Closed Bug 542833 Opened 10 years ago Closed 5 years ago

Crashes in [@ nsIFrame::GetStyleDisplay][@ PresShell::HandleEventInternal]

Categories

(Core :: Layout, defect, critical)

x86
Windows XP
defect
Not set
critical

Tracking

()

RESOLVED INCOMPLETE

People

(Reporter: whimboo, Unassigned)

References

()

Details

(Keywords: crash, Whiteboard: [sg:watch])

Crash Data

Follow-up from bug 530880. On 1.9.2 we still have crashes in nsIFrame::GetStyleDisplay. No comments are available.

Signature	nsIFrame::GetStyleDisplay()
UUID	52887fb2-d7c5-4ea1-80f3-d1fcd2100128
Time 	2010-01-28 09:58:31.720755
Uptime	5810
Product	Firefox
Version	3.6
Build ID	20100115144158
Branch	1.9.2
OS	Windows NT
OS Version	5.1.2600 Service Pack 2
CPU	x86
CPU Info	GenuineIntel family 6 model 8 stepping 10
Crash Reason	EXCEPTION_ACCESS_VIOLATION
Crash Address	0xfffffffff0de8017
User Comments	
Processor Notes 	
Crashing Thread
Frame 	Module 	Signature [Expand] 	Source
0 	xul.dll 	nsIFrame::GetStyleDisplay 	layout/style/nsStyleStructList.h:95
1 	xul.dll 	nsEventStateManager::PostHandleEvent 	
2 	xul.dll 	PresShell::HandleEventInternal 	layout/base/nsPresShell.cpp:6531
3 	xul.dll 	PresShell::HandlePositionedEvent 	layout/base/nsPresShell.cpp:6356
4 	xul.dll 	PresShell::HandleEvent 	layout/base/nsPresShell.cpp:6220
5 	xul.dll 	nsViewManager::HandleEvent 	view/src/nsViewManager.cpp:1224
6 	xul.dll 	nsViewManager::DispatchEvent 	view/src/nsViewManager.cpp:1203
7 	xul.dll 	HandleEvent 	view/src/nsView.cpp:167
8 	xul.dll 	nsWindow::DispatchEvent 	widget/src/windows/nsWindow.cpp:2952
9 	xul.dll 	nsWindow::DispatchWindowEvent 	widget/src/windows/nsWindow.cpp:2980
10 	xul.dll 	nsWindow::DispatchMouseEvent 	widget/src/windows/nsWindow.cpp:3361
11 	xul.dll 	ChildWindow::DispatchMouseEvent 	widget/src/windows/nsWindow.cpp:7049
Group: core-security
Without steps to reproduce or an especially useful stack, topcrash bugs shouldn't be security-sensitive.  The information here is already public, and having the bug public makes it more likely to get fixed.
Group: core-security
Whiteboard: [sg:watch]
Crash Signature: [@ nsIFrame::GetStyleDisplay] [@ PresShell::HandleEventInternal]
this is still happening on trunk, e.g. bp-f9999652-4482-437b-9a1d-9740d2120219

Note this is different from bug 641724
Crash Signature: [@ nsIFrame::GetStyleDisplay] [@ PresShell::HandleEventInternal] → [@ nsIFrame::GetStyleDisplay() ] [@ PresShell::HandleEventInternal() ]
Version: 1.9.2 Branch → Trunk
Zero incidents for PresShell::HandleEventInternal() in the past 28 days.
~200 incidents for nsIFrame::GetStyleDisplay() in the past 28 days,
but all are from v20 or older.
Status: NEW → RESOLVED
Closed: 5 years ago
Resolution: --- → INCOMPLETE
You need to log in before you can comment on or make changes to this bug.