ConstructFrameInternal 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/base/nsCSSFrameConstructor.cpp,
line 7693]
nsCSSFrameConstructor::ConstructFrame 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/base/nsCSSFrameConstructor.cpp,
line 7586]
nsCSSFrameConstructor::ProcessChildren 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/base/nsCSSFrameConstructor.cpp,
line 11831]
nsCSSFrameConstructor::ConstructXULFrame 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/base/nsCSSFrameConstructor.cpp,
line 6122]
nsCSSFrameConstructor::ConstructFrameInternal 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/base/nsCSSFrameConstructor.cpp,
line 7693]
nsCSSFrameConstructor::ConstructFrame 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/base/nsCSSFrameConstructor.cpp,
line 7586]
nsCSSFrameConstructor::ProcessChildren 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/base/nsCSSFrameConstructor.cpp,
line 11831]
nsCSSFrameConstructor::ConstructXULFrame 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/base/nsCSSFrameConstructor.cpp,
line 6122]
nsCSSFrameConstructor::ConstructFrameInternal 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/base/nsCSSFrameConstructor.cpp,
line 7693]
nsCSSFrameConstructor::ConstructFrameInternal 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/base/nsCSSFrameConstructor.cpp,
line 7654]
nsCSSFrameConstructor::ConstructFrame 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/base/nsCSSFrameConstructor.cpp,
line 7586]
nsCSSFrameConstructor::ProcessChildren 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/base/nsCSSFrameConstructor.cpp,
line 11831]
nsCSSFrameConstructor::ConstructXULFrame 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/base/nsCSSFrameConstructor.cpp,
line 6122]
nsCSSFrameConstructor::ConstructFrameInternal 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/base/nsCSSFrameConstructor.cpp,
line 7693]
nsCSSFrameConstructor::ConstructFrame 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/base/nsCSSFrameConstructor.cpp,
line 7586]
nsCSSFrameConstructor::ProcessChildren 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/base/nsCSSFrameConstructor.cpp,
line 11831]
nsCSSFrameConstructor::ConstructXULFrame 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/base/nsCSSFrameConstructor.cpp,
line 6122]
nsCSSFrameConstructor::ConstructFrameInternal 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/base/nsCSSFrameConstructor.cpp,
line 7693]
nsCSSFrameConstructor::CreateListBoxContent 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/base/nsCSSFrameConstructor.cpp,
line 12796]
nsListBoxBodyFrame::GetNextItemBox 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/xul/base/src/nsListBoxBodyFrame.cpp,
line 1224]
nsListBoxBodyFrame::CreateRows 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/xul/base/src/nsListBoxBodyFrame.cpp,
line 1076]
nsListBoxBodyFrame::ReflowFinished 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/xul/base/src/nsListBoxBodyFrame.cpp,
line 508]
PresShell::HandlePostedReflowCallbacks 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/base/nsPresShell.cpp,
line 4871]
PresShell::DidDoReflow 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/base/nsPresShell.cpp,
line 6172]
PresShell::FlushPendingNotifications 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/base/nsPresShell.cpp,
line 4974]
...
Keywords: crash
Summary: crash while adding a few recipients to an email → crash while adding a few recipients to an email [ @ DeutschSchorrWaite ]
Version: unspecified → Trunk
Assignee: sspitzer → general
Component: MailNews: Main Mail Window → JavaScript Engine
Product: Mozilla Application Suite → Core
QA Contact: pschwartau
I was wondering if this crash could be related to the regression bug introduced
a few days ago regarding the autocomplete feature of the mail composer window (i
don't remember the bug id, anyway i saw it in yesterday's bugs list too)...
I think I may have fixed this with rev 3.89 of js/src/jsgc.c, but I'd like to be
sure.  Jay, can you get disassembly and the crashing pc and paste them in here?

bz, dbaron said I should cc: you about the very deep stack that involves
recursion of the form:

PresShell::HandlePostedReflowCallbacks 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/base/nsPresShell.cpp,
line 4871]
PresShell::DidDoReflow 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/base/nsPresShell.cpp,
line 6172]
PresShell::FlushPendingNotifications 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/base/nsPresShell.cpp,
line 4974]
PresShell::HandlePostedReflowCallbacks 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/base/nsPresShell.cpp,
line 4875]
PresShell::DidDoReflow 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/base/nsPresShell.cpp,
line 6172]
PresShell::FlushPendingNotifications 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/base/nsPresShell.cpp,
line 4974]
PresShell::HandlePostedReflowCallbacks 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/base/nsPresShell.cpp,
line 4875]
PresShell::DidDoReflow 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/base/nsPresShell.cpp,
line 6172]
PresShell::FlushPendingNotifications 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/base/nsPresShell.cpp,
line 4974]
PresShell::HandlePostedReflowCallbacks 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/base/nsPresShell.cpp,
line 4875]
PresShell::DidDoReflow 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/base/nsPresShell.cpp,
line 6172]
PresShell::FlushPendingNotifications 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/base/nsPresShell.cpp,
line 4974]
PresShell::HandlePostedReflowCallbacks 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/base/nsPresShell.cpp,
line 4875]
PresShell::DidDoReflow 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/base/nsPresShell.cpp,
line 6172]
PresShell::FlushPendingNotifications 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/base/nsPresShell.cpp,
line 4974]
PresShell::HandlePostedReflowCallbacks 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/base/nsPresShell.cpp,
line 4875]
PresShell::DidDoReflow 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/base/nsPresShell.cpp,
line 6172]
PresShell::FlushPendingNotifications 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/base/nsPresShell.cpp,
line 4974]
PresShell::HandlePostedReflowCallbacks 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/base/nsPresShell.cpp,
line 4875]
PresShell::DidDoReflow 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/base/nsPresShell.cpp,
line 6172]
PresShell::FlushPendingNotifications 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/base/nsPresShell.cpp,
line 4974]
PresShell::HandlePostedReflowCallbacks 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/base/nsPresShell.cpp,
line 4875]

/be
Status: UNCONFIRMED → NEW
Ever confirmed: true
Sorry, forgot to cc: jay (see comment 3).

/be
Due to ongoing Talkback db issues, detailed info about the crashes reported in
this bug were deleted today (detailed info for all crashes is deleted on a
regular basis every 3-5 days, depending on when the db error occurs).  I am
working on getting that fixed.  

Alessio:  Can you please reproduce this crash again and post your latest
Talkback ID?  If you crash now and submit an incident, we will have a couple of
days to grab the detailed info Brendan needs.  Thanks.  
Hmm... so that recursion happens any time we end up with an nsListBoxBodyFrame
whose row heights keep changing for some reason.  Every time that happens it
posts a request to flush layout once reflow is done, and if the layout flush
changes its row height again, we recurse...
(In reply to comment #5)
> Alessio:  Can you please reproduce this crash again and post your latest
> Talkback ID?  If you crash now and submit an incident, we will have a couple of
> days to grab the detailed info Brendan needs.  Thanks.  

I was able to reproduce the crash twice this morning but in both cases the
feedback agent didn't start (it's turned on), is there something i can do?

Allesio:  I find it odd that Talkback was not triggered at the time of your
crashes (I'm assuming you already ran talkback.exe in your components directory
to check that the "Turn Agent On" pref was set).  Try another build perhaps?  I
know I was able to crash and submit Talkback reports with Mozilla/5.0 (Windows;
U; Windows NT 5.1; en-US; rv:1.8b) Gecko/20050125.
(In reply to comment #8)
> Allesio:  I find it odd that Talkback was not triggered at the time of your
> crashes 

I found it odd too, especially cause after those crashes another one happened
(for different reasons, see bug 280179) and it has been succesfully trigerred by
the TB Agent. Anyway I've just installed the latest nightly build, we will see
what happens...
-> default qa
QA Contact: pschwartau → general
Alessio, is this still reproducible for you?
Flags: testcase-
No, I switched to v. 1.7.11 since a lot of time and this behaviour never happened again.
Given that DSW mark-and-sweep has long since been removed in favor of mark-and-defer-if-over-recurred, I'm confidently marking this WFM.
Status: NEW → RESOLVED
Closed: 15 years ago
Resolution: --- → WORKSFORME
Summary: crash while adding a few recipients to an email [ @ DeutschSchorrWaite ] → crash while adding a few recipients to an email [@ DeutschSchorrWaite ]
Crash Signature: [@ DeutschSchorrWaite ]
You need to log in before you can comment on or make changes to this bug.