104421 - crash entering msn.com - Trunk [@ nsVoidArray::IndexOf][@ IndexOf]

Status: VERIFIED FIXED

(Core :: Graphics: ImageLib, defect)

Description

[Tracy Walker [:tracy]]

sorry about putting this under browser general Asa.  You told me this category 
is the worst place to put blockers, but I don't know where it belongs.  

-go to www.msn.com

CRASH!

here are some links to talkback incidents:
linux crash - http://cyclone/reports/SingleIncidentInfo.cfm?dynamicBBID=36611169
win98 crash - http://cyclone/reports/SingleIncidentInfo.cfm?dynamicBBID=36611153
mac incident was empty :-/

Comment 1

[Tracy Walker [:tracy]]

this was seen on trunk only builds: (0.9.4 branch was fine)

windows 2001-10-12-06-trunk
linux 2001-10-12-08-trunk
mac 2001-10-12-04-trunk

Comment 2

[Olav Vitters]

Is this related to bug 104405?

Generated TB36614797K, Linux Build-ID 2001101208

Comment 3

[Tracy Walker [:tracy]]

I tried those sites mentioned in bug 104405 and didn't crash 

Comment 4

[Asa Dotzler [:asa]]

->Pavlov

Comment 5

[David Baron :dbaron: (⌚️UTC-4, no longer working on Mozilla)]

The top of twalker's Windows stack:


nsVoidArray::IndexOf [d:\builds\seamonkey\mozilla\xpcom\ds\nsVoidArray.cpp, line
375]
nsVoidArray::RemoveElement
[d:\builds\seamonkey\mozilla\xpcom\ds\nsVoidArray.cpp, line 588]
imgRequest::RemoveProxy
[d:\builds\seamonkey\mozilla\modules\libpr0n\src\imgRequest.cpp, line 171]
imgRequestProxy::~imgRequestProxy
[d:\builds\seamonkey\mozilla\modules\libpr0n\src\imgRequestProxy.cpp, line 77]
imgRequestProxy::`scalar deleting destructor'
imgRequestProxy::Release
[d:\builds\seamonkey\mozilla\modules\libpr0n\src\imgRequestProxy.cpp, line 39]
nsCOMPtr_base::assign_with_AddRef
[d:\builds\seamonkey\mozilla\xpcom\glue\nsCOMPtr.cpp, line 74]
nsImageFrame::Init
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsImageFrame.cpp, line 291]
nsCSSFrameConstructor::InitAndRestoreFrame
[d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp,
line 6491]
nsCSSFrameConstructor::ConstructFrameByTag
[d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp,
line 4730]
nsCSSFrameConstructor::ConstructFrameInternal
[d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp,
line 7030] 


This looks a bit like bug 103477.

Comment 6

[David Baron :dbaron: (⌚️UTC-4, no longer working on Mozilla)]

*** Bug 104405 has been marked as a duplicate of this bug. ***

Comment 7

[James Paige]

Is this the same thing that is crashing at http://cnn.com/ with build 2001101203 ?

Comment 8

[Asa Dotzler [:asa]]

shotgun cc:

Comment 9

[David Baron :dbaron: (⌚️UTC-4, no longer working on Mozilla)]

*** Bug 104425 has been marked as a duplicate of this bug. ***

Comment 10

[David Baron :dbaron: (⌚️UTC-4, no longer working on Mozilla)]

*** Bug 104430 has been marked as a duplicate of this bug. ***

Comment 11

[Matthias Versen [:Matti]]

looks like bug 103477(smoketest, "fixed" 2001-10-07 10:51):
This is the same crash with the same Stack and the same page.

Comment 12

[Stuart Parmenter]

... looking...

Comment 13

[Stuart Parmenter]

Attachment: 1 line fix

Comment 14

[Brian Ryner (not reading)]

Comment on attachment 53303 [details] [diff] [review]
1 line fix

r=bryner

Comment 15

[Stuart Parmenter]

fixed.

Comment 16

[Olav Vitters]

*** Bug 104450 has been marked as a duplicate of this bug. ***

Comment 17

[Tracy Walker [:tracy]]

verified fixed with linux respin 2001-10-12-12-trunk

Comment 18

[Matthias Versen [:Matti]]

*** Bug 104453 has been marked as a duplicate of this bug. ***

Comment 19

[R.K.Aa.]

*** Bug 104569 has been marked as a duplicate of this bug. ***

Comment 20

[Ashley Bischoff (blog at handcoding.com)]

*** Bug 104533 has been marked as a duplicate of this bug. ***

Comment 21

[Christopher Aillon (sabbatical, not receiving bugmail)]

*** Bug 104569 has been marked as a duplicate of this bug. ***

Comment 22

[Diego Biurrun]

I still see this bug on milestone 0.9.5 under linux
TB36661513W
TB36661384H

Did we ship 0.9.5 with a blocker bug? If so, shouldn't we release 0.9.5a with a fix?

Comment 23

[Matthias Versen [:Matti]]

Diego : Does it crash if you open chatzilla ?
If not then you are seeing not this crash

Comment 24

[Diego Biurrun]

Matti, I see it when opening chatzilla and when going to cnn.com. Both 100%
reproducible.

Mozillazine links to an updated daily build for linux with the fix included, I
just downloaded and tried it, no problem with that one.

Comment 25

[Matthias Versen [:Matti]]

*** Bug 104591 has been marked as a duplicate of this bug. ***

Comment 26

[Diego Biurrun]

Sorry for spamming you all, this bug is definitely not in 0.9.5, I just confused
two tar.gz builds... May this bug rest in peace now.

Comment 27

[Olav Vitters]

*** Bug 104884 has been marked as a duplicate of this bug. ***

Comment 28

[Olav Vitters]

*** Bug 104587 has been marked as a duplicate of this bug. ***

Comment 29

[Matthias Versen [:Matti]]

*** Bug 104767 has been marked as a duplicate of this bug. ***

Comment 30

[Jay Patel [:jay]]

Adding crash, topcrash keywords and Trunk [@ nsVoidArray::IndexOf][@ IndexOf] to
summary for future reference.

Comment 31

[Scott MacGregor]

*** Bug 115830 has been marked as a duplicate of this bug. ***