This should probably be 3 bugs. But I wasn't sure. 2001121803 1. Use view/apply theme/classic(or modern) to switch your theme. 2. Notice that scrollbars are gone. 3. Click on screen to get focus (this is another existing bug I believe) 4. Hit ctrl-n to open new window. 5. Computer acts as if its opening a new window, but doesn't. 6. Switch back to the previus theme. 7. Crash (it will only crash if you try to open new window, if you don't get focus, and therefor it doesn't try, it won't crash) Talkback ID: TB679600X

Reporter: Please change the severity level to "critical". Thanks.

Svante are you seeing this also?

Bug 106596 is probably related. I just had a crash too as I switched themes. I had two mozilla windows open, which might be the triggering factor. Talkback ID: TB688252W

Confirming crash on Linux 2001121908 after changing themes forth and back several times with two windows and several tabs open, without going through steps 3-5. Talkback ID TB690014W. Please add "crash" keyword.

Ran into this using commercial: 2001-12-19-11-trunk/ on Nt 4.0 and 2001-12-19-08-trunk/ on linux 2.2. Though my steps to reproduce aren't the same as this bug or bug 106596 On linux build. the crash was just random. -Started browser in modern. -have messenger up or not -page was on default netscape page -switched to classic theme -switched back to modern -crash TB ID TB690669X, TB691616X On windows, I can reproduce it real easy: -Start browser in modern theme -enter url www.jeep.com -switch themes -crash TB690410W, TB690241Q In both windows/linux stack trace was the same even though steps to reproduce were diferent: sTemplateRule::GetContent [d:\builds\seamonkey\mozilla\content\xul\templates\src\nsTemplateRule.cpp, line 63] nsStyleContext::Destroy [d:\builds\seamonkey\mozilla\content\base\src\nsStyleContext.cpp, line 1292] nsStyleContext::Release [d:\builds\seamonkey\mozilla\content\base\src\nsStyleContext.cpp, line 191] nsStyleContext::~nsStyleContext [d:\builds\seamonkey\mozilla\content\base\src\nsStyleContext.cpp, line 182] nsStyleContext::`scalar deleting destructor' nsStyleContext::Destroy [d:\builds\seamonkey\mozilla\content\base\src\nsStyleContext.cpp, line 1296] nsStyleContext::Release [d:\builds\seamonkey\mozilla\content\base\src\nsStyleContext.cpp, line 191] nsStyleContext::~nsStyleContext [d:\builds\seamonkey\mozilla\content\base\src\nsStyleContext.cpp, line 182] nsStyleContext::`scalar deleting destructor' nsStyleContext::Destroy [d:\builds\seamonkey\mozilla\content\base\src\nsStyleContext.cpp, line 1296] nsStyleContext::Release [d:\builds\seamonkey\mozilla\content\base\src\nsStyleContext.cpp, line 191] nsStyleContext::~nsStyleContext [d:\builds\seamonkey\mozilla\content\base\src\nsStyleContext.cpp, line 182] nsStyleContext::`scalar deleting destructor' nsStyleContext::Destroy [d:\builds\seamonkey\mozilla\content\base\src\nsStyleContext.cpp, line 1296] nsStyleContext::Release [d:\builds\seamonkey\mozilla\content\base\src\nsStyleContext.cpp, line 191] nsFrame::~nsFrame [d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrame.cpp, line 289] nsFormFrame::~nsFormFrame [d:\builds\seamonkey\mozilla\layout\html\forms\src\nsFormFrame.cpp, line 153] nsFormFrame::`scalar deleting destructor' nsFrame::Destroy [d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrame.cpp, line 472] 0x01fdd010 docshell.dll + 0x10498 (0x60140498) nsWebShell::AddRef 0xd77ce924

I'm seeing this on WinME 2001121909. Switch themes causes a crash nearly every time. One time it crashed the whole OS (True it's WinME, but still). TB690381Z TB690191H

this looks like hyatt's thing. See also bug 116254

Well none of these things seem to be happening now with 2001122003 for windows? Anyone seeing crashes with these builds. Though I am seeing the URL bar mess up with themeswitching, I'll wait till tomorrows build and retest.

It's much better with 2001122003 on WinME. However I was still able to get crashes in GKLAYOUT.DLL. It seems to be related to some race condition like drawing while changing themes. For example, having a Chatzilla window open, or changing themes while a slow page is downloading seemed to make a crash more likely. For some reason, I didn't get a talkback window after the crashes.

johnlar, I don't see crashing anymore on today's commercial trunk build (2001-20- 04-trunk). Yes, the URL location bar and the toolbars in composer are messed up because of theme switching.

*** Bug 116254 has been marked as a duplicate of this bug. ***

> 2. Notice that scrollbars are gone. Just a quick note, this is bug 115943, now fixed.

*** Bug 116747 has been marked as a duplicate of this bug. ***

I can still repro at jeep.com on commercial builds: win 2001-12-26-06-trunk linux 2001-12-26-06-trunk mac 2001-12-26-04-trunk

easy way to reproduce (win98 2002010403) open http://www.priceline.com wait page to complete apply modern theme apply modern theme again crash see tb1275471z,tb1275277e,tb1275219h

The crash seen in comment #15 happens in Linux 2002010308 also, talkback TB1276924W. Should be OS=all.

Adding topcrash keyword and Trunk [@ nsTemplateRule::GetContent] to summary...this is a topcrasher with recent MozillaTrunk builds: nsTemplateRule::GetContent 41 BBID range: 1128050 - 1413047 Min/Max Seconds since last crash: 38 - 116602 Min/Max Runtime: 38 - 117549 Crash data range: 2002-01-01 to 2002-01-08 Build ID range: 2002010110 to 2002010810 Keyword List : theme(9), Stack Trace: nsTemplateRule::GetContent [d:\builds\seamonkey\mozilla\content\xul\templates\src\nsTemplateRule.cpp line 63] nsStyleContext::Destroy [d:\builds\seamonkey\mozilla\content\base\src\nsStyleContext.cpp line 1292] nsStyleContext::Release [d:\builds\seamonkey\mozilla\content\base\src\nsStyleContext.cpp line 191] nsStyleContext::~nsStyleContext [d:\builds\seamonkey\mozilla\content\base\src\nsStyleContext.cpp line 182] nsStyleContext::`scalar deleting destructor' nsStyleContext::Destroy [d:\builds\seamonkey\mozilla\content\base\src\nsStyleContext.cpp line 1296] nsStyleContext::Release [d:\builds\seamonkey\mozilla\content\base\src\nsStyleContext.cpp line 191] nsStyleContext::~nsStyleContext [d:\builds\seamonkey\mozilla\content\base\src\nsStyleContext.cpp line 182] nsStyleContext::`scalar deleting destructor' nsStyleContext::Destroy [d:\builds\seamonkey\mozilla\content\base\src\nsStyleContext.cpp line 1296] nsStyleContext::Release [d:\builds\seamonkey\mozilla\content\base\src\nsStyleContext.cpp line 191] nsStyleContext::~nsStyleContext [d:\builds\seamonkey\mozilla\content\base\src\nsStyleContext.cpp line 182] nsStyleContext::`scalar deleting destructor' nsStyleContext::Destroy [d:\builds\seamonkey\mozilla\content\base\src\nsStyleContext.cpp line 1296] nsStyleContext::Release [d:\builds\seamonkey\mozilla\content\base\src\nsStyleContext.cpp line 191] nsStyleContext::~nsStyleContext [d:\builds\seamonkey\mozilla\content\base\src\nsStyleContext.cpp line 182] nsStyleContext::`scalar deleting destructor' nsStyleContext::Destroy [d:\builds\seamonkey\mozilla\content\base\src\nsStyleContext.cpp line 1296] nsStyleContext::Release [d:\builds\seamonkey\mozilla\content\base\src\nsStyleContext.cpp line 191] FrameManager::ReResolveStyleContext [d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrameManager.cpp line 1795] FrameManager::ReResolveStyleContext [d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrameManager.cpp line 1926] FrameManager::ReResolveStyleContext [d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrameManager.cpp line 1725] FrameManager::ReResolveStyleContext [d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrameManager.cpp line 1926] FrameManager::ReResolveStyleContext [d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrameManager.cpp line 1926] FrameManager::ReResolveStyleContext [d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrameManager.cpp line 1926] FrameManager::ReResolveStyleContext [d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrameManager.cpp line 1926] FrameManager::ReResolveStyleContext [d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrameManager.cpp line 1926] FrameManager::ReResolveStyleContext [d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrameManager.cpp line 1725] FrameManager::ReResolveStyleContext [d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrameManager.cpp line 1926] FrameManager::ReResolveStyleContext [d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrameManager.cpp line 1926] FrameManager::ReResolveStyleContext [d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrameManager.cpp line 1926] FrameManager::ReResolveStyleContext [d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrameManager.cpp line 1926] FrameManager::ReResolveStyleContext [d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrameManager.cpp line 1926] FrameManager::ReResolveStyleContext [d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrameManager.cpp line 1725] FrameManager::ReResolveStyleContext [d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrameManager.cpp line 1926] FrameManager::ReResolveStyleContext [d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrameManager.cpp line 1926] FrameManager::ReResolveStyleContext [d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrameManager.cpp line 1926] FrameManager::ReResolveStyleContext [d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrameManager.cpp line 1926] FrameManager::ReResolveStyleContext [d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrameManager.cpp line 1926] FrameManager::ReResolveStyleContext [d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrameManager.cpp line 1926] FrameManager::ReResolveStyleContext [d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrameManager.cpp line 1926] FrameManager::ComputeStyleChangeFor [d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrameManager.cpp line 2187] PresShell::ReconstructStyleData [d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp line 5409] PresShell::StyleSheetRemoved [d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp line 5436] nsDocument::UpdateStyleSheets [d:\builds\seamonkey\mozilla\content\base\src\nsDocument.cpp line 1376] nsChromeRegistry::RefreshWindow [d:\builds\seamonkey\mozilla\rdf\chrome\src\nsChromeRegistry.cpp line 1334] nsChromeRegistry::RefreshWindow [d:\builds\seamonkey\mozilla\rdf\chrome\src\nsChromeRegistry.cpp line 1208] nsChromeRegistry::RefreshSkins [d:\builds\seamonkey\mozilla\rdf\chrome\src\nsChromeRegistry.cpp line 1161] XPTC_InvokeByIndex [d:\builds\seamonkey\mozilla\xpcom\reflect\xptcall\src\md\win32\xptcinvoke.cpp line 106] XPCWrappedNative::CallMethod [d:\builds\seamonkey\mozilla\js\src\xpconnect\src\xpcwrappednative.cpp line 2011] XPC_WN_CallMethod [d:\builds\seamonkey\mozilla\js\src\xpconnect\src\xpcwrappednativejsops.cpp line 1267] js_Invoke [d:\builds\seamonkey\mozilla\js\src\jsinterp.c line 834] js_Interpret [d:\builds\seamonkey\mozilla\js\src\jsinterp.c line 2799] js_Invoke [d:\builds\seamonkey\mozilla\js\src\jsinterp.c line 850] js_InternalInvoke [d:\builds\seamonkey\mozilla\js\src\jsinterp.c line 925] JS_CallFunctionValue [d:\builds\seamonkey\mozilla\js\src\jsapi.c line 3407] nsJSContext::CallEventHandler [d:\builds\seamonkey\mozilla\dom\src\base\nsJSEnvironment.cpp line 1014] nsJSEventListener::HandleEvent [d:\builds\seamonkey\mozilla\dom\src\events\nsJSEventListener.cpp line 182] nsEventListenerManager::HandleEventSubType [d:\builds\seamonkey\mozilla\content\events\src\nsEventListenerManager.cpp line 1206] nsEventListenerManager::HandleEvent [d:\builds\seamonkey\mozilla\content\events\src\nsEventListenerManager.cpp line 2198] nsXULElement::HandleDOMEvent [d:\builds\seamonkey\mozilla\content\xul\content\src\nsXULElement.cpp line 3449] nsXULElement::HandleDOMEvent [d:\builds\seamonkey\mozilla\content\xul\content\src\nsXULElement.cpp line 3468] nsXULElement::HandleDOMEvent [d:\builds\seamonkey\mozilla\content\xul\content\src\nsXULElement.cpp line 3468] nsXULElement::HandleDOMEvent [d:\builds\seamonkey\mozilla\content\xul\content\src\nsXULElement.cpp line 3468] Source File : http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/content/xul/templates/src/nsTemplateRule.cpp line : 63 (1413047) Comments: switching from modern to classic theme. originally loaded with LittleMozilla (1408780) URL: www.ebay.com (1408780) Comments: Changing Display settings under Windows XP. (1406407) Comments: Crash occured when switching the Windows theme (not the Mozilla skin) in Windows XP. (1403871) Comments: turbo on and selecting a different profile (1352992) URL: forums.somethingawful.com (1352992) Comments: I clicked on a link. (1352701) URL: www.arstechnica.com (1352701) Comments: Switched themes twice in rapid succession (1343642) URL: www.span.com (1343642) Comments: Closing a tab in the navigator then straight after that attempting to open the side bar by means of going to the left frame of the window to drag open the sidebar (1310672) URL: themes.org (1310672) Comments: clicked on the "mozilla" link to view themes for mozilla. moz crashed. (1310254) Comments: i entered the search term "computer" into the search sidebar and initiated the search using google. moz then crashed. (1275108) Comments: Changing theme (1270897) URL: www.law.indiana.edu/car (1270897) Comments: Messing with view/select theme- changed from modern to classic (to see WinXP theme)- opened preferences opened a few categories (to see outliner)- used view/theme/modern to switch back to modern theme.there was a long pause then moz crashed. (1218498) Comments: applying the LittleMozilla theme from Themes.org (1188663) Comments: theme switch crash bug 116038 (1143380) Comments: theme switch crash bug 116038

Seeing this same stack as comment #5 with a different signature, same theme changing leading to the crash. Adding the signature to the summary for tracking.

We have an internal crasher who is able to repro the stack with the nsRuleNode::GetPresContext signature on the 2002012309 build for Win2K. His steps are: - Current Skin - Modern - Changed Skin to Modern (same skin) - OK - Changed Skin to Modern (same skin) - OK - Changed Skin to Modern (same skin) - Crashed

I experienced a crash when I clicked the History tab, after switching from "LittleMozilla" to the Classic theme on release 0.9.8 for 32 bit Windows (Windows 98).

Ronald, can you give us a talkback incident ID? (Go to the 'components' directory in your M098 installation and click on 'talkback.exe'. You will get a list of your crash incident numbers.)

Crash with build 2002020405, using Mac OS 9.1. Steps to reproduce: Go to www1 (or www2, www3).nameplanet.com/mail open View - Apply Theme. Switch Theme twice and mozilla crashes. It doesn't matter from what theme you switch - all combinations causes Mozilla to crash. The crash above happend when I had Modern Theme choosed Classic, choosed Modern. Different error alert messages appear (type 1, type 3, type 10) with different crashes (Crash above resulted in alert box with error type 3).

Marking Platform, OS -> All based on comment 22.

This is a topcrasher for M098 and I have attached the most frequently reported stack traces and their relevant crash info. Almost all the comments mention switching themes, as we already know is the task leading to this crash.

I could reproduce this crash by switching themes on mac os 9.2, windows 98, and linux using this url only: http://www3.nameplanet.com/mail (commercial build: 2002-02-07-06-trunk). The talkback is currently down. Will provide stacktrace later. Steps to reproduce: 1. Type this url: http://www3.nameplanet.com/mail 2. Select View > Apply theme... Modern or classic. 3. Switch skins back and forth for sereral time, it crashes!

Patty's stacks from crashes on Windows 98, Linux and MacOS 9.2, from the above comment. (W2K crashes with the same steps.)

Tom, thanks for posting the stacktraces since the talkback was down yesterday.

Using today's build on linux rehat 6.2 (commercial build: 2002-02-08-08-trunk), I could reproduce the crash by switching themes on view > apply theme..modern or classic with this site http://home.netscape.com/ However,the stacktrace is quite different from stacktrace on additional comments #26 on linux build. Also, this url http://home.netscape.com does not crash on windows 98 (2002-02-08-07-trunk) and Mac os 9.2 (2002-02-08-08-trunk). Stacktrace on linux (2002-02-08-08-trunk): Incident ID: 2691812 Stack Trace 0x08ad5aed nsStyleContext::Destroy() nsStyleContext::Release() nsStyleContext::~nsStyleContext() nsStyleContext::Destroy() nsStyleContext::Release() nsFrame::~nsFrame() nsContainerFrame::~nsContainerFrame() nsBlockFrame::~nsBlockFrame() nsFormFrame::~nsFormFrame() nsFrame::Destroy() nsContainerFrame::Destroy() nsBlockFrame::Destroy() nsFrameList::DestroyFrames() nsContainerFrame::Destroy() nsTableFrame::Destroy() nsFrameList::DestroyFrames() nsContainerFrame::Destroy() nsTableOuterFrame::Destroy() nsLineBox::DeleteLineList() nsBlockFrame::Destroy() nsFrameList::DestroyFrames() nsContainerFrame::Destroy() nsFrameList::DestroyFrames() nsContainerFrame::Destroy() nsFrameList::DestroyFrames() nsContainerFrame::Destroy() nsFrameList::DestroyFrames() nsContainerFrame::Destroy() nsTableFrame::Destroy() nsFrameList::DestroyFrames() nsContainerFrame::Destroy() nsTableOuterFrame::Destroy() nsLineBox::DeleteLineList() nsBlockFrame::Destroy() nsFrameList::DestroyFrames() nsContainerFrame::Destroy() nsFrameList::DestroyFrames() nsContainerFrame::Destroy() nsFrameList::DestroyFrames() nsContainerFrame::Destroy() nsFrameList::DestroyFrames() nsContainerFrame::Destroy() nsTableFrame::Destroy() nsFrameList::DestroyFrames() nsContainerFrame::Destroy() nsTableOuterFrame::Destroy() nsLineBox::DeleteLineList() nsBlockFrame::Destroy() nsLineBox::DeleteLineList() nsBlockFrame::Destroy() nsFrameList::DestroyFrames() nsContainerFrame::Destroy() nsFrameList::DestroyFrames() nsContainerFrame::Destroy() nsBoxFrame::Destroy() nsFrameList::DestroyFrames() nsContainerFrame::Destroy() nsBoxFrame::Destroy() nsGfxScrollFrame::Destroy() nsFrameList::DestroyFrames() nsContainerFrame::Destroy() ViewportFrame::Destroy() FrameManager::Destroy() PresShell::Destroy() DocumentViewerImpl::Destroy() nsDocShell::Destroy() nsWebShell::Destroy() nsHTMLFrameInnerFrame::~nsHTMLFrameInnerFrame() nsFrame::Destroy() nsFrameList::DestroyFrames() nsContainerFrame::Destroy() nsFrameList::DestroyFrame() nsBoxFrame::RemoveFrame() FrameManager::RemoveFrame() nsCSSFrameConstructor::ContentRemoved() nsCSSFrameConstructor::RecreateFramesForContent() nsCSSFrameConstructor::ProcessRestyledFrames() PresShell::ReconstructStyleData() PresShell::StyleSheetRemoved() nsXULDocument::UpdateStyleSheets() nsChromeRegistry::RefreshWindow() nsChromeRegistry::RefreshSkins() XPTC_InvokeByIndex() XPCWrappedNative::CallMethod() XPC_WN_CallMethod() js_Invoke() js_Interpret() js_Invoke() js_InternalInvoke() JS_CallFunctionValue() nsJSContext::CallEventHandler() nsJSEventListener::HandleEvent() nsEventListenerManager::HandleEventSubType() nsEventListenerManager::HandleEvent() nsXULElement::HandleDOMEvent() nsXULElement::HandleDOMEvent() nsXULElement::HandleDOMEvent() nsXULElement::HandleDOMEvent() nsXULElement::HandleDOMEvent()

Hyatt / Patty, since this one seems reproducible and is showing up consistenly in Trunk and M098 data, could you please bump up the target to mozilla0.9.9 so it gets on the radar for the next release?

nominate nsbeta1 since this one seems reproducible.

nsbeta1+ per nav triage team

*** Bug 115874 has been marked as a duplicate of this bug. ***

Adding testcase keyword, since it seems that simply switching themes is crashing for everyone. I just reproduced it: Incident ID 3074492 Stack Signature nsTemplateRule::GetContent de2bff6e Trigger Time 2002-02-18 16:52:23 Email Address jpatel@netscape.com URL visited themes Build ID 2002021809 Product ID MozillaTrunk Platform Operating System Win32 Module Trigger Reason Access violation User Comments after switching themes back and forth successfully, i was trying to go from classic to modern and boom! Stack Trace nsTemplateRule::GetContent [d:\builds\seamonkey\mozilla\content\xul\templates\src\nsTemplateRule.cpp, line 63] nsStyleContext::Destroy [d:\builds\seamonkey\mozilla\content\base\src\nsStyleContext.cpp, line 1283] nsStyleContext::Release [d:\builds\seamonkey\mozilla\content\base\src\nsStyleContext.cpp, line 191] nsProperties::ReleaseValues [d:\builds\seamonkey\mozilla\xpcom\ds\nsProperties.cpp, line 70] PL_HashTableEnumerateEntries [../../../lib/ds/plhash.c, line 430] nsHashtable::Enumerate [d:\builds\seamonkey\mozilla\xpcom\ds\nsHashtable.cpp, line 362] nsSupportsHashtable::~nsSupportsHashtable [d:\builds\seamonkey\mozilla\xpcom\ds\nsHashtable.cpp, line 866] nsSupportsHashtable::`scalar deleting destructor' nsOutlinerBodyFrame::ClearStyleAndImageCaches [d:\builds\seamonkey\mozilla\layout\xul\base\src\outliner\src\nsOutlinerBodyFrame.cpp, line 3115] nsCOMPtr_base::assign_from_helper [d:\builds\seamonkey\mozilla\xpcom\glue\nsCOMPtr.cpp, line 81] FlushMiscWidgetInfo [d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5288] FlushMiscWidgetInfo [d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5288] FlushMiscWidgetInfo [d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5288] FlushMiscWidgetInfo [d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5288] FlushMiscWidgetInfo [d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5288] FlushMiscWidgetInfo [d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5288] FlushMiscWidgetInfo [d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5288] FlushMiscWidgetInfo [d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5288] FlushMiscWidgetInfo [d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5288] FlushMiscWidgetInfo [d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5288] FlushMiscWidgetInfo [d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5288] FlushMiscWidgetInfo [d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5288] FlushMiscWidgetInfo [d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5288] FlushMiscWidgetInfo [d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5288] PresShell::ReconstructStyleData [d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5327] PresShell::StyleSheetRemoved [d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5371] nsXULDocument::UpdateStyleSheets [d:\builds\seamonkey\mozilla\content\xul\document\src\nsXULDocument.cpp, line 1344] nsChromeRegistry::RefreshWindow [d:\builds\seamonkey\mozilla\rdf\chrome\src\nsChromeRegistry.cpp, line 1334] nsChromeRegistry::RefreshSkins [d:\builds\seamonkey\mozilla\rdf\chrome\src\nsChromeRegistry.cpp, line 1161] XPTC_InvokeByIndex [d:\builds\seamonkey\mozilla\xpcom\reflect\xptcall\src\md\win32\xptcinvoke.cpp, line 106] XPCWrappedNative::CallMethod [d:\builds\seamonkey\mozilla\js\src\xpconnect\src\xpcwrappednative.cpp, line 2000] XPC_WN_CallMethod [d:\builds\seamonkey\mozilla\js\src\xpconnect\src\xpcwrappednativejsops.cpp, line 1267] js_Invoke [d:\builds\seamonkey\mozilla\js\src\jsinterp.c, line 834] js_Interpret [d:\builds\seamonkey\mozilla\js\src\jsinterp.c, line 2803] js_Invoke [d:\builds\seamonkey\mozilla\js\src\jsinterp.c, line 850] js_InternalInvoke [d:\builds\seamonkey\mozilla\js\src\jsinterp.c, line 925] JS_CallFunctionValue [d:\builds\seamonkey\mozilla\js\src\jsapi.c, line 3417] nsJSContext::CallEventHandler [d:\builds\seamonkey\mozilla\dom\src\base\nsJSEnvironment.cpp, line 1019] nsJSEventListener::HandleEvent [d:\builds\seamonkey\mozilla\dom\src\events\nsJSEventListener.cpp, line 182] nsEventListenerManager::HandleEventSubType [d:\builds\seamonkey\mozilla\content\events\src\nsEventListenerManager.cpp, line 1218] nsEventListenerManager::HandleEvent [d:\builds\seamonkey\mozilla\content\events\src\nsEventListenerManager.cpp, line 2210] nsXULElement::HandleDOMEvent [d:\builds\seamonkey\mozilla\content\xul\content\src\nsXULElement.cpp, line 3383] nsXULElement::HandleDOMEvent [d:\builds\seamonkey\mozilla\content\xul\content\src\nsXULElement.cpp, line 3402] nsXULElement::HandleDOMEvent [d:\builds\seamonkey\mozilla\content\xul\content\src\nsXULElement.cpp, line 3402] nsXULElement::HandleDOMEvent [d:\builds\seamonkey\mozilla\content\xul\content\src\nsXULElement.cpp, line 3402] nsXULElement::HandleDOMEvent [d:\builds\seamonkey\mozilla\content\xul\content\src\nsXULElement.cpp, line 3402] PresShell::HandleDOMEventWithTarget [d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 6053] nsMenuFrame::Execute [d:\builds\seamonkey\mozilla\layout\xul\base\src\nsMenuFrame.cpp, line 1640] nsMenuFrame::HandleEvent [d:\builds\seamonkey\mozilla\layout\xul\base\src\nsMenuFrame.cpp, line 466] PresShell::HandleEventInternal [d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 6022] PresShell::HandleEvent [d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5928] nsViewManager::HandleEvent [d:\builds\seamonkey\mozilla\view\src\nsViewManager.cpp, line 2010] nsView::HandleEvent [d:\builds\seamonkey\mozilla\view\src\nsView.cpp, line 301] nsViewManager::DispatchEvent [d:\builds\seamonkey\mozilla\view\src\nsViewManager.cpp, line 1849] HandleEvent [d:\builds\seamonkey\mozilla\view\src\nsView.cpp, line 83] nsWindow::DispatchEvent [d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 858] nsWindow::DispatchWindowEvent [d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 875] nsWindow::DispatchMouseEvent [d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 4579] ChildWindow::DispatchMouseEvent [d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 4829] nsWindow::ProcessMessage [d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 3504] nsWindow::WindowProc [d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 1120] USER32.dll + 0x1820 (0x77e71820) I crashed once the first time I tried to switch from Modern to Classic (but the stack was different, that crash showed the nsRuleNode::WalkRuleTree stack signature, bug 121963). After relaunch, I was able to successfully switch themes about 3 times before I crashed going from Classic to Modern.

How about filing a separate bug for the crashes that go through nsOutlinerBodyFrame::ClearStyleAndImageCaches ? That seems like a new bug, although I don't know why it wasn't a problem before.

*** Bug 126817 has been marked as a duplicate of this bug. ***

Using the current build, it still crashs while switching themes with this url: http://home.netscape.com Strace Trace from Linux (commercial build: 2002-02-21-08-trunk) and incident ID: 3200485: (switch from classic to classic by selecting view > apply theme...classic) nsRuleNode::GetPresContext() nsStyleContext::Destroy() nsStyleContext::Release() nsSupportsHashtable::ReleaseElement() _hashEnumerate__FP11PLHashEntryiPv() PL_HashTableEnumerateEntries() nsHashtable::Enumerate() nsSupportsHashtable::~nsSupportsHashtable() nsOutlinerBodyFrame::ClearStyleAndImageCaches() FlushMiscWidgetInfo() FlushMiscWidgetInfo() FlushMiscWidgetInfo() FlushMiscWidgetInfo() FlushMiscWidgetInfo() FlushMiscWidgetInfo() FlushMiscWidgetInfo() FlushMiscWidgetInfo() FlushMiscWidgetInfo() FlushMiscWidgetInfo() FlushMiscWidgetInfo() FlushMiscWidgetInfo() FlushMiscWidgetInfo() FlushMiscWidgetInfo() FlushMiscWidgetInfo() PresShell::ReconstructStyleData() PresShell::StyleSheetRemoved() nsXULDocument::UpdateStyleSheets() nsChromeRegistry::RefreshWindow() nsChromeRegistry::RefreshSkins() XPTC_InvokeByIndex() XPCWrappedNative::CallMethod() XPC_WN_CallMethod() js_Invoke() js_Interpret() js_Invoke() js_InternalInvoke() JS_CallFunctionValue() nsJSContext::CallEventHandler() nsJSEventListener::HandleEvent() nsEventListenerManager::HandleEventSubType() nsEventListenerManager::HandleEvent() nsXULElement::HandleDOMEvent() nsXULElement::HandleDOMEvent() nsXULElement::HandleDOMEvent() nsXULElement::HandleDOMEvent() nsXULElement::HandleDOMEvent() PresShell::HandleDOMEventWithTarget() nsMenuFrame::Execute() nsMenuFrame::HandleEvent() PresShell::HandleEventInternal() PresShell::HandleEvent() nsViewManager::HandleEvent() nsView::HandleEvent() nsViewManager::DispatchEvent() HandleEvent() nsWidget::DispatchEvent() nsWidget::DispatchWindowEvent() nsWidget::DispatchMouseEvent() nsWidget::OnButtonReleaseSignal() nsWindow::HandleGDKEvent() dispatch_superwin_event() handle_gdk_event() libgdk-1.2.so.0 + 0x174db (0x403404db) libglib-1.2.so.0 + 0x10186 (0x40370186) libglib-1.2.so.0 + 0x10751 (0x40370751) libglib-1.2.so.0 + 0x108f1 (0x403708f1) libgtk-1.2.so.0 + 0x8c5b9 (0x402945b9) nsAppShell::Run() nsAppShellService::Run() netscape-bin + 0x7e89 (0x0804fe89) netscape-bin + 0x86d7 (0x080506d7) libc.so.6 + 0x189cb (0x404719cb) ---------------------------------------- Strace Trace from Mac OS 9.2 (commercial build: 2002-02-21-08-trunk) and incident ID: 3200424: (switch from classic to modern by selecting view > apply theme...modern) content.shlb + 0x2ea404 (0x3ce70b74) content.shlb + 0x266640 (0x3cdecdb0) content.shlb + 0x26434c (0x3cdeaabc) nsSupportsHashtable::ReleaseElement() [nsHashtable.cpp, line 859] _hashEnumerate() [nsHashtable.cpp, line 196] PL_HashTableEnumerateEntries() [plhash.c, line 429] nsHashtable::Enumerate() [nsHashtable.cpp, line 361] nsSupportsHashtable::~nsSupportsHashtable() [nsHashtable.cpp, line 865] layout.shlb + 0x1c11d4 (0x3c3bc204) layout.shlb + 0x23fac (0x3c21efdc) layout.shlb + 0x240c4 (0x3c21f0f4) layout.shlb + 0x240c4 (0x3c21f0f4) layout.shlb + 0x240c4 (0x3c21f0f4) layout.shlb + 0x240c4 (0x3c21f0f4) layout.shlb + 0x240b0 (0x3c21f0e0) layout.shlb + 0x240c4 (0x3c21f0f4) layout.shlb + 0x240c4 (0x3c21f0f4) -------------------------------------------- For Mac OS 10.1 (commercial build: 2002-02-21-08-trunk),it does not crash by switching themes from classic to modern, but it quits with this error: "The application Netscape has unexpectedly quit". --------------------------------------- Strace Trace from windows 98 (commercial build: 2002-02-20-09-trunk) and incident ID: 3165322: (switch from classic to modern by selecting view > apply theme...modern) nsTemplateRule::GetContent [d:\builds\seamonkey\mozilla\content\xul\templates\src\nsTemplateRule.cpp, line 63] nsStyleContext::Destroy [d:\builds\seamonkey\mozilla\content\base\src\nsStyleContext.cpp, line 1279] nsStyleContext::Release [d:\builds\seamonkey\mozilla\content\base\src\nsStyleContext.cpp, line 187] nsSupportsHashtable::ReleaseElement [d:\builds\seamonkey\mozilla\xpcom\ds\nsHashtable.cpp, line 860] PL_HashTableEnumerateEntries [../../../lib/ds/plhash.c, line 430] nsHashtable::Enumerate [d:\builds\seamonkey\mozilla\xpcom\ds\nsHashtable.cpp, line 362] nsSupportsHashtable::~nsSupportsHashtable [d:\builds\seamonkey\mozilla\xpcom\ds\nsHashtable.cpp, line 866] nsSupportsHashtable::`scalar deleting destructor' nsOutlinerStyleCache::Clear [d:\builds\seamonkey\mozilla\layout\xul\base\src\outliner\src\nsOutlinerBodyFrame.h, line 248] nsOutlinerBodyFrame::ClearStyleAndImageCaches [d:\builds\seamonkey\mozilla\layout\xul\base\src\outliner\src\nsOutlinerBodyFrame.cpp, line 3115] FlushMiscWidgetInfo [d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5256] FlushMiscWidgetInfo [d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5288] FlushMiscWidgetInfo [d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5288] FlushMiscWidgetInfo [d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5288] FlushMiscWidgetInfo [d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5288] FlushMiscWidgetInfo [d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5288] FlushMiscWidgetInfo [d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5288] FlushMiscWidgetInfo [d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5288] FlushMiscWidgetInfo [d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5288] FlushMiscWidgetInfo [d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5288] FlushMiscWidgetInfo [d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5288] FlushMiscWidgetInfo [d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5288] FlushMiscWidgetInfo [d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5288] FlushMiscWidgetInfo [d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5288] FlushMiscWidgetInfo [d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5288] PresShell::ReconstructStyleData [d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5327] PresShell::StyleSheetRemoved [d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5371] nsXULDocument::UpdateStyleSheets [d:\builds\seamonkey\mozilla\content\xul\document\src\nsXULDocument.cpp, line 1344] nsChromeRegistry::RefreshWindow [d:\builds\seamonkey\mozilla\rdf\chrome\src\nsChromeRegistry.cpp, line 1334] nsChromeRegistry::RefreshSkins [d:\builds\seamonkey\mozilla\rdf\chrome\src\nsChromeRegistry.cpp, line 1161] XPTC_InvokeByIndex [d:\builds\seamonkey\mozilla\xpcom\reflect\xptcall\src\md\win32\xptcinvoke.cpp, line 106] XPCWrappedNative::CallMethod [d:\builds\seamonkey\mozilla\js\src\xpconnect\src\xpcwrappednative.cpp, line 2000] XPC_WN_CallMethod [d:\builds\seamonkey\mozilla\js\src\xpconnect\src\xpcwrappednativejsops.cpp, line 1267] js_Invoke [d:\builds\seamonkey\mozilla\js\src\jsinterp.c, line 834] js_Interpret [d:\builds\seamonkey\mozilla\js\src\jsinterp.c, line 2803] js_Invoke [d:\builds\seamonkey\mozilla\js\src\jsinterp.c, line 850] js_InternalInvoke [d:\builds\seamonkey\mozilla\js\src\jsinterp.c, line 925] JS_CallFunctionValue [d:\builds\seamonkey\mozilla\js\src\jsapi.c, line 3417] nsJSContext::CallEventHandler [d:\builds\seamonkey\mozilla\dom\src\base\nsJSEnvironment.cpp, line 1019] nsJSEventListener::HandleEvent [d:\builds\seamonkey\mozilla\dom\src\events\nsJSEventListener.cpp, line 182] nsEventListenerManager::HandleEventSubType [d:\builds\seamonkey\mozilla\content\events\src\nsEventListenerManager.cpp, line 1218] nsEventListenerManager::HandleEvent [d:\builds\seamonkey\mozilla\content\events\src\nsEventListenerManager.cpp, line 2210] nsXULElement::HandleDOMEvent [d:\builds\seamonkey\mozilla\content\xul\content\src\nsXULElement.cpp, line 3402] nsXULElement::HandleDOMEvent [d:\builds\seamonkey\mozilla\content\xul\content\src\nsXULElement.cpp, line 3421] nsXULElement::HandleDOMEvent [d:\builds\seamonkey\mozilla\content\xul\content\src\nsXULElement.cpp, line 3421] nsXULElement::HandleDOMEvent [d:\builds\seamonkey\mozilla\content\xul\content\src\nsXULElement.cpp, line 3421] nsXULElement::HandleDOMEvent [d:\builds\seamonkey\mozilla\content\xul\content\src\nsXULElement.cpp, line 3421] PresShell::HandleDOMEventWithTarget [d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 6053] nsMenuFrame::Execute [d:\builds\seamonkey\mozilla\layout\xul\base\src\nsMenuFrame.cpp, line 1640] nsMenuFrame::HandleEvent [d:\builds\seamonkey\mozilla\layout\xul\base\src\nsMenuFrame.cpp, line 466] PresShell::HandleEventInternal [d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 6022] PresShell::HandleEvent [d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5928] nsViewManager::HandleEvent [d:\builds\seamonkey\mozilla\view\src\nsViewManager.cpp, line 2043] nsView::HandleEvent [d:\builds\seamonkey\mozilla\view\src\nsView.cpp, line 306] nsViewManager::DispatchEvent [d:\builds\seamonkey\mozilla\view\src\nsViewManager.cpp, line 1863] HandleEvent [d:\builds\seamonkey\mozilla\view\src\nsView.cpp, line 83] nsWindow::DispatchEvent [d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 860] nsWindow::DispatchWindowEvent [d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 877] nsWindow::DispatchMouseEvent [d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 4619] ChildWindow::DispatchMouseEvent [d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 4869] nsWindow::ProcessMessage [d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 3544] nsWindow::WindowProc [d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 1122] KERNEL32.DLL + 0x363b (0xbff7363b) KERNEL32.DLL + 0x24407 (0xbff94407)

I think the recent regression was between builds of 2002-02-17-11 and 2002-02-18-06, judging from talkback data.

*** Bug 126692 has been marked as a duplicate of this bug. ***

These may not be the same bug, but bug 127716 and bug 127726 relate to crashes after theme switches.

The Trunk has 134 entires for this crash under the 0xf98b5708 signature. Adding that to the summary to facilitate tracking.

If the Navigation toolbar is hidden, it won't crash. Maybe related to bug 120155

Takeyori Hara, I can NOT confirm that. It took me three theme switches to crash it a minute ago, and I had the navigation toolbar hidden.

Don't know if this is the same bug or not, but on 2002022703 I changed themes Modern to Classic (also works the other way), and noticed that some images from Modern had displayed in their place in Classic (e.g. bookmark toolbar, component bar). Then when I changed theme back again, Mozilla crashed. This could be a combination of 2 bugs. See the screenshot I'm about to attach.

Screenshot to go with comment 43. Notice where Mozilla has used the images from the Modern theme, even though the current theme is Classic. Changing theme after this state seems to cause a crash.

That's bug 115940

Renominating since restarting after a switch (127784) will fix this, and that seems to be how pretty much everyone reproduced this topcrash.

This clears the outliner style cache when the outlinerbodyframe gets a new style context. I'd really like hyatt's opinion as to whether this is the right thing to do. This probably will only get us back to the state where we were before Feb. 18.

Would we want to clear the outliner's image cache too?

Hrm. I think ClearStyleAndImageCaches(); is what is wanted, except that should already be happening due to the FlushMiscWidgetInfo in nsPresShell.cpp. Clearly it isn't...

This does all the correct cache clearing removes the corresponding code in nsPresShell and the glue needed for it.

*** Bug 123715 has been marked as a duplicate of this bug. ***

sr=hyatt

Comment on attachment 72667 [details] [diff] [review] better fix? r=bzbarsky

Comment on attachment 72667 [details] [diff] [review] better fix? a=shaver for 0.9.9 and 1.0 trunk. Marking sr=hyatt, too.

Comment on attachment 72667 [details] [diff] [review] better fix? I should have tested this patch better sooner. The |mScrollbar = nsnull| causes crashes sometimes because we don't reinitialize mScrollbar.

Comment on attachment 73010 [details] [diff] [review] fix that handles null mScrollbar properly sr=hyatt

Comment on attachment 73010 [details] [diff] [review] fix that handles null mScrollbar properly r=bzbarsky

Comment on attachment 73010 [details] [diff] [review] fix that handles null mScrollbar properly a=asa (on behalf of drivers) for checkin to the 0.9.9 branch and the 1.0 trunk

nsbeta1- per Nav triage team

Attachment 73010 [details] [diff] was checked in: * to the trunk, 2002-03-07 15:48 PST * to the MOZILLA_0_9_9_BRANCH, 2002-03-07 15:43 PST However, not marking bug as fixed since it's only the recent regression that's fixed (most likely, anyway). See comment 34.

no longer crashing from theme switch (actually was on exit post theme switch) looks good on commercial builds: windows 2002-03-08-05-trunk mac os9 2002-03-08-03-trunk mac osx 2002-03-08-03-trunk

->blake, hoping this will go away when we delay theme switch to next startup. Has anyone been able to reproduce this in any scenario? Has anyone filed bug for separate case mentioned in comment 34? qawanted.

dynamic theme switching is currently a 100% crasher (at least for me) due to bug 129827.

129827 was just backed out, if you want to update and test again.

I am unable to crash with current CVS. Mozilla displays a lot of assertions/errors/warnings/unhappy info, loses the scrollbars and disables Ctrl+n, but does not crash. I still see bug 124421 and bug 124205, but no crashing at the time of theme switching.

The crashes reported here have not appeared in Talkback data since 3/7. I was going to mark this worksforme, but then I saw dbaron's comment #61. dbaron: which regression(s) were you referring to? every stack signature mentioned in this bug is no longer found in talkback data, so you probably can mark this fixed (i think we have plenty of bugs open on other theme switching issues).

Making this topcrash+.

All three stack signatures noted in the summary are no longer showing up in Talkback data. As I mentioned earlier, these crashes last occurred with builds from 3/7 (the day of dbaron's checkin). Marking this fixed...please reopen if anyone finds a reason to keep this open.

I tried 10 theme switches while having this bugreport open in the browser and I didn't crash. Therefore marking VERIFIED with a CVS build from 2002-03-20-21 on Linux.