Closed Bug 770424 Opened 11 years ago Closed 11 years ago

crash in PresShell::Paint


(Core :: Layout, defect)

17 Branch
Not set





(Reporter: scoobidiver, Unassigned)



(Keywords: crash, regression)

Crash Data


(1 file)

It's #6 top crasher in today's build and first appeared in 16.0a1/20120701. The regression range is:
It's likely a regression from bug 539356.

One comment says: "View a picture in Facebook overlay with Tetris battle running in the background".

Signature 	PresShell::Paint More Reports Search
UUID	cad2614e-59af-431b-9123-91b642120703
Date Processed	2012-07-03 05:29:55
Uptime	809
Last Crash	13.5 minutes before submission
Install Age	6.1 hours since version was first installed.
Install Time	2012-07-02 23:24:23
Product	Firefox
Version	16.0a1
Build ID	20120702030551
Release Channel	nightly
OS	Linux
OS Version	0.0.0 Linux 3.1.10-1.13-desktop #1 SMP PREEMPT Tue Jun 12 13:11:31 UTC 2012 (44a489e) x86_64
Build Architecture	amd64
Build Architecture Info	family 6 model 15 stepping 13
Crash Reason	SIGSEGV
Crash Address	0x0
App Notes 	
OpenGL: Tungsten Graphics, Inc -- Mesa DRI Intel(R) 965GM  -- 2.1 Mesa 7.11 -- texture_from_pixmap
EMCheckCompatibility	True

Frame 	Module 	Signature 	Source
0 	PresShell::Paint 	nsIWidget.h:1045
1 	nsViewManager::Refresh 	view/src/nsViewManager.cpp:346
2 	nsViewManager::DispatchEvent 	view/src/nsViewManager.cpp:798
3 	HandleEvent 	view/src/nsView.cpp:127
4 	nsWindow::OnExposeEvent 	widget/gtk2/nsWindow.cpp:474
5 	expose_event_cb 	widget/gtk2/nsWindow.cpp:5091
8 	firefox 	malloc 	jemalloc.c:1629

More reports at:
Crash Signature: [@ PresShell::Paint] → [@ PresShell::Paint ]
Crashes are gone after 16.0a1/20120703110846. The working range is:
It's caused by the backout of bug 539356.
Keywords: topcrash
Crashes are back from 17.0a1/20120814 with about 25 crashes per build. The new regression range is:
It's likely a regression from bug 539356.

One comment says: "Resizing a window, 3rd time it crashed today."
Keywords: topcrash
Version: 16 Branch → 17 Branch
Again, crashes went away after 17.0a1/20120821.
It's no longer a top crasher in 17.0a2 or 18.0a1.
Keywords: topcrash
There are only two crashes over the last week.
Given the reduction in crash volume, untracking.
2012-08-14-03-05-21-mozilla-central + (64 bit) crashes.
(In reply to Scoobidiver from comment #3)
> Again, crashes went away after 17.0a1/20120821.
That is on Linux. On Windows, it appeared in 17.0a1/20120822. The regression range is:

It's #42 top browser crasher in 17.0a2 and #83 in 18.0a1.

Here is the stack trace:
Frame 	Module 	Signature 	Source
0 	xul.dll 	PresShell::Paint 	layout/base/nsPresShell.cpp:5275
1 	xul.dll 	nsViewManager::Refresh 	view/src/nsViewManager.cpp:369
2 	xul.dll 	nsViewManager::PaintWindow 	view/src/nsViewManager.cpp:709
3 	xul.dll 	nsView::PaintWindow 	view/src/nsView.cpp:1034
4 	xul.dll 	nsWindow::OnPaint 	widget/windows/nsWindowGfx.cpp:419
5 	xul.dll 	nsWindow::ProcessMessage 	widget/windows/nsWindow.cpp:4727
6 	xul.dll 	nsWindow::WindowProcInternal 	widget/windows/nsWindow.cpp:4336
7 	xul.dll 	CallWindowProcCrashProtected 	xpcom/base/nsCrashOnException.cpp:32
8 	xul.dll 	nsWindow::WindowProc 	widget/windows/nsWindow.cpp:4278
9 	user32.dll 	InternalCallWinProc 	
10 	user32.dll 	UserCallWinProcCheckWow 	
11 	user32.dll 	DispatchClientMessage 	
12 	user32.dll 	__fnDWORD 	
13 	ntdll.dll 	KiUserCallbackDispatcher 	
14 	xul.dll 	nsIMM32Handler::ProcessMessage 	widget/windows/nsIMM32Handler.cpp:353
15 	user32.dll 	DispatchMessageW 	
16 	xul.dll 	nsAppShell::ProcessNextNativeEvent 	widget/windows/nsAppShell.cpp:322
17 	xul.dll 	nsBaseAppShell::OnProcessNextEvent 	widget/xpwidgets/nsBaseAppShell.cpp:280
18 	xul.dll 	nsThread::ProcessNextEvent 	xpcom/threads/nsThread.cpp:586
19 	xul.dll 	mozilla::ipc::MessagePump::Run 	ipc/glue/MessagePump.cpp:82
20 	xul.dll 	MessageLoop::RunHandler 	ipc/chromium/src/base/
21 	xul.dll 	MessageLoop::Run 	ipc/chromium/src/base/
22 	xul.dll 	nsBaseAppShell::Run 	widget/xpwidgets/nsBaseAppShell.cpp:163
23 	xul.dll 	nsAppShell::Run 	widget/windows/nsAppShell.cpp:232
24 	xul.dll 	nsAppStartup::Run 	toolkit/components/startup/nsAppStartup.cpp:273
25 	xul.dll 	XREMain::XRE_mainRun 	toolkit/xre/nsAppRunner.cpp:3835
26 	xul.dll 	XREMain::XRE_main 	toolkit/xre/nsAppRunner.cpp:3912
27 	xul.dll 	XRE_main 	toolkit/xre/nsAppRunner.cpp:3988

More reports at*%2C+nsRegion+const%26%2C+nsIPresShell%3A%3APaintType%2C+bool%29
Crash Signature: [@ PresShell::Paint ] → [@ PresShell::Paint(nsIView*, nsRegion const&, nsIPresShell::PaintType, bool) ] [@ PresShell::Paint ]
OS: Linux → All
Stack looks like we're crashing with a null widget in PresShell::Paint.

I guess calling ProcessPendingUpdates could cause our widget to go away, so this just moves the null check to after that call.
Attachment #660224 - Flags: review?(roc)
Closed: 11 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla18
You need to log in before you can comment on or make changes to this bug.