340759 - Crash after nsCSSFrameConstructor::ConstructFrameInternal calls PL_ArenaAllocate [@ ntdll.dll]

Status: RESOLVED DUPLICATE of bug 339861

(Firefox :: General, defect)

Description

[Bob Clary [:bc] (inactive)]

I've been crashing for a few days in Bone Cho builds on winxp with stacks like TB19624486 after just normal browsing etc. I haven't seen a bug with a stack quite like this, so I'm going to go ahead file this one.

Note that ntdll.dll is at the top of the stack and looking at <http://talkback-public.mozilla.org/reports/firefox/FF2x/FF2x-topcrashers.html> this looks like a common occurence starting 20060531.

Not sure if where this should go, so leaving in ff/general for now.

Comment 1

[Jesse Ruderman]

ntdll.dll is really high on the topcrash list for Firefox 2, but I didn't see any common things below it on the stack.  It looks like a bunch of JavaScript Engine crashes appeared at the same time -- could something in the JavaScript Engine be corrupting the heap and causing random crashes?

Comment 2

[Jesse Ruderman]

Attachment: Topcrash table through #65

Attaching this so it doesn't get lost.

Comment 3

[Nick Thomas [:nthomas] (UTC+12)]

See also bug 335558 (and bug 339861). Even though the stacks seem totally unrelated, disabling form history makes a big difference to number of ntdll.dll crashes (as reported by mozillazine nightly testers). The problem should be backed out soon, awaiting review in 335558.

Comment 4

[Bob Clary [:bc] (inactive)]

Thanks Nick, lets dupe to 339861.

*** This bug has been marked as a duplicate of 339861 ***