Closed Bug 552027 Opened 15 years ago Closed 13 years ago

Crash (OOM?) [@ nsRuleNode::ComputeBackgroundData]

Categories

(Core :: CSS Parsing and Computation, defect)

Product:
Core
Component:
CSS Parsing and Computation
Platform:
x86
Linux
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED WORKSFORME

People

(Reporter: dholbert, Unassigned)

References

Details

(Keywords: intermittent-failure)

http://tinderbox.mozilla.org/showlog.cgi?log=Firefox/1268422147.1268423399.9190.gz WINNT 5.2 mozilla-central debug test reftest on 2010/03/12 11:29:07 s: mw32-ix-slave09 Crash in NS_Alloc_P, inside of EnsureCapacity, a number of levels inside of nsRuleNode::ComputeBackgroundData. (Is this an infallible-malloc auto-crash?) { PROCESS-CRASH | automation.py | application crashed (minidump found) Operating system: Windows NT 5.2.3790 Service Pack 2 CPU: x86 GenuineIntel family 6 model 30 stepping 5 4 CPUs Crash reason: EXCEPTION_ACCESS_VIOLATION Crash address: 0x0 Thread 0 (crashed) 0 ntdll.dll + 0x2c873 eip = 0x7c82c873 esp = 0x0012c5a8 ebp = 0x0012c7c4 ebx = 0x00cd0000 esi = 0x09311cf8 edi = 0x0800c1d0 eax = 0x00000000 ecx = 0x09311d00 edx = 0x00cd0178 efl = 0x00210212 Found by: given as instruction pointer in context 1 msvcr80d.dll + 0x12f4b eip = 0x00442f4c esp = 0x0012c7cc ebp = 0x0012c7e0 Found by: previous frame's frame pointer 2 msvcr80d.dll + 0x1ae14 eip = 0x0044ae15 esp = 0x0012c7e8 ebp = 0x0012c828 Found by: previous frame's frame pointer 3 msvcr80d.dll + 0x1aba8 eip = 0x0044aba9 esp = 0x0012c830 ebp = 0x0012c844 Found by: previous frame's frame pointer 4 msvcr80d.dll + 0x1ab28 eip = 0x0044ab29 esp = 0x0012c84c ebp = 0x0012c864 Found by: previous frame's frame pointer 5 xul.dll!dhw_malloc(unsigned int) [nsWinTraceMalloc.cpp:e0d293fe8408 : 82 + 0x11] eip = 0x1108ef26 esp = 0x0012c86c ebp = 0x0012c880 Found by: previous frame's frame pointer 6 mozalloc.dll!moz_malloc [mozalloc.cpp:e0d293fe8408 : 85 + 0x9] eip = 0x00b7116d esp = 0x0012c888 ebp = 0x0012c88c Found by: call frame info 7 xul.dll!NS_Alloc_P [nsMemoryImpl.cpp:e0d293fe8408 : 278 + 0x8] eip = 0x11054d7c esp = 0x0012c894 ebp = 0x0012c8a8 Found by: call frame info 8 xul.dll!nsTArray_base::EnsureCapacity(unsigned int,unsigned int) [nsTArray.cpp:e0d293fe8408 : 76 + 0xf] eip = 0x1104b7c0 esp = 0x0012c8b0 ebp = 0x0012c8d0 Found by: call frame info 9 xul.dll!nsTArray<nsStyleBackground::Layer>::AppendElements<nsStyleBackground::Layer>(nsStyleBackground::Layer const *,unsigned int) [nsTArray.h:e0d293fe8408 : 632 + 0x15] eip = 0x1074f72f esp = 0x0012c8d8 ebp = 0x0012c8e8 Found by: call frame info 10 xul.dll!nsTArray<nsStyleBackground::Layer>::AppendElements<nsStyleBackground::Layer>(nsTArray<nsStyleBackground::Layer> const &) [nsTArray.h:e0d293fe8408 : 643 + 0x19] eip = 0x1074f6d1 esp = 0x0012c8f0 ebp = 0x0012c8fc Found by: call frame info 11 xul.dll!nsTArray<nsStyleBackground::Layer>::nsTArray<nsStyleBackground::Layer>(nsTArray<nsStyleBackground::Layer> const &) [nsTArray.h:e0d293fe8408 : 283 + 0xb] eip = 0x1074f2db esp = 0x0012c904 ebp = 0x0012c90c Found by: call frame info 12 xul.dll!nsAutoTArray<nsStyleBackground::Layer,1>::nsAutoTArray<nsStyleBackground::Layer,1>(nsAutoTArray<nsStyleBackground::Layer,1> const &) + 0x14 eip = 0x1074c7e5 esp = 0x0012c914 ebp = 0x0012c924 Found by: call frame info 13 xul.dll!nsStyleBackground::nsStyleBackground(nsStyleBackground const &) [nsStyleStruct.cpp:e0d293fe8408 : 1600 + 0x6c] eip = 0x1074c69d esp = 0x0012c92c ebp = 0x0012c938 Found by: call frame info 14 xul.dll!nsRuleNode::ComputeBackgroundData(void *,nsCSSStruct const &,nsStyleContext *,nsRuleNode *,nsRuleNode::RuleDetail,int) [nsRuleNode.cpp:e0d293fe8408 : 4523 + 0x86] eip = 0x10681310 esp = 0x0012c940 ebp = 0x0012c9b0 Found by: call frame info 15 xul.dll!nsRuleNode::WalkRuleTree(nsStyleStructID,nsStyleContext *,nsRuleData *,nsCSSStruct *) [nsStyleStructList.h:e0d293fe8408 : 79 + 0x23] eip = 0x10679cdb esp = 0x0012c9b8 ebp = 0x0012ca08 Found by: call frame info 16 xul.dll!nsRuleNode::GetBackgroundData(nsStyleContext *) [nsRuleNode.cpp:e0d293fe8408 : 1669 + 0x1b] eip = 0x10678fe3 esp = 0x0012ca10 ebp = 0x0012cab8 Found by: call frame info 17 xul.dll!nsRuleNode::GetStyleBackground(nsStyleContext *,int) [nsStyleStructList.h:e0d293fe8408 : 79 + 0x8a] eip = 0x10688b9b esp = 0x0012cac0 ebp = 0x0012cad4 Found by: call frame info 18 xul.dll!nsStyleContext::DoGetStyleBackground(int) [nsStyleStructList.h:e0d293fe8408 : 79 + 0x49] eip = 0x105a6c7a esp = 0x0012cadc ebp = 0x0012caf0 Found by: call frame info 19 xul.dll!nsStyleContext::GetStyleBackground() [nsStyleStructList.h:e0d293fe8408 : 79 + 0x10] eip = 0x105a6bc1 esp = 0x0012caf8 ebp = 0x0012cb00 Found by: call frame info 20 xul.dll!nsCSSFrameConstructor::ConstructFramesFromItem(nsFrameConstructorState &,nsCSSFrameConstructor::FrameConstructionItemList::Iterator &,nsIFrame *,nsFrameItems &) [nsCSSFrameConstructor.cpp:e0d293fe8408 : 5390 + 0x7] eip = 0x106c9c61 esp = 0x0012cb08 ebp = 0x0012cb20 Found by: call frame info 21 xul.dll!nsCSSFrameConstructor::ConstructFramesFromItemList(nsFrameConstructorState &,nsCSSFrameConstructor::FrameConstructionItemList &,nsIFrame *,nsFrameItems &) [nsCSSFrameConstructor.cpp:e0d293fe8408 : 8979 + 0x17] eip = 0x106d0f14 esp = 0x0012cb28 ebp = 0x0012cb6c Found by: call frame info 22 xul.dll!nsCSSFrameConstructor::ProcessChildren(nsFrameConstructorState &,nsIContent *,nsStyleContext *,nsIFrame *,int,nsFrameItems &,int,PendingBinding *) [nsCSSFrameConstructor.cpp:e0d293fe8408 : 9087 + 0x1a] eip = 0x106d137c esp = 0x0012cb74 ebp = 0x0012cc90 Found by: call frame info 23 xul.dll!nsCSSFrameConstructor::ConstructFrameFromItemInternal(nsCSSFrameConstructor::FrameConstructionItem &,nsFrameConstructorState &,nsIFrame *,nsFrameItems &) [nsCSSFrameConstructor.cpp:e0d293fe8408 : 3791 + 0x42] eip = 0x106c5e13 esp = 0x0012cc98 ebp = 0x0012cd44 Found by: call frame info 24 xul.dll!nsCSSFrameConstructor::ConstructFramesFromItem(nsFrameConstructorState &,nsCSSFrameConstructor::FrameConstructionItemList::Iterator &,nsIFrame *,nsFrameItems &) [nsCSSFrameConstructor.cpp:e0d293fe8408 : 5414 + 0x17] eip = 0x106c9cc2 esp = 0x0012cd4c ebp = 0x0012cd74 Found by: call frame info 25 xul.dll!nsCSSFrameConstructor::ConstructFrame(nsFrameConstructorState &,nsIContent *,nsIFrame *,nsFrameItems &) [nsCSSFrameConstructor.cpp:e0d293fe8408 : 4974 + 0x17] eip = 0x106c8cc5 esp = 0x0012cd7c ebp = 0x0012cde4 Found by: call frame info 26 xul.dll!nsCSSFrameConstructor::CreateAnonymousFrames(nsFrameConstructorState &,nsIContent *,nsIFrame *,PendingBinding *,nsFrameItems &) [nsCSSFrameConstructor.cpp:e0d293fe8408 : 3890 + 0x17] eip = 0x106c623c esp = 0x0012cdec ebp = 0x0012ce58 Found by: call frame info 27 xul.dll!nsCSSFrameConstructor::BeginBuildingScrollFrame(nsFrameConstructorState &,nsIContent *,nsStyleContext *,nsIFrame *,nsIAtom *,int,nsIFrame * &) [nsCSSFrameConstructor.cpp:e0d293fe8408 : 4242 + 0x19] eip = 0x106c6ea4 esp = 0x0012ce60 ebp = 0x0012ce94 Found by: call frame info 28 xul.dll!nsCSSFrameConstructor::SetUpDocElementContainingBlock(nsIContent *) [nsCSSFrameConstructor.cpp:e0d293fe8408 : 2770 + 0x36] eip = 0x106c39b7 esp = 0x0012ce9c ebp = 0x0012cf80 Found by: call frame info 29 xul.dll!nsCSSFrameConstructor::ConstructDocElementFrame(nsIContent *,nsILayoutHistoryState *,nsIFrame * *) [nsCSSFrameConstructor.cpp:e0d293fe8408 : 2306 + 0xe] eip = 0x106c2783 esp = 0x0012cf88 ebp = 0x0012d10c Found by: call frame info 30 xul.dll!nsCSSFrameConstructor::ContentInserted(nsIContent *,nsIContent *,int,nsILayoutHistoryState *) [nsCSSFrameConstructor.cpp:e0d293fe8408 : 6508 + 0x1c] eip = 0x106cc574 esp = 0x0012d114 ebp = 0x0012d26c Found by: call frame info 31 xul.dll!PresShell::InitialReflow(int,int) [nsPresShell.cpp:e0d293fe8408 : 2525 + 0x14] eip = 0x10381a78 esp = 0x0012d274 ebp = 0x0012d344 Found by: call frame info 32 xul.dll!nsContentSink::StartLayout(int) [nsContentSink.cpp:e0d293fe8408 : 1305 + 0x29] eip = 0x107a74cd esp = 0x0012d34c ebp = 0x0012d400 Found by: call frame info 33 xul.dll!HTMLContentSink::StartLayout(int) [nsHTMLContentSink.cpp:e0d293fe8408 : 2612 + 0xb] eip = 0x10765ba4 esp = 0x0012d408 ebp = 0x0012d410 Found by: call frame info 34 xul.dll!HTMLContentSink::OpenBody(nsIParserNode const &) [nsHTMLContentSink.cpp:e0d293fe8408 : 2002 + 0x9] eip = 0x107645ad esp = 0x0012d418 ebp = 0x0012d43c Found by: call frame info 35 xul.dll!HTMLContentSink::OpenContainer(nsIParserNode const &) [nsHTMLContentSink.cpp:e0d293fe8408 : 2212 + 0x11] eip = 0x10764c5b esp = 0x0012d444 ebp = 0x0012d450 Found by: call frame info 36 xul.dll!CNavDTD::OpenBody(nsCParserNode const *) [CNavDTD.cpp:e0d293fe8408 : 2490 + 0x2e] eip = 0x102865b6 esp = 0x0012d458 ebp = 0x0012d470 Found by: call frame info 37 xul.dll!CNavDTD::OpenContainer(nsCParserNode const *,nsHTMLTag,nsEntryStack *) [CNavDTD.cpp:e0d293fe8408 : 2553 + 0xb] eip = 0x1028674f esp = 0x0012d478 ebp = 0x0012d4a8 Found by: call frame info 38 xul.dll!CNavDTD::HandleDefaultStartToken(CToken *,nsHTMLTag,nsCParserNode *) [CNavDTD.cpp:e0d293fe8408 : 1036 + 0x11] eip = 0x10283172 esp = 0x0012d4b0 ebp = 0x0012d500 Found by: call frame info 39 xul.dll!CNavDTD::HandleStartToken(CToken *) [CNavDTD.cpp:e0d293fe8408 : 1376 + 0x13] eip = 0x102841e0 esp = 0x0012d508 ebp = 0x0012d554 Found by: call frame info 40 xul.dll!CNavDTD::HandleToken(CToken *) [CNavDTD.cpp:e0d293fe8408 : 714 + 0xb] eip = 0x10282606 esp = 0x0012d55c ebp = 0x0012d5a8 Found by: call frame info 41 xul.dll!CNavDTD::BuildModel(nsITokenizer *,int,int,nsCString const *) [CNavDTD.cpp:e0d293fe8408 : 301 + 0xb] eip = 0x10281c54 esp = 0x0012d5b0 ebp = 0x0012d5fc Found by: call frame info 42 xul.dll!CNavDTD::BuildNeglectedTarget(nsHTMLTag,eHTMLTokenTypes) [CNavDTD.cpp:e0d293fe8408 : 342 + 0x1f] eip = 0x10281dcf esp = 0x0012d604 ebp = 0x0012d620 Found by: call frame info 43 xul.dll!CNavDTD::DidBuildModel(unsigned int) [CNavDTD.cpp:e0d293fe8408 : 358 + 0xb] eip = 0x10281e25 esp = 0x0012d628 ebp = 0x0012d658 Found by: call frame info 44 xul.dll!nsParser::DidBuildModel(unsigned int) [nsParser.cpp:e0d293fe8408 : 1588 + 0x1f] eip = 0x1027b515 esp = 0x0012d660 ebp = 0x0012d688 Found by: call frame info 45 xul.dll!nsParser::ResumeParse(int,int,int) [nsParser.cpp:e0d293fe8408 : 2368 + 0x11] eip = 0x1027cf92 esp = 0x0012d690 ebp = 0x0012d6d4 Found by: call frame info 46 xul.dll!nsParser::OnStopRequest(nsIRequest *,nsISupports *,unsigned int) [nsParser.cpp:e0d293fe8408 : 3001 + 0x19] eip = 0x1027e6ff esp = 0x0012d6dc ebp = 0x0012d70c Found by: call frame info 47 xul.dll!nsDocumentOpenInfo::OnStopRequest(nsIRequest *,nsISupports *,unsigned int) [nsURILoader.cpp:e0d293fe8408 : 323 + 0x24] eip = 0x10bc03d4 esp = 0x0012d714 ebp = 0x0012d72c Found by: call frame info 48 xul.dll!nsBaseChannel::OnStopRequest(nsIRequest *,nsISupports *,unsigned int) [nsBaseChannel.cpp:e0d293fe8408 : 680 + 0x4c] eip = 0x10157657 esp = 0x0012d734 ebp = 0x0012d754 Found by: call frame info 49 xul.dll!nsInputStreamPump::OnStateStop() [nsInputStreamPump.cpp:e0d293fe8408 : 576 + 0x32] eip = 0x10154b2e esp = 0x0012d75c ebp = 0x0012d780 Found by: call frame info 50 xul.dll!nsInputStreamPump::OnInputStreamReady(nsIAsyncInputStream *) [nsInputStreamPump.cpp:e0d293fe8408 : 401 + 0xa] eip = 0x10154510 esp = 0x0012d788 ebp = 0x0012d790 Found by: call frame info 51 xul.dll!nsInputStreamReadyEvent::Run() [nsStreamUtils.cpp:e0d293fe8408 : 112 + 0x27] eip = 0x1103b89a esp = 0x0012d798 ebp = 0x0012d7a4 Found by: call frame info 52 xul.dll!nsThread::ProcessNextEvent(int,int *) [nsThread.cpp:e0d293fe8408 : 527 + 0x18] eip = 0x1105969a esp = 0x0012d7ac ebp = 0x0012d7e0 Found by: call frame info 53 xul.dll!NS_ProcessNextEvent_P(nsIThread *,int) [nsThreadUtils.cpp:e0d293fe8408 : 250 + 0x15] eip = 0x1100b3b3 esp = 0x0012d7e8 ebp = 0x0012d7fc Found by: call frame info 54 xul.dll!mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate *) [MessagePump.cpp:e0d293fe8408 : 118 + 0xd] eip = 0x1126d33d esp = 0x0012d804 ebp = 0x0012d830 Found by: call frame info 55 xul.dll!MessageLoop::RunInternal() [message_loop.cc:e0d293fe8408 : 216 + 0x1e] eip = 0x110aec86 esp = 0x0012d838 ebp = 0x0012d854 ebx = 0x7ffff000 Found by: call frame info 56 xul.dll!MessageLoop::RunHandler() [message_loop.cc:e0d293fe8408 : 199 + 0x7] eip = 0x110aebc2 esp = 0x0012d85c ebp = 0x0012d88c Found by: call frame info 57 xul.dll!MessageLoop::Run() [message_loop.cc:e0d293fe8408 : 173 + 0x7] eip = 0x110aeaa3 esp = 0x0012d894 ebp = 0x0012d8bc ebx = 0x0012c1b4 Found by: call frame info 58 xul.dll!nsBaseAppShell::Run() [nsBaseAppShell.cpp:e0d293fe8408 : 174 + 0xb] eip = 0x10e71fa0 esp = 0x0012d8c4 ebp = 0x0012d8c8 Found by: call frame info 59 xul.dll!nsAppShell::Run() [nsAppShell.cpp:e0d293fe8408 : 239 + 0x8] eip = 0x10e71612 esp = 0x0012d8d0 ebp = 0x0012f81c Found by: call frame info 60 xul.dll!nsAppStartup::Run() [nsAppStartup.cpp:e0d293fe8408 : 182 + 0x1b] eip = 0x10c56d2a esp = 0x0012f824 ebp = 0x0012f830 Found by: call frame info 61 xul.dll!XRE_main [nsAppRunner.cpp:e0d293fe8408 : 3548 + 0x24] eip = 0x10011692 esp = 0x0012f838 ebp = 0x0012fed0 Found by: call frame info 62 firefox.exe!NS_internal_main(int,char * *) [nsBrowserApp.cpp:e0d293fe8408 : 158 + 0x11] eip = 0x00402552 esp = 0x0012fed8 ebp = 0x0012ff34 Found by: call frame info 63 firefox.exe!wmain [nsWindowsWMain.cpp:e0d293fe8408 : 120 + 0xc] eip = 0x00401cee esp = 0x0012ff3c ebp = 0x0012ff68 Found by: call frame info 64 firefox.exe!__tmainCRTStartup [crtexe.c : 594 + 0x18] eip = 0x004075d6 esp = 0x0012ff70 ebp = 0x0012ffb8 Found by: call frame info 65 firefox.exe!wmainCRTStartup [crtexe.c : 413 + 0x4] eip = 0x0040742d esp = 0x0012ffc0 ebp = 0x0012ffc0 ebx = 0x0012c1b4 Found by: call frame info 66 kernel32.dll + 0x2f23a eip = 0x77e6f23b esp = 0x0012ffc8 ebp = 0x0012fff0 Found by: call frame info }
Mass marking whiteboard:[orange] bugs WFM (to clean up TBPL bug suggestions) that: * Haven't changed in > 6months * Whose whiteboard contains none of the strings: {disabled,marked,random,fuzzy,todo,fails,failing,annotated,leave open,time-bomb} * Passed a (quick) manual inspection of bug summary/whiteboard to ensure they weren't a false positive. I've also gone through and searched for cases where the whiteboard wasn't labelled correctly after test disabling, by using attachment description & basic comment searches. However if the test for which this bug was about has in fact been disabled/annotated/..., please accept my apologies & reopen/mark the whiteboard appropriately so this doesn't get re-closed in the future (and please ping me via IRC or email so I can try to tweak the saved searches to avoid more edge cases). Sorry for the spam! Filter on: #FFA500
Status: NEW → RESOLVED
Closed: 13 years ago
Resolution: --- → WORKSFORME
Whiteboard: [orange]
You need to log in before you can comment on or make changes to this bug.