nsImageFrame::OnStartContainer(nsImageFrame * const 0x06474564, imgIRequest * 0x056d32b0, nsIPresContext * 0x09e1ae40, imgIContainer * 0x00000000) line 334 + 7 bytes nsImageListener::OnStartContainer(nsImageListener * const 0x056d3310, imgIRequest * 0x056d32b0, nsISupports * 0x09e1ae40, imgIContainer * 0x00000000) line 1718 + 38 bytes imgRequestProxy::OnStartContainer(imgRequestProxy * const 0x056d32b4, imgIRequest * 0x00000000, nsISupports * 0x00000000, imgIContainer * 0x00000000) line 256 imgRequest::AddObserver(imgIDecoderObserver * 0x056d32b4) line 106 imgRequestProxy::Init(imgRequest * 0x085d9590, nsILoadGroup * 0x09d61130, imgIDecoderObserver * 0x056d3310, nsISupports * 0x09e1ae40) line 97 imgLoader::LoadImage(imgLoader * const 0x02612330, nsIURI * 0x056d3230, nsILoadGroup * 0x09d61130, imgIDecoderObserver * 0x056d3310, nsISupports * 0x09e1ae40, imgIRequest * * 0x064745f8) line 169 nsImageFrame::Init(nsImageFrame * const 0x06474564, nsIPresContext * 0x09e1ae40, nsIContent * 0x09daa310, nsIFrame * 0x0647452c, nsIStyleContext * 0x056d4350, nsIFrame * 0x00000000) line 291 + 111 bytes nsCSSFrameConstructor::InitAndRestoreFrame(nsIPresContext * 0x09e1ae40, nsFrameConstructorState & {...}, nsIContent * 0x09daa310, nsIFrame * 0x0647452c, nsIStyleContext * 0x056d4350, nsIFrame * 0x00000000, nsIFrame * 0x06474564) line 6669 + 32 bytes nsCSSFrameConstructor::ConstructFrameByTag(nsIPresShell * 0x09d6ed50, nsIPresContext * 0x09e1ae40, nsFrameConstructorState & {...}, nsIContent * 0x09daa310, nsIFrame * 0x0647452c, nsIAtom * 0x01802cd0 {"img"}, int 3, nsIStyleContext * 0x056d4350, nsFrameItems & {...}) line 4932 nsCSSFrameConstructor::ConstructFrameInternal(nsIPresShell * 0x09d6ed50, nsIPresContext * 0x09e1ae40, nsFrameConstructorState & {...}, nsIContent * 0x09daa310, nsIFrame * 0x0647452c, nsIAtom * 0x01802cd0 {"img"}, int 3, nsIStyleContext * 0x056d4350, nsFrameItems & {...}, int 0) line 7187 + 52 bytes nsCSSFrameConstructor::ConstructFrame(nsIPresShell * 0x09d6ed50, nsIPresContext * 0x09e1ae40, nsFrameConstructorState & {...}, nsIContent * 0x09daa310, nsIFrame * 0x0647452c, nsFrameItems & {...}) line 7097 + 56 bytes nsCSSFrameConstructor::ProcessInlineChildren(nsIPresShell * 0x09d6ed50, nsIPresContext * 0x09e1ae40, nsFrameConstructorState & {...}, nsIContent * 0x09d6dbb0, nsIFrame * 0x0647452c, int 1, nsFrameItems & {...}, int * 0x0012e214) line 12687 + 43 bytes nsCSSFrameConstructor::ConstructInline(nsIPresShell * 0x09d6ed50, nsIPresContext * 0x09e1ae40, nsFrameConstructorState & {...}, const nsStyleDisplay * 0x056d3814, nsIContent * 0x09d6dbb0, nsIFrame * 0x064744e0, nsIStyleContext * 0x056d7610, int 0, nsIFrame * 0x0647452c, nsIFrame * * 0x0012e474, nsIFrame * * 0x0012e444) line 12470 + 38 bytes nsCSSFrameConstructor::ConstructFrameByDisplayType(nsIPresShell * 0x09d6ed50, nsIPresContext * 0x09e1ae40, nsFrameConstructorState & {...}, const nsStyleDisplay * 0x056d3814, nsIContent * 0x09d6dbb0, nsIFrame * 0x064744e0, nsIStyleContext * 0x056d7610, nsFrameItems & {...}) line 6458 + 53 bytes nsCSSFrameConstructor::ConstructFrameInternal(nsIPresShell * 0x09d6ed50, nsIPresContext * 0x09e1ae40, nsFrameConstructorState & {...}, nsIContent * 0x09d6dbb0, nsIFrame * 0x064744e0, nsIAtom * 0x017fed80 {"a"}, int 3, nsIStyleContext * 0x056d7610, nsFrameItems & {...}, int 0) line 7230 + 48 bytes nsCSSFrameConstructor::ConstructFrame(nsIPresShell * 0x09d6ed50, nsIPresContext * 0x09e1ae40, nsFrameConstructorState & {...}, nsIContent * 0x09d6dbb0, nsIFrame * 0x064744e0, nsFrameItems & {...}) line 7097 + 56 bytes nsCSSFrameConstructor::ProcessChildren(nsIPresShell * 0x09d6ed50, nsIPresContext * 0x09e1ae40, nsFrameConstructorState & {...}, nsIContent * 0x09db8cd0, nsIFrame * 0x064744e0, int 1, nsFrameItems & {...}, int 1, nsTableCreator * 0x00000000) line 11231 + 43 bytes nsCSSFrameConstructor::ConstructTableCellFrame(nsIPresShell * 0x09d6ed50, nsIPresContext * 0x09e1ae40, nsFrameConstructorState & {...}, nsIContent * 0x09db8cd0, nsIFrame * 0x0647443c, nsIStyleContext * 0x056d3ec0, nsTableCreator & {...}, int 0, nsFrameItems & {...}, nsIFrame * & 0x06474484, nsIFrame * & 0x064744e0, int & 0) line 2949 + 40 bytes nsCSSFrameConstructor::TableProcessChild(nsIPresShell * 0x09d6ed50, nsIPresContext * 0x09e1ae40, nsFrameConstructorState & {...}, nsIContent & {...}, nsIFrame * 0x0647443c, nsIAtom * 0x01809f80 {"TableRowFrame"}, nsIStyleContext * 0x056d5180, nsTableCreator & {...}, nsFrameItems & {...}, nsIFrame * & 0x00000000) line 3213 + 59 bytes nsCSSFrameConstructor::TableProcessChildren(nsIPresShell * 0x09d6ed50, nsIPresContext * 0x09e1ae40, nsFrameConstructorState & {...}, nsIContent * 0x09db8dd0, nsIFrame * 0x0647443c, nsTableCreator & {...}, nsFrameItems & {...}, nsIFrame * & 0x00000000) line 3124 + 69 bytes nsCSSFrameConstructor::ConstructTableRowFrame(nsIPresShell * 0x09d6ed50, nsIPresContext * 0x09e1ae40, nsFrameConstructorState & {...}, nsIContent * 0x09db8dd0, nsIFrame * 0x06474400, nsIStyleContext * 0x056d5180, nsTableCreator & {...}, int 0, nsFrameItems & {...}, nsIFrame * & 0x0647443c, int & 0) line 2820 + 42 bytes nsCSSFrameConstructor::TableProcessChild(nsIPresShell * 0x09d6ed50, nsIPresContext * 0x09e1ae40, nsFrameConstructorState & {...}, nsIContent & {...}, nsIFrame * 0x06474400, nsIAtom * 0x01808060 {"TableRowGroupFrame"}, nsIStyleContext * 0x056d40f0, nsTableCreator & {...}, nsFrameItems & {...}, nsIFrame * & 0x00000000) line 3199 + 55 bytes nsCSSFrameConstructor::TableProcessChildren(nsIPresShell * 0x09d6ed50, nsIPresContext * 0x09e1ae40, nsFrameConstructorState & {...}, nsIContent * 0x09db8ec0, nsIFrame * 0x06474400, nsTableCreator & {...}, nsFrameItems & {...}, nsIFrame * & 0x00000000) line 3124 + 69 bytes nsCSSFrameConstructor::ConstructTableRowGroupFrame(nsIPresShell * 0x09d6ed50, nsIPresContext * 0x09e1ae40, nsFrameConstructorState & {...}, nsIContent * 0x09db8ec0, nsIFrame * 0x06474398, nsIStyleContext * 0x056d40f0, nsTableCreator & {...}, int 0, nsFrameItems & {...}, nsIFrame * & 0x06474400, int & 0) line 2711 + 42 bytes nsCSSFrameConstructor::TableProcessChild(nsIPresShell * 0x09d6ed50, nsIPresContext * 0x09e1ae40, nsFrameConstructorState & {...}, nsIContent & {...}, nsIFrame * 0x06474398, nsIAtom * 0x018081a0 {"TableFrame"}, nsIStyleContext * 0x056d07a0, nsTableCreator & {...}, nsFrameItems & {...}, nsIFrame * & 0x00000000) line 3193 + 55 bytes nsCSSFrameConstructor::TableProcessChildren(nsIPresShell * 0x09d6ed50, nsIPresContext * 0x09e1ae40, nsFrameConstructorState & {...}, nsIContent * 0x09dbd2c0, nsIFrame * 0x06474398, nsTableCreator & {...}, nsFrameItems & {...}, nsIFrame * & 0x00000000) line 3124 + 69 bytes nsCSSFrameConstructor::ConstructTableFrame(nsIPresShell * 0x09d6ed50, nsIPresContext * 0x09e1ae40, nsFrameConstructorState & {...}, nsIContent * 0x09dbd2c0, nsIFrame * 0x06474274, nsIStyleContext * 0x056d07a0, nsTableCreator & {...}, int 0, nsFrameItems & {...}, nsIFrame * & 0x0647434c, nsIFrame * & 0x06474398, int & 0) line 2592 + 42 bytes nsCSSFrameConstructor::ConstructFrameByDisplayType(nsIPresShell * 0x09d6ed50, nsIPresContext * 0x09e1ae40, nsFrameConstructorState & {...}, const nsStyleDisplay * 0x056d45a4, nsIContent * 0x09dbd2c0, nsIFrame * 0x06474274, nsIStyleContext * 0x056d07a0, nsFrameItems & {...}) line 6491 + 63 bytes nsCSSFrameConstructor::ConstructFrameInternal(nsIPresShell * 0x09d6ed50, nsIPresContext * 0x09e1ae40, nsFrameConstructorState & {...}, nsIContent * 0x09dbd2c0, nsIFrame * 0x06474274, nsIAtom * 0x01805de0 {"table"}, int 3, nsIStyleContext * 0x056d07a0, nsFrameItems & {...}, int 0) line 7230 + 48 bytes nsCSSFrameConstructor::ConstructFrame(nsIPresShell * 0x09d6ed50, nsIPresContext * 0x09e1ae40, nsFrameConstructorState & {...}, nsIContent * 0x09dbd2c0, nsIFrame * 0x06474274, nsFrameItems & {...}) line 7097 + 56 bytes nsCSSFrameConstructor::ContentAppended(nsCSSFrameConstructor * const 0x09d6c660, nsIPresContext * 0x09e1ae40, nsIContent * 0x09d8d800, int 0) line 8087 StyleSetImpl::ContentAppended(StyleSetImpl * const 0x09d6c460, nsIPresContext * 0x09e1ae40, nsIContent * 0x09d8d800, int 0) line 1215 PresShell::ContentAppended(PresShell * const 0x09d6ed58, nsIDocument * 0x09dc9cb0, nsIContent * 0x09d8d800, int 0) line 4521 + 46 bytes nsDocument::ContentAppended(nsDocument * const 0x09dc9cb0, nsIContent * 0x09d8d800, int 0) line 1601 nsHTMLDocument::ContentAppended(nsHTMLDocument * const 0x09dc9cb0, nsIContent * 0x09d8d800, int 0) line 1263 + 17 bytes HTMLContentSink::NotifyAppend(nsIContent * 0x09d8d800, int 0) line 4566 SinkContext::FlushTags(int 1) line 2049 SinkContext::DidAddContent(nsIContent * 0x09de2370, int 0) line 1349 SinkContext::CloseContainer(const nsIParserNode & {...}) line 1536 HTMLContentSink::CloseContainer(HTMLContentSink * const 0x09e0e360, const nsIParserNode & {...}) line 3184 + 18 bytes CNavDTD::CloseContainer(const nsCParserNode * 0x011ef040, nsHTMLTag eHTMLTag_tr, int 0) line 3557 + 31 bytes CNavDTD::CloseContainersTo(int 4, nsHTMLTag eHTMLTag_tr, int 0) line 3593 + 20 bytes CNavDTD::CloseContainersTo(nsHTMLTag eHTMLTag_tr, int 0) line 3750 + 20 bytes CNavDTD::HandleEndToken(CToken * 0x0647a4f8) line 1983 + 14 bytes CNavDTD::HandleToken(CNavDTD * const 0x09d6d370, CToken * 0x0647a4f8, nsIParser * 0x09df87b0) line 867 + 12 bytes CNavDTD::BuildModel(CNavDTD * const 0x09d6d370, nsIParser * 0x09df87b0, nsITokenizer * 0x09d6d0c0, nsITokenObserver * 0x00000000, nsIContentSink * 0x09e0e360) line 516 + 20 bytes nsParser::BuildModel() line 2027 + 34 bytes nsParser::ResumeParse(int 1, int 0) line 1908 + 11 bytes nsParser::OnDataAvailable(nsParser * const 0x09df87b8, nsIRequest * 0x09e02870, nsISupports * 0x00000000, nsIInputStream * 0x09e1bd10, unsigned int 0, unsigned int 3977) line 2357 + 19 bytes nsDocumentOpenInfo::OnDataAvailable(nsDocumentOpenInfo * const 0x09e02260, nsIRequest * 0x09e02870, nsISupports * 0x00000000, nsIInputStream * 0x09e1bd10, unsigned int 0, unsigned int 3977) line 259 + 46 bytes nsHTTPFinalListener::OnDataAvailable(nsHTTPFinalListener * const 0x09e02210, nsIRequest * 0x09e02870, nsISupports * 0x00000000, nsIInputStream * 0x09e1bd10, unsigned int 0, unsigned int 3977) line 1161 + 46 bytes nsHTTPChunkConv::OnDataAvailable(nsHTTPChunkConv * const 0x06437dd8, nsIRequest * 0x09e02870, nsISupports * 0x00000000, nsIInputStream * 0x09e11180, unsigned int 0, unsigned int 9930) line 211 + 46 bytes nsHTTPServerListener::OnDataAvailable(nsHTTPServerListener * const 0x09e10de0, nsIRequest * 0x09e12ed0, nsISupports * 0x09e02870, nsIInputStream * 0x09e11180, unsigned int 9619, unsigned int 9930) line 538 + 64 bytes nsOnDataAvailableEvent::HandleEvent() line 173 + 70 bytes nsARequestObserverEvent::HandlePLEvent(PLEvent * 0x09db52f4) line 64 PL_HandleEvent(PLEvent * 0x09db52f4) line 588 + 10 bytes PL_ProcessPendingEvents(PLEventQueue * 0x00ae9d80) line 518 + 9 bytes _md_EventReceiverProc(HWND__ * 0x00580420, unsigned int 49412, unsigned int 0, long 11443584) line 1069 + 9 bytes USER32! 77e71820() 00ae9d80()

Hey pavlov, we're running out of wallpaper to put over this stuff.

r=waterson, but leave the bug open.

patch is in, but leaving bug open. probably a dup of #75397

This looks like it's the same bug as: bug 75407 bug 75388 bug 75397 All have the same stack trace

my bulletproofing may be causing posting to bugzilla to fail. investigating...

*** Bug 75427 has been marked as a duplicate of this bug. ***

false alarm. I think my cache was corrupted. (known bug, logged on gordon)

*** Bug 75424 has been marked as a duplicate of this bug. ***

Seth: I saw the "posting to bugzilla failing" problem on an 8am build (before your patch); it cleared up after I crashed and restarted.

Adding Trunk and [@ nsImageFrame::OnStartContainer] to summary and crash, topcrash keywords for tracking. This is a topcrasher in the latest builds.

fix checked in

Verified Fixed based on latest Talkback data. This crash has not appeared since build 2001041009.