Closed Bug 484375 Opened 17 years ago Closed 17 years ago

Instant crash on daniweb.com blog entry [@ gfxTextRun::`vector deleting destructor'(unsigned int) ]

Categories

(Core :: Layout: Text and Fonts, defect, P2)

Product:
Core
Component:
Layout: Text and Fonts
Type:
defect

Tracking

()

Status:
VERIFIED FIXED
Milestone:
mozilla1.9.2a1

People

(Reporter: djst, Assigned: roc)

References

(
URL
)

Details

(Keywords: crash, regression, verified1.9.1)

Crash Data

http://crash-stats.mozilla.com/report/index/81b09b1c-2884-4270-9da5-214342090320 Frame Module Signature Source 0 xul.dll gfxTextRun::`vector deleting destructor'(unsigned int) 1 xul.dll xul.dll@0x398760
OS: Mac OS X → All
Hardware: x86 → All
Summary: Instant crash on daniweb.com blog entry → Instant crash on daniweb.com blog entry [@ gfxTextRun::`vector deleting destructor'(unsigned int) ]
It is also reproducible on Shiretoko. But only after the third attempt :(.
Component: General → Layout
Keywords: regression
Product: Firefox → Core
QA Contact: general → layout
Flags: blocking1.9.2?
Flags: blocking1.9.1?
Component: Layout → Layout: Text
QA Contact: layout → layout.fonts-and-text
sometimes crashing on load or more often on reload. Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1b4pre) Gecko/20090320 SeaMonkey/2.0b1pre http://crash-stats.mozilla.com/report/index/9d0e2af1-b3ae-4227-9688-bfd212090321?p=1 http://crash-stats.mozilla.com/report/index/d15754f3-543c-45e6-8166-703dd2090321?p=1 0 thebes.dll gfxFontEntry::Release objdir/mozilla/dist/include/thebes/gfxPattern.h:52 1 thebes.dll gfxTextRun::~gfxTextRun gfx/thebes/src/gfxFont.cpp:1402 2 thebes.dll gfxTextRun::`vector deleting destructor' 3 gklayout.dll nsTextFrame::ClearTextRun layout/generic/nsTextFrameThebes.cpp:3672 4 gklayout.dll nsContinuingTextFrame::Destroy layout/generic/nsTextFrameThebes.cpp:3472 5 gklayout.dll nsBlockFrame::DoRemoveFrame layout/generic/nsBlockFrame.cpp:5456 6 gklayout.dll nsBlockFrame::RemoveFrame layout/generic/nsBlockFrame.cpp:5047 7 gklayout.dll nsFrameManager::RemoveFrame layout/base/nsFrameManager.cpp:713 8 gklayout.dll nsCSSFrameConstructor::RemoveFloatingFirstLetterFrames layout/base/nsCSSFrameConstructor.cpp:12181 9 gklayout.dll nsCSSFrameConstructor::RemoveLetterFrames layout/base/nsCSSFrameConstructor.cpp:12297 10 gklayout.dll nsCSSFrameConstructor::CharacterDataChanged layout/base/nsCSSFrameConstructor.cpp:9853 11 gklayout.dll PresShell::CharacterDataChanged layout/base/nsPresShell.cpp:4645
2 identical ceashes on shiretoko: http://crash-stats.mozilla.com/report/index/7c6f52d9-4782-47ad-a04d-f1bce2090321?p=1 http://crash-stats.mozilla.com/report/index/355c567b-7cb3-4612-9e16-b129a2090321?p=1 0 xul.dll gfxTextRun::`vector deleting destructor' 1 xul.dll nsTextFrame::ClearTextRun layout/generic/nsTextFrameThebes.cpp:3672 2 xul.dll nsContinuingTextFrame::Destroy layout/generic/nsTextFrameThebes.cpp:3472 3 xul.dll nsBlockFrame::DoRemoveFrame layout/generic/nsBlockFrame.cpp:5456
Flags: blocking1.9.1? → blocking1.9.1+
Priority: -- → P2
I hope that the patch in bug 468491 fixes this, someone might check...
Assignee: nobody → roc
Whiteboard: [depends on 468491]
Depends on: 468491
Should be fixed now that 468491 is fixed. Please verify.
Status: NEW → RESOLVED
Closed: 17 years ago
Flags: blocking1.9.2?
Resolution: --- → FIXED
Whiteboard: [depends on 468491]
Still crashing: Shiretoko and Seamonkey http://crash-stats.mozilla.com/report/index/3eb721be-5aa1-4e2e-9914-640202090414?p=1 Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1b4pre) Gecko/20090412 Shiretoko/3.5b4pre Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1b4pre) Gecko/20090413 SeaMonkey/2.0b1pre Couldn't get Minefield crashing
Should be fixed on 1.9.1 since bug 468491 was just checked in there.
Keywords: fixed1.9.1
I cannot get it to crash anymore. Verified fixed on trunk and 1.9.1 with the following builds: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.2a1pre) Gecko/20090522 Minefield/3.6a1pre ID:20090522032716 Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.1pre) Gecko/20090521 Shiretoko/3.5pre ID:20090521135222
Status: RESOLVED → VERIFIED
Keywords: fixed1.9.1 → verified1.9.1
Target Milestone: --- → mozilla1.9.2a1
Crash Signature: [@ gfxTextRun::`vector deleting destructor'(unsigned int) ]
You need to log in before you can comment on or make changes to this bug.