97917 - Browser crashes when clicking a link to that page

Status: VERIFIED WORKSFORME

(Core :: Networking: HTTP, defect)

Description

[Sam Rowe]

From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:0.9.3+) Gecko/20010831
BuildID:    2001083108

I was browsing http://www.memepool.com/ and clicked on a link to the above URL.
Instant crash. The link made no indication that it was a Real-Player file.

Reproducible: Always
Steps to Reproduce:
1.click on a link to http://www.tvparty.com/vault3/flintbig.ram
2.watch the browser crash
3.file a bug report

Actual Results:  Crash

Expected Results:  Plugin requester?

Comment 1

[gabriel]

Crashes for me with Linux 2001082708. But then ALL downloads are crashing for me.

Reporter, try shift clicking the URL. If that works I suggest it be marked a
dupe of bug 95975.

Comment 2

[Daniel Bergquist]

Win ME 200182803 has no problem.

Comment 3

[Christian Reis]

100% reproducible on 2001083108, busted me three times. Stack trace:

#0  0x400ed6a9 in nsCStringKey::nsCStringKey () from
/mondo/local/mozilla/libxpcom.so
#1  0x407e8d69 in NSGetModule () from
/mondo/local/mozilla/components/liburiloader.so
#2  0x407efb0c in NSGetModule () from
/mondo/local/mozilla/components/liburiloader.so
#3  0x407e4faa in NSGetModule () from
/mondo/local/mozilla/components/liburiloader.so
#4  0x407e1075 in NSGetModule () from
/mondo/local/mozilla/components/liburiloader.so
#5  0x407e0861 in NSGetModule () from
/mondo/local/mozilla/components/liburiloader.so
#6  0x40733c72 in NSGetModule () from /mondo/local/mozilla/components/libnecko.so
#7  0x40733b9f in NSGetModule () from /mondo/local/mozilla/components/libnecko.so
#8  0x4073893d in NSGetModule () from /mondo/local/mozilla/components/libnecko.so
#9  0x40749cb4 in NSGetModule () from /mondo/local/mozilla/components/libnecko.so
#10 0x407045d8 in NSGetModule () from /mondo/local/mozilla/components/libnecko.so
#11 0x40125b37 in PL_HandleEvent () from /mondo/local/mozilla/libxpcom.so
#12 0x40125a53 in PL_ProcessPendingEvents () from /mondo/local/mozilla/libxpcom.so
#13 0x40126a08 in nsEventQueueImpl::ProcessPendingEvents () from
/mondo/local/mozilla/libxpcom.so
#14 0x40804c63 in NSGetModule () from
/mondo/local/mozilla/components/libwidget_gtk.so
#15 0x408049dd in NSGetModule () from
/mondo/local/mozilla/components/libwidget_gtk.so
#16 0x40336242 in g_io_unix_dispatch (source_data=0x8134348,
current_time=0xbffff3fc, user_data=0x810f7a0) at giounix.c:135
#17 0x4033774b in g_main_dispatch (dispatch_time=0xbffff3fc) at gmain.c:656
#18 0x40337d0f in g_main_iterate (block=1, dispatch=1) at gmain.c:877
#19 0x40337e8d in g_main_run (loop=0x812e3d0) at gmain.c:935
#20 0x402628c9 in gtk_main () at gtkmain.c:524
#21 0x40805120 in NSGetModule () from
/mondo/local/mozilla/components/libwidget_gtk.so
#22 0x4063bc9a in NSGetModule () from
/mondo/local/mozilla/components/libnsappshell.so
#23 0x804ffa0 in NS_CreateNativeAppSupport ()
#24 0x80507f5 in main ()
#25 0x404602e7 in __libc_start_main () from /lib/libc.so.6

Comment 4

[Christian Reis]

Intresting. This URL contains the exact string:

http://64.70.201.146/vault3/flintbig.rm

The full HTTP response:

GET /vault3/flintbig.ram HTTP/1.0
Host: www.tvparty.com

HTTP/1.1 200 OK
Date: Sun, 02 Sep 2001 00:45:03 GMT
Server: Apache/1.3.12 (Unix) mod_ssl/2.6.4 OpenSSL/0.9.5
Last-Modified: Tue, 19 Jun 2001 15:23:08 GMT
ETag: "243f8-28-3b2f6e5c"
Accept-Ranges: bytes
Content-Length: 40
Connection: close
Content-Type: audio/x-pn-realaudio

http://64.70.201.146/vault3/flintbig.rm
Connection closed by foreign host.

Over to necko.

Comment 5

[Asa Dotzler [:asa]]

reassign

Comment 6

[Christian Reis]

Sorry, I didn't sniff that using mozilla, which is a requirement. Ï'll do so.

Comment 7

[Christian Reis]

Okay, this is interesting. I tested with my proxy on and off, and guess
what? I had cached an old version of the page! The new version is plain
HTML text! And guess what? We still crash! So I _think_ I know what is
happening.

Check out the return header for mozilla's request:

HTTP/1.1 200 OK
Date: Mon, 03 Sep 2001 21:08:14 GMT
Server: Apache/1.3.12 (Unix) mod_ssl/2.6.4 OpenSSL/0.9.5
Last-Modified: Mon, 03 Sep 2001 16:37:17 GMT
ETag: "243f8-17f-3b93b1bd"
Accept-Ranges: bytes
Content-Length: 383
Connection: close
Content-Type: audio/x-pn-realaudio

See the Content-Type? Right, it's audio. Except the page is plain HTML.
For some reason, this seems to crash us. I'll setup a testcase for this
using nc, one second.

Comment 8

[Christian Reis]

Whee. It crashes. Okay, I've setup a testcase up (it's easy, actually):
just try http://www.async.com.br/~kiko/foo.ram

Hmmm. Are we hanging on ALL ram mime types now? Seems to me to be the
case :( Let me check on my latest compile.

Comment 9

[Olivier Cahagne]

wfm using build 2001103113 on Linux. Mozilla asks me to download file via
pop-up.

Comment 10

[Tom Everingham]

marking wfm - Linux rh6 01/14/02

Comment 11

[Tom Everingham]

verified