Closed Bug 108601 Opened 23 years ago Closed 22 years ago

N621 M098 crash [@ JVM.DLL | jvm.dll - nsHTMLExternalObjSH::PostCreate]

Categories

(Core Graveyard :: Java: OJI, defect, P1)

Product:
Core Graveyard
Component:
Java: OJI
Platform:
x86
Windows NT
Type:
defect

Tracking

(Not tracked)

Status:
RESOLVED DUPLICATE of bug 90571
Milestone:
mozilla1.0

People

(Reporter: jcarpenter0524, Assigned: joe.chou)

References

Details

(Keywords: crash, testcase, topembed+)

Crash Data

Attachments

(1 file)

N621 JVM.DLL crashes
29.45 KB, text/plain
Details 
This is a topcrash for N620.
This offset/real signature has the most crashes.  Other offsets are listed below.

quant. sig + offset        Real Signature
 [ 10   JVM.DLL + 0x22d71 (0x6d442d71) 5d441165 - nsHTMLExternalObjSH::PostCreate
 [ 4    jvm.dll + 0x22d71 (0x6d442d71) 97795abd - nsHTMLExternalObjSH::PostCreate
 [ 3    jvm.dll + 0x39ca5 (0x50459ca5) 0050e79b - nsHTMLExternalObjSH::PostCreate

 Crash date range: 2001-10-31 to 2001-11-01
     Min/Max Seconds since last crash: 85 - 14217
     Min/Max Runtime: 334 - 23392
     Keyword List :  
     Count   Platform List 
     7   Windows 98 4.90 build 73010104
     4   Windows NT 4.0 build 1381
     3   Windows NT 5.0 build 2195
     2   Windows 98 4.10 build 67766446
     1   Windows 98 4.10 build 67766222
 
     Count   Build Id List 
     17   2001102218
 
     No of Unique Users        10
 
 Stack trace(Frame) 

	 JVM.DLL + 0x22d71 (0x6d442d71)  
	 JVM.DLL + 0x22b9d (0x6d442b9d)  
	 JVM.DLL + 0x23e02 (0x6d443e02)  
	 JPINS32.DLL + 0x87b0 (0x6d2e87b0)  
	 JPINS32.DLL + 0x39f8 (0x6d2e39f8)  
	 nsHTMLExternalObjSH::PostCreate
[d:\builds\seamonkey\mozilla\dom\src\base\nsDOMClassInfo.cpp  line 3986] 
	 XPCWrappedNative::GetNewOrUsed
[d:\builds\seamonkey\mozilla\js\src\xpconnect\src\xpcwrappednative.cpp  line 405] 
	 XPCConvert::NativeInterface2JSObject
[d:\builds\seamonkey\mozilla\js\src\xpconnect\src\xpcconvert.cpp  line 797] 
	 nsXPConnect::WrapNative
[d:\builds\seamonkey\mozilla\js\src\xpconnect\src\nsXPConnect.cpp  line 497] 
	 nsDOMClassInfo::WrapNative
[d:\builds\seamonkey\mozilla\dom\src\base\nsDOMClassInfo.cpp  line 753] 
	 nsHTMLDocumentSH::GetProperty
[d:\builds\seamonkey\mozilla\dom\src\base\nsDOMClassInfo.cpp  line 3666] 
	 XPC_WN_Helper_GetProperty
[d:\builds\seamonkey\mozilla\js\src\xpconnect\src\xpcwrappednativejsops.cpp 
line 781] 
	 js_GetProperty
[d:\builds\seamonkey\mozilla\js\src\jsobj.c  line 2433] 
	 js_Interpret
[d:\builds\seamonkey\mozilla\js\src\jsinterp.c  line 2559] 
	 js_Invoke
[d:\builds\seamonkey\mozilla\js\src\jsinterp.c  line 825] 
	 js_InternalInvoke
[d:\builds\seamonkey\mozilla\js\src\jsinterp.c  line 900] 
	 JS_CallFunctionValue
[d:\builds\seamonkey\mozilla\js\src\jsapi.c  line 3364] 
	 nsCLiveconnect::Call
[d:\builds\seamonkey\mozilla\js\src\liveconnect\nsCLiveconnect.cpp  line 461] 
	 JPINS32.DLL + 0xa7e2 (0x6d2ea7e2)  
	 JPINS32.DLL + 0xa56a (0x6d2ea56a)  
	 0x778b0c24   
 
     (37523825)	URL: www.dialpad.com
     (37523825)	Comments: Trying to load the page.
     (37513646)	URL: www.dialpad.com
     (37507012)	URL: http://www.dialpad.com/dialpad/login.html
     (37507012)	Comments: after java applet laid to run  i tried to close applet and log-out. 
     (37497771)	URL: www.dialpad.com
     (37494499)	URL: www.dialpad.com
     (37494499)	Comments: the dialpad applet was loading when it just froze. it was working
well all these days..
     (37450383)	Comments: Trying to load http://java.sun.com  but it seemed to go bad before
then.
 
quant. sig + offset        Real Signature
 [ 5   JVM.DLL + 0x22d71 (0x6d442d71) e92dab8e - nsHTMLExternalObjSH::PostCreate
 [ 3   jvm.dll + 0x39ca5 (0x50459ca5) ea1b8462 - nsHTMLExternalObjSH::PostCreate

     (37532518)	URL:
www.shopinvest.com.br/shopinvest/mercadofinanceiro/tendencia_InfoEmail.asp?TendD=1#top
     (37532518)	Comments: when trying to logon on the url above  my netscape informed me*the
program has performed an illegal operation...*It happens all the time with that url.
     (37522629)	Comments: I was trying to conect to a personal bank page.
     (37441126)	URL: http://www.bradesco.com.br
     (37441126)	Comments: Just after filling the form at the bottom of the page 
communicator crashes...I think it's a problem with Java.

quant. sig + offset        Real Signature
 [ 2   JVM.DLL + 0x22d71 (0x6d442d71) e068c517 - nsHTMLExternalObjSH::PostCreate
 [ 3   jvm.dll + 0x22b0a (0x6d442b0a) ef40e305 - nsHTMLExternalObjSH::PostCreate

     (37465486)	Comments: applet running polling on a servlet every 5 seconds !!!
     (37460120)	Comments: java applet polling a servlet. 100% cpu usage !!!
     (37459364)	Comments: Using a page which has a java applet polling a servlet. The
browser was using 100% of CPU. Live connect seems to be not functioning
correctly. Why is 100% CPU being used ?
     (37448316)	URL: www.latinchat.com
     (37448316)	Comments: tryin to getin to chat
 

quant. sig + offset        Real Signature
 [ 2   JVM.DLL + 0x22d71 (0x6d442d71) 9cdb0d5b - nsHTMLExternalObjSH::PostCreate
 [ 3   jvm.dll + 0x22b0a (0x6d442b0a) 20e843c4 - nsHTMLExternalObjSH::PostCreate

     (37437628)	URL: http://info.dws.de/dws/homepage.nsf/doc/home?OpenDocument
     (37437628)	Comments: Browser was loading java applet


quant. sig + offset        Real Signature
 [ 2   JVM.DLL + 0x22d71 (0x6d442d71) 61271977 - nsHTMLExternalObjSH::PostCreate
 [ 1   jvm.dll + 0x76314 (0x6d496314) 5998d2fa - 
 [ 1   jvm.dll + 0x76314 (0x6d496314) 46f2d299 - 
 [ 1   jvm.dll + 0x55b17 (0x6d475b17) b798da7c - 

     (37461381)	URL: www.realtor.com
     (37461031)	URL: www.realtor.com
     (37461031)	Comments: attempting to open a "virtual tour"

quant. sig + offset        Real Signature
 [ 2   JVM.DLL + 0x22d71 (0x6d442d71) 43dc3a48 - nsHTMLExternalObjSH::PostCreate
 [ 1   jvm.dll + 0x495ba (0x6d4695ba) ed6e0f58 - jpishare.dll + 0x234a (0x6d30234a)

 (37508050)	URL: www.bradesco.cem

quant. sig + offset        Real Signature
 [ 2   JVM.DLL + 0x22d71 (0x6d442d71) 2607444a - nsHTMLExternalObjSH::PostCreate
 [ 1   jvm.dll + 0x495ba (0x6d4695ba) 4ac5c430 - jpishare.dll + 0x234a (0x6d30234a)

     (37513125)	Comments: reading web page

quant. sig + offset        Real Signature
 [ 1   JVM.DLL + 0x92e8 (0x6d4292e8) baea66c5 - JPISHARE.DLL + 0x234a (0x6d30234a)

     (37492041)	Comments: NETSCP6 caused an exception 10H in module JVM.DLL at
0187:6d4292e8.Registers:EAX=00000014 CS=0187 EIP=6d4292e8
EFLGS=00010293EBX=00000000 SS=018f ESP=00687bcc EBP=00687bd4ECX=1803c114 DS=018f
ESI=1803bf20 FS=12e7EDX=03ef9065 ES=018f EDI=00687db0
     (37492041)	Comments:  GS=0000Bytes at CS:EIP:d9 5c 86 18 5e c9 c2 08 00 55 8b ec 51 51
8b 45 Stack dump:00687db0 00000001 00687c08 6d429679 034e5d28 00000014 00687db0
04601790 04601790 04601750 034e5444 034e5d2c 034ed438 00687cbc 04601790 00687c34 
 
quant. sig + offset        Real Signature
 [ 1   JVM.DLL + 0x92e8 (0x6d4292e8) 9e1f178e - JPISHARE.DLL + 0x234a (0x6d30234a)

quant. sig + offset        Real Signature
[ 1   JVM.DLL + 0x8d92 (0x50428d92) f12120ca - JPISHARE.DLL + 0x234a (0x5030234a)

     (37508267)	Comments: I tried to open a secure document for pc-banking.
Keywords: crash, qawanted, topcrash
Think, that Pluglets is wrong category for this bug.
Looks like OJI
Assignee: idk → joe.chou
Component: Java-Implemented Plugins → OJI
QA Contact: avm → pmac
I am seeing this with 2001112009 WinME on
http://spazioomnitel.omnitelvodafone.it. If you go there about 2:30 AM Italian
time (CET?? it is now 2:36, maybe they take it down during the night) it will
crash regularly.

I *think* the problem is this: the top frame contains an applet which starts
loading. The bottom frame contains a javascript redirect like this:

body onload="parent.location.href='closed.asp?first=false';"

When the bottom frame finishes loading the page is destroyed. Therefore the java
applet in the top frame is destroyed while the JVM is still starting up, and
boom!, a crash in JVM.DLL.

My talkback ID is TB38589643W. Maybe I'm talking through my hat, but it seems
like the same bug.
*** Bug 90395 has been marked as a duplicate of this bug. ***
changing topcrash bugs to critical
Severity: normal → critical
Keywords: mozilla1.0
Target Milestone: --- → mozilla0.9.8
Adding M096, since this has been a topcrasher for Mozilla 0.9.6 as well:

jvm.dll   34
		 90395 	 VERI 	 DUPL 	 edburns@acm.org --- 	 2001-11-27 
BBID range: 1012 - 387571
Min/Max Seconds since last crash: 108 - 444624
Min/Max Runtime: 120 - 585658
Crash data range: 2001-12-03 to 2001-12-12
Build ID range: 2001112012 to 2001112012
Keyword List : java(9), load(6), 
Stack Trace: 

	 jvm.dll + 0x4b798 (0x6d44b798)
	 jvm.dll + 0x4b638 (0x6d44b638)
	 jvm.dll + 0x2c6a8 (0x6d42c6a8)
	 jvm.dll + 0x2c436 (0x6d42c436)
	 jvm.dll + 0x2d61e (0x6d42d61e)
	 jpins32.dll + 0x7d37 (0x6d2d7d37)
	 jpins32.dll + 0x33ed (0x6d2d33ed)
	 nsHTMLExternalObjSH::PostCreate
[d:\builds\seamonkey\mozilla\dom\src\base\nsDOMClassInfo.cpp  line 4138]
	 XPCWrappedNative::GetNewOrUsed
[d:\builds\seamonkey\mozilla\js\src\xpconnect\src\xpcwrappednative.cpp  line 403]
	 XPCConvert::NativeInterface2JSObject
[d:\builds\seamonkey\mozilla\js\src\xpconnect\src\xpcconvert.cpp  line 835]
	 nsXPConnect::WrapNative
[d:\builds\seamonkey\mozilla\js\src\xpconnect\src\nsXPConnect.cpp  line 502]
	 nsDOMClassInfo::WrapNative
[d:\builds\seamonkey\mozilla\dom\src\base\nsDOMClassInfo.cpp  line 784]
	 nsArraySH::GetProperty
[d:\builds\seamonkey\mozilla\dom\src\base\nsDOMClassInfo.cpp  line 3488]
	 nsNamedArraySH::GetProperty
[d:\builds\seamonkey\mozilla\dom\src\base\nsDOMClassInfo.cpp  line 3530]
	 XPC_WN_Helper_GetProperty
[d:\builds\seamonkey\mozilla\js\src\xpconnect\src\xpcwrappednativejsops.cpp 
line 785]
	 js_GetProperty
[d:\builds\seamonkey\mozilla\js\src\jsobj.c  line 2383]
	 js_Interpret
[d:\builds\seamonkey\mozilla\js\src\jsinterp.c  line 2643]
	 js_Execute
[d:\builds\seamonkey\mozilla\js\src\jsinterp.c  line 1014]
	 JS_EvaluateUCScriptForPrincipals
[d:\builds\seamonkey\mozilla\js\src\jsapi.c  line 3380]
	 nsJSContext::EvaluateString
[d:\builds\seamonkey\mozilla\dom\src\base\nsJSEnvironment.cpp  line 654]
	 nsJSThunk::EvaluateScript
[d:\builds\seamonkey\mozilla\dom\src\jsurl\nsJSProtocolHandler.cpp  line 261]
	 nsJSChannel::AsyncOpen
[d:\builds\seamonkey\mozilla\dom\src\jsurl\nsJSProtocolHandler.cpp  line 579]
	 nsDocumentOpenInfo::Open
[d:\builds\seamonkey\mozilla\uriloader\base\nsURILoader.cpp  line 203]
	 nsURILoader::OpenURIVia
[d:\builds\seamonkey\mozilla\uriloader\base\nsURILoader.cpp  line 549]
	 nsURILoader::OpenURI
[d:\builds\seamonkey\mozilla\uriloader\base\nsURILoader.cpp  line 510]
	 nsDocShell::DoChannelLoad
[d:\builds\seamonkey\mozilla\docshell\base\nsDocShell.cpp  line 4458]
	 nsDocShell::DoURILoad
[d:\builds\seamonkey\mozilla\docshell\base\nsDocShell.cpp  line 4242]
	 nsDocShell::InternalLoad
[d:\builds\seamonkey\mozilla\docshell\base\nsDocShell.cpp  line 4056]
	 nsDocShell::LoadURI
[d:\builds\seamonkey\mozilla\docshell\base\nsDocShell.cpp  line 544]
	 LocationImpl::SetHrefWithBase
[d:\builds\seamonkey\mozilla\dom\src\base\nsLocation.cpp  line 466]
	 LocationImpl::SetHrefWithContext
[d:\builds\seamonkey\mozilla\dom\src\base\nsLocation.cpp  line 410]
	 LocationImpl::SetHref
[d:\builds\seamonkey\mozilla\dom\src\base\nsLocation.cpp  line 379]
	 nsDocumentSH::SetProperty
[d:\builds\seamonkey\mozilla\dom\src\base\nsDOMClassInfo.cpp  line 3686]
	 XPC_WN_Helper_SetProperty
[d:\builds\seamonkey\mozilla\js\src\xpconnect\src\xpcwrappednativejsops.cpp 
line 793]
	 js_SetProperty
[d:\builds\seamonkey\mozilla\js\src\jsobj.c  line 2683]
	 js_Interpret
[d:\builds\seamonkey\mozilla\js\src\jsinterp.c  line 2637]
	 js_Execute
[d:\builds\seamonkey\mozilla\js\src\jsinterp.c  line 1014]
	 JS_EvaluateUCScriptForPrincipals
[d:\builds\seamonkey\mozilla\js\src\jsapi.c  line 3380]
	 nsJSContext::EvaluateString
[d:\builds\seamonkey\mozilla\dom\src\base\nsJSEnvironment.cpp  line 654]
	 nsScriptLoader::EvaluateScript
[d:\builds\seamonkey\mozilla\content\base\src\nsScriptLoader.cpp  line 576]
	 nsScriptLoader::ProcessRequest
[d:\builds\seamonkey\mozilla\content\base\src\nsScriptLoader.cpp  line 484]
	 nsScriptLoader::ProcessScriptElement
[d:\builds\seamonkey\mozilla\content\base\src\nsScriptLoader.cpp  line 428]
	 nsHTMLScriptElement::SetDocument
[d:\builds\seamonkey\mozilla\content\html\content\src\nsHTMLScriptElement.cpp 
line 159]
	 nsGenericContainerElement::AppendChildTo
[d:\builds\seamonkey\mozilla\content\base\src\nsGenericElement.cpp  line 3724]
	 HTMLContentSink::ProcessSCRIPTTag
[d:\builds\seamonkey\mozilla\content\html\document\src\nsHTMLContentSink.cpp 
line 5126]
	 HTMLContentSink::AddLeaf
[d:\builds\seamonkey\mozilla\content\html\document\src\nsHTMLContentSink.cpp 
line 3497]
	 CNavDTD::AddLeaf
[d:\builds\seamonkey\mozilla\htmlparser\src\CNavDTD.cpp  line 3774]
	 CNavDTD::AddHeadLeaf
[d:\builds\seamonkey\mozilla\htmlparser\src\CNavDTD.cpp  line 3833]
	 CNavDTD::HandleStartToken
[d:\builds\seamonkey\mozilla\htmlparser\src\CNavDTD.cpp  line 1719]
	 CNavDTD::HandleToken
[d:\builds\seamonkey\mozilla\htmlparser\src\CNavDTD.cpp  line 895]
	 CNavDTD::BuildModel
[d:\builds\seamonkey\mozilla\htmlparser\src\CNavDTD.cpp  line 526]
	 nsParser::BuildModel
[d:\builds\seamonkey\mozilla\htmlparser\src\nsParser.cpp  line 1983]
	 nsParser::ResumeParse
[d:\builds\seamonkey\mozilla\htmlparser\src\nsParser.cpp  line 1847]
	 nsParser::OnDataAvailable
[d:\builds\seamonkey\mozilla\htmlparser\src\nsParser.cpp  line 2505]
	 nsDocumentOpenInfo::OnDataAvailable
[d:\builds\seamonkey\mozilla\uriloader\base\nsURILoader.cpp  line 260]
	 nsStreamListenerTee::OnDataAvailable
[d:\builds\seamonkey\mozilla\netwerk\base\src\nsStreamListenerTee.cpp  line 57]
	 nsHttpChannel::OnDataAvailable
[d:\builds\seamonkey\mozilla\netwerk\protocol\http\src\nsHttpChannel.cpp  line 2358]
	 nsOnDataAvailableEvent::HandleEvent
[d:\builds\seamonkey\mozilla\netwerk\base\src\nsStreamListenerProxy.cpp  line 203]
	 PL_HandleEvent
[d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c  line 591]
	 PL_ProcessPendingEvents
[d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c  line 524]
	 _md_EventReceiverProc
[d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c  line 1072]
	 nsAppShellService::Run
[d:\builds\seamonkey\mozilla\xpfe\appshell\src\nsAppShellService.cpp  line 303]
	 main1
[d:\builds\seamonkey\mozilla\xpfe\bootstrap\nsAppRunner.cpp  line 1316]
	 main
[d:\builds\seamonkey\mozilla\xpfe\bootstrap\nsAppRunner.cpp  line 1633]     (372044)	URL:
http://nuernberg.waslos.de
(369120)
URL: http://info.dws.de/dws/nav_fonds.nsf/Frameset/EKAN-4QWHWT?OpenDocument
(369120)
Comments: Just before the PRoblem occured I installed the Java Plug In. Right
before the crash I choose the link "suche".
     (338738)	Comments: I was closing browser.
     (302600)	Comments: I believe an Outlook mail web interface was attemping to run a
Java script to present a calendar.  It appears to have stalled after 10 minutes
so I terminated that browser window.  The crash occured after that.There may
have been attempts to do work in
     (302600)	Comments:  the mail client while this was going on but it locked up as well.
     (142340)	Comments: trying to backaway from a page with Java applet loading
     (127348)	Comments: opening java applet in calander
     (116702)	Comments: can't load the calander java applet
     (113772)	URL: www.hkbea-cyberbanking.com
(113772)
Comments: trying to login to my banking account
     (25241)	Comments: loading java
     (6079)	Comments: loading java applet
     (4191)	Comments: loading java applet
     (1914)	Comments: loading java applet
Summary: N620 crash [@ JVM.DLL ] → N620 M096 crash [@ JVM.DLL | jvm.dll]
Attached file N621 JVM.DLL crashes — 
Ok, this is the #5 topcrasher for Netscape 6.21 and is also a topcrasher for
Mozilla 0.9.8.	Is anyone going to look at this anytime soon?  I have attached
a bunch of stack traces and comments from N621 crashes.  Adding qawanted to see
if we can get this reproduced.
This also has the target milestone set at M098...which just went out...so
someone needs to update that also.
Summary: N620 M096 crash [@ JVM.DLL | jvm.dll] → N621 M098 crash [@ JVM.DLL | jvm.dll - nsHTMLExternalObjSH::PostCreate]
cc:ing bunch of folks
Blocks: 126532
This has been a topcrash for a while and also on E-Trade in bug 126532.

Joe, any progress?
nominating topcrash bugs for nsbeta1.
Keywords: nsbeta1
Adding testcase keyword...I think I might have found a reproducible test case. 
I have successfully crashed twice in a row on WinNT (with similar stacks) doing
the following:

1. Goto https://www.haspa.de/haspa/banking_global.nsf/inhalt/index.htm
2. Page tries to load...but can't.  Browser seems to hang.
3. Try to click on links...nothing happens.
4. Try to click back button...nothing happens.
5. Close window (or in my case the tab).
6. Crash.

Here are my last 2 incidents:
 Incident ID 3671306   
Stack Signature  jvm.dll + 0x22d71 (0x6d442d71) 03a882da
Trigger Time 2002-03-05 12:36:26
Email Address jpatel@netscape.com
URL visited https://www.haspa.de/haspa/banking_global.nsf/inhalt/index.htm
Build ID 2002022709
Product ID MozillaTrunk
Platform
Operating System Win32
Module
Trigger Reason Access violation
User Comments went to the page...clicked ok in security cert dialog...and
browser hangs. i try clicking links...nothing. try to go back...nothing. close
the tab and a few seconds later...boom!
Stack Trace
jvm.dll + 0x22d71 (0x6d442d71)
jvm.dll + 0x22b9d (0x6d442b9d)
jvm.dll + 0x23e02 (0x6d443e02)
jpins32.dll + 0x87b0 (0x6d2e87b0)
jpins32.dll + 0x39f8 (0x6d2e39f8)
nsHTMLExternalObjSH::PostCreate
[d:\builds\seamonkey\mozilla\dom\src\base\nsDOMClassInfo.cpp, line 4738]
XPCWrappedNative::GetNewOrUsed
[d:\builds\seamonkey\mozilla\js\src\xpconnect\src\xpcwrappednative.cpp, line 403]
XPCWrappedNative::GetNewOrUsed
[d:\builds\seamonkey\mozilla\js\src\xpconnect\src\xpcwrappednative.cpp, line 292]
XPCConvert::NativeInterface2JSObject
[d:\builds\seamonkey\mozilla\js\src\xpconnect\src\xpcconvert.cpp, line 1061]
nsXPConnect::WrapNative
[d:\builds\seamonkey\mozilla\js\src\xpconnect\src\nsXPConnect.cpp, line 563]
nsDOMClassInfo::WrapNative
[d:\builds\seamonkey\mozilla\dom\src\base\nsDOMClassInfo.cpp, line 968]
nsHTMLDocumentSH::GetProperty
[d:\builds\seamonkey\mozilla\dom\src\base\nsDOMClassInfo.cpp, line 4364]
XPC_WN_Helper_GetProperty
[d:\builds\seamonkey\mozilla\js\src\xpconnect\src\xpcwrappednativejsops.cpp,
line 785]
js_GetProperty [d:\builds\seamonkey\mozilla\js\src\jsobj.c, line 2494]
js_Interpret [d:\builds\seamonkey\mozilla\js\src\jsinterp.c, line 2578]
js_Execute [d:\builds\seamonkey\mozilla\js\src\jsinterp.c, line 970]
JS_EvaluateUCScriptForPrincipals [d:\builds\seamonkey\mozilla\js\src\jsapi.c,
line 3341]
nsJSContext::EvaluateString
[d:\builds\seamonkey\mozilla\dom\src\base\nsJSEnvironment.cpp, line 677]
nsScriptLoader::EvaluateScript
[d:\builds\seamonkey\mozilla\content\base\src\nsScriptLoader.cpp, line 587]
nsScriptLoader::ProcessRequest
[d:\builds\seamonkey\mozilla\content\base\src\nsScriptLoader.cpp, line 495]
nsScriptLoader::ProcessScriptElement
[d:\builds\seamonkey\mozilla\content\base\src\nsScriptLoader.cpp, line 439]
nsHTMLScriptElement::SetDocument
[d:\builds\seamonkey\mozilla\content\html\content\src\nsHTMLScriptElement.cpp,
line 159]
nsGenericHTMLContainerElement::AppendChildTo
[d:\builds\seamonkey\mozilla\content\html\content\src\nsGenericHTMLElement.cpp,
line 3926]
HTMLContentSink::ProcessSCRIPTTag
[d:\builds\seamonkey\mozilla\content\html\document\src\nsHTMLContentSink.cpp,
line 5091]
HTMLContentSink::AddLeaf
[d:\builds\seamonkey\mozilla\content\html\document\src\nsHTMLContentSink.cpp,
line 3453]
CNavDTD::AddLeaf [d:\builds\seamonkey\mozilla\htmlparser\src\CNavDTD.cpp, line 3809]
CNavDTD::HandleScriptToken
[d:\builds\seamonkey\mozilla\htmlparser\src\CNavDTD.cpp, line 2249]
CNavDTD::OpenContainer [d:\builds\seamonkey\mozilla\htmlparser\src\CNavDTD.cpp,
line 3454]
CNavDTD::HandleDefaultStartToken
[d:\builds\seamonkey\mozilla\htmlparser\src\CNavDTD.cpp, line 1320]
CNavDTD::HandleStartToken
[d:\builds\seamonkey\mozilla\htmlparser\src\CNavDTD.cpp, line 1729]
CNavDTD::HandleToken [d:\builds\seamonkey\mozilla\htmlparser\src\CNavDTD.cpp,
line 909]
CNavDTD::BuildModel [d:\builds\seamonkey\mozilla\htmlparser\src\CNavDTD.cpp,
line 530]
nsParser::BuildModel [d:\builds\seamonkey\mozilla\htmlparser\src\nsParser.cpp,
line 2011]
nsParser::ResumeParse [d:\builds\seamonkey\mozilla\htmlparser\src\nsParser.cpp,
line 1875]
nsParser::ContinueParsing
[d:\builds\seamonkey\mozilla\htmlparser\src\nsParser.cpp, line 1497]
nsParserContinueEvent::HandleEvent
[d:\builds\seamonkey\mozilla\htmlparser\src\nsParser.cpp, line 237]
PL_HandleEvent [d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c, line 591]
_md_EventReceiverProc [d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c, line
1072] 

 Incident ID 3671750   
Stack Signature  0x00000011 fb5c6934
Trigger Time 2002-03-05 12:50:33
Email Address jpatel@netscape.com
URL visited https://www.haspa.de/haspa/banking_global.nsf/inhalt/index.htm
Build ID 2002022709
Product ID MozillaTrunk
Platform
Operating System Win32
Module
Trigger Reason Access violation
User Comments site hangs the browser...closing the tab crashes it.
Stack Trace
0x00000011
jvm.dll + 0x403f8 (0x6d4603f8)
jvm.dll + 0x40295 (0x6d460295)
jvm.dll + 0x22e31 (0x6d442e31)
jvm.dll + 0x22b9d (0x6d442b9d)
jvm.dll + 0x23e02 (0x6d443e02)
jpins32.dll + 0x87b0 (0x6d2e87b0)
jpins32.dll + 0x39f8 (0x6d2e39f8)
nsHTMLExternalObjSH::PostCreate
[d:\builds\seamonkey\mozilla\dom\src\base\nsDOMClassInfo.cpp, line 4738]
XPCWrappedNative::GetNewOrUsed
[d:\builds\seamonkey\mozilla\js\src\xpconnect\src\xpcwrappednative.cpp, line 403]
XPCWrappedNative::GetNewOrUsed
[d:\builds\seamonkey\mozilla\js\src\xpconnect\src\xpcwrappednative.cpp, line 292]
XPCConvert::NativeInterface2JSObject
[d:\builds\seamonkey\mozilla\js\src\xpconnect\src\xpcconvert.cpp, line 1061]
nsXPConnect::WrapNative
[d:\builds\seamonkey\mozilla\js\src\xpconnect\src\nsXPConnect.cpp, line 563]
nsDOMClassInfo::WrapNative
[d:\builds\seamonkey\mozilla\dom\src\base\nsDOMClassInfo.cpp, line 968]
nsHTMLDocumentSH::GetProperty
[d:\builds\seamonkey\mozilla\dom\src\base\nsDOMClassInfo.cpp, line 4364]
XPC_WN_Helper_GetProperty
[d:\builds\seamonkey\mozilla\js\src\xpconnect\src\xpcwrappednativejsops.cpp,
line 785]
js_GetProperty [d:\builds\seamonkey\mozilla\js\src\jsobj.c, line 2494]
js_Interpret [d:\builds\seamonkey\mozilla\js\src\jsinterp.c, line 2578]
js_Execute [d:\builds\seamonkey\mozilla\js\src\jsinterp.c, line 970]
JS_EvaluateUCScriptForPrincipals [d:\builds\seamonkey\mozilla\js\src\jsapi.c,
line 3341]
nsJSContext::EvaluateString
[d:\builds\seamonkey\mozilla\dom\src\base\nsJSEnvironment.cpp, line 677]
nsScriptLoader::EvaluateScript
[d:\builds\seamonkey\mozilla\content\base\src\nsScriptLoader.cpp, line 587]
nsScriptLoader::ProcessRequest
[d:\builds\seamonkey\mozilla\content\base\src\nsScriptLoader.cpp, line 495]
nsScriptLoader::ProcessScriptElement
[d:\builds\seamonkey\mozilla\content\base\src\nsScriptLoader.cpp, line 439]
nsHTMLScriptElement::SetDocument
[d:\builds\seamonkey\mozilla\content\html\content\src\nsHTMLScriptElement.cpp,
line 159]
nsGenericHTMLContainerElement::AppendChildTo
[d:\builds\seamonkey\mozilla\content\html\content\src\nsGenericHTMLElement.cpp,
line 3926]
HTMLContentSink::ProcessSCRIPTTag
[d:\builds\seamonkey\mozilla\content\html\document\src\nsHTMLContentSink.cpp,
line 5091]
HTMLContentSink::AddLeaf
[d:\builds\seamonkey\mozilla\content\html\document\src\nsHTMLContentSink.cpp,
line 3453]
CNavDTD::AddLeaf [d:\builds\seamonkey\mozilla\htmlparser\src\CNavDTD.cpp, line 3809]
CNavDTD::HandleScriptToken
[d:\builds\seamonkey\mozilla\htmlparser\src\CNavDTD.cpp, line 2249]
CNavDTD::OpenContainer [d:\builds\seamonkey\mozilla\htmlparser\src\CNavDTD.cpp,
line 3454]
CNavDTD::HandleDefaultStartToken
[d:\builds\seamonkey\mozilla\htmlparser\src\CNavDTD.cpp, line 1320]
CNavDTD::HandleStartToken
[d:\builds\seamonkey\mozilla\htmlparser\src\CNavDTD.cpp, line 1729]
CNavDTD::HandleToken [d:\builds\seamonkey\mozilla\htmlparser\src\CNavDTD.cpp,
line 909]
CNavDTD::BuildModel [d:\builds\seamonkey\mozilla\htmlparser\src\CNavDTD.cpp,
line 530]
nsParser::BuildModel [d:\builds\seamonkey\mozilla\htmlparser\src\nsParser.cpp,
line 2011]
nsParser::ResumeParse [d:\builds\seamonkey\mozilla\htmlparser\src\nsParser.cpp,
line 1875]
nsParser::ContinueParsing
[d:\builds\seamonkey\mozilla\htmlparser\src\nsParser.cpp, line 1497]
nsParserContinueEvent::HandleEvent
[d:\builds\seamonkey\mozilla\htmlparser\src\nsParser.cpp, line 237]
PL_HandleEvent [d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c, line 591]
_md_EventReceiverProc [d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c, line
1072] 

Something on that site is definitely wrong...and since the Target Milestone
hasn't been set, I'm making it Mozilla 1.0.  Please change it if you need to.
Keywords: qawanted → testcase
Target Milestone: mozilla0.9.8 → mozilla1.0
*** Bug 112146 has been marked as a duplicate of this bug. ***
Jay, Following your steps in comment #11 this one WFM on W2K. Can you still 
reproduce this one on a recent Trunk build with your steps?

This is still crashing for me...same steps on WinNT build 2002030508.  

Tom: Does https://www.haspa.de/haspa/banking_global.nsf/inhalt/index.htm load
completely for you?  Do any of the links work?  

That site just seems to hang my browser...the throbber keeps going...but none of
my clicks do anything.  Even clicking the back button doesn't work.  And as soon
as I close the window or tab...boom!
Jay, I can see that link fine with 2002030606. The links at the top of the page 
work fine. The links at the left each give me a warning and then minimize the 
browser. If my german were better I could tell you what they say. I'm guessing 
it is a denial, because I am not logged in to use the site.

Still crashing on http://www.ebanking.lu (link "Démarrer web banking") with
2002030703 build. Also crashed with
https://www.haspa.de/haspa/banking_global.nsf/inhalt/index.htm testcase.
Making this a topcrash+ bug since I am able to easily reproduce this using both
cases mentioned:

1. http://www.ebanking.lu (link "Démarrer web banking") - a pop up window opens
and it's blank...i'm guessing some kind of java app is supposed to start...but
nothing happens and when i close the pop up i crash.

2. https://www.haspa.de/haspa/banking_global.nsf/inhalt/index.htm - the title
and nav bar on the left render ok, but most of the page is blank.  as soon as i
close the tab (or window) i crash.
Keywords: topcrash → topcrash+
This is probably obvious, but I don't crash when I don't have the JRE installed.
 I uninstalled both versions i had on my computer (1.3.0 and 1.3.1) and I didn't
crash.  Isn't there a new version of the JRE that is coming out? I wonder if the
latest version has any effect on this crash.
added topembed
Keywords: topembed
Yet another site that leads to this crash after you close the window (after
seeing the browser hang): http://www.highscore.de/mozilla/getwindow.html
*** Bug 126532 has been marked as a duplicate of this bug. ***
Cc'ing Boris...his comment from bug 90571:

From Boris Schaeling 2002-03-12 15:38 -------

http://www.highscore.de/mozilla/getwindow.html still crashs Mozilla 0.9.9 on 
Windows 98 and SUN JRE 1.4.0 (or Mozilla 0.9.9 hangs and I have to kill it). 
Target milestone was 0.9.9? Anything we/I can do - better testcases or anything 
else? 
I really like to see this bug fixed in Mozilla 1.0 as everything else in 
LiveConnect works great for me. 
----------------------------------------------

I crashed at that site with this stack signature also.  It looks like the latest
JRE 1.4.0 doesn't help much.  
Could someone see if this looks like the same bug.

If I turn Java off there's no crash.
If Java is on the page doesn't load and the browser freezes.

1. go to http://pbskids.org
2. Click "caillou"
No problems with http://pbskids.org/caillou/ (Mozilla 0.9.9, SUN JRE 1.4.0, 
Windows 98). 
The difference between http://www.highscore.de/mozilla/getwindow.html and 
http://pbskids.org/caillou/ is that http://pbskids.org/caillou/ doesn't call a 
java function in the onload-event-handler directly but sets a timer. After the 
timer expires (5 sec. on that page) a javascript function is called which then 
calls a java function. This seems to work without any problems. 
Cc'ing cahagn_o@epita.fr (Olivier).  He has also reproduced this crash recently.
 Here are his comments from another bug:

------- Additional Comment #10 From Olivier Cahagne 2002-03-15 08:17 -------

using build 2002031503 + JRE 1.4.0 and a fresh profile, I crash with URL
http://www.highscore.de/mozilla/getwindow.html : URL loads fine, Java applet
never loads completely (even if I stay 10 minutes on the page), Java Console
doesn't show any error, but Mozilla is unusable (I can scroll Mozilla menus,
etc. but network is out of order, no URL will load anymore), so I close Mozilla
and, then, I crash.
Talkback ID: to be submitted as soon as Talkback server is up again...
I will also try with Linux tonight.

------- Additional Comment #11 From Olivier Cahagne 2002-03-15 12:06 -------

Talkback ID: TB4077102M and TB4077114Z.

It doesn't crash Linux build 200203150 + JRE 1.4.0-b92.

==============

Note that his 2 Talkback incidents are for Windows 2000 crashes...I wonder if
this might be a Windows only issue?  Has anyone been able to crash on Linux?
Well...I still think something on http://www.highscore.de/mozilla/getwindow.html
is causing this crash.  I have been able to consistenly reproduce the same crash
(stack signature and stack trace) going to that page and waiting for the java
applet to finish (which it never does)...and closing the window (or tab).

Here is my most recent incident...the stack hasn't changed much, but i wanted to
post the stack so you can see the new line numbers:

Incident ID 4469530   
Stack Signature  jvm.dll + 0x22b0a (0x6d442b0a) a2aac061
Trigger Time 2002-03-25 17:14:10
Email Address jpatel@netscape.com
URL visited http://www.highscore.de/mozilla/getwindow.html
Build ID 2002032510
Product ID MozillaTrunk
Platform
Operating System Win32
Module
Trigger Reason Access violation
User Comments reproducing bug 108601
Stack Trace
jvm.dll + 0x22b0a (0x6d442b0a)
jvm.dll + 0x23e02 (0x6d443e02)
jpins32.dll + 0x87b0 (0x6d2e87b0)
jpins32.dll + 0x39f8 (0x6d2e39f8)
nsHTMLExternalObjSH::PostCreate
[d:\builds\seamonkey\mozilla\dom\src\base\nsDOMClassInfo.cpp, line 4932]
XPCWrappedNative::GetNewOrUsed
[d:\builds\seamonkey\mozilla\js\src\xpconnect\src\xpcwrappednative.cpp, line 402]
XPCConvert::NativeInterface2JSObject
[d:\builds\seamonkey\mozilla\js\src\xpconnect\src\xpcconvert.cpp, line 1061]
nsXPConnect::WrapNative
[d:\builds\seamonkey\mozilla\js\src\xpconnect\src\nsXPConnect.cpp, line 563]
nsDOMClassInfo::WrapNative
[d:\builds\seamonkey\mozilla\dom\src\base\nsDOMClassInfo.cpp, line 925]
nsArraySH::GetProperty
[d:\builds\seamonkey\mozilla\dom\src\base\nsDOMClassInfo.cpp, line 4160]
nsNamedArraySH::GetProperty
[d:\builds\seamonkey\mozilla\dom\src\base\nsDOMClassInfo.cpp, line 4202]
XPC_WN_Helper_GetProperty
[d:\builds\seamonkey\mozilla\js\src\xpconnect\src\xpcwrappednativejsops.cpp,
line 785]
js_GetProperty [d:\builds\seamonkey\mozilla\js\src\jsobj.c, line 2448]
js_Interpret [d:\builds\seamonkey\mozilla\js\src\jsinterp.c, line 2596]
js_Invoke [d:\builds\seamonkey\mozilla\js\src\jsinterp.c, line 806]
js_InternalInvoke [d:\builds\seamonkey\mozilla\js\src\jsinterp.c, line 881]
JS_CallFunctionValue [d:\builds\seamonkey\mozilla\js\src\jsapi.c, line 3414]
nsJSContext::CallEventHandler
[d:\builds\seamonkey\mozilla\dom\src\base\nsJSEnvironment.cpp, line 1019]
nsJSEventListener::HandleEvent
[d:\builds\seamonkey\mozilla\dom\src\events\nsJSEventListener.cpp, line 182]
nsEventListenerManager::HandleEventSubType
[d:\builds\seamonkey\mozilla\content\events\src\nsEventListenerManager.cpp, line
1218]
nsEventListenerManager::HandleEvent
[d:\builds\seamonkey\mozilla\content\events\src\nsEventListenerManager.cpp, line
1893]
GlobalWindowImpl::HandleDOMEvent
[d:\builds\seamonkey\mozilla\dom\src\base\nsGlobalWindow.cpp, line 697]
DocumentViewerImpl::LoadComplete
[d:\builds\seamonkey\mozilla\content\base\src\nsDocumentViewer.cpp, line 1343]
nsDocShell::EndPageLoad
[d:\builds\seamonkey\mozilla\docshell\base\nsDocShell.cpp, line 3794]
nsWebShell::EndPageLoad
[d:\builds\seamonkey\mozilla\docshell\base\nsWebShell.cpp, line 730]
nsDocShell::OnStateChange
[d:\builds\seamonkey\mozilla\docshell\base\nsDocShell.cpp, line 3711]
nsDocLoaderImpl::FireOnStateChange
[d:\builds\seamonkey\mozilla\uriloader\base\nsDocLoader.cpp, line 1105]
nsDocLoaderImpl::doStopDocumentLoad
[d:\builds\seamonkey\mozilla\uriloader\base\nsDocLoader.cpp, line 744]
nsDocLoaderImpl::DocLoaderIsEmpty
[d:\builds\seamonkey\mozilla\uriloader\base\nsDocLoader.cpp, line 642]
nsDocLoaderImpl::OnStopRequest
[d:\builds\seamonkey\mozilla\uriloader\base\nsDocLoader.cpp, line 573]
nsLoadGroup::RemoveRequest
[d:\builds\seamonkey\mozilla\netwerk\base\src\nsLoadGroup.cpp, line 531]
PresShell::RemoveDummyLayoutRequest
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 6631]
PresShell::ProcessReflowCommands
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 6410]
ReflowEvent::HandleEvent
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 6194]
PL_HandleEvent [d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c, line 591]
PL_ProcessPendingEvents [d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c,
line 524]
_md_EventReceiverProc [d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c, line
1072] 
topembed+ per EDT triage.
Keywords: topembed → topembed+
Browsing Bugzilla I found bug 106253 which seems to be related to this one? 
They are facing java/javascript-onload-problems, too? 

priority to P1
Priority: -- → P1
Did some looking on this one. Have couple questions:
1) Is this the same problem of going to:
   http://www.highscore.de/mozilla/getwindow.html? 
   If so, then this should be a duplicate of 90571.
2) Otherwise, if the problem is going to:
   https://www.haspa.de/haspa/banking_global.nsf/inhalt/index.htm
   then the page seems to have some problem itself. Even with IE, an alert box 
   popped up saying that ActiveX found the page not safe and blanked out the
   page's contents.
   I also tried without JRE, the page still seemed to load for ever (not hung 
   though). 

Do we know which site is the right place to reproduce the problem?
   
 
Not appearing on the topcrash reports for M099 or Trunk.  Removing topcrash+
Keywords: topcrash+
Ok, well http://www.highscore.de/mozilla/getwindow.html still crashes for me
consistently...so I'm just going to mark this a dup of 90571 per Joe's comment
#31.   We will have to move all the keywords and topcrash information over to
that bug so that this is given top priority.

*** This bug has been marked as a duplicate of 90571 ***
Status: NEW → RESOLVED
Closed: 22 years ago
Resolution: --- → DUPLICATE
Chris Petersen is a new QA contact for oji component. His email is:
petersen@netscape.com
Assignee: joe.chou → petersen
fixing small error for pmac@netscape.com (filter with : SPAMMAILSUCKS)
Assignee: petersen → joe.chou
QA Contact: pmac → petersen
Product: Core → Core Graveyard
Crash Signature: [@ JVM.DLL | jvm.dll - nsHTMLExternalObjSH::PostCreate]
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: