432767 - Application Violation in [@ nsFrame::Destroy]

Status: RESOLVED INCOMPLETE

(Core :: Layout: Block and Inline, defect)

Description

[George V. Reilly]

User-Agent:       Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; .NET CLR 3.0.04506.648)
Build Identifier: Firefox 3.0 Beta 5

Crash happened over 12 hours. I'm not sure what I was doing. I think I was ctrl-tabbing to/from Google Reader.

0:000> kb
ChildEBP RetAddr  Args to Child              
WARNING: Frame IP not in any known module. Following frames may be wrong.
0012f968 6052615e 04949518 0566288c 056627d8 0x0
0012f988 605d1a73 0566279c 01c397b0 60596cc5 xul!nsFrame::Destroy+0x2e [e:\fx19rel\winnt_5.2_depend\mozilla\layout\generic\nsframe.cpp @ 492]
0012f994 60596cc5 01c397b0 0031b180 05662584 xul!nsLineBox::DeleteLineList+0x17 [e:\fx19rel\winnt_5.2_depend\mozilla\layout\generic\nslinebox.cpp @ 340]
0012f9b8 6049ed0a 05662540 00000000 60596cb4 xul!nsBlockFrame::Destroy+0x37 [e:\fx19rel\winnt_5.2_depend\mozilla\layout\generic\nsblockframe.cpp @ 303]
0012f9c4 60596cb4 0031b180 04ec64cc 00000000 xul!nsFrameList::DestroyFrames+0x1a [e:\fx19rel\winnt_5.2_depend\mozilla\layout\generic\nsframelist.cpp @ 67]
0012f9e4 6049ed0a 04ec6488 00000000 60596cb4 xul!nsBlockFrame::Destroy+0x26 [e:\fx19rel\winnt_5.2_depend\mozilla\layout\generic\nsblockframe.cpp @ 298]
0012f9f0 60596cb4 0031b180 04ec63f8 0542f580 xul!nsFrameList::DestroyFrames+0x1a [e:\fx19rel\winnt_5.2_depend\mozilla\layout\generic\nsframelist.cpp @ 67]
0012fa10 605d1a73 04ec63bc 0031b180 60596cc5 xul!nsBlockFrame::Destroy+0x26 [e:\fx19rel\winnt_5.2_depend\mozilla\layout\generic\nsblockframe.cpp @ 298]
0012fa1c 60596cc5 0031b180 0031b180 049497ec xul!nsLineBox::DeleteLineList+0x17 [e:\fx19rel\winnt_5.2_depend\mozilla\layout\generic\nslinebox.cpp @ 340]
0012fa40 605d1a73 049497b0 0031b180 60596cc5 xul!nsBlockFrame::Destroy+0x37 [e:\fx19rel\winnt_5.2_depend\mozilla\layout\generic\nsblockframe.cpp @ 303]
0012fa4c 60596cc5 0031b180 0031b180 0494946c xul!nsLineBox::DeleteLineList+0x17 [e:\fx19rel\winnt_5.2_depend\mozilla\layout\generic\nslinebox.cpp @ 340]
0012fa70 605d1a73 04949430 0031b180 60596cc5 xul!nsBlockFrame::Destroy+0x37 [e:\fx19rel\winnt_5.2_depend\mozilla\layout\generic\nsblockframe.cpp @ 303]
0012fa7c 60596cc5 0031b180 00000000 04233710 xul!nsLineBox::DeleteLineList+0x17 [e:\fx19rel\winnt_5.2_depend\mozilla\layout\generic\nslinebox.cpp @ 340]
0012faa0 6049ed0a 042336e0 04233850 6049ec76 xul!nsBlockFrame::Destroy+0x37 [e:\fx19rel\winnt_5.2_depend\mozilla\layout\generic\nsblockframe.cpp @ 303]
0012faac 6049ec76 04233850 042336e0 0012fad4 xul!nsFrameList::DestroyFrames+0x1a [e:\fx19rel\winnt_5.2_depend\mozilla\layout\generic\nsframelist.cpp @ 67]
0012fac4 605f7bfb 00000000 04c087d4 0012fb44 xul!nsContainerFrame::Destroy+0x26 [e:\fx19rel\winnt_5.2_depend\mozilla\layout\generic\nscontainerframe.cpp @ 260]
0012fad4 6049ed0a 04233820 04233684 6049ec76 xul!CanvasFrame::Destroy+0x3c [e:\fx19rel\winnt_5.2_depend\mozilla\layout\generic\nshtmlframe.cpp @ 206]
0012fae0 6049ec76 04233684 00000000 0012fb44 xul!nsFrameList::DestroyFrames+0x1a [e:\fx19rel\winnt_5.2_depend\mozilla\layout\generic\nsframelist.cpp @ 67]
0012faf8 6049ed0a 04233654 00000001 6049ec76 xul!nsContainerFrame::Destroy+0x26 [e:\fx19rel\winnt_5.2_depend\mozilla\layout\generic\nscontainerframe.cpp @ 260]
0012fb04 6049ec76 00000001 01bef41c 0012fb44 xul!nsFrameList::DestroyFrames+0x1a [e:\fx19rel\winnt_5.2_depend\mozilla\layout\generic\nsframelist.cpp @ 67]


Minidump will be attached in followup, since I can't add an attachment to initial report.

Reproducible: Didn't try

Comment 1

[George V. Reilly]

Attachment: Minidump from crash

Comment 2

[Jesse Ruderman]

Attachment: stack trace from comment 0 without the extra line breaks

Comment 3

[Jesse Ruderman]

Stack trace looks pretty normal to me, i.e. nothing that would indicate the cause of the crash :(