78626 - Trunk crash in [@ nsOutlinerBodyFrame::SetView] espn.com, mail compose, preferences

Status: VERIFIED FIXED

(Core :: XUL, defect)

Description

[Chris McAfee]

#0  0x41d59469 in nsOutlinerBodyFrame::SetView (this=0x8414bdc, 
    aView=0x8472910) at nsOutlinerBodyFrame.cpp:443
#1  0x41d60c9f in nsOutlinerBoxObject::SetView (this=0x8472988, 
    aView=0x8472910) at nsOutlinerBoxObject.cpp:162
#2  0x40150b35 in XPTC_InvokeByIndex (that=0x8472988, methodIndex=4, 
    paramCount=1, params=0xbfffa578) at xptcinvoke_unixish_x86.cpp:138
#3  0x40c107f1 in nsXPCWrappedNativeClass::CallWrappedMethod (this=0x42b7ef60, 
    cx=0x82d1f68, wrapper=0x83637b8, desc=0x42b7c68c, callMode=CALL_SETTER, 
    argc=1, argv=0xbfffae10, vp=0x0) at xpcwrappednativeclass.cpp:934
#4  0x40c12179 in nsXPCWrappedNativeClass::SetAttributeFromJSVal (
    this=0x42b7ef60, cx=0x82d1f68, wrapper=0x83637b8, desc=0x42b7c68c, 
    vp=0xbfffae10) at xpcprivate.h:970
#5  0x40c1366f in WrappedNative_SetProperty (cx=0x82d1f68, obj=0x8324e70, 
    id=136036368, vp=0xbfffae10) at xpcwrappednativejsops.cpp:447
#6  0x4021fac7 in js_Interpret (cx=0x82d1f68, result=0xbfffaef4)
    at jsinterp.c:2551
#7  0x4020c42d in js_Invoke (cx=0x82d1f68, argc=1, flags=2) at jsinterp.c:830
#8  0x4020c78c in js_InternalInvoke (cx=0x82d1f68, obj=0x8324298, 
    fval=137511704, flags=0, argc=1, argv=0xbfffb820, rval=0xbfffb820)
    at jsinterp.c:902

Comment 1

[Chris McAfee]

over to hyatt

Comment 2

[Chris McAfee]

This was working yesterday, something new is breaking this.

Comment 3

[sairuh (rarely reading bugmail)]

using a 7:22pm debug on linux, i crash when i bring up mail compose, or
when i open a new browser window.

cc'ing tracy and asa --if this still occurs in tomorrow's verif bits, then this
should prolly be labelled as a smoketest blocker.

Comment 4

[sairuh (rarely reading bugmail)]

get the same trace --thanks to seth and chris for the help!

Comment 5

[sairuh (rarely reading bugmail)]

another observation: crash when i try to bring up Preferences.

Comment 6

[David Hyatt]

Fixed.

Comment 7

[Tracy Walker [:tracy]]

verified fixed mozilla 2001-05-03-05-trunk

Comment 8

[Jay Patel [:jay]]

adding topcrash and [@ nsOutlinerBodyFrame::SetView] for future reference, since
this *was* a topcrasher with recent Trunk builds.