985823 - crash in nsHtml5TreeOperation::Append(nsIContent*, nsIContent*, nsHtml5DocumentBuilder*)

Status: RESOLVED INCOMPLETE

(Core :: DOM: HTML Parser, defect)

Description

[(no longer active)]

This bug was filed from the Socorro interface and is 
report bp-666cd377-77da-40ce-b67e-562fb2140320.
=============================================================

Comment 1

[Carsten Book [:Tomcat]]

also confirmed - just crashed on bugzilla (was looking for my profile) with https://crash-stats.mozilla.com/report/index/6ff2c684-3c5e-4a55-809e-ca3d12140321

Comment 2

[Xidorn Quan [:xidorn] UTC+10]

This also appears in the Firefox 32 release, report bp-7c2ab90f-4285-4cf9-bdb2-c47352140909

Comment 3

[bugzilla]

Same crash with Mac10.9 and FF34. https://crash-stats.mozilla.com/report/index/7e54786c-ad71-4369-a75a-c22702141008

Comment 4

[BugBot [:suhaib / :marco/ :calixte]]

Crash volume for signature 'nsHtml5TreeOperation::Append':
 - nightly (version 51): 0 crashes from 2016-08-01.
 - aurora  (version 50): 0 crashes from 2016-08-01.
 - beta    (version 49): 19 crashes from 2016-08-02.
 - release (version 48): 33 crashes from 2016-07-25.
 - esr     (version 45): 13 crashes from 2016-05-02.

Crash volume on the last weeks (Week N is from 08-22 to 08-28):
            W. N-1  W. N-2  W. N-3
 - nightly       0       0       0
 - aurora        0       0       0
 - beta          4       5       4
 - release      14       7       5
 - esr           2       0       2

Affected platforms: Windows, Mac OS X

Crash rank on the last 7 days:
           Browser     Content   Plugin
 - nightly
 - aurora
 - beta    #2018
 - release #1270
 - esr     #5409

Comment 5

[Henri Sivonen (:hsivonen) (on vacation)]

Resolving as incomplete. The Android stacks look totally bogus.