370928 - crash [@nsListBoxBodyFrame::RemoveChildFrame] when switching tabs? (not reproducable)

Status: RESOLVED INVALID

(Core :: General, defect)

Description

[(not reading, please use [e-mail] instead)]

crash [@nsListBoxBodyFrame::RemoveChildFrame] when switching tabs? (not reproducable)

TB29484295

Stack Signature	 nsListBoxBodyFrame::RemoveChildFrame fc43e8a3
Product ID	FirefoxTrunk
Build ID	2007021504
Trigger Time	2007-02-19 10:25:01.0
Platform	Win32
Operating System	Windows NT 5.1 build 2600
Module	firefox.exe + (002bfd0f)
URL visited	
User Comments	switching or closing tabs? sspitzer
Since Last Crash	205457 sec
Total Uptime	205457 sec
Trigger Reason	Access violation
Source File, Line No.	e:\builds\tinderbox\fx-trunk\winnt_5.2_depend\mozilla\layout\xul\base\src\nslistboxbodyframe.cpp, line 1461

Stack Trace 	
nsListBoxBodyFrame::RemoveChildFrame  [mozilla\layout\xul\base\src\nslistboxbodyframe.cpp, line 1461]
0x57500f8b

http://lxr.mozilla.org/seamonkey/source/layout/xul/base/src/nsListBoxBodyFrame.cpp#1461

Comment 1

[Wayne Mery (:wsmwk)]

hmm, talkback has no other nsListBoxBodyFrame::RemoveChildFrame 

Comment 2

[Jesse Ruderman]

> nsListBoxBodyFrame::RemoveChildFrame 
> 0x57500f8b

If that's all Talkback has, I'd guess that the bug results in a function call to a random memory address.  So knowing that the top of the stack was nsListBoxBodyFrame::RemoveChildFrame once isn't especially helpful.