This crash started showing up with MozillaTrunk builds from 9/13 and has been on the topcrash radar for a few days. Most of the comments just mention trying to type a website into the URL bar. Here is the lastest from Talkback: Rank StackSignature Count 15 nsTreeBodyFrame::IsCellCropped 34 Source File : c:/builds/seamonkey/mozilla/layout/xul/base/src/tree/src/nsTreeBodyFrame.cpp line : 1624 ==================================================================================================== Count Offset Real Signature [ 9 nsTreeBodyFrame::IsCellCropped 6bcc5318 - nsTreeBodyFrame::IsCellCropped ] [ 5 nsTreeBodyFrame::IsCellCropped 078de920 - nsTreeBodyFrame::IsCellCropped ] [ 2 nsTreeBodyFrame::IsCellCropped 32bc0f98 - nsTreeBodyFrame::IsCellCropped ] [ 1 nsTreeBodyFrame::IsCellCropped f821cd07 - nsTreeBodyFrame::IsCellCropped ] Crash date range: 2002-09-13 to 2002-09-15 Min/Max Seconds since last crash: 5 - 43029 Min/Max Runtime: 11 - 43029 Keyword List : Count Platform List 14 Windows NT 5.1 build 2600 3 Windows 98 4.10 build 67766446 Count Build Id List 10 2002091508 3 2002091304 2 2002091408 1 2002091504 1 2002091309 No of Unique Users 10 Stack trace(Frame) nsTreeBodyFrame::IsCellCropped [c:/builds/seamonkey/mozilla/layout/xul/base/src/tree/src/nsTreeBodyFrame.cpp line 1624] nsTreeBoxObject::IsCellCropped [c:/builds/seamonkey/mozilla/layout/xul/base/src/tree/src/nsTreeBoxObject.cpp line 417] XPTC_InvokeByIndex [c:/builds/seamonkey/mozilla/xpcom/reflect/xptcall/src/md/win32/xptcinvoke.cpp line 106] XPCWrappedNative::CallMethod [c:/builds/seamonkey/mozilla/js/src/xpconnect/src/xpcwrappednative.cpp line 1996] XPC_WN_CallMethod [c:/builds/seamonkey/mozilla/js/src/xpconnect/src/xpcwrappednativejsops.cpp line 1267] js_Invoke [c:/builds/seamonkey/mozilla/js/src/jsinterp.c line 841] js_Interpret [c:/builds/seamonkey/mozilla/js/src/jsinterp.c line 2804] js_Invoke [c:/builds/seamonkey/mozilla/js/src/jsinterp.c line 857] nsXPCWrappedJSClass::CallMethod [c:/builds/seamonkey/mozilla/js/src/xpconnect/src/xpcwrappedjsclass.cpp line 1195] nsXPCWrappedJS::CallMethod [c:/builds/seamonkey/mozilla/js/src/xpconnect/src/xpcwrappedjs.cpp line 430] PrepareAndDispatch [c:/builds/seamonkey/mozilla/xpcom/reflect/xptcall/src/md/win32/xptcstubs.cpp line 117] SharedStub [c:/builds/seamonkey/mozilla/xpcom/reflect/xptcall/src/md/win32/xptcstubs.cpp line 139] nsGlobalHistory::OnStartLookup [c:/builds/seamonkey/mozilla/xpfe/components/history/src/nsGlobalHistory.cpp line 3980] XPTC_InvokeByIndex [c:/builds/seamonkey/mozilla/xpcom/reflect/xptcall/src/md/win32/xptcinvoke.cpp line 106] XPCWrappedNative::CallMethod [c:/builds/seamonkey/mozilla/js/src/xpconnect/src/xpcwrappednative.cpp line 1996] XPC_WN_CallMethod [c:/builds/seamonkey/mozilla/js/src/xpconnect/src/xpcwrappednativejsops.cpp line 1267] js_Invoke [c:/builds/seamonkey/mozilla/js/src/jsinterp.c line 841] js_Interpret [c:/builds/seamonkey/mozilla/js/src/jsinterp.c line 2804] js_Invoke [c:/builds/seamonkey/mozilla/js/src/jsinterp.c line 857] js_InternalInvoke [c:/builds/seamonkey/mozilla/js/src/jsinterp.c line 932] JS_CallFunctionValue [c:/builds/seamonkey/mozilla/js/src/jsapi.c line 3433] nsJSContext::CallEventHandler [c:/builds/seamonkey/mozilla/dom/src/base/nsJSEnvironment.cpp line 1044] GlobalWindowImpl::RunTimeout [c:/builds/seamonkey/mozilla/dom/src/base/nsGlobalWindow.cpp line 4605] GlobalWindowImpl::TimerCallback [c:/builds/seamonkey/mozilla/dom/src/base/nsGlobalWindow.cpp line 4952] nsTimerImpl::Fire [c:/builds/seamonkey/mozilla/xpcom/threads/nsTimerImpl.cpp line 368] USER32.dll + 0x6e60 (0x77d46e60) nsAppShellService::Run [c:/builds/seamonkey/mozilla/xpfe/appshell/src/nsAppShellService.cpp line 472] main1 [c:/builds/seamonkey/mozilla/xpfe/bootstrap/nsAppRunner.cpp line 1524] main [c:/builds/seamonkey/mozilla/xpfe/bootstrap/nsAppRunner.cpp line 1872] WinMain [c:/builds/seamonkey/mozilla/xpfe/bootstrap/nsAppRunner.cpp line 1892] WinMainCRTStartup() kernel32.dll + 0x1eb69 (0x77e7eb69) (10999287) URL: www.wjbpkg.com/wjbnew (10999287) Comments: Opening Mozilla (10998241) Comments: same thing as last time... going back to internet explorer.... (10998220) Comments: typing in address bar. I typed "cdnow" but only the c showed up and it crashed (10991554) URL: http://www.mozilla.org (10991554) Comments: I clicked on the text box where you enter the URL you want to go to and started in with the "www" portion of the web address I was going to. After the first w it crashed. (10991495) URL: http://www.slashdot.org (10991495) Comments: Just loaded the program. (10960995) URL: www.openoffice.org (10960995) Comments: typing another url in the location bar ==================================================================================================== Count Offset Real Signature [ 4 nsTreeBodyFrame::IsCellCropped 416c9095 - nsTreeBodyFrame::IsCellCropped ] [ 4 nsTreeBodyFrame::IsCellCropped 0cac17c5 - nsTreeBodyFrame::IsCellCropped ] [ 3 nsTreeBodyFrame::IsCellCropped e002f08c - nsTreeBodyFrame::IsCellCropped ] [ 3 nsTreeBodyFrame::IsCellCropped 5a449ded - nsTreeBodyFrame::IsCellCropped ] [ 2 nsTreeBodyFrame::IsCellCropped 8c591bc7 - nsTreeBodyFrame::IsCellCropped ] [ 1 nsTreeBodyFrame::IsCellCropped 0a6bb912 - nsTreeBodyFrame::IsCellCropped ] Crash date range: 2002-09-13 to 2002-09-16 Min/Max Seconds since last crash: 7 - 355 Min/Max Runtime: 9 - 380 Keyword List : Count Platform List 17 Windows NT 5.0 build 2195 Count Build Id List 8 2002091408 5 2002091508 4 2002091304 No of Unique Users 9 Stack trace(Frame) nsTreeBodyFrame::IsCellCropped [c:/builds/seamonkey/mozilla/layout/xul/base/src/tree/src/nsTreeBodyFrame.cpp line 1624] nsTreeBoxObject::IsCellCropped [c:/builds/seamonkey/mozilla/layout/xul/base/src/tree/src/nsTreeBoxObject.cpp line 417] XPTC_InvokeByIndex [c:/builds/seamonkey/mozilla/xpcom/reflect/xptcall/src/md/win32/xptcinvoke.cpp line 106] XPCWrappedNative::CallMethod [c:/builds/seamonkey/mozilla/js/src/xpconnect/src/xpcwrappednative.cpp line 1996] XPC_WN_CallMethod [c:/builds/seamonkey/mozilla/js/src/xpconnect/src/xpcwrappednativejsops.cpp line 1267] js_Invoke [c:/builds/seamonkey/mozilla/js/src/jsinterp.c line 841] js_Interpret [c:/builds/seamonkey/mozilla/js/src/jsinterp.c line 2804] js_Invoke [c:/builds/seamonkey/mozilla/js/src/jsinterp.c line 857] nsXPCWrappedJSClass::CallMethod [c:/builds/seamonkey/mozilla/js/src/xpconnect/src/xpcwrappedjsclass.cpp line 1195] nsXPCWrappedJS::CallMethod [c:/builds/seamonkey/mozilla/js/src/xpconnect/src/xpcwrappedjs.cpp line 430] PrepareAndDispatch [c:/builds/seamonkey/mozilla/xpcom/reflect/xptcall/src/md/win32/xptcstubs.cpp line 117] SharedStub [c:/builds/seamonkey/mozilla/xpcom/reflect/xptcall/src/md/win32/xptcstubs.cpp line 139] nsGlobalHistory::OnStartLookup [c:/builds/seamonkey/mozilla/xpfe/components/history/src/nsGlobalHistory.cpp line 3980] XPTC_InvokeByIndex [c:/builds/seamonkey/mozilla/xpcom/reflect/xptcall/src/md/win32/xptcinvoke.cpp line 106] XPCWrappedNative::CallMethod [c:/builds/seamonkey/mozilla/js/src/xpconnect/src/xpcwrappednative.cpp line 1996] XPC_WN_CallMethod [c:/builds/seamonkey/mozilla/js/src/xpconnect/src/xpcwrappednativejsops.cpp line 1267] js_Invoke [c:/builds/seamonkey/mozilla/js/src/jsinterp.c line 841] js_Interpret [c:/builds/seamonkey/mozilla/js/src/jsinterp.c line 2804] js_Invoke [c:/builds/seamonkey/mozilla/js/src/jsinterp.c line 857] js_InternalInvoke [c:/builds/seamonkey/mozilla/js/src/jsinterp.c line 932] JS_CallFunctionValue [c:/builds/seamonkey/mozilla/js/src/jsapi.c line 3433] nsJSContext::CallEventHandler [c:/builds/seamonkey/mozilla/dom/src/base/nsJSEnvironment.cpp line 1044] GlobalWindowImpl::RunTimeout [c:/builds/seamonkey/mozilla/dom/src/base/nsGlobalWindow.cpp line 4605] GlobalWindowImpl::TimerCallback [c:/builds/seamonkey/mozilla/dom/src/base/nsGlobalWindow.cpp line 4952] nsTimerImpl::Fire [c:/builds/seamonkey/mozilla/xpcom/threads/nsTimerImpl.cpp line 368] nsAppShell::Run [c:/builds/seamonkey/mozilla/widget/src/windows/nsAppShell.cpp line 156] nsAppShellService::Run [c:/builds/seamonkey/mozilla/xpfe/appshell/src/nsAppShellService.cpp line 472] main1 [c:/builds/seamonkey/mozilla/xpfe/bootstrap/nsAppRunner.cpp line 1524] main [c:/builds/seamonkey/mozilla/xpfe/bootstrap/nsAppRunner.cpp line 1872] WinMain [c:/builds/seamonkey/mozilla/xpfe/bootstrap/nsAppRunner.cpp line 1892] WinMainCRTStartup() KERNEL32.DLL + 0x1ca90 (0x77e9ca90) (11004846) Comments: Typing in a freaking URL! 1.2 is EXTREMELY unstable!! (10996448) URL: http://www.biodigest.com/index.shtml (10994642) URL: http://www.biodigest.com/index.shtml (10994204) URL: http://www.biodigest.com/index.shtml (10994204) Comments: Typing in location bar (10994184) URL: http://www.biodigest.com/index.shtml (10994184) Comments: Typing in location bar (10934055) URL: http://www.mozilla.org/start/ (10934055) Comments: clicked the address bar (10929610) Comments: Edited URL after having played with Ahead Find. Not much else. (10864440) URL: www.ebay.com (10864440) Comments: Mozilla began crashing this morning after any attempt to type anything into the Address Bar. Downloaded lastest build getting same results.

adding crash, topcrash keywords and qawanted to see if we can get this reproduced. some change on 9/13 definitely introduced a few regressions (see Bug 143824 also).

Based on bugzilla bug 169136 and bug 168953 (which also have the nsTreeBodyFrame::IsCellCropped signature) I suspect this bug relates to installing over existing installations and is INVALID.

yeah, a pave over installation might be the cause...but why did these start suddently on 9/13? those same users probably have been installing nightly builds over their existing installations for a while. something might have changed to introduce these new stack signatures.

Stacks for this behavior are also showing up with the nsTreeBodyFrame::GetCellAt signature. cc'ing karnaze. Chris, I'm suspecting that these stacks are bogus. Would you please take a look and comment. Thanks.

-> kmcclusk for some love.

Reproducible : Step 1 : Install Mozilla 1.0.1 using Installer. Step 2 : Exit Browser completely. DO NOT enable Quick Launch. Step 3 : Installed nightly build over the existing Mozilla 1.0.1 installation. Step 4 : Start the Browser Again. Step 5 : Startup screen comes up(after profile selection). But, looks like hung since the dialog boxes where hidden. Step 6 : Try typing URL text in the location bar. Before entering couple of characters browser will crash. It may be worth changing the keywords to topcrash+ and testcase. My guess is component.reg may be completely messed up. Incident ID 11219925 Stack Signature nsTreeBodyFrame::GetCellAt cc4b39cd Email Address namachi@netscape.com Product ID MozillaTrunk Build ID 2002091908 Trigger Time 2002-09-19 14:32:40 Platform Win32 Operating System Windows 98 4.10 build 67766446 Module GKLAYOUT.DLL URL visited typing the URL User Comments Install Mozilla 1.0.1 using Installer Exit Browser completely. Installed nightly build over the existing Mozilla 1.0.1 installation. Got few configuration errors dialog boxes. Looked like hung. Since the dialog boxes where hidden. Tried typing URL text in the location bar. Before entering one character browser crashed. Trigger Reason Access violation Source File Name c:/builds/seamonkey/mozilla/layout/xul/base/src/tree/src/nsTreeBodyFrame.cpp Trigger Line No. 1168 Stack Trace nsTreeBodyFrame::GetCellAt [c:/builds/seamonkey/mozilla/layout/xul/base/src/tree/src/nsTreeBodyFrame.cpp, line 1168] nsTreeBoxObject::GetCellAt [c:/builds/seamonkey/mozilla/layout/xul/base/src/tree/src/nsTreeBoxObject.cpp, line 398] XPTC_InvokeByIndex [c:/builds/seamonkey/mozilla/xpcom/reflect/xptcall/src/md/win32/xptcinvoke.cpp, line 106] XPCWrappedNative::CallMethod [c:/builds/seamonkey/mozilla/js/src/xpconnect/src/xpcwrappednative.cpp, line 1996] XPC_WN_CallMethod [c:/builds/seamonkey/mozilla/js/src/xpconnect/src/xpcwrappednativejsops.cpp, line 1267] js_Invoke [c:/builds/seamonkey/mozilla/js/src/jsinterp.c, line 841] js_Interpret [c:/builds/seamonkey/mozilla/js/src/jsinterp.c, line 2804] js_Invoke [c:/builds/seamonkey/mozilla/js/src/jsinterp.c, line 857] nsXPCWrappedJSClass::CallMethod [c:/builds/seamonkey/mozilla/js/src/xpconnect/src/xpcwrappedjsclass.cpp, line 1195] nsXPCWrappedJS::CallMethod [c:/builds/seamonkey/mozilla/js/src/xpconnect/src/xpcwrappedjs.cpp, line 430] PrepareAndDispatch [c:/builds/seamonkey/mozilla/xpcom/reflect/xptcall/src/md/win32/xptcstubs.cpp, line 117] SharedStub [c:/builds/seamonkey/mozilla/xpcom/reflect/xptcall/src/md/win32/xptcstubs.cpp, line 139] nsGlobalHistory::OnStartLookup [c:/builds/seamonkey/mozilla/xpfe/components/history/src/nsGlobalHistory.cpp, line 3980] XPTC_InvokeByIndex [c:/builds/seamonkey/mozilla/xpcom/reflect/xptcall/src/md/win32/xptcinvoke.cpp, line 106] XPCWrappedNative::CallMethod [c:/builds/seamonkey/mozilla/js/src/xpconnect/src/xpcwrappednative.cpp, line 1996] XPC_WN_CallMethod [c:/builds/seamonkey/mozilla/js/src/xpconnect/src/xpcwrappednativejsops.cpp, line 1267] js_Invoke [c:/builds/seamonkey/mozilla/js/src/jsinterp.c, line 841] js_Interpret [c:/builds/seamonkey/mozilla/js/src/jsinterp.c, line 2804] js_Invoke [c:/builds/seamonkey/mozilla/js/src/jsinterp.c, line 857] js_InternalInvoke [c:/builds/seamonkey/mozilla/js/src/jsinterp.c, line 932] JS_CallFunctionValue [c:/builds/seamonkey/mozilla/js/src/jsapi.c, line 3433] nsJSContext::CallEventHandler [c:/builds/seamonkey/mozilla/dom/src/base/nsJSEnvironment.cpp, line 1044] GlobalWindowImpl::RunTimeout [c:/builds/seamonkey/mozilla/dom/src/base/nsGlobalWindow.cpp, line 4605] GlobalWindowImpl::TimerCallback [c:/builds/seamonkey/mozilla/dom/src/base/nsGlobalWindow.cpp, line 4952] nsTimerImpl::Fire [c:/builds/seamonkey/mozilla/xpcom/threads/nsTimerImpl.cpp, line 368] USER32.DLL + 0x580d (0xbfc0580d) nsAppShellService::Run [c:/builds/seamonkey/mozilla/xpfe/appshell/src/nsAppShellService.cpp, line 472] main1 [c:/builds/seamonkey/mozilla/xpfe/bootstrap/nsAppRunner.cpp, line 1524] main [c:/builds/seamonkey/mozilla/xpfe/bootstrap/nsAppRunner.cpp, line 1872] WinMain [c:/builds/seamonkey/mozilla/xpfe/bootstrap/nsAppRunner.cpp, line 1892] WinMainCRTStartup() KERNEL32.DLL + 0x1b560 (0xbff8b560) KERNEL32.DLL + 0x1b412 (0xbff8b412) KERNEL32.DLL + 0x19dd5 (0xbff89dd5)

->trees

*** Bug 169875 has been marked as a duplicate of this bug. ***

I see this crash occuring before 9/13. Back on 8/14 getRowAt was added. isCellCropped is after getRowAt in the IDL so I'm pretty sure this is caused by this interface change. *** This bug has been marked as a duplicate of 143824 ***

I see this crash occuring before 9/13. Back on 8/14 getRowAt was added. isCellCropped is after getRowAt in the IDL so I'm pretty sure this is caused by this interface change.

Sorry, I didn't mean to dupe this.

*** Bug 173138 has been marked as a duplicate of this bug. ***

This went away as a topcrash as soon as we fixed the stale xpt file problem (bug 172586), so I think this is probably a dup of that. *** This bug has been marked as a duplicate of 172586 ***

mass duplicate verifications . For filtering purposes, pls use keywd "massdupverification"