148373 - Segmentation fault - if you click fast in sub frames

Status: RESOLVED WORKSFORME

(Core :: Layout: Images, Video, and HTML Frames, defect, P2)

Description

[Hartmut]

If you interlace frames and then you use href's that uses here own
parrent frame, you should never click to fast on the links.
If you click on a link before the loading of all frames is finsh, the
mozilla browser will crash.

I have upload a sample page/frameset on the URL
http://home.t-online.de/~voglerh/mozillabug/
the should be accessable in 5-7 hours from the internet.

Comment 1

[Kai Lahmann (is there, where MNG is)]

build 2002052412 on Linux doesn't crash, or I'm to slow

Comment 2

[Matthias Versen [:Matti]]

Reporter:
Do you have a Talkback ID for this crash ?
And please always add the build ID in a bug report...

Comment 3

[Andrew Schultz]

I get a crash with linux build 20020530, but not a segmentation fault (Gdk-errors)

Debug build complains a lot:
WARNING: NS_ENSURE_TRUE(NS_SUCCEEDED(EnsureScriptEnvironment())) failed, file
nsWebShell.cpp, line 294
###!!! ASSERTION: Cant get nsIDOMWindowInternal from nsDocShell!: '0', file
nsDocShell.cpp, line 1017
Break: at file nsDocShell.cpp, line 1017
###!!! ASSERTION: No Target docshell could be found!: 'targetDocShell', file
nsDocShell.cpp, line 4585
Break: at file nsDocShell.cpp, line 4585

and eventually:

Area(html)(-1)@0x81f342c: Init: bad caller: width WAS 1073739888(0x3ffff870)
Block(body)(2)@0x880a764: Init: bad caller: width WAS 1073739632(0x3ffff770)
Block(body)(2)@0x880a764: Init: bad caller: width WAS 1073739632(0x3ffff770)
Block(body)(2)@0x880a764: Init: bad caller: width WAS 1073739632(0x3ffff770)
nsBlockReflowContext: Block(pre)(11)@0x880af48 metrics=1073739632,1248!
Block(body)(2)@0x880a764: line=0x8833ed0 xmost=1073739632
Block(body)(2)@0x880a764: Init: bad caller: width WAS 1073739632(0x3ffff770)
Block(body)(2)@0x880a764: Init: bad caller: width WAS 1073739632(0x3ffff770)
Block(body)(2)@0x880a764: Init: bad caller: width WAS 1073739632(0x3ffff770)
(etc., etc.)
Block(body)(2)@0x880a764: Init: bad caller: width WAS 1073739632(0x3ffff770)
Block(body)(2)@0x880a764: Init: bad caller: width WAS 1073739632(0x3ffff770)
Block(body)(2)@0x880a764: Init: bad caller: width WAS 1073739632(0x3ffff770)
nsBlockReflowContext: Block(body)(2)@0x880a764 metrics=1073739632,94960!
Area(html)(-1)@0x81f342c: line=0x880a7e0 xmost=1073739760
Area(html)(-1)@0x81f342c: Init: bad caller: width WAS 1073740128(0x3ffff960)
Block(body)(2)@0x880a764: Init: bad caller: width WAS 1073739872(0x3ffff860)
nsBlockReflowContext: Block(pre)(11)@0x880af48 metrics=1073739872,1248!
Block(body)(2)@0x880a764: line=0x8833ed0 xmost=1073739872
Block(body)(2)@0x880a764: Init: bad caller: width WAS 1073739872(0x3ffff860)
Block(body)(2)@0x880a764: Init: bad caller: width WAS 1073739872(0x3ffff860)
nsBlockReflowContext: Block(body)(2)@0x880a764 metrics=1073739872,94960!
Area(html)(-1)@0x81f342c: line=0x880a7e0 xmost=1073740000
nsBlockReflowContext: Frame(frameset)(2)@0x8810a54 metrics=1073741824,1073741824!
Area(html)(-1)@0x8810750: line=0x8810da4 xmost=1073741824
nsBlockReflowContext: Frame(frameset)(2)@0x8810a54 metrics=1073741824,1073741824!
Area(html)(-1)@0x8810750: line=0x8810da4 xmost=1073741824
nsBlockReflowContext: Frame(frameset)(2)@0x8810a54 metrics=1073741824,1073741824!
Area(html)(-1)@0x8810750: line=0x8810da4 xmost=1073741824
nsBlockReflowContext: Frame(frameset)(2)@0x8810a54 metrics=1073741840,1073741824!
Area(html)(-1)@0x8810750: line=0x8810da4 xmost=1073741840
nsBlockReflowContext: Frame(frameset)(2)@0x8810a54 metrics=1073741840,1073741824!
Area(html)(-1)@0x8810750: line=0x8810da4 xmost=1073741840
Gdk-ERROR **: BadValue (integer parameter out of range for operation)
  serial 60091 error_code 2 request_code 12 minor_code 0
Gdk-ERROR **: BadValue (integer parameter out of range for operation)
  serial 60169 error_code 2 request_code 12 minor_code 0

marking NEW
==>HTMLFrames (?)

Comment 4

[Andrew Schultz]

regression on the trunk  between 2002041108 and 2002041207
regression on the branch between 2002041309 and 2002041513

I don't see any checkins that look relevant and match those criteria.

Comment 5

[Igor Furlan]

yes... RC3 on LINUX crashes if you follow the instructions

Comment 6

[Hartmut]

ok now,
[e-mail] have verifiyed the problem. I have checked that
the problem is constantly in the 1.0 release and the new 1.1a version.

I'm new at this bug-reporting system - is there now anything that i
must do, to initiate a solution prozess for this bug?
Can i supply any informations to support the elimination of this bug?

Comment 7

[Andrew Schultz]

this is a regression from bug 119849 (crash stopped by backing it out of CVS).

Comment 8

[Kevin McCluskey (gone)]

Bulk moving P1-P5 un-milestoned bugs to future. 

Comment 9

[Kevin McCluskey (gone)]

Bulk moving P1-P5 un-milestoned bugs to future. 

Comment 10

[Carine Held]

Reproduced in 12/23 Linux trunk.

Comment 11

[Ted Kaczmarek]

I am seeing simillar condition with mail in 1.4. If you fast click slect mails it 
seg faults, if it help I will install talkback build. Please advise.

Comment 12

[Bernd]

wfm winxp 2004112606

Comment 13

[Andrew Schultz]

worksforme with linux gtk1 build of 1.8a5 and gtk2 build of nightly 2004120205

resolving as worksforme