Closed Bug 71909 Opened 24 years ago Closed 23 years ago

M081 crash [@ ntdll.dll - MSVCRT.dll - nsStr::EnsureCapacity ]

Categories

(Core :: XPCOM, defect)

x86
Windows NT
defect
Not set
normal

Tracking

()

VERIFIED WORKSFORME

People

(Reporter: jcarpenter0524, Assigned: talkback)

References

Details

(Keywords: crash, topcrash, verifyme)

Crash Data

This is a topcrasher for mozilla 0.8 (M08). Here is a stack trace, urls & user comments Incident ID 27141473 ntdll.dll + 0x4a07b (0x77fca07b) MSVCRT.DLL + 0x1089 (0x78001089) MSVCRT.DLL + 0x1026 (0x78001026) nsStr::EnsureCapacity [d:\builds\0.8\mozilla\xpcom\ds\nsStr.cpp, line 105] nsStr::GrowCapacity [d:\builds\0.8\mozilla\xpcom\ds\nsStr.cpp, line 135] nsString::SetCapacity [d:\builds\0.8\mozilla\xpcom\ds\nsString2.cpp, line 208] nsString::SetLength [d:\builds\0.8\mozilla\xpcom\ds\nsString2.cpp, line 191] basic_nsAWritableString::do_AppendFromReadable [..\..\dist\include\nsAWritableString.h, line 641] basic_nsAWritableString::do_AppendFromElementPtr [..\..\dist\include\nsAWritableString.h, line 649] nsCSSValue::GetStringValue [d:\builds\0.8\mozilla\layout\html\style\src\nsCSSValue.h, line 191] MapDeclarationListInto [d:\builds\0.8\mozilla\layout\html\style\src\nsCSSStyleRule.cpp, line 2784] MapDeclarationInto [d:\builds\0.8\mozilla\layout\html\style\src\nsCSSStyleRule.cpp, line 3282] CSSStyleRuleImpl::MapStyleInto [d:\builds\0.8\mozilla\layout\html\style\src\nsCSSStyleRule.cpp, line 1667] MapStyleRule [d:\builds\0.8\mozilla\layout\base\src\nsStyleContext.cpp, line 3738] nsSupportsArray::EnumerateForwards [d:\builds\0.8\mozilla\xpcom\ds\nsSupportsArray.cpp, line 360] StyleContextImpl::RemapStyle [d:\builds\0.8\mozilla\layout\base\src\nsStyleContext.cpp, line 3796] NS_NewStyleContext [d:\builds\0.8\mozilla\layout\base\src\nsStyleContext.cpp, line 4630] StyleSetImpl::GetContext [d:\builds\0.8\mozilla\layout\base\src\nsStyleSet.cpp, line 838] StyleSetImpl::ResolveStyleFor [d:\builds\0.8\mozilla\layout\base\src\nsStyleSet.cpp, line 922] nsPresContext::ResolveStyleContextFor [d:\builds\0.8\mozilla\layout\base\src\nsPresContext.cpp, line 621] FrameManager::ReResolveStyleContext [d:\builds\0.8\mozilla\layout\html\base\src\nsFrameManager.cpp, line 1579] FrameManager::ReResolveStyleContext [d:\builds\0.8\mozilla\layout\html\base\src\nsFrameManager.cpp, line 1729] FrameManager::ReResolveStyleContext [d:\builds\0.8\mozilla\layout\html\base\src\nsFrameManager.cpp, line 1729] FrameManager::ReResolveStyleContext [d:\builds\0.8\mozilla\layout\html\base\src\nsFrameManager.cpp, line 1729] FrameManager::ReResolveStyleContext [d:\builds\0.8\mozilla\layout\html\base\src\nsFrameManager.cpp, line 1729] FrameManager::ComputeStyleChangeFor [d:\builds\0.8\mozilla\layout\html\base\src\nsFrameManager.cpp, line 1972] nsCSSFrameConstructor::AttributeChanged [d:\builds\0.8\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp, line 9761] StyleSetImpl::AttributeChanged [d:\builds\0.8\mozilla\layout\base\src\nsStyleSet.cpp, line 1267] PresShell::AttributeChanged [d:\builds\0.8\mozilla\layout\html\base\src\nsPresShell.cpp, line 4295] nsXULDocument::AttributeChanged [d:\builds\0.8\mozilla\rdf\content\src\nsXULDocument.cpp, line 1654] nsXULElement::UnsetAttribute [d:\builds\0.8\mozilla\rdf\content\src\nsXULElement.cpp, line 3163] nsGfxScrollFrameInner::SetScrollbarVisibility [d:\builds\0.8\mozilla\layout\html\base\src\nsGfxScrollFrame.cpp, line 1409] nsGfxScrollFrameInner::AddRemoveScrollbar [d:\builds\0.8\mozilla\layout\html\base\src\nsGfxScrollFrame.cpp, line 962] nsGfxScrollFrameInner::AddHorizontalScrollbar [d:\builds\0.8\mozilla\layout\html\base\src\nsGfxScrollFrame.cpp, line 931] nsGfxScrollFrameInner::Layout [d:\builds\0.8\mozilla\layout\html\base\src\nsGfxScrollFrame.cpp, line 1175] nsGfxScrollFrame::DoLayout [d:\builds\0.8\mozilla\layout\html\base\src\nsGfxScrollFrame.cpp, line 1034] nsBox::Layout [d:\builds\0.8\mozilla\layout\xul\base\src\nsBox.cpp, line 989] nsSprocketLayout::Layout [d:\builds\0.8\mozilla\layout\xul\base\src\nsSprocketLayout.cpp, line 418] nsContainerBox::DoLayout [d:\builds\0.8\mozilla\layout\xul\base\src\nsContainerBox.cpp, line 553] nsBoxFrame::DoLayout [d:\builds\0.8\mozilla\layout\xul\base\src\nsBoxFrame.cpp, line 984] nsBox::Layout [d:\builds\0.8\mozilla\layout\xul\base\src\nsBox.cpp, line 989] nsStackLayout::Layout [d:\builds\0.8\mozilla\layout\xul\base\src\nsStackLayout.cpp, line 256] nsContainerBox::DoLayout [d:\builds\0.8\mozilla\layout\xul\base\src\nsContainerBox.cpp, line 553] nsBoxFrame::DoLayout [d:\builds\0.8\mozilla\layout\xul\base\src\nsBoxFrame.cpp, line 984] nsXULTreeFrame::DoLayout [d:\builds\0.8\mozilla\layout\xul\base\src\nsXULTreeFrame.cpp, line 113] nsBox::Layout [d:\builds\0.8\mozilla\layout\xul\base\src\nsBox.cpp, line 989] nsSprocketLayout::Layout [d:\builds\0.8\mozilla\layout\xul\base\src\nsSprocketLayout.cpp, line 418] nsContainerBox::DoLayout [d:\builds\0.8\mozilla\layout\xul\base\src\nsContainerBox.cpp, line 553] nsBoxFrame::DoLayout [d:\builds\0.8\mozilla\layout\xul\base\src\nsBoxFrame.cpp, line 984] nsBox::Layout [d:\builds\0.8\mozilla\layout\xul\base\src\nsBox.cpp, line 989] nsStackLayout::Layout [d:\builds\0.8\mozilla\layout\xul\base\src\nsStackLayout.cpp, line 256] nsContainerBox::DoLayout [d:\builds\0.8\mozilla\layout\xul\base\src\nsContainerBox.cpp, line 553] nsBoxFrame::DoLayout [d:\builds\0.8\mozilla\layout\xul\base\src\nsBoxFrame.cpp, line 984] nsBox::Layout [d:\builds\0.8\mozilla\layout\xul\base\src\nsBox.cpp, line 989] nsBoxFrame::Reflow [d:\builds\0.8\mozilla\layout\xul\base\src\nsBoxFrame.cpp, line 786] nsRootBoxFrame::Reflow [d:\builds\0.8\mozilla\layout\xul\base\src\nsRootBoxFrame.cpp, line 209] nsContainerFrame::ReflowChild [d:\builds\0.8\mozilla\layout\html\base\src\nsContainerFrame.cpp, line 718] ViewportFrame::Reflow [d:\builds\0.8\mozilla\layout\html\base\src\nsViewportFrame.cpp, line 544] nsHTMLReflowCommand::Dispatch [d:\builds\0.8\mozilla\layout\html\base\src\nsHTMLReflowCommand.cpp, line 145] PresShell::ProcessReflowCommands [d:\builds\0.8\mozilla\layout\html\base\src\nsPresShell.cpp, line 5144] PresShell::FlushPendingNotifications [d:\builds\0.8\mozilla\layout\html\base\src\nsPresShell.cpp, line 4222] PresShell::HandlePostedReflowCallbacks [d:\builds\0.8\mozilla\layout\html\base\src\nsPresShell.cpp, line 4138] PresShell::ProcessReflowCommands [d:\builds\0.8\mozilla\layout\html\base\src\nsPresShell.cpp, line 5222] PresShell::FlushPendingNotifications [d:\builds\0.8\mozilla\layout\html\base\src\nsPresShell.cpp, line 4222] Comment: (27141473) Poping a new windows on a URL in an email ------------ URL:(27381208) Clicking on Tools in the main Mozilla.org home page -------------- URL:(27008131) http://www.freesms.net/ Comment: (27008131) Sent an SMS though that site
Keywords: crash, topcrash
stack looks more like a scc string thing...
Assignee: neeti → scc
but it too could be an innocent bystander..
updating summary with M081 and adding MSVCRT.DLL since this crash is also showing up under that stack signature. although this crash isn't occurring a lot in the talkback reports, adding qawanted keyword in case someone can reproduce. here is the latest stack trace: MSVCRT.DLL + 0x11bd (0x780011bd) MSVCRT.DLL + 0x145c (0x7800145c) MSVCRT.DLL + 0x1409 (0x78001409) nsStr::EnsureCapacity [d:\builds\0.8.1\mozilla\string\obsolete\nsStr.cpp line 105] nsStr::GrowCapacity [d:\builds\0.8.1\mozilla\string\obsolete\nsStr.cpp line 135] nsString::SetCapacity [d:\builds\0.8.1\mozilla\string\obsolete\nsString2.cpp line 208] nsString::SetLength [d:\builds\0.8.1\mozilla\string\obsolete\nsString2.cpp line 191] basic_nsAWritableString<unsigned short>::do_AssignFromReadable [..\..\dist\include\nsAWritableString.h line 590] nsHTMLImageLoader::SetURL [d:\builds\0.8.1\mozilla\layout\html\base\src\nsHTMLImageLoader.cpp line 96] nsHTMLImageLoader::UpdateURLSpec [d:\builds\0.8.1\mozilla\layout\html\base\src\nsHTMLImageLoader.cpp line 267] nsImageBoxFrame::UpdateImage [d:\builds\0.8.1\mozilla\layout\xul\base\src\nsImageBoxFrame.cpp line 267] nsImageBoxFrame::DidSetStyleContext [d:\builds\0.8.1\mozilla\layout\xul\base\src\nsImageBoxFrame.cpp line 338] nsFrame::SetStyleContext [d:\builds\0.8.1\mozilla\layout\html\base\src\nsFrame.cpp line 476] nsFrame::Init [d:\builds\0.8.1\mozilla\layout\html\base\src\nsFrame.cpp line 327] nsLeafBoxFrame::Init [d:\builds\0.8.1\mozilla\layout\xul\base\src\nsLeafBoxFrame.cpp line 95] nsImageBoxFrame::Init [d:\builds\0.8.1\mozilla\layout\xul\base\src\nsImageBoxFrame.cpp line 183] nsCSSFrameConstructor::InitAndRestoreFrame [d:\builds\0.8.1\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp line 6653] nsCSSFrameConstructor::ConstructXULFrame [d:\builds\0.8.1\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp line 5780] nsCSSFrameConstructor::ConstructFrameInternal [d:\builds\0.8.1\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp line 7177] nsCSSFrameConstructor::ConstructFrame [d:\builds\0.8.1\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp line 7078] nsCSSFrameConstructor::ProcessChildren [d:\builds\0.8.1\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp line 11194] nsCSSFrameConstructor::ConstructXULFrame [d:\builds\0.8.1\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp line 5807] nsCSSFrameConstructor::ConstructFrameInternal [d:\builds\0.8.1\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp line 7177] nsCSSFrameConstructor::ConstructFrame [d:\builds\0.8.1\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp line 7078] nsCSSFrameConstructor::ProcessChildren [d:\builds\0.8.1\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp line 11194] nsCSSFrameConstructor::ConstructXULFrame [d:\builds\0.8.1\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp line 5807] nsCSSFrameConstructor::ConstructFrameInternal [d:\builds\0.8.1\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp line 7177] nsCSSFrameConstructor::CreateTreeWidgetContent [d:\builds\0.8.1\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp line 12219] nsXULTreeGroupFrame::GetFirstTreeBox [d:\builds\0.8.1\mozilla\layout\xul\base\src\nsXULTreeGroupFrame.cpp line 304] nsTreeLayout::LazyRowCreator [d:\builds\0.8.1\mozilla\layout\xul\base\src\nsTreeLayout.cpp line 345] nsTreeLayout::LazyRowCreator [d:\builds\0.8.1\mozilla\layout\xul\base\src\nsTreeLayout.cpp line 356] nsXULTreeOuterGroupFrame::ReflowFinished [d:\builds\0.8.1\mozilla\layout\xul\base\src\nsXULTreeOuterGroupFrame.cpp line 1324] PresShell::HandlePostedReflowCallbacks [d:\builds\0.8.1\mozilla\layout\html\base\src\nsPresShell.cpp line 4228] PresShell::ProcessReflowCommands [d:\builds\0.8.1\mozilla\layout\html\base\src\nsPresShell.cpp line 5388] PresShell::FlushPendingNotifications [d:\builds\0.8.1\mozilla\layout\html\base\src\nsPresShell.cpp line 4319] nsEventStateManager::FlushPendingEvents [d:\builds\0.8.1\mozilla\content\events\src\nsEventStateManager.cpp line 3237] nsEventStateManager::GenerateDragGesture [d:\builds\0.8.1\mozilla\content\events\src\nsEventStateManager.cpp line 779] nsEventStateManager::PreHandleEvent [d:\builds\0.8.1\mozilla\content\events\src\nsEventStateManager.cpp line 316] PresShell::HandleEventInternal [d:\builds\0.8.1\mozilla\layout\html\base\src\nsPresShell.cpp line 5057] PresShell::HandleEvent [d:\builds\0.8.1\mozilla\layout\html\base\src\nsPresShell.cpp line 4997] nsView::HandleEvent [d:\builds\0.8.1\mozilla\view\src\nsView.cpp line 372] nsView::HandleEvent [d:\builds\0.8.1\mozilla\view\src\nsView.cpp line 345] nsViewManager2::DispatchEvent [d:\builds\0.8.1\mozilla\view\src\nsViewManager2.cpp line 1424] HandleEvent [d:\builds\0.8.1\mozilla\view\src\nsView.cpp line 68] nsWindow::DispatchEvent [d:\builds\0.8.1\mozilla\widget\src\windows\nsWindow.cpp line 692] nsWindow::DispatchWindowEvent [d:\builds\0.8.1\mozilla\widget\src\windows\nsWindow.cpp line 709] nsWindow::DispatchMouseEvent [d:\builds\0.8.1\mozilla\widget\src\windows\nsWindow.cpp line 3985] ChildWindow::DispatchMouseEvent [d:\builds\0.8.1\mozilla\widget\src\windows\nsWindow.cpp line 4193] nsWindow::ProcessMessage [d:\builds\0.8.1\mozilla\widget\src\windows\nsWindow.cpp line 3018] nsWindow::WindowProc [d:\builds\0.8.1\mozilla\widget\src\windows\nsWindow.cpp line 944] KERNEL32.DLL + 0x363b (0xbff7363b) KERNEL32.DLL + 0x24497 (0xbff94497) 0x00688b5e
Keywords: qawanted
Summary: M08 crash [@ ntdll.dll - nsStr::EnsureCapacity ] → M081 crash [@ ntdll.dll - MSVCRT.dll - nsStr::EnsureCapacity ]
Blocks: 70090
Status: NEW → ASSIGNED
Component: Networking → String
I'm sorry, I just can't reproduce this with a recent build. Do we have somebody in-house who can? I'm closing WORKSFORME, if we find someone who can reproduce it, let's re-open.
Status: ASSIGNED → RESOLVED
Closed: 23 years ago
Resolution: --- → WORKSFORME
Moving all the Works For Me bugs to talkback user account for future reference.
Assignee: scc → talkback
Status: RESOLVED → NEW
We are gathering all the Resolved and WFM bugs which are happened to be topcrash bugs and assigning it to talkback. I am marking all of them as RESOLVED WFM.
Status: NEW → RESOLVED
Closed: 23 years ago23 years ago
+verifyme. Was this fixed in Mozilla 0.9 and later?
Keywords: verifyme
The talkback DB pulls up this entry under the top signature. It is the only current incident with a similar signature. If other incidents show up the comments might help repro the crash: Stack Signature:nsStr::EnsureCapacity() 0dbd225a Trigger Time: 2001-05-30 05:14:42 Email Address: abennett@black.ug.cs.usyd.edu.au User Comments: Clicked a link, decided against it, hit ESC, clicked in the search input form on the google page to adjust my query, and it died. I had several other windows open (but idle) at the time. Build ID: 2001052510 Product ID: MozillaTrunk Platform ID: LinuxIntel Stack Trace: nsStr::EnsureCapacity() nsStr::GrowCapacity() nsStr::StrAppend() nsString::AppendWithConversion() nsString::AssignWithConversion() . . .
verified worksforme. i haven't seen this crash in talkback data for a while now.
Status: RESOLVED → VERIFIED
Crash Signature: [@ ntdll.dll - MSVCRT.dll - nsStr::EnsureCapacity ]
Keywords: qawanted
Component: String → XPCOM
You need to log in before you can comment on or make changes to this bug.