372166 - crash [@ nsViewManager::GetWidget nsViewManager.cpp:2347] in mozilla/js/tests/e4x/Regress/regress-355569.js browser only

Status: RESOLVED WORKSFORME

(Core :: Layout, defect)

Comment 1

[Bob Clary [:bc] (inactive)]

#5  <signal handler called>
#6  0x01655c96 in nsViewManager::GetWidget (this=0xa31aff8, aWidget=0x2)
    at /work/mozilla/builds/1.9.0/mozilla/view/src/nsViewManager.cpp:2347
#7  0x0702e559 in nsEditor::EndUpdateViewBatch (this=0xa6b78f0)
    at /work/mozilla/builds/1.9.0/mozilla/editor/libeditor/base/nsEditor.cpp:4357
#8  0x07038a2d in nsEditor::EndPlaceHolderTransaction (this=0xa6b78f0)
    at /work/mozilla/builds/1.9.0/mozilla/editor/libeditor/base/nsEditor.cpp:982
#9  0x06fadafd in nsAutoPlaceHolderBatch::~nsAutoPlaceHolderBatch ()
    at /work/mozilla/builds/1.9.0/mozilla/editor/libeditor/base/nsEditor.cpp:527
#10 0x07016d2d in nsPlaintextEditor::InsertText (this=0xa6b78f0, 
    aStringToInsert=@0xbf8e84f0)
    at /work/mozilla/builds/1.9.0/mozilla/editor/libeditor/text/nsPlaintextEditor.cpp:770
#5  <signal handler called>
#6  0x01655c96 in nsViewManager::GetWidget (this=0xa31aff8, aWidget=0x2)
    at /work/mozilla/builds/1.9.0/mozilla/view/src/nsViewManager.cpp:2347
#7  0x0702e559 in nsEditor::EndUpdateViewBatch (this=0xa6b78f0)
    at /work/mozilla/builds/1.9.0/mozilla/editor/libeditor/base/nsEditor.cpp:4357
#8  0x07038a2d in nsEditor::EndPlaceHolderTransaction (this=0xa6b78f0)
    at /work/mozilla/builds/1.9.0/mozilla/editor/libeditor/base/nsEditor.cpp:982
#9  0x06fadafd in nsAutoPlaceHolderBatch::~nsAutoPlaceHolderBatch ()
    at /work/mozilla/builds/1.9.0/mozilla/editor/libeditor/base/nsEditor.cpp:527
#10 0x07016d2d in nsPlaintextEditor::InsertText (this=0xa6b78f0, 
    aStringToInsert=@0xbf8e84f0)
    at /work/mozilla/builds/1.9.0/mozilla/editor/libeditor/text/nsPlaintextEditor.cpp:770

Comment 2

[Bob Clary [:bc] (inactive)]

public test case <http://test.bclary.com/tests/mozilla.org/js/js-test-driver-standards.html?test=ecma_3/extensions/regress-274152.js;language=type;text/javascript>

Comment 3

[Boris Zbarsky [:bzbarsky]]

This worksforme in a debug Linux build which has the patch for bug 371839 in it. And in any case, that patch should _really_ not have lead to that callstack.

Bob, what's the regression range including hours?

Comment 4

[Bob Clary [:bc] (inactive)]

I was seeing this crash on several tests and after bz's inability to reproduce, I clobbered and rebuilt and can no longer reproduce. Marking works for me.