100922 - Browser crashes while browsing through local german RPM-Howto

Status: RESOLVED WORKSFORME

(Core :: XUL, defect)

Description

[Wilfried Goesgens]

hit the 'next-page' ('Weiter') Link at the top of the page several times and
boom-mozilla crashes.
I'll atach a tgz whith the files...

Comment 1

[Wilfried Goesgens]

Attachment: here the html files, who caused the crash.

Comment 2

[Wilfried Goesgens]

sorry I forgot to mention: I tried this with mozilla .0.9.3 and 0.9.4

Mozilla 0.9.4
Mozilla/5.0 (X11; U; Linux i686; en-US; rv:0.9.4) Gecko/20010913 

Comment 3

[Olivier Cahagne]

wfm using file found here:
http://www.ibiblio.org/pub/Linux/docs/HOWTO/translations/de/aktuell/html/DE-RPM-HOWTO.html.tar.gz
and build 2001092003 on Win2k.
Reporter, can you use a Talkback-enabled and report the Talkback ID here ?
You'll find latest builds here:
http://ftp.mozilla.org/pub/mozilla/nightly/latest/

Comment 4

[Olivier Cahagne]

Got an e-mail from reporter who seem to have taken a build without Talkback,
please download the talkback build here:
http://ftp.mozilla.org/pub/mozilla/nightly/latest/mozilla-i686-pc-linux-gnu-sea.tar.gz

Comment 5

[Wilfried Goesgens]

I pasted this url into the Talkback window. 
under details it says:
Build Identifier: 2001092106
Deployment Identifier: NetscapeMozillaTrunkLinuxIntel2001092106
Interface Version: 9 (0x00000009)
which one is the "Talkback ID?" dunno.


Observer, Why didn't you take the Tar I attached?

Comment 6

[Wilfried Goesgens]

Attachment: The talkback file. just in case you can't find it...

Comment 7

[Asa Dotzler [:asa]]

Incident ID 35695018
Stack Signature 0x286344a7 2b84ab74
Bug ID
Trigger Time 2001-09-21 09:00:31
Email Address [e-mail]
User Comments http://bugzilla.mozilla.org/show_bug.cgi?id=100922
Build ID 2001092106
Product ID MozillaTrunk
Platform ID LinuxIntel
Trigger Reason SIGSEGV: Segmentation Fault: (signal 11)
Stack Trace
0x286344a7
nsTextNode::GetOwnerDocument()
XULPopupListenerImpl::sTooltipCallback()
nsTimerGtk::FireTimeout()
process_timers()
TimerCallbackFunc()
libglib-1.2.so.0 + 0x1122a (0x4036b22a)
libglib-1.2.so.0 + 0x10309 (0x4036a309)
libglib-1.2.so.0 + 0x10913 (0x4036a913)
libglib-1.2.so.0 + 0x10aac (0x4036aaac)
libgtk-1.2.so.0 + 0x93c57 (0x4027ec57)
nsAppShell::Run()
nsAppShellService::Run()
main1()
main()
libc.so.6 + 0x1d64f (0x404ae64f) 

Comment 8

[John Morrison]

I can get this to crash (if I try hard enough) on windows, and over http. 
The thing about the attached tarball of documents is that the images are 
missing, and so as each document loads as you click links, the image frame
is created and then collapsed to an inline as the image is realized as '404'.
From the stack (and the win32 is also processing an unnamed timer callback), 
then it looks like something about a tooltip timer is not being cleaned up 
properly.

But overall, this wasn't easy to trigger (at least for me).

Comment 9

[Wilfried Goesgens]

with mozilla 0.9.7 on debian Woody