A lot of crashes since build 4.0b5pre 20100824040950 Rank : top 4 for this build http://crash-stats.mozilla.com/report/index/8e4842cf-6015-4e48-95bd-6ea012100825 Signature imgRequestProxy::GetStaticRequest(imgIRequest**) UUID 8e4842cf-6015-4e48-95bd-6ea012100825 Time 2010-08-25 06:12:07.537500 Uptime 2632 Last Crash 1729908 seconds (2.9 weeks) before submission Install Age 80130 seconds (22.3 hours) since version was first installed. Product Firefox Version 4.0b5pre Build ID 20100824040950 Branch 2.0 OS Windows NT OS Version 6.1.7600 CPU x86 CPU Info GenuineIntel family 6 model 23 stepping 6 Crash Reason EXCEPTION_ACCESS_VIOLATION Crash Address 0x0 Crashing Thread Frame Module Signature [Expand] Source 0 xul.dll imgRequestProxy::GetStaticRequest modules/libpr0n/src/imgRequestProxy.cpp:730 1 xul.dll nsContentUtils::GetStaticRequest content/base/src/nsContentUtils.cpp:2580 2 xul.dll nsImageLoadingContent::CreateStaticImageClone content/base/src/nsImageLoadingContent.cpp:992 3 xul.dll nsHTMLImageElement::CopyInnerTo content/html/content/src/nsHTMLImageElement.cpp:668 4 xul.dll nsHTMLImageElement::Clone content/html/content/src/nsHTMLImageElement.cpp:208 5 xul.dll nsNodeUtils::CloneAndAdopt content/base/src/nsNodeUtils.cpp:469 6 xul.dll nsCycleCollectingAutoRefCnt::decr obj-firefox/dist/include/nsISupportsImpl.h:199 7 xul.dll nsGenericElement::InsertChildAt content/base/src/nsGenericElement.cpp:3536 8 xul.dll nsNodeUtils::CloneAndAdopt content/base/src/nsNodeUtils.cpp:580 9 xul.dll nsGenericElement::InsertChildAt content/base/src/nsGenericElement.cpp:3536 10 xul.dll nsGenericElement::InsertChildAt content/base/src/nsGenericElement.cpp:3536 11 @0x2a00420f

Based on hg annotate this is a regression from bug 572520.

I can reproduce this, sort of, but I haven't been able to get a testcase for it. Perhaps related to bug 590395?

(In reply to comment #2) > Perhaps related to bug 590395? I don't think so - nothing here appears to be coming from the nsDocument image tracker, which is what we were screwing up before.

I hate to assign this to you, Bobby, but I'd hate to assign it to myself more.

(In reply to comment #4) > I hate to assign this to you, Bobby, but I'd hate to assign it to myself more. Let's just gang up on dholbert. Resolving dupe of bug 591014, because I believe that's the case.

Yay!