528345 - crash composing message [@ FindNextNonWhitespaceSibling]

Status: RESOLVED WORKSFORME

(Core :: Layout, defect)

Description

[Wayne Mery (:wsmwk)]

crash composing message [@ FindNextNonWhitespaceSibling]
pretty rare, new (starts with 2009101900) and trunk only (TB 3.1a1pre)

bp-e8f7fbb2-7bf0-45db-ad78-852282091103
"1. sometimes when I answer or write an email and I press "return" to make a new paragraph, system crash 2. often when I click answer to one email I can't see what I write, it stay white but if I send, I can see the text in message sent."
0	thunderbird.exe	FindNextNonWhitespaceSibling	 layout/base/nsCSSFrameConstructor.cpp:8888
1	thunderbird.exe	nsCSSFrameConstructor::MaybeRecreateContainerForFrameRemoval	layout/base/nsCSSFrameConstructor.cpp:8955
2	thunderbird.exe	nsCSSFrameConstructor::ContentRemoved	layout/base/nsCSSFrameConstructor.cpp:7150
3	thunderbird.exe	PresShell::ContentRemoved	layout/base/nsPresShell.cpp:5106
4	thunderbird.exe	nsNodeUtils::ContentRemoved	content/base/src/nsNodeUtils.cpp:185
5	thunderbird.exe	nsGenericElement::doRemoveChildAt	content/base/src/nsGenericElement.cpp:3396
6	thunderbird.exe	nsGenericElement::RemoveChildAt	content/base/src/nsGenericElement.cpp:3324
7	thunderbird.exe	nsGenericElement::doRemoveChild	content/base/src/nsGenericElement.cpp:4042
8	thunderbird.exe	nsGenericElement::RemoveChild	content/base/src/nsGenericElement.cpp:3561
9	thunderbird.exe	DeleteElementTxn::DoTransaction	editor/libeditor/base/DeleteElementTxn.cpp:141
10	thunderbird.exe	nsTransactionItem::DoTransaction	editor/txmgr/src/nsTransactionItem.cpp:225
11	thunderbird.exe	nsTransactionManager::BeginTransaction	editor/txmgr/src/nsTransactionManager.cpp:954
12	thunderbird.exe	nsTransactionManager::DoTransaction	editor/txmgr/src/nsTransactionManager.cpp:119
13	thunderbird.exe	nsEditor::DoTransaction	editor/libeditor/base/nsEditor.cpp:738
14	thunderbird.exe	nsEditor::DeleteNode	editor/libeditor/base/nsEditor.cpp:1548 

only one FF crash in 4 weeks, also trunk, bp-142df674-01b4-4e94-9eb9-f07012091106

Comment 1

[Wayne Mery (:wsmwk)]

only 3 crashes in 8 months
bp-1647ab27-eae4-490a-8ef9-022262100804 v3.1.1
bp-ab7ed860-7876-4d9a-8969-5a7ca2101202 v3.1.6
bp-397bbcd5-a6a4-4578-87a8-9385b2101220 v3.1.7

equally rare in firefox - 4 crashes in 8 months
bp-2d3974b2-36cc-461b-a8d0-9c0f42101017 FF 3.6.10
EXCEPTION_ACCESS_VIOLATION_WRITE
0x0
Frame	Module	Signature [Expand]	Source
0	xul.dll	FindNextNonWhitespaceSibling	layout/base/nsCSSFrameConstructor.cpp:9043
1	xul.dll	nsCSSFrameConstructor::CharacterDataChanged	
2	xul.dll	PresShell::CharacterDataChanged	layout/base/nsPresShell.cpp:4979
3	xul.dll	nsNodeUtils::CharacterDataChanged	content/base/src/nsNodeUtils.cpp:101
4	xul.dll	nsGenericDOMDataNode::SetTextInternal	content/base/src/nsGenericDOMDataNode.cpp:448
5	xul.dll	nsGenericDOMDataNode::InsertData	content/base/src/nsGenericDOMDataNode.cpp:337
6	xul.dll	nsXMLCDATASection::InsertData	content/base/src/nsTextNode.h:70
7	xul.dll	InsertTextTxn::DoTransaction	editor/libeditor/base/InsertTextTxn.cpp:102

Comment 2

[Sheila Mooney]

Only 1 crash in 3.6 in the past 4 weeks. Resolving works for me.