Closed Bug 281605 Opened 19 years ago Closed 19 years ago

All Articles at ABC News Crash Firefox [@ nsStyleContext::GetStyleData]

Categories

(Core :: Layout, defect)

x86
Windows XP
defect
Not set
critical

Tracking

()

RESOLVED DUPLICATE of bug 281657

People

(Reporter: mozilla, Unassigned)

References

()

Details

(Keywords: crash, top100)

Crash Data

20050207 trunk

Follow the link and then click on a link to a story. Here are my talkback ID's:

TB3583267M
TB3583232Y
TB3583208Y
TB3583205M
It appears to be CSS related. Still working on testcase.
Local copy does not crash.
Incident ID: 3583267
Stack Signature	nsStyleContext::GetStyleData 6d4953b7
Product ID	FirefoxTrunk
Build ID	2005020706
Trigger Time	2005-02-08 22:26:57.0
Platform	Win32
Operating System	Windows NT 5.1 build 2600
Module	firefox.exe + (001de930)
URL visited	http://abcnews.go.com/US/wireStory?id=483138
User Comments	
Since Last Crash	162 sec
Total Uptime	67353 sec
Trigger Reason	Access violation
Source File, Line No.
c:/builds/tinderbox/Fx-Trunk/WINNT_5.0_Depend/mozilla/layout/style/nsStyleContext.cpp,
line 247
Stack Trace 	
nsStyleContext::GetStyleData 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.0_Depend/mozilla/layout/style/nsStyleContext.cpp,
line 247]
nsCSSFrameConstructor::ContentAppended 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.0_Depend/mozilla/layout/base/nsCSSFrameConstructor.cpp,
line 8816]
PresShell::ContentAppended 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.0_Depend/mozilla/layout/base/nsPresShell.cpp,
line 5084]
nsHTMLDocument::ContentAppended 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.0_Depend/mozilla/content/html/document/src/nsHTMLDocument.cpp,
line 1123]
nsGenericElement::InsertChildAt 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.0_Depend/mozilla/content/base/src/nsGenericElement.cpp,
line 2571]
nsGenericElement::InsertBefore 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.0_Depend/mozilla/content/base/src/nsGenericElement.cpp,
line 2900]
nsHTMLParagraphElement::AppendChild 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.0_Depend/mozilla/content/html/content/src/nsHTMLParagraphElement.cpp,
line 60]
XPCWrappedNative::CallMethod 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.0_Depend/mozilla/js/src/xpconnect/src/xpcwrappednative.cpp,
line 2034]
XPC_WN_CallMethod 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.0_Depend/mozilla/js/src/xpconnect/src/xpcwrappednativejsops.cpp,
line 1287]
js_Invoke 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.0_Depend/mozilla/js/src/jsinterp.c, line 1293]
js_Interpret 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.0_Depend/mozilla/js/src/jsinterp.c, line 3565]
js_Invoke 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.0_Depend/mozilla/js/src/jsinterp.c, line 1313]
js_Interpret 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.0_Depend/mozilla/js/src/jsinterp.c, line 3565]
js_Execute 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.0_Depend/mozilla/js/src/jsinterp.c, line 1524]
JS_EvaluateUCScriptForPrincipals 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.0_Depend/mozilla/js/src/jsapi.c, line 3739]
nsJSContext::EvaluateString 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.0_Depend/mozilla/dom/src/base/nsJSEnvironment.cpp,
line 1029]
nsScriptLoader::EvaluateScript 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.0_Depend/mozilla/content/base/src/nsScriptLoader.cpp,
line 715]
nsScriptLoader::ProcessRequest 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.0_Depend/mozilla/content/base/src/nsScriptLoader.cpp,
line 621]
nsScriptLoader::ProcessScriptElement 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.0_Depend/mozilla/content/base/src/nsScriptLoader.cpp,
line 567]
nsHTMLScriptElement::MaybeProcessScript 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.0_Depend/mozilla/content/html/content/src/nsHTMLScriptElement.cpp,
line 656]
nsHTMLScriptElement::SetDocument 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.0_Depend/mozilla/content/html/content/src/nsHTMLScriptElement.cpp,
line 446]
HTMLContentSink::ProcessSCRIPTTag 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.0_Depend/mozilla/content/html/document/src/nsHTMLContentSink.cpp,
line 4235]
HTMLContentSink::AddLeaf 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.0_Depend/mozilla/content/html/document/src/nsHTMLContentSink.cpp,
line 3116]
CNavDTD::AddLeaf 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.0_Depend/mozilla/parser/htmlparser/src/CNavDTD.cpp,
line 3570]
CNavDTD::HandleDefaultStartToken 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.0_Depend/mozilla/parser/htmlparser/src/CNavDTD.cpp,
line 1284]
CNavDTD::HandleStartToken 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.0_Depend/mozilla/parser/htmlparser/src/CNavDTD.cpp,
line 1643]
CNavDTD::HandleToken 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.0_Depend/mozilla/parser/htmlparser/src/CNavDTD.cpp,
line 904]
CNavDTD::BuildModel 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.0_Depend/mozilla/parser/htmlparser/src/CNavDTD.cpp,
line 461]
nsParser::BuildModel 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.0_Depend/mozilla/parser/htmlparser/src/nsParser.cpp,
line 2047]
Assignee: firefox → dbaron
Component: General → Style System (CSS)
Keywords: stackwanted
Product: Firefox → Core
QA Contact: general → ian
Summary: All Articles at ABC News Crash Firefox → All Articles at ABC News Crash Firefox [@ nsStyleContext::GetStyleData]
Whiteboard: DUPEME?
Probably a bad style context pointer from something else, not a bug in the style
system code.
Assignee: dbaron → nobody
Component: Style System (CSS) → Layout
QA Contact: ian → layout
WFM, current nightly builds on Windows XP and Linux.
WFM, current Firefox debug (static) build on Windows XP.
WFM, current Mozilla debug build on Linux.

I see a lot of this assertion when browsing this site though:
###!!! ASSERTION: bad state: 'aState.mContentArea.width >=
aState.mAvailSpaceRect.XMost()', file c:/moz1/mozilla/layout/
generic/nsBlockFrame.cpp, line 4300
Jerry, did/do you have Adblock and Flashblock installed?
I crashes also very often on that site (and sometimes also with Stack Signature
nsStyleContext::GetStyleData), when I had Adblock and Flashblock installed.
I filed bug 28165 about this.
Yes, I believe so.
Er, I meant bug 281657 in comment 6.
Depends on: 281657
does not block development
Severity: blocker → critical
Since reporter has said he uses these extensions, I'm duping to that bug.  Feel
free to reopen if I'm wrong.

*** This bug has been marked as a duplicate of 281657 ***
Status: NEW → RESOLVED
Closed: 19 years ago
No longer depends on: 281657
Resolution: --- → DUPLICATE
Whiteboard: DUPEME?
Crash Signature: [@ nsStyleContext::GetStyleData]
You need to log in before you can comment on or make changes to this bug.