Closed Bug 250061 Opened 20 years ago Closed 17 years ago

just crash while rendering the page [@ nsTextFrame::TextStyle::TextStyle() ]

Categories

(Core Graveyard :: GFX: Gtk, defect)

x86
Linux
defect
Not set
critical

Tracking

(Not tracked)

RESOLVED WORKSFORME

People

(Reporter: rodolfo, Assigned: blizzard)

References

()

Details

(Keywords: crash, Whiteboard: CLOSEME 07/01)

Crash Data

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7) Gecko/20040626 Firefox/0.9.1
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7) Gecko/20040626 Firefox/0.9.1

A dialog will pop up, just press OK and then the rendering continues, leading to
a crash.

The Incident ID is TB237902H

Reproducible: Always
Steps to Reproduce:
1. Open the page
2. Press the OK button when a dialog pops up
3. watch firefox vanishing before your eyes.

Actual Results:  
crash!

Expected Results:  
normal rendering
(In reply to comment #0)

> A dialog will pop up, just press OK and then the rendering continues, leading to
> a crash.

WFM, Mozilla 1.7/WinXP
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7) Gecko/20040616
Keywords: crash, stackwanted
callstack:

#0  0xffffe410 in ?? ()
#1  0xbfffc218 in ?? ()
#2  0x0000000b in ?? ()
#3  0x00006151 in ?? ()
#4  0x40171de3 in raise () from /lib/libpthread.so.0
#5  0x0878d402 in nsPrintSession::QueryInterface ()
#6  <signal handler called>
#7  0x08449865 in nsPRUint32Key::Clone ()
#8  0x084485a5 in nsPRUint32Key::Clone ()
#9  0x0843222f in nsPRUint32Key::Clone ()
#10 0x0842f17e in nsPRUint32Key::Clone ()
#11 0x0842ee55 in nsPRUint32Key::Clone ()
#12 0x0842ecd0 in nsPRUint32Key::Clone ()
#13 0x0843222f in nsPRUint32Key::Clone ()
#14 0x0841e0dc in nsPRUint32Key::Clone ()
#15 0x0841dfbd in nsPRUint32Key::Clone ()
#16 0x0841dd15 in nsPRUint32Key::Clone ()
#17 0x0841dc12 in nsPRUint32Key::Clone ()
#18 0x0841ca2b in nsPRUint32Key::Clone ()
#19 0x0841c6aa in nsPRUint32Key::Clone ()
#20 0x0841ae48 in nsPRUint32Key::Clone ()
#21 0x08421b11 in nsPRUint32Key::Clone ()
#22 0x0841d60f in nsPRUint32Key::Clone ()
#23 0x0841ca7f in nsPRUint32Key::Clone ()
#24 0x0841c6aa in nsPRUint32Key::Clone ()
#25 0x0841ae48 in nsPRUint32Key::Clone ()
#26 0x08421b11 in nsPRUint32Key::Clone ()
#27 0x0841d60f in nsPRUint32Key::Clone ()
#28 0x0841ca7f in nsPRUint32Key::Clone ()
#29 0x0841c6aa in nsPRUint32Key::Clone ()
#30 0x0841ae48 in nsPRUint32Key::Clone ()
#31 0x0842699b in nsPRUint32Key::Clone ()
#32 0x0842b06c in nsPRUint32Key::Clone ()
#33 0x0846978d in nsPRUint32Key::Clone ()
#34 0x084693a7 in nsPRUint32Key::Clone ()
#35 0x0827e589 in nsReadingIterator<unsigned short>::advance ()
#36 0x0827bd43 in nsReadingIterator<unsigned short>::advance ()
#37 0x0827e589 in nsReadingIterator<unsigned short>::advance ()
#38 0x082812f2 in nsReadingIterator<unsigned short>::advance ()
#39 0x0842699b in nsPRUint32Key::Clone ()
#40 0x08449df7 in nsPRUint32Key::Clone ()
#41 0x0823160e in nsReadingIterator<unsigned short>::advance ()
#42 0x0823aab2 in nsReadingIterator<unsigned short>::advance ()
#43 0x0823b5eb in nsReadingIterator<unsigned short>::advance ()
#44 0x400f2ed6 in PL_HandleEvent () from /opt/firefox-0.9.1/libxpcom.so
#45 0x400f2e2a in PL_ProcessPendingEvents ()
   from /opt/firefox-0.9.1/libxpcom.so
#46 0x400f4432 in nsEventQueueImpl::NotifyObservers ()
   from /opt/firefox-0.9.1/libxpcom.so
#47 0x0821ba28 in nsReadingIterator<unsigned short>::advance ()
#48 0x406023ff in g_io_unix_dispatch () from /usr/lib/libglib-2.0.so.0
#49 0x405d8687 in g_main_context_dispatch () from /usr/lib/libglib-2.0.so.0
#50 0x405da933 in g_main_context_iterate () from /usr/lib/libglib-2.0.so.0
#51 0x405dabea in g_main_loop_run () from /usr/lib/libglib-2.0.so.0
#52 0x402a02d4 in gtk_main () from /usr/lib/libgtk-x11-2.0.so.0
#53 0x0821bcd4 in nsReadingIterator<unsigned short>::advance ()
#54 0x085de085 in nsPRUint32Key::Clone ()
#55 0x08789796 in nsPrintSession::QueryInterface ()
#56 0x08073687 in ?? ()
#57 0x00000001 in ?? ()
#58 0xbffff5a4 in ?? ()
#59 0x087a63c0 in _IO_stdin_used ()
#60 0xbffff578 in ?? ()
#61 0x409ba4a7 in __libc_start_main () from /lib/libc.so.6
Previous frame identical to this frame (corrupt stack?)
Keywords: talkbackid
Oh man, this bug happens with me frequently. Last time it happened was with
http://ftp.gnu.org/gnu/automake/

The call stack is the same, so I presume is the same bug. Does anyone experience
this bug in a linux install??
Sorry, I forgot to add, the talkback incident ID of the last crash I've told
about is TB252156Q
Rodolfo: Due to a recent Talkback database upgrade aren't older incidents
available. Could I ask you again for TalkBack incident ID? I do apologize for
complication.
Keywords: talkbackid
Here's the new talkback id: TB320740M
TB320740M:
nsTextFrame::TextStyle::TextStyle()
nsTextFrame::Paint() 
[/builds/tinderbox/firefox-0.9.1/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsTextFrame.cpp,
line 1419]
nsContainerFrame::PaintChild() 
[/builds/tinderbox/firefox-0.9.1/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsContainerFrame.cpp,
line 132]
nsContainerFrame::PaintChildren() 
[/builds/tinderbox/firefox-0.9.1/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsContainerFrame.cpp,
line 683]
nsHTMLContainerFrame::PaintDecorationsAndChildren() 
[/builds/tinderbox/firefox-0.9.1/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsHTMLContainerFrame.cpp,
line 141]
nsInlineFrame::Paint() 
[/builds/tinderbox/firefox-0.9.1/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsInlineFrame.cpp,
line 337]
nsContainerFrame::PaintChild() 
[/builds/tinderbox/firefox-0.9.1/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsContainerFrame.cpp,
line 132]
nsContainerFrame::PaintChildren() 
[/builds/tinderbox/firefox-0.9.1/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsContainerFrame.cpp,
line 683]
nsHTMLContainerFrame::PaintDecorationsAndChildren() 
[/builds/tinderbox/firefox-0.9.1/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsHTMLContainerFrame.cpp,
line 141]
nsInlineFrame::Paint() 
[/builds/tinderbox/firefox-0.9.1/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsInlineFrame.cpp,
line 337]
nsContainerFrame::PaintChild() 
[/builds/tinderbox/firefox-0.9.1/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsContainerFrame.cpp,
line 132]
nsBlockFrame::PaintChildren() 
[/builds/tinderbox/firefox-0.9.1/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsBlockFrame.cpp,
line 5397]
nsHTMLContainerFrame::PaintDecorationsAndChildren() 
[/builds/tinderbox/firefox-0.9.1/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsHTMLContainerFrame.cpp,
line 141]
nsBlockFrame::Paint() 
[/builds/tinderbox/firefox-0.9.1/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsBlockFrame.cpp,
line 5292]
nsContainerFrame::PaintChild() 
[/builds/tinderbox/firefox-0.9.1/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsContainerFrame.cpp,
line 132]
...
-> Layout
Summary: just crash while rendering the page → just crash while rendering the page [@ nsTextFrame::TextStyle::TextStyle() ]
Assignee: general → nobody
Component: Browser-General → Layout
QA Contact: general → core.layout
Er... there is no dialog on that page.  I load the page, no dialog, nothing
happens, no crash.

How do I go about reproducing this bug again?
Sorry, but I forgot to correct this bug report. I made some mistakes and messed
things up a little. Forget comments up to #3. From there on, it's all about
http://ftp.gnu.org/gnu/automake/, and at least in firefox 0.9.1 running my linux
box, it crashes just by entering the page.
Sounds like a gtk2/xft bug (works fine for me).  Chances are, bogus font data...
worksforme with current trunk/CVS firefox built with gtk2/xft

Rodolfo: do you perhaps have some fonts (TTF) that are not world-readable?
Blocks: 251219
i got rid of all my ttf fonts by renaming the /usr/X11R6/lib/X11/fonts/TTF
directory to another thing, commented the corresponding line on
/etc/fonts/local.conf and restarted the computer. Now the fonts look ugly, but
firefox still crashes. Here is the talkback ID of this 'new' crash: TB347025Z
Depends on: 180309
Blocks: 262698
Assignee: nobody → blizzard
Status: UNCONFIRMED → NEW
Component: Layout → GFX: Gtk
Ever confirmed: true
QA Contact: core.layout → ian
Does this bug still occur in a recent trunk build?
http://ftp.mozilla.org/pub/mozilla.org/firefox/nightly/latest-trunk/
Whiteboard: CLOSEME 07/01
WFM using Firefox 2.0.0.6 on Fedora Core 7. Closing as such.

If you can still reproduce, please provide another Talkback ID (they clear out every month or two) and more information about your setup, but I'm almost certain this is caused by something in your configuration and not Firefox.
Status: NEW → RESOLVED
Closed: 17 years ago
Resolution: --- → WORKSFORME
Product: Core → Core Graveyard
Crash Signature: [@ nsTextFrame::TextStyle::TextStyle() ]
You need to log in before you can comment on or make changes to this bug.