Open Bug 722312 Opened 12 years ago Updated 1 year ago

Firefox Crash @ nsTableRowGroupFrame::ReflowChildren

Categories

(Core :: Layout: Tables, defect)

10 Branch
x86
Windows 7
defect

Tracking

()

Tracking Status
firefox13 - ---
firefox14 - ---

People

(Reporter: marcia, Unassigned)

References

Details

(Keywords: crash)

Crash Data

Seen while looking at B6 crash stats. http://tinyurl.com/7c3ep4b to the report which were present in low volume in B1 but have spiked in B6. All the crashes except one are Windows 7.

https://crash-stats.mozilla.com/report/index/c9fd24fb-57ee-4e89-990b-cfc432120130

Frame 	Module 	Signature [Expand] 	Source
0 		@0x337bf58c 	
1 	xul.dll 	nsTableRowGroupFrame::ReflowChildren 	layout/tables/nsTableRowGroupFrame.cpp:492
2 	xul.dll 	nsTableRowGroupFrame::Reflow 	layout/tables/nsTableRowGroupFrame.cpp:1322
3 	xul.dll 	nsContainerFrame::ReflowChild 	layout/generic/nsContainerFrame.cpp:961
4 	xul.dll 	nsTableFrame::ReflowChildren 	layout/tables/nsTableFrame.cpp:2790
5 	xul.dll 	nsTableFrame::ReflowTable 	layout/tables/nsTableFrame.cpp:1886
6 	xul.dll 	nsTableFrame::Reflow 	layout/tables/nsTableFrame.cpp:1790
7 	xul.dll 	nsContainerFrame::ReflowChild 	layout/generic/nsContainerFrame.cpp:961
8 	xul.dll 	nsTableOuterFrame::Reflow 	layout/tables/nsTableOuterFrame.cpp:1055
9 	xul.dll 	nsBlockReflowContext::ReflowBlock 	layout/generic/nsBlockReflowContext.cpp:294
10 	xul.dll 	nsBlockFrame::ReflowFloat 	layout/generic/nsBlockFrame.cpp:5798
11 	xul.dll 	nsBlockReflowState::FlowAndPlaceFloat 	layout/generic/nsBlockReflowState.cpp:801
12 	xul.dll 	nsBlockReflowState::AddFloat 	layout/generic/nsBlockReflowState.cpp:554
13 	xul.dll 	nsLineLayout::ReflowFrame 	layout/generic/nsLineLayout.cpp:896
14 	xul.dll 	nsBlockFrame::ReflowInlineFrame 	layout/generic/nsBlockFrame.cpp:3802
15 	xul.dll 	nsBlockFrame::DoReflowInlineFrames 	layout/generic/nsBlockFrame.cpp:3598
16 	xul.dll 	nsBlockFrame::ReflowInlineFrames 	layout/generic/nsBlockFrame.cpp:3452
17 	xul.dll 	nsBlockFrame::ReflowLine 	layout/generic/nsBlockFrame.cpp:2536
18 	xul.dll 	nsBlockFrame::ReflowDirtyLines 	layout/generic/nsBlockFrame.cpp:1962
19 	xul.dll 	nsBlockFrame::Reflow 	layout/generic/nsBlockFrame.cpp:1051
20 	xul.dll 	nsBlockReflowContext::ReflowBlock 	layout/generic/nsBlockReflowContext.cpp:294
21 	xul.dll 	nsBlockFrame::ReflowBlockFrame 	layout/generic/nsBlockFrame.cpp:3173
22 	xul.dll 	nsBlockFrame::ReflowLine 	layout/generic/nsBlockFrame.cpp:2480
23 	xul.dll 	nsBlockFrame::ReflowDirtyLines 	layout/generic/nsBlockFrame.cpp:1962
24 	xul.dll 	nsBlockFrame::Reflow 	layout/generic/nsBlockFrame.cpp:1051
25 	xul.dll 	nsBlockReflowContext::ReflowBlock 	layout/generic/nsBlockReflowContext.cpp:294
26 	xul.dll 	nsBlockFrame::ReflowBlockFrame 	layout/generic/nsBlockFrame.cpp:3173
27 	xul.dll 	nsBlockFrame::ReflowLine 	layout/generic/nsBlockFrame.cpp:2480
28 	xul.dll 	nsBlockFrame::ReflowDirtyLines 	layout/generic/nsBlockFrame.cpp:1962
29 	xul.dll 	nsBlockFrame::Reflow 	layout/generic/nsBlockFrame.cpp:1051
30 	xul.dll 	nsContainerFrame::ReflowChild 	layout/generic/nsContainerFrame.cpp:961
31 	xul.dll 	nsHTMLScrollFrame::ReflowScrolledFrame 	layout/generic/nsGfxScrollFrame.cpp:546
32 	xul.dll 	nsHTMLScrollFrame::TryLayout 	layout/generic/nsGfxScrollFrame.cpp:389
33 	xul.dll 	nsHTMLScrollFrame::ReflowContents 	layout/generic/nsGfxScrollFrame.cpp:695
34 	xul.dll 	nsHTMLScrollFrame::Reflow 	layout/generic/nsGfxScrollFrame.cpp:879
35 	xul.dll 	nsBlockReflowContext::ReflowBlock 	layout/generic/nsBlockReflowContext.cpp:294
36 	xul.dll 	nsBlockFrame::ReflowBlockFrame 	layout/generic/nsBlockFrame.cpp:3173
37 	xul.dll 	nsBlockFrame::ReflowLine 	layout/generic/nsBlockFrame.cpp:2480
38 	xul.dll 	nsBlockFrame::ReflowDirtyLines 	layout/generic/nsBlockFrame.cpp:1962
39 	xul.dll 	nsBlockFrame::Reflow 	layout/generic/nsBlockFrame.cpp:1051
40 	xul.dll 	nsBlockReflowContext::ReflowBlock 	layout/generic/nsBlockReflowContext.cpp:294
41 	xul.dll 	nsBlockFrame::ReflowBlockFrame 	layout/generic/nsBlockFrame.cpp:3173
42 	xul.dll 	nsBlockFrame::ReflowLine 	layout/generic/nsBlockFrame.cpp:2480
43 	xul.dll 	nsBlockFrame::ReflowDirtyLines 	layout/generic/nsBlockFrame.cpp:1962
44 	xul.dll 	nsBlockFrame::Reflow 	layout/generic/nsBlockFrame.cpp:1051
45 	xul.dll 	nsBlockReflowContext::ReflowBlock 	layout/generic/nsBlockReflowContext.cpp:294
46 	xul.dll 	nsBlockFrame::ReflowBlockFrame 	layout/generic/nsBlockFrame.cpp:3173
47 	xul.dll 	nsBlockFrame::ReflowLine 	layout/generic/nsBlockFrame.cpp:2480
48 	xul.dll 	nsBlockFrame::ReflowDirtyLines 	layout/generic/nsBlockFrame.cpp:1962
49 	xul.dll 	nsBlockFrame::Reflow 	layout/generic/nsBlockFrame.cpp:1051
50 	xul.dll 	nsAbsoluteContainingBlock::ReflowAbsoluteFrame 	layout/generic/nsAbsoluteContainingBlock.cpp:444
51 	xul.dll 	nsAbsoluteContainingBlock::Reflow 	layout/generic/nsAbsoluteContainingBlock.cpp:158
52 	xul.dll 	nsBlockFrame::Reflow 	layout/generic/nsBlockFrame.cpp:1189
53 	xul.dll 	nsBlockReflowContext::ReflowBlock 	layout/generic/nsBlockReflowContext.cpp:294
54 	xul.dll 	nsBlockFrame::ReflowFloat 	layout/generic/nsBlockFrame.cpp:5798
55 	xul.dll 	nsBlockReflowState::FlowAndPlaceFloat 	layout/generic/nsBlockReflowState.cpp:801
56 	xul.dll 	nsBlockReflowState::AddFloat 	layout/generic/nsBlockReflowState.cpp:554
57 	xul.dll 	nsLineLayout::ReflowFrame 	layout/generic/nsLineLayout.cpp:896
58 	xul.dll 	nsBlockFrame::ReflowInlineFrame 	layout/generic/nsBlockFrame.cpp:3802
59 	xul.dll 	nsBlockFrame::DoReflowInlineFrames 	layout/generic/nsBlockFrame.cpp:3598
60 	xul.dll 	nsBlockFrame::ReflowInlineFrames 	layout/generic/nsBlockFrame.cpp:3452
61 	xul.dll 	nsBlockFrame::ReflowLine 	layout/generic/nsBlockFrame.cpp:2536
62 	xul.dll 	nsBlockFrame::ReflowDirtyLines 	layout/generic/nsBlockFrame.cpp:1962
63 	xul.dll 	nsBlockFrame::Reflow 	layout/generic/nsBlockFrame.cpp:1051
64 	xul.dll 	nsBlockReflowContext::ReflowBlock 	layout/generic/nsBlockReflowContext.cpp:294
65 	xul.dll 	nsBlockFrame::ReflowFloat 	layout/generic/nsBlockFrame.cpp:5798
66 	xul.dll 	nsBlockReflowState::FlowAndPlaceFloat 	layout/generic/nsBlockReflowState.cpp:801
67 	xul.dll 	nsBlockReflowState::AddFloat 	layout/generic/nsBlockReflowState.cpp:554
68 	xul.dll 	nsLineLayout::ReflowFrame 	layout/generic/nsLineLayout.cpp:896
69 	xul.dll 	nsBlockFrame::ReflowInlineFrame 	layout/generic/nsBlockFrame.cpp:3802
70 	xul.dll 	nsBlockFrame::DoReflowInlineFrames 	layout/generic/nsBlockFrame.cpp:3598
71 	xul.dll 	nsBlockFrame::ReflowInlineFrames 	layout/generic/nsBlockFrame.cpp:3452
72 	xul.dll 	nsBlockFrame::ReflowLine 	layout/generic/nsBlockFrame.cpp:2536
73 	xul.dll 	nsBlockFrame::ReflowDirtyLines 	layout/generic/nsBlockFrame.cpp:1962
74 	xul.dll 	nsBlockFrame::Reflow 	layout/generic/nsBlockFrame.cpp:1051
75 	xul.dll 	nsBlockReflowContext::ReflowBlock 	layout/generic/nsBlockReflowContext.cpp:294
76 	xul.dll 	nsBlockFrame::ReflowFloat 	layout/generic/nsBlockFrame.cpp:5798
77 	xul.dll 	nsBlockReflowState::FlowAndPlaceFloat 	layout/generic/nsBlockReflowState.cpp:801
78 	xul.dll 	nsBlockReflowState::AddFloat 	layout/generic/nsBlockReflowState.cpp:554
79 	xul.dll 	nsLineLayout::ReflowFrame 	layout/generic/nsLineLayout.cpp:896
80 	xul.dll 	nsBlockFrame::ReflowInlineFrame 	layout/generic/nsBlockFrame.cpp:3802
81 	xul.dll 	nsBlockFrame::DoReflowInlineFrames 	layout/generic/nsBlockFrame.cpp:3598
82 	xul.dll 	nsBlockFrame::ReflowInlineFrames 	layout/generic/nsBlockFrame.cpp:3452
83 	xul.dll 	nsBlockFrame::ReflowLine 	layout/generic/nsBlockFrame.cpp:2536
84 	xul.dll 	nsBlockFrame::ReflowDirtyLines 	layout/generic/nsBlockFrame.cpp:1962
85 	xul.dll 	nsBlockFrame::Reflow 	layout/generic/nsBlockFrame.cpp:1051
86 	xul.dll 	nsBlockReflowContext::ReflowBlock 	layout/generic/nsBlockReflowContext.cpp:294
87 	xul.dll 	nsBlockFrame::ReflowBlockFrame 	layout/generic/nsBlockFrame.cpp:3173
88 	xul.dll 	nsBlockFrame::ReflowLine 	layout/generic/nsBlockFrame.cpp:2480
89 	xul.dll 	nsBlockFrame::ReflowDirtyLines 	layout/generic/nsBlockFrame.cpp:1962
90 	xul.dll 	nsBlockFrame::Reflow 	layout/generic/nsBlockFrame.cpp:1051
91 	xul.dll 	nsAbsoluteContainingBlock::ReflowAbsoluteFrame 	layout/generic/nsAbsoluteContainingBlock.cpp:444
92 	xul.dll 	nsAbsoluteContainingBlock::Reflow 	layout/generic/nsAbsoluteContainingBlock.cpp:158
93 	xul.dll 	ViewportFrame::Reflow 	layout/generic/nsViewportFrame.cpp:270
94 	xul.dll 	PresShell::DoReflow 	layout/base/nsPresShell.cpp:7344
95 	xul.dll 	PresShell::ProcessReflowCommands 	layout/base/nsPresShell.cpp:7482
96 	xul.dll 	PresShell::FlushPendingNotifications 	layout/base/nsPresShell.cpp:4089
97 	xul.dll 	nsDocument::FlushPendingNotifications 	content/base/src/nsDocument.cpp:6268
98 	xul.dll 	xpc_qsUnwrapThis<nsGenericElement> 	js/xpconnect/src/nsDOMQS.h:121
99 	xul.dll 	nsIDOMNSElement_GetBoundingClientRect 	obj-firefox/js/xpconnect/src/dom_quickstubs.cpp:6432
100 	mozjs.dll 	js::InvokeKernel 	js/src/jsinterp.cpp:629
267 	firefox.exe 	firefox.exe@0x4033 	
268 	firefox.exe 	__tmainCRTStartup 	crtexe.c:594
269 	firefox.exe 	_SEH_epilog4 	
270 	kernel32.dll 	BaseThreadInitThunk 	
271 	ntdll.dll 	__RtlUserThreadStart 	
272 	ntdll.dll 	LdrpGetShimEngineInterface 	
273 	ntdll.dll 	_RtlUserThreadStart 	
274 	firefox.exe 	pre_c_init 	crtexe.c:304
275 	firefox.exe 	pre_c_init 	crtexe.c:304
276 		@0x7ffdcfff
It's probably related to bug 700288, bug 722024, bug 722025, bug 722030, and bug 722165.
Blocks: 605780
Summary: Firefox Crash @ nsTableRowGroupFrame::ReflowChildren(nsPresContext*, nsHTMLReflowMetrics& → Firefox Crash @ nsTableRowGroupFrame::ReflowChildren with AMD Radeon HD 6xxx series
Depends on: 722538
There's a spike in crashes from 14.0a1/20120414 making it #6 top crasher in the trunk over the last day although the D2D blocklist is effective.

The regression range for the spike is:
http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=10622eaff4fc&tochange=364f0a5a1d2d

I think it's related to bug 745054.
Crash Signature: [@ nsTableRowGroupFrame::ReflowChildren(nsPresContext*, nsHTMLReflowMetrics&, nsRowGroupReflowState&, unsigned int&, bool*) ] → [@ nsTableRowGroupFrame::ReflowChildren(nsPresContext*, nsHTMLReflowMetrics&, nsRowGroupReflowState&, unsigned int&, bool*)] [@ nsTableFrame::Reflow(nsPresContext*, nsHTMLReflowMetrics&, nsHTMLReflowState const&, unsigned int&)]
The spike is gone in the next build.
Again, there's a spike in crashes from 14.0a1/20120418. The regression range for the spike is:
http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=c61e7c3a232a&tochange=0c7e2911be75
The spike is gone in the next build.
It acts the same way as bug 700288.
Keywords: topcrash
Depends on: 755974
This isn't an ongoing top crasher, and there isn't anything actionable for us to do.
Crash Signature: [@ nsTableRowGroupFrame::ReflowChildren(nsPresContext*, nsHTMLReflowMetrics&, nsRowGroupReflowState&, unsigned int&, bool*)] [@ nsTableFrame::Reflow(nsPresContext*, nsHTMLReflowMetrics&, nsHTMLReflowState const&, unsigned int&)] → [@ nsTableRowGroupFrame::ReflowChildren(nsPresContext*, nsHTMLReflowMetrics&, nsRowGroupReflowState&, unsigned int&, bool*)] [@ nsTableFrame::Reflow(nsPresContext*, nsHTMLReflowMetrics&, nsHTMLReflowState const&, unsigned int&)] [@ nsTableRowGroupFrame:…
QA Whiteboard: qa-not-actionable
Severity: critical → S2

I suspect "with AMD Radeon HD 6xxx series" isn't a relevant qualifier here anymore. Looking through recent crash reports, I'm seeing Android (obviously without a Radeon graphics card) as well as desktop Firefox with Intel graphics hardware.

--> Downgrading to S3 given the low (but still nonzero) crash rate.

Severity: S2 → S3
Summary: Firefox Crash @ nsTableRowGroupFrame::ReflowChildren with AMD Radeon HD 6xxx series → Firefox Crash @ nsTableRowGroupFrame::ReflowChildren
Crash Signature: [@ nsTableRowGroupFrame::ReflowChildren(nsPresContext*, nsHTMLReflowMetrics&, nsRowGroupReflowState&, unsigned int&, bool*)] [@ nsTableFrame::Reflow(nsPresContext*, nsHTMLReflowMetrics&, nsHTMLReflowState const&, unsigned int&)] [@ nsTableRowGroupFrame:… → [@ nsTableRowGroupFrame::ReflowChildren] [@ nsTableFrame::Reflow] [@ nsTableRowGroupFrame::ReflowChildren] [@ nsTableFrame::Reflow]
You need to log in before you can comment on or make changes to this bug.