532335 - 3.6b4 Crash [@ nsCachedStyleData::GetStyleDisplay() ]

Status: RESOLVED INCOMPLETE

(Core :: Layout, defect)

Description

[chris hofmann]

spin off from frame poisoning tracking bug 526587

#21 ranked bug on the list from 2009-11-29
https://bug526587.bugzilla.mozilla.org/attachment.cgi?id=415233&t=5WPc9TLJkc


http://crash-stats.mozilla.com/report/index/d2ffc0f4-56cf-43dd-a49c-761fc2091201

Frame  	Module  	Signature [Expand]  	Source
0 	xul.dll 	nsCachedStyleData::GetStyleDisplay 	layout/style/nsStyleStructList.h:95
1 	xul.dll 	nsStyleContext::GetStyleDisplay 	layout/style/nsStyleStructList.h:95
2 	xul.dll 	nsDisplayOpacity::Paint 	layout/base/nsDisplayList.cpp:1030
3 	xul.dll 	nsDisplayList::Paint 	layout/base/nsDisplayList.cpp:405
4 	xul.dll 	nsDisplayClip::Paint 	layout/base/nsDisplayList.cpp:1132
5 	xul.dll 	nsDisplayList::Paint 	layout/base/nsDisplayList.cpp:405
6 	xul.dll 	nsDisplayClip::Paint 	layout/base/nsDisplayList.cpp:1132
7 	xul.dll 	nsDisplayList::Paint 	layout/base/nsDisplayList.cpp:405
8 	xul.dll 	nsDisplayClip::Paint 	layout/base/nsDisplayList.cpp:1132
9 	xul.dll 	nsDisplayList::Paint 	layout/base/nsDisplayList.cpp:405
10 	xul.dll 	nsDisplayClip::Paint 	layout/base/nsDisplayList.cpp:1132
11 	xul.dll 	nsDisplayList::Paint 	layout/base/nsDisplayList.cpp:405
12 	xul.dll 	nsDisplayClip::Paint 	layout/base/nsDisplayList.cpp:1132
13 	xul.dll 	nsLayoutUtils::PaintFrame 	layout/base/nsLayoutUtils.cpp:1132
14 	xul.dll 	PresShell::Paint 	layout/base/nsPresShell.cpp:5816
15 	xul.dll 	nsViewManager::RenderViews 	view/src/nsViewManager.cpp:533
16 	xul.dll 	nsViewManager::Refresh 	view/src/nsViewManager.cpp:492
17 	xul.dll 	nsViewManager::DispatchEvent 	view/src/nsViewManager.cpp:1008
18 	xul.dll 	HandleEvent 	view/src/nsView.cpp:167
19 	xul.dll 	nsWindow::DispatchEvent 	widget/src/windows/nsWindow.cpp:2885
20 	xul.dll 	nsWindow::DispatchWindowEvent 	widget/src/windows/nsWindow.cpp:2918
21 	xul.dll 	nsWindow::OnPaint 	widget/src/windows/nsWindowGfx.cpp:513
22 	xul.dll 	nsWindow::ProcessMessage 	widget/src/windows/nsWindow.cpp:3801
23 	xul.dll 	nsWindow::WindowProc 	widget/src/windows/nsWindow.cpp:3501
24 	user32.dll 	InternalCallWinProc 	
25 	user32.dll 	UserCallWinProcCheckWow 	
26 	user32.dll 	DispatchClientMessage 	
27 	user32.dll 	__fnDWORD 	
28 	ntdll.dll 	KiUserCallbackDispatcher 	
29 	xul.dll 	gfxTextRun::BreakAndMeasureText 	
30 	xul.dll 	nsWindow::Update 	widget/src/windows/nsWindow.cpp:2124
31 	xul.dll 	nsViewManager::Composite 	view/src/nsViewManager.cpp:587
32 	xul.dll 	xul.dll@0xa07e5b

more reports at 

http://crash-stats.mozilla.com/report/list?product=Firefox&query_search=signature&query_type=exact&query=&date=&range_value=1&range_unit=weeks&do_query=1&signature=nsCachedStyleData::GetStyleDisplay%28%29

sort on address

Comment 1

[chris hofmann]

some crashes with the same signatures and different crash addresses found

example of crash counts seen on 2009-11-30 
   1 3.0.11
   1 3.0.3
   3 3.1b3
   1 3.5
   1 3.5.2
   5 3.6b2
  12 3.6b4

most popular os breakdown
15      0.625   Windows NT5.1.2600 Service Pack 3
4       0.166667        Windows NT5.1.2600 Service Pack 2
3       0.125   Windows NT6.0.6002 Service Pack 2
1       0.0416667       Windows NT5.1.2600 Szervizcsomag 3

Comment 2

[chris hofmann]

not much interesting in the test url list

   1 http://www.yahoo.com/
   1 http://www.orkut.com.br/Main#Home
   1 http://www.jurassicjungle.com/stats.php
   1 http://www.facebook.com/home.php?
   1 http://www.a-butor.hu/
   1 http://tg1b20.mail.126.com/ -- account info sanitized
   1 http://revistaautoesporte.globo.com/Revista/Autoesporte/1,,EDT0-10142,00.html
   1 http://g6a71.mail.163.com/a/f/js3/editor/0910121800/htmltool_js3_v1.htm
   1 http://cg4a31.mail.163.com/a/f/js3/editor/0910121800/htmltool_js3_v1.htm
   1 http://apps.facebook.com/cafeworld/?ref=bookmark
   1 http://apps.facebook.com/areyouinterested/?action=search

Comment 3

[chris hofmann]

this looks like the top ranked frame poison crash in early 3.6 beta 5 data.  It's ranked at #142

Comment 4

[chris hofmann]

currently ranked #256 topcrash on 3.6 final

Comment 5

[Wayne Mery (:wsmwk)]

For current versions, there is only ONE crash in the past month.
bp-6d95b53b-4374-49d2-b638-58e8c2121209
0	xul.dll	nsCachedStyleData::GetStyleDisplay	layout/style/nsStyleStructList.h:91
1	xul.dll	nsCSSRendering::PaintBorderWithStyleBorder	layout/base/nsCSSRendering.cpp:445
2	xul.dll	nsCSSRendering::PaintBorder	layout/base/nsCSSRendering.cpp:401
3	xul.dll	nsButtonFrameRenderer::PaintBorderAndBackground	layout/forms/nsButtonFrameRenderer.cpp:239

Comment 6

[Mats Palmgren (inactive)]

For the past 28 days:
Product 	Version 	Percentage 	Number Of Crashes
Firefox 	3.6.18 	40.00 %	2
Firefox 	3.6 	20.00 %	1
Firefox 	3.6.13 	20.00 %	1
Firefox 	38.0.1 	20.00 %	1

This low volume isn't worth tracking.