Closed Bug 10703 Opened 25 years ago Closed 25 years ago

Crash loading XML File

Categories

(Core :: XML, defect, P1)

Product:
Core
Component:
XML
Platform:
x86
Windows NT
Type:
defect

Tracking

()

Status:
VERIFIED DUPLICATE of bug 10456

People

(Reporter: harishd, Assigned: rpotts)

References

Details

Attachments

(1 file)

bug10703.xml
1.60 KB, text/xml
Details 
Test case:
----------------------

<?xml version="1.0"?>
<?xml-stylesheet type="text/css"
href="http://www.fas.harvard.edu/~dbaron/dom/test/one-core-xml/ProcessingInstruc
tion_style" ?>
<?xml-stylesheet type="text/css"
href="http://www.fas.harvard.edu/~dbaron/dom/test/one-core-xml/ProcessingInstruc
tion_style2" ?>
<?xml-stylesheet type='text/css'
href='http://www.fas.harvard.edu/~dbaron/dom/test/base.css' ?>
<?xml-stylesheet type="text/css"
href="http://www.fas.harvard.edu/~dbaron/dom/test/basexml.css" ?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
"http://www.w3.org/TR/xhtml1/DTD/strict.dtd">

<!-- The contents of this file are subject to the Netscape Public
License Version 1.1 (the "License"); you may not use this file
except in compliance with the License. You may obtain a copy of
the License at http://www.mozilla.org/NPL/

Software distributed under the License is distributed on an "AS
IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
implied. See the License for the specific language governing
rights and limitations under the License.

The Initial Developer of the Original Code is Netscape
Communications Corporation. Portions created by Netscape are
Copyright (C) 1998-1999 Netscape Communications Corporation. All
Rights Reserved.

Contributor(s): ______________________________________. -->

<html xmlns="http://www.w3.org/TR/REC-html40" lang="en-US">
<head>
<title>DOM Test Suite: Interface ProcessingInstruction</title>
<script type="text/javascript"><![CDATA[

        this_is_an_error();

]]></script>
</head>
<body>

Intentionally left nearly blank.

</body></html>

Stack Trace:
---------------
nsDebug::Assertion(char * 0x01cfd7a4, char * 0x01cfd72c, char * 0x01cfd6f0, int
486) line 176 + 13 bytes
nsGenericHTMLElement::SetAttribute(int 2, nsIAtom * 0x021ad570, const nsString &
{"preserve"}, int 0) line 486 + 44 bytes
nsHTMLScriptElement::SetAttribute(nsHTMLScriptElement * const 0x021ad3bc, int 2,
nsIAtom * 0x021ad570, const nsString & {"preserve"}, int 0) line 76 + 30 bytes
nsXMLContentSink::AddAttributes(const nsIParserNode & {...}, nsIContent *
0x021ad3bc, int 1) line 571
nsXMLContentSink::OpenContainer(nsXMLContentSink * const 0x02162f80, const
nsIParserNode & {...}) line 719 + 20 bytes
CWellFormedDTD::HandleToken(CWellFormedDTD * const 0x02154120, CToken *
0x011a6f50, nsIParser * 0x01482d80) line 530 + 22 bytes
CWellFormedDTD::BuildModel(CWellFormedDTD * const 0x02154120, nsIParser *
0x01482d80, nsITokenizer * 0x0105d830, nsITokenObserver * 0x00000000,
nsIContentSink * 0x02162f80) line 253 + 20 bytes
nsParser::BuildModel() line 940 + 34 bytes
nsParser::ResumeParse(nsIDTD * 0x00000000, int 0) line 885 + 11 bytes
nsParser::EnableParser(int 1) line 619 + 15 bytes
CSSLoaderImpl::Cleanup(URLKey & {...}, SheetLoadData * 0x0212b810) line 640
CSSLoaderImpl::SheetComplete(nsICSSStyleSheet * 0x00000000, SheetLoadData *
0x0212b810) line 716
CSSLoaderImpl::ParseSheet(nsIUnicharInputStream * 0x02163cf0, SheetLoadData *
0x0212b810, int & 1, nsICSSStyleSheet * & 0x021639c0) line 751
CSSLoaderImpl::DidLoadStyle(nsIUnicharStreamLoader * 0x0212b8b0, nsString & {"/*
This entire file *may* be a hack */

div#output p {
	display: block; /* XXX
Work around Mozilla XML ?Bug? */
	}

[class="pa"}, SheetLoadData *
0x0212b810, unsigned int 0) line 784 + 24 bytes
DoneLoadingStyle(nsIUnicharStreamLoader * 0x0212b8b0, nsString & {"/* This
entire file *may* be a hack */

div#output p {
	display: block; /* XXX Work
around Mozilla XML ?Bug? */
	}

[class="pa"}, void * 0x0212b810, unsigned int
0) line 588
nsUnicharStreamLoader::OnStopRequest(nsUnicharStreamLoader * const 0x0212b8b4,
nsIURI * 0x0212b120, unsigned int 0, unsigned short * 0x0211b4c0) line 156 + 31
bytes
nsDocumentBindInfo::OnStopRequest(nsDocumentBindInfo * const 0x0212bb90, nsIURI
* 0x0212b120, unsigned int 0, unsigned short * 0x0211b4c0) line 2149 + 30 bytes
OnStopRequestProxyEvent::HandleEvent(OnStopRequestProxyEvent * const 0x0211b470)
line 593 + 45 bytes
StreamListenerProxyEvent::HandlePLEvent(PLEvent * 0x0211b474) line 473 + 12
bytes
PL_HandleEvent(PLEvent * 0x0211b474) line 509 + 10 bytes
PL_ProcessPendingEvents(PLEventQueue * 0x00f78470) line 470 + 9 bytes
_md_EventReceiverProc(void * 0x014e09f4, unsigned int 49313, unsigned int 0,
long 16221296) line 932 + 9 bytes
USER32! 77e71250()
--------------------------------------------------------------------------

FYI: Checked with jul 26th build
Status: NEW → ASSIGNED
Summary: Crash..on loading xml file.. → Crash on loading xml file...
Target Milestone: M9
Setting milestone to M9 and accepting bug...
Blocks: 10593
Attached file bug10703.xml — 

    
  
Assignee: nisheeth → warren
Severity: normal → critical
Status: ASSIGNED → NEW
Priority: P3 → P1
Summary: Crash on loading xml file... → Assert in nsHTTPChannel::OpenInputStream()

    
    

    
  
I've created an attachment for the test case that Harish copied to this bug
report.  I'm not making it to the crash site that Harish posted.  Instead I end
up with an error condition in Necko that asserts with the following call stack:

NTDLL! 77f76148()
nsDebug::Error(char * 0x0a510d28, char * 0x0a510cf0, int 168) line 204 + 13
bytes
nsHTTPChannel::OpenInputStream(nsHTTPChannel * const 0x014e15c0, unsigned int 0,
int -1, nsIInputStream * * 0x0012fbc4) line 168 + 21 bytes
NS_OpenURI(nsIInputStream * * 0x0012fc60, nsIURI * 0x014e1e80) line 79 + 20
bytes
nsExpatTokenizer::OpenInputStream(const nsString & {...}, const nsString &
{...}, nsIInputStream * * 0x0012fc60, nsString * 0x0012fc88) line 558 + 13 bytes
nsExpatTokenizer::HandleExternalEntityRef(void * 0x0a116b88, char * 0x00000000,
char * 0x0a118f38, char * 0x0a118ff2, char * 0x0a118fb0) line 630 + 21 bytes
doProlog(void * 0x0a116b88, const encoding * 0x004d3878, char * 0x0a11838c, char
* 0x0a118bae, int 17, char * 0x0a11838e, char * * 0x0012fd88) line 2248 + 36
bytes
prologProcessor(void * 0x0a116b88, char * 0x0a117ee8, char * 0x0a118bae, char *
* 0x0012fd88) line 2132 + 36 bytes
prologInitProcessor(void * 0x0a116b88, char * 0x0a117ee8, char * 0x0a118bae,
char * * 0x0012fd88) line 2121 + 21 bytes
XML_Parse(void * 0x0a116b88, char * 0x0a117ee8, int 3270, int 0) line 852 + 40
bytes
nsExpatTokenizer::ParseXMLBuffer(char * 0x0a117ee8, unsigned int 3270, int 0)
line 286 + 24 bytes
nsExpatTokenizer::ConsumeToken(nsScanner & {...}) line 329 + 18 bytes
nsParser::Tokenize(int 0) line 1264 + 21 bytes
nsParser::ResumeParse(nsIDTD * 0x00000000, int 0) line 885 + 12 bytes
nsParser::OnDataAvailable(nsParser * const 0x0a107d8c, nsIChannel * 0x013bec40,
nsISupports * 0x00000000, nsIInputStream * 0x013c2ee0, unsigned int 0, unsigned
int 1635) line 1168 + 19 bytes
nsDocumentBindInfo::OnDataAvailable(nsDocumentBindInfo * const 0x013b9cd0,
nsIChannel * 0x013bec40, nsISupports * 0x00000000, nsIInputStream * 0x013c2ee0,
unsigned int 0, unsigned int 1635) line 2046 + 32 bytes
nsOnDataAvailableEvent::HandleEvent(nsOnDataAvailableEvent * const 0x013b9520)
line 350
nsStreamListenerEvent::HandlePLEvent(PLEvent * 0x013b9524) line 149 + 12 bytes
PL_HandleEvent(PLEvent * 0x013b9524) line 509 + 10 bytes
PL_ProcessPendingEvents(PLEventQueue * 0x0134ca70) line 470 + 9 bytes
_md_EventReceiverProc(void * 0x01ee0450, unsigned int 49382, unsigned int 0,
long 20236912) line 932 + 9 bytes
USER32! 77e71250()

nsHTTPChannel::OpenInputStream() is finding that m_pResponse is null and it
doesn't like that.

I'm assigning this bug to warren and ccing gagan, rpotts.  I'll track this bug
and work on fixing the original crash after this error is fixed.

    
  
Status: NEW → RESOLVED
Closed: 25 years ago
Resolution: --- → DUPLICATE

    
    

    
  
Known duplicate of 10790. Same problem- calling OnStopRequest without an
OnStartRequest. Marking duplicate.

*** This bug has been marked as a duplicate of 10790 ***

    
  
Status: RESOLVED → REOPENED

    
  
Resolution: DUPLICATE → ---

    
  
Assignee: warren → nisheeth
Status: REOPENED → NEW

    
    

    
  
I need to keep this bug open so that I can fix the original problem once bug
10790 is resolved.  I'm reopening this bug, assigning it to myself, and marking
it dependent on 10790.

    
  
Status: NEW → ASSIGNED
Depends on: 10790

    
  
Summary: Assert in nsHTTPChannel::OpenInputStream() → Crash loading XML File
Whiteboard: Blocked on 10790

    
  
Assignee: nisheeth → rpotts
Status: ASSIGNED → NEW
Whiteboard: Blocked on 10790

    
    

    
  
Rick, it seems that bug 10790's fix did not fix the crash
in nsHTTPChannel::OpenInputStream().  I just ran a fresh build on NT, loaded up
the attached XML file and crashed.  I'm assigning this bug to you for further
investigation.  Once this crash is resolved, I'll work on fixing the earlier
crash reported by Harish.

    
    

    
  
*** Bug 11832 has been marked as a duplicate of this bug. ***

    
  
Status: NEW → RESOLVED
Closed: 25 years ago → 25 years ago
Resolution: --- → DUPLICATE

    
    

    
  
It looks like the *real* problem is that HTTP channel does not implement
OpenImputStream(...) yet.

I'm marking this bug a dup of bug #10456...

*** This bug has been marked as a duplicate of 10456 ***

    
  
Status: RESOLVED → VERIFIED

    
    

    
  
Cool, ain't fixing that til M10. Marking Verified/Dup

          You need to log in
          before you can comment on or make changes to this bug.
        






  

    
  







  

    

      
Attachment

      

      
      
      
      
    

    

      

        

          

            
General

            

              Creator: 



            

            
Created: 

            
Updated: 

            
Size: