816055 - Intermittent crash in test_ctypes.xul [@ nsFrame::IntrinsicWidthOffsets(nsRenderingContext*)]

Status: RESOLVED WORKSFORME

(Core :: Layout, defect)

Description

[Ed Morley [:emorley]]

Rev4 MacOSX Snow Leopard 10.6 mozilla-inbound debug test mochitest-other on 2012-11-28 00:49:58 PST for push 57b33c0ff8bd

slave: talos-r4-snow-051

https://tbpl.mozilla.org/php/getParsedLog.php?id=17404021&tree=Mozilla-Inbound

{
14550 INFO TEST-START | chrome://mochitests/content/chrome/toolkit/components/toolkit/components/ctypes/tests/test_ctypes.xul
WARNING: shutting down early because of crash!: file ../../../../dom/plugins/ipc/PluginModuleChild.cpp, line 704
WARNING: plugin process _exit()ing: file ../../../../dom/plugins/ipc/PluginModuleChild.cpp, line 669
TEST-UNEXPECTED-FAIL | chrome://mochitests/content/chrome/toolkit/components/toolkit/components/ctypes/tests/test_ctypes.xul | Exited with code 1 during test run
INFO | automation.py | Application ran for: 0:12:41.943943
INFO | automation.py | Reading PID log: /var/folders/Hs/HsDn6a9SG8idoIya6p9mtE+++TI/-Tmp-/tmpNzTd6Rpidlog
Downloading symbols from: http://ftp.mozilla.org/pub/mozilla.org/firefox/tinderbox-builds/mozilla-inbound-macosx64-debug/1354091372/firefox-20.0a1.en-US.mac64.crashreporter-symbols.zip
PROCESS-CRASH | chrome://mochitests/content/chrome/toolkit/components/toolkit/components/ctypes/tests/test_ctypes.xul | application crashed (minidump found)
Crash dump filename: /var/folders/Hs/HsDn6a9SG8idoIya6p9mtE+++TI/-Tmp-/tmpa9jSwy/minidumps/F7EFB4DF-7E66-4C25-AC0B-A799B6349F42.dmp
Operating system: Mac OS X
                  10.6.8 10K549
CPU: amd64
     family 6 model 23 stepping 10
     2 CPUs

Crash reason:  EXC_BAD_ACCESS / KERN_INVALID_ADDRESS
Crash address: 0x1000001e

Thread 0 (crashed)
 0  XUL!nsFrame::IntrinsicWidthOffsets(nsRenderingContext*) [nsIFrame.h : 1193 + 0x0]
    rbx = 0x0000000129fd6050   r12 = 0x0000000010000000
    r13 = 0x0000000128afe818   r14 = 0x0000000128d3ad28
    r15 = 0x00007fff5fbf8b20   rip = 0x0000000101c09b6e
    rsp = 0x00007fff5fbf8a20   rbp = 0x00007fff5fbf8a90
    Found by: given as instruction pointer in context
 1  XUL!nsTableCellFrame::IntrinsicWidthOffsets(nsRenderingContext*) [nsTableCellFrame.cpp : 744 + 0x4]
    rbx = 0x00007fff5fbf8b20   r12 = 0x000000012a0edc10
    r13 = 0x0000000128afe818   r14 = 0x0000000128d3ad28
    r15 = 0x00000000000001a4   rip = 0x0000000101d8e5e6
    rsp = 0x00007fff5fbf8aa0   rbp = 0x00007fff5fbf8ac0
    Found by: call frame info
 2  XUL!GetWidthInfo [BasicTableLayoutStrategy.cpp : 102 + 0xb]
    rbx = 0x00000000000001a4   r12 = 0x000000012a0edc10
    r13 = 0x0000000128afe818   r14 = 0x00000001516cfb30
    r15 = 0x00000000000001a4   rip = 0x0000000101d82c6e
    rsp = 0x00007fff5fbf8ad0   rbp = 0x00007fff5fbf8b60
    Found by: call frame info
 3  XUL!BasicTableLayoutStrategy::ComputeColumnIntrinsicWidths(nsRenderingContext*) [BasicTableLayoutStrategy.cpp : 250 + 0x13]
    rbx = 0x0000000000000002   r12 = 0x0000000128afd760
    r13 = 0x0000000000000000   r14 = 0x00000000000002ac
    r15 = 0x0000000000000000   rip = 0x0000000101d81734
    rsp = 0x00007fff5fbf8b70   rbp = 0x00007fff5fbf8ca0
    Found by: call frame info
 4  XUL!BasicTableLayoutStrategy::ComputeIntrinsicWidths(nsRenderingContext*) [BasicTableLayoutStrategy.cpp : 431 + 0x4]
    rbx = 0x00000001284a46b0   r12 = 0x0000000000000000
    r13 = 0x0000000000000000   r14 = 0x00000001516cfb30
    r15 = 0x00000000c0000000   rip = 0x0000000101d81019
    rsp = 0x00007fff5fbf8cb0   rbp = 0x00007fff5fbf8cf0
    Found by: call frame info
 5  XUL!BasicTableLayoutStrategy::GetMinWidth(nsRenderingContext*) [BasicTableLayoutStrategy.cpp : 43 + 0xa]
    rbx = 0x00000001284a46b0   r12 = 0x0000000000000000
    r13 = 0x0000000000000000   r14 = 0x00000001516cfb30
    r15 = 0x00000000c0000000   rip = 0x0000000101d80fe3
    rsp = 0x00007fff5fbf8d00   rbp = 0x00007fff5fbf8d40
    Found by: call frame info
 6  XUL!nsTableFrame::ComputeAutoSize(nsRenderingContext*, nsSize, int, nsSize, nsSize, nsSize, bool) [nsTableFrame.cpp : 1499 + 0xe]
    rbx = 0x000000000000ae24   r12 = 0x0000000000000000
    r13 = 0x0000000000000000   r14 = 0x00000001516cfb30
}

Comment 1

[Mats Palmgren (inactive)]

Attachment: The full crash stack for posterity

nsIFrame.h:1193 seems to be inside IsThemed():
http://hg.mozilla.org/mozilla-central/annotate/c8a1314aa449/layout/generic/nsIFrame.h#l1193
http://hg.mozilla.org/mozilla-central/annotate/c8a1314aa449/layout/generic/nsFrame.cpp#l3916
http://hg.mozilla.org/mozilla-central/annotate/c8a1314aa449/layout/tables/nsTableCellFrame.cpp#l744
but 'aTransparencyState' should be null in this case.

Comment 2

[Mats Palmgren (inactive)]

I wonder if it's related to crashes in ThemeSupportsWidget:
https://crash-stats.mozilla.com/query/query?range_value=4&range_unit=weeks&&query_search=signature&query_type=contains&query=ThemeSupportsWidget&reason=&do_query=1

Comment 3

[Ed Morley [:emorley]]

Resolving WFM keyword:intermittent-failure bugs last modified >3 months ago, whose whiteboard contains none of:
{random,disabled,marked,fuzzy,todo,fails,failing,annotated,time-bomb,leave open}

There will inevitably be some false positives; for that (and the bugspam) I apologise. Filter on orangewfm.