Crash [@ nsCSSRendering::PaintBackgroundWithSC] with unminimised stirtable testcase

RESOLVED WORKSFORME

Status

()

Core
Layout: Tables
--
critical
RESOLVED WORKSFORME
12 years ago
2 years ago

People

(Reporter: Martijn Wargers (dead), Unassigned)

Tracking

(Blocks: 1 bug, {crash, regression})

Trunk
x86
Windows XP
crash, regression
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

(crash signature)

Attachments

(1 attachment)

5.05 KB, application/xhtml+xml
Details
(Reporter)

Description

12 years ago
See upcoming testcase, which I haven't been able to minimise yet.
Current trunk Mozilla builds crash when the counter in the status bar has reached 137.

Talkback ID: TB22645343Z
nsCachedStyleData::GetStyleData   nsCSSRendering::PaintBackgroundWithSC   0x0012f2b0

Talkback ID: TB22653080W
TableBackgroundPainter::PaintCell   TableBackgroundPainter::PaintRow   TableBackgroundPainter::PaintRowGroup   TableBackgroundPainter::PaintTable   nsTableFrame::PaintTableBorderBackground  

This regressed between 2006-04-21 and 2006-04-22:
http://bonsai.mozilla.org/cvsquery.cgi?treeid=default&module=all&branch=HEAD&branchtype=match&dir=&file=&filetype=match&who=&whotype=match&sortby=Date&hours=2&date=explicit&mindate=2006-04-21+05&maxdate=2006-04-22+06&cvsroot=%2Fcvsroot
Regression from bug 333493 or bug 331679.
Those bugs were checked in on branches, but branch builds don't seem to crash on the testcase.
(Reporter)

Comment 1

12 years ago
Created attachment 235933 [details]
testcase

I hope I'll be able to minimise the testcase some time, soon, but I won't complain if someone else will do it.

Comment 2

12 years ago
Stir Table crashes are usually easy to minimize using "record" mode and Lithium, aren't they?

Comment 3

12 years ago
Martijn, as Jesse said 
Can you reproduce with StirTable v2.0?
If so, which seed arguments did you use?
Which iteration approximately?

Jesse: is there any chance or a parameter setting to get v2.0 to emulate v0.1
(Reporter)

Comment 4

12 years ago
Ok, this is now worksforme with current trunk build, I bet it was fixed by bug 351328 (sorry, I couldn't provide a minimised version of the testcase).
Status: NEW → RESOLVED
Last Resolved: 12 years ago
Resolution: --- → WORKSFORME
(Assignee)

Updated

7 years ago
Crash Signature: [@ nsCSSRendering::PaintBackgroundWithSC]

Updated

3 years ago
Group: core-security → core-security-release
Group: core-security-release
You need to log in before you can comment on or make changes to this bug.