305636 - Crash in trunk visiting http://www.rtl.nl/actueel/rtlnieuws/ [@ nsNativeThemeWin::ClassicGetThemePartAndState] [@ nsRenderingContextWin::PushState]

Status: VERIFIED FIXED

(Core Graveyard :: GFX: Win32, defect)

Description

[Ria Klaassen (not reading all bugmail)]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9a1) Gecko/20050823 Firefox/1.6a1
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9a1) Gecko/20050823 Firefox/1.6a1

Crash visiting http://www.rtl.nl/actueel/rtlnieuws/
No flash installed.

This is a recent regression:

Working build: 1.9a1_2005082210
Failing build: 1.9a1_2005082222 

Reproducible: Always




Not in branch.
Get the same result on another WinXP SP2 system.

TB8641695Q @nsNativeThemeWin::ClassicGetThemePartAndState 
TB8641467Z
TB8641414G
TB8641129Q
TB8641888W

Comment 1

[Dave Townsend [:mossop]]

Confirming
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9a1) Gecko/20050823
Firefox/1.6a1 ID:2005082308

Comment 2

[Martijn Wargers (dead)]

My guess would be, this is a regression from fixing bug 305291.

Comment 3

[Stephen Donner [:stephend] Not actively reading bugmail]

I actually crash in nsRenderingContextWin::PushState.

Comment 4

[Martijn Wargers (dead)]

Attachment: Testcase

This is a quite minimal testcase that still crashes on load for me with current
trunk build.

Comment 5

[Steve England [:stevee]]

*** Bug 305687 has been marked as a duplicate of this bug. ***

Comment 6

[Ria Klaassen (not reading all bugmail)]

Firefox doesn't crash anymore on this site: http://www.rtl.nl/actueel/rtlnieuws/

Failing build: 1.9a1_2005082320
Working build: 1.9a1_2005082322

Comment 7

[Stephen Donner [:stephend] Not actively reading bugmail]

Neither does SeaMonkey trunk 2005-08-24.

I wonder what fixed this?

Comment 8

[Stephen Donner [:stephend] Not actively reading bugmail]

pav says vlad's checkin to bug 305632 fixed this, marking fixed.

Comment 9

[Jay Patel [:jay]]

Adding topcrash+ keyword since this was a regression for 8/22 build on the Trunk:
http://talkback-public.mozilla.org/reports/firefox/FFTrunk/FFTrunk-topcrashers.html

Marking verified per that Talkback data, since there are no crashes with 8/23
builds.  If this comes back or anyone is able to reproduce, please reopen.

Comment 10

[Jay Patel [:jay]]

To be more clear, the "nsNativeThemeWin::ClassicGetThemePartAndState" crashes
only happened with 8/22 builds and are no longer visible on 8/23.  

The "nsRenderingContextWin::PushState" crashes regressed on 8/23 builds and
current Talkback data doesn't show any crashes with 8/24 builds yet, so
hopefully that crash is fixed as well.  We'll have to keep an eye on Talkback
data to verify that too:
http://talkback-public.mozilla.org/talkback/fastfind.jsp?search=1&searchby=stacksig&match=contains&searchfor=nsRenderingContextWin::PushState&vendor=MozillaOrg&product=FirefoxTrunk&platform=All&buildid=&sdate=&stime=&edate=&etime=&sortby=bbid

Comment 11

[(no longer active)]

Mass-assigning the new rtl keyword to RTL-related (see bug 349193).