Closed Bug 619332 Opened 14 years ago Closed 8 years ago

crash [@ nsBlockFrame::BuildDisplayList(nsDisplayListBuilder*, nsRect const&, nsDisplayListSet const&)]

Categories

(Core :: Web Painting, defect)

Product:
Core
Component:
Web Painting
Platform:
x86
All
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED INCOMPLETE

People

(Reporter: wsmwk, Unassigned)

References

Details

(Keywords: crash, steps-wanted)

Crash Data

crash [@ nsBlockFrame::BuildDisplayList(nsDisplayListBuilder*, nsRect const&, nsDisplayListSet const&)]

bp-d0013a1c-a7f4-4a2f-ab1b-b72802101205
firefox 4.0b7

EXCEPTION_ACCESS_VIOLATION_READ
0x0
0	xul.dll	nsBlockFrame::BuildDisplayList	layout/generic/nsBlockFrame.cpp:6169
1	xul.dll	nsIFrame::BuildDisplayListForChild	layout/generic/nsFrame.cpp:1725
2	xul.dll	nsTableCellFrame::BuildDisplayList	layout/tables/nsTableCellFrame.cpp:526
3	xul.dll	nsIFrame::BuildDisplayListForChild	layout/generic/nsFrame.cpp:1725
4	xul.dll	nsTableFrame::GenericTraversal	layout/tables/nsTableFrame.cpp:1182
5	xul.dll	nsTableFrame::DisplayGenericTablePart	layout/tables/nsTableFrame.cpp:1242
6	xul.dll	nsTableRowFrame::BuildDisplayList	layout/tables/nsTableRowFrame.cpp:633
7	xul.dll	nsIFrame::BuildDisplayListForChild	layout/generic/nsFrame.cpp:1725
8	xul.dll	DisplayRows	layout/tables/nsTableRowGroupFrame.cpp:229
9	xul.dll	nsTableFrame::DisplayGenericTablePart	layout/tables/nsTableFrame.cpp:1242
10	xul.dll	nsTableRowGroupFrame::BuildDisplayList	layout/tables/nsTableRowGroupFrame.cpp:271
11	xul.dll	nsIFrame::BuildDisplayListForChild	layout/generic/nsFrame.cpp:1725
12	xul.dll	nsTableFrame::GenericTraversal	layout/tables/nsTableFrame.cpp:1182

thunderbird 3.1.6
bp-c0ddec59-7245-40fa-950c-3f1782101121
0	thunderbird.exe	nsBlockFrame::BuildDisplayList	layout/generic/nsBlockFrame.cpp:6278
1	thunderbird.exe	nsIFrame::BuildDisplayListForChild	layout/generic/nsFrame.cpp:1503
2	thunderbird.exe	nsGfxScrollFrameInner::BuildDisplayList	layout/generic/nsGfxScrollFrame.cpp:1401
3	thunderbird.exe	nsHTMLScrollFrame::BuildDisplayList	layout/generic/nsGfxScrollFrame.h:287
4	thunderbird.exe	nsIFrame::BuildDisplayListForStackingContext	layout/generic/nsFrame.cpp:1262
5	thunderbird.exe	nsIFrame::BuildDisplayListForChild	layout/generic/nsFrame.cpp:1520
6	thunderbird.exe	nsStackFrame::BuildDisplayListForChildren	layout/xul/base/src/nsStackFrame.cpp:94
7	thunderbird.exe	nsBoxFrame::BuildDisplayList	layout/xul/base/src/nsBoxFrame.cpp:1299
8	thunderbird.exe	nsIFrame::BuildDisplayListForChild	layout/generic/nsFrame.cpp:1503
The block has a stale line cursor property?
It is #128 top crasher in 4.0b11.
linux equivalent?
bp-863cb97e-e29d-4ae1-990d-ed5a32110219
SIGSEGV
0x7ff303f96000
0	libxul.so	nsBlockFrame::BuildDisplayList	nsLineBox.h:404
1	libxul.so	nsIFrame::BuildDisplayListForChild	nsFrame.cpp:1503
2	libxul.so	DisplayLine	nsBlockFrame.cpp:6193
3	libxul.so	nsBlockFrame::BuildDisplayList	nsBlockFrame.cpp:6273
4	libxul.so	nsIFrame::BuildDisplayListForChild	nsFrame.cpp:1503
5	libxul.so	DisplayLine	nsBlockFrame.cpp:6193
6	libxul.so	nsBlockFrame::BuildDisplayList	nsBlockFrame.cpp:6258
7	libxul.so	nsIFrame::BuildDisplayListForChild	nsFrame.cpp:1503
8	libxul.so	DisplayLine	nsBlockFrame.cpp:6193
9	libxul.so	nsBlockFrame::BuildDisplayList	nsBlockFrame.cpp:6273
10	libxul.so	nsIFrame::BuildDisplayListForChild	nsFrame.cpp:1503
11	libxul.so	nsTableCellFrame::BuildDisplayList	nsTableCellFrame.cpp:518
12	libxul.so	nsIFrame::BuildDisplayListForChild	nsFrame.cpp:1503
Keywords: topcrash
OS: Windows XP → All
> linux equivalent?
I don't see any crashes on Linux in the trunk.
Keywords: topcrash
Crash Signature: [@ nsBlockFrame::BuildDisplayList(nsDisplayListBuilder*, nsRect const&, nsDisplayListSet const&)]
just got a crash with this signature on OSX running bananabread
still happening on trunk. nothing helpful in crash comments.
bp-9c25d5d0-a91b-4b49-9edd-47d852121116
bp-56b700ff-637f-4967-8ed9-ac1db2121117

rank has dropped substantially prior to FF15. #260 for firefox 16
Another crash with Firefox 25.0.1:
nsBoxFrame::BuildDisplayList(nsDisplayListBuilder*, nsRect const&, nsDisplayListSet const&)

Step to reproduce: Firefox is connected to internet when laptop is hibernated. When the hibernation is resumed internet connection is not available. As soon as user switch to firefox, firefox crashes.
Can anyone else reproduce the crash with the steps in comment 7? (in particular on WinXP)
Keywords: qawanted, steps-wanted
(In reply to hitesh.seth@yahoo.co.in from comment #7)
> Another crash with Firefox 25.0.1:
> nsBoxFrame::BuildDisplayList(nsDisplayListBuilder*, nsRect const&,
> nsDisplayListSet const&)
> 
> Step to reproduce: Firefox is connected to internet when laptop is
> hibernated. When the hibernation is resumed internet connection is not
> available. As soon as user switch to firefox, firefox crashes.

Link to crash: https://crash-stats.mozilla.com/report/index/e65c7903-42ef-487b-a335-0693c2131208
I was not able to reproduce the crash on two different machines with Windows XP x32, Ubuntu 12.04 x32 and Windows 7x32 following steps from comment 7.
Keywords: qawanted
@hitesh.seth, I see that you have HIPHandlers.dll loaded in Firefox, which I'm guessing
is part of "McAfee Host Intrusion Prevention".  Could you try disabling that product
temporarily, then restart Windows.  Now try the steps in comment 7 again - does it
still crash?
Flags: needinfo?(hitesh.seth)
mats, great idea. There may also be cases where other AV are at play. I had looked at some crash reports where I suspected AV and was looking for McAfee but in some cases found extensions avg@toolbar or wrc@avast.com

Thunderbird Examples for this signature
bp-5fc4c18c-221c-45f3-a4f2-90f682131209 has wrc@avast.com
bp-8e624e32-4d62-4c9d-96b7-a80a02131204 has avg@toolbar
n.b. I have not yet confirmed any of these cases involve said AV programs.
correct, comment 13 examples are both Firefox crashes
Whiteboard: [tbird crash]
(In reply to Mats Palmgren (:mats) from comment #12)
> @hitesh.seth, I see that you have HIPHandlers.dll loaded in Firefox, which
> I'm guessing
> is part of "McAfee Host Intrusion Prevention".  Could you try disabling that
> product
> temporarily, then restart Windows.  Now try the steps in comment 7 again -
> does it
> still crash?

Actually this is my enterprise machine where I don't have privileges to disable anti-virus. I have tried contacting administrator but they won't allow me to do that. So, I won't be able to test this by disabling that. If it helps, I haven't installed any separate third-party add-on.
And yes this is a firefox crash. If current bug is about thunderbird, should I open a separate bug to track firefox crashes?
Flags: needinfo?(hitesh.seth)
Priority: -- → P5
Whiteboard: [tbird crash]
Thanks for trying.  No, we can track both thunderbird and firefox crashes here.
Priority: P5 → --
Whiteboard: [tbird crash]
currently near zero occurrence in Thunderbird - not worth tracking.
Whiteboard: [tbird crash]
Crash Signature: [@ nsBlockFrame::BuildDisplayList(nsDisplayListBuilder*, nsRect const&, nsDisplayListSet const&)] → [@ nsBlockFrame::BuildDisplayList(nsDisplayListBuilder*, nsRect const&, nsDisplayListSet const&)] [@ nsBlockFrame::BuildDisplayList]
Component: Layout → Layout: Web Painting
I think we can just close this.  At <20 crashes per week across current versions, the crash rate is a couple orders of magnitude less than when originall reported. And most of the stacks have no resemblance to comment 0
Status: NEW → RESOLVED
Closed: 8 years ago
Resolution: --- → INCOMPLETE
You need to log in before you can comment on or make changes to this bug.