Closed Bug 287127 Opened 20 years ago Closed 20 years ago

crash at www.bungie.net [@ nsHTMLScrollFrame::GetContentInsertionFrame]

Categories

(Firefox :: General, defect)

x86
Windows 2000
defect
Not set
critical

Tracking

()

RESOLVED FIXED

People

(Reporter: stevee, Assigned: roc)

References

()

Details

(Keywords: crash, regression, topcrash+)

Crash Data

Attachments

(1 file)

Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8b2) Gecko/20050321
Firefox/1.0+
www.bungie.net loads fine for me with the official 20050321 build, but with a
later beast build it hangs whilst loading, then firefox can crash out.
I suspect bug 282754 may have caused this regression. The website may not be the
best coded one in the world, but firefox shouldn't hang/crash because of it.
Yes, I agree about the regression. It would be easy to wallpaper but we need a
reduced test case to figure out the correct fix. What's happening is that we're
calling nsHTMLScrollFrame::GetContentInsertionFrame and it crashes because the
scrollbox's scrolled frame is null. That's really weird. And this is inside a
call to GetAbsoluteContainingBlock from the block-in-inline part of ConstructInline.
Attached patch fixSplinter Review
The real problem is that GetContentInsertionFrame gets called before we're done
hooking up the frame tree. We don't really need to call
GetContentInsertionFrame here.
Assignee: firefox → roc
Status: NEW → ASSIGNED
Attachment #178169 - Flags: superreview?(bzbarsky)
Attachment #178169 - Flags: review?(bzbarsky)
Severity: normal → critical
Comment on attachment 178169 [details] [diff] [review]
fix

r+sr=bzbarsky
Attachment #178169 - Flags: superreview?(bzbarsky)
Attachment #178169 - Flags: superreview+
Attachment #178169 - Flags: review?(bzbarsky)
Attachment #178169 - Flags: review+
*** Bug 287309 has been marked as a duplicate of this bug. ***
Adding topcrash info for tracking.  This is a regression and topcrasher on the
Trunk that started on 3/22. I'll keep an eye on Talkback data after teh patch
goes in to verify that this crash goes away.

Here is a link to all current crashes:
http://talkback-public.mozilla.org/talkback/fastfind.jsp?search=1&searchby=stacksig&match=contains&searchfor=nsHTMLScrollFrame%3A%3AGetContentInsertionFrame&vendor=All&product=All&platform=All&buildid=&sdate=&stime=&edate=&etime=&sortby=bbid
Summary: crash at www.bungie.net → crash at www.bungie.net [@ nsHTMLScrollFrame::GetContentInsertionFrame]
This was checked in yesterday, 2005-03-22 19:39 PST. Sorry I forgot to mark FIXED.
Status: ASSIGNED → RESOLVED
Closed: 20 years ago
Resolution: --- → FIXED
*** Bug 287443 has been marked as a duplicate of this bug. ***
Crash Signature: [@ nsHTMLScrollFrame::GetContentInsertionFrame]
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: