637285 - Crash [@ mozalloc_abort(char const* const) | mozalloc_handle_oom() | nsCSSRuleProcessor::RefreshRuleCascade(nsPresContext*) ]

Status: RESOLVED DUPLICATE of bug 637165

(Core :: CSS Parsing and Computation, defect)

Description

[Scoobidiver (away)]

It is a new crash signature in the trunk.
It is currently #53 top crasher in 4.0b12.
It is probably a dupe of bug 627706.

Signature	mozalloc_abort(char const* const) | mozalloc_handle_oom() | nsCSSRuleProcessor::RefreshRuleCascade(nsPresContext*)
UUID	585051e1-43db-46d7-bd2f-e36842110228
Time 	2011-02-28 05:05:31.981413
Uptime	70
Last Crash	77 seconds before submission
Install Age	90832 seconds (1.1 days) since version was first installed.
Product	Firefox
Version	4.0b12
Build ID	20110222210221
Branch	2.0
OS	Windows NT
OS Version	6.1.7600
CPU	x86
CPU Info	GenuineIntel family 6 model 22 stepping 1
Crash Reason	EXCEPTION_BREAKPOINT
Crash Address	0x70de1a39
App Notes 	AdapterVendorID: 8086, AdapterDeviceID: 2772, AdapterDriverVersion: 8.15.10.1930

Frame 	Module 	Signature [Expand] 	Source
0 	mozalloc.dll 	mozalloc_abort 	memory/mozalloc/mozalloc_abort.cpp:77
1 	mozalloc.dll 	mozalloc_handle_oom 	memory/mozalloc/mozalloc_oom.cpp:54
2 	xul.dll 	nsCSSRuleProcessor::RefreshRuleCascade 	layout/style/nsCSSRuleProcessor.cpp:3148
3 	xul.dll 	nsCSSRuleProcessor::RulesMatching 	layout/style/nsCSSRuleProcessor.cpp:2442
4 	xul.dll 	EnumRulesMatching<AnonBoxRuleProcessorData> 	layout/style/nsStyleSet.cpp:406
5 	xul.dll 	nsStyleSet::FileRules 	layout/style/nsStyleSet.cpp:594
6 	xul.dll 	nsStyleSet::ResolveAnonymousBoxStyle 	layout/style/nsStyleSet.cpp:975
7 	xul.dll 	nsCSSFrameConstructor::ConstructRootFrame 	layout/base/nsCSSFrameConstructor.cpp:2539
8 	xul.dll 	PresShell::InitialReflow 	layout/base/nsPresShell.cpp:2707
9 	xul.dll 	nsContentSink::StartLayout 	content/base/src/nsContentSink.cpp:1241
10 	xul.dll 	HTMLContentSink::StartLayout 	content/html/document/src/nsHTMLContentSink.cpp:2558
11 	xul.dll 	HTMLContentSink::OpenBody 	content/html/document/src/nsHTMLContentSink.cpp:1948
12 	xul.dll 	HTMLContentSink::OpenContainer 	content/html/document/src/nsHTMLContentSink.cpp:2158
13 	xul.dll 	CNavDTD::OpenBody 	parser/htmlparser/src/CNavDTD.cpp:2490
14 	xul.dll 	CNavDTD::OpenContainer 	parser/htmlparser/src/CNavDTD.cpp:2553
15 	xul.dll 	CNavDTD::HandleDefaultStartToken 	parser/htmlparser/src/CNavDTD.cpp:1036
16 	xul.dll 	CNavDTD::HandleStartToken 	parser/htmlparser/src/CNavDTD.cpp:1376
17 	xul.dll 	CNavDTD::HandleToken 	parser/htmlparser/src/CNavDTD.cpp:714
18 	xul.dll 	CNavDTD::BuildModel 	parser/htmlparser/src/CNavDTD.cpp:301
19 	xul.dll 	CNavDTD::BuildNeglectedTarget 	parser/htmlparser/src/CNavDTD.cpp:342
20 	xul.dll 	CNavDTD::DidBuildModel 	parser/htmlparser/src/CNavDTD.cpp:358
21 	xul.dll 	nsParser::DidBuildModel 	parser/htmlparser/src/nsParser.cpp:1588

More reports at:
https://crash-stats.mozilla.com/report/list?range_value=4&range_unit=weeks&signature=mozalloc_abort%28char%20const*%20const%29%20|%20mozalloc_handle_oom%28%29%20|%20nsCSSRuleProcessor%3A%3ARefreshRuleCascade%28nsPresContext*%29

Comment 1

[Boris Zbarsky [:bzbarsky]]

> It is probably a dupe of bug 627706.

No, it's not.

This is just an OOM crash on this line:

  3148          if (!AddRule(cur, newCascade))

Unfortunately, Windows optimized away all the interesting bits about _where_ in AddRule the OOM occurs.

Note that OOM is supposed to return false from AddRule, generally...

Comment 2

[Boris Zbarsky [:bzbarsky]]

Ah, bug 637165 has a better stack for this.