crash in nsLineLayout::ReflowFrame

RESOLVED DUPLICATE of bug 765409

Status

()

defect
--
critical
RESOLVED DUPLICATE of bug 765409
7 years ago
7 years ago

People

(Reporter: scoobidiver, Unassigned)

Tracking

({crash, regression})

15 Branch
All
Windows 7
Points:
---
Dependency tree / graph

Firefox Tracking Flags

(Not tracked)

Details

(crash signature)

Reporter

Description

7 years ago
It's a low volume crash but there's a spike in crashes from 15.0a1/20120530 making it #34 top crasher over the last day. The regression range for the spike is:
http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=79262a88881d&tochange=65fa5cb6f79c

Signature 	nsLineLayout::ReflowFrame(nsIFrame*, unsigned int&, nsHTMLReflowMetrics*, bool&) More Reports Search
UUID	5da5f275-18bd-43e8-a978-cec892120603
Date Processed	2012-06-03 05:26:56
Uptime	11611
Last Crash	3.4 weeks before submission
Install Age	3.2 hours since version was first installed.
Install Time	2012-06-03 02:13:08
Product	Firefox
Version	15.0a1
Build ID	20120602134306
Release Channel	nightly
OS	Windows NT
OS Version	6.1.7600
Build Architecture	x86
Build Architecture Info	GenuineIntel family 6 model 28 stepping 10
Crash Reason	EXCEPTION_ACCESS_VIOLATION_READ
Crash Address	0xfffffffff0de8133
App Notes 	
AdapterVendorID: 0x8086, AdapterDeviceID: 0xa001, AdapterSubsysID: 22671019, AdapterDriverVersion: 8.14.10.2117
D3D10 Layers? D3D10 Layers- D3D9 Layers? D3D9 Layers- 
EMCheckCompatibility	True
Total Virtual Memory	2147352576
Available Virtual Memory	1525874688
System Memory Use Percentage	59
Available Page File	2494566400
Available Physical Memory	863834112

Frame 	Module 	Signature 	Source
0 	xul.dll 	nsLineLayout::ReflowFrame 	layout/generic/nsLineLayout.cpp:745
1 	xul.dll 	nsInlineFrame::ReflowInlineFrame 	layout/generic/nsInlineFrame.cpp:680
2 	xul.dll 	nsInlineFrame::ReflowFrames 	layout/generic/nsInlineFrame.cpp:543
3 	xul.dll 	nsInlineFrame::Reflow 	layout/generic/nsInlineFrame.cpp:397
4 	xul.dll 	nsLineLayout::ReflowFrame 	layout/generic/nsLineLayout.cpp:825
5 	xul.dll 	nsBlockFrame::ReflowInlineFrame 	layout/generic/nsBlockFrame.cpp:3809
6 	xul.dll 	nsBlockFrame::DoReflowInlineFrames 	layout/generic/nsBlockFrame.cpp:3640
7 	xul.dll 	nsBlockFrame::ReflowInlineFrames 	layout/generic/nsBlockFrame.cpp:3459
8 	xul.dll 	nsBlockFrame::ReflowLine 	layout/generic/nsBlockFrame.cpp:2544
9 	xul.dll 	nsBlockFrame::ReflowDirtyLines 	layout/generic/nsBlockFrame.cpp:1994
10 	xul.dll 	nsBlockFrame::Reflow 	layout/generic/nsBlockFrame.cpp:1043
11 	xul.dll 	nsBlockReflowContext::ReflowBlock 	layout/generic/nsBlockReflowContext.cpp:262
12 	xul.dll 	nsBlockFrame::ReflowBlockFrame 	layout/generic/nsBlockFrame.cpp:3180
13 	xul.dll 	nsBlockFrame::ReflowLine 	layout/generic/nsBlockFrame.cpp:2488
14 	xul.dll 	nsBlockFrame::ReflowDirtyLines 	layout/generic/nsBlockFrame.cpp:1994
15 	xul.dll 	nsBlockFrame::Reflow 	layout/generic/nsBlockFrame.cpp:1043
16 	xul.dll 	nsBlockReflowContext::ReflowBlock 	layout/generic/nsBlockReflowContext.cpp:262
17 	xul.dll 	nsBlockFrame::ReflowBlockFrame 	layout/generic/nsBlockFrame.cpp:3180
18 	xul.dll 	nsBlockFrame::ReflowLine 	layout/generic/nsBlockFrame.cpp:2488
19 	xul.dll 	nsBlockFrame::ReflowDirtyLines 	layout/generic/nsBlockFrame.cpp:1994
20 	xul.dll 	nsBlockFrame::Reflow 	layout/generic/nsBlockFrame.cpp:1043
21 	xul.dll 	nsHTMLReflowState::Init 	layout/generic/nsHTMLReflowState.cpp:252
22 	xul.dll 	nsCanvasFrame::Reflow 	layout/generic/nsCanvasFrame.cpp:426

More reports at:
https://crash-stats.mozilla.com/report/list?signature=nsLineLayout%3A%3AReflowFrame%28nsIFrame*%2C+unsigned+int%26%2C+nsHTMLReflowMetrics*%2C+bool%26%29
See Bug 761113 Comment 16 and the Comment in the Report of bp-0d68ec07-07af-4dd0-a6cb-7159d2120601

The Spike is probably only because of some Users trying to reproduce that Issue.

Comment 2

7 years ago
dupe of Bug 760957 ?

Comment 3

7 years ago
(In reply to Bob Clary [:bc:] from comment #2)
> dupe of Bug 760957 ?

I wouldn't count on it. That testcase is way out there.

On the other hand, if bug 760957 gets fixed, the fuzzer will have a good chance of catching any other bugs that can cause crashes with this signature.
Depends on: 760957

Updated

7 years ago
Depends on: 765409

Comment 4

7 years ago
I'm marking this fixed because it's not happening in Firefox 18 and higher any more.
Status: NEW → RESOLVED
Closed: 7 years ago
Resolution: --- → FIXED
Reporter

Comment 5

7 years ago
A bug can't be closed as fixed without a known patch.
Resolution: FIXED → WORKSFORME

Comment 6

7 years ago
There is a clear patch, it's just in a bug you cannot access.
Resolution: WORKSFORME → FIXED
Reporter

Comment 7

7 years ago
So let's dupe it.
No longer depends on: 765409
Resolution: FIXED → DUPLICATE
Duplicate of bug: 765409
You need to log in before you can comment on or make changes to this bug.