Closed Bug 619332 Opened 15 years ago Closed 9 years ago

crash [@ nsBlockFrame::BuildDisplayList(nsDisplayListBuilder*, nsRect const&, nsDisplayListSet const&)]

Categories

(Core :: Web Painting, defect)

Product:
Core
Component:
Web Painting
Platform:
x86
All
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED INCOMPLETE

People

(Reporter: wsmwk, Unassigned)

References

Details

(Keywords: crash, steps-wanted)

Crash Data

crash [@ nsBlockFrame::BuildDisplayList(nsDisplayListBuilder*, nsRect const&, nsDisplayListSet const&)] bp-d0013a1c-a7f4-4a2f-ab1b-b72802101205 firefox 4.0b7 EXCEPTION_ACCESS_VIOLATION_READ 0x0 0 xul.dll nsBlockFrame::BuildDisplayList layout/generic/nsBlockFrame.cpp:6169 1 xul.dll nsIFrame::BuildDisplayListForChild layout/generic/nsFrame.cpp:1725 2 xul.dll nsTableCellFrame::BuildDisplayList layout/tables/nsTableCellFrame.cpp:526 3 xul.dll nsIFrame::BuildDisplayListForChild layout/generic/nsFrame.cpp:1725 4 xul.dll nsTableFrame::GenericTraversal layout/tables/nsTableFrame.cpp:1182 5 xul.dll nsTableFrame::DisplayGenericTablePart layout/tables/nsTableFrame.cpp:1242 6 xul.dll nsTableRowFrame::BuildDisplayList layout/tables/nsTableRowFrame.cpp:633 7 xul.dll nsIFrame::BuildDisplayListForChild layout/generic/nsFrame.cpp:1725 8 xul.dll DisplayRows layout/tables/nsTableRowGroupFrame.cpp:229 9 xul.dll nsTableFrame::DisplayGenericTablePart layout/tables/nsTableFrame.cpp:1242 10 xul.dll nsTableRowGroupFrame::BuildDisplayList layout/tables/nsTableRowGroupFrame.cpp:271 11 xul.dll nsIFrame::BuildDisplayListForChild layout/generic/nsFrame.cpp:1725 12 xul.dll nsTableFrame::GenericTraversal layout/tables/nsTableFrame.cpp:1182 thunderbird 3.1.6 bp-c0ddec59-7245-40fa-950c-3f1782101121 0 thunderbird.exe nsBlockFrame::BuildDisplayList layout/generic/nsBlockFrame.cpp:6278 1 thunderbird.exe nsIFrame::BuildDisplayListForChild layout/generic/nsFrame.cpp:1503 2 thunderbird.exe nsGfxScrollFrameInner::BuildDisplayList layout/generic/nsGfxScrollFrame.cpp:1401 3 thunderbird.exe nsHTMLScrollFrame::BuildDisplayList layout/generic/nsGfxScrollFrame.h:287 4 thunderbird.exe nsIFrame::BuildDisplayListForStackingContext layout/generic/nsFrame.cpp:1262 5 thunderbird.exe nsIFrame::BuildDisplayListForChild layout/generic/nsFrame.cpp:1520 6 thunderbird.exe nsStackFrame::BuildDisplayListForChildren layout/xul/base/src/nsStackFrame.cpp:94 7 thunderbird.exe nsBoxFrame::BuildDisplayList layout/xul/base/src/nsBoxFrame.cpp:1299 8 thunderbird.exe nsIFrame::BuildDisplayListForChild layout/generic/nsFrame.cpp:1503
The block has a stale line cursor property?
It is #128 top crasher in 4.0b11.
linux equivalent? bp-863cb97e-e29d-4ae1-990d-ed5a32110219 SIGSEGV 0x7ff303f96000 0 libxul.so nsBlockFrame::BuildDisplayList nsLineBox.h:404 1 libxul.so nsIFrame::BuildDisplayListForChild nsFrame.cpp:1503 2 libxul.so DisplayLine nsBlockFrame.cpp:6193 3 libxul.so nsBlockFrame::BuildDisplayList nsBlockFrame.cpp:6273 4 libxul.so nsIFrame::BuildDisplayListForChild nsFrame.cpp:1503 5 libxul.so DisplayLine nsBlockFrame.cpp:6193 6 libxul.so nsBlockFrame::BuildDisplayList nsBlockFrame.cpp:6258 7 libxul.so nsIFrame::BuildDisplayListForChild nsFrame.cpp:1503 8 libxul.so DisplayLine nsBlockFrame.cpp:6193 9 libxul.so nsBlockFrame::BuildDisplayList nsBlockFrame.cpp:6273 10 libxul.so nsIFrame::BuildDisplayListForChild nsFrame.cpp:1503 11 libxul.so nsTableCellFrame::BuildDisplayList nsTableCellFrame.cpp:518 12 libxul.so nsIFrame::BuildDisplayListForChild nsFrame.cpp:1503
Keywords: topcrash
OS: Windows XP → All
> linux equivalent? I don't see any crashes on Linux in the trunk.
Keywords: topcrash
Crash Signature: [@ nsBlockFrame::BuildDisplayList(nsDisplayListBuilder*, nsRect const&, nsDisplayListSet const&)]
just got a crash with this signature on OSX running bananabread
still happening on trunk. nothing helpful in crash comments. bp-9c25d5d0-a91b-4b49-9edd-47d852121116 bp-56b700ff-637f-4967-8ed9-ac1db2121117 rank has dropped substantially prior to FF15. #260 for firefox 16
Another crash with Firefox 25.0.1: nsBoxFrame::BuildDisplayList(nsDisplayListBuilder*, nsRect const&, nsDisplayListSet const&) Step to reproduce: Firefox is connected to internet when laptop is hibernated. When the hibernation is resumed internet connection is not available. As soon as user switch to firefox, firefox crashes.
Can anyone else reproduce the crash with the steps in comment 7? (in particular on WinXP)
Keywords: qawanted, steps-wanted
(In reply to hitesh.seth@yahoo.co.in from comment #7) > Another crash with Firefox 25.0.1: > nsBoxFrame::BuildDisplayList(nsDisplayListBuilder*, nsRect const&, > nsDisplayListSet const&) > > Step to reproduce: Firefox is connected to internet when laptop is > hibernated. When the hibernation is resumed internet connection is not > available. As soon as user switch to firefox, firefox crashes. Link to crash: https://crash-stats.mozilla.com/report/index/e65c7903-42ef-487b-a335-0693c2131208
I was not able to reproduce the crash on two different machines with Windows XP x32, Ubuntu 12.04 x32 and Windows 7x32 following steps from comment 7.
@hitesh.seth, I see that you have HIPHandlers.dll loaded in Firefox, which I'm guessing is part of "McAfee Host Intrusion Prevention". Could you try disabling that product temporarily, then restart Windows. Now try the steps in comment 7 again - does it still crash?
Flags: needinfo?(hitesh.seth)
mats, great idea. There may also be cases where other AV are at play. I had looked at some crash reports where I suspected AV and was looking for McAfee but in some cases found extensions avg@toolbar or wrc@avast.com Thunderbird Examples for this signature bp-5fc4c18c-221c-45f3-a4f2-90f682131209 has wrc@avast.com bp-8e624e32-4d62-4c9d-96b7-a80a02131204 has avg@toolbar n.b. I have not yet confirmed any of these cases involve said AV programs.
correct, comment 13 examples are both Firefox crashes
Whiteboard: [tbird crash]
(In reply to Mats Palmgren (:mats) from comment #12) > @hitesh.seth, I see that you have HIPHandlers.dll loaded in Firefox, which > I'm guessing > is part of "McAfee Host Intrusion Prevention". Could you try disabling that > product > temporarily, then restart Windows. Now try the steps in comment 7 again - > does it > still crash? Actually this is my enterprise machine where I don't have privileges to disable anti-virus. I have tried contacting administrator but they won't allow me to do that. So, I won't be able to test this by disabling that. If it helps, I haven't installed any separate third-party add-on. And yes this is a firefox crash. If current bug is about thunderbird, should I open a separate bug to track firefox crashes?
Flags: needinfo?(hitesh.seth)
Priority: -- → P5
Whiteboard: [tbird crash]
Thanks for trying. No, we can track both thunderbird and firefox crashes here.
Priority: P5 → --
Whiteboard: [tbird crash]
currently near zero occurrence in Thunderbird - not worth tracking.
Whiteboard: [tbird crash]
Crash Signature: [@ nsBlockFrame::BuildDisplayList(nsDisplayListBuilder*, nsRect const&, nsDisplayListSet const&)] → [@ nsBlockFrame::BuildDisplayList(nsDisplayListBuilder*, nsRect const&, nsDisplayListSet const&)] [@ nsBlockFrame::BuildDisplayList]
Component: Layout → Layout: Web Painting
I think we can just close this. At <20 crashes per week across current versions, the crash rate is a couple orders of magnitude less than when originall reported. And most of the stacks have no resemblance to comment 0
Status: NEW → RESOLVED
Closed: 9 years ago
Resolution: --- → INCOMPLETE
You need to log in before you can comment on or make changes to this bug.