281605 - All Articles at ABC News Crash Firefox [@ nsStyleContext::GetStyleData]

Status: RESOLVED DUPLICATE of bug 281657

(Core :: Layout, defect)

Description

[Jerry Baker]

20050207 trunk

Follow the link and then click on a link to a story. Here are my talkback ID's:

TB3583267M
TB3583232Y
TB3583208Y
TB3583205M

Comment 1

[Jerry Baker]

It appears to be CSS related. Still working on testcase.

Comment 2

[Jerry Baker]

Local copy does not crash.

Comment 3

[timeless]

Incident ID: 3583267
Stack Signature	nsStyleContext::GetStyleData 6d4953b7
Product ID	FirefoxTrunk
Build ID	2005020706
Trigger Time	2005-02-08 22:26:57.0
Platform	Win32
Operating System	Windows NT 5.1 build 2600
Module	firefox.exe + (001de930)
URL visited	http://abcnews.go.com/US/wireStory?id=483138
User Comments	
Since Last Crash	162 sec
Total Uptime	67353 sec
Trigger Reason	Access violation
Source File, Line No.
c:/builds/tinderbox/Fx-Trunk/WINNT_5.0_Depend/mozilla/layout/style/nsStyleContext.cpp,
line 247
Stack Trace 	
nsStyleContext::GetStyleData 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.0_Depend/mozilla/layout/style/nsStyleContext.cpp,
line 247]
nsCSSFrameConstructor::ContentAppended 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.0_Depend/mozilla/layout/base/nsCSSFrameConstructor.cpp,
line 8816]
PresShell::ContentAppended 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.0_Depend/mozilla/layout/base/nsPresShell.cpp,
line 5084]
nsHTMLDocument::ContentAppended 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.0_Depend/mozilla/content/html/document/src/nsHTMLDocument.cpp,
line 1123]
nsGenericElement::InsertChildAt 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.0_Depend/mozilla/content/base/src/nsGenericElement.cpp,
line 2571]
nsGenericElement::InsertBefore 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.0_Depend/mozilla/content/base/src/nsGenericElement.cpp,
line 2900]
nsHTMLParagraphElement::AppendChild 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.0_Depend/mozilla/content/html/content/src/nsHTMLParagraphElement.cpp,
line 60]
XPCWrappedNative::CallMethod 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.0_Depend/mozilla/js/src/xpconnect/src/xpcwrappednative.cpp,
line 2034]
XPC_WN_CallMethod 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.0_Depend/mozilla/js/src/xpconnect/src/xpcwrappednativejsops.cpp,
line 1287]
js_Invoke 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.0_Depend/mozilla/js/src/jsinterp.c, line 1293]
js_Interpret 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.0_Depend/mozilla/js/src/jsinterp.c, line 3565]
js_Invoke 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.0_Depend/mozilla/js/src/jsinterp.c, line 1313]
js_Interpret 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.0_Depend/mozilla/js/src/jsinterp.c, line 3565]
js_Execute 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.0_Depend/mozilla/js/src/jsinterp.c, line 1524]
JS_EvaluateUCScriptForPrincipals 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.0_Depend/mozilla/js/src/jsapi.c, line 3739]
nsJSContext::EvaluateString 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.0_Depend/mozilla/dom/src/base/nsJSEnvironment.cpp,
line 1029]
nsScriptLoader::EvaluateScript 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.0_Depend/mozilla/content/base/src/nsScriptLoader.cpp,
line 715]
nsScriptLoader::ProcessRequest 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.0_Depend/mozilla/content/base/src/nsScriptLoader.cpp,
line 621]
nsScriptLoader::ProcessScriptElement 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.0_Depend/mozilla/content/base/src/nsScriptLoader.cpp,
line 567]
nsHTMLScriptElement::MaybeProcessScript 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.0_Depend/mozilla/content/html/content/src/nsHTMLScriptElement.cpp,
line 656]
nsHTMLScriptElement::SetDocument 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.0_Depend/mozilla/content/html/content/src/nsHTMLScriptElement.cpp,
line 446]
HTMLContentSink::ProcessSCRIPTTag 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.0_Depend/mozilla/content/html/document/src/nsHTMLContentSink.cpp,
line 4235]
HTMLContentSink::AddLeaf 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.0_Depend/mozilla/content/html/document/src/nsHTMLContentSink.cpp,
line 3116]
CNavDTD::AddLeaf 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.0_Depend/mozilla/parser/htmlparser/src/CNavDTD.cpp,
line 3570]
CNavDTD::HandleDefaultStartToken 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.0_Depend/mozilla/parser/htmlparser/src/CNavDTD.cpp,
line 1284]
CNavDTD::HandleStartToken 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.0_Depend/mozilla/parser/htmlparser/src/CNavDTD.cpp,
line 1643]
CNavDTD::HandleToken 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.0_Depend/mozilla/parser/htmlparser/src/CNavDTD.cpp,
line 904]
CNavDTD::BuildModel 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.0_Depend/mozilla/parser/htmlparser/src/CNavDTD.cpp,
line 461]
nsParser::BuildModel 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.0_Depend/mozilla/parser/htmlparser/src/nsParser.cpp,
line 2047]

Comment 4

[David Baron :dbaron: (⌚️UTC-5, no longer working on Mozilla)]

Probably a bad style context pointer from something else, not a bug in the style
system code.

Comment 5

[Mats Palmgren (inactive)]

WFM, current nightly builds on Windows XP and Linux.
WFM, current Firefox debug (static) build on Windows XP.
WFM, current Mozilla debug build on Linux.

I see a lot of this assertion when browsing this site though:
###!!! ASSERTION: bad state: 'aState.mContentArea.width >=
aState.mAvailSpaceRect.XMost()', file c:/moz1/mozilla/layout/
generic/nsBlockFrame.cpp, line 4300

Comment 6

[Martijn Wargers (dead)]

Jerry, did/do you have Adblock and Flashblock installed?
I crashes also very often on that site (and sometimes also with Stack Signature
nsStyleContext::GetStyleData), when I had Adblock and Flashblock installed.
I filed bug 28165 about this.

Comment 7

[Jerry Baker]

Yes, I believe so.

Comment 8

[Martijn Wargers (dead)]

Er, I meant bug 281657 in comment 6.

Comment 9

[Andrew Schultz]

does not block development

Comment 10

[Robin Monks]

Since reporter has said he uses these extensions, I'm duping to that bug.  Feel
free to reopen if I'm wrong.

*** This bug has been marked as a duplicate of 281657 ***