106820 - Trunk, M097 topcrash [@ JS_GetPrivate ] [@ js_Interpret]

Status: VERIFIED FIXED

(Core :: XUL, defect)

Description

[Jan Carpenter]

This bug is a topcrasher

 Count   Offset    Real Signature
[ 44   JS_GetPrivate 95081f96 - JS_GetPrivate ]
[ 8   JS_GetPrivate 8e2012ee - JS_GetPrivate ]
[ 8   JS_GetPrivate 0d90563e - JS_GetPrivate ]
[ 4   JS_GetPrivate 89e3b1b6 - JS_GetPrivate ]
[ 3   JS_GetPrivate a5c3fa3b - JS_GetPrivate ]
[ 2   JS_GetPrivate e69418b7 - JS_GetPrivate ]
[ 2   JS_GetPrivate e50c064c - JS_GetPrivate ]
[ 2   JS_GetPrivate b9cd1745 - JS_GetPrivate ]
 
     Crash date range: 2001-10-15 to 2001-10-24
     Min/Max Seconds since last crash: 7 - 1064536
     Min/Max Runtime: 10 - 1064536
     Keyword List : load(6), mail(10), start(7), browser(6),  
     Count   Platform List 
     67   Windows NT 5.0 build 2195
     2   Windows NT 4.0 build 1381
     2   Windows 98 4.10 build 67766446
     2   Windows 98 4.10 build 67766222
 
     Count   Build Id List 
     73   2001101120
 
 Stack trace(Frame) 

	 JS_GetPrivate
[d:\builds\seamonkey\mozilla\js\src\jsapi.c  line 1893] 
	 nsJSContext::ExecuteScript
[d:\builds\seamonkey\mozilla\dom\src\base\nsJSEnvironment.cpp  line 790] 
	 nsXULDocument::ExecuteScript
[d:\builds\seamonkey\mozilla\content\xul\document\src\nsXULDocument.cpp  line 5870] 
	 nsXULDocument::LoadScript
[d:\builds\seamonkey\mozilla\content\xul\document\src\nsXULDocument.cpp  line 5662] 
	 nsXULDocument::ResumeWalk
[d:\builds\seamonkey\mozilla\content\xul\document\src\nsXULDocument.cpp  line 5440] 
	 nsXULDocument::OnStreamComplete
[d:\builds\seamonkey\mozilla\content\xul\document\src\nsXULDocument.cpp  line 5828] 
	 nsStreamLoader::OnStopRequest
[d:\builds\seamonkey\mozilla\netwerk\base\src\nsStreamLoader.cpp  line 138] 
	 nsJARChannel::OnStopRequest
[d:\builds\seamonkey\mozilla\netwerk\protocol\jar\src\nsJARChannel.cpp  line 614] 
	 nsOnStopRequestEvent::HandleEvent
[d:\builds\seamonkey\mozilla\netwerk\base\src\nsRequestObserverProxy.cpp  line 177] 
	 PL_HandleEvent
[d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c  line 591] 
	 PL_ProcessPendingEvents
[d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c  line 524] 
	 _md_EventReceiverProc
[d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c  line 1072] 
	 nsAppShellService::Run
[d:\builds\seamonkey\mozilla\xpfe\appshell\src\nsAppShellService.cpp  line 457] 
	 main1
[d:\builds\seamonkey\mozilla\xpfe\bootstrap\nsAppRunner.cpp  line 1305] 
	 main
[d:\builds\seamonkey\mozilla\xpfe\bootstrap\nsAppRunner.cpp  line 1622] 
	 WinMain
[d:\builds\seamonkey\mozilla\xpfe\bootstrap\nsAppRunner.cpp  line 1640] 
	 WinMainCRTStartup()  
	 KERNEL32.DLL + 0x17d08 (0x77e97d08)   
 

     (37105742)	Comments: divers sites (e.g. google.com  mozilla.org 
fishyvb.something-fishy.org)  when page-download is complete browser (and other
components of mozilla) freeze. Windows task manager shows program "not
responding". Same problem with the installer-download
     (37105742)	Comments:  version of Mozilla as with the downloaded .zip file for manual
install.
     (37094826)	Comments: Starting Mozilla
     (37033154)	Comments: starting from quicklaunch first time after booting machine. On
loading  Moz popped a dialogue of 'Error creating browser instance' but still
started the browser. Then  when selecting the 'Mail' icon in the LH corner of 
Moz it crashed.
     (37032798)	Comments: Just started Mozilla - opened messenger - crash
     (37013369)	Comments: launched mozilla -mail
     (37012225)	URL: http://www.slashdot.org
     (36999861)	URL: http://www.24orebusiness.ilsole24ore.com
     (36999861)	Comments: Two tabs opened. On the second one I had loaded the above URL.
Trying to show HTML source using "S" gesture (optimoz gestures).
     (36987433)	Comments: happened when hiding the bookmarks menu on the left side  while
listening to music with real player
     (36984678)	Comments: starting up Mozilla from QuickLaunched instance. It loaded up the
Mozilla page and then went pffft. I never got a mouseclick in it that I noticed.
     (36968061)	Comments: tried to launch e-mail client from the browser
     (36960011)	Comments: opening mail component just before connection to internet (dialup
56k) established....
     (36959029)	Comments: tried to launch a browser from a desktop shortcut  before the
quickstart icon had fully initialised & finished loading. A popup  captioned
'Alert!'  stated that there had been an error creating the browser instance. hth
     (36933732)	Comments: I tried to open the email client
     (36914542)	Comments: Switching to the mail/newsgroup task.
     (36904445)	Comments: Menu Bookmarks | Manage Bookmarks...  and boom. Not a total
lockup; the CPU appears to get a free cycle or two every 1e10 cycles or so.I
have a lot of bookmarks (file is ~550Kb)
     (36894195)	URL: zonelabs.com
     (36894195)	Comments: something to do with the way Zone Alarm created a new browser
instance caused it to crash later ... ?
     (36851172)	URL: http://freedailypixxx.com/potd.html
     (36851172)	Comments: View source
     (36825904)	URL: http://www.slashdot.org
     (36825904)	Comments: Was loading slashdot  clicked on mail icon  program crashed
     (36823989)	Comments: I was using the browser since 14.10.2001 - never a problem occured
- today I tried to start from the icon in the tasklist (not in the icon tray
beside the clock) and got an error. greetings  tom
     (36822637)	Comments: Right-clicked on quick-launch icon in the system tray  and
selected Mail & Newsgroups.
     (36811832)	Comments: Manage Bookmarks
     (36806586)	Comments: View Source
     (36805650)	URL: www.heise.de
     (36805650)	Comments: Trying to open mail client
     (36773302)	URL: google.com
     (36773302)	Comments: opened new tab from google.com
     (36731946)	URL: www.modssl.org/support
     (36731946)	Comments: Typing in email address to subscribe to modssl announce list
     (36715475)	Comments: started Mozilla from the Quick-launch-icon  tried to open the
history (CTRL-H)....crash

Comment 1

[Matthias Versen [:Matti]]

-> JS engine for the start

Comment 2

[Phil Schwartau]

As Brendan says,
"Never judge a crash by the victim frame at the top of the stack."

This does not look like a bug in JS Engine to me. Reassigning to
XP Toolkit/Widgets: XUL in case they may recognize this stack trace.
This is simply because of references I see here to nsXULDocument.cpp;
please reassign as necessary; thanks -

Comment 3

[John Morrison]

>   Count   Build Id List 
>     73   2001101120

Does that mean that all of these crashes occurred on Oct 11? Is this crashing 
in current builds? [None of the ID's listed above are current, all Oct 11].

Comment 4

[Jay Patel [:jay]]

John, that means that all of the crashes in that particular report occurred with
build 2001101120 (the final Mozilla 0.9.5 build i think) and they occurred over
the time period: 2001-10-15 to 2001-10-24.  

As Phil said, this crash is tricky...since not all of the incidents reported
under the JS_GetPrivate are the same crash.  Looking at the MozillaTrunk data
from today, I see 11 crashes with that stack signature, but not all the comments
involve the same task:

(37137395)
Comments: restarting pc
     (37008510)	URL: http://www.iclinux.com/contact/
(37008510)
Comments: i tried to view the source (crashed again)
     (37008477)	URL: http://www.iclinux.com
(37008477)
Comments: tried to view the source
     (37003281)	URL: http://www.napigator.com
(36959687)
URL: http://www.google.com
(36959687)
Comments: Mozilla crashed while displaying results from Debian's "Google Search"
Bookmark [1].Context:I had 2 windows open  one of which had several (3 or 4)
tabs open to different sites.One of the Tabs __may__ have been a previous Google Search.Steps:I
     (36959687)	Comments:  opened a new tab (Ctrl-t).I selected Debian's "Google Search"
bookmark.I entered my query.Results:The results page appeared from Google.The
Sidebar (which was minimized) appeared with the search results from
Google.Mozilla crashed.I'm not really
     (36959687)	Comments:  sure if Mozilla had completly loaded the results from Google
before it crashed.Footnotes:[1] Debian's "Google Search" bookmark is the
following JavaScript:
     (36959687)	Comments:
javascript:q=document.getSelection();for(i=0;i<frames.length;i++){q=frames[i].document.getSelection();if(q)break;}if(!q)void(q=prompt('Enter
text to search using Google. You can also highlight a word on this web page
before clicking Google
     (36959687)	Comments:  Search.'
''));if(q)location.href='http://www.google.com/search?client=googlet&q='+escape(q)
     (36926277)	Comments: Running URL's:- Chofman's Browser Buster (JS string
concatenation)- Chopman's extended site list.Browser crashes shortly after
closing JS string test.

We might need to take different comments and look at each stack trace separately
to find the different crash cases.

Comment 5

[Brendan Eich [:brendan]]

Does this look like the "hidden window safe context goes away behind xpconnect's
back" bug, or perhaps the xpintsall bug that was fixed in an ad-hoc way on the
0.9.4 branch, but not on any trunk or branch since (AFAIK)?

/be

Comment 6

[Phil Schwartau]

*** Bug 97293 has been marked as a duplicate of this bug. ***

Comment 7

[Jay Patel [:jay]]

Added [@ js_Interpret] to summary, since bug 97293 was just marked a dup.

Comment 8

[[e-mail] (gone - use [e-mail] instead)]

100% testcase (at least on Win32):

http://www.sgi.com/company_info/investors/

Click on the New York Stock Exchange logo.

Comment 9

[David Baron :dbaron: (⌚️UTC-4, no longer working on Mozilla)]

Attachment: stack showing infinite recursion with stephend's testcase

I'm seeing infinite recursion on Linux with stephend's testcase -- not a crash.
 See the attached stack for details.

Comment 10

[John Bandhauer]

Attachment: Couple rounds of the Win32 version of the stacktrace of the infinite recursion

Comment 11

[Brendan Eich [:brendan]]

jband's testcase suggests that danm could help soonest.  I don't see hyatt
implicated in the backtraces.

/be

Comment 12

[Johnny Stenback (:jst)]

Attachment: Don't supress focus in nsDocShell::SetupNewViewer() if we don't already have a content viewer

Comment 13

[Johnny Stenback (:jst)]

The attached patch fixes the crash w/o regressing bug 28580 nor bug 50509 (as
the comment in the code warns about). Someone who knows what this could possibly
regress should test this and see if it breaks, or see if there's a better way to
block this infinite recursion.

Comment 14

[Dan M]

Thanks Johnny for taking a look at this. However, this one's pretty much the
same as bug 110856, and I went with that fix.

Comment 15

[Jay Patel [:jay]]

Updating summary with M096 for future reference, since this was a topcrasher
with Mozilla 0.9.6.

Comment 16

[scottputterman]

*** Bug 113996 has been marked as a duplicate of this bug. ***

Comment 17

[Jay Patel [:jay]]

Reopening, it looks like this is back with Mozilla 0.9.7:

Count   Offset    Real Signature
[ 11   js_Interpret a0eedcc2 - js_Interpret ]
[ 3   js_Interpret bbc6d1ba - js_Interpret ]
 
     Crash date range: 2002-01-07 to 2002-01-17
     Min/Max Seconds since last crash: 27 - 474094
     Min/Max Runtime: 5046 - 2575409
     Keyword List : mail(4),  
     Count   Platform List 
     14   Windows NT 5.0 build 2195
 
     Count   Build Id List 
     14   2001122109
 
     No of Unique Users        11
 
 Stack trace(Frame) 

	 js_Interpret
[d:\builds\seamonkey\mozilla\js\src\jsinterp.c  line 1275] 
	 js_Execute
[d:\builds\seamonkey\mozilla\js\src\jsinterp.c  line 1014] 
	 JS_ExecuteScript
[d:\builds\seamonkey\mozilla\js\src\jsapi.c  line 3253] 
	 nsJSContext::ExecuteScript
[d:\builds\seamonkey\mozilla\dom\src\base\nsJSEnvironment.cpp  line 822] 
	 nsXULDocument::ExecuteScript
[d:\builds\seamonkey\mozilla\content\xul\document\src\nsXULDocument.cpp  line 6185] 
	 nsXULDocument::LoadScript
[d:\builds\seamonkey\mozilla\content\xul\document\src\nsXULDocument.cpp  line 5976] 
	 nsXULDocument::ResumeWalk
[d:\builds\seamonkey\mozilla\content\xul\document\src\nsXULDocument.cpp  line 5757] 
	 nsXULDocument::OnStreamComplete
[d:\builds\seamonkey\mozilla\content\xul\document\src\nsXULDocument.cpp  line 6143] 
	 nsStreamLoader::OnStopRequest
[d:\builds\seamonkey\mozilla\netwerk\base\src\nsStreamLoader.cpp  line 137] 
	 nsJARChannel::OnStopRequest
[d:\builds\seamonkey\mozilla\netwerk\protocol\jar\src\nsJARChannel.cpp  line 614] 
	 nsOnStopRequestEvent::HandleEvent
[d:\builds\seamonkey\mozilla\netwerk\base\src\nsRequestObserverProxy.cpp  line 213] 
	 PL_HandleEvent
[d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c  line 591] 
	 PL_ProcessPendingEvents
[d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c  line 524] 
	 _md_EventReceiverProc
[d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c  line 1072] 
	 nsAppShellService::Run
[d:\builds\seamonkey\mozilla\xpfe\appshell\src\nsAppShellService.cpp  line 303] 
	 main1
[d:\builds\seamonkey\mozilla\xpfe\bootstrap\nsAppRunner.cpp  line 1280] 
	 main
[d:\builds\seamonkey\mozilla\xpfe\bootstrap\nsAppRunner.cpp  line 1597] 
	 WinMain
[d:\builds\seamonkey\mozilla\xpfe\bootstrap\nsAppRunner.cpp  line 1615] 
	 WinMainCRTStartup()  
	 KERNEL32.DLL + 0x17d08 (0x77e97d08)   
 
     (1734842)	Comments: Opened mail while browser was open.
     (1601185)	Comments: I wanted to open a new navigator window (I had a mail window
opened + 1 navigator containing 4 tabs).
     (1532910)	Comments: crash on mail startup
     (1524154)	URL: http://www4.immobilienscout24.de/de/finden/wohnen/wohnung_miete/
     (1495056)	Comments: crashed on launching mail
     (1471735)	URL: http://www.mozilla.org/start/
     (1471735)	Comments: clicked right button and selected view source
     (1444904)	URL: www.apple.com/trailers/columbia/men_in_black_2
 
====================================================================================================
     Count   Offset    Real Signature
[ 8   js_Interpret 102deb6f - js_Interpret ]
[ 3   js_Interpret e24781a6 - js_Interpret ]
 
     Crash date range: 2002-01-07 to 2002-01-17
     Min/Max Seconds since last crash: 98 - 1057602
     Min/Max Runtime: 957 - 1057602
     Keyword List :  
     Count   Platform List 
     6   Windows NT 5.0 build 2195
     5   Windows NT 4.0 build 1381
 
     Count   Build Id List 
     11   2001122109
 
     No of Unique Users        11
 
 Stack trace(Frame) 

	 js_Interpret
[d:\builds\seamonkey\mozilla\js\src\jsinterp.c  line 1312] 
	 js_Execute
[d:\builds\seamonkey\mozilla\js\src\jsinterp.c  line 1014] 
	 JS_ExecuteScript
[d:\builds\seamonkey\mozilla\js\src\jsapi.c  line 3253] 
	 nsJSContext::ExecuteScript
[d:\builds\seamonkey\mozilla\dom\src\base\nsJSEnvironment.cpp  line 822] 
	 nsXULDocument::ExecuteScript
[d:\builds\seamonkey\mozilla\content\xul\document\src\nsXULDocument.cpp  line 6185] 
	 nsXULDocument::LoadScript
[d:\builds\seamonkey\mozilla\content\xul\document\src\nsXULDocument.cpp  line 5976] 
	 nsXULDocument::ResumeWalk
[d:\builds\seamonkey\mozilla\content\xul\document\src\nsXULDocument.cpp  line 5757] 
	 nsXULDocument::OnStreamComplete
[d:\builds\seamonkey\mozilla\content\xul\document\src\nsXULDocument.cpp  line 6143] 
	 nsStreamLoader::OnStopRequest
[d:\builds\seamonkey\mozilla\netwerk\base\src\nsStreamLoader.cpp  line 137] 
	 nsJARChannel::OnStopRequest
[d:\builds\seamonkey\mozilla\netwerk\protocol\jar\src\nsJARChannel.cpp  line 614] 
	 nsOnStopRequestEvent::HandleEvent
[d:\builds\seamonkey\mozilla\netwerk\base\src\nsRequestObserverProxy.cpp  line 213] 
	 PL_HandleEvent
[d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c  line 591] 
	 PL_ProcessPendingEvents
[d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c  line 524] 
	 _md_EventReceiverProc
[d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c  line 1072]  
 
     (1789371)	Comments: I was trying to view source of a restricted url that I cannot
provide outside non-disclosure.
     (1623365)	URL: http://freshmeat.net
     (1623365)	Comments: I were opening Messenger by clicking the symbol in Communicator
     (1454195)	URL: http://www.cnde.iastate.edu/staff/swormley/gps/gps.html
     (1454195)	Comments: had just switched the color scheme in the display control panel
     (1439595)	URL: www.phpeppershop.com/
     (1439595)	Comments: I just clicked on the link SourceForge in the navigation bar on
the left
 
====================================================================================================
     Count   Offset    Real Signature
[ 5   js_Interpret ca3ae41c - js_Interpret ]
[ 5   js_Interpret 730193e0 - js_Interpret ]
 
     Crash date range: 2002-01-07 to 2002-01-17
     Min/Max Seconds since last crash: 186 - 40007
     Min/Max Runtime: 2174 - 235569
     Keyword List :  
     Count   Platform List 
     5   Windows NT 5.0 build 2195
     5   Windows 98 4.10 build 67766446
 
     Count   Build Id List 
     10   2001122109
 
     No of Unique Users         9
 
 Stack trace(Frame) 

	 js_Interpret
[d:\builds\seamonkey\mozilla\js\src\jsinterp.c  line 1312] 
	 js_Execute
[d:\builds\seamonkey\mozilla\js\src\jsinterp.c  line 1014] 
	 JS_ExecuteScript
[d:\builds\seamonkey\mozilla\js\src\jsapi.c  line 3253] 
	 nsJSContext::ExecuteScript
[d:\builds\seamonkey\mozilla\dom\src\base\nsJSEnvironment.cpp  line 822] 
	 nsXULDocument::ExecuteScript
[d:\builds\seamonkey\mozilla\content\xul\document\src\nsXULDocument.cpp  line 6185] 
	 nsXULDocument::LoadScript
[d:\builds\seamonkey\mozilla\content\xul\document\src\nsXULDocument.cpp  line 5976] 
	 nsXULDocument::ResumeWalk
[d:\builds\seamonkey\mozilla\content\xul\document\src\nsXULDocument.cpp  line 5757] 
	 nsXULDocument::EndLoad
[d:\builds\seamonkey\mozilla\content\xul\document\src\nsXULDocument.cpp  line 1666] 
	 XULContentSinkImpl::DidBuildModel
[d:\builds\seamonkey\mozilla\content\xul\document\src\nsXULContentSink.cpp  line
536] 
	 CWellFormedDTD::DidBuildModel
[d:\builds\seamonkey\mozilla\htmlparser\src\nsWellFormedDTD.cpp  line 338] 
	 nsParser::DidBuildModel
[d:\builds\seamonkey\mozilla\htmlparser\src\nsParser.cpp  line 1388] 
	 nsParser::ResumeParse
[d:\builds\seamonkey\mozilla\htmlparser\src\nsParser.cpp  line 1905] 
	 nsParser::ContinueParsing
[d:\builds\seamonkey\mozilla\htmlparser\src\nsParser.cpp  line 1497] 
	 CSSLoaderImpl::Cleanup
[d:\builds\seamonkey\mozilla\content\html\style\src\nsCSSLoader.cpp  line 813] 
	 CSSLoaderImpl::SheetComplete
[d:\builds\seamonkey\mozilla\content\html\style\src\nsCSSLoader.cpp  line 920] 
	 CSSLoaderImpl::ParseSheet
[d:\builds\seamonkey\mozilla\content\html\style\src\nsCSSLoader.cpp  line 955] 
	 CSSLoaderImpl::DidLoadStyle
[d:\builds\seamonkey\mozilla\content\html\style\src\nsCSSLoader.cpp  line 991] 
	 SheetLoadData::OnStreamComplete
[d:\builds\seamonkey\mozilla\content\html\style\src\nsCSSLoader.cpp  line 751] 
	 nsStreamLoader::OnStopRequest
[d:\builds\seamonkey\mozilla\netwerk\base\src\nsStreamLoader.cpp  line 137] 
	 nsJARChannel::OnStopRequest
[d:\builds\seamonkey\mozilla\netwerk\protocol\jar\src\nsJARChannel.cpp  line 614] 
	 nsOnStopRequestEvent::HandleEvent
[d:\builds\seamonkey\mozilla\netwerk\base\src\nsRequestObserverProxy.cpp  line 213] 
	 PL_HandleEvent
[d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c  line 591] 
	 PL_ProcessPendingEvents
[d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c  line 524] 
	 _md_EventReceiverProc
[d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c  line 1072] 
	 nsAppShellService::Run
[d:\builds\seamonkey\mozilla\xpfe\appshell\src\nsAppShellService.cpp  line 303] 
	 main1
[d:\builds\seamonkey\mozilla\xpfe\bootstrap\nsAppRunner.cpp  line 1280] 
	 main
[d:\builds\seamonkey\mozilla\xpfe\bootstrap\nsAppRunner.cpp  line 1597] 
	 WinMain
[d:\builds\seamonkey\mozilla\xpfe\bootstrap\nsAppRunner.cpp  line 1615] 
	 WinMainCRTStartup()  
	 KERNEL32.DLL + 0x17d08 (0x77e97d08)   
 
     (1725811)	Comments: starting up
     (1607782)	Comments: i bookmarked a page from the bookmark menu and choosing the first
option (add bookmark i think)  but realised i wanted to put it on my personal
menu  so i went back to the bookmark menu and clicked "file bookmark..." i think
its called. thats when it
     (1607782)	Comments:  crashed.
     (1604200)	URL: banking.wellsfargo.com


It looks like the same crash to me by looking at the stacks...but if I'm wrong
let me know.  There are many more crashes too, but I just include the top few here.

Comment 18

[Jay Patel [:jay]]

Here's a "JS_GetPrivate" crash also from M097 data (on of many with similar
stack traces):

 Incident ID 1556900   
Stack Signature  JS_GetPrivate 25fa8682
Trigger Time 2002-01-11 23:03:58
Email Address
URL visited http://www.jpost.com
User Comments scrolled to end and then back up, using keyboard
Build ID 2001122109
Product ID MozillaBranch
Platform
Operating System Win32
Module
Trigger Reason Access violation
Stack Trace
JS_GetPrivate [d:\builds\seamonkey\mozilla\js\src\jsapi.c, line 1903]
nsJSContext::ExecuteScript
[d:\builds\seamonkey\mozilla\dom\src\base\nsJSEnvironment.cpp, line 822]
nsXULDocument::ExecuteScript
[d:\builds\seamonkey\mozilla\content\xul\document\src\nsXULDocument.cpp, line 6185]
nsXULDocument::LoadScript
[d:\builds\seamonkey\mozilla\content\xul\document\src\nsXULDocument.cpp, line 5976]
nsXULDocument::ResumeWalk
[d:\builds\seamonkey\mozilla\content\xul\document\src\nsXULDocument.cpp, line 5757]
nsXULDocument::EndLoad
[d:\builds\seamonkey\mozilla\content\xul\document\src\nsXULDocument.cpp, line 1666]
XULContentSinkImpl::DidBuildModel
[d:\builds\seamonkey\mozilla\content\xul\document\src\nsXULContentSink.cpp, line
536]
CWellFormedDTD::DidBuildModel
[d:\builds\seamonkey\mozilla\htmlparser\src\nsWellFormedDTD.cpp, line 338]
nsParser::DidBuildModel
[d:\builds\seamonkey\mozilla\htmlparser\src\nsParser.cpp, line 1388]
nsParser::ResumeParse [d:\builds\seamonkey\mozilla\htmlparser\src\nsParser.cpp,
line 1905]
nsParser::OnStopRequest
[d:\builds\seamonkey\mozilla\htmlparser\src\nsParser.cpp, line 2523]
nsDocumentOpenInfo::OnStopRequest
[d:\builds\seamonkey\mozilla\uriloader\base\nsURILoader.cpp, line 254]
nsJARChannel::OnStopRequest
[d:\builds\seamonkey\mozilla\netwerk\protocol\jar\src\nsJARChannel.cpp, line 614]
nsOnStopRequestEvent::HandleEvent
[d:\builds\seamonkey\mozilla\netwerk\base\src\nsRequestObserverProxy.cpp, line 213]
PL_HandleEvent [d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c, line 591]
PL_ProcessPendingEvents [d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c,
line 524]
_md_EventReceiverProc [d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c, line
1072] 

Comment 19

[Jay Patel [:jay]]

Updating severity to critical since this is somewhat of a regression...and it
hasn't been looked at for a while.  We also need to retarget this bug.

Comment 20

[Dan M]

  Great horny toads! I have a 0.9.7 bug?
  I see in the bug history that this bug has been a catch-all for any crash that
happened while executing script as the window finished loading. It was finally
boiled down to one instance; an infinite recursion. That's when I got the bug,
and that's the one I fixed. I'm not even certain that bug was related to the
original report, now that I read further back.
  The infinite recursion has been truly plugged, and filled with assertions
should the situation ever try to arise again. Lacking mention of those
assertions in the new stack traces, I doubt the same thing is happening.
  The crash descriptions for which this bug was reopened are all pretty much the
same as in the original report. The talkback comments name a dozen random
unrelated tasks that users were trying when some crash happened executing
script. There were probably always several bugs here.
  As I said above, I feel certain the crash this bug settled on in comments 8 -
10 hasn't even tried to reoccur, else we'd be seeing assertions. The best that
could be done here is for someone to actually find a reproducible test case.
When that happens, I'm sure it'll be a different bug. Until then, there isn't a
thing I or anyone else can do with this, so there's not much benefit to be had
leaving this bug open.

Comment 21

[Jan Carpenter]

Marking Verified.