588371 - Firefox crash after opening many multiple d(hundreds) new empty tabs [@ nsStyleContext::DoGetStyleDisplay]

Status: RESOLVED WONTFIX

(Core :: Layout, defect)

Description

[Jorge Moura]

User-Agent:       Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; MS-RTC LM 8; OfficeLiveConnector.1.5; OfficeLivePatch.1.3; .NET4.0C; .NET4.0E)
Build Identifier: 

New tab operation increases memory alocated to "Firefox.exe" process causing it to crash

Reproducible: Always

Steps to Reproduce:
1.Open Firefox
2.Click the plus sign (+) to create a empty tab
3.Repeat the operation 700 times
Actual Results:  
1 - After a while the new tabs are presented in black color
2 - Firefox crashes
3 - In event viewer the following error entry is created:
"Nome da aplicação com falha: firefox.exe, versão: 2.0.0.3869, carimbo de data/hora: 0x4c5b8142
Nome do módulo com falha: mozalloc.dll, versão: 2.0.0.3869, carimbo de data/hora: 0x4c5b7297
Código de excepção: 0x80000003
Desvio de falha: 0x00001a19
ID do processo com falha: 0x16b8
Data/hora de início da aplicação com falha: 0x01cb3eadd52ea87c
Caminho da aplicação com falha: C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 3\firefox.exe
Caminho do módulo com falha: C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 3\mozalloc.dll
ID do Relatório: 94060d91-aaba-11df-bc43-005056c00008"

Expected Results:  
1 - The new tab operation shouldn't take too many memory resources
2 - Firefox shouldn't crash

Comment 1

[Tyler Downer [He/Him]]

Please give us a stacktrace. https://developer.mozilla.org/En/How_to_get_a_stacktrace_for_a_bug_report
What version of firefox are you using?

Comment 2

[Jorge Moura]

The Firefox version is 4.03b (Mozilla/5.0 (Windows; Windows NT 6.1; WOW64; rv:2.0b3) Gecko/20100805 Firefox/4.0b3)

Comment 3

[timeless]

please ensure you use the 32bit version of windbg, it's available from:
http://msdl.microsoft.com/download/symbols/debuggers/dbg_x86_6.11.1.404.msi

Comment 4

[Jorge Moura]

Attachment: stacktrace

This is the first time i use Windbg and I have some novice questions:
1 - When starting Firefox using WinDbg interface Firefox didn't crash... it just hang... is this normal?
2 - The moment Firefox hang the WinDbg was showing the status "Busy", because I couldn't do anything in the browser--- 5 minutes  later I decided to Break the debugging process as suggested... should I waited longer?

Comment 5

[timeless]

sorry, i'm not quite sure about your experience w/ windbg, however the stack you produced is precisely what we want...

(a28.135c): Access violation - code c0000005 (first chance)
First chance exceptions are reported before any exception handling.
This exception may be expected and handled.
xul!nsStyleContext::DoGetStyleDisplay:
71907c90 8b4124          mov     eax,dword ptr [ecx+24h] ds:002b:00000024=????????
0:000:x86> |* ~* kp

nsStyleContext::DoGetStyleDisplay(int aComputeData = 0n1905295259)
nsIFrame::GetStyleDisplay
nsFrame::Init
nsContainerFrame::Init
nsCSSFrameConstructor::SetUpDocElementContainingBlock
nsCSSFrameConstructor::ConstructDocElementFrame
nsCSSFrameConstructor::ContentRangeInserted
nsCSSFrameConstructor::ContentInserted
PresShell::InitialReflow

Comment 6

[florian.neubauer.neuroscience]

I want to confirm the part of the bug description in which it says "new tabs are presented in black color". I do see this often also with only a few empty tabs in panorama: Either the new tabs are entirely black or there is a black bar at the bottom. White and black empty tabs can be present at the same time. Sometimes, after a while (many seconds), the black tabs get rendered white, sometimes they do not even after minutes of waiting. I try to attach a screenshot.

Comment 7

[florian.neubauer.neuroscience]

Attachment: screenshot of black empty tabs in panorama

Comment 8

[florian.neubauer.neuroscience]

Attachment: screenshot of black bar at bottom of empty tabs in panorama - also in this view - FF4beta11

Comment 9

[florian.neubauer.neuroscience]

Attachment: screenshot of black bar at bottom of empty tabs in panorama

In this case, first, the empty tabs were rendered in white, and then I could see firefox ADD the black bar - tab by tab - at the bottom afterwards. This makes me think that the black bar might be some kind of intended but mis-sized/mis-arranged shadow. FF4-beta-11, XP-SP3.

Comment 10

[Sylvestre Ledru [:Sylvestre]]

Closing because no crash reported since 12 weeks.