stack trace: thebes.dll!gfxASurface::CairoSurface() Zeile 98 + 0x3 Bytes C++ thebes.dll!gfxPattern::gfxPattern(gfxASurface * surface=0x00000000) Zeile 59 + 0x8 Bytes C++ gkgfxthebes.dll!nsThebesImage::ThebesDrawTile(gfxContext * thebesContext=0x04f21b80, nsIDeviceContext * dx=0x04bb1a10, const gfxPoint & offset={...}, const gfxRect & targetRect={...}, const int xPadding=0, const int yPadding=0) Zeile 587 + 0x2e Bytes C++ gkgfxthebes.dll!nsThebesRenderingContext::DrawTile(imgIContainer * aImage=0x0515d498, int twXOffset=89040, int twYOffset=11100, const nsRect * twTargetRect=0x0012e6d8) Zeile 820 + 0x7d Bytes C++ gklayout.dll!nsCSSRendering::PaintBackgroundWithSC(nsPresContext * aPresContext=0x050018a8, nsIRenderingContext & aRenderingContext={...}, nsIFrame * aForFrame=0x0515bc04, const nsRect & aDirtyRect={...}, const nsRect & aBorderArea={...}, const nsStyleBackground & aColor={...}, const nsStyleBorder & aBorder={...}, const nsStylePadding & aPadding={...}, int aUsePrintSettings=1, nsRect * aBGClipRect=0x00000000) Zeile 3795 C++ gklayout.dll!nsCSSRendering::PaintBackground(nsPresContext * aPresContext=0x050018a8, nsIRenderingContext & aRenderingContext={...}, nsIFrame * aForFrame=0x0515bc04, const nsRect & aDirtyRect={...}, const nsRect & aBorderArea={...}, const nsStyleBorder & aBorder={...}, const nsStylePadding & aPadding={...}, int aUsePrintSettings=1, nsRect * aBGClipRect=0x00000000) Zeile 3292 + 0x2d Bytes C++ gklayout.dll!nsTableCellFrame::PaintBackground(nsIRenderingContext & aRenderingContext={...}, const nsRect & aDirtyRect={...}, nsPoint aPt={...}) Zeile 348 + 0x34 Bytes C++ gklayout.dll!nsDisplayTableCellBackground::Paint(nsDisplayListBuilder * aBuilder=0x0012e8ec, nsIRenderingContext * aCtx=0x0517dab0, const nsRect & aDirtyRect={...}) Zeile 387 C++ gklayout.dll!nsDisplayList::Paint(nsDisplayListBuilder * aBuilder=0x0012e8ec, nsIRenderingContext * aCtx=0x0517dab0, const nsRect & aDirtyRect={...}) Zeile 293 C++ gklayout.dll!nsDisplayWrapList::Paint(nsDisplayListBuilder * aBuilder=0x0012e8ec, nsIRenderingContext * aCtx=0x0517dab0, const nsRect & aDirtyRect={...}) Zeile 672 C++ gklayout.dll!nsDisplayClip::Paint(nsDisplayListBuilder * aBuilder=0x0012e8ec, nsIRenderingContext * aCtx=0x0517dab0, const nsRect & aDirtyRect={...}) Zeile 864 C++ gklayout.dll!nsDisplayList::Paint(nsDisplayListBuilder * aBuilder=0x0012e8ec, nsIRenderingContext * aCtx=0x0517dab0, const nsRect & aDirtyRect={...}) Zeile 293 C++ gklayout.dll!nsLayoutUtils::PaintFrame(nsIRenderingContext * aRenderingContext=0x0517dab0, nsIFrame * aFrame=0x04f57f6c, const nsRegion & aDirtyRegion={...}, unsigned int aBackground=4294967295) Zeile 853 C++ gklayout.dll!PresShell::Paint(nsIView * aView=0x04ffe418, nsIRenderingContext * aRenderingContext=0x0517dab0, const nsRegion & aDirtyRegion={...}) Zeile 5307 + 0x15 Bytes C++ gklayout.dll!nsViewManager::RenderViews(nsView * aView=0x05126b80, nsIRenderingContext & aRC={...}, const nsRegion & aRegion={...}) Zeile 605 C++ gklayout.dll!nsViewManager::Refresh(nsView * aView=0x05126b80, nsIRenderingContext * aContext=0x0517dab0, nsIRegion * aRegion=0x04c632d0, unsigned int aUpdateFlags=1) Zeile 495 C++ gklayout.dll!nsViewManager::DispatchEvent(nsGUIEvent * aEvent=0x0012ed40, nsEventStatus * aStatus=0x0012ebf4) Zeile 1069 C++ gklayout.dll!HandleEvent(nsGUIEvent * aEvent=0x0012ed40) Zeile 171 C++ gkwidget.dll!nsWindow::DispatchEvent(nsGUIEvent * event=0x0012ed40, nsEventStatus & aStatus=nsEventStatus_eIgnore) Zeile 1054 + 0xc Bytes C++ gkwidget.dll!nsWindow::DispatchWindowEvent(nsGUIEvent * event=0x0012ed40, nsEventStatus & aStatus=nsEventStatus_eIgnore) Zeile 1080 C++ gkwidget.dll!nsWindow::OnPaint(HDC__ * aDC=0x00000000) Zeile 5682 + 0x1e Bytes C++ gkwidget.dll!nsWindow::ProcessMessage(unsigned int msg=15, unsigned int wParam=0, long lParam=0, long * aRetValue=0x0012f1f4) Zeile 4163 + 0x15 Bytes C++ gkwidget.dll!nsWindow::WindowProc(HWND__ * hWnd=0x000208cc, unsigned int msg=15, unsigned int wParam=0, long lParam=0) Zeile 1271 + 0x1d Bytes C++ user32.dll!7e368734() [Unten angegebene Rahmen sind möglicherweise nicht korrekt und/oder fehlen, keine Symbole geladen für user32.dll] user32.dll!7e368816() user32.dll!7e36b4c0() user32.dll!7e36b50c() ntdll.dll!7c91eae3() user32.dll!7e36d83f() user32.dll!7e36d82a() gkwidget.dll!nsWindow::DispatchStarvedPaints(HWND__ * aWnd=0x000206da, long aMsg=0) Zeile 3967 + 0xa Bytes C++ user32.dll!7e36ccd1() user32.dll!7e36da57() gkwidget.dll!nsWindow::DispatchPendingEvents() Zeile 4004 C++ gkwidget.dll!nsWindow::ProcessMessage(unsigned int msg=512, unsigned int wParam=0, long lParam=31720319, long * aRetValue=0x0012f798) Zeile 4393 C++ gkwidget.dll!nsWindow::WindowProc(HWND__ * hWnd=0x000208cc, unsigned int msg=512, unsigned int wParam=0, long lParam=31720319) Zeile 1271 + 0x1d Bytes C++ user32.dll!7e368734() user32.dll!7e368816() user32.dll!7e3689cd() user32.dll!7e369402() user32.dll!7e368a10() gkwidget.dll!nsAppShell::ProcessNextNativeEvent(int mayWait=1) Zeile 149 C++ gkwidget.dll!nsBaseAppShell::DoProcessNextNativeEvent(int mayWait=1) Zeile 137 + 0x11 Bytes C++ gkwidget.dll!nsBaseAppShell::OnProcessNextEvent(nsIThreadInternal * thr=0x00bcd248, int mayWait=1, unsigned int recursionDepth=0) Zeile 247 + 0xf Bytes C++ xpcom_core.dll!nsThread::ProcessNextEvent(int mayWait=1, int * result=0x0012f990) Zeile 500 C++ xpcom_core.dll!NS_ProcessNextEvent_P(nsIThread * thread=0x00bcd248, int mayWait=1) Zeile 227 + 0x16 Bytes C++ gkwidget.dll!nsBaseAppShell::Run() Zeile 154 + 0xc Bytes C++ tkitcmps.dll!nsAppStartup::Run() Zeile 181 + 0x1c Bytes C++ xul.dll!XRE_main(int argc=3, char * * argv=0x00bc91f8, const nsXREAppData * aAppData=0x00bc95b8) Zeile 3149 + 0x25 Bytes C++ firefox.exe!main(int argc=3, char * * argv=0x00bc91f8) Zeile 153 + 0x12 Bytes C++ firefox.exe!__tmainCRTStartup() Zeile 597 + 0x19 Bytes C firefox.exe!mainCRTStartup() Zeile 414 C kernel32.dll!7c816fd7()

arghh I can't reproduce this anymore, I have seen this crash multiple times in the current nightly and could easily reproduce this once in the debug build to get the stack and now: WFM.

I can reproduce this with a current trunk build on WinXP. The stack trace seems to change often though and I get a different stack trace on every crash. One trick to make it crash here was to switch to another window with Alt-Tab and then switch back to the browser window again with Alt-Tab.

Based on comment 2, this sounds like random memory corruption...

I see similar "crashes in random ways" behavior on Mac.

Over to me to investigate

Best I can do here is bulletproof

BTW: I do not crash anymore with a current trunk build. But maybe others can still reproduce?

whoops, outdated patch.

Bulletproofing checked in; reopen if this shows up again.