crash nsXULTreeBuilder::IsContainer when trying to subscribe to newsgroups

NEW
Unassigned

Status

--
critical
7 years ago
3 months ago

People

(Reporter: bhearsum, Unassigned)

Tracking

({crash})

8 Branch
crash

Firefox Tracking Flags

(Not tracked)

Details

(crash signature)

(Reporter)

Description

7 years ago
This bug was filed from the Socorro interface and is 
report bp-9d22a006-b9ee-4978-ad01-cfe0c2111212 .
============================================================= 

I experienced this crash right after attempting to close the "Manage Newsgroup Subscriptions" window after subscribing to a number of groups. This was done in a newly created profile right after adding the NNTP account.
Version: 8 → 9

Comment 1

7 years ago
bp-a1368ce2-6c94-4e58-b767-f48842111204 also cites newsgroup subscription
Crash Signature: [@ nsXULTreeBuilder::IsContainer] → [@ nsXULTreeBuilder::IsContainer] [@ nsXULTreeBuilder::IsContainer(int, int*)]
I changed the version to 9 originally because :bhearsum's was on 9, but the second one appears to be on version 8.

It looks like the first crash failed with bug 670935 fixed, which would have been my first guess for the cause of the crash.

Which news server had you used and which newsgroup had you subscribed to?
Version: 9 → 8

Comment 3

5 years ago
bug 592633 morphed the signature to ...
 nsXULTreeBuilder::IsContainer(int, bool*) 
bp-f51ebcc8-8615-4332-98b3-ee8c72130710
0	xul.dll	nsXULTreeBuilder::IsContainer	content/xul/templates/src/nsXULTreeBuilder.cpp:547
1	xul.dll	nsTreeBodyFrame::PrefillPropertyArray	layout/xul/base/src/tree/src/nsTreeBodyFrame.cpp:1947
2	xul.dll	nsTreeBodyFrame::GetItemWithinCellAt	layout/xul/base/src/tree/src/nsTreeBodyFrame.cpp:1463
3	xul.dll	nsTreeBodyFrame::GetCellAt	layout/xul/base/src/tree/src/nsTreeBodyFrame.cpp:1638
4	xul.dll	nsTreeBodyFrame::GetCursor	layout/xul/base/src/tree/src/nsTreeBodyFrame.cpp:2502
5	xul.dll	nsEventStateManager::UpdateCursor	content/events/src/nsEventStateManager.cpp:3574
6	xul.dll	nsEventStateManager::PreHandleEvent	content/events/src/nsEventStateManager.cpp:1062 


bp-b3a6d98f-512f-4dfb-acdb-a179b2121107 9.0.1 crashes at same line# as above
0	xul.dll	nsXULTreeBuilder::IsContainer	content/xul/templates/src/nsXULTreeBuilder.cpp:582
1	xul.dll	nsTreeBodyFrame::PrefillPropertyArray	layout/xul/base/src/tree/src/nsTreeBodyFrame.cpp:1972
2	xul.dll	nsTreeBodyFrame::PaintRow	layout/xul/base/src/tree/src/nsTreeBodyFrame.cpp:2921
3	xul.dll	nsTreeBodyFrame::PaintTreeBody	layout/xul/base/src/tree/src/nsTreeBodyFrame.cpp:2853
4	xul.dll	PaintTreeBody	layout/xul/base/src/tree/src/nsTreeBodyFrame.cpp:2778
5	xul.dll	nsDisplayGeneric::Paint	layout/base/nsDisplayList.h:1311
6	xul.dll	mozilla::FrameLayerBuilder::DrawThebesLayer	layout/base/FrameLayerBuilder.cpp:2143
7	xul.dll	mozilla::layers::BasicThebesLayer::PaintBuffer	gfx/layers/basic/BasicLayers.cpp:555
8	xul.dll	mozilla::layers::BasicShadowableThebesLayer::PaintBuffer	gfx/layers/basic/BasicLayers.cpp:2273
9	xul.dll	mozilla::layers::BasicThebesLayer::PaintThebes	gfx/layers/basic/BasicLayers.cpp:739
10	xul.dll	mozilla::layers::BasicLayerManager::PaintLayer	gfx/layers/basic/BasicLayers.cpp:1891 0	xul.dll	nsXULTreeBuilder::IsContainer	content/xul/templates/src/nsXULTreeBuilder.cpp:582
1	xul.dll	nsTreeBodyFrame::PrefillPropertyArray	layout/xul/base/src/tree/src/nsTreeBodyFrame.cpp:1972
2	xul.dll	nsTreeBodyFrame::PaintRow	layout/xul/base/src/tree/src/nsTreeBodyFrame.cpp:2921
3	xul.dll	nsTreeBodyFrame::PaintTreeBody	layout/xul/base/src/tree/src/nsTreeBodyFrame.cpp:2853
4	xul.dll	PaintTreeBody	layout/xul/base/src/tree/src/nsTreeBodyFrame.cpp:2778
5	xul.dll	nsDisplayGeneric::Paint	layout/base/nsDisplayList.h:1311
6	xul.dll	mozilla::FrameLayerBuilder::DrawThebesLayer	layout/base/FrameLayerBuilder.cpp:2143
7	xul.dll	mozilla::layers::BasicThebesLayer::PaintBuffer	gfx/layers/basic/BasicLayers.cpp:555
8	xul.dll	mozilla::layers::BasicShadowableThebesLayer::PaintBuffer	gfx/layers/basic/BasicLayers.cpp:2273
9	xul.dll	mozilla::layers::BasicThebesLayer::PaintThebes	gfx/layers/basic/BasicLayers.cpp:739
10	xul.dll	mozilla::layers::BasicLayerManager::PaintLayer	gfx/layers/basic/BasicLayers.cpp:1891 

hg@1 575 nsTreeRows::iterator iter = mRows[aIndex];
hg@1 576
bienvenu@56056 577 PRBool isContainer;
bienvenu@56056 578 iter->mMatch->mResult->GetIsContainer(&isContainer);
hg@1 579 
bienvenu@56056 580 iter->mContainerType = isContainer
bienvenu@56056 581 ? nsTreeRows::eContainerType_Container
bienvenu@56056 582 : nsTreeRows::eContainerType_Noncontainer;
Crash Signature: [@ nsXULTreeBuilder::IsContainer] [@ nsXULTreeBuilder::IsContainer(int, int*)] → [@ nsXULTreeBuilder::IsContainer] [@ nsXULTreeBuilder::IsContainer(int, int*)] [@ nsXULTreeBuilder::IsContainer(int, bool*)]

Comment 4

3 months ago
This could change now as the IsContainer() method was reimplemented differently in nsSubscribableServer instead of the RDF backend.
You need to log in before you can comment on or make changes to this bug.