574856 - Crash [@ nsFrameLoader::Show] with video and DOMAttrModified removing window

Status: RESOLVED WORKSFORME

(Core :: Layout, defect)

Description

[Martijn Wargers (dead)]

Attachment: testcase

See testcase, which crashes current trunk build.

http://crash-stats.mozilla.com/report/index/bb2d5745-c71d-43b3-bdbd-43ec22100625
0  	xul.dll  	nsFrameLoader::Show  	 content/base/src/nsFrameLoader.cpp:625
1 	xul.dll 	nsSubDocumentFrame::ShowViewer 	layout/generic/nsFrameFrame.cpp:351

Comment 1

[Martijn Wargers (dead)]

http://crash-stats.mozilla.com/report/index/2e7ee44f-b591-4a4a-b71d-b5bfa2100710
0  	xul.dll  	nsFrameLoader::Show  	 content/base/src/nsFrameLoader.cpp:727
1 	xul.dll 	nsSubDocumentFrame::ShowViewer 	layout/generic/nsFrameFrame.cpp:349
2 	xul.dll 	AsyncFrameInit::Run 	layout/generic/nsFrameFrame.cpp:260
3 	xul.dll 	nsContentUtils::RemoveScriptBlocker 	content/base/src/nsContentUtils.cpp:4634
4 	xul.dll 	PresShell::FlushPendingNotifications 	layout/base/nsPresShell.cpp:4787
5 	xul.dll 	nsDocument::FlushPendingNotifications 	content/base/src/nsDocument.cpp:6124
6 	xul.dll 	nsDocument::FlushPendingNotifications 	content/base/src/nsDocument.cpp:6119
7 	xul.dll 	nsDocLoader::DocLoaderIsEmpty 	uriloader/base/nsDocLoader.cpp:759
8 	xul.dll 	nsDocLoader::OnStopRequest 	uriloader/base/nsDocLoader.cpp:700
9 	xul.dll 	nsLoadGroup::RemoveRequest 	netwerk/base/src/nsLoadGroup.cpp:680
10 	xul.dll 	xul.dll@0xa2a517 	
11 	xul.dll 	nsDocument::UnblockOnload 	content/base/src/nsDocument.cpp:6891
12 	xul.dll 	nsDocument::DispatchContentLoadedEvents 	content/base/src/nsDocument.cpp:3892
13 	xul.dll 	nsRunnableMethodImpl<void 	obj-firefox/dist/include/nsThreadUtils.h:347
14 	xul.dll 	nsThread::ProcessNextEvent 	xpcom/threads/nsThread.cpp:547
15 	xul.dll 	mozilla::ipc::MessagePump::Run 	ipc/glue/MessagePump.cpp:118
16 	xul.dll 	MessageLoop::RunInternal 	ipc/chromium/src/base/message_loop.cc:219
17 	xul.dll 	MessageLoop::RunHandler 	ipc/chromium/src/base/message_loop.cc:202
18 	xul.dll 	xul.dll@0x30e743 	
19 	xul.dll 	MessageLoop::Run 	ipc/chromium/src/base/message_loop.cc:176
20 	xul.dll 	nsBaseAppShell::Run 	widget/src/xpwidgets/nsBaseAppShell.cpp:175
21 	xul.dll 	nsAppShell::Run 	widget/src/windows/nsAppShell.cpp:243
22 	xul.dll 	nsAppStartup::Run 	toolkit/components/startup/src/nsAppStartup.cpp:192
23 	xul.dll 	XRE_main 	toolkit/xre/nsAppRunner.cpp:3619
24 	firefox.exe 	wmain 	toolkit/xre/nsWindowsWMain.cpp:120
25 	firefox.exe 	__tmainCRTStartup 	obj-firefox/memory/jemalloc/crtsrc/crtexe.c:591
26 	kernel32.dll 	kernel32.dll@0x51193 	
27 	ntdll.dll 	__RtlUserThreadStart 	
28 	ntdll.dll 	_RtlUserThreadStart

Comment 2

[Sheila Mooney]

Kairo confirmed that the testcase still crashes on the trunk (11.0a1).

Comment 3

[Boris Zbarsky [:bzbarsky]]

Seems to be worksforme on trunk... Martijn, are you still seeing this?

Comment 4

[Martijn Wargers (dead)]

Yes, worksforme too.