112736 - crash when browsing folders on own computer

Status: RESOLVED DUPLICATE of bug 112265

(Core :: XUL, defect)

Description

[R.B.]

From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:0.9.6+) Gecko/20011129
BuildID:    2001112908

Go to file:///, change directory by doubleclicking on folder icons. After a
while the browser crashes. Seems to occur even faster if opening folder adn
doubleclicking several levels down. Recent builds are more likely to crash,
20011118 is somewhat more stable, 0.9.5 seems not to be affected.

Reproducible: Sometimes
Steps to Reproduce:
1.open file:///
2.open some dirs several levels deep
3.doubleclick on a folder icon. crash

Actual Results:  crash

Expected Results:  change directory

Talkback ID TB38689067X

Comment 1

[[e-mail] (gone - use [e-mail] instead)]

Stack Signature  nsTreeLayout::LazyRowCreator() 4ca202f4
Bug ID
Trigger Time 2001-11-29 17:25:35
Email Address [e-mail]
URL visited file:///
User Comments Open file:///, open some directories by clicking on folder icons,
change directory by doubleclicking. crash
Build ID 2001112908
Product ID MozillaTrunk
Platform
Operating System LinuxIntel
Module
Trigger Reason SIGSEGV: Segmentation Fault: (signal 11)
Stack Trace
nsTreeLayout::LazyRowCreator()
nsTreeLayout::LazyRowCreator()
nsTreeLayout::LazyRowCreator()
nsTreeLayout::LazyRowCreator()
nsTreeLayout::LazyRowCreator()
nsTreeLayout::LazyRowCreator()
nsTreeLayout::LazyRowCreator()
nsTreeLayout::LazyRowCreator()
nsTreeLayout::LazyRowCreator()
nsTreeLayout::LazyRowCreator()
nsTreeLayout::LazyRowCreator()
nsTreeLayout::LazyRowCreator()
nsTreeLayout::LazyRowCreator()
nsTreeLayout::LazyRowCreator()
nsTreeLayout::LazyRowCreator()
nsTreeLayout::LazyRowCreator()
nsXULTreeOuterGroupFrame::ReflowFinished()
PresShell::HandlePostedReflowCallbacks()
PresShell::ProcessReflowCommands()
HandlePLEvent()
PL_HandleEvent()
PL_ProcessEventsBeforeID()
processQueue()
nsVoidArray::EnumerateForwards()
nsAppShell::ProcessBeforeID()
handle_gdk_event()
libgdk-1.2.so.0 + 0x16df7 (0x4032cdf7)
libglib-1.2.so.0 + 0x102d9 (0x4035c2d9)
libglib-1.2.so.0 + 0x108e3 (0x4035c8e3)
libglib-1.2.so.0 + 0x10a7c (0x4035ca7c)
libgtk-1.2.so.0 + 0x8dd97 (0x4027fd97)
nsAppShell::Run()
nsAppShellService::Run()
main1()
main()
libc.so.6 + 0x18a42 (0x40459a42) 

Comment 2

[Jakub Klawiter]

I want to confirm the BUG under Win98SE, Mozilla 0.9.6+ (2001112803)
The Talkback from CRASH: TB38706865K & TB38706924Y

it crashes nearly allways (depending how much time you have to test ;-)

To reproduce:
1. Open in browser file:///c:/ or drag&drop the folder from the desktop
2. expand some folders (using the small icon on the left of the foldername)
3. dbl-click the folder
4. Send Talkback or Try to expand and open some more folders ;-)

BTW if you browse thru folders the only possibility to go up you have to use the
Back button... it's not fair ;-)

Comment 3

[Asa Dotzler [:asa]]

nsTreeLayout::LazyRowCreator
[d:\builds\seamonkey\mozilla\layout\xul\base\src\nsTreeLayout.cpp, line 404]
nsTreeLayout::LazyRowCreator
[d:\builds\seamonkey\mozilla\layout\xul\base\src\nsTreeLayout.cpp, line 389]
nsXULTreeOuterGroupFrame::ReflowFinished
[d:\builds\seamonkey\mozilla\layout\xul\base\src\nsXULTreeOuterGroupFrame.cpp,
line 1358]
PresShell::HandlePostedReflowCallbacks
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 4959]
PresShell::ProcessReflowCommands
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 6189]
ReflowEvent::HandleEvent
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5969]
PL_HandleEvent [d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c, line 591]
PL_ProcessPendingEvents [d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c,
line 524]
_md_EventReceiverProc [d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c, line
1072]
KERNEL32.DLL + 0x24407 (0xbff94407)
0x00688bfe 

Comment 4

[John Morrison]

tree code will be changing soon.

Comment 5

[Chase Tingley]

duping forward (sorry) based on stack trace.  i've got a patch on the other bug.

*** This bug has been marked as a duplicate of 112265 ***