210334 - Infinite loop hang loading ESPN.com [@nsWritingIterator<char>::write(char const*, unsigned)]

Status: VERIFIED DUPLICATE of bug 210119

(Core :: Networking: HTTP, defect, P1)

Description

[Christopher Aillon (sabbatical, not receiving bugmail)]

Current linux CVS trunk -

Steps to reproduce:
1. Load espn.com

Expected results:
- Finished loading the page, like a good browser.

Actual results:
- Hang.

This is a regression from bug 208845.  Backing that checkin out locally fixes
this for me.  I have a stack trace, and a copy of the web page complete which
causes this hang.  I will attach both of those in the bug.

Comment 1

[Christopher Aillon (sabbatical, not receiving bugmail)]

Attachment: Stack trace

Comment 2

[Christopher Aillon (sabbatical, not receiving bugmail)]

Attachment: Web page, complete

Comment 3

[Christopher Aillon (sabbatical, not receiving bugmail)]

Also note that there is an infinite loop of assertions.  Here is a bit of them
from the console:

CSS Error (http://ads.msn.com/ads/ :1.224): Unknown property 'filter'. 
Declaration dropped.
CSS Error (http://ads.msn.com/ads/ :1.116): Unknown property 'filter'. 
Declaration dropped.
###!!! ASSERTION: caller passing bogus length: 'aLength != PRUint32(-1)', file
../../../dist/include/string/nsDependentString.h, line 173
Break: at file ../../../dist/include/string/nsDependentString.h, line 173
###!!! ASSERTION: nsMemoryImpl::Alloc of 0: 'size', file
/usr/local/src/mozilla/trunk/mozilla/xpcom/base/nsMemoryImpl.cpp, line 322
Break: at file /usr/local/src/mozilla/trunk/mozilla/xpcom/base/nsMemoryImpl.cpp,
line 322
###!!! ASSERTION: You can't |write| into an |nsWritingIterator| with no space!:
'size_forward() > 0', file ../../dist/include/string/nsStringIterator.h, line 364
Break: at file ../../dist/include/string/nsStringIterator.h, line 364
###!!! ASSERTION: |copy_string| will never terminate: 'count_copied > 0', file
../../dist/include/string/nsAlgorithm.h, line 91
Break: at file ../../dist/include/string/nsAlgorithm.h, line 91
###!!! ASSERTION: You can't |write| into an |nsWritingIterator| with no space!:
'size_forward() > 0', file ../../dist/include/string/nsStringIterator.h, line 364
Break: at file ../../dist/include/string/nsStringIterator.h, line 364
###!!! ASSERTION: |copy_string| will never terminate: 'count_copied > 0', file
../../dist/include/string/nsAlgorithm.h, line 91
Break: at file ../../dist/include/string/nsAlgorithm.h, line 91

Comment 4

[Darin Fisher]

probably a duplicate of bug 210119.

Comment 5

[Darin Fisher]

my patch for bug 210119 fixes this.

*** This bug has been marked as a duplicate of 210119 ***

Comment 6

[Christopher Aillon (sabbatical, not receiving bugmail)]

Verified.  The patch works.