738942 - crash in mozilla::css::Declaration::CompressFrom @ TouchBadMemory

Status: RESOLVED DUPLICATE of bug 736714

(Core :: CSS Parsing and Computation, defect)

Description

[Scoobidiver (away)]

Signature 	TouchBadMemory | mozalloc_abort | moz_xmalloc | nsCSSExpandedDataBlock::Compress More Reports Search
UUID	e77be320-05ff-4ebd-a127-5c3a92120323
Date Processed	2012-03-23 17:18:12
Uptime	15
Last Crash	28 seconds before submission
Install Age	32 seconds since version was first installed.
Install Time	2012-03-23 17:17:32
Product	FennecAndroid
Version	14.0a1
Build ID	20120323031214
Release Channel	nightly
OS	Linux
OS Version	0.0.0 Linux 3.0.8-g8e0f3bc #1 SMP PREEMPT Wed Dec 14 18:52:51 PST 2011 armv7l
Build Architecture	arm
Build Architecture Info	
Crash Reason	SIGSEGV
Crash Address	0x0
App Notes 	
EGL? EGL+ AdapterVendorID: tuna, AdapterDeviceID: Galaxy Nexus.
AdapterDescription: 'Android, Model: 'Galaxy Nexus', Product: 'yakju', Manufacturer: 'samsung', Hardware: 'tuna''.
GL Context? GL Context+ Couldn't get device attachments for device.GL Layers? GL Layers- 
samsung Galaxy Nexus
google/yakju/maguro:4.0.1/ITL41F/228551:user/release-keys
EMCheckCompatibility	True	
OOMAllocationSize	98

Frame 	Module 	Signature [Expand] 	Source
0 	libmozalloc.so 	TouchBadMemory 	memory/mozalloc/mozalloc_abort.cpp:68
1 	libmozalloc.so 	mozalloc_abort 	memory/mozalloc/mozalloc_abort.cpp:89
2 	libmozalloc.so 	moz_xmalloc 	memory/mozalloc/mozalloc.cpp:105
3 	libxul.so 	nsCSSExpandedDataBlock::Compress 	mozalloc.h:229
4 	libxul.so 	mozilla::css::Declaration::CompressFrom 	layout/style/Declaration.h:127
5 	libxul.so 	CSSParserImpl::ParseDeclarationBlock 	layout/style/nsCSSParser.cpp:3722
6 	libxul.so 	CSSParserImpl::ParseRuleSet 	layout/style/nsCSSParser.cpp:2577
7 	libxul.so 	nsCSSParser::ParseSheet 	layout/style/nsCSSParser.cpp:950
8 	libxul.so 	mozilla::css::Loader::ParseSheet 	layout/style/Loader.cpp:1645
9 	libxul.so 	mozilla::css::SheetLoadData::OnStreamComplete 	layout/style/Loader.cpp:991
10 	libxul.so 	nsUnicharStreamLoader::OnStopRequest 	netwerk/base/src/nsUnicharStreamLoader.cpp:123
11 	libxul.so 	nsHTTPCompressConv::OnStopRequest 	netwerk/streamconv/converters/nsHTTPCompressConv.cpp:127
12 	libxul.so 	nsStreamListenerTee::OnStopRequest 	netwerk/base/src/nsStreamListenerTee.cpp:82
13 	libxul.so 	nsHttpChannel::OnStopRequest 	netwerk/protocol/http/nsHttpChannel.cpp:4378
14 	libxul.so 	nsInputStreamPump::OnStateStop 	netwerk/base/src/nsInputStreamPump.cpp:583
15 	libxul.so 	nsInputStreamPump::OnInputStreamReady 	netwerk/base/src/nsInputStreamPump.cpp:405
16 	libxul.so 	nsInputStreamReadyEvent::Run 	xpcom/io/nsStreamUtils.cpp:114
17 	libxul.so 	nsThread::ProcessNextEvent 	xpcom/threads/nsThread.cpp:657
18 	libxul.so 	NS_ProcessNextEvent_P 	obj-firefox/xpcom/build/nsThreadUtils.cpp:245
19 	libxul.so 	mozilla::ipc::MessagePump::Run 	ipc/glue/MessagePump.cpp:110
20 	libxul.so 	MessageLoop::RunInternal 	ipc/chromium/src/base/message_loop.cc:208
21 	libxul.so 	MessageLoop::Run 	ipc/chromium/src/base/message_loop.cc:201
22 	libxul.so 	nsBaseAppShell::Run 	widget/xpwidgets/nsBaseAppShell.cpp:189
23 	libxul.so 	nsAppStartup::Run 	toolkit/components/startup/nsAppStartup.cpp:295
24 	libxul.so 	XRE_main 	toolkit/xre/nsAppRunner.cpp:3703
...

More reports at:
https://crash-stats.mozilla.com/report/list?signature=TouchBadMemory+|+mozalloc_abort+|+moz_xmalloc+|+nsCSSExpandedDataBlock%3A%3ACompress

Comment 2

[Scoobidiver (away)]

I was abused because of bug 738225.