484375 - Instant crash on daniweb.com blog entry [@ gfxTextRun::`vector deleting destructor'(unsigned int) ]

Status: VERIFIED FIXED

(Core :: Layout: Text and Fonts, defect, P2)

Description

[David Tenser [:djst]]

1. Go to http://www.daniweb.com/blogs/entry4152.html
2. Crash.

Comment 1

[Ria Klaassen (not reading all bugmail)]

http://crash-stats.mozilla.com/report/index/81b09b1c-2884-4270-9da5-214342090320

Frame  	Module  	Signature  	Source
0 	xul.dll 	gfxTextRun::`vector deleting destructor'(unsigned int) 	
1 	xul.dll 	xul.dll@0x398760

Comment 2

[Ria Klaassen (not reading all bugmail)]

Regression range appears to be (crash not 100% reproducible here):
http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=9335c05bb78b&tochange=6027c1cd6033

Comment 3

[Ria Klaassen (not reading all bugmail)]

It is also reproducible on Shiretoko. But only after the third attempt :(.

Comment 4

[Robert O'Callahan (:roc) (email my personal email if necessary)]

Windows only?

Comment 5

[Hermann Schwab]

sometimes crashing on load or more often on reload.

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1b4pre) Gecko/20090320 SeaMonkey/2.0b1pre

http://crash-stats.mozilla.com/report/index/9d0e2af1-b3ae-4227-9688-bfd212090321?p=1
http://crash-stats.mozilla.com/report/index/d15754f3-543c-45e6-8166-703dd2090321?p=1

0  	thebes.dll  	gfxFontEntry::Release  	 objdir/mozilla/dist/include/thebes/gfxPattern.h:52
1 	thebes.dll 	gfxTextRun::~gfxTextRun 	gfx/thebes/src/gfxFont.cpp:1402
2 	thebes.dll 	gfxTextRun::`vector deleting destructor' 	
3 	gklayout.dll 	nsTextFrame::ClearTextRun 	layout/generic/nsTextFrameThebes.cpp:3672
4 	gklayout.dll 	nsContinuingTextFrame::Destroy 	layout/generic/nsTextFrameThebes.cpp:3472
5 	gklayout.dll 	nsBlockFrame::DoRemoveFrame 	layout/generic/nsBlockFrame.cpp:5456
6 	gklayout.dll 	nsBlockFrame::RemoveFrame 	layout/generic/nsBlockFrame.cpp:5047
7 	gklayout.dll 	nsFrameManager::RemoveFrame 	layout/base/nsFrameManager.cpp:713
8 	gklayout.dll 	nsCSSFrameConstructor::RemoveFloatingFirstLetterFrames 	layout/base/nsCSSFrameConstructor.cpp:12181
9 	gklayout.dll 	nsCSSFrameConstructor::RemoveLetterFrames 	layout/base/nsCSSFrameConstructor.cpp:12297
10 	gklayout.dll 	nsCSSFrameConstructor::CharacterDataChanged 	layout/base/nsCSSFrameConstructor.cpp:9853
11 	gklayout.dll 	PresShell::CharacterDataChanged 	layout/base/nsPresShell.cpp:4645

Comment 6

[Hermann Schwab]

2 identical ceashes on shiretoko:

http://crash-stats.mozilla.com/report/index/7c6f52d9-4782-47ad-a04d-f1bce2090321?p=1
http://crash-stats.mozilla.com/report/index/355c567b-7cb3-4612-9e16-b129a2090321?p=1

0  	xul.dll  	gfxTextRun::`vector deleting destructor'  	
1 	xul.dll 	nsTextFrame::ClearTextRun 	layout/generic/nsTextFrameThebes.cpp:3672
2 	xul.dll 	nsContinuingTextFrame::Destroy 	layout/generic/nsTextFrameThebes.cpp:3472
3 	xul.dll 	nsBlockFrame::DoRemoveFrame 	layout/generic/nsBlockFrame.cpp:5456

Comment 7

[Robert O'Callahan (:roc) (email my personal email if necessary)]

I hope that the patch in bug 468491 fixes this, someone might check...

Comment 8

[Robert O'Callahan (:roc) (email my personal email if necessary)]

Should be fixed now that 468491 is fixed. Please verify.

Comment 9

[Hermann Schwab]

Still crashing: Shiretoko and Seamonkey

http://crash-stats.mozilla.com/report/index/3eb721be-5aa1-4e2e-9914-640202090414?p=1

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1b4pre) Gecko/20090412 Shiretoko/3.5b4pre

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1b4pre) Gecko/20090413 SeaMonkey/2.0b1pre

Couldn't get Minefield crashing

Comment 10

[Robert O'Callahan (:roc) (email my personal email if necessary)]

Should be fixed on 1.9.1 since bug 468491 was just checked in there.

Comment 11

[Henrik Skupin [:whimboo][⌚️UTC+1]]

I cannot get it to crash anymore. Verified fixed on trunk and 1.9.1 with the following builds:

Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.2a1pre) Gecko/20090522 Minefield/3.6a1pre ID:20090522032716

Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.1pre) Gecko/20090521 Shiretoko/3.5pre ID:20090521135222