303013 - trunk crash during nsPresShell::Thaw

Status: RESOLVED INCOMPLETE

(Core :: DOM: Core & HTML, defect)

Description

[Robert O'Callahan (:roc) (email my personal email if necessary)]

Looks like bfcache...

#0  0x0000002a9d215ad6 in nsPIDOMWindow::IsInnerWindow (this=0x0)
    at nsPIDOMWindow.h:213
#1  0x0000002a9d6183e9 in nsFocusController::GetWindowFromDocument (
    aDocument=0x1d5c6d0) at nsFocusController.cpp:397
#2  0x0000002a9d618620 in nsFocusController::GetControllerForCommand (
    this=0x2eca1b0, aCommand=0x2a9eb8c5f0 "cmd_undo", _retval=0x7fbfff5c78)
    at nsFocusController.cpp:428
#3  0x0000002a9d5da246 in nsXULCommandDispatcher::GetControllerForCommand (
    this=0x2408b70, aCommand=0x2a9eb8c5f0 "cmd_undo", _retval=0x7fbfff5c78)
    at nsXULCommandDispatcher.cpp:434
#4  0x0000002a95ac6d5a in XPTC_InvokeByIndex (that=0x2408b70, methodIndex=10,
    paramCount=2, params=0x7fbfff5c60) at xptcinvoke_x86_64_linux.cpp:209
#5  0x0000002a98cc3d20 in XPCWrappedNative::CallMethod (ccx=@0x7fbfff5da0,
    mode=CALL_METHOD) at xpcwrappednative.cpp:2118
#6  0x0000002a98cce1ee in XPC_WN_CallMethod (cx=0x2242160, obj=0xaadae0,
    argc=1, argv=0x2d1ee98, vp=0x7fbfff6070) at xpcwrappednativejsops.cpp:1401
#7  0x0000002a956d2355 in js_Invoke (cx=0x2242160, argc=1, flags=0)
    at jsinterp.c:1173
#8  0x0000002a956e3fb9 in js_Interpret (cx=0x2242160, pc=0xa7a849 ":",
    result=0x7fbfff6df8) at jsinterp.c:3463
#9  0x0000002a956d23d5 in js_Invoke (cx=0x2242160, argc=1, flags=2)
    at jsinterp.c:1193
#10 0x0000002a956d2818 in js_InternalInvoke (cx=0x2242160, obj=0x1eaffb0,
    fval=27615600, flags=0, argc=1, argv=0x7fbfff72a0, rval=0x7fbfff7138)
    at jsinterp.c:1270
#11 0x0000002a95696dd5 in JS_CallFunctionValue (cx=0x2242160, obj=0x1eaffb0,
    fval=27615600, argc=1, argv=0x7fbfff72a0, rval=0x7fbfff7138)
    at jsapi.c:3919
#12 0x0000002a9d61381a in nsJSContext::CallEventHandler (this=0x2814f40,
    aTarget=0x1eaffb0, aHandler=0x1a56170, argc=1, argv=0x7fbfff72a0,
    rval=0x7fbfff7138) at nsJSEnvironment.cpp:1399
#13 0x0000002a9d669ded in nsJSEventListener::HandleEvent (this=0x31a7050,
    aEvent=0x3137790) at nsJSEventListener.cpp:175
#14 0x0000002a9d4d737f in nsEventListenerManager::HandleEventSubType (
    this=0x31b6750, aListenerStruct=0x2902040, aDOMEvent=0x3137790,
    aCurrentTarget=0x2f13590, aSubType=32, aPhaseFlags=7)
    at nsEventListenerManager.cpp:1590
#15 0x0000002a9d4d77de in nsEventListenerManager::HandleEvent (this=0x31b6750,
    aPresContext=0x21cb900, aEvent=0x7fbfff7810, aDOMEvent=0x7fbfff7768,
    aCurrentTarget=0x2f13590, aFlags=7, aEventStatus=0x7fbfff77ec)
    at nsEventListenerManager.cpp:1689
#16 0x0000002a9d5ccc01 in nsXULElement::HandleDOMEvent (this=0x1c8b030,
    aPresContext=0x21cb900, aEvent=0x7fbfff7810, aDOMEvent=0x7fbfff7768,
    aFlags=7, aEventStatus=0x7fbfff77ec) at nsXULElement.cpp:2200
---Type <return> to continue, or q <return> to quit---
#17 0x0000002a9d5d9fdd in nsXULCommandDispatcher::UpdateCommands (
    this=0x2408b70, aEventName=@0x7fbfff7ad0) at nsXULCommandDispatcher.cpp:385
#18 0x0000002a9d626af1 in nsGlobalWindow::UpdateCommands (this=0x25b42a0,
    anAction=@0x7fbfff7ad0) at nsGlobalWindow.cpp:4231
#19 0x0000002a9d617725 in nsFocusController::UpdateCommands (this=0x2eca1b0,
    aEventName=@0x7fbfff7ad0) at nsFocusController.cpp:196
#20 0x0000002a9d6189bb in nsFocusController::SetSuppressFocus (this=0x2eca1b0,
    aSuppressFocus=0,
    aReason=0x2a9d7da468 "PresShell suppression on Web page loads")
    at nsFocusController.cpp:505
#21 0x0000002a9d2304fc in PresShell::UnsuppressAndInvalidate (this=0x2d5ac60)
    at nsPresShell.cpp:5060
#22 0x0000002a9d2305ea in PresShell::UnsuppressPainting (this=0x2d5ac60)
    at nsPresShell.cpp:5084
#23 0x0000002a9d234650 in PresShell::Thaw (this=0x2d5ac60)
    at nsPresShell.cpp:6649
#24 0x0000002a9d2344fc in ThawSubDocument (aDocument=0x270dea0, aData=0x0)
    at nsPresShell.cpp:6631
#25 0x0000002a9d47a6ed in SubDocHashEnum (table=0x1a47200, hdr=0x3f806f0,
    number=0, arg=0x7fbfff7d30) at nsDocument.cpp:4797
#26 0x0000002a95a32f03 in PL_DHashTableEnumerate (table=0x1a47200,
    etor=0x2a9d47a69e <SubDocHashEnum>, arg=0x7fbfff7d30) at pldhash.c:619
#27 0x0000002a9d47a759 in nsDocument::EnumerateSubDocuments (this=0x21fe480,
    aCallback=0x2a9d2344b0 <ThawSubDocument>, aData=0x0) at nsDocument.cpp:4807
#28 0x0000002a9d23463a in PresShell::Thaw (this=0x3053db0)
    at nsPresShell.cpp:6647
#29 0x0000002a99d2f922 in nsDocShell::RestorePresentation (this=0x3565970,
    aSHEntry=0x31cd2f0, aSavePresentation=1, aRestored=0x7fbfff80bc)
    at nsDocShell.cpp:5371
#30 0x0000002a99d3316a in nsDocShell::InternalLoad (this=0x3565970,
    aURI=0x29b74d0, aReferrer=0x0, aOwner=0x0, aFlags=0, aWindowTarget=0x0,
    aTypeHint=0x117b058 "", aPostData=0x0, aHeadersData=0x0, aLoadType=4,
    aSHEntry=0x31cd2f0, aFirstParty=1, aDocShell=0x0, aRequest=0x0)
    at nsDocShell.cpp:6363
#31 0x0000002a99d36fd5 in nsDocShell::LoadHistoryEntry (this=0x3565970,
    aEntry=0x31cd2f0, aLoadType=4) at nsDocShell.cpp:7426
#32 0x0000002a99d209eb in nsDocShell::LoadURI (this=0x3565970, aURI=0x29b74d0,
    aLoadInfo=0x2bd4c60, aLoadFlags=0, aFirstParty=0) at nsDocShell.cpp:735
#33 0x0000002a99d88156 in nsSHistory::InitiateLoad (this=0x2cf1340,
    aFrameEntry=0x31cd2f0, aFrameDS=0x3565a70, aLoadType=2)
    at nsSHistory.cpp:918
#34 0x0000002a99d87ab9 in nsSHistory::LoadEntry (this=0x2cf1340, aIndex=1,
    aLoadType=2, aHistCmd=0) at nsSHistory.cpp:834
#35 0x0000002a99d86cf4 in nsSHistory::GoBack (this=0x2cf1340)
---Type <return> to continue, or q <return> to quit---
    at nsSHistory.cpp:547
#36 0x0000002a99d26f97 in nsDocShell::GoBack (this=0x3565970)
    at nsDocShell.cpp:2737
#37 0x0000002a95ac6d5a in XPTC_InvokeByIndex (that=0x3565a90, methodIndex=5,
    paramCount=0, params=0x7fbfff8d50) at xptcinvoke_x86_64_linux.cpp:209
#38 0x0000002a98cc3d20 in XPCWrappedNative::CallMethod (ccx=@0x7fbfff8e90,
    mode=CALL_METHOD) at xpcwrappednative.cpp:2118
#39 0x0000002a98cce1ee in XPC_WN_CallMethod (cx=0x2242160, obj=0x1b4d0d0,
    argc=0, argv=0x2d1ec30, vp=0x7fbfff9160) at xpcwrappednativejsops.cpp:1401
#40 0x0000002a956d2355 in js_Invoke (cx=0x2242160, argc=0, flags=0)
    at jsinterp.c:1173
#41 0x0000002a956e3fb9 in js_Interpret (cx=0x2242160, pc=0x86ef60 ":",
    result=0x7fbfff9ee8) at jsinterp.c:3463
#42 0x0000002a956d23d5 in js_Invoke (cx=0x2242160, argc=1, flags=0)
    at jsinterp.c:1193
#43 0x0000002a956e3fb9 in js_Interpret (cx=0x2242160, pc=0x2d3d05f ":",
    result=0x7fbfffacd8) at jsinterp.c:3463
#44 0x0000002a956d23d5 in js_Invoke (cx=0x2242160, argc=1, flags=2)
    at jsinterp.c:1193
#45 0x0000002a956d2818 in js_InternalInvoke (cx=0x2242160, obj=0x1eb0c70,
    fval=27618384, flags=0, argc=1, argv=0x7fbfffb180, rval=0x7fbfffb018)
    at jsinterp.c:1270
#46 0x0000002a95696dd5 in JS_CallFunctionValue (cx=0x2242160, obj=0x1eb0c70,
    fval=27618384, argc=1, argv=0x7fbfffb180, rval=0x7fbfffb018)
    at jsapi.c:3919
#47 0x0000002a9d61381a in nsJSContext::CallEventHandler (this=0x2814f40,
    aTarget=0x1eb0c70, aHandler=0x1a56c50, argc=1, argv=0x7fbfffb180,
    rval=0x7fbfffb018) at nsJSEnvironment.cpp:1399
#48 0x0000002a9d669ded in nsJSEventListener::HandleEvent (this=0x249b090,
    aEvent=0x1c0ef50) at nsJSEventListener.cpp:175
#49 0x0000002a9d4d737f in nsEventListenerManager::HandleEventSubType (
    this=0x2541b70, aListenerStruct=0x362e3f0, aDOMEvent=0x1c0ef50,
    aCurrentTarget=0x4216170, aSubType=8, aPhaseFlags=2)
    at nsEventListenerManager.cpp:1590
#50 0x0000002a9d4d77de in nsEventListenerManager::HandleEvent (this=0x2541b70,
    aPresContext=0x21cb900, aEvent=0x7fbfffb990, aDOMEvent=0x7fbfffb8b8,
    aCurrentTarget=0x4216170, aFlags=2, aEventStatus=0x7fbfffb9fc)
    at nsEventListenerManager.cpp:1689
#51 0x0000002a9d5ccc01 in nsXULElement::HandleDOMEvent (this=0x39c5520,
    aPresContext=0x21cb900, aEvent=0x7fbfffb990, aDOMEvent=0x7fbfffb8b8,
    aFlags=2, aEventStatus=0x7fbfffb9fc) at nsXULElement.cpp:2200
#52 0x0000002a9d5ccd33 in nsXULElement::HandleDOMEvent (this=0x2643390,
    aPresContext=0x21cb900, aEvent=0x7fbfffb990, aDOMEvent=0x7fbfffb8b8,
    aFlags=7, aEventStatus=0x7fbfffb9fc) at nsXULElement.cpp:2219
---Type <return> to continue, or q <return> to quit---
#53 0x0000002a9d233d5e in PresShell::HandleDOMEventWithTarget (this=0x23729a0,
    aTargetContent=0x2643390, aEvent=0x7fbfffb990, aStatus=0x7fbfffb9fc)
    at nsPresShell.cpp:6457
#54 0x0000002a9d405fea in nsButtonBoxFrame::DoMouseClick (this=0x2bb1370,
    aEvent=0x7fbfffbdd0, aTrustEvent=0) at nsButtonBoxFrame.cpp:179
#55 0x0000002a9d3f709e in nsButtonBoxFrame::MouseClicked (this=0x2bb1370,
    aPresContext=0x21cb900, aEvent=0x7fbfffbdd0) at nsButtonBoxFrame.h:61
#56 0x0000002a9d405e6d in nsButtonBoxFrame::HandleEvent (this=0x2bb1370,
    aPresContext=0x21cb900, aEvent=0x7fbfffbdd0, aEventStatus=0x7fbfffc678)
    at nsButtonBoxFrame.cpp:149
#57 0x0000002a9d233bd3 in PresShell::HandleEventInternal (this=0x23729a0,
    aEvent=0x7fbfffbdd0, aView=0x0, aFlags=1, aStatus=0x7fbfffc678)
    at nsPresShell.cpp:6423
#58 0x0000002a9d2333f7 in PresShell::HandleEventWithTarget (this=0x23729a0,
    aEvent=0x7fbfffbdd0, aFrame=0x2bb1370, aContent=0x2643390, aFlags=1,
    aStatus=0x7fbfffc678) at nsPresShell.cpp:6260
#59 0x0000002a9d4e20e6 in nsEventStateManager::CheckForAndDispatchClick (
    this=0x407d570, aPresContext=0x21cb900, aEvent=0x7fbfffc850,
    aStatus=0x7fbfffc678) at nsEventStateManager.cpp:3042
#60 0x0000002a9d4dfd55 in nsEventStateManager::PostHandleEvent (
    this=0x407d570, aPresContext=0x21cb900, aEvent=0x7fbfffc850,
    aTargetFrame=0x2bb1370, aStatus=0x7fbfffc678, aView=0x28d7250)
    at nsEventStateManager.cpp:2023
#61 0x0000002a9d233c88 in PresShell::HandleEventInternal (this=0x23729a0,
    aEvent=0x7fbfffc850, aView=0x28d7250, aFlags=1, aStatus=0x7fbfffc678)
    at nsPresShell.cpp:6433
#62 0x0000002a9d2330c2 in PresShell::HandleEvent (this=0x23729a0,
    aView=0x28d7250, aEvent=0x7fbfffc850, aEventStatus=0x7fbfffc678,
    aForceHandle=1, aHandled=@0x7fbfffc58c) at nsPresShell.cpp:6198
#63 0x0000002a9d6065d0 in nsViewManager::HandleEvent (this=0x262af60,
    aView=0x28d7250, aEvent=0x7fbfffc850, aCaptured=1)
    at nsViewManager.cpp:2547
#64 0x0000002a9d605943 in nsViewManager::DispatchEvent (this=0x262af60,
    aEvent=0x7fbfffc850, aStatus=0x7fbfffc7f4) at nsViewManager.cpp:2236
#65 0x0000002a9d5fa487 in HandleEvent (aEvent=0x7fbfffc850) at nsView.cpp:171
#66 0x0000002a9b5648c1 in nsCommonWidget::DispatchEvent (this=0x25b83b0,
    aEvent=0x7fbfffc850, aStatus=@0x7fbfffc84c) at nsCommonWidget.cpp:219
#67 0x0000002a9b55626c in nsWindow::OnButtonReleaseEvent (this=0x25b83b0,
    aWidget=0x33404d0, aEvent=0xc29e30) at nsWindow.cpp:1565

Comment 1

[Robert O'Callahan (:roc) (email my personal email if necessary)]

Unfortunately I don't think this is reproducible.

Comment 2

[Brian Ryner (not reading)]

Reassigning my bugs, since I'm not actually working on them.