631213 - Crash Report [@ TextUpdater::FireEvent(nsAString_internal const&, unsigned int, int) ]

Status: RESOLVED FIXED

(Core :: Disability Access APIs, defect)

Description

[Carsten Book [:Tomcat]]

https://crash-stats.mozilla.com/report/list?product=Firefox&query_search=signature&query_type=exact&query=TextUpdater%3A%3AFireEvent%28nsAString_internal%20const%26%2C%20unsigned%20int%2C%20int%29&date=02%2F03%2F2011%2005%3A59%3A12&range_value=1&range_unit=weeks&hang_type=any&process_type=any&plugin_field=&plugin_query_type=&plugin_query=&do_query=1&admin=&signature=TextUpdater%3A%3AFireEvent%28nsAString_internal%20const%26%2C%20unsigned%20int%2C%20int%29

New Crash at[@ TextUpdater::FireEvent(nsAString_internal const&, unsigned int, int) ] - so far all beta11pre builds on windows

Crashing Thread
Frame 	Module 	Signature [Expand] 	Source
0 	xul.dll 	TextUpdater::FireEvent 	accessible/src/base/NotificationController.cpp:839
1 	xul.dll 	nsGenericElement::HasAttr 	content/base/src/nsGenericElement.cpp:4863
2 	xul.dll 	TextUpdater::MayFireEvent 	accessible/src/base/NotificationController.cpp:632
3 	xul.dll 	TextUpdater::FindDiffNFireEvents 	accessible/src/base/NotificationController.cpp:826
4 	xul.dll 	nsTextFrame::EnsureTextRun 	layout/generic/nsTextFrameThebes.cpp:2179
5 	xul.dll 	nsTextFrame::GetTrimmedOffsets 	layout/generic/nsTextFrameThebes.cpp:2224
6 	xul.dll 	nsTArray_base<nsTArrayFallibleAllocator>::ShiftData 	obj-firefox/dist/include/nsTArray-inl.h:169
7 	xul.dll 	nsTextFrame::GetRenderedText 	layout/generic/nsTextFrameThebes.cpp:7140
8 	mozcrt19.dll 	arena_malloc_small 	obj-firefox/memory/jemalloc/crtsrc/jemalloc.c:3788
9 	xul.dll 	nsStringBuffer::Release 	xpcom/string/src/nsSubstring.cpp:188
10 	xul.dll 	nsCycleCollectingAutoRefCnt::incr 	obj-firefox/dist/include/nsISupportsImpl.h:161
11 	mozcrt19.dll 	malloc 	obj-firefox/memory/jemalloc/crtsrc/jemalloc.c:5878
12 	xul.dll 	nsAccessible::AppendTextTo 	accessible/src/base/nsAccessible.cpp:2664
13 	xul.dll 	TextUpdater::Run 	accessible/src/base/NotificationController.cpp:741
14 	xul.dll 	NotificationController::TextEnumerator 	accessible/src/base/NotificationController.cpp:931
15 	xul.dll 	NS_CycleCollectorForget2_P 	xpcom/base/nsCycleCollector.cpp:3245
16 	xul.dll 	NotificationController::QueueEvent 	accessible/src/base/NotificationController.cpp:139
17 	xul.dll 	nsCycleCollector::Suspect2 	xpcom/base/nsCycleCollector.cpp:2363
18 	mozcrt19.dll 	arena_dalloc_small 	obj-firefox/memory/jemalloc/crtsrc/jemalloc.c:4158
19 	xul.dll 	NotificationController::QueueEvent 	accessible/src/base/NotificationController.cpp:139
20 	xul.dll 	nsTArray<CookieDomainTuple,nsTArrayDefaultAllocator>::Clear 	obj-firefox/dist/include/nsTArray.h:846
21 	xul.dll 	PL_DHashTableEnumerate 	obj-firefox/xpcom/build/pldhash.c:754
22 	xul.dll 	nsTArray_base<nsTArrayInfallibleAllocator>::ShrinkCapacity 	obj-firefox/dist/include/nsTArray-inl.h:135
23 	xul.dll 	NotificationController::WillRefresh 	accessible/src/base/NotificationController.cpp:248
24 	xul.dll 	nsTArray<CookieDomainTuple,nsTArrayDefaultAllocator>::Clear 	obj-firefox/dist/include/nsTArray.h:846
25 	xul.dll 	PresShell::FlushPendingNotifications 	layout/base/nsPresShell.cpp:4924
26 	xul.dll 	xul.dll@0xa8c51f 	
27 	xul.dll 	nsRefreshDriver::Notify 	layout/base/nsRefreshDriver.cpp:254
28 	user32.dll 	user32.dll@0x1c332 	
29 	user32.dll 	user32.dll@0x1c3de 	
30 	user32.dll 	user32.dll@0x1429f 	
31 	user32.dll 	user32.dll@0x1bd31 	
32 	nspr4.dll 	PR_AssertCurrentThreadOwnsLock 	nsprpub/pr/src/threads/combined/prulock.c:404
33 	xul.dll 	mozilla::TimeDuration::ToSeconds 	xpcom/ds/TimeStamp.cpp:63
34 	nspr4.dll 	PR_Unlock 	nsprpub/pr/src/threads/combined/prulock.c:347
35 	xul.dll 	TimerThread::UpdateFilter 	xpcom/threads/TimerThread.cpp:236
36 	xul.dll 	nsTimerImpl::Fire 	xpcom/threads/nsTimerImpl.cpp:428
37 	xul.dll 	nsTimerEvent::Run 	xpcom/threads/nsTimerImpl.cpp:517
38 	xul.dll 	nsThread::ProcessNextEvent 	xpcom/threads/nsThread.cpp:633
39 	xul.dll 	EntryEnumerator::`scalar deleting destructor' 	
40 	xul.dll 	TimerThread::RemoveTimer 	xpcom/threads/TimerThread.cpp:429
41 	xul.dll 	NS_ProcessNextEvent_P 	obj-firefox/xpcom/build/nsThreadUtils.cpp:250
42 	xul.dll 	mozilla::ipc::MessagePump::Run 	ipc/glue/MessagePump.cpp:110
43 	xul.dll 	MessageLoop::RunHandler 	ipc/chromium/src/base/message_loop.cc:202
44 	xul.dll 	MessageLoop::Run 	ipc/chromium/src/base/message_loop.cc:176
45 	xul.dll 	nsThreadManager::GetCurrentThread 	xpcom/threads/nsThreadManager.cpp:222
46 	xul.dll 	nsBaseAppShell::Run 	widget/src/xpwidgets/nsBaseAppShell.cpp:192
47 	xul.dll 	nsAppStartup::Run 	toolkit/components/startup/src/nsAppStartup.cpp:218
48 	xul.dll 	XRE_main 	toolkit/xre/nsAppRunner.cpp:3775

Comment 1

[David Bolter [:davidb] (NeedInfo me for attention)]

Thanks Tomcat. I think this should be fixed on trunk. Please reopen if you see it in recent builds.

Comment 2

[alexander :surkov (:asurkov)]

(In reply to comment #1)
> I think this should be fixed on trunk.

Why do you think it's fixed?

Comment 3

[David Bolter [:davidb] (NeedInfo me for attention)]

(In reply to comment #2)
> (In reply to comment #1)
> > I think this should be fixed on trunk.
> 
> Why do you think it's fixed?

I'm still looking in hg for what I thought would have fixed this. I'll reopen.

Comment 4

[alexander :surkov (:asurkov)]

It sounds it's crashed because something that shouldn't contain a text contains a text. I would say save an assertion and add a null check. But since it's not a top crasher then I suggest to wait for a bug 626660 where it can be addressed in more graceful way.

Comment 5

[David Bolter [:davidb] (NeedInfo me for attention)]

Sounds good to me, and Marco has cleared bug 626660 for landing :)

Comment 6

[alexander :surkov (:asurkov)]

fixed by bug bug 626660.