375822 - Crash on http://www.cstv.com [@ nsRuleNode::GetStyleData] [@ nsRuleNode::GetParentData]

Status: RESOLVED WORKSFORME

(Core :: Layout, defect)

Description

[Steve England [:stevee]]

Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.9a4pre) Gecko/20070328 Minefield/3.0a4pre ID:2007032804 [cairo]

1. New profile, start firefox
2. Go to http://www.cstv.com 

Excepted:
- No crash

Actual:
- Site crashes whilst loading

This is reproducable for me every time. Mostly talkback doesn't appear after the crash, but one time it did, so I attach the stack here:

TB30695757H

Incident ID: 30695757
Stack Signature	nsRuleNode::GetStyleData e5916138
Product ID	FirefoxTrunk
Build ID	2007032804
Trigger Time	2007-03-29 03:12:08.0
Platform	Win32
Operating System	Windows NT 5.0 build 2195
Module	firefox.exe + (0027c7cb)
URL visited	http://www.cstv.com/
User Comments	1. new profile, 2. go to site 3. crash
Since Last Crash	9309 sec
Total Uptime	14704 sec
Trigger Reason	Access violation
Source File, Line No.	e:\builds\tinderbox\fx-trunk\winnt_5.2_depend\mozilla\layout\style\nsrulenode.cpp, line 4417
Stack Trace 	
nsRuleNode::GetStyleData  [mozilla/layout/style/nsrulenode.cpp, line 4417]
nsStyleContext::GetStyleData  [mozilla/layout/style/nsstylecontext.cpp, line 223]
nsRuleNode::WalkRuleTree  [mozilla/layout/style/nsrulenode.cpp, line 1433]
nsRuleNode::GetVisibilityData  [mozilla/layout/style/nsrulenode.cpp, line 1090]

Comment 1

[Steve England [:stevee]]

If you don't see the crash, try a ctrl-f5 refresh.

Comment 2

[Steve England [:stevee]]

No crashing at cstv.com whilst repeatedly ctrl-f5'ng:
- Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.9a3pre) Gecko/2007030415 Minefield/3.0a3pre

Crashing at cstv.com whilst repeatedly ctrl-f5'ng:
- Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.9a3pre) Gecko/2007030504 Minefield/3.0a3pre

Bonsai regression range:
http://bonsai.mozilla.org/cvsquery.cgi?treeid=default&module=PhoenixTinderbox&branch=HEAD&branchtype=match&dir=&file=&filetype=match&who=&whotype=match&sortby=Date&hours=2&date=explicit&mindate=2007-03-04+14&maxdate=2007-03-05+05&cvsroot=%2Fcvsroot

Comment 3

[Steve England [:stevee]]

Another stack (TB30697008Y)

Incident ID: 30697008
Stack Signature	nsRuleNode::GetParentData d4fe8d57
Product ID	FirefoxTrunk
Build ID	2007030504
Trigger Time	2007-03-29 04:10:19.0
Platform	Win32
Operating System	Windows NT 5.0 build 2195
Module	firefox.exe + (0026ecc6)
URL visited	cstv.com
User Comments	
Since Last Crash	32 sec
Total Uptime	33166 sec
Trigger Reason	Access violation
Source File, Line No.	e:\builds\tinderbox\fx-trunk\winnt_5.2_depend\mozilla\layout\style\nsrulenode.cpp, line 4375
Stack Trace 	
nsRuleNode::GetParentData  [mozilla/layout/style/nsrulenode.cpp, line 4375]
nsStyleContext::GetStyleData  [mozilla/layout/style/nsstylecontext.cpp, line 223]
nsRuleNode::WalkRuleTree  [mozilla/layout/style/nsrulenode.cpp, line 1441]
nsRuleNode::GetVisibilityData  [mozilla/layout/style/nsrulenode.cpp, line 1098]

Comment 4

[Ria Klaassen (not reading all bugmail)]

Appears to be caused by bug 363253 but with crashes you are never 100% sure.

Comment 5

[Martijn Wargers (dead)]

I haven't succeeeded in making a testcase for this crash
However, I just filed bug 375831. I hope/think it's a related crash to this one.
While minimising the testcase for that bug, I got stacktraces that sort of looked like the ones in this bug.
So I think this is indeed probably a regression from bug 363253.

Comment 6

[Martijn Wargers (dead)]

This is now worksforme, using:
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9a4pre) Gecko/20070426 Minefield/3.0a4pre

Steve, is it now worksforme for you too?

Comment 7

[Steve England [:stevee]]

Yes, http://www.cstv.com/ now no longer crashes for me
-->WORKSFORME