Closed Bug 629046 Opened 13 years ago Closed 8 years ago

Firefox 4.0b10 Crash Report [@ nsTArray<tag_SCRIPT_ITEM, nsTArrayDefaultAllocator>::Clear() ]

Categories

(Core :: Graphics, defect)

Product:
Core
Component:
Graphics
Platform:
x86
Windows 7
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED WORKSFORME

People

(Reporter: cbook, Unassigned)

References

(
URL
)

Details

(Keywords: crash, Whiteboard: [rare])

Crash Data

early #top 16 topcrahs for beta 10 - http://crash-stats.mozilla.com/report/list?signature=nsTArray%3Ctag_SCRIPT_ITEM,%20nsTArrayDefaultAllocator%3E::Clear%28%29

Crash Reports for nsTArray<tag_SCRIPT_ITEM, nsTArrayDefaultAllocator>::Clear() 
windows crash so far - no comments so far


Crashing Thread
Frame 	Module 	Signature [Expand] 	Source
0 	xul.dll 	nsTArray<tag_SCRIPT_ITEM,nsTArrayDefaultAllocator>::Clear 	obj-firefox/dist/include/nsTArray.h:845
1 	xul.dll 	nsTArray<nsListIter,nsTArrayDefaultAllocator>::~nsTArray<nsListIter,nsTArrayDefaultAllocator> 	obj-firefox/dist/include/nsTArray.h:373
2 	xul.dll 	gfxDWriteShaper::InitTextRun 	gfx/thebes/gfxDWriteShaper.cpp:224
3 	xul.dll 	gfxFont::InitTextRun 	gfx/thebes/gfxFont.cpp:1556
4 	xul.dll 	gfxFont::SplitAndInitTextRun 	gfx/thebes/gfxFont.cpp:1518
5 	xul.dll 	gfxFontGroup::InitScriptRun 	gfx/thebes/gfxFont.cpp:2477
6 	xul.dll 	gfxFontGroup::InitTextRun 	gfx/thebes/gfxFont.cpp:2442
7 	xul.dll 	gfxFontGroup::MakeTextRun 	gfx/thebes/gfxFont.cpp:2394
8 	xul.dll 	TextRunWordCache::MakeTextRun 	gfx/thebes/gfxTextRunWordCache.cpp:726
9 	xul.dll 	MakeTextRun 	layout/generic/nsTextFrameThebes.cpp:507
10 	xul.dll 	BuildTextRunsScanner::BuildTextRunForFrames 	layout/generic/nsTextFrameThebes.cpp:1877
11 	xul.dll 	BuildTextRunsScanner::FlushFrames 	layout/generic/nsTextFrameThebes.cpp:1303
12 	xul.dll 	BuildTextRuns 	layout/generic/nsTextFrameThebes.cpp:1234
13 	xul.dll 	nsTextFrame::EnsureTextRun 	layout/generic/nsTextFrameThebes.cpp:2153
14 	xul.dll 	nsTextFrame::AddInlineMinWidthForFlow 	layout/generic/nsTextFrameThebes.cpp:5990
15 	xul.dll 	nsTextFrame::AddInlineMinWidth 	layout/generic/nsTextFrameThebes.cpp:6102
16 	xul.dll 	nsBlockFrame::GetMinWidth 	layout/generic/nsBlockFrame.cpp:762
17 	xul.dll 	nsLayoutUtils::IntrinsicForContainer 	layout/base/nsLayoutUtils.cpp:2139
18 	xul.dll 	nsBlockFrame::GetMinWidth 	layout/generic/nsBlockFrame.cpp:743
19 	xul.dll 	nsListControlFrame::GetMinWidth 	layout/forms/nsListControlFrame.cpp:519
20 	xul.dll 	nsContainerFrame::ComputeAutoSize 	layout/generic/nsContainerFrame.cpp:693
21 	xul.dll 	nsFrame::ComputeSize 	layout/generic/nsFrame.cpp:3341
22 	xul.dll 	nsHTMLReflowState::InitConstraints 	layout/generic/nsHTMLReflowState.cpp:1849
23 	xul.dll 	nsHTMLReflowState::Init 	layout/generic/nsHTMLReflowState.cpp:284
24 	xul.dll 	nsHTMLReflowState::nsHTMLReflowState 	layout/generic/nsHTMLReflowState.cpp:177
25 	xul.dll 	nsComboboxControlFrame::ReflowDropdown 	layout/forms/nsComboboxControlFrame.cpp:441
26 	xul.dll 	nsComboboxControlFrame::Reflow 	layout/forms/nsComboboxControlFrame.cpp:644
27 	xul.dll 	nsLineLayout::ReflowFrame 	layout/generic/nsLineLayout.cpp:850
28 	xul.dll 	nsBlockFrame::ReflowInlineFrame 	layout/generic/nsBlockFrame.cpp:3811
29 	xul.dll 	nsBlockFrame::DoReflowInlineFrames 	layout/generic/nsBlockFrame.cpp:3607
30 	xul.dll 	nsBlockFrame::ReflowInlineFrames 	layout/generic/nsBlockFrame.cpp:3466
31 	xul.dll 	nsBlockFrame::ReflowLine 	layout/generic/nsBlockFrame.cpp:2562
32 	xul.dll 	nsBlockFrame::ReflowDirtyLines 	layout/generic/nsBlockFrame.cpp:1999
33 	xul.dll 	nsBlockFrame::Reflow 	layout/generic/nsBlockFrame.cpp:1080
34 	xul.dll 	nsBlockReflowContext::ReflowBlock 	layout/generic/nsBlockReflowContext.cpp:297
35 	xul.dll 	nsBlockFrame::ReflowBlockFrame 	layout/generic/nsBlockFrame.cpp:3184
36 	xul.dll 	nsBlockFrame::ReflowLine 	layout/generic/nsBlockFrame.cpp:2506
37 	xul.dll 	nsBlockFrame::ReflowDirtyLines 	layout/generic/nsBlockFrame.cpp:1999
38 	xul.dll 	nsBlockFrame::Reflow 	layout/generic/nsBlockFrame.cpp:1080
39 	xul.dll 	nsBlockReflowContext::ReflowBlock 	layout/generic/nsBlockReflowContext.cpp:297
40 	xul.dll 	nsBlockFrame::ReflowFloat 	layout/generic/nsBlockFrame.cpp:5793
41 	xul.dll 	nsBlockReflowState::FlowAndPlaceFloat 	layout/generic/nsBlockReflowState.cpp:823
42 	xul.dll 	nsBlockReflowState::AddFloat 	layout/generic/nsBlockReflowState.cpp:576
43 	xul.dll 	nsLineLayout::ReflowFrame 	layout/generic/nsLineLayout.cpp:893
44 	xul.dll 	nsBlockFrame::ReflowInlineFrame 	layout/generic/nsBlockFrame.cpp:3811
45 	xul.dll 	nsBlockFrame::DoReflowInlineFrames 	layout/generic/nsBlockFrame.cpp:3607
46 	xul.dll 	nsBlockFrame::ReflowInlineFrames 	layout/generic/nsBlockFrame.cpp:3466
47 	xul.dll 	nsBlockFrame::ReflowLine 	layout/generic/nsBlockFrame.cpp:2562
48 	xul.dll 	nsBlockFrame::ReflowDirtyLines 	layout/generic/nsBlockFrame.cpp:1999
49 	xul.dll 	nsBlockFrame::Reflow 	layout/generic/nsBlockFrame.cpp:1080
50 	xul.dll 	nsBlockReflowContext::ReflowBlock 	layout/generic/nsBlockReflowContext.cpp:297
51 	xul.dll 	nsBlockFrame::ReflowBlockFrame 	layout/generic/nsBlockFrame.cpp:3184
52 	xul.dll 	nsBlockFrame::ReflowLine 	layout/generic/nsBlockFrame.cpp:2506
53 	xul.dll 	nsBlockFrame::ReflowDirtyLines 	layout/generic/nsBlockFrame.cpp:1999
54 	xul.dll 	nsBlockFrame::Reflow 	layout/generic/nsBlockFrame.cpp:1080
55 	xul.dll 	nsBlockReflowContext::ReflowBlock 	layout/generic/nsBlockReflowContext.cpp:297
56 	xul.dll 	nsBlockFrame::ReflowBlockFrame 	layout/generic/nsBlockFrame.cpp:3184
57 	xul.dll 	nsBlockFrame::ReflowLine 	layout/generic/nsBlockFrame.cpp:2506
58 	xul.dll 	nsBlockFrame::ReflowDirtyLines 	layout/generic/nsBlockFrame.cpp:1999
59 	xul.dll 	nsBlockFrame::Reflow 	layout/generic/nsBlockFrame.cpp:1080
60 	xul.dll 	nsBlockReflowContext::ReflowBlock 	layout/generic/nsBlockReflowContext.cpp:297
61 	xul.dll 	nsBlockFrame::ReflowBlockFrame 	layout/generic/nsBlockFrame.cpp:3184
62 	xul.dll 	nsBlockFrame::ReflowLine 	layout/generic/nsBlockFrame.cpp:2506
63 	xul.dll 	nsBlockFrame::ReflowDirtyLines 	layout/generic/nsBlockFrame.cpp:1999
64 	xul.dll 	nsBlockFrame::Reflow 	layout/generic/nsBlockFrame.cpp:1080
65 	xul.dll 	nsBlockReflowContext::ReflowBlock 	layout/generic/nsBlockReflowContext.cpp:297
66 	xul.dll 	nsBlockFrame::ReflowBlockFrame 	layout/generic/nsBlockFrame.cpp:3184
67 	xul.dll 	nsBlockFrame::ReflowLine 	layout/generic/nsBlockFrame.cpp:2506
68 	xul.dll 	nsBlockFrame::ReflowDirtyLines 	layout/generic/nsBlockFrame.cpp:1999
69 	xul.dll 	nsBlockFrame::Reflow 	layout/generic/nsBlockFrame.cpp:1080
70 	xul.dll 	nsContainerFrame::ReflowChild 	layout/generic/nsContainerFrame.cpp:740
71 	xul.dll 	nsCanvasFrame::Reflow 	layout/generic/nsCanvasFrame.cpp:494
72 	xul.dll 	nsContainerFrame::ReflowChild 	layout/generic/nsContainerFrame.cpp:740
73 	xul.dll 	nsHTMLScrollFrame::ReflowScrolledFrame 	layout/generic/nsGfxScrollFrame.cpp:533
74 	xul.dll 	nsHTMLScrollFrame::ReflowContents 	layout/generic/nsGfxScrollFrame.cpp:625
75 	xul.dll 	nsHTMLScrollFrame::Reflow 	layout/generic/nsGfxScrollFrame.cpp:866
76 	xul.dll 	nsContainerFrame::ReflowChild 	layout/generic/nsContainerFrame.cpp:740
77 	xul.dll 	ViewportFrame::Reflow 	layout/generic/nsViewportFrame.cpp:293
78 	xul.dll 	PresShell::DoReflow 	layout/base/nsPresShell.cpp:7819
79 	xul.dll 	PresShell::ProcessReflowCommands 	layout/base/nsPresShell.cpp:7958
80 	xul.dll 	PresShell::FlushPendingNotifications 	layout/base/nsPresShell.cpp:4895
81 	xul.dll 	PresShell::WillPaint 	layout/base/nsPresShell.cpp:7455
82 	xul.dll 	nsViewManager::DispatchEvent 	view/src/nsViewManager.cpp:899
83 	xul.dll 	AttachedHandleEvent 	view/src/nsView.cpp:193
84 	xul.dll 	nsWindow::DispatchEvent 	widget/src/windows/nsWindow.cpp:3727
85 	xul.dll 	nsWindow::DispatchWindowEvent 	widget/src/windows/nsWindow.cpp:3750
86 	xul.dll 	nsWindow::OnPaint 	widget/src/windows/nsWindowGfx.cpp:301
87 	xul.dll 	nsWindow::ProcessMessage 	widget/src/windows/nsWindow.cpp:4987
88 	xul.dll 	nsWindow::WindowProcInternal 	widget/src/windows/nsWindow.cpp:4576
89 	xul.dll 	nsWindow::WindowProc 	widget/src/windows/nsWindow.cpp:4516
90 	user32.dll 	InternalCallWinProc 	
91 	user32.dll 	GetRealWindowOwner 	
92 	user32.dll 	DispatchClientMessage 	
93 	user32.dll 	__fnDWORD 	
94 	ntdll.dll 	KiUserCallbackDispatcher 	
95 	ntdll.dll 	KiUserApcDispatcher 	
96 	user32.dll 	DispatchMessageW 	
97 	xul.dll 	nsBaseAppShell::OnProcessNextEvent 	widget/src/xpwidgets/nsBaseAppShell.cpp:318
98 	mozcrt19.dll 	free 	obj-firefox/memory/jemalloc/crtsrc/jemalloc.c:6121
99 	xul.dll 	mozilla::ipc::MessagePump::Run 	ipc/glue/MessagePump.cpp:110
100 	xul.dll 	MessageLoop::RunInternal 	ipc/chromium/src/base/message_loop.cc:219
104 	xul.dll 	MessageLoop::Run 	ipc/chromium/src/base/message_loop.cc:176
105 	xul.dll 	nsBaseAppShell::Run 	widget/src/xpwidgets/nsBaseAppShell.cpp:195
106 	xul.dll 	xul.dll@0xb209c7 	
107 	xul.dll 	nsAppStartup::Run 	toolkit/components/startup/src/nsAppStartup.cpp:217
108 	xul.dll 	XRE_main 	toolkit/xre/nsAppRunner.cpp:3773
109 	firefox.exe 	wmain 	toolkit/xre/nsWindowsWMain.cpp:128
110 	firefox.exe 	__tmainCRTStartup 	obj-firefox/memory/jemalloc/crtsrc/crtexe.c:591
111 	kernel32.dll 	BaseThreadInitThunk 	
112 	ntdll.dll 	__RtlUserThreadStart 	
113 	ntdll.dll 	_RtlUserThreadStart
My initial guess is that the top couple of stack frames here are bogus; there's no connection between gfxDWriteShaper::InitTextRun and an nsTArray<tag_SCRIPT_ITEM,nsTArrayDefaultAllocator>, which would be part of the Uniscribe codepath. I think this is probably another version of the new DWrite-related crashes in bug 628698, bug 628700, and bug 628706.
Depends on: 628152
This bug is probably fixed by the fix for bug 628152 but I'm going to leave this open for now until I can confirm that.
bug 628152 has been fixed from 4.0b11pre/20110128.
There is one crash in 4.0b12pre/20110207: bp-45aa73b5-61f3-4b4d-8934-0d0ec2110207.
Status: NEW → RESOLVED
Closed: 13 years ago
Resolution: --- → FIXED
Comment 3 means that there are still crashes after the fixing of bug 628152. Nevertheless the crash volume is very low: 2 crashes in 10 days.
Status: RESOLVED → REOPENED
Resolution: FIXED → ---
Crash Signature: [@ nsTArray<tag_SCRIPT_ITEM, nsTArrayDefaultAllocator>::Clear() ]
found only one crash in 1 month for releases newer than v9
bp-0978bce6-718a-4321-985c-15ff22120627
@ nsTArray<tag_SCRIPT_ITEM, nsTArrayDefaultAllocator>::InsertElementsAt(unsigned int, unsigned int) | nsTArray<nsListIter, nsTArrayDefaultAllocator>::SetLength(unsigned int) | Uniscribe::Itemize()
Crash Signature: [@ nsTArray<tag_SCRIPT_ITEM, nsTArrayDefaultAllocator>::Clear() ] → [@ nsTArray<tag_SCRIPT_ITEM, nsTArrayDefaultAllocator>::Clear() ] [@ nsTArray<tag_SCRIPT_ITEM, nsTArrayDefaultAllocator>::InsertElementsAt(unsigned int, unsigned int) | nsTArray<nsListIter nsTArrayDefaultAllocator>::SetLength(unsigned int) | Uniscribe::I…
Whiteboard: [rare]
Crash Signature: , nsTArrayDefaultAllocator>::SetLength(unsigned int) | Uniscribe::Itemize() ] → , nsTArrayDefaultAllocator>::SetLength(unsigned int) | Uniscribe::Itemize() ] [@ nsTArray<T>::Clear ] [@ nsTArray<T>::InsertElementsAt | nsTArray<T>::SetLength | Uniscribe::Itemize ]
Mass resolving WFM: signature(s) hasn't(/haven't) reported in past 28 days.
Status: REOPENED → RESOLVED
Closed: 13 years ago → 8 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.