501960 - Crash in [@ BuildTextRunsScanner::ScanFrame]

Status: RESOLVED WORKSFORME

(Core :: Layout: Text and Fonts, defect)

Description

[Jeff Muizelaar [:jrmuizel]]

Saw this crash in a recent talos run

 0  libxul.so!BuildTextRunsScanner::ScanFrame(nsIFrame*) [nsTextFrameThebes.cpp:1c6ec6110a0f : 1361 + 0x9]
    eip = 0xb7547a07   esp = 0xbf851190   ebp = 0xbf8511c8   ebx = 0xb7f3a930
    esi = 0x00000000   edi = 0x00000000   eax = 0x00000000   ecx = 0xae021548
    edx = 0xae021548   efl = 0x00210292
 1  libxul.so!BuildTextRunsScanner::ScanFrame(nsIFrame*) [nsTextFrameThebes.cpp:1c6ec6110a0f : 1408 + 0xa]
    eip = 0xb7547a8c   esp = 0xbf8511d0   ebp = 0xbf851208
 2  libxul.so!nsTextFrame::EnsureTextRun(gfxContext*, nsIFrame*, nsLineList_iterator const*, unsigned int*) [nsTextFrameThebes.cpp:1c6ec6110a0f : 1123 + 0xe]
    eip = 0xb7547f4b   esp = 0xbf851210   ebp = 0xbf851598
 3  libxul.so!nsTextFrame::AddInlineMinWidthForFlow(nsIRenderingContext*, nsIFrame::InlineMinWidthData*) [nsTextFrameThebes.cpp:1c6ec6110a0f : 5626 + 0x17]
    eip = 0xb7548fde   esp = 0xbf8515a0   ebp = 0xbf8516d8
 4  libxul.so!nsTextFrame::AddInlineMinWidth(nsIRenderingContext*, nsIFrame::InlineMinWidthData*) [nsTextFrameThebes.cpp:1c6ec6110a0f : 5738 + 0xc]
    eip = 0xb7549599   esp = 0xbf8516e0   ebp = 0xbf851708
 5  libxul.so!nsContainerFrame::DoInlineIntrinsicWidth(nsIRenderingContext*, nsIFrame::InlineIntrinsicWidthData*, nsLayoutUtils::IntrinsicWidthType) [nsContainerFrame.cpp:1c6ec6110a0f : 733 + 0xd]
    eip = 0xb75071a7   esp = 0xbf851710   ebp = 0xbf851758
 6  libxul.so!nsInlineFrame::AddInlineMinWidth(nsIRenderingContext*, nsIFrame::InlineMinWidthData*) [nsInlineFrame.cpp:1c6ec6110a0f : 196 + 0xf]
    eip = 0xb75281ca   esp = 0xbf851760   ebp = 0xbf851778
 7  libxul.so!nsBlockFrame::GetMinWidth(nsIRenderingContext*) [nsBlockFrame.cpp:1c6ec6110a0f : 684 + 0x10]
    eip = 0xb74f9dc1   esp = 0xbf851780   ebp = 0xbf8517d8
 8  libxul.so!nsLayoutUtils::IntrinsicForContainer(nsIRenderingContext*, nsIFrame*, nsLayoutUtils::IntrinsicWidthType) [nsLayoutUtils.cpp:1c6ec6110a0f : 1858 + 0xb]
    eip = 0xb74e130f   esp = 0xbf8517e0   ebp = 0xbf851878
 9  libxul.so!nsBlockFrame::GetMinWidth(nsIRenderingContext*) [nsBlockFrame.cpp:1c6ec6110a0f : 668 + 0x12]
    eip = 0xb74f9d52   esp = 0xbf851880   ebp = 0xbf8518d8

[etc]

http://tinderbox.mozilla.org/showlog.cgi?log=Firefox/1246529590.1246533127.2409.gz

Comment 1

[Peter Van der Beken [:peterv]]

http://tinderbox.mozilla.org/showlog.cgi?log=Firefox/1246814860.1246818381.28377.gz

Comment 2

[David Baron :dbaron: (⌚️UTC-4, no longer working on Mozilla)]

http://tinderbox.mozilla.org/showlog.cgi?log=Firefox/1247698635.1247701449.6872.gz&fulltext=1
Linux talos mozilla-central fast qm-plinux-fast03 on 2009/07/15 15:57:15  

They all seem to be qm-plinux-fast03... where "fast" means the old pageload test.

Comment 3

[Ed Morley [:emorley]]

Mass marking whiteboard:[orange] bugs WFM (to clean up TBPL bug suggestions) that:
* Haven't changed in > 6months
* Whose whiteboard contains none of the strings: {disabled,marked,random,fuzzy,todo,fails,failing,annotated,leave open,time-bomb}
* Passed a (quick) manual inspection of bug summary/whiteboard to ensure they weren't a false positive.

I've also gone through and searched for cases where the whiteboard wasn't labelled correctly after test disabling, by using attachment description & basic comment searches. However if the test for which this bug was about has in fact been disabled/annotated/..., please accept my apologies & reopen/mark the whiteboard appropriately so this doesn't get re-closed in the future (and please ping me via IRC or email so I can try to tweak the saved searches to avoid more edge cases).

Sorry for the spam! Filter on: #FFA500