Crash (OOM?) [@ nsRuleNode::ComputeBackgroundData]

RESOLVED WORKSFORME

Status

()

defect
RESOLVED WORKSFORME
9 years ago
7 years ago

People

(Reporter: dholbert, Unassigned)

Tracking

({intermittent-failure})

Trunk
x86
Linux
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

(Reporter)

Description

9 years ago
http://tinderbox.mozilla.org/showlog.cgi?log=Firefox/1268422147.1268423399.9190.gz
WINNT 5.2 mozilla-central debug test reftest on 2010/03/12 11:29:07
s: mw32-ix-slave09

Crash in NS_Alloc_P, inside of EnsureCapacity, a number of levels inside of nsRuleNode::ComputeBackgroundData.  (Is this an infallible-malloc auto-crash?)

{
PROCESS-CRASH | automation.py | application crashed (minidump found)
Operating system: Windows NT
                  5.2.3790 Service Pack 2
CPU: x86
     GenuineIntel family 6 model 30 stepping 5
     4 CPUs

Crash reason:  EXCEPTION_ACCESS_VIOLATION
Crash address: 0x0

Thread 0 (crashed)
 0  ntdll.dll + 0x2c873
    eip = 0x7c82c873   esp = 0x0012c5a8   ebp = 0x0012c7c4   ebx = 0x00cd0000
    esi = 0x09311cf8   edi = 0x0800c1d0   eax = 0x00000000   ecx = 0x09311d00
    edx = 0x00cd0178   efl = 0x00210212
    Found by: given as instruction pointer in context
 1  msvcr80d.dll + 0x12f4b
    eip = 0x00442f4c   esp = 0x0012c7cc   ebp = 0x0012c7e0
    Found by: previous frame's frame pointer
 2  msvcr80d.dll + 0x1ae14
    eip = 0x0044ae15   esp = 0x0012c7e8   ebp = 0x0012c828
    Found by: previous frame's frame pointer
 3  msvcr80d.dll + 0x1aba8
    eip = 0x0044aba9   esp = 0x0012c830   ebp = 0x0012c844
    Found by: previous frame's frame pointer
 4  msvcr80d.dll + 0x1ab28
    eip = 0x0044ab29   esp = 0x0012c84c   ebp = 0x0012c864
    Found by: previous frame's frame pointer
 5  xul.dll!dhw_malloc(unsigned int) [nsWinTraceMalloc.cpp:e0d293fe8408 : 82 + 0x11]
    eip = 0x1108ef26   esp = 0x0012c86c   ebp = 0x0012c880
    Found by: previous frame's frame pointer
 6  mozalloc.dll!moz_malloc [mozalloc.cpp:e0d293fe8408 : 85 + 0x9]
    eip = 0x00b7116d   esp = 0x0012c888   ebp = 0x0012c88c
    Found by: call frame info
 7  xul.dll!NS_Alloc_P [nsMemoryImpl.cpp:e0d293fe8408 : 278 + 0x8]
    eip = 0x11054d7c   esp = 0x0012c894   ebp = 0x0012c8a8
    Found by: call frame info
 8  xul.dll!nsTArray_base::EnsureCapacity(unsigned int,unsigned int) [nsTArray.cpp:e0d293fe8408 : 76 + 0xf]
    eip = 0x1104b7c0   esp = 0x0012c8b0   ebp = 0x0012c8d0
    Found by: call frame info
 9  xul.dll!nsTArray<nsStyleBackground::Layer>::AppendElements<nsStyleBackground::Layer>(nsStyleBackground::Layer const *,unsigned int) [nsTArray.h:e0d293fe8408 : 632 + 0x15]
    eip = 0x1074f72f   esp = 0x0012c8d8   ebp = 0x0012c8e8
    Found by: call frame info
10  xul.dll!nsTArray<nsStyleBackground::Layer>::AppendElements<nsStyleBackground::Layer>(nsTArray<nsStyleBackground::Layer> const &) [nsTArray.h:e0d293fe8408 : 643 + 0x19]
    eip = 0x1074f6d1   esp = 0x0012c8f0   ebp = 0x0012c8fc
    Found by: call frame info
11  xul.dll!nsTArray<nsStyleBackground::Layer>::nsTArray<nsStyleBackground::Layer>(nsTArray<nsStyleBackground::Layer> const &) [nsTArray.h:e0d293fe8408 : 283 + 0xb]
    eip = 0x1074f2db   esp = 0x0012c904   ebp = 0x0012c90c
    Found by: call frame info
12  xul.dll!nsAutoTArray<nsStyleBackground::Layer,1>::nsAutoTArray<nsStyleBackground::Layer,1>(nsAutoTArray<nsStyleBackground::Layer,1> const &) + 0x14
    eip = 0x1074c7e5   esp = 0x0012c914   ebp = 0x0012c924
    Found by: call frame info
13  xul.dll!nsStyleBackground::nsStyleBackground(nsStyleBackground const &) [nsStyleStruct.cpp:e0d293fe8408 : 1600 + 0x6c]
    eip = 0x1074c69d   esp = 0x0012c92c   ebp = 0x0012c938
    Found by: call frame info
14  xul.dll!nsRuleNode::ComputeBackgroundData(void *,nsCSSStruct const &,nsStyleContext *,nsRuleNode *,nsRuleNode::RuleDetail,int) [nsRuleNode.cpp:e0d293fe8408 : 4523 + 0x86]
    eip = 0x10681310   esp = 0x0012c940   ebp = 0x0012c9b0
    Found by: call frame info
15  xul.dll!nsRuleNode::WalkRuleTree(nsStyleStructID,nsStyleContext *,nsRuleData *,nsCSSStruct *) [nsStyleStructList.h:e0d293fe8408 : 79 + 0x23]
    eip = 0x10679cdb   esp = 0x0012c9b8   ebp = 0x0012ca08
    Found by: call frame info
16  xul.dll!nsRuleNode::GetBackgroundData(nsStyleContext *) [nsRuleNode.cpp:e0d293fe8408 : 1669 + 0x1b]
    eip = 0x10678fe3   esp = 0x0012ca10   ebp = 0x0012cab8
    Found by: call frame info
17  xul.dll!nsRuleNode::GetStyleBackground(nsStyleContext *,int) [nsStyleStructList.h:e0d293fe8408 : 79 + 0x8a]
    eip = 0x10688b9b   esp = 0x0012cac0   ebp = 0x0012cad4
    Found by: call frame info
18  xul.dll!nsStyleContext::DoGetStyleBackground(int) [nsStyleStructList.h:e0d293fe8408 : 79 + 0x49]
    eip = 0x105a6c7a   esp = 0x0012cadc   ebp = 0x0012caf0
    Found by: call frame info
19  xul.dll!nsStyleContext::GetStyleBackground() [nsStyleStructList.h:e0d293fe8408 : 79 + 0x10]
    eip = 0x105a6bc1   esp = 0x0012caf8   ebp = 0x0012cb00
    Found by: call frame info
20  xul.dll!nsCSSFrameConstructor::ConstructFramesFromItem(nsFrameConstructorState &,nsCSSFrameConstructor::FrameConstructionItemList::Iterator &,nsIFrame *,nsFrameItems &) [nsCSSFrameConstructor.cpp:e0d293fe8408 : 5390 + 0x7]
    eip = 0x106c9c61   esp = 0x0012cb08   ebp = 0x0012cb20
    Found by: call frame info
21  xul.dll!nsCSSFrameConstructor::ConstructFramesFromItemList(nsFrameConstructorState &,nsCSSFrameConstructor::FrameConstructionItemList &,nsIFrame *,nsFrameItems &) [nsCSSFrameConstructor.cpp:e0d293fe8408 : 8979 + 0x17]
    eip = 0x106d0f14   esp = 0x0012cb28   ebp = 0x0012cb6c
    Found by: call frame info
22  xul.dll!nsCSSFrameConstructor::ProcessChildren(nsFrameConstructorState &,nsIContent *,nsStyleContext *,nsIFrame *,int,nsFrameItems &,int,PendingBinding *) [nsCSSFrameConstructor.cpp:e0d293fe8408 : 9087 + 0x1a]
    eip = 0x106d137c   esp = 0x0012cb74   ebp = 0x0012cc90
    Found by: call frame info
23  xul.dll!nsCSSFrameConstructor::ConstructFrameFromItemInternal(nsCSSFrameConstructor::FrameConstructionItem &,nsFrameConstructorState &,nsIFrame *,nsFrameItems &) [nsCSSFrameConstructor.cpp:e0d293fe8408 : 3791 + 0x42]
    eip = 0x106c5e13   esp = 0x0012cc98   ebp = 0x0012cd44
    Found by: call frame info
24  xul.dll!nsCSSFrameConstructor::ConstructFramesFromItem(nsFrameConstructorState &,nsCSSFrameConstructor::FrameConstructionItemList::Iterator &,nsIFrame *,nsFrameItems &) [nsCSSFrameConstructor.cpp:e0d293fe8408 : 5414 + 0x17]
    eip = 0x106c9cc2   esp = 0x0012cd4c   ebp = 0x0012cd74
    Found by: call frame info
25  xul.dll!nsCSSFrameConstructor::ConstructFrame(nsFrameConstructorState &,nsIContent *,nsIFrame *,nsFrameItems &) [nsCSSFrameConstructor.cpp:e0d293fe8408 : 4974 + 0x17]
    eip = 0x106c8cc5   esp = 0x0012cd7c   ebp = 0x0012cde4
    Found by: call frame info
26  xul.dll!nsCSSFrameConstructor::CreateAnonymousFrames(nsFrameConstructorState &,nsIContent *,nsIFrame *,PendingBinding *,nsFrameItems &) [nsCSSFrameConstructor.cpp:e0d293fe8408 : 3890 + 0x17]
    eip = 0x106c623c   esp = 0x0012cdec   ebp = 0x0012ce58
    Found by: call frame info
27  xul.dll!nsCSSFrameConstructor::BeginBuildingScrollFrame(nsFrameConstructorState &,nsIContent *,nsStyleContext *,nsIFrame *,nsIAtom *,int,nsIFrame * &) [nsCSSFrameConstructor.cpp:e0d293fe8408 : 4242 + 0x19]
    eip = 0x106c6ea4   esp = 0x0012ce60   ebp = 0x0012ce94
    Found by: call frame info
28  xul.dll!nsCSSFrameConstructor::SetUpDocElementContainingBlock(nsIContent *) [nsCSSFrameConstructor.cpp:e0d293fe8408 : 2770 + 0x36]
    eip = 0x106c39b7   esp = 0x0012ce9c   ebp = 0x0012cf80
    Found by: call frame info
29  xul.dll!nsCSSFrameConstructor::ConstructDocElementFrame(nsIContent *,nsILayoutHistoryState *,nsIFrame * *) [nsCSSFrameConstructor.cpp:e0d293fe8408 : 2306 + 0xe]
    eip = 0x106c2783   esp = 0x0012cf88   ebp = 0x0012d10c
    Found by: call frame info
30  xul.dll!nsCSSFrameConstructor::ContentInserted(nsIContent *,nsIContent *,int,nsILayoutHistoryState *) [nsCSSFrameConstructor.cpp:e0d293fe8408 : 6508 + 0x1c]
    eip = 0x106cc574   esp = 0x0012d114   ebp = 0x0012d26c
    Found by: call frame info
31  xul.dll!PresShell::InitialReflow(int,int) [nsPresShell.cpp:e0d293fe8408 : 2525 + 0x14]
    eip = 0x10381a78   esp = 0x0012d274   ebp = 0x0012d344
    Found by: call frame info
32  xul.dll!nsContentSink::StartLayout(int) [nsContentSink.cpp:e0d293fe8408 : 1305 + 0x29]
    eip = 0x107a74cd   esp = 0x0012d34c   ebp = 0x0012d400
    Found by: call frame info
33  xul.dll!HTMLContentSink::StartLayout(int) [nsHTMLContentSink.cpp:e0d293fe8408 : 2612 + 0xb]
    eip = 0x10765ba4   esp = 0x0012d408   ebp = 0x0012d410
    Found by: call frame info
34  xul.dll!HTMLContentSink::OpenBody(nsIParserNode const &) [nsHTMLContentSink.cpp:e0d293fe8408 : 2002 + 0x9]
    eip = 0x107645ad   esp = 0x0012d418   ebp = 0x0012d43c
    Found by: call frame info
35  xul.dll!HTMLContentSink::OpenContainer(nsIParserNode const &) [nsHTMLContentSink.cpp:e0d293fe8408 : 2212 + 0x11]
    eip = 0x10764c5b   esp = 0x0012d444   ebp = 0x0012d450
    Found by: call frame info
36  xul.dll!CNavDTD::OpenBody(nsCParserNode const *) [CNavDTD.cpp:e0d293fe8408 : 2490 + 0x2e]
    eip = 0x102865b6   esp = 0x0012d458   ebp = 0x0012d470
    Found by: call frame info
37  xul.dll!CNavDTD::OpenContainer(nsCParserNode const *,nsHTMLTag,nsEntryStack *) [CNavDTD.cpp:e0d293fe8408 : 2553 + 0xb]
    eip = 0x1028674f   esp = 0x0012d478   ebp = 0x0012d4a8
    Found by: call frame info
38  xul.dll!CNavDTD::HandleDefaultStartToken(CToken *,nsHTMLTag,nsCParserNode *) [CNavDTD.cpp:e0d293fe8408 : 1036 + 0x11]
    eip = 0x10283172   esp = 0x0012d4b0   ebp = 0x0012d500
    Found by: call frame info
39  xul.dll!CNavDTD::HandleStartToken(CToken *) [CNavDTD.cpp:e0d293fe8408 : 1376 + 0x13]
    eip = 0x102841e0   esp = 0x0012d508   ebp = 0x0012d554
    Found by: call frame info
40  xul.dll!CNavDTD::HandleToken(CToken *) [CNavDTD.cpp:e0d293fe8408 : 714 + 0xb]
    eip = 0x10282606   esp = 0x0012d55c   ebp = 0x0012d5a8
    Found by: call frame info
41  xul.dll!CNavDTD::BuildModel(nsITokenizer *,int,int,nsCString const *) [CNavDTD.cpp:e0d293fe8408 : 301 + 0xb]
    eip = 0x10281c54   esp = 0x0012d5b0   ebp = 0x0012d5fc
    Found by: call frame info
42  xul.dll!CNavDTD::BuildNeglectedTarget(nsHTMLTag,eHTMLTokenTypes) [CNavDTD.cpp:e0d293fe8408 : 342 + 0x1f]
    eip = 0x10281dcf   esp = 0x0012d604   ebp = 0x0012d620
    Found by: call frame info
43  xul.dll!CNavDTD::DidBuildModel(unsigned int) [CNavDTD.cpp:e0d293fe8408 : 358 + 0xb]
    eip = 0x10281e25   esp = 0x0012d628   ebp = 0x0012d658
    Found by: call frame info
44  xul.dll!nsParser::DidBuildModel(unsigned int) [nsParser.cpp:e0d293fe8408 : 1588 + 0x1f]
    eip = 0x1027b515   esp = 0x0012d660   ebp = 0x0012d688
    Found by: call frame info
45  xul.dll!nsParser::ResumeParse(int,int,int) [nsParser.cpp:e0d293fe8408 : 2368 + 0x11]
    eip = 0x1027cf92   esp = 0x0012d690   ebp = 0x0012d6d4
    Found by: call frame info
46  xul.dll!nsParser::OnStopRequest(nsIRequest *,nsISupports *,unsigned int) [nsParser.cpp:e0d293fe8408 : 3001 + 0x19]
    eip = 0x1027e6ff   esp = 0x0012d6dc   ebp = 0x0012d70c
    Found by: call frame info
47  xul.dll!nsDocumentOpenInfo::OnStopRequest(nsIRequest *,nsISupports *,unsigned int) [nsURILoader.cpp:e0d293fe8408 : 323 + 0x24]
    eip = 0x10bc03d4   esp = 0x0012d714   ebp = 0x0012d72c
    Found by: call frame info
48  xul.dll!nsBaseChannel::OnStopRequest(nsIRequest *,nsISupports *,unsigned int) [nsBaseChannel.cpp:e0d293fe8408 : 680 + 0x4c]
    eip = 0x10157657   esp = 0x0012d734   ebp = 0x0012d754
    Found by: call frame info
49  xul.dll!nsInputStreamPump::OnStateStop() [nsInputStreamPump.cpp:e0d293fe8408 : 576 + 0x32]
    eip = 0x10154b2e   esp = 0x0012d75c   ebp = 0x0012d780
    Found by: call frame info
50  xul.dll!nsInputStreamPump::OnInputStreamReady(nsIAsyncInputStream *) [nsInputStreamPump.cpp:e0d293fe8408 : 401 + 0xa]
    eip = 0x10154510   esp = 0x0012d788   ebp = 0x0012d790
    Found by: call frame info
51  xul.dll!nsInputStreamReadyEvent::Run() [nsStreamUtils.cpp:e0d293fe8408 : 112 + 0x27]
    eip = 0x1103b89a   esp = 0x0012d798   ebp = 0x0012d7a4
    Found by: call frame info
52  xul.dll!nsThread::ProcessNextEvent(int,int *) [nsThread.cpp:e0d293fe8408 : 527 + 0x18]
    eip = 0x1105969a   esp = 0x0012d7ac   ebp = 0x0012d7e0
    Found by: call frame info
53  xul.dll!NS_ProcessNextEvent_P(nsIThread *,int) [nsThreadUtils.cpp:e0d293fe8408 : 250 + 0x15]
    eip = 0x1100b3b3   esp = 0x0012d7e8   ebp = 0x0012d7fc
    Found by: call frame info
54  xul.dll!mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate *) [MessagePump.cpp:e0d293fe8408 : 118 + 0xd]
    eip = 0x1126d33d   esp = 0x0012d804   ebp = 0x0012d830
    Found by: call frame info
55  xul.dll!MessageLoop::RunInternal() [message_loop.cc:e0d293fe8408 : 216 + 0x1e]
    eip = 0x110aec86   esp = 0x0012d838   ebp = 0x0012d854   ebx = 0x7ffff000
    Found by: call frame info
56  xul.dll!MessageLoop::RunHandler() [message_loop.cc:e0d293fe8408 : 199 + 0x7]
    eip = 0x110aebc2   esp = 0x0012d85c   ebp = 0x0012d88c
    Found by: call frame info
57  xul.dll!MessageLoop::Run() [message_loop.cc:e0d293fe8408 : 173 + 0x7]
    eip = 0x110aeaa3   esp = 0x0012d894   ebp = 0x0012d8bc   ebx = 0x0012c1b4
    Found by: call frame info
58  xul.dll!nsBaseAppShell::Run() [nsBaseAppShell.cpp:e0d293fe8408 : 174 + 0xb]
    eip = 0x10e71fa0   esp = 0x0012d8c4   ebp = 0x0012d8c8
    Found by: call frame info
59  xul.dll!nsAppShell::Run() [nsAppShell.cpp:e0d293fe8408 : 239 + 0x8]
    eip = 0x10e71612   esp = 0x0012d8d0   ebp = 0x0012f81c
    Found by: call frame info
60  xul.dll!nsAppStartup::Run() [nsAppStartup.cpp:e0d293fe8408 : 182 + 0x1b]
    eip = 0x10c56d2a   esp = 0x0012f824   ebp = 0x0012f830
    Found by: call frame info
61  xul.dll!XRE_main [nsAppRunner.cpp:e0d293fe8408 : 3548 + 0x24]
    eip = 0x10011692   esp = 0x0012f838   ebp = 0x0012fed0
    Found by: call frame info
62  firefox.exe!NS_internal_main(int,char * *) [nsBrowserApp.cpp:e0d293fe8408 : 158 + 0x11]
    eip = 0x00402552   esp = 0x0012fed8   ebp = 0x0012ff34
    Found by: call frame info
63  firefox.exe!wmain [nsWindowsWMain.cpp:e0d293fe8408 : 120 + 0xc]
    eip = 0x00401cee   esp = 0x0012ff3c   ebp = 0x0012ff68
    Found by: call frame info
64  firefox.exe!__tmainCRTStartup [crtexe.c : 594 + 0x18]
    eip = 0x004075d6   esp = 0x0012ff70   ebp = 0x0012ffb8
    Found by: call frame info
65  firefox.exe!wmainCRTStartup [crtexe.c : 413 + 0x4]
    eip = 0x0040742d   esp = 0x0012ffc0   ebp = 0x0012ffc0   ebx = 0x0012c1b4
    Found by: call frame info
66  kernel32.dll + 0x2f23a
    eip = 0x77e6f23b   esp = 0x0012ffc8   ebp = 0x0012fff0
    Found by: call frame info
}
Mass marking whiteboard:[orange] bugs WFM (to clean up TBPL bug suggestions) that:
* Haven't changed in > 6months
* Whose whiteboard contains none of the strings: {disabled,marked,random,fuzzy,todo,fails,failing,annotated,leave open,time-bomb}
* Passed a (quick) manual inspection of bug summary/whiteboard to ensure they weren't a false positive.

I've also gone through and searched for cases where the whiteboard wasn't labelled correctly after test disabling, by using attachment description & basic comment searches. However if the test for which this bug was about has in fact been disabled/annotated/..., please accept my apologies & reopen/mark the whiteboard appropriately so this doesn't get re-closed in the future (and please ping me via IRC or email so I can try to tweak the saved searches to avoid more edge cases).

Sorry for the spam! Filter on: #FFA500
Status: NEW → RESOLVED
Last Resolved: 7 years ago
Resolution: --- → WORKSFORME
Whiteboard: [orange]
You need to log in before you can comment on or make changes to this bug.