63849 - Browser crashes when I click on Bugzilla Helper at www.mozilla.org

Status: VERIFIED DUPLICATE of bug 63529

(SeaMonkey :: General, defect)

Description

[anthonyc]

From Bugzilla Helper:
User-Agent: Mozilla/4.72 [en] (X11; I; Linux 2.2.14 i686)
BuildID:    2000122108

The browser crashed.
The following shows up in the xterm in which I type 
> run-mozilla.sh
MOZILLA_FIVE_HOME=.
  LD_LIBRARY_PATH=.
     LIBRARY_PATH=.:./components
       SHLIB_PATH=.
          LIBPATH=.
       ADDON_PATH=.
      MOZ_PROGRAM=./mozilla-bin
      MOZ_TOOLKIT=
        moz_debug=0
     moz_debugger=
Registering plugin 0 for: "*","All types",".*"
in SetSecurityButton
Document http://www.mozilla.org/ loaded successfully
Error loading URL http://www.mozilla.org/quality/help/bug-form.html: 804b0002 
./run-mozilla.sh: line 72:   674 Segmentation fault      $prog ${1+"$@"}
I have also seen the following lines when reproducing this bug:
Error loading URL http://www.mozilla.org/quality/help/bug-form.html: 804b0002 
./run-mozilla.sh: line 72:   665 Segmentation fault      $prog ${1+"$@"}

and

Error loading URL http://www.mozilla.org/quality/help/bug-form.html: 804b0002 
./run-mozilla.sh: line 72:   682 Segmentation fault      $prog ${1+"$@"}

More information about my system :
> uname -a
Linux princess 2.2.14 #1 Mon Mar 13 10:52:30 GMT 2000 i686 unknown
> rpm -q libc
libc-2.1.3-58

SuSe 6.4 distribution




Reproducible: Always
Steps to Reproduce:
1.start mozilla with: run-mozilla.sh and www.mozilla.org as home page
2.click on "report bugs"
3.

Actual Results:  Mozilla connected to www.mozilla.org and as the status bar
indicated
that it was finished loading the form, it crashed.

Expected Results:  presented the form I am currently filling out using Netscape
4.72

from point of successfully loading www.mozilla.org home page ,running under
stack trace produces:
> strace run-mozilla.sh

...

wait4(-1, Registering plugin 0 for: "*","All types",".*"
in SetSecurityButton
Document http://www.mozilla.org/ loaded successfully
Error loading URL http://www.mozilla.org/quality/help/bug-form.html: 804b0002 
[WIFSIGNALED(s) && WTERMSIG(s) == SIGSEGV], 0, NULL) = 1170
rt_sigprocmask(SIG_BLOCK, [CHLD TTOU], [CHLD], 8) = 0
fstat(2, {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 2), ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) =
0x40015000
ioctl(2, TCGETS, {B9600 opost isig icanon echo ...}) = 0
rt_sigprocmask(SIG_BLOCK, [CHLD], [CHLD TTOU], 8) = 0
uname({sys="Linux", node="princess", ...}) = 0
write(2, "./run-mozilla.sh: line 72:  1170"..., 73./run-mozilla.sh: line 72: 
1170 Segmentation fault      $prog ${1+"$@"}
) = 73
rt_sigprocmask(SIG_SETMASK, [CHLD TTOU], NULL, 8) = 0
rt_sigprocmask(SIG_SETMASK, [CHLD], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, [CHLD], [CHLD], 8) = 0
rt_sigprocmask(SIG_SETMASK, [CHLD], NULL, 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
--- SIGCHLD (Child exited) ---
wait4(-1, 0xbfffef18, WNOHANG, NULL)    = -1 ECHILD (No child processes)
sigreturn()                             = ? (mask now [])
rt_sigaction(SIGINT, {SIG_DFL}, {0x806a530, [], 0x4000000}, 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
stat("core", 0xbfffeecc)                = -1 ENOENT (No such file or directory)
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, [CHLD TTOU], [], 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
read(3, "\nexit $exitcode\n", 8073)     = 16
rt_sigprocmask(SIG_BLOCK, NULL, [], 8)  = 0
rt_sigprocmask(SIG_BLOCK, [CHLD TTOU], [], 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
munmap(0x40015000, 4096)                = 0
munmap(0x40014000, 4096)                = 0
_exit(139)                              = ?

Comment 1

[Alex]

What mozilla build id is it from, it seems to work for me in 2000122710

Comment 2

[Asa Dotzler [:asa]]

this is a dupe of bug 63529 -zero pointer deref in nsWebshell::OnStateChange
which has been partially fixed (no longer crashes but the bug is still open)


*** This bug has been marked as a duplicate of 63529 ***

Comment 3

[Blake Ross]

vrfy dup