Marcia Knous [:marcia] Reporter
	Description • 14 years ago

Seen while reviewing crash stats. Crashes started showing up using the 20101122 build. http://tinyurl.com/36r6yww links to the crashes so far which are Windows. Possible pushlog regression range: http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=be4b69a4babf&tochange=4d73807bfec7

Frame 	Module 	Signature [Expand] 	Source
0 	xul.dll 	nsRegion::SubRect 	gfx/src/nsRegion.cpp:1088
1 	xul.dll 	nsRegion::Or 	gfx/src/nsRegion.cpp:851
2 	xul.dll 	nsIntRegion::Or 	gfx/src/nsRegion.h:340
3 	xul.dll 	nsThebesRegion::Union 	gfx/src/thebes/nsThebesRegion.cpp:85
4 	xul.dll 	nsScriptableRegion::UnionRect 	gfx/src/nsScriptableRegion.cpp:103
5 	xul.dll 	NS_InvokeByIndex_P 	xpcom/reflect/xptcall/src/md/win32/xptcinvoke.cpp:102
6 	xul.dll 	XPC_WN_CallMethod 	js/src/xpconnect/src/xpcwrappednativejsops.cpp:1594
7 	mozjs.dll 	js::Interpret 	js/src/jsinterp.cpp:4748
8 	mozjs.dll 	js::RunScript 	js/src/jsinterp.cpp:657
9 	mozjs.dll 	js::Invoke 	js/src/jsinterp.cpp:737
10 	mozjs.dll 	js::ExternalInvoke 	js/src/jsinterp.cpp:858
11 	mozjs.dll 	JS_CallFunctionValue 	js/src/jsapi.cpp:4971
12 	xul.dll 	nsXPCWrappedJSClass::CallMethod 	js/src/xpconnect/src/xpcwrappedjsclass.cpp:1694
13 	xul.dll 	nsXPCWrappedJS::CallMethod 	js/src/xpconnect/src/xpcwrappedjs.cpp:588
14 	xul.dll 	PrepareAndDispatch 	xpcom/reflect/xptcall/src/md/win32/xptcstubs.cpp:114
15 	xul.dll 	SharedStub 	xpcom/reflect/xptcall/src/md/win32/xptcstubs.cpp:141
16 	xul.dll 	nsEventListenerManager::HandleEventSubType 	content/events/src/nsEventListenerManager.cpp:1114

	chris hofmann
	Comment 1 • 14 years ago

looks like this might have been around for awhile so maybe its just a case of the mozilla-central testing population growing large enough that we are starting to see these on b8pre builds now.


checking --- nsRegion::SubRect.nsRegion::nsRectFast.const.,.nsRegion.,.nsRegion.. 20101208-crashdata.csv
found in: 3.6.12 4.0b7 4.0b8pre 4.0b6 3.6.13 4.0b4 3.6.8 3.6.3 3.6.11 3.6 3.5.15
release total-crashes
              nsRegion::SubRect.nsRegion::nsRectFast.const.,.nsRegion.,.nsRegion.. crashes
                         pct.
all  	339468	65	0.000191476
3.6.12	211592	35	0.000165413
4.0b7	35866	17	0.000473987
4.0b8pre4520	3	0.000663717
4.0b6	2711	2	0.000737735
3.6.13	7648	2	0.000261506
4.0b4	829	1	0.00120627
3.6.8	7296	1	0.000137061
3.6.3	7510	1	0.000133156
3.6.11	1702	1	0.000587544
3.6	5157	1	0.000193911
3.5.15	10396	1	9.61908e-05

os breakdown
nsRegion::SubRect.nsRegion::nsRectFast.const.,.nsRegion.,.nsRegion..Total 65
Win5.1  0.60
Win6.0  0.00
Win6.1  0.40

	Martijn Wargers (dead)
	Comment 2 • 13 years ago

I think I might be seeing something similar in bug 591304.

	Marcia Knous [:marcia] Reporter
	Comment 3 • 13 years ago

627 crashes across all versions in the last week, so this is still hanging around.

	Joe Drew (not getting mail)
	Comment 4 • 13 years ago

Yep, still happening. However, this is really a layout bug; at least, the stack points to that.

	Mats Palmgren (inactive)
	Comment 5 • 10 years ago

All current crash reports are for FF28 or older.
There are no calls to nsRegion::SubRect under layout/ probably because we have removed/renamed it.
Closing this bug since the crash, if it still occurs, is likely filed under a new signature.