48193 - Assertion after JS errors(?) (no treeOwner)

Reporter

Description

•

24 years ago

After a few JS errors, I got the following assertion.  I'd gone to the site
(www.titantv.com), and selected "show me my local DTV stations" (I forget the
real wording; top main button), entered my data and clicked the submit button.
The debugger crashed before I could continue.  When I tried to go back there, a
cookie (I assume) sent me straight to the result page.

*** Pulling out the charset
in SetSecurityButton
Enabling Quirk StyleSheet
Enabling Quirk StyleSheet
JavaScript error: 
http://www.titantv.com/ttv/EnterNewAddress/mychannels_child.asp line 188:
AddressForm is not defined

Document: Done (4.021 secs)
Error getting url widget service: TypeError: Components.classes[progid] has no
properties
Document http://www.titantv.com/ttv/EnterNewAddress/mychannels_child.asp loaded
successfully
nsLineLayout: nsGfxControlFrame2@0x98f8638 didn't set max-element-size!
nsLineLayout: nsGfxControlFrame2@0x98f8638 didn't set max-element-size!
nsLineLayout: nsGfxControlFrame2@0x98f8638 didn't set max-element-size!
nsLineLayout: nsGfxControlFrame2@0x98f8638 didn't set max-element-size!
nsLineLayout: nsGfxControlFrame2@0x98f8638 didn't set max-element-size!
nsLineLayout: nsGfxControlFrame2@0x98f8638 didn't set max-element-size!
nsLineLayout: nsGfxControlFrame2@0x98f8638 didn't set max-element-size!
nsLineLayout: nsGfxControlFrame2@0x98b4e3c didn't set max-element-size!
nsLineLayout: nsGfxControlFrame2@0x98b6488 didn't set max-element-size!
nsLineLayout: nsGfxControlFrame2@0x98b6ac0 didn't set max-element-size!
nsLineLayout: nsGfxControlFrame2@0x98b9108 didn't set max-element-size!
nsLineLayout: nsGfxControlFrame2@0x98f8638 didn't set max-element-size!
nsLineLayout: nsGfxControlFrame2@0x98f8bc4 didn't set max-element-size!
Opening file URL.tbl failed
WEBSHELL+ = 10
JavaScript error: 
http://www.titantv.com/ttv/EnterNewAddress/mychannels_child.asp line 36: 

Opening file 65827273.w failed
WEBSHELL- = 9
nsWidget::~nsWidget() of toplevel: 45 widgets still exist.
Gdk-Message: Got event for unknown window: 0x4005d12

Gdk-Message: Got event for unknown window: 0x4005d12

Gdk-Message: Got event for unknown window: 0x4005d12

Gdk-Message: Got event for unknown window: 0x4005d12

Gdk-Message: Got event for unknown window: 0x4005d12

Gdk-Message: Got event for unknown window: 0x4005d12

Gdk-Message: Got event for unknown window: 0x4005d12

Gdk-Message: Got event for unknown window: 0x4005d12

Gdk-Message: Got event for unknown window: 0x4005d12

Gdk-Message: Got event for unknown window: 0x4005d12

Gdk-Message: Got event for unknown window: 0x4005d12

Gdk-Message: Got event for unknown window: 0x4005d12

Gdk-Message: Got event for unknown window: 0x4005d12


Breakpoint 2, nsDebug::Assertion (
    aStr=0x28611d60 "NS_ENSURE_TRUE(treeOwner) failed", 
    aExpr=0x28611d55 "treeOwner", aFile=0x28611945 "nsGlobalWindow.cpp", 
    aLine=2845) at nsDebug.cpp:184
(gdb) bt
#0  nsDebug::Assertion (aStr=0x28611d60 "NS_ENSURE_TRUE(treeOwner) failed", 
    aExpr=0x28611d55 "treeOwner", aFile=0x28611945 "nsGlobalWindow.cpp", 
    aLine=2845) at nsDebug.cpp:184
#1  0x2818ca10 in nsDebug::WarnIfFalse (
    aStr=0x28611d60 "NS_ENSURE_TRUE(treeOwner) failed", 
    aExpr=0x28611d55 "treeOwner", aFile=0x28611945 "nsGlobalWindow.cpp", 
    aLine=2845) at nsDebug.cpp:304
#2  0x2854c60d in ?? ()
   from /home/jesup/src/mozilla_work/mozilla/dist/bin/./libjsdom.so
#3  0x28546437 in ?? ()
   from /home/jesup/src/mozilla_work/mozilla/dist/bin/./libjsdom.so
#4  0x29f828f0 in ?? ()
   from /home/jesup/src/mozilla_work/mozilla/dist/bin/components/libmozbrwsr.so
#5  0x28b74f9d in nsURILoader::DispatchContent (this=0x8133160, 
    aContentType=0x923d5d0 "text/html", aCommand=1, 
    aWindowTarget=0x8f25c00 "TopAppWin", aChannel=0x9338600, aCtxt=0x0, 
    aContentListener=0x0, aSrcWindowContext=0x99b6c00, 
    aContentTypeToUse=0xbfbfcef8, aContentListenerToUse=0xbfbfcef4, 
    aAbortProcess=0xbfbfcef0) at nsURILoader.cpp:843
#6  0x28b723fd in nsDocumentOpenInfo::DispatchContent (this=0x902eac0, 
    aChannel=0x9338600, aCtxt=0x0) at nsURILoader.cpp:302
#7  0x28b71fb5 in nsDocumentOpenInfo::OnStartRequest (this=0x902eac0, 
    aChannel=0x9338600, aCtxt=0x0) at nsURILoader.cpp:233
#8  0x28a81629 in nsHTTPFinalListener::OnStartRequest (this=0x915e340, 
    aChannel=0x9338600, aContext=0x0) at nsHTTPResponseListener.cpp:1154
#9  0x2897217f in InterceptStreamListener::OnStartRequest (this=0x91e1a40, 
    channel=0x9338600, ctxt=0x0) at nsCachedNetData.cpp:1167
#10 0x28a810f2 in nsHTTPServerListener::FinishedResponseHeaders (
    this=0x8fae180) at nsHTTPResponseListener.cpp:1080
#11 0x28a7f0c0 in nsHTTPServerListener::OnDataAvailable (this=0x8fae180, 
    channel=0x9929804, context=0x9338600, i_pStream=0x8fae30c, 
    i_SourceOffset=4370, i_Length=5840) at nsHTTPResponseListener.cpp:424
#12 0x28a11118 in nsOnDataAvailableEvent::HandleEvent (this=0x9424f00)
    at nsAsyncStreamListener.cpp:400
#13 0x28a102d1 in nsStreamListenerEvent::HandlePLEvent (aEvent=0x9424f20)
    at nsAsyncStreamListener.cpp:97
#14 0x28180281 in PL_HandleEvent (self=0x9424f20) at plevent.c:587
#15 0x28180110 in PL_ProcessPendingEvents (self=0x99af140) at plevent.c:528
#16 0x2818206e in nsEventQueueImpl::ProcessPendingEvents (this=0x99af040)
    at nsEventQueue.cpp:356
#17 0x2914eac3 in ?? ()
   from
/home/jesup/src/mozilla_work/mozilla/dist/bin/components/libwidget_gtk.so
#18 0x2914e6c5 in ?? ()
   from
/home/jesup/src/mozilla_work/mozilla/dist/bin/components/libwidget_gtk.so
#19 0x288765aa in ?? () from /usr/local/lib/libglib12.so.3
#20 0x28877d17 in ?? () from /usr/local/lib/libglib12.so.3
#21 0x2887831f in ?? () from /usr/local/lib/libglib12.so.3
#22 0x288784a1 in ?? () from /usr/local/lib/libglib12.so.3
#23 0x287ac6f3 in ?? () from /usr/X11R6/lib/libgtk12.so.2
#24 0x2914f235 in ?? ()
   from
/home/jesup/src/mozilla_work/mozilla/dist/bin/components/libwidget_gtk.so
#25 0x2849a7ee in ?? ()
   from
/home/jesup/src/mozilla_work/mozilla/dist/bin/components/libnsappshell.so
#26 0x80533c8 in main1 (argc=1, argv=0xbfbfd6ec, nativeApp=0x0)
    at nsAppRunner.cpp:913
#27 0x8053b21 in main (argc=1, argv=0xbfbfd6ec) at nsAppRunner.cpp:1093
(gdb) shar jsdom
Reading symbols from
/home/jesup/src/mozilla_work/mozilla/dist/bin/./libjsdom.so...done.
(gdb) bt
#0  nsDebug::Assertion (aStr=0x28611d60 "NS_ENSURE_TRUE(treeOwner) failed", 
    aExpr=0x28611d55 "treeOwner", aFile=0x28611945 "nsGlobalWindow.cpp", 
    aLine=2845) at nsDebug.cpp:184
#1  0x2818ca10 in nsDebug::WarnIfFalse (
    aStr=0x28611d60 "NS_ENSURE_TRUE(treeOwner) failed", 
    aExpr=0x28611d55 "treeOwner", aFile=0x28611945 "nsGlobalWindow.cpp", 
    aLine=2845) at nsDebug.cpp:304
#2  0x2854c60d in GlobalWindowImpl::OpenInternal (this=0x9418d00, 
    cx=0x8589e00, argv=0x9705010, argc=2, aDialog=0, aReturn=0xbfbfccd4)
    at nsGlobalWindow.cpp:2845
#3  0x28546437 in GlobalWindowImpl::Open (this=0x9418d00, cx=0x8589e00, 
    argv=0x9705010, argc=2, aReturn=0xbfbfccd4) at nsGlobalWindow.cpp:1785
#4  0x29f828f0 in ?? ()
   from /home/jesup/src/mozilla_work/mozilla/dist/bin/components/libmozbrwsr.so
#5  0x28b74f9d in nsURILoader::DispatchContent (this=0x8133160, 
    aContentType=0x923d5d0 "text/html", aCommand=1, 
    aWindowTarget=0x8f25c00 "TopAppWin", aChannel=0x9338600, aCtxt=0x0, 
    aContentListener=0x0, aSrcWindowContext=0x99b6c00, 
    aContentTypeToUse=0xbfbfcef8, aContentListenerToUse=0xbfbfcef4, 
    aAbortProcess=0xbfbfcef0) at nsURILoader.cpp:843
#6  0x28b723fd in nsDocumentOpenInfo::DispatchContent (this=0x902eac0, 
    aChannel=0x9338600, aCtxt=0x0) at nsURILoader.cpp:302
#7  0x28b71fb5 in nsDocumentOpenInfo::OnStartRequest (this=0x902eac0, 
    aChannel=0x9338600, aCtxt=0x0) at nsURILoader.cpp:233
#8  0x28a81629 in nsHTTPFinalListener::OnStartRequest (this=0x915e340, 
    aChannel=0x9338600, aContext=0x0) at nsHTTPResponseListener.cpp:1154
#9  0x2897217f in InterceptStreamListener::OnStartRequest (this=0x91e1a40, 
    channel=0x9338600, ctxt=0x0) at nsCachedNetData.cpp:1167
#10 0x28a810f2 in nsHTTPServerListener::FinishedResponseHeaders (
    this=0x8fae180) at nsHTTPResponseListener.cpp:1080
#11 0x28a7f0c0 in nsHTTPServerListener::OnDataAvailable (this=0x8fae180, 
    channel=0x9929804, context=0x9338600, i_pStream=0x8fae30c, 
    i_SourceOffset=4370, i_Length=5840) at nsHTTPResponseListener.cpp:424
#12 0x28a11118 in nsOnDataAvailableEvent::HandleEvent (this=0x9424f00)
    at nsAsyncStreamListener.cpp:400
#13 0x28a102d1 in nsStreamListenerEvent::HandlePLEvent (aEvent=0x9424f20)
    at nsAsyncStreamListener.cpp:97
#14 0x28180281 in PL_HandleEvent (self=0x9424f20) at plevent.c:587
#15 0x28180110 in PL_ProcessPendingEvents (self=0x99af140) at plevent.c:528
#16 0x2818206e in nsEventQueueImpl::ProcessPendingEvents (this=0x99af040)
    at nsEventQueue.cpp:356
#17 0x2914eac3 in ?? ()
   from
/home/jesup/src/mozilla_work/mozilla/dist/bin/components/libwidget_gtk.so
#18 0x2914e6c5 in ?? ()
   from
/home/jesup/src/mozilla_work/mozilla/dist/bin/components/libwidget_gtk.so
#19 0x288765aa in ?? () from /usr/local/lib/libglib12.so.3
#20 0x28877d17 in ?? () from /usr/local/lib/libglib12.so.3
#21 0x2887831f in ?? () from /usr/local/lib/libglib12.so.3
#22 0x288784a1 in ?? () from /usr/local/lib/libglib12.so.3
#23 0x287ac6f3 in ?? () from /usr/X11R6/lib/libgtk12.so.2
#24 0x2914f235 in ?? ()
   from
/home/jesup/src/mozilla_work/mozilla/dist/bin/components/libwidget_gtk.so
#25 0x2849a7ee in ?? ()
   from
/home/jesup/src/mozilla_work/mozilla/dist/bin/components/libnsappshell.so
#26 0x80533c8 in main1 (argc=1, argv=0xbfbfd6ec, nativeApp=0x0)
    at nsAppRunner.cpp:913
#27 0x8053b21 in main (argc=1, argv=0xbfbfd6ec) at nsAppRunner.cpp:1093
(gdb) up
#1  0x2818ca10 in nsDebug::WarnIfFalse (
    aStr=0x28611d60 "NS_ENSURE_TRUE(treeOwner) failed", 
    aExpr=0x28611d55 "treeOwner", aFile=0x28611945 "nsGlobalWindow.cpp", 
    aLine=2845) at nsDebug.cpp:304
(gdb) 
#2  0x2854c60d in GlobalWindowImpl::OpenInternal (this=0x9418d00, 
    cx=0x8589e00, argv=0x9705010, argc=2, aDialog=0, aReturn=0xbfbfccd4)
    at nsGlobalWindow.cpp:2845
(gdb) p *str
$1 = (struct JSString *) 0x94214e8
(gdb) x/32x str->chars
$2 = {
  length = 54, 
  chars = 0x95d8e80
}
(gdb) x/32x *str->chars
0x68:	Error accessing memory address 0x68: Bad address.
(gdb) x/32c str->chars
0x95d8e80:	0x00740068	0x00700074	0x002f003a	0x0077002f
0x95d8e90:	0x00770077	0x0074002e	0x00740069	0x006e0061
0x95d8ea0:	0x00760074	0x0063002e	0x006d006f	0x0074002f
0x95d8eb0:	0x00760074	0x004d002f	0x00430079	0x00610068
0x95d8ec0:	0x006e006e	0x006c0065	0x002f0073	0x00540044
0x95d8ed0:	0x005f0056	0x00680043	0x006e0061	0x0065006e
0x95d8ee0:	0x0073006c	0x0061002e	0x00700073	0xdada0000
0x95d8ef0:	0xdadadada	0xdadadada	0xdadadada	0xdadadada
(gdb) x/54c str->chars
0x95d8e80:	104 'h'	0 '\000'	116 't'	0 '\000'	116 't'	0 '\000'	112 'p'	0 '\000'
0x95d8e88:	58 ':'	0 '\000'	47 '/'	0 '\000'	47 '/'	0 '\000'	119 'w'	0 '\000'
0x95d8e90:	119 'w'	0 '\000'	119 'w'	0 '\000'	46 '.'	0 '\000'	116 't'	0 '\000'
0x95d8e98:	105 'i'	0 '\000'	116 't'	0 '\000'	97 'a'	0 '\000'	110 'n'	0 '\000'
(gdb) x/s str->chars
0x95d8e80:	104 'h'	0 '\000'	116 't'	0 '\000'	116 't'	0 '\000'	112 'p'	0 '\000'
0x95d8e88:	58 ':'	0 '\000'	47 '/'	0 '\000'	47 '/'	0 '\000'	119 'w'	0 '\000'
0x95d8e90:	119 'w'	0 '\000'	119 'w'	0 '\000'	46 '.'	0 '\000'	116 't'	0 '\000'
0x95d8e98:	105 'i'	0 '\000'	116 't'	0 '\000'	97 'a'	0 '\000'	110 'n'	0 '\000'
0x95d8ea0:	116 't'	0 '\000'	118 'v'	0 '\000'	46 '.'	0 '\000'	99 'c'	0 '\000'
0x95d8ea8:	111 'o'	0 '\000'	109 'm'	0 '\000'	47 '/'	0 '\000'	116 't'	0 '\000'
0x95d8eb0:	116 't'	0 '\000'	118 'v'	0 '\000'	47 '/'	0 '\000'
(gdb) x/54s str->chars
0x95d8e80:	 "h"
(gdb) x/54s str->chars
0x95d8e80:	 "h"
0x95d8e82:	 "t"
0x95d8e84:	 "t"
0x95d8e86:	 "p"
0x95d8e88:	 ":"
0x95d8e8a:	 "/"
0x95d8e8c:	 "/"
0x95d8e8e:	 "w"
0x95d8e90:	 "w"
0x95d8e92:	 "w"
0x95d8e94:	 "."
0x95d8e96:	 "t"
0x95d8e98:	 "i"
0x95d8e9a:	 "t"
0x95d8e9c:	 "a"
0x95d8e9e:	 "n"
0x95d8ea0:	 "t"
0x95d8ea2:	 "v"
0x95d8ea4:	 "."
0x95d8ea6:	 "c"
0x95d8ea8:	 "o"
0x95d8eaa:	 "m"
0x95d8eac:	 "/"
0x95d8eae:	 "t"
0x95d8eb0:	 "t"
0x95d8eb2:	 "v"
0x95d8eb4:	 "/"
0x95d8eb6:	 "M"
0x95d8eb8:	 "y"
0x95d8eba:	 "C"
0x95d8ebc:	 "h"
0x95d8ebe:	 "a"
0x95d8ec0:	 "n"
0x95d8ec2:	 "n"
0x95d8ec4:	 "e"
0x95d8ec6:	 "l"
0x95d8ec8:	 "s"
0x95d8eca:	 "/"
0x95d8ecc:	 "D"
0x95d8ece:	 "T"
0x95d8ed0:	 "V"
0x95d8ed2:	 "_"
0x95d8ed4:	 "C"
0x95d8ed6:	 "h"
0x95d8ed8:	 "a"
0x95d8eda:	 "n"
0x95d8edc:	 "n"
0x95d8ede:	 "e"
0x95d8ee0:	 "l"
0x95d8ee2:	 "s"
0x95d8ee4:	 "."
0x95d8ee6:	 "a"
0x95d8ee8:	 "s"
0x95d8eea:	 "p"
(gdb) p argc
$3 = 2
(gdb) p name
$4 = {
  <nsString> = {
    <basic_nsAWritableString<short unsigned int>> = {
      <basic_nsAReadableString<short unsigned int>> = {
        _vptr$ = 0x281f8440
      }, <No data fields>}, 
    <nsStr> = {
      mLength = 9, 
      mCapacity = 63, 
      mCharSize = eTwoByte, 
      mOwnsBuffer = 0, 
      {
        mStr = 0xbfbfcab0 "T", 
        mUStr = 0xbfbfcab0
      }
    }, <No data fields>}, 
  members of nsAutoString: 
  mBuffer =
"T\000o\000p\000A\000p\000p\000W\000i\000n\000\000\000тл©©\000\215A\t`~w\t\t\000\000\000Dк©©╧с
(\000\236X\b\000\\Р\b\000\000\000\000\030к©©Ф/K(тл©©\000\000\000\000Ч[\e(я/K(э╒M(тл©©\001\000\000\0006\000\000\0006\000\000\000Tк©©Hк©©\024SK(тл©©\000\000\000\0006\000\000\000\001SK("
}
(gdb) set str=JSValueToString(cx,argv[1])
No symbol "mJSStrName" in current context.
(gdb) set str=JS_ValueToString(cx,argv[1])
No symbol "JS_ValueToString" in current context.
(gdb) No symbol "JS_ValueToString" in current context.
Undefined command: "No".  Try "help".
(gdb) set str=JS_ValueToString(cx,argv[1])

Debugger segmentation fault (core dumped)

Phil Schwartau

Updated

•

24 years ago

Assignee: rogerl → jst

Component: Javascript Engine → DOM Level 0

QA Contact: pschwartau → desale

Phil Schwartau

Comment 1

•

24 years ago

Using Linux commercial build 2000080414 : I was able to reproduce the crash 
Using Linux commercial build 2000081108 : No crash (but NOTHING happens...)
Steps I am following:

1. Go to http://www.titantv.com/ttv/EnterNewAddress/mychannels_child.asp
2. Complete the address form that comes up and click "Continue"
3. (Crash on 2000080414) or (NOTHING happens on 2000081108) ...

Errors in the JavaScript console: 

JavaScript error:
http://www.titantv.com/ttv/EnterNewAddress/mychannels_child.asp line 188: 
AddressForm is not defined

JavaScript error:
http://www.titantv.com/ttv/EnterNewAddress/mychannels_child.asp line 34: 
window.opener has no properties


NOTE: there's a big difference in the way these two builds render the
      parent page, http://www.titantv.com.  Something has regressed !!!

With the earlier build, you can start at the parent page, click the "MyChannels" 
button,  arrive at the child page (the address form) and continue as above.

However, with the newer build, the parent page doesn't render properly !!!
In order to investigate the bug you have to start directly at the child page,

          http://www.titantv.com/ttv/EnterNewAddress/mychannels_child.asp


None of these seem to be JS Engine issues; sending to DOM Level 0 for
further triage or acceptance -

Randell Jesup [:jesup] (needinfo me)

Reporter

Comment 2

•

24 years ago

Using a current build (8/21/00 pull and clobber) I still see an assertion, but
no crash.  I'll attach a backtrace with more dumps of relevant variables/objects.

Status: UNCONFIRMED → NEW

Ever confirmed: true

Randell Jesup [:jesup] (needinfo me)

Reporter

Comment 3

•

24 years ago

Attached file Backtrace and variable dump — Details

Johnny Stenback (:jst)

Comment 4

•

24 years ago

The given URL uses non-standard DOM calls, it relies on 'AddressForm' being a JS
variable just because there's a form caller 'AddressForm' on the page...

That set aside the page seems to be working fairly well except for the form
submit not working, reassigning to pollmann for futher investigation.

Eric, load http://www.titantv.com and click on the "my channels" link, fill in
the form and press submit. The popup window goes away but nothing else happens...

Assignee: jst → pollmann

Hixie (not reading bugmail)

Updated

•

24 years ago

Keywords: dom0

Kevin McCluskey (gone)

Comment 5

•

24 years ago

Setting milestone to mozilla0.9.1

Target Milestone: --- → mozilla0.9.1

Kevin McCluskey (gone)

Comment 6

•

23 years ago

I loaded  http://www.titantv.com with a 2001042304 build on WINNT and I was able
to setup an account and change my profile.
marking WORKSFORME.

Status: NEW → RESOLVED

Closed: 23 years ago

Resolution: --- → WORKSFORME

Prashant Desale

Comment 7

•

23 years ago

Status: RESOLVED → VERIFIED

Bugzilla

Quick Search

Assertion after JS errors(?) (no treeOwner)

Categories

(Core :: DOM: Core & HTML, defect, P3)

Tracking

()

People

(Reporter: jesup, Assigned: pollmann)

References

(
URL
)

Details

(Keywords: dom0)

Crash Data

Security

(public)

User Story

Attachments

(1 file)

Description

Updated

Comment 1

Comment 2

Comment 3

Comment 4

Updated

Comment 5

Comment 6

Comment 7

Attachment

General

Description

File Name

Content Type