Closed Bug 662568 Opened 11 years ago Closed 1 year ago

Firefox Crash [@ nsRuleNode::HasAuthorSpecifiedRules(nsStyleContext*, unsigned int, int) ]

Categories

(Core :: Layout, defect)

defect
Not set
critical

Tracking

()

RESOLVED WORKSFORME
Tracking Status
firefox47 --- affected
firefox48 --- affected
firefox49 --- affected
firefox-esr45 --- affected
firefox50 --- affected

People

(Reporter: marcia, Unassigned)

Details

(Keywords: crash)

Crash Data

Seen while reviewing trunk crash stats, but present on all branches.  https://crash-stats.mozilla.com/report/list?signature=nsRuleNode::HasAuthorSpecifiedRules%28nsStyleContext*,%20unsigned%20int,%20int%29 to the crashes which are all Windows. 188 Windows crashes and 1 Mac crash in the last week.

For some reason we had an increased number of trunk crashes in the builds starting with 2011060500, so this showed up on chofmann's report. They may be all from one user but Socorro is not picking them up as dupes.

https://crash-stats.mozilla.com/report/index/e1b8cb47-6f46-4612-b296-e8a152110601

Frame 	Module 	Signature [Expand] 	Source
0 	xul.dll 	nsRuleNode::HasAuthorSpecifiedRules 	layout/style/nsRuleNode.cpp:6706
1 	xul.dll 	nsLayoutUtils::IntrinsicForContainer 	layout/base/nsLayoutUtils.cpp:2128
2 	xul.dll 	nsBlockFrame::GetPrefWidth 	layout/generic/nsBlockFrame.cpp:821
3 	xul.dll 	nsFrame::RefreshSizeCache 	
4 	xul.dll 	nsFrame::GetMinSize 	layout/generic/nsFrame.cpp:6793
5 	xul.dll 	nsSprocketLayout::GetMinSize 	layout/xul/base/src/nsSprocketLayout.cpp:1423
6 	xul.dll 	nsBoxFrame::GetMinSize 	layout/xul/base/src/nsBoxFrame.cpp:852
7 	xul.dll 	nsXULScrollFrame::LayoutScrollArea 	layout/generic/nsGfxScrollFrame.cpp:2649
8 	xul.dll 	nsHTMLScrollFrame::GetScrollbarStyles 	layout/generic/nsGfxScrollFrame.h:665
9 	xul.dll 	nsBox::SetBounds 	layout/xul/base/src/nsBox.cpp:287
Crash Signature: [@ nsRuleNode::HasAuthorSpecifiedRules(nsStyleContext*, unsigned int, int) ]
Crash Signature: [@ nsRuleNode::HasAuthorSpecifiedRules(nsStyleContext*, unsigned int, int) ] → [@ nsRuleNode::HasAuthorSpecifiedRules(nsStyleContext*, unsigned int, int) ] [@ nsRuleNode::HasAuthorSpecifiedRules ]
Crash volume for signature 'nsRuleNode::HasAuthorSpecifiedRules':
 - nightly (version 50): 0 crash from 2016-06-06.
 - aurora  (version 49): 0 crash from 2016-06-07.
 - beta    (version 48): 27 crashes from 2016-06-06.
 - release (version 47): 89 crashes from 2016-05-31.
 - esr     (version 45): 3 crashes from 2016-04-07.

Crash volume on the last weeks:
             Week N-1   Week N-2   Week N-3   Week N-4   Week N-5   Week N-6   Week N-7
 - nightly          0          0          0          0          0          0          0
 - aurora           0          0          0          0          0          0          0
 - beta             1          5          4          5          3          5          0
 - release         14         13         11         18         12         10          4
 - esr              1          0          0          0          1          1          0

Affected platform: Windows
Crash volume for signature 'nsRuleNode::HasAuthorSpecifiedRules':
 - nightly (version 51): 0 crashes from 2016-08-01.
 - aurora  (version 50): 1 crash from 2016-08-01.
 - beta    (version 49): 20 crashes from 2016-08-02.
 - release (version 48): 10 crashes from 2016-07-25.
 - esr     (version 45): 5 crashes from 2016-05-02.

Crash volume on the last weeks (Week N is from 08-22 to 08-28):
            W. N-1  W. N-2  W. N-3
 - nightly       0       0       0
 - aurora        0       0       1
 - beta          1      17       0
 - release       5       1       1
 - esr           1       0       0

Affected platform: Windows

Crash rank on the last 7 days:
           Browser   Content     Plugin
 - nightly
 - aurora
 - beta    #6184     #3181
 - release #3409     #1119
 - esr     #2541
It looks like it's also reported as nsPresContext::HasAuthorSpecifiedRules sometimes:
bp-d84cf52b-fde3-4b2d-a4f9-39c8c2170114

@0x1e03c54d
nsPresContext::HasAuthorSpecifiedRules(nsIFrame const*, unsigned int)
nsNativeTheme::IsWidgetStyled(nsPresContext*, nsIFrame*, unsigned char)
nsNativeThemeWin::ThemeSupportsWidget(nsPresContext*, nsIFrame*, unsigned char)
nsIFrame::IsThemed(nsStyleDisplay const*, nsITheme::Transparency*)
nsFrame::ComputeSize(nsRenderingContext*, mozilla::WritingMode, mozilla::LogicalSize const&, int, mozilla::LogicalSize const&, mozilla::LogicalSize const&, mozilla::LogicalSize const&, nsIFrame::ComputeSizeFlags)
nsHTMLReflowState::InitConstraints(nsPresContext*, mozilla::LogicalSize const&, nsMargin const*, nsMargin const*, nsIAtom*)
nsHTMLReflowState::Init(nsPresContext*, mozilla::LogicalSize const*, nsMargin const*, nsMargin const*)
[...]
Crash Signature: [@ nsRuleNode::HasAuthorSpecifiedRules(nsStyleContext*, unsigned int, int) ] [@ nsRuleNode::HasAuthorSpecifiedRules ] → [@ nsRuleNode::HasAuthorSpecifiedRules(nsStyleContext*, unsigned int, int) ] [@ nsRuleNode::HasAuthorSpecifiedRules ] [@ nsPresContext::HasAuthorSpecifiedRules ]
OS: Windows XP → All
Hardware: x86 → All
... that link should've been bp-498c88ce-a564-46e6-bd1e-a9cb62161109
Some crashes are reported as EXCEPTION_STACK_OVERFLOW:
bp-b661739b-ea23-49f4-816d-53bc92161221
Crash Signature: [@ nsRuleNode::HasAuthorSpecifiedRules(nsStyleContext*, unsigned int, int) ] [@ nsRuleNode::HasAuthorSpecifiedRules ] [@ nsPresContext::HasAuthorSpecifiedRules ] → [@ nsRuleNode::HasAuthorSpecifiedRules(nsStyleContext*, unsigned int, int) ] [@ nsRuleNode::HasAuthorSpecifiedRules ] [@ nsPresContext::HasAuthorSpecifiedRules ] [@ _chkstk | nsPresContext::HasAuthorSpecifiedRules ] [@ @0x0 | nsPresContext::HasAuthorS…

Closing because no crashes reported for 12 weeks.

Status: NEW → RESOLVED
Closed: 1 year ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.