See upcoming testcase, which crashes current trunk builds, when following the steps to reproduce. Talkback ID: TB26838097Z nsThebesDeviceContext::EndDocument [mozilla\gfx\src\thebes\nsthebesdevicecontext.cpp, line 616] nsPrintEngine::Destroy [mozilla\layout\printing\nsprintengine.cpp, line 270] nsPrintCompletionEvent::Run [mozilla\layout\printing\nsprintengine.cpp, line 3714] NS_ProcessNextEvent_P [mozilla\xpcom\build\nsthreadutils.cpp, line 225] nsBaseAppShell::Run [mozilla\widget\src\xpwidgets\nsbaseappshell.cpp, line 153] 0x01212ae4 0xccccc3c0

To reproduce the crash: - Click on the button in the testcase, to open the popup window, it automatically opens the print dialog - From the print dialog, choose to print to the Fax service, press OK Result: Crash Note, you need to have the option to open new pages in new windows set.

Is this a dup of bug 362476?

Hmm, yes, could be, I'll try with a 2006-12-04 build to see if it still crashes, if it doesn't crash, then I guess it's a duplicate.

I just tried with a 2006-12-04 build, but I still crash. I don't get a useful talkback stack, though.

testcase doest not crash on Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9a1) Gecko/20061204 Minefield/3.0a1 ID:2006120418 [cairo]

I still crash, using: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9a1) Gecko/20061205 Minefield/3.0a1 However, I get a different backtrace, now: Talkback ID: TB26921916Y 0x000d0804 _moz_cairo_surface_finish [mozilla\gfx\cairo\cairo\src\cairo-surface.c, line 490] nsPrintEngine::Destroy [mozilla\layout\printing\nsprintengine.cpp, line 270] nsPrintCompletionEvent::Run [mozilla\layout\printing\nsprintengine.cpp, line 3714] NS_ProcessNextEvent_P [mozilla\xpcom\build\nsthreadutils.cpp, line 225] nsBaseAppShell::Run [mozilla\widget\src\xpwidgets\nsbaseappshell.cpp, line 153] 0x01212ae4 0xccccc3c0

Doesn't crash on i386-apple-darwin8.8.1 (Intel Mac) either.

I still crash, using: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9a2pre) Gecko/20070131 Minefield/3.0a2pre But I don't get this stack trace anymore, I only get garbage as stack trace.

Still crashing, using: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9a5pre) Gecko/20070512 Minefield/3.0a5pre I get the stacktrace as in comment 0 again.

Actually, I crash with the testcase in a branch build too. Reassigning to printing.

no crash on Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9a9pre) Gecko/2007092605 Minefield/3.0a9pre ID:2007092605 Martijn do you still see this crash ?

Yes, still crashing, using: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9a9pre) Gecko/2007092605 Minefield/3.0a9pre http://crash-stats.mozilla.com/report/index/f2a92ee1-6d11-11dc-96d6-001a4bd43ed6 0 nsThebesDeviceContext::EndDocument() mozilla/gfx/src/thebes/nsThebesDeviceContext.cpp:546 1 nsPrintData::~nsPrintData() mozilla/layout/printing/nsPrintData.cpp:114 2 nsPrintEngine::Destroy() mozilla/layout/printing/nsPrintEngine.cpp:253 3 DocumentViewerImpl::OnDonePrinting() mozilla/layout/base/nsDocumentViewer.cpp:3991 4 nsPrintCompletionEvent::Run() mozilla/layout/printing/nsPrintEngine.cpp:3113 5 nsThread::ProcessNextEvent(int, int*) mozilla/xpcom/threads/nsThread.cpp:490 6 NS_ProcessNextEvent_P(nsIThread*, int) nsThreadUtils.cpp:227 7 nsBaseAppShell::Run() mozilla/widget/src/xpwidgets/nsBaseAppShell.cpp:154 8 nsAppStartup::Run() mozilla/toolkit/components/startup/src/nsAppStartup.cpp:170 9 XRE_main mozilla/toolkit/xre/nsAppRunner.cpp:3114 10 main mozilla/browser/app/nsBrowserApp.cpp:153 11 WinMain mozilla/browser/app/nsBrowserApp.cpp:166 12 __tmainCRTStartup crtexe.c:589 13 BaseProcessStart

There's a crash that looks very similar to this -- bug 301560? Basically someone familiar with the print engine stuff is going to need to look at the shutdown order here.

Hmm, I just attached a patch in bug 396024 that actually seems to fix this.

I can't reproduce this. i agree with vlad that this looks like a dup of 301560