750202 - crash in nsFontInflationData::UpdateISize

Status: RESOLVED INCOMPLETE

(Core :: Layout, defect)

Description

[Scoobidiver (away)]

There are 3 crashes so far.

Signature 	nsFontInflationData::UpdateWidth More Reports Search
UUID	bbedebeb-f2c7-4971-8a7f-2aab02120430
Date Processed	2012-04-30 06:46:53
Uptime	39744
Install Age	1.0 days since version was first installed.
Install Time	2012-04-29 06:15:49
Product	FennecAndroid
Version	15.0a1
Build ID	20120428030503
Release Channel	nightly
OS	Linux
OS Version	0.0.0 Linux 2.6.36.3 #1 SMP PREEMPT Tue Feb 7 14:14:54 KST 2012 armv7l
Build Architecture	arm
Build Architecture Info	
Crash Reason	SIGSEGV
Crash Address	0x1c
App Notes 	
EGL? EGL+ AdapterVendorID: p3, AdapterDeviceID: GT-P7500.
AdapterDescription: 'Android, Model: 'GT-P7500', Product: 'GT-P7500', Manufacturer: 'samsung', Hardware: 'p3''.
GL Context? GL Context+ GL Layers? GL Layers+ 
samsung GT-P7500
samsung/GT-P7500/GT-P7500:3.2/HTJ85B/CELB1:user/release-keys
Processor Notes 	This dump is too long and has triggered the automatic truncation routine
EMCheckCompatibility	True

Crashing Thread
Frame 	Module 	Signature 	Source
0 	libxul.so 	nsFontInflationData::UpdateWidth 	layout/generic/nsIFrame.h:820
1 	libxul.so 	nsFontInflationData::UpdateFontInflationDataWidthFor 	layout/generic/nsFontInflationData.cpp:84
2 	libxul.so 	nsHTMLReflowState::Init 	layout/generic/nsHTMLReflowState.cpp:322
3 	libxul.so 	nsTableRowFrame::InitChildReflowState 	layout/tables/nsTableRowFrame.cpp:111
4 	libxul.so 	nsTableRowFrame::ReflowChildren 	layout/tables/nsTableRowFrame.cpp:882
5 	libxul.so 	nsTableRowFrame::Reflow 	layout/tables/nsTableRowFrame.cpp:1032
6 	libxul.so 	nsContainerFrame::ReflowChild 	layout/generic/nsContainerFrame.cpp:941
7 	libxul.so 	nsTableRowGroupFrame::ReflowChildren 	layout/tables/nsTableRowGroupFrame.cpp:412
8 	libxul.so 	nsTableRowGroupFrame::Reflow 	layout/tables/nsTableRowGroupFrame.cpp:1328
9 	libxul.so 	nsContainerFrame::ReflowChild 	layout/generic/nsContainerFrame.cpp:941
10 	libxul.so 	nsTableFrame::ReflowChildren 	layout/tables/nsTableFrame.cpp:2814
11 	libxul.so 	nsTableFrame::ReflowTable 	layout/tables/nsTableFrame.cpp:1900
12 	libxul.so 	nsTableFrame::Reflow 	layout/tables/nsTableFrame.cpp:1786
13 	libxul.so 	nsContainerFrame::ReflowChild 	layout/generic/nsContainerFrame.cpp:941
14 	libxul.so 	nsTableOuterFrame::OuterDoReflowChild 	layout/tables/nsTableOuterFrame.cpp:902
15 	libxul.so 	nsTableOuterFrame::Reflow 	layout/tables/nsTableOuterFrame.cpp:1055
16 	libxul.so 	nsBlockReflowContext::ReflowBlock 	layout/generic/nsBlockReflowContext.cpp:295
17 	libxul.so 	nsBlockFrame::ReflowBlockFrame 	layout/generic/nsBlockFrame.cpp:3202
18 	libxul.so 	nsBlockFrame::ReflowLine 	layout/generic/nsBlockFrame.cpp:2511
19 	libxul.so 	nsBlockFrame::ReflowDirtyLines 	layout/generic/nsBlockFrame.cpp:2022
...

More reports at:
https://crash-stats.mozilla.com/report/list?signature=nsFontInflationData%3A%3AUpdateWidth

Comment 1

[Scott Johnson (:jwir3)]

Could we get example URLs where this is happening to see if we can distill a test case?

Comment 2

[David Baron :dbaron: (⌚️UTC-4, no longer working on Mozilla)]

It's possible this is bug 751797 if there's a frame missing from the stack.

Comment 3

[Naoki Hirata :nhirata (please use needinfo instead of cc)]

Only URL listed for this crash:
http://www.divitarot.com/fr/tarot-divinatoire.php

Comment 4

[Mats Palmgren (inactive)]

The only crashes for the new signature are for Thunderbird 45.2.0 (8 crashes in past 6 months).
The current version of Thunderbird is 45.6.0 so perhaps it was fixed?
In any case, it doesn't seem worth tracking at this low rate.