Closed Bug 421065 Opened 16 years ago Closed 12 years ago

OOM [@ gfxTextRun::operator new - gfxTextRun::Create]

Categories

(Core :: Graphics, defect)

defect
Not set
critical

Tracking

()

RESOLVED WORKSFORME

People

(Reporter: timeless, Assigned: timeless)

References

()

Details

(Keywords: crash, intermittent-failure, testcase, Whiteboard: [sg:dos])

Crash Data

Attachments

(1 file)

0:000> dv
          aSize = 0x60603278
        aLength = 0x12b2b0
         aFlags = 0x25b00008
0:000> kL 7
ChildEBP RetAddr  
0012b104 60024b1b kernel32!RaiseException+0x53
0012b13c 6002d503 MOZCRT19!_CxxThrowException+0x46
0012b154 60621502 MOZCRT19!operator new+0x73
0012b15c 606214b7 xul!gfxTextRun::operator new+0x26
0012b170 60603278 xul!gfxTextRun::Create+0x10
0012b248 604f8f30 xul!gfxWindowsFontGroup::MakeTextRun+0x30
0012b7a4 605fe24f xul!TextRunWordCache::MakeTextRun+0x1b0
Product: Core → Core Graveyard
A very similar crash happened on Talos:

http://tinderbox.mozilla.org/showlog.cgi?log=Firefox/1248619272.1248624298.24142.gz
Linux mozilla-central talos nochrome on 2009/07/26 07:41:12

Let's revive this from the graveyard.

Operating system: Linux
                  0.0.0 Linux 2.6.22-14-generic #1 SMP Sun Oct 14 23:05:12 GMT 2007 i686 GNU/Linux
CPU: x86
     GenuineIntel family 10 model 15 stepping 2
     2 CPUs

Crash reason:  SIGABRT
Crash address: 0xffffe410

Thread 0 (crashed)
 0  0xffffe410
    eip = 0xffffe410   esp = 0xbfe1e2e0   ebp = 0xbfe1e2fc   ebx = 0x00001923
    esi = 0x00001923   edi = 0xb671bff4   eax = 0x00000000   ecx = 0x00001923
    edx = 0x00000006   efl = 0x00200202
 1  libc-2.6.1.so + 0x2c200
    eip = 0xb6602201   esp = 0xbfe1e304   ebp = 0xbfe1e428
 2  libstdc++.so.6.0.9 + 0xbb6df
    eip = 0xb67e66e0   esp = 0xbfe1e430   ebp = 0xbfe1e468
 3  libstdc++.so.6.0.9 + 0xb8f64
    eip = 0xb67e3f65   esp = 0xbfe1e470   ebp = 0xbfe1e488
 4  libstdc++.so.6.0.9 + 0xb8fa1
    eip = 0xb67e3fa2   esp = 0xbfe1e490   ebp = 0xbfe1e498
 5  libstdc++.so.6.0.9 + 0xb90c9
    eip = 0xb67e40ca   esp = 0xbfe1e4a0   ebp = 0xbfe1e4b8
 6  libstdc++.so.6.0.9 + 0xb96fd
    eip = 0xb67e46fe   esp = 0xbfe1e4c0   ebp = 0xbfe1e4e8
 7  libstdc++.so.6.0.9 + 0xb97dc
    eip = 0xb67e47dd   esp = 0xbfe1e4f0   ebp = 0xbfe1e508
 8  libxul.so!gfxTextRun::operator new(unsigned int, unsigned int, unsigned int) [gfxFont.cpp:3be80d01d27b : 1380 + 0x8]
    eip = 0xb7bcf10c   esp = 0xbfe1e510   ebp = 0xbfe1e528
 9  libxul.so!gfxTextRun::Create(gfxTextRunFactory::Parameters const*, void const*, unsigned int, gfxFontGroup*, unsigned int) [gfxFont.cpp:3be80d01d27b : 1367 + 0xa]
    eip = 0xb7bcfb12   esp = 0xbfe1e530   ebp = 0xbfe1e558
10  libxul.so!gfxFontGroup::MakeSpaceTextRun(gfxTextRunFactory::Parameters const*, unsigned int) [gfxFont.cpp:3be80d01d27b : 1112 + 0x14]
    eip = 0xb7bd3941   esp = 0xbfe1e560   ebp = 0xbfe1e598
11  libxul.so!BuildTextRunsScanner::BuildTextRunForFrames(void*) [nsTextFrameThebes.cpp:3be80d01d27b : 457 + 0x10]
    eip = 0xb74e9425   esp = 0xbfe1e5a0   ebp = 0xbfe1f978
12  libxul.so!BuildTextRunsScanner::FlushFrames(int, int) [nsTextFrameThebes.cpp:3be80d01d27b : 1217 + 0x13]
    eip = 0xb74e953f   esp = 0xbfe1f980   ebp = 0xbfe209a8
13  libxul.so!BuildTextRunsScanner::ScanFrame(nsIFrame*) [nsTextFrameThebes.cpp:3be80d01d27b : 1368 + 0xc]
    eip = 0xb74e98a5   esp = 0xbfe209b0   ebp = 0xbfe209e8
14  libxul.so!BuildTextRunsScanner::ScanFrame(nsIFrame*) [nsTextFrameThebes.cpp:3be80d01d27b : 1408 + 0xa]
    eip = 0xb74e96c8   esp = 0xbfe209f0   ebp = 0xbfe20a28
15  libxul.so!nsTextFrame::EnsureTextRun(gfxContext*, nsIFrame*, nsLineList_iterator const*, unsigned int*) [nsTextFrameThebes.cpp:3be80d01d27b : 1123 + 0xe]
    eip = 0xb74e9b87   esp = 0xbfe20a30   ebp = 0xbfe20db8
16  libxul.so!nsTextFrame::Reflow(nsPresContext*, nsHTMLReflowMetrics&, nsHTMLReflowState const&, unsigned int&) [nsTextFrameThebes.cpp:3be80d01d27b : 6133 + 0x21]
    eip = 0xb74ec620   esp = 0xbfe20dc0   ebp = 0xbfe21068
17  libxul.so!nsLineLayout::ReflowFrame(nsIFrame*, unsigned int&, nsHTMLReflowMetrics*, int&) [nsLineLayout.cpp:3be80d01d27b : 844 + 0x12]
    eip = 0xb74cdc4c   esp = 0xbfe21070   ebp = 0xbfe211d8
18  libxul.so!nsBlockFrame::ReflowInlineFrame(nsBlockReflowState&, nsLineLayout&, nsLineList_iterator, nsIFrame*, LineReflowStatus*) [nsBlockFrame.cpp:3be80d01d27b : 3700 + 0xf]
    eip = 0xb749f2f5   esp = 0xbfe211e0   ebp = 0xbfe21238
19  libxul.so!nsBlockFrame::DoReflowInlineFrames(nsBlockReflowState&, nsLineLayout&, nsLineList_iterator, nsFlowAreaRect&, int&, nsFloatManager::SavedState*, int*, LineReflowStatus*, int) [nsBlockFrame.cpp:3be80d01d27b : 3516 + 0x17]
    eip = 0xb74a02c4   esp = 0xbfe21240   ebp = 0xbfe212b8
20  libxul.so!nsBlockFrame::ReflowInlineFrames(nsBlockReflowState&, nsLineList_iterator, int*) [nsBlockFrame.cpp:3be80d01d27b : 3366 + 0x29]
    eip = 0xb74a066b   esp = 0xbfe212c0   ebp = 0xbfe213d8
21  libxul.so!nsBlockFrame::ReflowLine(nsBlockReflowState&, nsLineList_iterator, int*) [nsBlockFrame.cpp:3be80d01d27b : 2410 + 0xc]
    eip = 0xb74a085c   esp = 0xbfe213e0   ebp = 0xbfe214a8
22  libxul.so!nsBlockFrame::ReflowDirtyLines(nsBlockReflowState&) [nsBlockFrame.cpp:3be80d01d27b : 1898 + 0x4]
    eip = 0xb74a0c69   esp = 0xbfe214b0   ebp = 0xbfe21558
23  libxul.so!nsBlockFrame::Reflow(nsPresContext*, nsHTMLReflowMetrics&, nsHTMLReflowState const&, unsigned int&) [nsBlockFrame.cpp:3be80d01d27b : 970 + 0x8]
    eip = 0xb74a165a   esp = 0xbfe21560   ebp = 0xbfe216f8
24  libxul.so!nsBlockReflowContext::ReflowBlock(nsRect const&, int, nsCollapsingMargin&, int, int, nsLineBox*, nsHTMLReflowState&, unsigned int&, nsBlockReflowState&) [nsBlockReflowContext.cpp:3be80d01d27b : 310 + 0x16]
    eip = 0xb74a23e9   esp = 0xbfe21700   ebp = 0xbfe21748
25  libxul.so!nsBlockFrame::ReflowFloat(nsBlockReflowState&, nsRect const&, nsPlaceholderFrame*, nsMargin&, unsigned int&) [nsBlockFrame.cpp:3be80d01d27b : 5837 + 0x2e]
    eip = 0xb749c982   esp = 0xbfe21750   ebp = 0xbfe218d8
26  libxul.so!nsBlockReflowState::FlowAndPlaceFloat(nsFloatCache*, unsigned int&, int) [nsBlockReflowState.cpp:3be80d01d27b : 812 + 0x1e]
    eip = 0xb74a36fe   esp = 0xbfe218e0   ebp = 0xbfe21a38
27  libxul.so!nsBlockReflowState::AddFloat(nsLineLayout&, nsPlaceholderFrame*, int, unsigned int&) [nsBlockReflowState.cpp:3be80d01d27b : 610 + 0xd]
    eip = 0xb74a3d9c   esp = 0xbfe21a40   ebp = 0xbfe21ac8
28  libxul.so!nsLineLayout::ReflowFrame(nsIFrame*, unsigned int&, nsHTMLReflowMetrics*, int&) [nsLineLayout.h:3be80d01d27b : 214 + 0x17]
    eip = 0xb74ce332   esp = 0xbfe21ad0   ebp = 0xbfe21c38
29  libxul.so!nsBlockFrame::ReflowInlineFrame(nsBlockReflowState&, nsLineLayout&, nsLineList_iterator, nsIFrame*, LineReflowStatus*) [nsBlockFrame.cpp:3be80d01d27b : 3700 + 0xf]
    eip = 0xb749f2f5   esp = 0xbfe21c40   ebp = 0xbfe21c98
30  libxul.so!nsBlockFrame::DoReflowInlineFrames(nsBlockReflowState&, nsLineLayout&, nsLineList_iterator, nsFlowAreaRect&, int&, nsFloatManager::SavedState*, int*, LineReflowStatus*, int) [nsBlockFrame.cpp:3be80d01d27b : 3516 + 0x17]
    eip = 0xb74a02c4   esp = 0xbfe21ca0   ebp = 0xbfe21d18
31  libxul.so!nsBlockFrame::ReflowInlineFrames(nsBlockReflowState&, nsLineList_iterator, int*) [nsBlockFrame.cpp:3be80d01d27b : 3366 + 0x29]
    eip = 0xb74a066b   esp = 0xbfe21d20   ebp = 0xbfe21e38
32  libxul.so!nsBlockFrame::ReflowLine(nsBlockReflowState&, nsLineList_iterator, int*) [nsBlockFrame.cpp:3be80d01d27b : 2410 + 0xc]
    eip = 0xb74a085c   esp = 0xbfe21e40   ebp = 0xbfe21f08
33  libxul.so!nsBlockFrame::ReflowDirtyLines(nsBlockReflowState&) [nsBlockFrame.cpp:3be80d01d27b : 1898 + 0x4]
    eip = 0xb74a0c69   esp = 0xbfe21f10   ebp = 0xbfe21fb8
34  libxul.so!nsBlockFrame::Reflow(nsPresContext*, nsHTMLReflowMetrics&, nsHTMLReflowState const&, unsigned int&) [nsBlockFrame.cpp:3be80d01d27b : 970 + 0x8]
    eip = 0xb74a165a   esp = 0xbfe21fc0   ebp = 0xbfe22158
35  libxul.so!nsBlockReflowContext::ReflowBlock(nsRect const&, int, nsCollapsingMargin&, int, int, nsLineBox*, nsHTMLReflowState&, unsigned int&, nsBlockReflowState&) [nsBlockReflowContext.cpp:3be80d01d27b : 310 + 0x16]
    eip = 0xb74a23e9   esp = 0xbfe22160   ebp = 0xbfe221a8
36  libxul.so!nsBlockFrame::ReflowFloat(nsBlockReflowState&, nsRect const&, nsPlaceholderFrame*, nsMargin&, unsigned int&) [nsBlockFrame.cpp:3be80d01d27b : 5837 + 0x2e]
    eip = 0xb749c982   esp = 0xbfe221b0   ebp = 0xbfe22338
37  libxul.so!nsBlockReflowState::FlowAndPlaceFloat(nsFloatCache*, unsigned int&, int) [nsBlockReflowState.cpp:3be80d01d27b : 812 + 0x1e]
    eip = 0xb74a36fe   esp = 0xbfe22340   ebp = 0xbfe22498
38  libxul.so!nsBlockReflowState::AddFloat(nsLineLayout&, nsPlaceholderFrame*, int, unsigned int&) [nsBlockReflowState.cpp:3be80d01d27b : 610 + 0xd]
    eip = 0xb74a3d9c   esp = 0xbfe224a0   ebp = 0xbfe22528
39  libxul.so!nsLineLayout::ReflowFrame(nsIFrame*, unsigned int&, nsHTMLReflowMetrics*, int&) [nsLineLayout.h:3be80d01d27b : 214 + 0x17]
    eip = 0xb74ce332   esp = 0xbfe22530   ebp = 0xbfe22698
40  libxul.so!nsBlockFrame::ReflowInlineFrame(nsBlockReflowState&, nsLineLayout&, nsLineList_iterator, nsIFrame*, LineReflowStatus*) [nsBlockFrame.cpp:3be80d01d27b : 3700 + 0xf]
    eip = 0xb749f2f5   esp = 0xbfe226a0   ebp = 0xbfe226f8
41  libxul.so!nsBlockFrame::DoReflowInlineFrames(nsBlockReflowState&, nsLineLayout&, nsLineList_iterator, nsFlowAreaRect&, int&, nsFloatManager::SavedState*, int*, LineReflowStatus*, int) [nsBlockFrame.cpp:3be80d01d27b : 3516 + 0x17]
    eip = 0xb74a02c4   esp = 0xbfe22700   ebp = 0xbfe22778
42  libxul.so!nsBlockFrame::ReflowInlineFrames(nsBlockReflowState&, nsLineList_iterator, int*) [nsBlockFrame.cpp:3be80d01d27b : 3366 + 0x29]
    eip = 0xb74a066b   esp = 0xbfe22780   ebp = 0xbfe22898
43  libxul.so!nsBlockFrame::ReflowLine(nsBlockReflowState&, nsLineList_iterator, int*) [nsBlockFrame.cpp:3be80d01d27b : 2410 + 0xc]
    eip = 0xb74a085c   esp = 0xbfe228a0   ebp = 0xbfe22968
44  libxul.so!nsBlockFrame::ReflowDirtyLines(nsBlockReflowState&) [nsBlockFrame.cpp:3be80d01d27b : 1898 + 0x4]
    eip = 0xb74a0c69   esp = 0xbfe22970   ebp = 0xbfe22a18
45  libxul.so!nsBlockFrame::Reflow(nsPresContext*, nsHTMLReflowMetrics&, nsHTMLReflowState const&, unsigned int&) [nsBlockFrame.cpp:3be80d01d27b : 970 + 0x8]
    eip = 0xb74a165a   esp = 0xbfe22a20   ebp = 0xbfe22bb8
46  libxul.so!nsBlockReflowContext::ReflowBlock(nsRect const&, int, nsCollapsingMargin&, int, int, nsLineBox*, nsHTMLReflowState&, unsigned int&, nsBlockReflowState&) [nsBlockReflowContext.cpp:3be80d01d27b : 310 + 0x16]
    eip = 0xb74a23e9   esp = 0xbfe22bc0   ebp = 0xbfe22c08
47  libxul.so!nsBlockFrame::ReflowFloat(nsBlockReflowState&, nsRect const&, nsPlaceholderFrame*, nsMargin&, unsigned int&) [nsBlockFrame.cpp:3be80d01d27b : 5837 + 0x2e]
    eip = 0xb749c982   esp = 0xbfe22c10   ebp = 0xbfe22d98
48  libxul.so!nsBlockReflowState::FlowAndPlaceFloat(nsFloatCache*, unsigned int&, int) [nsBlockReflowState.cpp:3be80d01d27b : 812 + 0x1e]
    eip = 0xb74a36fe   esp = 0xbfe22da0   ebp = 0xbfe22ef8
49  libxul.so!nsBlockReflowState::AddFloat(nsLineLayout&, nsPlaceholderFrame*, int, unsigned int&) [nsBlockReflowState.cpp:3be80d01d27b : 610 + 0xd]
    eip = 0xb74a3d9c   esp = 0xbfe22f00   ebp = 0xbfe22f88
50  libxul.so!nsLineLayout::ReflowFrame(nsIFrame*, unsigned int&, nsHTMLReflowMetrics*, int&) [nsLineLayout.h:3be80d01d27b : 214 + 0x17]
    eip = 0xb74ce332   esp = 0xbfe22f90   ebp = 0xbfe230f8
51  libxul.so!nsBlockFrame::ReflowInlineFrame(nsBlockReflowState&, nsLineLayout&, nsLineList_iterator, nsIFrame*, LineReflowStatus*) [nsBlockFrame.cpp:3be80d01d27b : 3700 + 0xf]
    eip = 0xb749f2f5   esp = 0xbfe23100   ebp = 0xbfe23158
52  libxul.so!nsBlockFrame::DoReflowInlineFrames(nsBlockReflowState&, nsLineLayout&, nsLineList_iterator, nsFlowAreaRect&, int&, nsFloatManager::SavedState*, int*, LineReflowStatus*, int) [nsBlockFrame.cpp:3be80d01d27b : 3516 + 0x17]
    eip = 0xb74a02c4   esp = 0xbfe23160   ebp = 0xbfe231d8
53  libxul.so!nsBlockFrame::ReflowInlineFrames(nsBlockReflowState&, nsLineList_iterator, int*) [nsBlockFrame.cpp:3be80d01d27b : 3366 + 0x29]
    eip = 0xb74a066b   esp = 0xbfe231e0   ebp = 0xbfe232f8
54  libxul.so!nsBlockFrame::ReflowLine(nsBlockReflowState&, nsLineList_iterator, int*) [nsBlockFrame.cpp:3be80d01d27b : 2410 + 0xc]
    eip = 0xb74a085c   esp = 0xbfe23300   ebp = 0xbfe233c8
55  libxul.so!nsBlockFrame::ReflowDirtyLines(nsBlockReflowState&) [nsBlockFrame.cpp:3be80d01d27b : 1898 + 0x4]
    eip = 0xb74a0c69   esp = 0xbfe233d0   ebp = 0xbfe23478
56  libxul.so!nsBlockFrame::Reflow(nsPresContext*, nsHTMLReflowMetrics&, nsHTMLReflowState const&, unsigned int&) [nsBlockFrame.cpp:3be80d01d27b : 970 + 0x8]
    eip = 0xb74a165a   esp = 0xbfe23480   ebp = 0xbfe23618
57  libxul.so!nsBlockReflowContext::ReflowBlock(nsRect const&, int, nsCollapsingMargin&, int, int, nsLineBox*, nsHTMLReflowState&, unsigned int&, nsBlockReflowState&) [nsBlockReflowContext.cpp:3be80d01d27b : 310 + 0x16]
    eip = 0xb74a23e9   esp = 0xbfe23620   ebp = 0xbfe23668
58  libxul.so!nsBlockFrame::ReflowFloat(nsBlockReflowState&, nsRect const&, nsPlaceholderFrame*, nsMargin&, unsigned int&) [nsBlockFrame.cpp:3be80d01d27b : 5837 + 0x2e]
    eip = 0xb749c982   esp = 0xbfe23670   ebp = 0xbfe237f8
59  libxul.so!nsBlockReflowState::FlowAndPlaceFloat(nsFloatCache*, unsigned int&, int) [nsBlockReflowState.cpp:3be80d01d27b : 812 + 0x1e]
    eip = 0xb74a36fe   esp = 0xbfe23800   ebp = 0xbfe23958
60  libxul.so!nsBlockReflowState::AddFloat(nsLineLayout&, nsPlaceholderFrame*, int, unsigned int&) [nsBlockReflowState.cpp:3be80d01d27b : 610 + 0xd]
    eip = 0xb74a3d9c   esp = 0xbfe23960   ebp = 0xbfe239e8
61  libxul.so!nsLineLayout::ReflowFrame(nsIFrame*, unsigned int&, nsHTMLReflowMetrics*, int&) [nsLineLayout.h:3be80d01d27b : 214 + 0x17]
    eip = 0xb74ce332   esp = 0xbfe239f0   ebp = 0xbfe23b58
62  libxul.so!nsBlockFrame::ReflowInlineFrame(nsBlockReflowState&, nsLineLayout&, nsLineList_iterator, nsIFrame*, LineReflowStatus*) [nsBlockFrame.cpp:3be80d01d27b : 3700 + 0xf]
    eip = 0xb749f2f5   esp = 0xbfe23b60   ebp = 0xbfe23bb8
63  libxul.so!nsBlockFrame::DoReflowInlineFrames(nsBlockReflowState&, nsLineLayout&, nsLineList_iterator, nsFlowAreaRect&, int&, nsFloatManager::SavedState*, int*, LineReflowStatus*, int) [nsBlockFrame.cpp:3be80d01d27b : 3516 + 0x17]
    eip = 0xb74a02c4   esp = 0xbfe23bc0   ebp = 0xbfe23c38
64  libxul.so!nsBlockFrame::ReflowInlineFrames(nsBlockReflowState&, nsLineList_iterator, int*) [nsBlockFrame.cpp:3be80d01d27b : 3366 + 0x29]
    eip = 0xb74a066b   esp = 0xbfe23c40   ebp = 0xbfe23d58
65  libxul.so!nsBlockFrame::ReflowLine(nsBlockReflowState&, nsLineList_iterator, int*) [nsBlockFrame.cpp:3be80d01d27b : 2410 + 0xc]
    eip = 0xb74a085c   esp = 0xbfe23d60   ebp = 0xbfe23e28
66  libxul.so!nsBlockFrame::ReflowDirtyLines(nsBlockReflowState&) [nsBlockFrame.cpp:3be80d01d27b : 1898 + 0x4]
    eip = 0xb74a0c69   esp = 0xbfe23e30   ebp = 0xbfe23ed8
67  libxul.so!nsBlockFrame::Reflow(nsPresContext*, nsHTMLReflowMetrics&, nsHTMLReflowState const&, unsigned int&) [nsBlockFrame.cpp:3be80d01d27b : 970 + 0x8]
    eip = 0xb74a165a   esp = 0xbfe23ee0   ebp = 0xbfe24078
68  libxul.so!nsBlockReflowContext::ReflowBlock(nsRect const&, int, nsCollapsingMargin&, int, int, nsLineBox*, nsHTMLReflowState&, unsigned int&, nsBlockReflowState&) [nsBlockReflowContext.cpp:3be80d01d27b : 310 + 0x16]
    eip = 0xb74a23e9   esp = 0xbfe24080   ebp = 0xbfe240c8
69  libxul.so!nsBlockFrame::ReflowBlockFrame(nsBlockReflowState&, nsLineList_iterator, int*) [nsBlockFrame.cpp:3be80d01d27b : 3083 + 0x3f]
    eip = 0xb749d9c9   esp = 0xbfe240d0   ebp = 0xbfe243a8
70  libxul.so!nsBlockFrame::ReflowLine(nsBlockReflowState&, nsLineList_iterator, int*) [nsBlockFrame.cpp:3be80d01d27b : 2355 + 0xc]
    eip = 0xb74a07b4   esp = 0xbfe243b0   ebp = 0xbfe24478
71  libxul.so!nsBlockFrame::ReflowDirtyLines(nsBlockReflowState&) [nsBlockFrame.cpp:3be80d01d27b : 1898 + 0x4]
    eip = 0xb74a0c69   esp = 0xbfe24480   ebp = 0xbfe24528
72  libxul.so!nsBlockFrame::Reflow(nsPresContext*, nsHTMLReflowMetrics&, nsHTMLReflowState const&, unsigned int&) [nsBlockFrame.cpp:3be80d01d27b : 970 + 0x8]
    eip = 0xb74a165a   esp = 0xbfe24530   ebp = 0xbfe246c8
73  libxul.so!nsContainerFrame::ReflowChild(nsIFrame*, nsPresContext*, nsHTMLReflowMetrics&, nsHTMLReflowState const&, int, int, unsigned int, unsigned int&, nsOverflowContinuationTracker*) [nsContainerFrame.cpp:3be80d01d27b : 825 + 0x17]
    eip = 0xb74a84dc   esp = 0xbfe246d0   ebp = 0xbfe24708
74  libxul.so!CanvasFrame::Reflow(nsPresContext*, nsHTMLReflowMetrics&, nsHTMLReflowState const&, unsigned int&) [nsHTMLFrame.cpp:3be80d01d27b : 653 + 0x34]
    eip = 0xb74c104d   esp = 0xbfe24710   ebp = 0xbfe248c8
75  libxul.so!nsContainerFrame::ReflowChild(nsIFrame*, nsPresContext*, nsHTMLReflowMetrics&, nsHTMLReflowState const&, int, int, unsigned int, unsigned int&, nsOverflowContinuationTracker*) [nsContainerFrame.cpp:3be80d01d27b : 825 + 0x17]
    eip = 0xb74a84dc   esp = 0xbfe248d0   ebp = 0xbfe24908
76  libxul.so!nsHTMLScrollFrame::ReflowScrolledFrame(ScrollReflowState*, int, int, nsHTMLReflowMetrics*, int) [nsGfxScrollFrame.cpp:3be80d01d27b : 544 + 0x1b]
    eip = 0xb74bbf2b   esp = 0xbfe24910   ebp = 0xbfe24a38
77  libxul.so!nsHTMLScrollFrame::ReflowContents(ScrollReflowState*, nsHTMLReflowMetrics const&) [nsGfxScrollFrame.cpp:3be80d01d27b : 638 + 0x17]
    eip = 0xb74be1d6   esp = 0xbfe24a40   ebp = 0xbfe24ae8
78  libxul.so!nsHTMLScrollFrame::Reflow(nsPresContext*, nsHTMLReflowMetrics&, nsHTMLReflowState const&, unsigned int&) [nsGfxScrollFrame.cpp:3be80d01d27b : 839 + 0x4]
    eip = 0xb74be4a0   esp = 0xbfe24af0   ebp = 0xbfe24bb8
79  libxul.so!nsContainerFrame::ReflowChild(nsIFrame*, nsPresContext*, nsHTMLReflowMetrics&, nsHTMLReflowState const&, int, int, unsigned int, unsigned int&, nsOverflowContinuationTracker*) [nsContainerFrame.cpp:3be80d01d27b : 825 + 0x17]
    eip = 0xb74a84dc   esp = 0xbfe24bc0   ebp = 0xbfe24bf8
80  libxul.so!ViewportFrame::Reflow(nsPresContext*, nsHTMLReflowMetrics&, nsHTMLReflowState const&, unsigned int&) [nsViewportFrame.cpp:3be80d01d27b : 281 + 0x1d]
    eip = 0xb74f0f0b   esp = 0xbfe24c00   ebp = 0xbfe24df8
81  libxul.so!PresShell::DoReflow(nsIFrame*, int) [nsPresShell.cpp:3be80d01d27b : 7181 + 0x18]
    eip = 0xb748aa57   esp = 0xbfe24e00   ebp = 0xbfe24f58
82  libxul.so!PresShell::ProcessReflowCommands(int) [nsPresShell.cpp:3be80d01d27b : 7312 + 0xa]
    eip = 0xb748ac92   esp = 0xbfe24f60   ebp = 0xbfe24f88
83  libxul.so!PresShell::FlushPendingNotifications(mozFlushType) [nsPresShell.cpp:3be80d01d27b : 4885 + 0x11]
    eip = 0xb748bf0e   esp = 0xbfe24f90   ebp = 0xbfe24fc8
84  libxul.so!PresShell::ReflowEvent::Run() [nsPresShell.cpp:3be80d01d27b : 6996 + 0x9]
    eip = 0xb748c9dc   esp = 0xbfe24fd0   ebp = 0xbfe24ff8
85  libxul.so!nsThread::ProcessNextEvent(int, int*) [nsThread.cpp:3be80d01d27b : 527 + 0xa]
    eip = 0xb7b9e4fc   esp = 0xbfe25000   ebp = 0xbfe25038
86  libxul.so!NS_ProcessNextEvent_P(nsIThread*, int) [nsThreadUtils.cpp : 230 + 0xd]
    eip = 0xb7b6d7b7   esp = 0xbfe25040   ebp = 0xbfe25068
87  libxul.so!nsBaseAppShell::Run() [nsBaseAppShell.cpp:3be80d01d27b : 170 + 0x9]
    eip = 0xb7ad62ba   esp = 0xbfe25070   ebp = 0xbfe25088
88  libxul.so!nsAppStartup::Run() [nsAppStartup.cpp:3be80d01d27b : 193 + 0x5]
    eip = 0xb79a47b2   esp = 0xbfe25090   ebp = 0xbfe250a8
89  libxul.so!XRE_main [nsAppRunner.cpp:3be80d01d27b : 3392 + 0xb]
    eip = 0xb72d825b   esp = 0xbfe250b0   ebp = 0xbfe25728
90  firefox-bin!main [nsBrowserApp.cpp:3be80d01d27b : 156 + 0xe]
    eip = 0x0804951a   esp = 0xbfe25730   ebp = 0xbfe25788
91  libc-2.6.1.so + 0x1604f
    eip = 0xb65ec050   esp = 0xbfe25790   ebp = 0xbfe257f8

Thread 1
 0  0xffffe410
    eip = 0xffffe410   esp = 0xb52ff2e4   ebp = 0xb52ff33c   ebx = 0xb5c6f048
    esi = 0xb52ff2f8   edi = 0x000007c9   eax = 0xfffffdfc   ecx = 0x00000000
    edx = 0x000007c9   efl = 0x00200286

Thread 2
 0  0xffffe410
    eip = 0xffffe410   esp = 0xb4afdf34   ebp = 0xb4afdf58   ebx = 0xb4afdf88
    esi = 0xffffffff   edi = 0xb671bff4   eax = 0xfffffffc   ecx = 0x00000001
    edx = 0xffffffff   efl = 0x00200246
 1  libnspr4.so!PR_Poll [ptio.c:3be80d01d27b : 3915 + 0x18]
    eip = 0xb701b2f9   esp = 0xb4afdf60   ebp = 0xb4afe198
 2  libxul.so!nsSocketTransportService::Poll(int, unsigned int*) [nsSocketTransportService2.cpp:3be80d01d27b : 359 + 0xa]
    eip = 0xb736cf0e   esp = 0xb4afe1a0   ebp = 0xb4afe1c8
 3  libxul.so!nsSocketTransportService::DoPollIteration(int) [nsSocketTransportService2.cpp:3be80d01d27b : 668 + 0xf]
    eip = 0xb736d800   esp = 0xb4afe1d0   ebp = 0xb4afe218
 4  libxul.so!nsSocketTransportService::OnProcessNextEvent(nsIThreadInternal*, int, unsigned int) [nsSocketTransportService2.cpp:3be80d01d27b : 543 + 0x9]
    eip = 0xb736da4c   esp = 0xb4afe220   ebp = 0xb4afe248
 5  libxul.so!nsThread::ProcessNextEvent(int, int*) [nsThread.cpp:3be80d01d27b : 508 + 0x1c]
    eip = 0xb7b9e4a2   esp = 0xb4afe250   ebp = 0xb4afe288
 6  libxul.so!NS_ProcessNextEvent_P(nsIThread*, int) [nsThreadUtils.cpp : 230 + 0xd]
    eip = 0xb7b6d7b7   esp = 0xb4afe290   ebp = 0xb4afe2b8
 7  libxul.so!nsSocketTransportService::Run() [nsSocketTransportService2.cpp:3be80d01d27b : 589 + 0xb]
    eip = 0xb736dbe3   esp = 0xb4afe2c0   ebp = 0xb4afe2f8
 8  libxul.so!nsThread::ProcessNextEvent(int, int*) [nsThread.cpp:3be80d01d27b : 527 + 0xa]
    eip = 0xb7b9e4fc   esp = 0xb4afe300   ebp = 0xb4afe338
 9  libxul.so!NS_ProcessNextEvent_P(nsIThread*, int) [nsThreadUtils.cpp : 230 + 0xd]
    eip = 0xb7b6d7b7   esp = 0xb4afe340   ebp = 0xb4afe368
10  libxul.so!nsThread::ThreadFunc(void*) [nsThread.cpp:3be80d01d27b : 254 + 0x9]
    eip = 0xb7b9e365   esp = 0xb4afe370   ebp = 0xb4afe3a8
11  libnspr4.so!_pt_root [ptthread.c:3be80d01d27b : 228 + 0x8]
    eip = 0xb701f5cd   esp = 0xb4afe3b0   ebp = 0xb4afe3c8
12  libpthread-2.6.1.so + 0x546a
    eip = 0xb7f1d46b   esp = 0xb4afe3d0   ebp = 0xb4afe4b8

Thread 3
 0  0xffffe410
    eip = 0xffffe410   esp = 0xb42fd234   ebp = 0xb42fd28c   ebx = 0xb5eb4248
    esi = 0xb42fd248   edi = 0x0002640d   eax = 0xfffffdfc   ecx = 0x00000000
    edx = 0x0002640d   efl = 0x00200286

Thread 4
 0  0xffffe410
    eip = 0xffffe410   esp = 0xb35731e4   ebp = 0xb357323c   ebx = 0xb3715f08
    esi = 0xb35731f8   edi = 0x00000d73   eax = 0xfffffdfc   ecx = 0x00000000
    edx = 0x00000d73   efl = 0x00200282

Thread 5
 0  0xffffe410
    eip = 0xffffe410   esp = 0xb2aff294   ebp = 0xb2aff2ec   ebx = 0xb38d2488
    esi = 0xb2aff2a8   edi = 0x00000009   eax = 0xfffffdfc   ecx = 0x00000000
    edx = 0x00000009   efl = 0x00200286

Thread 6
 0  0xffffe410
    eip = 0xffffe410   esp = 0xb20ff300   ebp = 0xb20ff348   ebx = 0xb2ca9b88
    esi = 0x00000000   edi = 0x00000001   eax = 0xfffffe00   ecx = 0x00000000
    edx = 0x00000001   efl = 0x00200286
 1  libxul.so!nsSSLThread::Run() [nsSSLThread.cpp:3be80d01d27b : 980 + 0xe]
    eip = 0xb79c4e7c   esp = 0xb20ff350   ebp = 0xb20ff388
 2  libxul.so!nsPSMBackgroundThread::nsThreadRunner(void*) [nsPSMBackgroundThread.cpp:3be80d01d27b : 44 + 0x4]
    eip = 0xb79c45b6   esp = 0xb20ff390   ebp = 0xb20ff3a8
 3  libnspr4.so!_pt_root [ptthread.c:3be80d01d27b : 228 + 0x8]
    eip = 0xb701f5cd   esp = 0xb20ff3b0   ebp = 0xb20ff3c8
 4  libpthread-2.6.1.so + 0x546a
    eip = 0xb7f1d46b   esp = 0xb20ff3d0   ebp = 0xb20ff4b8

Thread 7
 0  0xffffe410
    eip = 0xffffe410   esp = 0xb18fe310   ebp = 0xb18fe358   ebx = 0xb2ca9bc8
    esi = 0x00000000   edi = 0x00000001   eax = 0xfffffe00   ecx = 0x00000000
    edx = 0x00000001   efl = 0x00200282
 1  libxul.so!nsCertVerificationThread::Run() [nsCertVerificationThread.cpp:3be80d01d27b : 138 + 0xe]
    eip = 0xb79c5ee5   esp = 0xb18fe360   ebp = 0xb18fe388
 2  libxul.so!nsPSMBackgroundThread::nsThreadRunner(void*) [nsPSMBackgroundThread.cpp:3be80d01d27b : 44 + 0x4]
    eip = 0xb79c45b6   esp = 0xb18fe390   ebp = 0xb18fe3a8
 3  libnspr4.so!_pt_root [ptthread.c:3be80d01d27b : 228 + 0x8]
    eip = 0xb701f5cd   esp = 0xb18fe3b0   ebp = 0xb18fe3c8
 4  libpthread-2.6.1.so + 0x546a
    eip = 0xb7f1d46b   esp = 0xb18fe3d0   ebp = 0xb18fe4b8

Thread 8
 0  0xffffe410
    eip = 0xffffe410   esp = 0xb10fd260   ebp = 0xb10fd2a8   ebx = 0xb2ca9c08
    esi = 0x00000000   edi = 0x00000009   eax = 0xfffffe00   ecx = 0x00000000
    edx = 0x00000009   efl = 0x00200282
 1  libnspr4.so!PR_Wait [ptsynch.c:3be80d01d27b : 601 + 0x11]
    eip = 0xb70196c7   esp = 0xb10fd2b0   ebp = 0xb10fd2c8
 2  libxul.so!nsEventQueue::GetEvent(int, nsIRunnable**) [nsAutoLock.h : 340 + 0x9]
    eip = 0xb7b9d48c   esp = 0xb10fd2d0   ebp = 0xb10fd2f8
 3  libxul.so!nsThread::ProcessNextEvent(int, int*) [nsThread.h:3be80d01d27b : 112 + 0x11]
    eip = 0xb7b9e4d5   esp = 0xb10fd300   ebp = 0xb10fd338
 4  libxul.so!NS_ProcessNextEvent_P(nsIThread*, int) [nsThreadUtils.cpp : 230 + 0xd]
    eip = 0xb7b6d7b7   esp = 0xb10fd340   ebp = 0xb10fd368
 5  libxul.so!nsThread::ThreadFunc(void*) [nsThread.cpp:3be80d01d27b : 254 + 0x9]
    eip = 0xb7b9e365   esp = 0xb10fd370   ebp = 0xb10fd3a8
 6  libnspr4.so!_pt_root [ptthread.c:3be80d01d27b : 228 + 0x8]
    eip = 0xb701f5cd   esp = 0xb10fd3b0   ebp = 0xb10fd3c8
 7  libpthread-2.6.1.so + 0x546a
    eip = 0xb7f1d46b   esp = 0xb10fd3d0   ebp = 0xb10fd4b8

Thread 9
 0  0xffffe410
    eip = 0xffffe410   esp = 0xac1ff260   ebp = 0xac1ff2a8   ebx = 0xac26dcc8
    esi = 0x00000000   edi = 0x0000000f   eax = 0xfffffe00   ecx = 0x00000000
    edx = 0x0000000f   efl = 0x00200282
 1  libnspr4.so!PR_Wait [ptsynch.c:3be80d01d27b : 601 + 0x11]
    eip = 0xb70196c7   esp = 0xac1ff2b0   ebp = 0xac1ff2c8
 2  libxul.so!nsEventQueue::GetEvent(int, nsIRunnable**) [nsAutoLock.h : 340 + 0x9]
    eip = 0xb7b9d48c   esp = 0xac1ff2d0   ebp = 0xac1ff2f8
 3  libxul.so!nsThread::ProcessNextEvent(int, int*) [nsThread.h:3be80d01d27b : 112 + 0x11]
    eip = 0xb7b9e4d5   esp = 0xac1ff300   ebp = 0xac1ff338
 4  libxul.so!NS_ProcessNextEvent_P(nsIThread*, int) [nsThreadUtils.cpp : 230 + 0xd]
    eip = 0xb7b6d7b7   esp = 0xac1ff340   ebp = 0xac1ff368
 5  libxul.so!nsThread::ThreadFunc(void*) [nsThread.cpp:3be80d01d27b : 254 + 0x9]
    eip = 0xb7b9e365   esp = 0xac1ff370   ebp = 0xac1ff3a8
 6  libnspr4.so!_pt_root [ptthread.c:3be80d01d27b : 228 + 0x8]
    eip = 0xb701f5cd   esp = 0xac1ff3b0   ebp = 0xac1ff3c8
 7  libpthread-2.6.1.so + 0x546a
    eip = 0xb7f1d46b   esp = 0xac1ff3d0   ebp = 0xac1ff4b8

Loaded modules:
0x08048000 - 0x08055fff  firefox-bin  ???  (main)
0x08056000 - 0x08056fff  firefox-bin  ???
0xa7f31000 - 0xa8ffdfff  ukai.ttf  ???
0xaf304000 - 0xaf38efff  DejaVuSans.ttf  ???
0xafba1000 - 0xafe8dfff  dotum.ttf  ???
0xaff12000 - 0xafffffff  FreeSerif.ttf  ???
0xb0371000 - 0xb03e6fff  DejaVuSans-BoldOblique.ttf  ???
0xb0828000 - 0xb0864fff  DejaVuSerif.ttf  ???
0xb08c9000 - 0xb08e2fff  n019023l.pfb  ???
0xb08e3000 - 0xb08fcfff  n019003l.pfb  ???
0xb222a000 - 0xb2241fff  n019004l.pfb  ???
0xb2242000 - 0xb2254fff  libtotem-narrowspace-plugin.so  ???
0xb2255000 - 0xb2255fff  libtotem-narrowspace-plugin.so  ???
0xb2256000 - 0xb22e0fff  DejaVuSans.ttf  ???
0xb22e1000 - 0xb22fdfff  libnssdbm3.so  ???
0xb22fe000 - 0xb22fefff  libnssdbm3.so  ???
0xb2d06000 - 0xb2d12fff  libtotem-mully-plugin.so  ???
0xb2d13000 - 0xb2d13fff  libtotem-mully-plugin.so  ???
0xb2d14000 - 0xb2d28fff  libtotem-gmp-plugin.so  ???
0xb2d29000 - 0xb2d29fff  libtotem-gmp-plugin.so  ???
0xb2d2a000 - 0xb2d36fff  libtotem-basic-plugin.so  ???
0xb2d37000 - 0xb2d37fff  libtotem-basic-plugin.so  ???
0xb2d4e000 - 0xb2d54fff  libfam.so.0.0.0  ???
0xb2d55000 - 0xb2d55fff  libfam.so.0.0.0  ???
0xb2d56000 - 0xb2d5bfff  libacl.so.1.1.0  ???
0xb2d5c000 - 0xb2d5cfff  libacl.so.1.1.0  ???
0xb2d5d000 - 0xb2d5ffff  libattr.so.1.1.0  ???
0xb2d60000 - 0xb2d60fff  libattr.so.1.1.0  ???
0xb2d61000 - 0xb2d63fff  pango-hebrew-fc.so  ???
0xb2d64000 - 0xb2d64fff  pango-hebrew-fc.so  ???
0xb2d65000 - 0xb2d66fff  pango-hangul-fc.so  ???
0xb2d67000 - 0xb2d67fff  pango-hangul-fc.so  ???
0xb2d68000 - 0xb2d6cfff  pango-indic-fc.so  ???
0xb2d6d000 - 0xb2d6dfff  pango-indic-fc.so  ???
0xb2d6e000 - 0xb2d6efff  pango-indic-lang.so  ???
0xb2d6f000 - 0xb2d6ffff  pango-indic-lang.so  ???
0xb2d70000 - 0xb2d71fff  pango-arabic-fc.so  ???
0xb2d72000 - 0xb2d72fff  pango-arabic-fc.so  ???
0xb3574000 - 0xb3577fff  libpixbufloader-png.so  ???
0xb3578000 - 0xb3578fff  libpixbufloader-png.so  ???
0xb357a000 - 0xb357ffff  945677eb7aeaf62f1d50efc3fb3ec7d8-x86.cache-2  ???
0xb3580000 - 0xb3582fff  e383d7ea5fbe662a33d9b44caf393297-x86.cache-2  ???
0xb3583000 - 0xb3583fff  fd9505950c048a77dc4b710eb6a628ed-x86.cache-2  ???
0xb3584000 - 0xb3585fff  ddc79d3ea06a7c6ffa86ede85f3bb5df-x86.cache-2  ???
0xb3586000 - 0xb3586fff  e7071f4a29fa870f4323321c154eba04-x86.cache-2  ???
0xb3587000 - 0xb3587fff  a2ab74764b07279e7c36ddb1d302cf26-x86.cache-2  ???
0xb3588000 - 0xb358bfff  921a30a17f0be15c70ac14043cb7a739-x86.cache-2  ???
0xb358c000 - 0xb358cfff  c69f04ab05004e31a6d5e715764f16d8-x86.cache-2  ???
0xb358d000 - 0xb358dfff  4c73fe0c47614734b17d736dbde7580a-x86.cache-2  ???
0xb358e000 - 0xb358ffff  646addb8444faa74ee138aa00ab0b6a0-x86.cache-2  ???
0xb3590000 - 0xb3592fff  a755afe4a08bf5b97852ceb7400b47bc-x86.cache-2  ???
0xb3593000 - 0xb3594fff  20bd79ad97094406f7d1b9654bfbd926-x86.cache-2  ???
0xb3595000 - 0xb3595fff  75a2cd575a62c63e802c11411fb87c37-x86.cache-2  ???
0xb3596000 - 0xb3597fff  9c0624108b9a2ae8552f664125be8356-x86.cache-2  ???
0xb3598000 - 0xb359dfff  6d41288fd70b0be22e8c3a91e032eec0-x86.cache-2  ???
0xb359e000 - 0xb359ffff  de156ccd2eddbdc19d37a45b8b2aac9c-x86.cache-2  ???
0xb35a0000 - 0xb35a1fff  da1bd5ca8443ffe22927a23ce431d198-x86.cache-2  ???
0xb35a2000 - 0xb35a9fff  e3de0de479f42330eadf588a55fb5bf4-x86.cache-2  ???
0xb35aa000 - 0xb35affff  0f34bcd4b6ee430af32735b75db7f02b-x86.cache-2  ???
0xb35b0000 - 0xb35b0fff  4794a0821666d79190d59a36cb4f44b5-x86.cache-2  ???
0xb35b1000 - 0xb35b2fff  de9486f0b47a4d768a594cb4198cb1c6-x86.cache-2  ???
0xb35b3000 - 0xb35b8fff  d52a8644073d54c13679302ca1180695-x86.cache-2  ???
0xb35b9000 - 0xb35bbfff  6386b86020ecc1ef9690bb720a13964f-x86.cache-2  ???
0xb35bc000 - 0xb35bffff  089dead882dea3570ffc31a9898cfb69-x86.cache-2  ???
0xb35c0000 - 0xb35c1fff  e13b20fdb08344e0e664864cc2ede53d-x86.cache-2  ???
0xb35c2000 - 0xb35c2fff  e9e44584608a73233979f764b5f9dd81-x86.cache-2  ???
0xb35c3000 - 0xb35c3fff  b5a4f3f568a71026ccdc6a3a51afa9b4-x86.cache-2  ???
0xb35c4000 - 0xb35c6fff  b21a91cee725896328b8cee8091cf747-x86.cache-2  ???
0xb35c7000 - 0xb35cbfff  fd9416c4b92f07c6f59a3a8cf496e9dc-x86.cache-2  ???
0xb35cc000 - 0xb35cefff  059138ec877db160474b4d5de1248d14-x86.cache-2  ???
0xb35cf000 - 0xb35cffff  f5a93ac943883aa0fd9a7bfe0f6ec3c1-x86.cache-2  ???
0xb35d0000 - 0xb35d1fff  118d8d5311348bbdf5fe3b106d7c13d4-x86.cache-2  ???
0xb35d2000 - 0xb35d2fff  a1131b7be650f9abae4907495aa5815d-x86.cache-2  ???
0xb35d3000 - 0xb35d7fff  8ab5f685cd6d8ba67c37c908faf08172-x86.cache-2  ???
0xb35d8000 - 0xb35dbfff  0f32d3adc6a232110812e17374eaa446-x86.cache-2  ???
0xb35dc000 - 0xb35ddfff  7b4a97c10f6c0166998ddfa1cf7392fb-x86.cache-2  ???
0xb35de000 - 0xb35e0fff  61c830dfac3fd78a12654da5e9ba3f56-x86.cache-2  ???
0xb35e1000 - 0xb35e1fff  e0f9e95429e756d56293ed4d63866094-x86.cache-2  ???
0xb35e2000 - 0xb35e3fff  4123634e9c08547d899d0aaff05ebe69-x86.cache-2  ???
0xb35e4000 - 0xb35e7fff  142ecfc435bad6f1fbc2648c1119d5eb-x86.cache-2  ???
0xb35e8000 - 0xb35edfff  102e5142c2e9e50c5e8ece26694a2dad-x86.cache-2  ???
0xb35ee000 - 0xb35eefff  92a571655fb1c0ec1c4d6f496220600a-x86.cache-2  ???
0xb35ef000 - 0xb35f6fff  a960c40fc9306f090224a04585f8a963-x86.cache-2  ???
0xb35f7000 - 0xb35f8fff  9404ff413c67fc2a1526fd14eb4163a8-x86.cache-2  ???
0xb35f9000 - 0xb35fcfff  b3fedf7c409f006ca1a6fceffceb77cf-x86.cache-2  ???
0xb35fd000 - 0xb35fffff  6330322105e0c4105d7c7a6ea2974107-x86.cache-2  ???
0xb3a19000 - 0xb3a5efff  libnssckbi.so  ???
0xb3a5f000 - 0xb3a6bfff  libnssckbi.so  ???
0xb3a6c000 - 0xb3ab7fff  libfreebl3.so  ???
0xb3ab8000 - 0xb3ab8fff  libfreebl3.so  ???
0xb3ac9000 - 0xb3ad4fff  libfile.so  ???
0xb3ad5000 - 0xb3ad5fff  libfile.so  ???
0xb3ad6000 - 0xb3adafff  libdatrie.so.0.0.0  ???
0xb3adb000 - 0xb3adbfff  libdatrie.so.0.0.0  ???
0xb3adc000 - 0xb3ae1fff  libthai.so.0.1.1  ???
0xb3ae2000 - 0xb3ae2fff  libthai.so.0.1.1  ???
0xb3ae3000 - 0xb3ae4fff  pango-tibetan-fc.so  ???
0xb3ae5000 - 0xb3ae5fff  pango-tibetan-fc.so  ???
0xb3ae6000 - 0xb3ae7fff  pango-syriac-fc.so  ???
0xb3ae8000 - 0xb3ae8fff  pango-syriac-fc.so  ???
0xb3ae9000 - 0xb3aecfff  pango-thai-fc.so  ???
0xb3aed000 - 0xb3aedfff  pango-thai-fc.so  ???
0xb3aee000 - 0xb3aeefff  pango-thai-lang.so  ???
0xb3aef000 - 0xb3aeffff  pango-thai-lang.so  ???
0xb3af0000 - 0xb3af9fff  Loma.ttf  ???
0xb3afa000 - 0xb3afbfff  libXss.so.1.0.0  ???
0xb3afc000 - 0xb3afcfff  libXss.so.1.0.0  ???
0xb5500000 - 0xb5503fff  libnullplugin.so  ???
0xb5504000 - 0xb5504fff  libnullplugin.so  ???
0xb5509000 - 0xb550afff  pango-basic-fc.so  ???
0xb550b000 - 0xb550bfff  pango-basic-fc.so  ???
0xb550c000 - 0xb556bfff  SYSV00000000 (deleted)  ???
0xb556c000 - 0xb557dfff  libubuntulooks.so  ???
0xb557e000 - 0xb557efff  libubuntulooks.so  ???
0xb557f000 - 0xb55a2fff  libbrowsercomps.so  ???
0xb55a3000 - 0xb55a4fff  libbrowsercomps.so  ???
0xb55a5000 - 0xb55aefff  libimgicon.so  ???
0xb55af000 - 0xb55affff  libimgicon.so  ???
0xb55b0000 - 0xb55b7fff  libnkgnomevfs.so  ???
0xb55b8000 - 0xb55b8fff  libnkgnomevfs.so  ???
0xb55b9000 - 0xb55c1fff  libbrowserdirprovider.so  ???
0xb55c2000 - 0xb55c2fff  libbrowserdirprovider.so  ???
0xb55c3000 - 0xb55c8fff  libdbusservice.so  ???
0xb55c9000 - 0xb55c9fff  libdbusservice.so  ???
0xb55ca000 - 0xb55d2fff  libmozgnome.so  ???
0xb55d3000 - 0xb55d3fff  libmozgnome.so  ???
0xb55d4000 - 0xb55d7fff  libnss_dns-2.6.1.so  ???
0xb55d8000 - 0xb55d9fff  libnss_dns-2.6.1.so  ???
0xb55da000 - 0xb55dafff  pango-arabic-lang.so  ???
0xb55db000 - 0xb55dbfff  pango-arabic-lang.so  ???
0xb55dc000 - 0xb55e1fff  libnotify.so.1.1.2  ???
0xb55e2000 - 0xb55e2fff  libnotify.so.1.1.2  ???
0xb55e5000 - 0xb561afff  libsepol.so.1  ???
0xb561b000 - 0xb561bfff  libsepol.so.1  ???
0xb5626000 - 0xb5674fff  libgcrypt.so.11.2.3  ???
0xb5675000 - 0xb5676fff  libgcrypt.so.11.2.3  ???
0xb5677000 - 0xb5679fff  libgpg-error.so.0.3.0  ???
0xb567a000 - 0xb567afff  libgpg-error.so.0.3.0  ???
0xb567b000 - 0xb5689fff  libtasn1.so.3.0.9  ???
0xb568a000 - 0xb568afff  libtasn1.so.3.0.9  ???
0xb568b000 - 0xb568cfff  libutil-2.6.1.so  ???
0xb568d000 - 0xb568efff  libutil-2.6.1.so  ???
0xb568f000 - 0xb56a2fff  libselinux.so.1  ???
0xb56a3000 - 0xb56a4fff  libselinux.so.1  ???
0xb56a5000 - 0xb56b3fff  libresolv-2.6.1.so  ???
0xb56b4000 - 0xb56b5fff  libresolv-2.6.1.so  ???
0xb56b8000 - 0xb56c5fff  libavahi-client.so.3.2.2  ???
0xb56c6000 - 0xb56c6fff  libavahi-client.so.3.2.2  ???
0xb56c7000 - 0xb56d0fff  libavahi-common.so.3.4.4  ???
0xb56d1000 - 0xb56d1fff  libavahi-common.so.3.4.4  ???
0xb56d2000 - 0xb573bfff  libgnutls.so.13.3.0  ???
0xb573c000 - 0xb5741fff  libgnutls.so.13.3.0  ???
0xb5742000 - 0xb5761fff  libaudiofile.so.0.0.2  ???
0xb5762000 - 0xb5763fff  libaudiofile.so.0.0.2  ???
0xb5764000 - 0xb576cfff  libesd.so.0.2.38  ???
0xb576d000 - 0xb576dfff  libesd.so.0.2.38  ???
0xb576e000 - 0xb5774fff  libgailutil.so.18.0.1  ???
0xb5775000 - 0xb5775fff  libgailutil.so.18.0.1  ???
0xb5776000 - 0xb5794fff  libjpeg.so.62.0.0  ???
0xb5795000 - 0xb5795fff  libjpeg.so.62.0.0  ???
0xb5796000 - 0xb57defff  libORBit-2.so.0.1.0  ???
0xb57df000 - 0xb57e7fff  libORBit-2.so.0.1.0  ???
0xb57e9000 - 0xb5817fff  libgconf-2.so.4.1.2  ???
0xb5818000 - 0xb581afff  libgconf-2.so.4.1.2  ???
0xb581b000 - 0xb5870fff  libgnomevfs-2.so.0.2000.0  ???
0xb5871000 - 0xb5873fff  libgnomevfs-2.so.0.2000.0  ???
0xb5874000 - 0xb5886fff  libbonobo-activation.so.4.0.0  ???
0xb5887000 - 0xb5888fff  libbonobo-activation.so.4.0.0  ???
0xb5889000 - 0xb58dafff  libbonobo-2.so.0.0.0  ???
0xb58db000 - 0xb58e4fff  libbonobo-2.so.0.0.0  ???
0xb58e5000 - 0xb58f9fff  libart_lgpl_2.so.2.3.19  ???
0xb58fa000 - 0xb58fafff  libart_lgpl_2.so.2.3.19  ???
0xb58fb000 - 0xb590efff  libgnome-2.so.0.2000.0  ???
0xb590f000 - 0xb590ffff  libgnome-2.so.0.2000.0  ???
0xb5910000 - 0xb593efff  libgnomecanvas-2.so.0.2000.0  ???
0xb593f000 - 0xb593ffff  libgnomecanvas-2.so.0.2000.0  ???
0xb5940000 - 0xb599afff  libbonoboui-2.so.0.0.0  ???
0xb599b000 - 0xb599dfff  libbonoboui-2.so.0.0.0  ???
0xb599e000 - 0xb5ab5fff  libxml2.so.2.6.30  ???
0xb5ab6000 - 0xb5abafff  libxml2.so.2.6.30  ???
0xb5abc000 - 0xb5ac2fff  libnss_compat-2.6.1.so  ???
0xb5ac3000 - 0xb5ac4fff  libnss_compat-2.6.1.so  ???
0xb5ac5000 - 0xb5ac6fff  libavahi-glib.so.1.0.1  ???
0xb5ac7000 - 0xb5ac7fff  libavahi-glib.so.1.0.1  ???
0xb5ac8000 - 0xb5acefff  libpopt.so.0.0.0  ???
0xb5acf000 - 0xb5acffff  libpopt.so.0.0.0  ???
0xb5ad0000 - 0xb5b0efff  LC_CTYPE  ???
0xb5b0f000 - 0xb5b0ffff  LC_NUMERIC  ???
0xb5b10000 - 0xb5b10fff  LC_TIME  ???
0xb5b11000 - 0xb5bf0fff  LC_COLLATE  ???
0xb5bf1000 - 0xb5bf1fff  LC_MONETARY  ???
0xb5bf2000 - 0xb5bf2fff  SYS_LC_MESSAGES  ???
0xb5bf3000 - 0xb5bf3fff  LC_PAPER  ???
0xb5bf4000 - 0xb5bf4fff  LC_NAME  ???
0xb5bf5000 - 0xb5bf5fff  LC_ADDRESS  ???
0xb5bf6000 - 0xb5bf6fff  LC_TELEPHONE  ???
0xb5bf7000 - 0xb5bf7fff  LC_MEASUREMENT  ???
0xb5bf8000 - 0xb5bfefff  gconv-modules.cache  ???
0xb5bff000 - 0xb5bfffff  LC_IDENTIFICATION  ???
0xb6001000 - 0xb6004fff  libORBitCosNaming-2.so.0.1.0  ???
0xb6005000 - 0xb6005fff  libORBitCosNaming-2.so.0.1.0  ???
0xb6006000 - 0xb6012fff  libgnome-keyring.so.0.1.1  ???
0xb6013000 - 0xb6013fff  libgnome-keyring.so.0.1.1  ???
0xb6014000 - 0xb609bfff  libgnomeui-2.so.0.2000.1  ???
0xb609c000 - 0xb609ffff  libgnomeui-2.so.0.2000.1  ???
0xb60a4000 - 0xb60a5fff  libnss_mdns4_minimal.so.2  ???
0xb60a6000 - 0xb60a6fff  libnss_mdns4_minimal.so.2  ???
0xb60a7000 - 0xb60a8fff  UTF-16.so  ???
0xb60a9000 - 0xb60aafff  UTF-16.so  ???
0xb60ab000 - 0xb60abfff  ISO8859-1.so  ???
0xb60ac000 - 0xb60adfff  ISO8859-1.so  ???
0xb60ae000 - 0xb60b6fff  libnss_files-2.6.1.so  ???
0xb60b7000 - 0xb60b8fff  libnss_files-2.6.1.so  ???
0xb61bc000 - 0xb61c2fff  librt-2.6.1.so  ???
0xb61c3000 - 0xb61c4fff  librt-2.6.1.so  ???
0xb61c6000 - 0xb61dafff  libICE.so.6.3.0  ???
0xb61db000 - 0xb61dcfff  libICE.so.6.3.0  ???
0xb61de000 - 0xb61e4fff  libSM.so.6.0.0  ???
0xb61e5000 - 0xb61e5fff  libSM.so.6.0.0  ???
0xb61e6000 - 0xb61f9fff  libnsl-2.6.1.so  ???
0xb61fa000 - 0xb61fbfff  libnsl-2.6.1.so  ???
0xb61fe000 - 0xb621bfff  libexpat.so.1.0.0  ???
0xb621c000 - 0xb621dfff  libexpat.so.1.0.0  ???
0xb621f000 - 0xb6222fff  libXdmcp.so.6.0.0  ???
0xb6223000 - 0xb6223fff  libXdmcp.so.6.0.0  ???
0xb6224000 - 0xb6225fff  libXau.so.6.0.0  ???
0xb6226000 - 0xb6226fff  libXau.so.6.0.0  ???
0xb6227000 - 0xb6248fff  libpng12.so.0.15.0  ???
0xb6249000 - 0xb6249fff  libpng12.so.0.15.0  ???
0xb624a000 - 0xb625dfff  libz.so.1.2.3.3  ???
0xb625e000 - 0xb625efff  libz.so.1.2.3.3  ???
0xb625f000 - 0xb6266fff  libXcursor.so.1.0.2  ???
0xb6267000 - 0xb6267fff  libXcursor.so.1.0.2  ???
0xb6269000 - 0xb626dfff  libXrandr.so.2.1.0  ???
0xb626e000 - 0xb626efff  libXrandr.so.2.1.0  ???
0xb626f000 - 0xb6275fff  libXi.so.6.0.0  ???
0xb6276000 - 0xb6276fff  libXi.so.6.0.0  ???
0xb6277000 - 0xb6278fff  libXinerama.so.1.0.0  ???
0xb6279000 - 0xb6279fff  libXinerama.so.1.0.0  ???
0xb627a000 - 0xb627dfff  libXfixes.so.3.1.0  ???
0xb627e000 - 0xb627efff  libXfixes.so.3.1.0  ???
0xb627f000 - 0xb6280fff  libXdamage.so.1.1.0  ???
0xb6281000 - 0xb6281fff  libXdamage.so.1.1.0  ???
0xb6283000 - 0xb6284fff  libXcomposite.so.1.0.0  ???
0xb6285000 - 0xb6285fff  libXcomposite.so.1.0.0  ???
0xb6286000 - 0xb6289fff  libgthread-2.0.so.0.1400.1  ???
0xb628a000 - 0xb628afff  libgthread-2.0.so.0.1400.1  ???
0xb628b000 - 0xb62d7fff  libXt.so.6.0.0  ???
0xb62d8000 - 0xb62dbfff  libXt.so.6.0.0  ???
0xb62dc000 - 0xb6308fff  libpangoft2-1.0.so.0.1800.3  ???
0xb6309000 - 0xb6309fff  libpangoft2-1.0.so.0.1800.3  ???
0xb630a000 - 0xb6316fff  libXext.so.6.4.0  ???
0xb6317000 - 0xb6317fff  libXext.so.6.4.0  ???
0xb6319000 - 0xb634cfff  libdbus-1.so.3.3.0  ???
0xb634d000 - 0xb634dfff  libdbus-1.so.3.3.0  ???
0xb634e000 - 0xb6367fff  libdbus-glib-1.so.2.1.0  ???
0xb6368000 - 0xb6368fff  libdbus-glib-1.so.2.1.0  ???
0xb6369000 - 0xb638bfff  libfontconfig.so.1.2.0  ???
0xb638c000 - 0xb6393fff  libfontconfig.so.1.2.0  ???
0xb6394000 - 0xb63fffff  libfreetype.so.6.3.16  ???
0xb6400000 - 0xb6403fff  libfreetype.so.6.3.16  ???
0xb6404000 - 0xb640afff  libXrender.so.1.3.0  ???
0xb640b000 - 0xb640bfff  libXrender.so.1.3.0  ???
0xb640c000 - 0xb6438fff  libsoftokn3.so  ???
0xb6439000 - 0xb6439fff  libsoftokn3.so  ???
0xb643b000 - 0xb644bfff  libnssutil3.so  ???
0xb644c000 - 0xb644efff  libnssutil3.so  ???
0xb644f000 - 0xb651bfff  libnss3.so  ???
0xb651c000 - 0xb651ffff  libnss3.so  ???
0xb6521000 - 0xb6545fff  libssl3.so  ???
0xb6546000 - 0xb6547fff  libssl3.so  ???
0xb6548000 - 0xb6563fff  libsmime3.so  ???
0xb6564000 - 0xb6565fff  libsmime3.so  ???
0xb6566000 - 0xb65d2fff  libsqlite3.so  ???
0xb65d3000 - 0xb65d4fff  libsqlite3.so  ???
0xb65d6000 - 0xb6719fff  libc-2.6.1.so  ???
0xb671a000 - 0xb671afff  libc-2.6.1.so  ???
0xb671b000 - 0xb671cfff  libc-2.6.1.so  ???
0xb6720000 - 0xb6729fff  libgcc_s.so.1  ???
0xb672a000 - 0xb672afff  libgcc_s.so.1  ???
0xb672b000 - 0xb6812fff  libstdc++.so.6.0.9  ???
0xb6813000 - 0xb6815fff  libstdc++.so.6.0.9  ???
0xb6816000 - 0xb6817fff  libstdc++.so.6.0.9  ???
0xb681e000 - 0xb6840fff  libm-2.6.1.so  ???
0xb6841000 - 0xb6842fff  libm-2.6.1.so  ???
0xb6843000 - 0xb6903fff  libasound.so.2.0.0  ???
0xb6904000 - 0xb6908fff  libasound.so.2.0.0  ???
0xb690a000 - 0xb69f6fff  libX11.so.6.2.0  ???
0xb69f7000 - 0xb69fafff  libX11.so.6.2.0  ???
0xb69fb000 - 0xb6ab6fff  libglib-2.0.so.0.1400.1  ???
0xb6ab7000 - 0xb6ab7fff  libglib-2.0.so.0.1400.1  ???
0xb6ab8000 - 0xb6abafff  libgmodule-2.0.so.0.1400.1  ???
0xb6abb000 - 0xb6abbfff  libgmodule-2.0.so.0.1400.1  ???
0xb6abc000 - 0xb6af5fff  libgobject-2.0.so.0.1400.1  ???
0xb6af6000 - 0xb6af6fff  libgobject-2.0.so.0.1400.1  ???
0xb6af7000 - 0xb6b6bfff  libcairo.so.2.11.5  ???
0xb6b6c000 - 0xb6b6dfff  libcairo.so.2.11.5  ???
0xb6b6e000 - 0xb6ba8fff  libpango-1.0.so.0.1800.3  ???
0xb6ba9000 - 0xb6baafff  libpango-1.0.so.0.1800.3  ???
0xb6bac000 - 0xb6bb3fff  libpangocairo-1.0.so.0.1800.3  ???
0xb6bb4000 - 0xb6bb4fff  libpangocairo-1.0.so.0.1800.3  ???
0xb6bb5000 - 0xb6bcbfff  libgdk_pixbuf-2.0.so.0.1200.0  ???
0xb6bcc000 - 0xb6bccfff  libgdk_pixbuf-2.0.so.0.1200.0  ???
0xb6bcd000 - 0xb6c50fff  libgdk-x11-2.0.so.0.1200.0  ???
0xb6c51000 - 0xb6c53fff  libgdk-x11-2.0.so.0.1200.0  ???
0xb6c54000 - 0xb6c6cfff  libatk-1.0.so.0.2009.1  ???
0xb6c6d000 - 0xb6c6efff  libatk-1.0.so.0.2009.1  ???
0xb6c6f000 - 0xb6febfff  libgtk-x11-2.0.so.0.1200.0  ???
0xb6fec000 - 0xb6ff2fff  libgtk-x11-2.0.so.0.1200.0  ???
0xb6ff4000 - 0xb6ff5fff  libdl-2.6.1.so  ???
0xb6ff6000 - 0xb6ff7fff  libdl-2.6.1.so  ???
0xb6ff9000 - 0xb7027fff  libnspr4.so  ???
0xb7028000 - 0xb7028fff  libnspr4.so  ???
0xb702b000 - 0xb702dfff  libplc4.so  ???
0xb702e000 - 0xb702efff  libplc4.so  ???
0xb702f000 - 0xb7030fff  libplds4.so  ???
0xb7031000 - 0xb7031fff  libplds4.so  ???
0xb7032000 - 0xb7034fff  libxpcom.so  ???
0xb7035000 - 0xb7035fff  libxpcom.so  ???
0xb7036000 - 0xb7127fff  libmozjs.so  ???
0xb7128000 - 0xb712dfff  libmozjs.so  ???
0xb7130000 - 0xb7e0ffff  libxul.so  ???
0xb7e10000 - 0xb7f02fff  libxul.so  ???
0xb7f18000 - 0xb7f2bfff  libpthread-2.6.1.so  ???
0xb7f2c000 - 0xb7f2dfff  libpthread-2.6.1.so  ???
0xb7f31000 - 0xb7f38fff  libnss_nis-2.6.1.so  ???
0xb7f39000 - 0xb7f3afff  libnss_nis-2.6.1.so  ???
0xb7f3d000 - 0xb7f56fff  ld-2.6.1.so  ???
0xb7f57000 - 0xb7f58fff  ld-2.6.1.so  ???
Failed tp: 
		Stopped Sun, 26 Jul 2009 08:53:31
FAIL: Busted: tp
FAIL: crash during run (stack found)
Completed test tp: 
		Stopped Sun, 26 Jul 2009 08:53:31
Blocks: 438871
Component: GFX → GFX: Thebes
OS: Windows XP → All
Product: Core Graveyard → Core
QA Contact: general → thebes
Hardware: x86 → All
Whiteboard: [orange]
http://tinderbox.mozilla.org/showlog.cgi?log=Firefox/1248672861.1248678577.437.gz
Linux mozilla-central talos nochrome on 2009/07/26 22:34:21
Seems to be quite popular now.

http://tinderbox.mozilla.org/showlog.cgi?log=Firefox/1248728616.1248735545.13779.gz
Linux mozilla-central talos nochrome on 2009/07/27 14:03:36

http://tinderbox.mozilla.org/showlog.cgi?log=Firefox/1248718811.1248724976.22845.gz
Linux mozilla-central talos nochrome on 2009/07/27 11:20:11

http://tinderbox.mozilla.org/showlog.cgi?log=Firefox/1248716313.1248721872.18662.gz
Linux mozilla-central talos nochrome on 2009/07/27 10:38:33

http://tinderbox.mozilla.org/showlog.cgi?log=Firefox/1248706446.1248713747.21839.gz
Linux mozilla-central talos nochrome on 2009/07/27 07:54:06
(In reply to comment #3)
Sorry. That 3rd one is something else.
Linux mozilla-central talos nochrome on 2009/07/28 09:21:48
http://tinderbox.mozilla.org/showlog.cgi?log=Firefox/1248798108.1248805129.30130.gz

Linux mozilla-central talos nochrome on 2009/07/28 10:33:27  
http://tinderbox.mozilla.org/showlog.cgi?log=Firefox/1248802407.1248806437.27440.gz

Linux mozilla-central talos nochrome on 2009/07/28 10:50:33  
http://tinderbox.mozilla.org/showlog.cgi?log=Firefox/1248803433.1248806788.32121.gz
Linux mozilla-central talos nochrome on 2009/07/28 16:12:18  
http://tinderbox.mozilla.org/showlog.cgi?log=Firefox/1248822738.1248829101.8548.gz
http://tinderbox.mozilla.org/showlog.cgi?log=Firefox/1248837022.1248841174.6001.gz
Linux mozilla-central talos nochrome on 2009/07/28 20:10:22
http://tinderbox.mozilla.org/showlog.cgi?log=Firefox/1249489443.1249495089.26675.gz
Linux mozilla-central talos on 2009/08/05 09:24:03  

Did something change, either in our code or in our Talos setup that would cause this to happen more often?
http://tinderbox.mozilla.org/showlog.cgi?log=Firefox/1249656429.1249660682.10319.gz
Linux mozilla-central talos nochrome on 2009/08/07 07:47:09
http://tinderbox.mozilla.org/showlog.cgi?log=Firefox/1249667618.1249672553.16416.gz
Linux mozilla-central talos nochrome on 2009/08/07 10:53:38  


Do we really believe that what's happening on talos is an OOM crash?
This same stack is showing up in the wild, under RaiseException on Windows:
http://crash-stats.mozilla.com/report/index/4d4a9f9e-3cff-4da3-ace4-c43082090825
John, gfxTextRun::Create doesn't account for operator new throwing std::bad_alloc. We could solve this by just adding (std::nothrow) to our new calls, and then checking for null.

0   libSystem.B.dylib                   0x93c41732 __kill + 10
1   libSystem.B.dylib                   0x93c41724 kill$UNIX2003 + 32
2   libSystem.B.dylib                   0x93cd498d raise + 26
3   libSystem.B.dylib                   0x93ceaa44 abort + 93
4   libstdc++.6.dylib                   0x92e77fda __gnu_cxx::__verbose_terminate_handler() + 433
5   libstdc++.6.dylib                   0x92e7617a __cxxabiv1::__terminate(void (*)()) + 10
6   libstdc++.6.dylib                   0x92e761ba __cxxabiv1::__unexpected(void (*)()) + 0
7   libstdc++.6.dylib                   0x92e762b8 __gxx_exception_cleanup(_Unwind_Reason_Code, _Unwind_Exception*) + 0
8   libstdc++.6.dylib                   0x92e76658 operator new(unsigned long) + 101
9   libstdc++.6.dylib                   0x92e76703 operator new[](unsigned long) + 17
10  XUL                                 0x00b74e3a gfxTextRun::Create(gfxTextRunFactory::Parameters const*, void const*, unsigned int, gfxFontGroup*, unsigned int) + 58
11  XUL                                 0x00b8ba49 gfxAtsuiFontGroup::MakeTextRun(unsigned char const*, unsigned int, gfxTextRunFactory::Parameters const*, unsigned int) + 57
12  XUL                                 0x00b84007 gfxTextRunWordCache::MakeTextRun(unsigned short const*, unsigned int, gfxFontGroup*, gfxTextRunFactory::Parameters const*, unsigned int) + 2695
13  XUL                                 0x00b840a4 gfxTextRunWordCache::MakeTextRun(unsigned char const*, unsigned int, gfxFontGroup*, gfxTextRunFactory::Parameters const*, unsigned int) + 68
Keywords: testcase
Whiteboard: [orange] → [sg:dos][orange]
cjones just landed infallible new in bug 441324, and I think he said you want to use:
foo = new (fallible) whatever();
(but I'm not 100% sure)
Attached patch not testedSplinter Review
i'm going to test this after i pull+rebase+build, this will take around 10 hours. There are two flights in between in this sequence. So hopefully I'll know if this builds by Monday evening.
Assignee: nobody → timeless
Status: NEW → ASSIGNED
Attachment #487224 - Flags: review?(joe)
Comment on attachment 487224 [details] [diff] [review]
not tested

>-    return new gfxTextRun(aParams, aText, aLength, aFontGroup, aFlags, glyphStorage);
>+    return new (mozilla::fallible_t()) gfxTextRun(aParams, aText, aLength, aFontGroup, aFlags, glyphStorage);

I'm not sure we'd want to do this; we don't generally use fallible allocation except where web content may cause us to request an arbitrarily-large block, and we want to handle OOM gracefully than just aborting. Here, the gfxTextRun object is only about 50-60 bytes, IIRC; if we can't allocate that we're in deep trouble already.
Comment on attachment 487224 [details] [diff] [review]
not tested

As jfkthame said, drop the fallible_t for new gfxTextRun; the other is obviously correct though.
Attachment #487224 - Flags: review?(joe) → review-
Crash Signature: [@ gfxTextRun::operator new - gfxTextRun::Create]
ping, ping. looks like good work was happening here, please finish it.
Mass marking whiteboard:[orange] bugs WFM (to clean up TBPL bug suggestions) that:
* Haven't changed in > 6months
* Whose whiteboard contains none of the strings: {disabled,marked,random,fuzzy,todo,fails,failing,annotated,leave open,time-bomb}
* Passed a (quick) manual inspection of bug summary/whiteboard to ensure they weren't a false positive.

I've also gone through and searched for cases where the whiteboard wasn't labelled correctly after test disabling, by using attachment description & basic comment searches. However if the test for which this bug was about has in fact been disabled/annotated/..., please accept my apologies & reopen/mark the whiteboard appropriately so this doesn't get re-closed in the future (and please ping me via IRC or email so I can try to tweak the saved searches to avoid more edge cases).

Sorry for the spam! Filter on: #FFA500
Status: ASSIGNED → RESOLVED
Closed: 12 years ago
Resolution: --- → WORKSFORME
Whiteboard: [sg:dos][orange] → [sg:dos]
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: