104565 - site navigation breaks back-button and crashes browser

Status: VERIFIED WORKSFORME

(Core :: Networking: HTTP, defect)

Description

[Tommi Lahtonen]

first using the site navigation (prev or next) on this page:

http://appro.mit.jyu.fi/2000/syksy/tietoverkot/

and trying to use back-button after the site navigation buttons
crashes mozilla.

Comment 1

[Olav Vitters]

Also crashes on:

Win32 Build-ID 2001101117 (0.9.5) talkback TB36643204Q
Linux Build-ID 2001101221 (nightly) talkback program didn't start

Comment 2

[Matthias Versen [:Matti]]

confirming crash with win2k build 200101011.. (CVS debug) and ..1012 (CVS opt)

-> Networking 

win32 stack trace :
nsCOMPtr<nsIStreamListener>::assign_assuming_AddRef(nsIStreamListener * 
0x00000000) line 472 + 9 bytes
nsCOMPtr<nsIStreamListener>::assign_with_AddRef(nsISupports * 0x00000000) line 
965
nsCOMPtr<nsIStreamListener>::operator=(nsIStreamListener * 0x00000000) line 585
nsHttpChannel::OnStopRequest(nsHttpChannel * const 0x0541152c, nsIRequest * 
0x053495fc, nsISupports * 0x00000000, unsigned int 0) line 2337
nsOnStopRequestEvent::HandleEvent() line 177
nsARequestObserverEvent::HandlePLEvent(PLEvent * 0x05392e64) line 80
PL_HandleEvent(PLEvent * 0x05392e64) line 590 + 10 bytes
PL_ProcessPendingEvents(PLEventQueue * 0x00e629b8) line 520 + 9 bytes
_md_EventReceiverProc(HWND__ * 0x001203d8, unsigned int 49332, unsigned int 0, 
long 15083960) line 1071 + 9 bytes
USER32! 77e02e98()
USER32! 77e030e0()
USER32! 77e05824()
nsAppShellService::Run(nsAppShellService * const 0x0367de50) line 457
main1(int 2, char * * 0x003577d0, nsISupports * 0x00000000) line 1291 + 32 bytes
main(int 2, char * * 0x003577d0) line 1619 + 37 bytes
mainCRTStartup() line 338 + 17 bytes
KERNEL32! 77e87d08()

Comment 3

[Olivier Cahagne]

perhaps dup of bug 102743 ?

Comment 4

[Matthias Versen [:Matti]]

CC darin :
This is a possible dupe of bug 102743 but the stack is a little bit different 
(at the top).
Can you help us ?

Comment 5

[Darin Fisher]

i'd be surprised if this were a dupe of bug 102743, but it's possible... anyone
want to give the patch in bug 102743 a try?

Comment 6

[Matthias Versen [:Matti]]

*** Bug 104899 has been marked as a duplicate of this bug. ***

Comment 7

[Darin Fisher]

can anyone reproduce this problem using a recent nightly build?

Comment 8

[Matthias Versen [:Matti]]

seems to be fixed for me.

Comment 9

[Joseph Shelby]

I have the same problem with just about any site from the O'Reilly network,
including http://www.onjava.com/ and http://www.onlamp.com/ .  Hit one of those
two pages, hit an article, then back-button back to the first page and it will
crash.

And this is with 0.9.5, LINUX version, so its not just a Windows thing.

Comment 10

[Darin Fisher]

joseph: please try with a recent nightly build.  thx!

Comment 11

[Joseph Shelby]

Nightly build for Nov 15th handled the pages just fine, moving forward and back
though onjava.com with no losses whatsoever (and 0.9.5 consistently crashing on
the same ones).  Seems the bug did get fixed at some point...

Comment 12

[Darin Fisher]

marking WORKSFORME

Comment 13

[Tom Everingham]

verified

Comment 14

[mozbug1]

Works for me too.