710160 - crash nsContentList::PopulateSelf

Status: NEW

(Core :: DOM: Core & HTML, defect, P5)

Description

[Cork]

A college reported the crash bp-ab0e7e80-2f2b-42d7-a65e-283222111213 to me and it's not on file so, here it is.

The crash is as far as we can see totally random.

Comment 1

[Scoobidiver (away)]

It's #129 top crasher in 8.0.1.

Here are the first frames of the stack trace:
Frame 	Module 	Signature [Expand] 	Source
0 	libxul.so 	nsContentList::PopulateSelf 	nsContentList.cpp:904
1 	libxul.so 	nsContentList::Length 	nsContentList.cpp:512
2 	libxul.so 	nsContentList::GetLength 	nsContentList.cpp:595
3 	libxul.so 	nsIDOMNodeList_GetLength 	dom_quickstubs.cpp:7927
4 	libxul.so 	js_NativeGet 	jscntxtinlines.h:333
5 	libxul.so 	js::mjit::stubs::CallProp 	StubCalls.cpp:1923

Comment 2

[Scoobidiver (away)]

It's #3 top browser crasher in 10.0.7esr.

The first frames of the stack trace now look like:
rame 	Module 	Signature 	Source
0 	xul.dll 	nsContentList::PopulateSelf 	content/base/src/nsContentList.cpp:899
1 	xul.dll 	nsContentList::BringSelfUpToDate 	content/base/src/nsContentList.cpp:963
2 	xul.dll 	nsContentList::IndexOf 	content/base/src/nsContentList.cpp:564
3 	xul.dll 	nsContentUtils::GenerateStateKey 	content/base/src/nsContentUtils.cpp:2263
4 	xul.dll 	nsFrameManager::RestoreFrameStateFor 	layout/base/nsFrameManager.cpp:1804
5 	xul.dll 	nsFrameManager::RestoreFrameState 	layout/base/nsFrameManager.cpp:1832

More reports at:
https://crash-stats.mozilla.com/report/list?signature=nsContentList%3A%3APopulateSelf%28unsigned+int%29

Comment 3

[BugBot [:suhaib / :marco/ :calixte]]

Crash volume for signature 'nsContentList::PopulateSelf':
 - nightly (version 50): 4 crashes from 2016-06-06.
 - aurora  (version 49): 21 crashes from 2016-06-07.
 - beta    (version 48): 235 crashes from 2016-06-06.
 - release (version 47): 1161 crashes from 2016-05-31.
 - esr     (version 45): 55 crashes from 2016-04-07.

Crash volume on the last weeks:
             Week N-1   Week N-2   Week N-3   Week N-4   Week N-5   Week N-6   Week N-7
 - nightly          0          2          0          1          0          1          0
 - aurora           5          2          4          6          3          1          0
 - beta            45         30         44         30         37         23         10
 - release        165        139        185        186        203        162         63
 - esr              6          5          7          6          6          5          6

Affected platforms: Windows, Mac OS X, Linux

Comment 5

[BugBot [:suhaib / :marco/ :calixte]]

Crash volume for signature 'nsContentList::PopulateSelf':
 - nightly (version 52): 2 crashes from 2016-09-19.
 - aurora  (version 51): 3 crashes from 2016-09-19.
 - beta    (version 50): 87 crashes from 2016-09-20.
 - release (version 49): 389 crashes from 2016-09-05.
 - esr     (version 45): 92 crashes from 2016-07-25.

Crash volume on the last weeks (Week N is from 10-17 to 10-23):
            W. N-1  W. N-2  W. N-3  W. N-4
 - nightly       0       2       0       0
 - aurora        1       2       0       0
 - beta         28      19      25       6
 - release     103     128     111      18
 - esr           6      17       9       7

Affected platforms: Windows, Mac OS X, Linux

Crash rank on the last 7 days:
           Browser   Content     Plugin
 - nightly
 - aurora
 - beta    #918      #411
 - release #1002     #266
 - esr     #883

Comment 6

[Julien Cristau [:jcristau]]

Too late for firefox 52, mass-wontfix.

Comment 7

[BugBot [:suhaib / :marco/ :calixte]]

Since the crash volume is low (less than 15 per week), the severity is downgraded to S3. Feel free to change it back if you think the bug is still critical.

For more information, please visit auto_nag documentation.