Closed Bug 627706 Opened 13 years ago Closed 6 years ago

Crash [@ nsCSSRuleProcessor::RefreshRuleCascade(nsPresContext*) ]

Categories

(Core :: CSS Parsing and Computation, defect)

Product:
Core
Component:
CSS Parsing and Computation
Version:
38 Branch
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED INCOMPLETE
Tracking Flags:
Tracking Status
firefox42 --- affected
firefox43 --- affected
firefox44 --- affected
firefox45 --- affected
firefox46 --- affected
firefox47 --- affected
firefox48 --- ?
firefox49 --- ?

People

(Reporter: scoobidiver, Unassigned)

Details

(Keywords: crash, topcrash-win)

Crash Data

It is a residual crash signature that exists in 3.6 and the trunk.
It is #79 top crasher in 4.0b9 for the last week.

Stack traces are various:
0 	xul.dll 	nsCSSRuleProcessor::RefreshRuleCascade 	layout/style/nsCSSRuleProcessor.cpp:3140
1 	xul.dll 	nsStyleSet::AppendFontFaceRules 	layout/style/nsStyleSet.cpp:1051
2 	xul.dll 	nsPresContext::FlushUserFontSet 	layout/base/nsPresContext.cpp:1944
3 	xul.dll 	PresShell::FlushPendingNotifications 	layout/base/nsPresShell.cpp:4845
4 	xul.dll 	PresShell::WillPaint 	layout/base/nsPresShell.cpp:7422
5 	xul.dll 	nsViewManager::DispatchEvent 	view/src/nsViewManager.cpp:896
6 	xul.dll 	AttachedHandleEvent 	view/src/nsView.cpp:193
7 	xul.dll 	nsWindow::DispatchEvent 	widget/src/windows/nsWindow.cpp:3679
...

0 	xul.dll 	nsCSSRuleProcessor::RefreshRuleCascade 	layout/style/nsCSSRuleProcessor.cpp:3140
1 	xul.dll 	nsCSSRuleProcessor::RulesMatching 	layout/style/nsCSSRuleProcessor.cpp:2442
2 	xul.dll 	EnumRulesMatching<AnonBoxRuleProcessorData> 	layout/style/nsStyleSet.cpp:408
3 	xul.dll 	nsStyleSet::FileRules 	layout/style/nsStyleSet.cpp:633
4 	xul.dll 	nsStyleSet::ResolveAnonymousBoxStyle 	layout/style/nsStyleSet.cpp:998
5 	xul.dll 	nsCSSFrameConstructor::ConstructRootFrame 	layout/base/nsCSSFrameConstructor.cpp:2536
6 	xul.dll 	PresShell::InitialReflow 	layout/base/nsPresShell.cpp:2680
7 	xul.dll 	nsContentSink::StartLayout 	content/base/src/nsContentSink.cpp:1244
...

0 	xul.dll 	nsCSSRuleProcessor::RefreshRuleCascade 	layout/style/nsCSSRuleProcessor.cpp:3140
1 	xul.dll 	nsCSSRuleProcessor::HasAttributeDependentStyle 	
2 	xul.dll 	SheetHasAttributeStyle 	layout/style/nsStyleSet.cpp:1282
3 	xul.dll 	xul.dll@0x10163f 	
4 	xul.dll 	nsStyleSet::WalkRuleProcessors 	layout/style/nsStyleSet.cpp:743
5 	xul.dll 	nsStyleSet::HasAttributeDependentStyle 	layout/style/nsStyleSet.cpp:1297
6 	xul.dll 	nsGenericElement::SetAttr 	content/base/src/nsGenericElement.cpp:4613
...

More reports at:
http://crash-stats.mozilla.com/report/list?range_value=4&range_unit=weeks&signature=nsCSSRuleProcessor%3A%3ARefreshRuleCascade%28nsPresContext*%29&version=Firefox%3A4.0b9
Component: Layout → Style System (CSS)
QA Contact: layout → style-system
Likely fixed by bug 623351, which is fixed in 4.0b10, 3.6.15, and 3.5.18.
Extension correlations in 4.0b12:
  nsCSSRuleProcessor::RefreshRuleCascade(nsPresContext*)|EXCEPTION_ACCESS_VIOLATION_READ (22 crashes)
     18% (4/22) vs.   3% (657/19440) {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}
     14% (3/22) vs.   0% (20/19440) {0a452a47-c5a8-4854-a237-4b9b06b376f0}
     14% (3/22) vs.   0% (28/19440) {ad708c09-d51b-45b3-9d28-4eba2681febf}
     14% (3/22) vs.   0% (63/19440) pdfforge@mybrowserbar.com
     95% (21/22) vs.  82% (15980/19440) testpilot@labs.mozilla.com (Mozilla Labs - Test Pilot, https://addons.mozilla.org/addon/13661)
     14% (3/22) vs.   1% (179/19440) {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}
     14% (3/22) vs.   2% (307/19440) wtxpcom@mybrowserbar.com
     18% (4/22) vs.   8% (1641/19440) {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
      9% (2/22) vs.   0% (52/19440) battlefieldplay4free@ea.com
     32% (7/22) vs.  23% (4523/19440) jqs@sun.com (Java Quick Starter, http://java.sun.com/javase/downloads/)
      9% (2/22) vs.   2% (372/19440) {37964A3C-4EE8-47b1-8321-34DE2C39BA4D}
     95% (21/22) vs.  90% (17560/19440) {972ce4c6-7e08-4474-a285-3208198ce6fd} (Default, https://addons.mozilla.org/addon/8150)
Crash Signature: [@ nsCSSRuleProcessor::RefreshRuleCascade(nsPresContext*) ]
Ended up here reviewing a user's crashes on 16.0 in SUMO[1].
Linking in case you need to gather more data from the system with the crash.

bp-16cabf45-d937-4f6f-b45d-80d562120926

1| https://support.mozilla.org/en-US/questions/938141
(In reply to alex_mayorga from comment #4)
> Ended up here reviewing a user's crashes on 16.0 in SUMO[1].
See bug 770238 comment 10.
Crash Signature: [@ nsCSSRuleProcessor::RefreshRuleCascade(nsPresContext*) ] → [@ nsCSSRuleProcessor::RefreshRuleCascade(nsPresContext*) ] [@ AddRule ]
Crash Signature: [@ nsCSSRuleProcessor::RefreshRuleCascade(nsPresContext*) ] [@ AddRule ] → [@ nsCSSRuleProcessor::RefreshRuleCascade(nsPresContext*) ] [@ AddRule ] [@ nsCSSRuleProcessor::RefreshRuleCascade ]
From the latest crash report (from Comment 8), the affected versions are:
- Nightly: 47
- Aurora: 45, 46
- Beta: 45.0b1, 44.0b2, 45.0b2
https://crash-stats.mozilla.com/signature/?product=Firefox&signature=nsCSSRuleProcessor%3A%3ARefreshRuleCascade

Operating System
Operating System 	Count 	Percentage
Windows 7 	232 	49.8%
Windows XP 	161 	34.5%
Windows 10 	43 	9.2%
Windows 8.1 	12 	2.6%
Windows Vista 	10 	2.1%
Windows 8 	4 	0.9%
OS X 10.10 	2 	0.4%
OS X 10.11 	1 	0.2%
OS X 10.9 	1 	0.2%

Product
Product 	Version 	Count 	Percentage 	Installations
Firefox 	45.0.2 	184 	39.1% 	202
Firefox 	46.0 	72 	15.3% 	72
Firefox 	46.0b99 	42 	8.9% 	31
Firefox 	47.0b1 	38 	8.1% 	28
Firefox 	43.0.1 	15 	3.2% 	16
Firefox 	45.0.1 	7 	1.5% 	6
Firefox 	46.0b10 	5 	1.1% 	6
Firefox 	46.0b5 	5 	1.1% 	3
Firefox 	12.0 	3 	0.6% 	2
Firefox 	38.0.1 	3 	0.6% 	3
Firefox 	40.0.3 	3 	0.6% 	3
Firefox 	41.0.2 	3 	0.6% 	3
Firefox 	45.0.2esr 	3 	0.6% 	3
Firefox 	45.0b10 	3 	0.6% 	3
Firefox 	46.0b8 	3 	0.6% 	3
Firefox 	46.0b9 	3 	0.6% 	2
Firefox 	13.0b5 	2 	0.4% 	2
Firefox 	16.0.2 	2 	0.4% 	2
Firefox 	22.0b1 	2 	0.4% 	1
Firefox 	25.0.1 	2 	0.4% 	2
Firefox 	26.0b8 	2 	0.4% 	1
Firefox 	37.0.2 	2 	0.4% 	1
Firefox 	38.0.1esr 	2 	0.4% 	2
Firefox 	38.0b6 	2 	0.4% 	2
Firefox 	38.0b9 	2 	0.4% 	2
Firefox 	41.0b9 	2 	0.4% 	2
Firefox 	46.0a1 	2 	0.4% 	2
Firefox 	46.0b11 	2 	0.4% 	2
Firefox 	10.0 	1 	0.2% 	1
Firefox 	12.0b5 	1 	0.2% 	1
Firefox 	13.0.1 	1 	0.2% 	1
Firefox 	13.0b7 	1 	0.2% 	1
Firefox 	15.0.1 	1 	0.2% 	1
Firefox 	17.0.1esr 	1 	0.2% 	1
Firefox 	20.0.1 	1 	0.2% 	1
Firefox 	20.0b5 	1 	0.2% 	1
Firefox 	23.0b10 	1 	0.2% 	1
Firefox 	23.0b9 	1 	0.2% 	1
Firefox 	24.0b9 	1 	0.2% 	1
Firefox 	24.0esr 	1 	0.2% 	1
Firefox 	24.4.0esr 	1 	0.2% 	1
Firefox 	25.0b7 	1 	0.2% 	1
Firefox 	27.0b2 	1 	0.2% 	1
Firefox 	3.6b5 	1 	0.2% 	1
Firefox 	30.0b2 	1 	0.2% 	1
Firefox 	31.0b8 	1 	0.2% 	1
Firefox 	31.0esr 	1 	0.2% 	1
Firefox 	34.0.5 	1 	0.2% 	1
Firefox 	34.0b8 	1 	0.2% 	1
Firefox 	37.0 	1 	0.2% 	1
FennecAndroid 	25.0 	1 	0.2% 	1
FennecAndroid 	39.0 	1 	0.2% 	1
FennecAndroid 	45.0.2 	1 	0.2% 	1
FennecAndroid 	46.0 	1 	0.2% 	1
Thunderbird 	31.7.0 	1 	0.2% 	1

Architecture
Architecture 	Count 	Percentage
x86 	443 	95.1%
amd64 	23 	4.9%
This bug does not cover ShutDownKill crashes.  See bug 1219672 comment 36.  Please stop adding comments about ShutDownKill crashes to bugs that are about non-ShutDownKill crashes.
No longer blocks: shutdownkill
Whiteboard: ShutDownKill
nsCSSRuleProcessor is gone so it's not worth tracking these signatures anymore.
Please file new bugs as appropriate.
Status: NEW → RESOLVED
Closed: 6 years ago
Resolution: --- → INCOMPLETE
You need to log in before you can comment on or make changes to this bug.