Closed Bug 305143 Opened 19 years ago Closed 16 years ago

[@ nsCounterManager::AddCounterResetsAndIncrements] aFrame->GetStyleContent() returned null

Categories

(Core :: CSS Parsing and Computation, defect, P5)

x86
Windows XP
defect

Tracking

()

RESOLVED WORKSFORME

People

(Reporter: timeless, Unassigned)

References

Details

(Keywords: crash)

Crash Data

i was closing venkman (it was unhappy)

+	((*((*((*aFrame).mStyleContext)).mRuleNode)).mStyleData).mResetData
	0x00000000 {mBackgroundData=??? mPositionData=??? 
mTextResetData=??? ...}	nsResetStyleData *
+	((*((*((*aFrame).mStyleContext)).mRuleNode)).mStyleData).mInheritedData
	0x00000000 {mFontData=??? mColorData=??? mListData=??? ...}
	nsInheritedStyleData *

EAX = 00000000 EBX = 00000000 ECX = 00000000 EDX = 0165C08C ESI = 00000000 EDI 
= 00000000 EIP = 0146F657 ESP = 0012DC48 EBP = 0012DC5C EFL = 00200246 

PRBool
nsCounterManager::AddCounterResetsAndIncrements(nsIFrame *aFrame)
{
0146F63B  push        ebp  
0146F63C  mov         ebp,esp 
0146F63E  sub         esp,0Ch 
    const nsStyleContent *styleContent = aFrame->GetStyleContent();
0146F641  mov         eax,dword ptr [ebp+8] 
0146F644  push        esi  
0146F645  push        edi  
0146F646  mov         dword ptr [ebp-0Ch],ecx 
0146F649  mov         ecx,dword ptr [eax+18h] 
0146F64C  push        9    
0146F64E  call        nsStyleContext::GetStyleData (14DF50Bh) 
0146F653  mov         esi,eax /* styleContent = esi = eax = return value from 
call        nsStyleContext::GetStyleData */
    if (!styleContent->CounterIncrementCount() &&
        !styleContent->CounterResetCount())
0146F655  xor         edi,edi 
0146F657  cmp         dword ptr [esi+10h],edi /* crash here, styleContent = esi 
= 0x0 */
0146F65A  jne         nsCounterManager::AddCounterResetsAndIncrements+2Ah 
(146F665h) 
0146F65C  cmp         dword ptr [esi+18h],edi 
0146F65F  jne         nsCounterManager::AddCounterResetsAndIncrements+2Ah 
(146F665h) 
        return PR_FALSE;

>	gklayout.dll!nsCounterManager::AddCounterResetsAndIncrements(nsIFrame * 
aFrame=0x038ba7a0)  Line 196 + 0x2	C++
 	gklayout.dll!nsCSSFrameConstructor::InitAndRestoreFrame(const 
nsFrameConstructorState & aState={...}, nsIContent * aContent=0x042fce78, 
nsIFrame * aParentFrame=0x038ba610, nsStyleContext * aStyleContext=0x03fc6fb0, 
nsIFrame * aPrevInFlow=0x00000000, nsIFrame * aNewFrame=0x038ba7a0, int 
aAllowCounters=1)  Line 6741 + 0x18	C++
 	gklayout.dll!nsCSSFrameConstructor::ConstructXULFrame
(nsFrameConstructorState & aState={...}, nsIContent * aContent=0x00000001, 
nsIFrame * aParentFrame=0x00a63f1c, nsIAtom * aTag=0x00000001, int 
aNameSpaceID=0, nsStyleContext * aStyleContext=0x00000000, nsFrameItems & 
aFrameItems={...}, int aXBLBaseTag=0, int aHasPseudoParent=0, int & 
aHaltProcessing=)  Line 6117	C++
 	gklayout.dll!nsCSSFrameConstructor::ConstructFrameInternal
(nsFrameConstructorState & aState={...}, nsIContent * aContent=0x038ba610, 
nsIFrame * aParentFrame=0x00000000, nsIAtom * aTag=0x002ae960, int 
aNameSpaceID=9, nsStyleContext * aStyleContext=0x00000000, nsFrameItems & 
aFrameItems={...}, int aXBLBaseTag=0)  Line 7613 + 0x21	C++
 	gklayout.dll!nsCSSFrameConstructor::ConstructFrame
(nsFrameConstructorState & aState={...}, nsIContent * aContent=0x00000000, 
nsIFrame * aParentFrame=0x03fc6fb0, nsFrameItems & aFrameItems={...})  Line 7498
	C++
 	gklayout.dll!nsCSSFrameConstructor::ProcessChildren
(nsFrameConstructorState & aState={...}, nsIContent * aContent=0x02ab5030, 
nsIFrame * aFrame=0x042fce78, int aCanHaveGeneratedContent=0, nsFrameItems & 
aFrameItems={...}, int aParentIsBlock=0, nsTableCreator * 
aTableCreator=0x042fce78)  Line 11816 + 0x1f	C++
 	gklayout.dll!nsCSSFrameConstructor::ConstructXULFrame
(nsFrameConstructorState & aState={...}, nsIContent * aContent=0x00000001, 
nsIFrame * aParentFrame=0x00a63f1c, nsIAtom * aTag=0x00000001, int 
aNameSpaceID=0, nsStyleContext * aStyleContext=0x00000000, nsFrameItems & 
aFrameItems={...}, int aXBLBaseTag=0, int aHasPseudoParent=0, int & 
aHaltProcessing=)  Line 6196 + 0x17	C++
 	gklayout.dll!nsCSSFrameConstructor::ConstructFrameInternal
(nsFrameConstructorState & aState={...}, nsIContent * aContent=0x038ba4ec, 
nsIFrame * aParentFrame=0x00000000, nsIAtom * aTag=0x00ac1028, int 
aNameSpaceID=9, nsStyleContext * aStyleContext=0x00000000, nsFrameItems & 
aFrameItems={...}, int aXBLBaseTag=0)  Line 7613 + 0x21	C++
 	gklayout.dll!nsCSSFrameConstructor::ConstructFrame
(nsFrameConstructorState & aState={...}, nsIContent * aContent=0x00000000, 
nsIFrame * aParentFrame=0x03fef970, nsFrameItems & aFrameItems={...})  Line 7498
	C++
 	gklayout.dll!nsCSSFrameConstructor::ProcessChildren
(nsFrameConstructorState & aState={...}, nsIContent * aContent=0x042fc980, 
nsIFrame * aFrame=0x02ab5030, int aCanHaveGeneratedContent=0, nsFrameItems & 
aFrameItems={...}, int aParentIsBlock=0, nsTableCreator * 
aTableCreator=0x02ab5030)  Line 11816 + 0x1f	C++
 	gklayout.dll!nsCSSFrameConstructor::ConstructXULFrame
(nsFrameConstructorState & aState={...}, nsIContent * aContent=0x00000001, 
nsIFrame * aParentFrame=0x00a63f1c, nsIAtom * aTag=0x00000001, int 
aNameSpaceID=0, nsStyleContext * aStyleContext=0x00000000, nsFrameItems & 
aFrameItems={...}, int aXBLBaseTag=0, int aHasPseudoParent=0, int & 
aHaltProcessing=)  Line 6196 + 0x17	C++
 	gklayout.dll!nsCSSFrameConstructor::ConstructFrameInternal
(nsFrameConstructorState & aState={...}, nsIContent * aContent=0x038ba3c8, 
nsIFrame * aParentFrame=0x00000000, nsIAtom * aTag=0x00ac10e8, int 
aNameSpaceID=9, nsStyleContext * aStyleContext=0x00000000, nsFrameItems & 
aFrameItems={...}, int aXBLBaseTag=0)  Line 7613 + 0x21	C++
 	gklayout.dll!nsCSSFrameConstructor::ConstructFrame
(nsFrameConstructorState & aState={...}, nsIContent * aContent=0x00000000, 
nsIFrame * aParentFrame=0x04310b74, nsFrameItems & aFrameItems={...})  Line 7498
	C++
 	gklayout.dll!nsCSSFrameConstructor::ProcessChildren
(nsFrameConstructorState & aState={...}, nsIContent * aContent=0x038bb1c0, 
nsIFrame * aFrame=0x042fc980, int aCanHaveGeneratedContent=0, nsFrameItems & 
aFrameItems={...}, int aParentIsBlock=0, nsTableCreator * 
aTableCreator=0x042fc980)  Line 11816 + 0x1f	C++
 	gklayout.dll!nsCSSFrameConstructor::ConstructXULFrame
(nsFrameConstructorState & aState={...}, nsIContent * aContent=0x00000001, 
nsIFrame * aParentFrame=0x00a63f1c, nsIAtom * aTag=0x00000001, int 
aNameSpaceID=0, nsStyleContext * aStyleContext=0x00000000, nsFrameItems & 
aFrameItems={...}, int aXBLBaseTag=0, int aHasPseudoParent=0, int & 
aHaltProcessing=)  Line 6196 + 0x17	C++
 	gklayout.dll!nsCSSFrameConstructor::ConstructFrameInternal
(nsFrameConstructorState & aState={...}, nsIContent * aContent=0x038ba294, 
nsIFrame * aParentFrame=0x00000000, nsIAtom * aTag=0x00ac1100, int 
aNameSpaceID=9, nsStyleContext * aStyleContext=0x00000000, nsFrameItems & 
aFrameItems={...}, int aXBLBaseTag=0)  Line 7613 + 0x21	C++
 	gklayout.dll!nsCSSFrameConstructor::ConstructFrame
(nsFrameConstructorState & aState={...}, nsIContent * aContent=0x00000000, 
nsIFrame * aParentFrame=0x04310640, nsFrameItems & aFrameItems={...})  Line 7498
	C++
 	gklayout.dll!nsCSSFrameConstructor::ProcessChildren
(nsFrameConstructorState & aState={...}, nsIContent * aContent=0x02b5afe8, 
nsIFrame * aFrame=0x038bb1c0, int aCanHaveGeneratedContent=0, nsFrameItems & 
aFrameItems={...}, int aParentIsBlock=0, nsTableCreator * 
aTableCreator=0x038bb1c0)  Line 11816 + 0x1f	C++
 	gklayout.dll!nsCSSFrameConstructor::ConstructXULFrame
(nsFrameConstructorState & aState={...}, nsIContent * aContent=0x00000001, 
nsIFrame * aParentFrame=0x00a63f1c, nsIAtom * aTag=0x00000001, int 
aNameSpaceID=0, nsStyleContext * aStyleContext=0x00000000, nsFrameItems & 
aFrameItems={...}, int aXBLBaseTag=0, int aHasPseudoParent=0, int & 
aHaltProcessing=)  Line 6196 + 0x17	C++
 	gklayout.dll!nsCSSFrameConstructor::ConstructFrameInternal
(nsFrameConstructorState & aState={...}, nsIContent * aContent=0x038ba1f4, 
nsIFrame * aParentFrame=0x00000000, nsIAtom * aTag=0x018dfcf0, int 
aNameSpaceID=9, nsStyleContext * aStyleContext=0x00000000, nsFrameItems & 
aFrameItems={...}, int aXBLBaseTag=0)  Line 7613 + 0x21	C++
 	gklayout.dll!nsCSSFrameConstructor::ConstructFrame
(nsFrameConstructorState & aState={...}, nsIContent * aContent=0x00000000, 
nsIFrame * aParentFrame=0x04310190, nsFrameItems & aFrameItems={...})  Line 7498
	C++
 	gklayout.dll!nsCSSFrameConstructor::ProcessChildren
(nsFrameConstructorState & aState={...}, nsIContent * aContent=0x02d73248, 
nsIFrame * aFrame=0x02b5afe8, int aCanHaveGeneratedContent=0, nsFrameItems & 
aFrameItems={...}, int aParentIsBlock=0, nsTableCreator * 
aTableCreator=0x02b5afe8)  Line 11816 + 0x1f	C++
 	gklayout.dll!nsCSSFrameConstructor::ConstructXULFrame
(nsFrameConstructorState & aState={...}, nsIContent * aContent=0x00000001, 
nsIFrame * aParentFrame=0x00a63f1c, nsIAtom * aTag=0x00000001, int 
aNameSpaceID=0, nsStyleContext * aStyleContext=0x00000000, nsFrameItems & 
aFrameItems={...}, int aXBLBaseTag=0, int aHasPseudoParent=0, int & 
aHaltProcessing=)  Line 6196 + 0x17	C++
 	gklayout.dll!nsCSSFrameConstructor::ConstructFrameInternal
(nsFrameConstructorState & aState={...}, nsIContent * aContent=0x030d84bc, 
nsIFrame * aParentFrame=0x00000000, nsIAtom * aTag=0x00ac1030, int 
aNameSpaceID=9, nsStyleContext * aStyleContext=0x00000000, nsFrameItems & 
aFrameItems={...}, int aXBLBaseTag=0)  Line 7613 + 0x21	C++
 	gklayout.dll!nsCSSFrameConstructor::ConstructFrame
(nsFrameConstructorState & aState={...}, nsIContent * aContent=0x00000000, 
nsIFrame * aParentFrame=0x04310340, nsFrameItems & aFrameItems={...})  Line 7498
	C++
 	gklayout.dll!nsCSSFrameConstructor::ContentInserted(nsIContent * 
aContainer=0x00000000, nsIFrame * aContainerFrame=0x00000000, nsIContent * 
aChild=0x00000000, int aIndexInContainer=0, nsILayoutHistoryState * 
aFrameState=0x00000000, int aInReinsertContent=0)  Line 9238	C++
 	gklayout.dll!nsCSSFrameConstructor::RecreateFramesForContent(nsIContent 
* aContent=0x00000000)  Line 11697 + 0x16	C++
 	gklayout.dll!nsCSSFrameConstructor::MaybeRecreateFramesForContent
(nsIContent * aContent=0x02d73248)  Line 11613 + 0xa	C++
 	gklayout.dll!nsCSSFrameConstructor::RestyleElement(nsIContent * 
aContent=0x00000000, nsIFrame * aPrimaryFrame=0x00000000, nsChangeHint 
aMinHint=0)  Line 10269 + 0xa	C++
 	gklayout.dll!nsCSSFrameConstructor::ProcessOneRestyle(nsIContent * 
aContent=0x00000000, nsReStyleHint aRestyleHint=eReStyle_Self, nsChangeHint 
aChangeHint=0)  Line 13652	C++
 	gklayout.dll!nsCSSFrameConstructor::AttributeChanged(nsIContent * 
aContent=0x02d73248, int aNameSpaceID=45898392, nsIAtom * 
aAttribute=0x00000001, int aModType=11276336)  Line 10461	C++
 	gklayout.dll!PresShell::AttributeChanged(nsIDocument * 
aDocument=0x02e9d360, nsIContent * aContent=0x02d73248, int aNameSpaceID=0, 
nsIAtom * aAttribute=0x00ac1060, int aModType=2)  Line 5443	C++
 	gklayout.dll!nsXULDocument::AttributeChanged(nsIContent * 
aElement=0x00000000, int aNameSpaceID=0, nsIAtom * aAttribute=0x00000000, int 
aModType=0)  Line 1137 + 0x14	C++
 	gklayout.dll!nsXULElement::SetAttrAndNotify(int aNamespaceID=10895132, 
nsIAtom * aAttribute=0x00000001, nsIAtom * aPrefix=0x00000000, const 
nsAString_internal & aOldValue={...}, nsAttrValue & aParsedValue={...}, int 
aModification=0, int aFireMutation=0, int aNotify=0)  Line 1567	C++
 	gklayout.dll!nsXULElement::SetAttr(int aNamespaceID=0, nsIAtom * 
aName=0x00000000, nsIAtom * aPrefix=0x00000000, const nsAString_internal & 
aValue={...}, int aNotify=0)  Line 1488 + 0x1f	C++
 	gklayout.dll!nsMenuFrame::MarkAsGenerated()  Line 685 + 0x33	C++
 	gklayout.dll!nsMenuBarFrame::SetCurrentMenuItem(nsIMenuFrame * 
aMenuItem=0x030d8524)  Line 565	C++
 	gklayout.dll!nsMenuFrame::HandleEvent(nsPresContext * 
aPresContext=0x02d71410, nsGUIEvent * aEvent=0x00000001, nsEventStatus * 
aEventStatus=0x0012f904)  Line 566	C++
 	gklayout.dll!PresShell::HandleEventInternal(nsEvent * 
aEvent=0x02e9d790, nsIView * aView=0x02e9d790, unsigned int aFlags=48879504, 
nsEventStatus * aStatus=0x0012f904)  Line 6420	C++
 	gklayout.dll!PresShell::HandleEvent(nsIView * aView=0x02e9d790, 
nsGUIEvent * aEvent=0x0012f9e0, nsEventStatus * aEventStatus=0x0012f904, int 
aForceHandle=51217596, int & aHandled=23296720)  Line 6193 + 0x13	C++
 	gklayout.dll!nsViewManager::HandleEvent(nsView * aView=0x00000000, 
nsGUIEvent * aEvent=0x00000000, int aCaptured=0)  Line 2547	C++
 	gklayout.dll!nsViewManager::DispatchEvent(nsGUIEvent * 
aEvent=0x3d888889, nsEventStatus * aStatus=0x0012f98c)  Line 2234 + 0x15
	C++
 	gklayout.dll!HandleEvent(nsGUIEvent * aEvent=0x0012f9e0)  Line 173
	C++
 	gkwidget.dll!nsWindow::DispatchEvent(nsGUIEvent * event=0x0012f9e0, 
nsEventStatus & aStatus=nsEventStatus_eIgnore)  Line 1172 + 0x3	C++
 	gkwidget.dll!nsWindow::DispatchWindowEvent(nsGUIEvent * 
event=0x00000000)  Line 1193	C++
 	gkwidget.dll!nsWindow::DispatchMouseEvent(unsigned int aEventType=0, 
unsigned int wParam=0, nsPoint * aPoint=0x00000000)  Line 5819	C++
 	gkwidget.dll!ChildWindow::DispatchMouseEvent(unsigned int 
aEventType=300, unsigned int wParam=0, nsPoint * aPoint=0x00000000)  Line 6065 
+ 0x13	C++
 	gkwidget.dll!nsWindow::ProcessMessage(unsigned int msg=512, unsigned 
int wParam=0, long lParam=459003, long * aRetValue=0x0012fd14)  Line 4420
	C++
 	gkwidget.dll!nsWindow::WindowProc(HWND__ * hWnd=0x013f03f8, unsigned 
int msg=512, unsigned int wParam=0, long lParam=47311964)  Line 1349 + 0x10
	C++
 	user32.dll!_InternalCallWinProc@20()  + 0x28	
 	user32.dll!_UserCallWinProcCheckWow@32()  + 0xb7	
 	user32.dll!_DispatchMessageWorker@8()  + 0xdc	
 	user32.dll!_DispatchMessageW@4()  + 0xf	
 	gkwidget.dll!nsAppShell::Run()  Line 159	C++
 	appcomps.dll!nsAppStartup::Run()  Line 208	C++
 	seamonkey.exe!main1(int argc=2, char * * argv=0x002a2d30, nsISupports * 
nativeApp=0x00000000)  Line 1272 + 0x9	C++
 	seamonkey.exe!main(int argc=2, char * * argv=0x002a2d30)  Line 1777 + 
0x15	C++
 	seamonkey.exe!WinMain(HINSTANCE__ * __formal=0x00400000, HINSTANCE__ * 
__formal=0x00400000, char * args=0x0015231e, HINSTANCE__ * 
__formal=0x00400000)  Line 1801 + 0x17	C++
 	seamonkey.exe!WinMainCRTStartup()  Line 390 + 0x1b	C
 	kernel32.dll!_BaseProcessStart@4()  + 0x23	

-	aFrame	0x038ba7a0 {mCropType=CropRight mTitle={...} mCroppedTitle=
{...} ...}	nsIFrame *
|-	[nsTextBoxFrame]	{mCropType=CropRight mTitle={...} mCroppedTitle=
{...} ...}	nsTextBoxFrame
||+	nsLeafBoxFrame	{mMouseThrough=unset }	nsLeafBoxFrame
||	mCropType	CropRight	nsTextBoxFrame::CroppingStyle
||-	mTitle	{...}	nsString
||\-	nsSubstring	{...}	nsSubstring
|| \-	nsAString_internal	{mVTable=0x00875c08 const 
nsObsoleteAStringThunk::`vftable' mData=0x042fd430 "Navigator" mLength=9 ...}
	nsAString_internal
||  |	mVTable	0x00875c08 const nsObsoleteAStringThunk::`vftable'	const 
void *
||  |+	mData	0x042fd430 "Navigator"	unsigned short *
||  |	mLength	9	unsigned int
||  \	mFlags	5	unsigned int
||+	mCroppedTitle	{...}	nsString
||-	mAccessKey	{...}	nsString
||\-	nsSubstring	{...}	nsSubstring
|| |-	nsAString_internal	{mVTable=0x00875c08 const 
nsObsoleteAStringThunk::`vftable' mData=0x024901a0 "n" mLength=1 ...}
	nsAString_internal
|| |	mVTable	0x00875c08 const nsObsoleteAStringThunk::`vftable'	const 
void *
|| |+	mData	0x024901a0 "n"	unsigned short *
|| |	mLength	1	unsigned int
|| \	mFlags	5	unsigned int
||	mTitleWidth	0	int
||+	mAccessKeyInfo	0x00000000 {mAccesskeyIndex=??? mBeforeWidth=??? 
mAccessWidth=??? ...}	nsAccessKeyInfo *
||	mNeedsRecalc	1	int
||+	mTextSize	{width=0 height=0 }	nsSize
||	mAscent	0	int
||	gAlwaysAppendAccessKey	0	int
||	gAccessKeyPrefInitialized	1	int
||	gInsertSeparatorBeforeAccessKey	0	int
|\	gInsertSeparatorPrefInitialized	0	int
|+	nsISupports	{...}	nsISupports
|+	mRect	{x=0 y=0 width=0 ...}	nsRect
|-	mContent	0x042fce78 {gXBLService=0x00000000 
gCSSOMFactory=0x00000000 mPrototype=0x025d9a68 {mNumChildren=0 
mChildren=0x00000000 mNodeInfo={...} ...} ...}	nsIContent *
||+	[nsXULElement]	{gXBLService=0x00000000 gCSSOMFactory=0x00000000 
mPrototype=0x025d9a68 {mNumChildren=0 mChildren=0x00000000 mNodeInfo=
{...} ...} ...}	nsXULElement
||+	nsISupports	{...}	nsISupports
||	sTabFocusModel	7	int
||	sTabFocusModelAppliesToXUL	0	int
|\	mParentPtrBits	0	long
|-	mStyleContext	0x03fc6fb0 {mParent=0x03a9cdc4 {mParent=0x04310b74 
{mParent=0x04310640 {mParent=0x04310190 mChild=0x04310aac 
mEmptyChild=0x00000000 ...} mChild=0x03fef970 {mParent=0x04310b74 
mChild=0x00000000 mEmptyChild=0x00000000 ...} mEmptyChild=0x00000000 
{mParent=??? mChild=??? mEmptyChild=??? ...} ...} mChild=0x03f23118 
{mParent=0x03a9cdc4 {mParent=0x04310b74 mChild=0x03f23118 
mEmptyChild=0x00000000 ...} mChild=0x03fc6f58 {mParent=0x03f23118 
mChild=0x00000000 mEmptyChild=0x00000000 ...} mEmptyChild=0x00000000 
{mParent=??? mChild=??? mEmptyChild=??? ...} ...} mEmptyChild=0x00000000 
{mParent=??? mChild=??? mEmptyChild=??? ...} ...} mChild=0x00000000 
{mParent=??? mChild=??? mEmptyChild=??? ...} mEmptyChild=0x00000000 
{mParent=??? mChild=??? mEmptyChild=??? ...} ...}	nsStyleContext *
||+	mParent	0x03a9cdc4 {mParent=0x04310b74 {mParent=0x04310640 
{mParent=0x04310190 {mParent=0x04310340 mChild=0x0431073c 
mEmptyChild=0x00000000 ...} mChild=0x04310aac {mParent=0x04310640 
mChild=0x00000000 mEmptyChild=0x00000000 ...} mEmptyChild=0x00000000 
{mParent=??? mChild=??? mEmptyChild=??? ...} ...} mChild=0x03fef970 
{mParent=0x04310b74 {mParent=0x04310640 mChild=0x03fef970 
mEmptyChild=0x00000000 ...} mChild=0x00000000 {mParent=??? mChild=??? 
mEmptyChild=??? ...} mEmptyChild=0x00000000 {mParent=??? mChild=??? 
mEmptyChild=??? ...} ...} mEmptyChild=0x00000000 {mParent=??? mChild=??? 
mEmptyChild=??? ...} ...} mChild=0x03f23118 {mParent=0x03a9cdc4 
{mParent=0x04310b74 {mParent=0x04310640 mChild=0x03fef970 
mEmptyChild=0x00000000 ...} mChild=0x03f23118 {mParent=0x03a9cdc4 
mChild=0x03fc6f58 mEmptyChild=0x00000000 ...} mEmptyChild=0x00000000 
{mParent=??? mChild=??? mEmptyChild=??? ...} ...} mChild=0x03fc6f58 
{mParent=0x03f23118 {mParent=0x03a9cdc4 mChild=0x03fc6f58 
mEmptyChild=0x00000000 ...} mChild=0x00000000 {mParent=??? mChild=??? 
mEmptyChild=??? ...} mEmptyChild=0x00000000 {mParent=??? mChild=??? 
mEmptyChild=??? ...} ...} mEmptyChild=0x00000000 {mParent=??? mChild=??? 
mEmptyChild=??? ...} ...} mEmptyChild=0x00000000 {mParent=??? mChild=??? 
mEmptyChild=??? ...} ...}	nsStyleContext *
||+	mChild	0x00000000 {mParent=??? mChild=??? mEmptyChild=??? ...}
	nsStyleContext *
||+	mEmptyChild	0x00000000 {mParent=??? mChild=??? mEmptyChild=??? ...}
	nsStyleContext *
||+	mPrevSibling	0x03f23118 {mParent=0x03a9cdc4 {mParent=0x04310b74 
{mParent=0x04310640 {mParent=0x04310190 mChild=0x04310aac 
mEmptyChild=0x00000000 ...} mChild=0x03fef970 {mParent=0x04310b74 
mChild=0x00000000 mEmptyChild=0x00000000 ...} mEmptyChild=0x00000000 
{mParent=??? mChild=??? mEmptyChild=??? ...} ...} mChild=0x03f23118 
{mParent=0x03a9cdc4 {mParent=0x04310b74 mChild=0x03f23118 
mEmptyChild=0x00000000 ...} mChild=0x03fc6f58 {mParent=0x03f23118 
mChild=0x00000000 mEmptyChild=0x00000000 ...} mEmptyChild=0x00000000 
{mParent=??? mChild=??? mEmptyChild=??? ...} ...} mEmptyChild=0x00000000 
{mParent=??? mChild=??? mEmptyChild=??? ...} ...} mChild=0x03fc6f58 
{mParent=0x03f23118 {mParent=0x03a9cdc4 {mParent=0x04310b74 mChild=0x03f23118 
mEmptyChild=0x00000000 ...} mChild=0x03fc6f58 {mParent=0x03f23118 
mChild=0x00000000 mEmptyChild=0x00000000 ...} mEmptyChild=0x00000000 
{mParent=??? mChild=??? mEmptyChild=??? ...} ...} mChild=0x00000000 
{mParent=??? mChild=??? mEmptyChild=??? ...} mEmptyChild=0x00000000 
{mParent=??? mChild=??? mEmptyChild=??? ...} ...} mEmptyChild=0x00000000 
{mParent=??? mChild=??? mEmptyChild=??? ...} ...}	nsStyleContext *
||+	mNextSibling	0x03f23118 {mParent=0x03a9cdc4 {mParent=0x04310b74 
{mParent=0x04310640 {mParent=0x04310190 mChild=0x04310aac 
mEmptyChild=0x00000000 ...} mChild=0x03fef970 {mParent=0x04310b74 
mChild=0x00000000 mEmptyChild=0x00000000 ...} mEmptyChild=0x00000000 
{mParent=??? mChild=??? mEmptyChild=??? ...} ...} mChild=0x03f23118 
{mParent=0x03a9cdc4 {mParent=0x04310b74 mChild=0x03f23118 
mEmptyChild=0x00000000 ...} mChild=0x03fc6f58 {mParent=0x03f23118 
mChild=0x00000000 mEmptyChild=0x00000000 ...} mEmptyChild=0x00000000 
{mParent=??? mChild=??? mEmptyChild=??? ...} ...} mEmptyChild=0x00000000 
{mParent=??? mChild=??? mEmptyChild=??? ...} ...} mChild=0x03fc6f58 
{mParent=0x03f23118 {mParent=0x03a9cdc4 {mParent=0x04310b74 mChild=0x03f23118 
mEmptyChild=0x00000000 ...} mChild=0x03fc6f58 {mParent=0x03f23118 
mChild=0x00000000 mEmptyChild=0x00000000 ...} mEmptyChild=0x00000000 
{mParent=??? mChild=??? mEmptyChild=??? ...} ...} mChild=0x00000000 
{mParent=??? mChild=??? mEmptyChild=??? ...} mEmptyChild=0x00000000 
{mParent=??? mChild=??? mEmptyChild=??? ...} ...} mEmptyChild=0x00000000 
{mParent=??? mChild=??? mEmptyChild=??? ...} ...}	nsStyleContext *
||+	mPseudoTag	{...}	nsCOMPtr<nsIAtom>
||-	mRuleNode	0x03fef768 {mPresContext=0x02d71410 {mRefCnt=
{mValue=2 } mType=eContext_Galley mShell=0x00000000 {mDocument=??? 
mPresContext=??? mStyleSet=??? ...} ...} mParent=0x03fef73c 
{mPresContext=0x02d71410 {mRefCnt={mValue=2 } mType=eContext_Galley 
mShell=0x00000000 {mDocument=??? mPresContext=??? mStyleSet=??? ...} ...} 
mParent=0x03fef710 {mPresContext=0x02d71410 {mRefCnt={...} 
mType=eContext_Galley mShell=0x00000000 ...} mParent=0x03fef61c 
{mPresContext=0x02d71410 mParent=0x02e126b8 mRule=0x00000000 ...} 
mRule=0x00000000 ...} mRule=0x00000000 ...} mRule=0x00000000 ...}
	nsRuleNode * const
|||+	__vfptr	0x03f604e8	*
|||+	mPresContext	0x02d71410 {mRefCnt={mValue=2 } mType=eContext_Galley 
mShell=0x00000000 {mDocument=??? mPresContext=??? mStyleSet=??? ...} ...}
	nsPresContext *
|||+	mParent	0x03fef73c {mPresContext=0x02d71410 {mRefCnt={mValue=2 } 
mType=eContext_Galley mShell=0x00000000 {mDocument=??? mPresContext=??? 
mStyleSet=??? ...} ...} mParent=0x03fef710 {mPresContext=0x02d71410 {mRefCnt=
{mValue=2 } mType=eContext_Galley mShell=0x00000000 {mDocument=??? 
mPresContext=??? mStyleSet=??? ...} ...} mParent=0x03fef61c 
{mPresContext=0x02d71410 {mRefCnt={...} mType=eContext_Galley 
mShell=0x00000000 ...} mParent=0x02e126b8 {mPresContext=0x02d71410 
mParent=0x02e11fe0 mRule=0x00000000 ...} mRule=0x00000000 ...} 
mRule=0x00000000 ...} mRule=0x00000000 ...}	nsRuleNode *
|||+	mRule	0x00000000	nsIStyleRule *
|||	mChildrenTaggedPtr	0x00000000	void *
|||+	mStyleData	{gInfo=0x0165c020 struct 
nsCachedStyleData::StyleStructInfo * nsCachedStyleData::gInfo 
mInheritedData=0x00000000 {mFontData=??? mColorData=??? mListData=??? ...} 
mResetData=0x00000000 {mBackgroundData=??? mPositionData=??? 
mTextResetData=??? ...} }	nsCachedStyleData
|||	mDependentBits	983764	unsigned int
|||	mNoneBits	257	unsigned int
||\+	gLangService	0x00000000	nsILanguageAtomService *
||+	mCachedStyleData	{gInfo=0x0165c020 struct 
nsCachedStyleData::StyleStructInfo * nsCachedStyleData::gInfo 
mInheritedData=0x04073188 {mFontData=0x00000000 {mFlags=??? mFont={name={...} 
style=??? systemFont=??? ...} mSize=??? } mColorData=0x00000000 {mColor=??? } 
mListData=0x00000000 {mListStyleType=??? mListStylePosition=??? mListStyleImage=
{...} ...} ...} mResetData=0x00000000 {mBackgroundData=??? mPositionData=??? 
mTextResetData=??? ...} }	nsCachedStyleData
||	mBits	256	unsigned int
|\	mRefCnt	3	unsigned int
|+	mParent	0x038ba610 {mRefCnt={mValue=0 } mPopupFrames=
{mFirstChild=0x00000000 {mRect={x=??? y=??? width=??? ...} mContent=??? 
mStyleContext=??? ...} } mIsMenu=0 ...}	nsIFrame *
|+	mNextSibling	0x00000000 {mRect={x=??? y=??? width=??? ...} 
mContent=??? mStyleContext=??? ...}	nsIFrame *
\	mState	16778402	unsigned int
nsMenuFrame::MarkAsGenerated()
  nsXULElement::SetAttr()
    ...
      nsCSSFrameConstructor::AttributeChanged()
        nsCSSFrameConstructor::ProcessOneRestyle()

Probably the same underlying problem as in bug 297570?
Depends on: 297570
Very possible, yes.
Status: UNCONFIRMED → NEW
Ever confirmed: true
Priority: -- → P5
Assignee: dbaron → nobody
QA Contact: ian → style-system
Assumed fixed by bug 297570 based on last two comments.
Please reopen if you see this again.

-> WORKSFORME
Status: NEW → RESOLVED
Closed: 16 years ago
Resolution: --- → WORKSFORME
Crash Signature: [@ nsCounterManager::AddCounterResetsAndIncrements]
You need to log in before you can comment on or make changes to this bug.