Closed Bug 337644 Opened 19 years ago Closed 19 years ago

Clicked on the first thumbnail and FF crashed [@ nsStyleContext::GetStyleData]

Categories

(Firefox :: General, defect)

x86
Windows XP
defect
Not set
critical

Tracking

()

RESOLVED DUPLICATE of bug 334080

People

(Reporter: markus.podar+bugzilla.mozilla.org, Unassigned)

References

()

Details

(Keywords: crash)

Crash Data

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.3) Gecko/20060426 Firefox/1.5.0.3 Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.3) Gecko/20060426 Firefox/1.5.0.3 Whenever I clicked on the first thumbnail, a popup, which is supposed to show an image, opened but did crash immidiately. Not all the time, but at least so often that I could produce five talkbacks: http://talkback-public.mozilla.org/search/start.jsp?search=2&type=iid&id=TB18581587Q http://talkback-public.mozilla.org/search/start.jsp?search=2&type=iid&id=TB18581664H http://talkback-public.mozilla.org/search/start.jsp?search=2&type=iid&id=TB18581699Y http://talkback-public.mozilla.org/search/start.jsp?search=2&type=iid&id=TB18581769Z http://talkback-public.mozilla.org/search/start.jsp?search=2&type=iid&id=TB18581911X In my case I had many tabs open in the browser, I had a few more pages from this site open, all which had such thumbnails. The first page I look at the thumbnail most of the time worked. When I closed the tab and saw the next tab with a similiar page from that site also with a thumbnail and I clicked it, FF crashed. Since I was (luckily) using SessionSaver I could easily reproduce the problem because all my tab session got restored. Reproducible: Always Steps to Reproduce: 1.Open http://www.gamers.at/?SHOWNEWS=1&NEWSID=25238&more=1 2.click on first thumbnail 3.popup opens Actual Results: FF crashes Expected Results: Should not crash I had many tabs from the same and from other sites open. Due using ScreenSaver I was able to reproduce it a few times.
The next talkbacks were recorded when FF always crashed while SessionSaver tried to restore a session where this image was opened: http://www.gamers.at/images/News/News_1_25238.img Opening this image directly didn't harm my browser but when it was automatically opened on startup, it crashed. http://talkback-public.mozilla.org/search/start.jsp?search=2&type=iid&id=TB18583484K http://talkback-public.mozilla.org/search/start.jsp?search=2&type=iid&id=TB18583492W http://talkback-public.mozilla.org/search/start.jsp?search=2&type=iid&id=TB18583502H http://talkback-public.mozilla.org/search/start.jsp?search=2&type=iid&id=TB18583511K From what I observed during all this crashed was that I didn't do a single opreatoin "view this image" but many many windows/tabs were open and all loaded data over the network, i.e. FF was pretty busy all the time.
All the talkbacks have the same stack: nsStyleContext::GetStyleData [c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/layout/style/nsStyleContext.cpp, line 248] nsImageDocument::OnStartContainer [c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/content/html/document/src/nsImageDocument.cpp, line 508] imgRequest::OnStartContainer [c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/modules/libpr0n/src/imgRequest.cpp, line 458] imgRequest::OnDataAvailable [c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/modules/libpr0n/src/imgRequest.cpp, line 886] ProxyListener::OnDataAvailable [c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/modules/libpr0n/src/imgLoader.cpp, line 893] nsMediaDocumentStreamListener::OnDataAvailable [c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/content/html/document/src/nsMediaDocument.cpp, line 115] nsDocumentOpenInfo::OnDataAvailable [c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/uriloader/base/nsURILoader.cpp, line 374] nsStreamListenerTee::OnDataAvailable [c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/netwerk/base/src/nsStreamListenerTee.cpp, line 97] nsHttpChannel::OnDataAvailable [c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/netwerk/protocol/http/src/nsHttpChannel.cpp, line 4195] nsInputStreamPump::OnStateTransfer [c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/netwerk/base/src/nsInputStreamPump.cpp, line 437] nsInputStreamPump::OnInputStreamReady [c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/netwerk/base/src/nsInputStreamPump.cpp, line 341] nsOutputStreamReadyEvent::EventHandler [c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/xpcom/io/nsStreamUtils.cpp, line 120] 0x778b0c24 nsSVGPathDataParser::matchLinetoArgSeq [c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/content/svg/content/src/nsSVGPathDataParser.cpp, line 404] 0x029a0292 0x7ae00298 Markus, does it happen when you have all extensions di
Summary: Clicked on the first thumbnail and FF crashed → Clicked on the first thumbnail and FF crashed [@ nsStyleContext::GetStyleData]
And the stack looks just like bug 334080, which should be fixed in 1.5.0.4 (if you're feeling adventurous, you could test a nightly pre-1.5.0.4 build from ftp://ftp.mozilla.org/pub/mozilla.org/firefox/nightly/latest-mozilla1.8.0 to see if it fixes it for you).
*** This bug has been marked as a duplicate of 334080 ***
Severity: normal → critical
Status: UNCONFIRMED → RESOLVED
Closed: 19 years ago
Keywords: crash
Resolution: --- → DUPLICATE
Another crash on another machine, but likely all the same extensions: http://talkback-public.mozilla.org/search/start.jsp?search=2&type=iid&id=TB18600869M This time this happened when visisting this page http://orf.at/060512-99420/99421txt_story.html and clicking on the first thumbnail (with subtitle "©Bild: Shepherd Medical Company") the popup opened fine with the image inside, but when I closed the popup (I think by click on the image itself) FF crashed. Deinstalling the extension is currently really a problem as I'm using so many of them.
Markus, thanks, but there's no need anymore to investigate this further. This is a duplicate of bug 334080. Like Phil said in comment 3, you should try out the nightly pre-1.5.0.4 to see if that fixes the crash.
Crash Signature: [@ nsStyleContext::GetStyleData]
You need to log in before you can comment on or make changes to this bug.