526298 - Firefox 3.6b1 Crash Report [@ xul.dll@0x3f9620 ] nsGenericElement::InsertChildAt in nsGenericElement.cpp#l3171

Status: RESOLVED WORKSFORME

(Core :: DOM: Core & HTML, defect)

Description

[chris hofmann]

need to figure out if all these crashes on the signature are the same problem, but this currently looks like one of the top crashes on early 3.6b1 data.

http://crash-stats.mozilla.com/report/list?product=Firefox&query_search=signature&query_type=exact&query=xul.dll%400x3f9620&date=&range_value=1&range_unit=weeks&do_query=1&signature=xul.dll%400x3f9620


 	xul.dll  	xul.dll@0x3f9620  	
1 		@0x3a003f 	
2 	xul.dll 	nsGenericElement::InsertChildAt 	content/base/src/nsGenericElement.cpp:3171

http://hg.mozilla.org/releases/mozilla-1.9.2/annotate/c60105da01a0/content/base/src/nsGenericElement.cpp#l3171


3 	xul.dll 	nsCOMPtr_base::assign_with_AddRef 	obj-firefox/xpcom/build/nsCOMPtr.cpp:89
4 	xul.dll 	nsCOMPtr<nsIWidget>::operator= 	obj-firefox/dist/include/nsCOMPtr.h:640
5 	xul.dll 	SinkContext::FlushText 	content/html/document/src/nsHTMLContentSink.cpp:1484
6 	xul.dll 	HTMLContentSink::AddLeaf 	content/html/document/src/nsHTMLContentSink.cpp:2402
7 	xul.dll 	CNavDTD::AddHeadContent 	parser/htmlparser/src/CNavDTD.cpp:3056
8 	xul.dll 	CNavDTD::HandleStartToken 	parser/htmlparser/src/CNavDTD.cpp:1388
9 	xul.dll 	CNavDTD::HandleToken 	parser/htmlparser/src/CNavDTD.cpp:717
10 	xul.dll 	CNavDTD::BuildModel 	parser/htmlparser/src/CNavDTD.cpp:304
11 	xul.dll 	nsParser::BuildModel 	parser/htmlparser/src/nsParser.cpp:2451
12 	xul.dll 	nsParser::ResumeParse 	parser/htmlparser/src/nsParser.cpp:2332
13 	xul.dll 	nsParser::ContinueInterruptedParsing 	parser/htmlparser/src/nsParser.cpp:1828
14 	xul.dll 	nsContentSink::ContinueInterruptedParsingIfEnabled 	content/base/src/nsContentSink.cpp:1759
15 	xul.dll 	nsRunnableMethod<nsHTMLSharedObjectElement,void>::Run 	obj-firefox/dist/include/nsThreadUtils.h:264
16 	xul.dll 	nsThread::ProcessNextEvent 	xpcom/threads/nsThread.cpp:527
17 	xul.dll 	nsBaseAppShell::Run 	widget/src/xpwidgets/nsBaseAppShell.cpp:170
18 	xul.dll 	nsAppStartup::Run 	toolkit/components/startup/src/nsAppStartup.cpp:182
19 	nspr4.dll 	PR_GetEnv 	
20 	firefox.exe 	wmain 	toolkit/xre/nsWindowsWMain.cpp:110
21 	firefox.exe 	__tmainCRTStartup 	obj-firefox/memory/jemalloc/crtsrc/crtexe.c:591
22 	kernel32.dll 	BaseThreadInitThunk 	
23 	ntdll.dll 	__RtlUserThreadStart 	
24 	ntdll.dll 	_RtlUserThreadStart

Comment 1

[Wayne Mery (:wsmwk)]

choffman, fwiw, crash-stats has only a dozen crashes in the past month, and they are all 3.6b1

Comment 2

[chris hofmann]

yeah, could have been fixed, although it seems unlikely since none of the code on the stack appears to have changed after just before we started shipping 3.6b1.

more likely this has morfed into another low volume signature.  maybe something like

Firefox 3.6.8 Crash Report [@ nsGenericElement::InsertChildAt(nsIContent*, unsigned int, int) ] 
http://crash-stats.mozilla.com/report/index/991fcd87-328d-4351-91a9-e20352100807

or other crashes like that that appear on 3.6.x, and 4.0bx

http://crash-stats.mozilla.com/report/list?product=Firefox&query_search=signature&query_type=contains&query=nsGenericElement%3A%3AInsertChildAt&date=08%2F10%2F2010%2012%3A14%3A32&range_value=1&range_unit=weeks&hang_type=any&process_type=any&plugin_field=&plugin_query_type=&plugin_query=&do_query=1&admin=&signature=nsGenericElement%3A%3AInsertChildAt%28nsIContent*%2C%20unsigned%20int%2C%20int%29

I guess this is worksforme and we can track the other signatures in other bugs of they turn up in greater volume