396421 - crash [@ nsFrame::BoxReflow(nsBoxLayoutState&, nsPresContext*, nsHTMLReflowMetrics&, nsIRenderingContext*, int, int, int, int, int)]

Status: RESOLVED FIXED

(Thunderbird :: General, defect)

Description

[Wayne Mery (:wsmwk)]

per breakpad, huge increase (approx 4x) as of 2007-09-14 build. nsFrame::BoxReflow as top of stack goes back to 2007-08-29 build. 

2007091700  	25 - 100.000%  	 25 - 100.000% 	 0 - 0.000% 	 0 - 0.000%
2007091600 	132 - 89.796% 	132 - 95.652% 	0 - 0.000% 	0 - 0.000%
2007091500 	149 - 87.135% 	149 - 88.166% 	0 - 0.000% 	0 - 0.000%
2007091400 	129 - 38.973% 	129 - 40.439% 	0 - 0.000% 	0 - 0.000%
2007091300 	18 - 5.902% 	18 - 6.061% 	0 - 0.000% 	0 - 0.000%

two FF crash bugs (perhaps unrelated) have achieved no resolution - bug 292549, bug 380015

bp-429cf1f0-6523-11dc-afae-001a4bd43ef6
UUID	429cf1f0-6523-11dc-afae-001a4bd43ef6
Time	2007-09-17 06:38:37-07:00
Build ID	2007091403
OS	Windows NT
OS Version	5.1.2600 Service Pack 2
CPU	x86
CPU Info	GenuineIntel family 15 model 0 stepping 10
Crash Reason	EXCEPTION_ACCESS_VIOLATION
Crash Address	0x34
Stack Traces
Stack of Crashing Thread
frame 	signature 	source
0 	nsFrame::BoxReflow(nsBoxLayoutState&, nsPresContext*, nsHTMLReflowMetrics&, nsIRenderingContext*, int, int, int, int, int) 	mozilla/layout/generic/nsFrame.cpp:6095
1 	nsFrame::DoLayout(nsBoxLayoutState&) 	mozilla/layout/generic/nsFrame.cpp:5902
2 	nsIFrame::Layout(nsBoxLayoutState&) 	mozilla/layout/xul/base/src/nsBox.cpp:563
3 	nsBoxFrame::LayoutChildAt(nsBoxLayoutState&, nsIFrame*, nsRect const&) 	mozilla/layout/xul/base/src/nsBoxFrame.cpp:2001
4 	LayoutAndInvalidate 	mozilla/layout/generic/nsGfxScrollFrame.cpp:2389
5 	nsGfxScrollFrameInner::LayoutScrollbars(nsBoxLayoutState&, nsRect const&, nsRect const&, nsRect const&) 	mozilla/layout/generic/nsGfxScrollFrame.cpp:2451
6 	nsHTMLScrollFrame::Reflow(nsPresContext*, nsHTMLReflowMetrics&, nsHTMLReflowState const&, unsigned int&) 	mozilla/layout/generic/nsGfxScrollFrame.cpp:775
7 	nsContainerFrame::ReflowChild(nsIFrame*, nsPresContext*, nsHTMLReflowMetrics&, nsHTMLReflowState const&, int, int, unsigned int, unsigned int&, nsOverflowContinuationTracker*) 	mozilla/layout/generic/nsContainerFrame.cpp:715
8 	ViewportFrame::Reflow(nsPresContext*, nsHTMLReflowMetrics&, nsHTMLReflowState const&, unsigned int&) 	mozilla/layout/generic/nsViewportFrame.cpp:286
9 	PresShell::DoReflow(nsIFrame*) 	mozilla/layout/base/nsPresShell.cpp:6074
10 	PresShell::ProcessReflowCommands(int) 	mozilla/layout/base/nsPresShell.cpp:6187
11 	PresShell::DoFlushPendingNotifications(mozFlushType, int) 	mozilla/layout/base/nsPresShell.cpp:4423
12 	PresShell::FlushPendingNotifications(mozFlushType) 	mozilla/layout/base/nsPresShell.cpp:4385
13 	DocumentViewerImpl::LoadComplete(unsigned int) 	mozilla/layout/base/nsDocumentViewer.cpp:926
14 	nsDocShell::EndPageLoad(nsIWebProgress*, nsIChannel*, unsigned int) 	mozilla/docshell/base/nsDocShell.cpp:4930
15 	nsWebShell::EndPageLoad(nsIWebProgress*, nsIChannel*, unsigned int) 	mozilla/docshell/base/nsWebShell.cpp:1014
16 	nsDocShell::OnStateChange(nsIWebProgress*, nsIRequest*, unsigned int, unsigned int) 	mozilla/docshell/base/nsDocShell.cpp:4830
17 	nsDocLoader::FireOnStateChange(nsIWebProgress*, nsIRequest*, int, unsigned int) 	mozilla/uriloader/base/nsDocLoader.cpp:1235
18 	nsDocLoader::doStopDocumentLoad(nsIRequest*, unsigned int) 	mozilla/uriloader/base/nsDocLoader.cpp:858
19 	nsDocLoader::DocLoaderIsEmpty() 	mozilla/uriloader/base/nsDocLoader.cpp:763
20 	nsDocLoader::OnStopRequest(nsIRequest*, nsISupports*, unsigned int) 	mozilla/uriloader/base/nsDocLoader.cpp:679
21 	nsLoadGroup::RemoveRequest(nsIRequest*, nsISupports*, unsigned int) 	mozilla/netwerk/base/src/nsLoadGroup.cpp:688
22 	nsBaseChannel::OnStopRequest(nsIRequest*, nsISupports*, unsigned int) 	mozilla/netwerk/base/src/nsBaseChannel.cpp:627
23 	nsInputStreamPump::OnStateStop() 	mozilla/netwerk/base/src/nsInputStreamPump.cpp:576
24 	nsInputStreamPump::OnInputStreamReady(nsIAsyncInputStream*) 	mozilla/netwerk/base/src/nsInputStreamPump.cpp:401
25 	nsInputStreamReadyEvent::Run() 	mozilla/xpcom/io/nsStreamUtils.cpp:111
26 	nsThread::ProcessNextEvent(int, int*) 	mozilla/xpcom/threads/nsThread.cpp:490
27 	NS_ProcessNextEvent_P(nsIThread*, int) 	nsThreadUtils.cpp:227
28 	nsXULWindow::ShowModal() 	mozilla/xpfe/appshell/src/nsXULWindow.cpp:398
29 	nsContentTreeOwner::ShowAsModal() 	mozilla/xpfe/appshell/src/nsContentTreeOwner.cpp:521
30 	nsWindowWatcher::OpenWindowJSInternal(nsIDOMWindow*, char const*, char const*, char const*, int, nsIArray*, int, nsIDOMWindow**) 	mozilla/embedding/components/windowwatcher/src/nsWindowWatcher.cpp:944
31 	nsWindowWatcher::OpenWindow(nsIDOMWindow*, char const*, char const*, char const*, nsISupports*, nsIDOMWindow**) 	mozilla/embedding/components/windowwatcher/src/nsWindowWatcher.cpp:418
32 	NS_InvokeByIndex_P 	mozilla/xpcom/reflect/xptcall/src/md/win32/xptcinvoke.cpp:101
33 	JS_SuspendRequest 	mozilla/js/src/jsapi.c:948
34 	XPCCallContext::XPCCallContext(XPCContext::LangType, JSContext*, JSObject*, JSObject*, long, unsigned int, long*, long*) 	mozilla/js/src/xpconnect/src/xpccallcontext.cpp:160

Comment 1

[Joe Sabash [:JoeS1]]

I think his is from WIP on bug 350616
bug 394190 is a build/config bug with applicable comments on TB
The symptoms seem to have changed, that is affected different users on 2007-09-10 builds.
DUP of 394190 ?
 

Comment 2

[Wayne Mery (:wsmwk)]

i have't traced it completely, but i'm not convinced all the dates match up.

Comment 3

[Wayne Mery (:wsmwk)]

seems likely though - breaking trunk for everybody except developers I should imagine.

I don't see the trunk crash myself but guess it goes away by using http://www.microsoft.com/downloads/details.aspx?familyid=32bc1bee-a3f9-4c13-9c99-220b62a191ee&displaylang=en

Comment 4

[Wayne Mery (:wsmwk)]

crash-stats shows 0 crashes for this frame for today's build 2007092600.
so fixed by bug 394190, which checked in this A.M.