Bookmarks-> Organize Bookmarks freezes/crashes the Browser [@ nsLineBreaker::FlushCurrentWord] [@ memcpy]

VERIFIED FIXED

Status

()

--
critical
VERIFIED FIXED
10 years ago
7 years ago

People

(Reporter: stevee, Unassigned)

Tracking

(Blocks: 1 bug, {crash, hang, regression})

Trunk
x86
Windows XP
crash, hang, regression
Points:
---
Dependency tree / graph

Firefox Tracking Flags

(Not tracked)

Details

(crash signature)

Attachments

(1 attachment, 1 obsolete attachment)

(Reporter)

Description

10 years ago
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1a2pre) Gecko/2008080504 Minefield/3.1a2pre ID:2008080504

Same as bug 447884, but a regression for tonight's build.

1. New profile, start firefox
2. Bookmarks > Organize Bookmarks

Expected:
- Organize Bookmarks UI

Actual:
- Browser hangs
Flags: blocking-firefox3.1?

Comment 1

10 years ago
Sorry if Places is not right.  I can't figure out what is supposed to be filed where since there is a Bookmarks & History and Places.
Component: General → Places
QA Contact: general → places

Comment 2

10 years ago
Still crashing - tried with Gecko/2008080505 Minefield/3.1a2pre - Build ID: 2008080505
(Reporter)

Comment 3

10 years ago
No Hanging:
firefox-3.1a2pre.en-US.win32 04-Aug-2008 1625
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1a2pre) Gecko/2008080415 Minefield/3.1a2pre

Hanging:
firefox-3.1a2pre.en-US.win32 04-Aug-2008 1731
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1a2pre) Gecko/2008080416 Minefield/3.1a2pre

Now to work out how to get a checkin range :-)
(Reporter)

Comment 4

10 years ago
Now, if I've done my range-finding properly, then this bug is caused by one of these changesets:

6ad2e5aa3c64	Merge Quotes and CounterData storage types into ValuePairList. (Bug 322475) r+sr=bzbarsky

85a9eb44b240	Make scrollbars not be reflow roots anymore, since they don't obey all the invariants needed. (Bug 366791) r+sr=bzbarsky

49dbf253c174	Untabify the few lines with tabs in nsStyleStruct.h

8666db48bea6	Label types of nsStyleCoord and nsStyleSides. b=443057 r+sr=bzbarsky

However it's perfectly possible I've messed the range up because this stuff isn't simple anymore. Cc'ng bz since he's involved in all three of the patches that made code changes.
(Reporter)

Comment 5

10 years ago
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1a2pre) Gecko/2008080504 Minefield/3.1a2pre ID:2008080504

Actually, if do the STR in comment 0 but leave the browser long enough, it actually crashes.

http://crash-stats.mozilla.com/report/index/7df86c2b-6310-11dd-88f4-001a4bd43ef6?p=1

Signature	nsLineBreaker::FlushCurrentWord()
UUID	7df86c2b-6310-11dd-88f4-001a4bd43ef6
Time	2008-08-05 10:01:35-07:00
Uptime	41
Product	Firefox
Version	3.1a2pre
Build ID	2008080504
OS	Windows NT
OS Version	5.1.2600 Service Pack 2
CPU	x86
CPU Info	AuthenticAMD family 6 model 8 stepping 1
Crash Reason	EXCEPTION_STACK_OVERFLOW
Crash Address	0x1010b46b
Comments	bug 449221

Frame  	Module  	Signature [Expand]  	Source
0 	xul.dll 	nsLineBreaker::FlushCurrentWord 	content/base/src/nsLineBreaker.cpp:77
1 	xul.dll 	nsTArray<nsLineBreaker::TextItem>::AppendElements<nsLineBreaker::TextItem> 	obj-firefox/dist/include/xpcom/nsTArray.h:554
2 	xul.dll 	xul.dll@0x2895ab
Keywords: crash
Summary: Bookmarks-> Organize Bookmarks freezes the Browser - The Return → Bookmarks-> Organize Bookmarks freezes/crashes the Browser [@ nsLineBreaker::FlushCurrentWord]
(Reporter)

Comment 6

10 years ago
Two more crash stacks, this time at memcpy

Signature	memcpy
UUID	0044efe3-6313-11dd-9221-001321b13766
Time	2008-08-05 10:20:14-07:00
Uptime	37
Product	Firefox
Version	3.1a2pre
Build ID	2008080504
OS	Windows NT
OS Version	5.1.2600 Service Pack 2
CPU	x86
CPU Info	AuthenticAMD family 6 model 8 stepping 1
Crash Reason	EXCEPTION_STACK_OVERFLOW
Crash Address	0x78148333
Comments	

Frame  	Module  	Signature [Expand]  	Source
0 	mozcrt19.dll 	memcpy 	memcpy.asm:113
1 	xul.dll 	xul.dll@0x30b0c1 	
2 		@0x3775b 	





Signature	memcpy
UUID	412c2d7d-6313-11dd-a2f4-001a4bd43e5c
Time	2008-08-05 10:22:03-07:00
Uptime	103
Product	Firefox
Version	3.1a2pre
Build ID	2008080504
OS	Windows NT
OS Version	5.1.2600 Service Pack 2
CPU	x86
CPU Info	AuthenticAMD family 6 model 8 stepping 1
Crash Reason	EXCEPTION_STACK_OVERFLOW
Crash Address	0x78148333
Comments	

Frame  	Module  	Signature [Expand]  	Source
0 	mozcrt19.dll 	memcpy 	memcpy.asm:113
1 	xul.dll 	xul.dll@0x30b0c1 	
2 		@0x3775b 
Summary: Bookmarks-> Organize Bookmarks freezes/crashes the Browser [@ nsLineBreaker::FlushCurrentWord] → Bookmarks-> Organize Bookmarks freezes/crashes the Browser [@ nsLineBreaker::FlushCurrentWord] [@ memcpy]
This worksforme on mac.  Could be dependent on Windows native theme stuff, I guess....

I really wish the breakpad stacks had something to do with reality.  Say the stack to the actual stack overflow?  That would let us know what's going one.
Bernd got this in a debugger.  The infinite recursion looks like this:

 	PresShell::ProcessReflowCommands(int aInterruptible=0)  Line 6449
 	PresShell::DoFlushPendingNotifications(mozFlushType aType=Flush_Layout,
          int aInterruptibleReflow=0)  Line 4589
 	PresShell::FlushPendingNotifications(mozFlushType aType=Flush_Layout)
          Line 4525
 	PresShell::HandlePostedReflowCallbacks()  Line 4489
 	PresShell::DidDoReflow()  Line 6260
 	PresShell::ProcessReflowCommands(int aInterruptible=0)  Line 6449

So at a guess, scrollbars are posting reflow callbacks that then reflow the scrollbar, etc, etc.
Blocks: 366791

Comment 9

10 years ago
Created attachment 332403 [details]
stack

I just updated my build after my checkin from yesterday. Without the update it was OK, now it hangs and I just stopped the debugger to see where it hangs
Can you get a stack for where the reflow callbacks are being posted?
I you are having difficulty reproducing this with Bookmarks -> Organize Bookmarks, I find it crashes much more reliable by right clicking on a bookmark and selecting Properties from the context menu.

Comment 12

10 years ago
^^ Yes, that is the only way it hangs for me.
Sorry, cannot reproduce it with Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1a2pre) Gecko/2008080504 Minefield/3.1a2pre. I can open the Library and Firefox doesn't hang/crash.

Comment 14

10 years ago
It crashes everytime when i try to right click on a bookmark and select properties from the context menu.

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1a2pre) Gecko/2008080603 Minefield/3.1a2pre
Not-responding, crash on Vista HP SP1 also:

Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.1a2pre) Gecko/2008080603 Minefield/3.1a2pre Firefox/3.0 ID:2008080603
Created attachment 332584 [details]
stack showing the problem
Attachment #332403 - Attachment is obsolete: true
Attachment #332584 - Attachment is patch: false
I backed out bug 366791.
Status: NEW → RESOLVED
Last Resolved: 10 years ago
Resolution: --- → FIXED
(Reporter)

Updated

10 years ago
Flags: blocking-firefox3.1?
Ok, I also crash that way.

David, do you know why the stack sent by breakpad is still totally empty? This interferes my work all the last days. As example: bp-e31b3333-63f9-11dd-a25d-001cc4e2bf68
Severity: normal → critical
Someone should probably file a breakpad bug here, fwiw...
(In reply to comment #19)
> Someone should probably file a breakpad bug here, fwiw...

Sorry for using this bug but could it be related to bug 411171 or bug 445090 which are already filed for Thunderbird?
No.  Those are bugs that would cause no symbols to be available for the build; in this case a certain type of crash produces unusable reports.
(In reply to comment #18)
> Ok, I also crash that way.
> 
> David, do you know why the stack sent by breakpad is still totally empty? This
> interferes my work all the last days. As example:
> bp-e31b3333-63f9-11dd-a25d-001cc4e2bf68
> 

That report looks fine to me right now. Perhaps it just got delayed in processing?

In fact, since it was a stack overflow, it probably took significant time to process, so you saw it as it was mid-processing, in which case you want bug 422945 to be fixed.

Updated

10 years ago
Duplicate of this bug: 449385
(Reporter)

Comment 24

10 years ago
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1a2pre) Gecko/20080808031528 Minefield/3.1a2pre ID:20080808031528
-->VERIFIED
Status: RESOLVED → VERIFIED
Bug 451915 - move Firefox/Places bugs to Firefox/Bookmarks and History. Remove all bugspam from this move by filtering for the string "places-to-b-and-h".

In Thunderbird 3.0b, you do that as follows:
Tools | Message Filters
Make sure the correct account is selected. Click "New"
Conditions: Body   contains   places-to-b-and-h
Change the action to "Delete Message".
Select "Manually Run" from the dropdown at the top.
Click OK.

Select the filter in the list, make sure "Inbox" is selected at the bottom, and click "Run Now". This should delete all the bugspam. You can then delete the filter.

Gerv
Component: Places → Bookmarks & History
QA Contact: places → bookmarks
(Assignee)

Updated

7 years ago
Crash Signature: [@ nsLineBreaker::FlushCurrentWord] [@ memcpy]
You need to log in before you can comment on or make changes to this bug.