Saw this on Win32 2001-11-14-01 Trunk Steps to repro: 1) Login to Mail 2) Compose a new Message. 3) Add about 7 email addresses in the To fileds. 4) Scroll back and forth in the To fields, changing email addresses and changing To: to CC: or BCC: back and forth Actual results: I will typically crash after the To: fields all go blank.This caused me to lose the email I was editing. In one case, it was a new mail, and in another, it was an email in my draft folder. Talkback trace follows. Incident ID 38022396 Stack Signature 0x00000000 a0b11c31 Bug ID Trigger Time 2001-11-14 16:01:39 Email Address scalkins@netscape.com URL visited User Comments Editing a long To,CC, list, scrolling back and forth, I carsh Build ID 2001111410 Product ID MozillaTrunk Platform ID Win32 Trigger Reason Access violation Stack Trace 0x00000000 nsCSSFrameConstructor::FindFrameWithContent [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp, line 11057] nsCSSFrameConstructor::FindPrimaryFrameFor [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp, line 11208] StyleSetImpl::FindPrimaryFrameFor [d:\builds\seamonkey\mozilla\content\base\src\nsStyleSet.cpp, line 1532] FrameManager::GetPrimaryFrameFor [d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrameManager.cpp, line 597] nsCSSFrameConstructor::FindPrimaryFrameFor [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp, line 11182] StyleSetImpl::FindPrimaryFrameFor [d:\builds\seamonkey\mozilla\content\base\src\nsStyleSet.cpp, line 1532] FrameManager::GetPrimaryFrameFor [d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrameManager.cpp, line 597] nsCSSFrameConstructor::FindPrimaryFrameFor [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp, line 11182] StyleSetImpl::FindPrimaryFrameFor [d:\builds\seamonkey\mozilla\content\base\src\nsStyleSet.cpp, line 1532] FrameManager::GetPrimaryFrameFor [d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrameManager.cpp, line 597] nsCSSFrameConstructor::FindPrimaryFrameFor [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp, line 11182] StyleSetImpl::FindPrimaryFrameFor [d:\builds\seamonkey\mozilla\content\base\src\nsStyleSet.cpp, line 1532] FrameManager::GetPrimaryFrameFor [d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrameManager.cpp, line 597] PresShell::GetPrimaryFrameFor [d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5301] nsBoxObject::GetFrame [d:\builds\seamonkey\mozilla\layout\xul\base\src\nsBoxObject.cpp, line 152] nsOutlinerBoxObject::GetOutlinerBody [d:\builds\seamonkey\mozilla\layout\xul\base\src\outliner\src\nsOutlinerBoxObject.cpp, line 145] nsOutlinerBoxObject::GetOutlinerBody [d:\builds\seamonkey\mozilla\layout\xul\base\src\outliner\src\nsOutlinerBoxObject.cpp, line 216] nsOutlinerColFrame::InvalidateColumnCache [d:\builds\seamonkey\mozilla\layout\xul\base\src\outliner\src\nsOutlinerColFrame.cpp, line 228] nsOutlinerColFrame::Init [d:\builds\seamonkey\mozilla\layout\xul\base\src\outliner\src\nsOutlinerColFrame.cpp, line 111] nsCSSFrameConstructor::InitAndRestoreFrame [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp, line 6513] nsCSSFrameConstructor::ConstructXULFrame [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp, line 5620] nsCSSFrameConstructor::ConstructFrameInternal [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp, line 7042] nsCSSFrameConstructor::ConstructFrame [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp, line 6948] nsCSSFrameConstructor::ProcessChildren [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp, line 11569] nsCSSFrameConstructor::ConstructXULFrame [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp, line 5645] nsCSSFrameConstructor::ConstructFrameInternal [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp, line 7042] nsCSSFrameConstructor::ConstructFrame [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp, line 6948] nsCSSFrameConstructor::ProcessChildren [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp, line 11569] nsCSSFrameConstructor::ConstructXULFrame [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp, line 5645] nsCSSFrameConstructor::ConstructFrameInternal [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp, line 7042] nsCSSFrameConstructor::ConstructFrame [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp, line 6948] nsCSSFrameConstructor::ProcessChildren [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp, line 11569] nsCSSFrameConstructor::ConstructXULFrame [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp, line 5645] nsCSSFrameConstructor::ConstructFrameInternal [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp, line 7042] nsCSSFrameConstructor::ConstructFrame [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp, line 6948] nsCSSFrameConstructor::ProcessChildren [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp, line 11569] nsCSSFrameConstructor::ConstructXULFrame [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp, line 5645] nsCSSFrameConstructor::ConstructFrameInternal [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp, line 7042] nsCSSFrameConstructor::ConstructFrame [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp, line 6948] nsCSSFrameConstructor::ProcessChildren [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp, line 11569] nsCSSFrameConstructor::ConstructXULFrame [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp, line 5645] nsCSSFrameConstructor::ConstructFrameInternal [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp, line 7042] nsCSSFrameConstructor::ConstructFrame [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp, line 6948] nsCSSFrameConstructor::ProcessChildren [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp, line 11569] nsCSSFrameConstructor::ConstructXULFrame [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp, line 5645] nsCSSFrameConstructor::ConstructFrameInternal [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp, line 7042] nsCSSFrameConstructor::ConstructFrame [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp, line 6948] nsCSSFrameConstructor::ProcessChildren [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp, line 11569] nsCSSFrameConstructor::ConstructXULFrame [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp, line 5645] nsCSSFrameConstructor::ConstructFrameInternal [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp, line 7042] nsCSSFrameConstructor::ConstructFrameInternal [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp, line 7009] nsCSSFrameConstructor::ConstructFrame [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp, line 6948] nsCSSFrameConstructor::ProcessChildren [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp, line 11569] nsCSSFrameConstructor::ConstructXULFrame [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp, line 5645] nsCSSFrameConstructor::ConstructFrameInternal [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp, line 7042] nsCSSFrameConstructor::ConstructFrame [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp, line 6948] nsCSSFrameConstructor::ProcessChildren [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp, line 11569] nsCSSFrameConstructor::ConstructXULFrame [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp, line 5645] nsCSSFrameConstructor::ConstructFrameInternal [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp, line 7042] nsCSSFrameConstructor::CreateTreeWidgetContent [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp, line 12597] nsXULTreeGroupFrame::GetFirstTreeBox [d:\builds\seamonkey\mozilla\layout\xul\base\src\nsXULTreeGroupFrame.cpp, line 326] nsTreeLayout::LazyRowCreator [d:\builds\seamonkey\mozilla\layout\xul\base\src\nsTreeLayout.cpp, line 378] nsTreeLayout::LazyRowCreator [d:\builds\seamonkey\mozilla\layout\xul\base\src\nsTreeLayout.cpp, line 389]

--Varada

scalkins, did you have the "reuse compose window" pref turned on?

hwaraa: Where is this pref? I usually don't touch them at all for Mail or Compose. I tried a migrated profile and a new profile. In both cases I did not touch the prefs for compose or mail, so it would be whatever was the default for them. Same results in both cases for me.

I see this on RedHat Linux 7.2 (+ all updates), on two different machines - one with Mozilla 0.9.6 (from mozilla.org RH7 RPMs), another with Build ID 2001111600, 0.9.6 branch (from mozilla.org "nightly" RH7 RPMs). Steps to reproduce: 1) Open a mail composition window 2) Enter a bunch (more than what fits into the pane without scrolling) of "To" addresses. 3) Drag the address pane scrollbar up and down several times. Expected: nothing interesting Actual: after scrolling couple of times, Mozilla will always crash. GDB output (from the 2001111600-0.9.6 machine; the one from the 0.9.6 release looks very similar): Program received signal SIGSEGV, Segmentation fault. __strtol_internal (nptr=0x887e9c8 "

Similar crash when scrolling also reported in bug 110165, bug 111690, bug 110831 Crash when scrolling in filter editor bug 108922

My build ID: 2001112712 Reproducible: always I am in MailNews message compose window. In the message there is a long list of recipients (7 will do). Mozilla crashes while scrolling through the list - I just need to: 1. Click in one of the address fields (step required), 2. scroll down, 3. then scroll up and I get an instant crash. I can reproduce it on Linux and Windows 98. BTW, I'm using both IMAP and POP3 accounts. I get those crashes in all of them, so this isn't IMAP specific. Talkback IDs: Windows TB38618936Z TB38619337Z Linux TB38617494E TB38619134E

we should look into this soon. I see some outliner calls before the CSS code so cc'ign hyatt in case he has any ideas. We should find the right owner for this if it's not mail.

family is now bug 110165, bug 110831, bug 110886, bug 111695, bug 112627 and little baby bug 108922

I did some research to find out when this regressed and here's what I found: I use Linux trunk builds, from the package mozila-i686-pc-linux-gnu-sea.tar.gz. 2001-11-05-22 is the first build that has the problem (of the linux-gnu-sea line of builds). 2001-11-01-21 is the preceding build that seems to _not_ have this problem (try that build and confirm whether I'm right). There were no "mozila-i686-pc-linux-gnu-sea.tar.gz" packages between 2001-11-01-21 and 2001-11-05-22 (some problems with the building system, I suppose), so I couldn't track it down more accurately.

Adding topcrash keyword and Trunk & M096 [@ 0x00000000 - nsCSSFrameConstructor::FindFrameWithContent] to summary...since this is a topcrasher for Mozilla 0.9.6 and has also been reported to crash with recent MozillaTrunk builds. Here is some Talkback info from M096 crashes: Count Offset Real Signature [ 9 0x00000000 a0b11c31 - nsCSSFrameConstructor::FindFrameWithContent ] Crash date range: 2001-11-21 to 2001-11-28 Min/Max Seconds since last crash: 25 - 421113 Min/Max Runtime: 10519 - 561329 Keyword List : Count Platform List 8 Windows NT 5.0 build 2195 1 Windows NT 4.0 build 1381 Count Build Id List 9 2001112012 No of Unique Users 6 Stack trace(Frame) 0x00000000 nsCSSFrameConstructor::FindFrameWithContent [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp line 11057] nsCSSFrameConstructor::FindPrimaryFrameFor [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp line 11208] StyleSetImpl::FindPrimaryFrameFor [d:\builds\seamonkey\mozilla\content\base\src\nsStyleSet.cpp line 1518] FrameManager::GetPrimaryFrameFor [d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrameManager.cpp line 597] nsCSSFrameConstructor::FindPrimaryFrameFor [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp line 11182] StyleSetImpl::FindPrimaryFrameFor [d:\builds\seamonkey\mozilla\content\base\src\nsStyleSet.cpp line 1518] FrameManager::GetPrimaryFrameFor [d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrameManager.cpp line 597] nsCSSFrameConstructor::FindPrimaryFrameFor [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp line 11182] StyleSetImpl::FindPrimaryFrameFor [d:\builds\seamonkey\mozilla\content\base\src\nsStyleSet.cpp line 1518] FrameManager::GetPrimaryFrameFor [d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrameManager.cpp line 597] nsCSSFrameConstructor::FindPrimaryFrameFor [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp line 11182] StyleSetImpl::FindPrimaryFrameFor [d:\builds\seamonkey\mozilla\content\base\src\nsStyleSet.cpp line 1518] FrameManager::GetPrimaryFrameFor [d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrameManager.cpp line 597] PresShell::GetPrimaryFrameFor [d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp line 5301] nsBoxObject::GetFrame [d:\builds\seamonkey\mozilla\layout\xul\base\src\nsBoxObject.cpp line 152] nsOutlinerBoxObject::GetOutlinerBody [d:\builds\seamonkey\mozilla\layout\xul\base\src\outliner\src\nsOutlinerBoxObject.cpp line 145] nsOutlinerBoxObject::GetOutlinerBody [d:\builds\seamonkey\mozilla\layout\xul\base\src\outliner\src\nsOutlinerBoxObject.cpp line 216] nsOutlinerColFrame::InvalidateColumnCache [d:\builds\seamonkey\mozilla\layout\xul\base\src\outliner\src\nsOutlinerColFrame.cpp line 228] nsOutlinerColFrame::Init [d:\builds\seamonkey\mozilla\layout\xul\base\src\outliner\src\nsOutlinerColFrame.cpp line 111] nsCSSFrameConstructor::InitAndRestoreFrame [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp line 6513] nsCSSFrameConstructor::ConstructXULFrame [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp line 5620] nsCSSFrameConstructor::ConstructFrameInternal [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp line 7042] nsCSSFrameConstructor::ConstructFrame [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp line 6948] nsCSSFrameConstructor::ProcessChildren [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp line 11569] nsCSSFrameConstructor::ConstructXULFrame [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp line 5645] nsCSSFrameConstructor::ConstructFrameInternal [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp line 7042] nsCSSFrameConstructor::ConstructFrame [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp line 6948] nsCSSFrameConstructor::ProcessChildren [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp line 11569] nsCSSFrameConstructor::ConstructXULFrame [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp line 5645] nsCSSFrameConstructor::ConstructFrameInternal [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp line 7042] nsCSSFrameConstructor::ConstructFrame [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp line 6948] nsCSSFrameConstructor::ProcessChildren [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp line 11569] nsCSSFrameConstructor::ConstructXULFrame [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp line 5645] nsCSSFrameConstructor::ConstructFrameInternal [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp line 7042] nsCSSFrameConstructor::ConstructFrame [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp line 6948] nsCSSFrameConstructor::ProcessChildren [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp line 11569] nsCSSFrameConstructor::ConstructXULFrame [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp line 5645] nsCSSFrameConstructor::ConstructFrameInternal [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp line 7042] nsCSSFrameConstructor::ConstructFrame [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp line 6948] nsCSSFrameConstructor::ProcessChildren [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp line 11569] nsCSSFrameConstructor::ConstructXULFrame [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp line 5645] nsCSSFrameConstructor::ConstructFrameInternal [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp line 7042] nsCSSFrameConstructor::ConstructFrame [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp line 6948] nsCSSFrameConstructor::ProcessChildren [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp line 11569] nsCSSFrameConstructor::ConstructXULFrame [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp line 5645] nsCSSFrameConstructor::ConstructFrameInternal [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp line 7042] nsCSSFrameConstructor::ConstructFrame [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp line 6948] nsCSSFrameConstructor::ProcessChildren [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp line 11569] nsCSSFrameConstructor::ConstructXULFrame [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp line 5645] nsCSSFrameConstructor::ConstructFrameInternal [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp line 7042] nsCSSFrameConstructor::ConstructFrameInternal [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp line 7009] nsCSSFrameConstructor::ConstructFrame [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp line 6948] nsCSSFrameConstructor::ProcessChildren [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp line 11569] nsCSSFrameConstructor::ConstructXULFrame [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp line 5645] nsCSSFrameConstructor::ConstructFrameInternal [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp line 7042] nsCSSFrameConstructor::ConstructFrame [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp line 6948] nsCSSFrameConstructor::ProcessChildren [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp line 11569] nsCSSFrameConstructor::ConstructXULFrame [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp line 5645] nsCSSFrameConstructor::ConstructFrameInternal [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp line 7042] nsCSSFrameConstructor::CreateTreeWidgetContent [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp line 12597] nsXULTreeGroupFrame::GetFirstTreeBox [d:\builds\seamonkey\mozilla\layout\xul\base\src\nsXULTreeGroupFrame.cpp line 326] nsTreeLayout::LazyRowCreator [d:\builds\seamonkey\mozilla\layout\xul\base\src\nsTreeLayout.cpp line 378] nsTreeLayout::LazyRowCreator [d:\builds\seamonkey\mozilla\layout\xul\base\src\nsTreeLayout.cpp line 389] (38605643) Comments: was adding more than 5 people all at the same time to a list in my address book. address booked crashed and caused mozilla to crash (38366211) Comments: Scrolling up the recipients list in a compose window.Reproducible. (38366168) Comments: Scrolling up the recipients list in a compose window. (38346004) Comments: Taking a long time to compose an email message I believe this is a different crash than the one reported in Bug 111986, but the stack signatures are the same...so it might be worth taking a look there for any clues.

I also found these crashes in Mozilla 0.9.6 data...which I believe are the Linux version of this crash: [ 5 0x00000000 f95a6d0d - nsHTMLInputElement::SetValueSecure() ] Crash date range: 2001-11-26 to 2001-11-26 Min/Max Seconds since last crash: 24 - 41973 Min/Max Runtime: 41973 - 42374 Keyword List : Count Platform List 5 Linux 2.4.13-pre1 Count Build Id List 5 2001112012 No of Unique Users 1 Stack trace(Frame) 0x00000000 nsHTMLInputElement::SetValueSecure() nsHTMLInputElement::SetValue() nsHTMLInputElement::RestoreState() nsFormControlHelper::RestoreContentState() nsGfxTextControlFrame2::RestoreState() FrameManager::RestoreFrameStateFor() FrameManager::RestoreFrameState() nsCSSFrameConstructor::InitAndRestoreFrame() nsCSSFrameConstructor::ConstructFrameByTag() nsCSSFrameConstructor::ConstructFrameInternal() nsCSSFrameConstructor::ConstructFrame() nsCSSFrameConstructor::ProcessChildren() nsCSSFrameConstructor::ConstructXULFrame() nsCSSFrameConstructor::ConstructFrameInternal() nsCSSFrameConstructor::ConstructFrame() nsCSSFrameConstructor::ProcessChildren() nsCSSFrameConstructor::ConstructXULFrame() nsCSSFrameConstructor::ConstructFrameInternal() nsCSSFrameConstructor::ConstructFrame() nsCSSFrameConstructor::ProcessChildren() nsCSSFrameConstructor::ConstructXULFrame() nsCSSFrameConstructor::ConstructFrameInternal() nsCSSFrameConstructor::ConstructFrameInternal() nsCSSFrameConstructor::ConstructFrame() nsCSSFrameConstructor::ProcessChildren() nsCSSFrameConstructor::ConstructXULFrame() nsCSSFrameConstructor::ConstructFrameInternal() nsCSSFrameConstructor::ConstructFrame() nsCSSFrameConstructor::ProcessChildren() nsCSSFrameConstructor::ConstructXULFrame() nsCSSFrameConstructor::ConstructFrameInternal() nsCSSFrameConstructor::CreateTreeWidgetContent() nsXULTreeGroupFrame::GetFirstTreeBox() nsTreeLayout::LazyRowCreator() nsTreeLayout::LazyRowCreator() nsXULTreeOuterGroupFrame::ReflowFinished() PresShell::HandlePostedReflowCallbacks() PresShell::ProcessReflowCommands() PresShell::FlushPendingNotifications() nsXULTreeOuterGroupFrame::InternalPositionChanged() nsXULTreeOuterGroupFrame::PositionChanged() nsSliderFrame::SetCurrentPosition() nsSliderFrame::HandleEvent() PresShell::HandleEventInternal() PresShell::HandleEvent() nsView::HandleEvent() nsViewManager::DispatchEvent() HandleEvent() nsWidget::DispatchEvent() nsWidget::DispatchWindowEvent() nsWidget::DispatchMouseEvent() nsWidget::OnMotionNotifySignal() nsWindow::HandleGDKEvent() dispatch_superwin_event() handle_gdk_event() libgdk-1.2.so.0 + 0x17dd4 (0x40342dd4) libglib-1.2.so.0 + 0x10c46 (0x40374c46) libglib-1.2.so.0 + 0x11273 (0x40375273) libglib-1.2.so.0 + 0x1143c (0x4037543c) libgtk-1.2.so.0 + 0x9276c (0x4028d76c) nsAppShell::Run() nsAppShellService::Run() main1() main() libc.so.6 + 0x1d7ee (0x404c27ee) (38535309) Comments: Had address book open scrolled through the addresses in a address/receiver list and CRASH. Happens every time. Adding nsHTMLInputElement::SetValueSecure to summary for tracking.

I'm seeing this w/ today's win2k trunk build when I add a cc: recipient. I've submitted a talkback report or two on this today.

moving to blocker. I can't use the tip because of this.

Varada, you'd mentioned you were going to look into this or find another owner if necessary. Any progress?

On windows this was caused between builds 2001110103(10/31/01-11:10PM) and 2001110209(11/02/01-5:13AM). Still investigating the checkins.

Re-assigning to Hewitt who has a fix involving listbox which works in his debug build.

*** Bug 112627 has been marked as a duplicate of this bug. ***

*** Bug 114770 has been marked as a duplicate of this bug. ***

*** Bug 115604 has been marked as a duplicate of this bug. ***

*** Bug 119323 has been marked as a duplicate of this bug. ***

*** Bug 119931 has been marked as a duplicate of this bug. ***

This will be fixed when I land the tree -> listbox conversion for mail compose, which will happen in early 0.9.9

*** Bug 120832 has been marked as a duplicate of this bug. ***

I think this is the right dependency. If not, someone please set the right one. I'm also going to move keywords around. I can't use the trunk (it's been months) because of this.

this bug is killing me, it looks like a lot of other people too. any update on when the fix will land?

This is also a topcrash in Mozilla 0.9.7, Netscape 6.2.1 and Trunk builds. If you need more debug information let talkback-staff know. Updating the summary to reflect the release build information.

*** Bug 123541 has been marked as a duplicate of this bug. ***

*** Bug 123831 has been marked as a duplicate of this bug. ***

*** Bug 123885 has been marked as a duplicate of this bug. ***

So, the bad news is that the listbox conversion didn't fix this after all. It didn't seem to make the situation any better or worse. When I originally tested it out weeks ago I couldn't make it crash, but now I can. I'll have to work on this separately after I land the listbox changes.

*** Bug 124592 has been marked as a duplicate of this bug. ***

the stack in bug 119595 is identical to the one in comment 11, but happens when scrolling in AB.

*** Bug 119595 has been marked as a duplicate of this bug. ***

Joe, where are we at with this bug? Have you landed listbox so you can look at this again?

*** Bug 125494 has been marked as a duplicate of this bug. ***

*** Bug 125769 has been marked as a duplicate of this bug. ***

*** Bug 126002 has been marked as a duplicate of this bug. ***

Hewitt, any progress on this sucker? It's been crashing us all over for months now...

I've finally narrowed this one down. Frames weren't getting properly destroyed when they scroll out of view (in both listbox and tree), and GetPrimaryFrameFor was returning garbage frames, causing the crash. I'll post a patch shortly.

In the case where every visible row is scrolled out of view at once, we were previously destroying all the frames at once. Instead, I delete them one by one in the loop as they are removed from the frame map. With this change, I can't make the addressing widget crash for the life of me.

I just looked at this code and it looks fine to me, but, I don't know this area at all; who would be the right set of reviewers here?

marc, could you review this patch for me?

FWIW: Built with attachment 70243 [details] [diff] [review] on Linux: It's slow and there are some minor cosmetic glitches, but No More Crashes. In addition, it seems to cure bug 118815.

Updating summary with M098, since this is a topcrasher (probably #1) for Mozilla 0.9.8.

Comment on attachment 70243 [details] [diff] [review] patch r=dbaron, although I'd be happy if hyatt reviewed it too. I wonder, though, whether ClearChildren should be doing some of the work that's done in both these places.

fixed. woo

fixed, really!

*** Bug 126330 has been marked as a duplicate of this bug. ***

Looks OK with feb20 commercial trunk: win98, mac OS 10.1 and linux rh6.2 Noticed some problems with using the arrow widgets to scroll in compose window where it only moves two lines even when held down -- you must click it again to get another couple lines to scroll, but will log that as a separate bug. Slider works fine.

*** Bug 127167 has been marked as a duplicate of this bug. ***

*** Bug 107139 has been marked as a duplicate of this bug. ***

Since this bug is fixed, it probably does not depend on the still-open bug 110155. Removing that bug from this bug's dependency list.

I had Mozilla crash on me again when scrolling "Cc" field entries - see bug 142542. I have no idea if the two crashes are related or not.