921728 - crash [@ nsCSSCompressedDataBlock::PropertyAtIndex(unsigned int) const ]

Status: RESOLVED WORKSFORME

(Thunderbird :: General, defect)

Description

[Christian Riechers]

User Agent: Mozilla/5.0 (X11; Linux i686; rv:24.0) Gecko/20100101 Firefox/24.0 (Beta/Release)
Build ID: 20130910160258

Steps to reproduce:

Pressing the AppMenu Button.


Actual results:

Thunderbird crashed.
ID: bp-9e64c53f-8aab-4992-9bce-8a9202130928
Signature: nsCSSCompressedDataBlock::PropertyAtIndex(unsigned int) const
The crash isn't exactly reproducible. This was the first time this crash happened to me.

Comment 1

[Christian Riechers]

Using TB 24 on openSUSE Linux.

Comment 2

[Wayne Mery (:wsmwk)]

signature is rare only 4 thunderbird crashes in 12 weeks

Christian's bp-9e64c53f-8aab-4992-9bce-8a9202130928

0	libxul.so	nsCSSCompressedDataBlock::PropertyAtIndex(unsigned int) const	layout/style/nsCSSDataBlock.h
1	libxul.so	nsCSSCompressedDataBlock::MapRuleInfoInto(nsRuleData*) const	layout/style/nsCSSDataBlock.cpp
2	libxul.so	nsRuleNode::WalkRuleTree(nsStyleStructID, nsStyleContext*)	layout/style/nsRuleNode.cpp
3	libxul.so	nsStyleContext::DoGetStyleUserInterface(bool)	layout/style/nsStyleStructList.h
4	libxul.so	nsStyleContext::ApplyStyleFixups(bool)	layout/style/nsStyleStructList.h
5	libxul.so	NS_NewStyleContext(nsStyleContext*, nsIAtom*, nsCSSPseudoElements::Type, nsRuleNode*, bool)	layout/style/nsStyleContext.cpp
6	libxul.so	nsStyleSet::GetContext(nsStyleContext*, nsRuleNode*, nsRuleNode*, nsIAtom*, nsCSSPseudoElements::Type, mozilla::dom::Element*, unsigned int)	layout/style/nsStyleSet.cpp
7	libxul.so	nsStyleSet::ResolveStyleFor(mozilla::dom::Element*, nsStyleContext*, TreeMatchContext&)	layout/style/nsStyleSet.cpp
8	libxul.so	nsCSSFrameConstructor::ResolveStyleContext(nsStyleContext*, nsIContent*, nsFrameConstructorState*)	layout/base/nsCSSFrameConstructor.cpp
9	libxul.so	nsCSSFrameConstructor::ResolveStyleContext(nsIFrame*, nsIContent*, nsFrameConstructorState*)	layout/base/nsCSSFrameConstructor.cpp 

This example 

 nsCSSCompressedDataBlock::PropertyAtIndex 
bp-618ea0cc-57cd-4ff3-ba11-16c1b2130823
0	libxul.so	nsCSSCompressedDataBlock::PropertyAtIndex	layout/style/nsCSSDataBlock.h
1	libxul.so	nsCSSCompressedDataBlock::MapRuleInfoInto	layout/style/nsCSSDataBlock.cpp
2	libxul.so	nsRuleNode::WalkRuleTree	layout/style/nsRuleNode.cpp
3	libxul.so	nsRuleNode::GetStyleList	layout/style/nsStyleStructList.h 

ehsan@108463
135 nsCSSProperty PropertyAtIndex(uint32_t i) const {
nnethercote@93021
136 NS_ABORT_IF_FALSE(i < mNumProps, "property index out of range");
nnethercote@93021
137 nsCSSProperty prop = (nsCSSProperty)CompressedProperties()[i]; 


Perhaps an example of bug 484499

Comment 3

[Wayne Mery (:wsmwk)]

> The crash isn't exactly reproducible. This was the first time this crash happened to me.

Nothing on crash-stats in 16 weeks. Given the near zero volume of crashes on crash-stats I think not worth keeping open unless there are clear, reproducible steps.