Closed Bug 613532 Opened 14 years ago Closed 3 years ago

Firefox/4.0b8pre crash in [@ nsHTMLScrollFrame::Reflow(nsPresContext*, nsHTMLReflowMetrics&, nsHTMLReflowState const&, unsigned int&) ]

Categories

(Core :: Layout, defect)

x86
Windows XP
defect
Not set
critical

Tracking

()

RESOLVED WORKSFORME
Tracking Status
firefox47 --- affected
firefox48 --- affected

People

(Reporter: marcia, Unassigned)

Details

(Keywords: crash)

Crash Data

Seen while reviewing trunk crash data and new to the 2010111900 build.
http://tinyurl.com/22pbjr7 links to all reports so far.

Frame 	Module 	Signature [Expand] 	Source
0 	xul.dll 	nsHTMLScrollFrame::Reflow 	layout/generic/nsGfxScrollFrame.cpp:843
1 	xul.dll 	nsBlockReflowContext::ReflowBlock 	layout/generic/nsBlockReflowContext.cpp:297
2 	xul.dll 	nsBlockFrame::ReflowFloat 	layout/generic/nsBlockFrame.cpp:5771
3 	xul.dll 	nsBlockReflowState::FlowAndPlaceFloat 	layout/generic/nsBlockReflowState.cpp:822
4 	xul.dll 	nsBlockReflowState::AddFloat 	layout/generic/nsBlockReflowState.cpp:575
5 	xul.dll 	nsLineLayout::ReflowFrame 	layout/generic/nsLineLayout.cpp:893
6 	xul.dll 	nsBlockFrame::ReflowInlineFrame 	layout/generic/nsBlockFrame.cpp:3794
7 	xul.dll 	nsBlockFrame::DoReflowInlineFrames 	layout/generic/nsBlockFrame.cpp:3590
8 	xul.dll 	nsBlockFrame::ReflowInlineFrames 	layout/generic/nsBlockFrame.cpp:3449
9 	xul.dll 	nsBlockFrame::ReflowLine 	layout/generic/nsBlockFrame.cpp:2545
10 	xul.dll 	nsBlockFrame::ReflowDirtyLines 	layout/generic/nsBlockFrame.cpp:1982
11 	xul.dll 	nsBlockFrame::Reflow 	layout/generic/nsBlockFrame.cpp:1059
12 	xul.dll 	nsBlockReflowContext::ReflowBlock 	layout/generic/nsBlockReflowContext.cpp:297
13 	xul.dll 	nsBlockFrame::ReflowBlockFrame 	layout/generic/nsBlockFrame.cpp:3167
14 	xul.dll 	nsBlockFrame::ReflowLine 	layout/generic/nsBlockFrame.cpp:2489
15 	xul.dll 	nsBlockFrame::ReflowDirtyLines 	layout/generic/nsBlockFrame.cpp:1982
16 	xul.dll 	nsBlockFrame::Reflow 	layout/generic/nsBlockFrame.cpp:1059
17 	xul.dll 	nsBlockReflowContext::ReflowBlock 	layout/generic/nsBlockReflowContext.cpp:297
18 	xul.dll 	nsBlockFrame::ReflowBlockFrame 	layout/generic/nsBlockFrame.cpp:3167
19 	xul.dll 	nsBlockFrame::ReflowLine 	layout/generic/nsBlockFrame.cpp:2489
20 	xul.dll 	nsBlockFrame::ReflowDirtyLines 	layout/generic/nsBlockFrame.cpp:1982
21 	xul.dll 	nsBlockFrame::Reflow 	layout/generic/nsBlockFrame.cpp:1059
22 	xul.dll 	nsBlockReflowContext::ReflowBlock 	layout/generic/nsBlockReflowContext.cpp:297
23 	xul.dll 	nsBlockFrame::ReflowFloat 	layout/generic/nsBlockFrame.cpp:5771
24 	xul.dll 	nsBlockReflowState::FlowAndPlaceFloat 	layout/generic/nsBlockReflowState.cpp:822
25 	xul.dll 	nsBlockReflowState::AddFloat 	layout/generic/nsBlockReflowState.cpp:575
26 	xul.dll 	nsLineLayout::ReflowFrame 	layout/generic/nsLineLayout.cpp:893
27 	xul.dll 	nsBlockFrame::ReflowInlineFrame 	layout/generic/nsBlockFrame.cpp:3794
28 	xul.dll 	nsBlockFrame::DoReflowInlineFrames 	layout/generic/nsBlockFrame.cpp:3590
29 	xul.dll 	nsBlockFrame::ReflowInlineFrames 	layout/generic/nsBlockFrame.cpp:3449
30 	xul.dll 	nsBlockFrame::ReflowLine 	layout/generic/nsBlockFrame.cpp:2545
31 	xul.dll 	nsBlockFrame::ReflowDirtyLines 	layout/generic/nsBlockFrame.cpp:1982
32 	xul.dll 	nsBlockFrame::Reflow 	layout/generic/nsBlockFrame.cpp:1059
33 	xul.dll 	nsBlockReflowContext::ReflowBlock 	layout/generic/nsBlockReflowContext.cpp:297
34 	xul.dll 	nsBlockFrame::ReflowBlockFrame 	layout/generic/nsBlockFrame.cpp:3167
35 	xul.dll 	nsBlockFrame::ReflowLine 	layout/generic/nsBlockFrame.cpp:2489
36 	xul.dll 	nsBlockFrame::ReflowDirtyLines 	layout/generic/nsBlockFrame.cpp:1982
37 	xul.dll 	nsBlockFrame::Reflow 	layout/generic/nsBlockFrame.cpp:1059
38 	xul.dll 	nsBlockReflowContext::ReflowBlock 	layout/generic/nsBlockReflowContext.cpp:297
39 	xul.dll 	nsBlockFrame::ReflowBlockFrame 	layout/generic/nsBlockFrame.cpp:3167
40 	xul.dll 	nsBlockFrame::ReflowLine 	layout/generic/nsBlockFrame.cpp:2489
41 	xul.dll 	nsBlockFrame::ReflowDirtyLines 	layout/generic/nsBlockFrame.cpp:1982
42 	xul.dll 	nsBlockFrame::Reflow 	layout/generic/nsBlockFrame.cpp:1059
43 	xul.dll 	nsBlockReflowContext::ReflowBlock 	layout/generic/nsBlockReflowContext.cpp:297
44 	xul.dll 	nsBlockFrame::ReflowBlockFrame 	layout/generic/nsBlockFrame.cpp:3167
45 	xul.dll 	nsBlockFrame::ReflowLine 	layout/generic/nsBlockFrame.cpp:2489
46 	xul.dll 	nsBlockFrame::ReflowDirtyLines 	layout/generic/nsBlockFrame.cpp:1982
47 	xul.dll 	nsBlockFrame::Reflow 	layout/generic/nsBlockFrame.cpp:1059
48 	xul.dll 	nsContainerFrame::ReflowChild 	layout/generic/nsContainerFrame.cpp:739
49 	xul.dll 	nsCanvasFrame::Reflow 	layout/generic/nsCanvasFrame.cpp:494
50 	xul.dll 	nsContainerFrame::ReflowChild 	layout/generic/nsContainerFrame.cpp:739
51 	xul.dll 	nsHTMLScrollFrame::ReflowScrolledFrame 	layout/generic/nsGfxScrollFrame.cpp:516
52 	xul.dll 	nsHTMLScrollFrame::ReflowContents 	layout/generic/nsGfxScrollFrame.cpp:608
53 	xul.dll 	nsHTMLScrollFrame::Reflow 	layout/generic/nsGfxScrollFrame.cpp:816
54 	xul.dll 	nsContainerFrame::ReflowChild 	layout/generic/nsContainerFrame.cpp:739
55 	xul.dll 	ViewportFrame::Reflow 	layout/generic/nsViewportFrame.cpp:293
56 	xul.dll 	PresShell::DoReflow 	layout/base/nsPresShell.cpp:7789
57 	xul.dll 	PresShell::ProcessReflowCommands 	layout/base/nsPresShell.cpp:7928
58 	xul.dll 	PresShell::FlushPendingNotifications 	layout/base/nsPresShell.cpp:4904
59 	xul.dll 	nsRefreshDriver::Notify 	layout/base/nsRefreshDriver.cpp:310
60 	xul.dll 	nsTimerImpl::Fire 	xpcom/threads/nsTimerImpl.cpp:428
61 	xul.dll 	nsTimerEvent::Run 	xpcom/threads/nsTimerImpl.cpp:517
62 	xul.dll 	nsThread::ProcessNextEvent 	xpcom/threads/nsThread.cpp:626
63 	xul.dll 	TimerThread::RemoveTimer 	
64 	xul.dll 	mozilla::ipc::MessagePump::Run 	ipc/glue/MessagePump.cpp:134
65 	xul.dll 	MessageLoop::RunHandler 	ipc/chromium/src/base/message_loop.cc:202
66 	xul.dll 	MessageLoop::Run 	ipc/chromium/src/base/message_loop.cc:176
67 	xul.dll 	nsBaseAppShell::Run 	widget/src/xpwidgets/nsBaseAppShell.cpp:181
68 	xul.dll 	xul.dll@0xb0132b 	
69 	xul.dll 	nsAppStartup::Run 	toolkit/components/startup/src/nsAppStartup.cpp:191
70 	xul.dll 	XRE_main 	toolkit/xre/nsAppRunner.cpp:3691
71 	firefox.exe 	wmain 	toolkit/xre/nsWindowsWMain.cpp:128
72 	firefox.exe 	__tmainCRTStartup 	obj-firefox/memory/jemalloc/crtsrc/crtexe.c:591
73 	kernel32.dll 	BaseProcessStart
Summary: crash in [@ nsHTMLScrollFrame::Reflow(nsPresContext*, nsHTMLReflowMetrics&, nsHTMLReflowState const&, unsigned int&) ] → Firefox/4.0b8pre crash in [@ nsHTMLScrollFrame::Reflow(nsPresContext*, nsHTMLReflowMetrics&, nsHTMLReflowState const&, unsigned int&) ]
This looks like one user submitting 9 crashes over an 8 minute period.  That means there's no particular reason to think the crash was new at any particular time.  So without a URL or steps to reproduce I don't think there's any useful information here, unless we see these crashes continue happening often enough that we have a clear regression range.
Casting a wider net, http://tinyurl.com/35zvqnj shows this happens on the other branches as well, with 151 crashes in the last week.
127 crashes in the last week - http://tinyurl.com/2ftm335. The lone comment mentions Facebook Farmville.
this mostly looks like a 3.6.x problem at this point

checking --- nsHTMLScrollFrame::Reflow.nsPresContext.,.nsHTMLReflowMetrics...nsHTMLReflowState.const...unsigned.int.. 20110227-crashdata.csv
found in: 3.6.13 3.6.8 4.0b12 4.0b11 3.6b5 3.6.3
release total-crashes
              nsHTMLScrollFrame::Reflow.nsPresContext.,.nsHTMLReflowMetrics...nsHTMLReflowState.const...unsigned.int.. crashes
                         pct.
all     358644  29      8.08601e-05
3.6.13  200459  23      0.000114737
3.6.8   4090    2       0.000488998
4.0b12  43247   1       2.3123e-05
4.0b11  35982   1       2.77917e-05
3.6b5   508     1       0.0019685
3.6.3   5248    1       0.000190549

flash versions around at time of crash
  11 [blank]
   8 10.2.152.26
   4 10.1.102.64
   2 10.0.22.87
   1 9.0.124.0
   1 10.1.85.3
   1 10.1.82.76
   1 10.0.42.34

the single comment about flash farmville really isn't reflective of the urls, which look more like general browsing.

   3 
   1 http://www.t-online.de/
   1 http://www.poland.gov.pl/Hala,Stulecia,we,Wroclawiu,(2006),7536.html
   1 http://www.orkut.com.br/Main#Application?uid=
   1 http://www.orkut.com.br/Home.aspx
   1 http://www.orkut.com.br/AlbumList?uid=
   1 http://www.odnoklassniki.ru/
   1 http://www.libertatea.ro/stire/monica-iacob-ridzi-niciodata-nu-as-lua-maduva-de-la-fiul-meu-324192.html
   1 http://www.keezmovies.com/categories/mature?page=21
   1 http://www.jappy.de/start/logout
   1 http://www.google.gr/
   1 http://www.google.com/
   1 http://www.google.com.tr/#hl=tr&source=hp&...
   1 http://www.facebook.com/album.php?id=XXX&aid=XXXX#!/photo.php?fbid=XXX&set=a.XXXX&theater
   1 http://www.facebook.com/ZA.AH.ME.HA#!/album.php?profile=1&id=XXX
   1 http://vkontakte.ru/XXXX
   1 http://vkontakte.ru/idXXX
   1 http://vkontakte.ru/al_mail.php?__query=mail&al=-1&al_id=XXXX
   1 http://tubegalore.com/cgi-bin/atx/out.cgi
   1 http://translate.google.com/?hl=&ie=UTF-8&text=&sl=en&tl=fr#fr|ar|
   1 http://static.ak.facebook.com/common/redirectiframe.html
   1 http://s5.es.ikariam.com/index.php?view=
   1 http://s1.trrsf.com.br/atm/2/core/_tpl/advertising.html?tag=br.entertainment_oscar.galleries&area=textlinks&site=br.terra.entertainment&zone=oscar.galleries
   1 http://reg.weddingchannel.com/registry/view.action?r=XXXX
   1 http://iwiw.hu/pages/user/search/search.jsp?token=
   1 http://iphone.zoha.vn/category.php?task=download&cat_id=&page_download=11#download
   1 http://cid-cd0f9f2cda940c0b.profile.live.com/
Crash Signature: [@ nsHTMLScrollFrame::Reflow(nsPresContext*, nsHTMLReflowMetrics&, nsHTMLReflowState const&, unsigned int&) ]
Crash Signature: [@ nsHTMLScrollFrame::Reflow(nsPresContext*, nsHTMLReflowMetrics&, nsHTMLReflowState const&, unsigned int&) ] → [@ nsHTMLScrollFrame::Reflow(nsPresContext*, nsHTMLReflowMetrics&, nsHTMLReflowState const&, unsigned int&) ] [@ nsHTMLScrollFrame::Reflow ]
Crash volume for signature 'nsHTMLScrollFrame::Reflow':
 - nightly (version 50): 0 crash from 2016-06-06.
 - aurora  (version 49): 0 crash from 2016-06-07.
 - beta    (version 48): 10 crashes from 2016-06-06.
 - release (version 47): 31 crashes from 2016-05-31.
 - esr     (version 45): 0 crash from 2016-04-07.

Crash volume on the last weeks:
             Week N-1   Week N-2   Week N-3   Week N-4   Week N-5   Week N-6   Week N-7
 - nightly          0          0          0          0          0          0          0
 - aurora           0          0          0          0          0          0          0
 - beta             1          6          0          3          0          0          0
 - release          6          2          2         13          2          2          2
 - esr              0          0          0          0          0          0          0

Affected platforms: Windows, Mac OS X, Linux

Marking this as Resolved > Worksforme since there are no more crashes with this signature in the past 6 months.

Status: NEW → RESOLVED
Closed: 3 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.