Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.2a1pre) Gecko/20090208 Minefield/3.2a1pre ID:20090208020444 I noticed this crash while testing attachment 346395 [details] (bug 460012). It crashed after loading the testcase and when trying to open/switch a tab. Builds before 12/15/08 crashes immediately while loading the attachment. Crash report: bp-ab1dc052-6542-4d9d-8a5f-8ec4a2090208 0 XUL nsCSSRendering::PaintBackgroundWithSC mozilla/layout/base/nsCSSRendering.cpp:103 1 XUL nsCSSRendering::PaintBackground mozilla/layout/base/nsCSSRendering.cpp:3343 2 XUL nsDisplayBackground::Paint mozilla/layout/base/nsDisplayList.cpp:545 3 XUL nsDisplayList::Paint const mozilla/layout/base/nsDisplayList.cpp:296 4 XUL nsDisplayClip::Paint mozilla/layout/base/nsDisplayList.cpp:887 5 XUL nsDisplayList::Paint const mozilla/layout/base/nsDisplayList.cpp:296 6 XUL nsLayoutUtils::PaintFrame mozilla/layout/base/nsLayoutUtils.cpp:988 7 XUL PresShell::Paint mozilla/layout/base/nsPresShell.cpp:5421 8 XUL nsViewManager::RenderViews mozilla/view/src/nsViewManager.cpp:614 9 XUL nsViewManager::Refresh mozilla/view/src/nsViewManager.cpp:502 10 XUL nsViewManager::DispatchEvent mozilla/view/src/nsViewManager.cpp:1134 11 XUL HandleEvent mozilla/view/src/nsView.cpp:168 12 XUL nsChildView::DispatchEvent mozilla/widget/src/cocoa/nsChildView.mm:1718 13 XUL nsChildView::DispatchWindowEvent mozilla/widget/src/cocoa/nsChildView.mm:1731 14 XUL -[ChildView drawRect:] mozilla/widget/src/cocoa/nsChildView.mm:2734 15 AppKit AppKit@0x10929b

This seems to be worksforme, using: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.2a1pre) Gecko/20090209 Minefield/3.2a1pre Also worksforme, using a windows build from 2008-02-08. Perhaps, I'm missing something?

Me neither. It looks like that this was caused by something during testing. Let's leave it open for now. I'll come back when I'm able to reproduce this crash.

bug 480345 has the same top of stack and might have a more reliable testcase

Yes, that's true. Marking as dupe...