419342 - shutdown crash [@ nsExpirationTracker<gfxFont, 3u>::AddObject(gfxFont*) ]

Status: VERIFIED DUPLICATE of bug 414559

(Core :: Graphics, defect)

Description

[Tony Mechelynck [:tonymec]]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9b4pre) Gecko/2008022301 SeaMonkey/2.0a1pre
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9b4pre) Gecko/2008022301 SeaMonkey/2.0a1pre

Breakpad event bp-f9d45982-e316-11dc-a974-001a4bd46e84

I was expecting a hang as per bug 416745 but this time I got a crash. Don't know if related.

Reproducible: Couldn't Reproduce

Steps to Reproduce:
1. Have SeaMonkey (browser) open with several tabs open (31 in my case).
2. Ctrl-Q
3. A popup comes up, asking if you're sure you want to close all tabs. The OK button is selected by default.
4. Hit Enter.

Actual Results:  
crash

Expected Results:  
browser should have exited normally.

Additional info:

Summary information collected by Breakpad
------------------------------------------------------
SeaMonkey 2.0a1pre Crash Report
ID: f9d45982-e316-11dc-a974-001a4bd46e84
Signature: nsExpirationTracker<gfxFont, 3u>::AddObject(gfxFont*)

    * Details
    * Frames
    * Modules
    * Raw Dump

Signature	nsExpirationTracker<gfxFont, 3u>::AddObject(gfxFont*)
UUID	f9d45982-e316-11dc-a974-001a4bd46e84
Time	2008-02-24 12:26:13-08:00
Uptime	0
Product	SeaMonkey
Version	2.0a1pre
Build ID	2008022301
OS	Linux
OS Version	0.0.0 Linux 2.6.22.17-0.1-default #1 SMP 2008/02/10 20:01:04 UTC i686 GNU/Linux
CPU	x86
CPU Info	AuthenticAMD family 1 model 7 stepping 1
Crash Reason	SIGSEGV
Crash Address	0xb5ecc92e
Comments	after Ctrl-Q (Quit) followed by Enter (close all tabs)

Here comes the stack of the crashing thread
------------------------------------------------------
Frame  	Signature  	Source
0 	nsExpirationTracker<gfxFont, 3u>::AddObject(gfxFont*) 	mozilla/gfx/thebes/src/gfxFont.cpp:125
1 	gfxFontCache::NotifyReleased(gfxFont*) 	mozilla/gfx/thebes/src/gfxFont.cpp:146
2 	gfxFont::Release() 	mozilla/gfx/thebes/src/gfxFont.cpp:373
3 	nsRefPtr<gfxFont>::~nsRefPtr() 	mozilla/gfx/thebes/src/gfxFont.cpp:956
4 	gfxTextRun::GlyphRun::~GlyphRun() 	mozilla/gfx/thebes/src/gfxFont.cpp:1133
5 	nsTArrayElementTraits<gfxTextRun::GlyphRun>::Destruct(gfxTextRun::GlyphRun*) 	mozilla/gfx/thebes/src/gfxFont.cpp:197
6 	nsTArray<gfxTextRun::GlyphRun>::DestructRange(unsigned int, unsigned int) 	mozilla/gfx/thebes/src/gfxFont.cpp:748
7 	nsTArray<gfxTextRun::GlyphRun>::RemoveElementsAt(unsigned int, unsigned int) 	mozilla/gfx/thebes/src/gfxFont.cpp:599
8 	nsTArray<gfxTextRun::GlyphRun>::Clear() 	mozilla/gfx/thebes/src/gfxFont.cpp:610
9 	nsTArray<gfxTextRun::GlyphRun>::~nsTArray() 	mozilla/gfx/thebes/src/gfxFont.cpp:267
10 	nsAutoTArray<gfxTextRun::GlyphRun, 1u>::~nsAutoTArray() 	mozilla/gfx/thebes/src/gfxFont.cpp:767
11 	gfxTextRun::~gfxTextRun() 	mozilla/gfx/thebes/src/gfxFont.cpp:1037
12 	FrameTextRunCache::NotifyExpired(gfxTextRun*) 	mozilla/layout/generic/nsTextFrameThebes.cpp:371
13 	nsExpirationTracker<gfxTextRun, 3u>::AgeOneGeneration() 	mozilla/layout/generic/nsTextFrameThebes.cpp:210
14 	nsExpirationTracker<gfxTextRun, 3u>::AgeAllGenerations() 	mozilla/layout/generic/nsTextFrameThebes.cpp:234
15 	FrameTextRunCache::~FrameTextRunCache() 	mozilla/layout/generic/nsTextFrameThebes.cpp:355
16 	nsTextFrameTextRunCache::Shutdown() 	mozilla/layout/generic/nsTextFrameThebes.cpp:431
17 	nsLayoutStatics::Shutdown() 	mozilla/layout/build/nsLayoutStatics.cpp:255
18 	nsLayoutStatics::Release() 	mozilla/layout/build/nsLayoutStatics.cpp:334
19 	nsNodeInfoManager::~nsNodeInfoManager() 	mozilla/content/base/src/nsNodeInfoManager.cpp:133
20 	nsNodeInfoManager::Release() 	mozilla/content/base/src/nsNodeInfoManager.cpp:157
21 	nsRefPtr<nsNodeInfoManager>::~nsRefPtr() 	mozilla/content/base/src/nsContentSink.cpp:956
22 	nsNodeInfo::LastRelease() 	mozilla/content/base/src/nsNodeInfo.cpp:302
23 	nsNodeInfo::Release() 	mozilla/content/base/src/nsNodeInfo.cpp:134
24 	nsCOMPtr_base::~nsCOMPtr_base() 	nsCOMPtr.cpp:81
25 	nsCOMPtr<nsINodeInfo>::~nsCOMPtr() 	mozilla/layout/build/nsContentDLF.cpp:542
26 	nsINode::~nsINode() 	mozilla/content/base/src/nsGenericElement.cpp:183
27 	nsIContent::~nsIContent() 	mozilla/content/base/src/nsGenericDOMDataNode.cpp:72
28 	nsGenericDOMDataNode::~nsGenericDOMDataNode() 	mozilla/content/base/src/nsGenericDOMDataNode.cpp:77
29 	nsTextNode::~nsTextNode() 	mozilla/content/base/src/nsTextNode.cpp:174
30 	nsNodeUtils::LastRelease(nsINode*) 	mozilla/content/base/src/nsNodeUtils.cpp:245
31 	nsGenericDOMDataNode::Release() 	mozilla/content/base/src/nsGenericDOMDataNode.cpp:114
32 	nsTextNode::Release() 	mozilla/content/base/src/nsTextNode.cpp:177
33 	nsCOMPtr_base::~nsCOMPtr_base() 	nsCOMPtr.cpp:81
34 	nsCOMPtr<nsIDOMNode>::~nsCOMPtr() 	mozilla/embedding/components/find/src/nsWebBrowserFind.cpp:542
35 	nsFind::~nsFind() 	mozilla/embedding/components/find/src/nsFind.cpp:523
36 	nsFind::Release() 	mozilla/embedding/components/find/src/nsFind.cpp:487
37 	nsCOMPtr_base::~nsCOMPtr_base() 	nsCOMPtr.cpp:81
38 	nsCOMPtr<nsIFind>::~nsCOMPtr() 	mozilla/extensions/typeaheadfind/src/nsTypeAheadFind.cpp:542
39 	nsTypeAheadFind::~nsTypeAheadFind() 	mozilla/extensions/typeaheadfind/src/nsTypeAheadFind.cpp:173
40 	nsTypeAheadFind::Release() 	mozilla/extensions/typeaheadfind/src/nsTypeAheadFind.cpp:127
41 	nsTypeAheadFind::ReleaseInstance() 	mozilla/extensions/typeaheadfind/src/nsTypeAheadFind.cpp:240
42 	TypeAheadFindModuleDtor(nsIModule*) 	mozilla/extensions/typeaheadfind/src/nsTypeAheadFindRegistration.cpp:90
43 	nsGenericModule::Shutdown() 	nsGenericFactory.cpp:340
44 	nsGenericModule::~nsGenericModule() 	nsGenericFactory.cpp:237
45 	nsGenericModule::Release() 	nsGenericFactory.cpp:245
46 	nsCOMPtr_base::assign_assuming_AddRef(nsISupports*) 	nsCOMPtr.cpp:531
47 	nsCOMPtr_base::assign_with_AddRef(nsISupports*) 	nsCOMPtr.cpp:89
48 	nsCOMPtr<nsIModule>::operator=(nsIModule*) 	mozilla/xpcom/components/nsNativeComponentLoader.cpp:713
49 	nsNativeModuleLoader::ReleaserFunc(nsIHashable*, nsNativeModuleLoader::NativeLoadData&, void*) 	mozilla/xpcom/components/nsNativeComponentLoader.cpp:219
50 	nsBaseHashtable<nsHashableHashKey, nsNativeModuleLoader::NativeLoadData, nsNativeModuleLoader::NativeLoadData>::s_EnumStub(PLDHashTable*, PLDHashEntryHdr*, unsigned int, void*) 	mozilla/xpcom/components/nsNativeComponentLoader.cpp:346
51 	PL_DHashTableEnumerate 	pldhash.c:724
52 	nsBaseHashtable<nsHashableHashKey, nsNativeModuleLoader::NativeLoadData, nsNativeModuleLoader::NativeLoadData>::Enumerate(PLDHashOperator (*)(nsIHashable*, nsNativeModuleLoader::NativeLoadData&, void*), void*) 	mozilla/xpcom/components/nsNativeComponentLoader.cpp:221
53 	nsNativeModuleLoader::UnloadLibraries() 	mozilla/xpcom/components/nsNativeComponentLoader.cpp:258
54 	nsComponentManagerImpl::Shutdown() 	mozilla/xpcom/components/nsComponentManager.cpp:743
55 	NS_ShutdownXPCOM_P 	mozilla/xpcom/build/nsXPComInit.cpp:810
56 	ScopedXPCOMStartup::~ScopedXPCOMStartup() 	mozilla/toolkit/xre/nsAppRunner.cpp:904
57 	XRE_main 	mozilla/toolkit/xre/nsAppRunner.cpp:3190
58 	main 	mozilla/suite/app/nsSuiteApp.cpp:103
59 	libc-2.6.1.so@0x15fdf

Comment 1

[Mark Banner (:standard8)]

Err, guess you forgot about your bug 414559?

Comment 2

[Tony Mechelynck [:tonymec]]

(In reply to comment #1)
> Err, guess you forgot about your bug 414559?

<blush>err, apparently I did. It looks like either I don't get hit by this bug often enough to remember it, or it isn't specific enough for me to notice it as something I already had.</blush>

> 
> *** This bug has been marked as a duplicate of bug 414559 ***
> 

Verified dup.