121591 - This URL crashes Mozilla (nightly build as of 2002-Jan-24

Status: VERIFIED WORKSFORME

(Core :: Layout, defect, P1)

Description

[lars]

Mozilla crashes immediately after selecting the above URL (and before anything
is displayed).

If the above URL doesn't work (it looks as if there may be some kind of
per-session information embedded in it), try the following:

http://jobs.boston.com/texis/js?view=2&lookid=boston&q=unix+analyst&qMatch=all&qField=Title&qInd=&qLoc=ma&qMiles=&qcompid=&qSort=date&Search.x=64&Search.y=14

That ought to bring up a single result, which is the job listing that is
crashing Mozilla on my system.

Comment 1

[Karl Johan Kleist]

Reporter: Please always use severity level "critical" for crashes.

Comment 2

[Ludovic Hirlimann]

True with w2k 2002012304. Reporter change OS => ALL.
Talk back does not seem to work Will post talkback ID when I'll get the ID.

Comment 3

[Karl Johan Kleist]

Build ID: 2002 01 23 04. Windows 2000.

I can reproduce the crash. An incident is queued, but "talkback.netscape.com"
seems to be down...

Comment 4

[Ludovic Hirlimann]

Talkback ID is TB2053931Y.

Comment 5

[NilsE]

Confirming on Linux, marking NEW, OS=ALL as per comments, severity critical.
From gdb backtrace it looks like XPCOM. Reassigning. Backtrace follows.

Comment 6

[NilsE]

Attachment: gdb backtrace on RH 7.1, CVS build 2002-01-24, 0700 UTC

Comment 7

[Karl Johan Kleist]

The Incident ID of my crash: TB2053407Z

Comment 8

[Ludovic Hirlimann]

Attachment: Stack trace for MacOSX

Also crashes on macosX. Platform should be => ALL.

Comment 9

[Matthias Versen [:Matti]]

-> Default owner (also crashing on win2k)

Could be layout related because of the nsCSSFrameConstructor stuff and this 
assertitions before the crash:

###!!! ASSERTION: frame was not removed from primary frame map before destructio
n or was readded to map after being removed: '!PL_DHASH_ENTRY_IS_BUSY(entry) ||
entry->frame != aFrame', file D:\moz_source\normal\mozilla\layout\html\base\src\
nsFrameManager.cpp, line 1003

CC dbaron (is this bug layout related ?)

Comment 10

[Ludovic Hirlimann]

Matti can you cahnge Platform to all ?

Comment 11

[Doug Turner (:dougt)]

I would first have the client of xpcom take a look at this... html frames?

Comment 12

[David Baron :dbaron: (⌚️UTC-4, no longer working on Mozilla)]

->Layout

Comment 13

[Kevin McCluskey (gone)]

Marking nsbeta1+

Comment 14

[Chris Petersen]

Changing to P1.

Comment 15

[Chris Petersen]

Attachment: Nested table containing additional HTML and FORM tags

The basice structure of this test case is the following:

HTML-- > TABLE --> FONT --> HTML --> TABLE --> TABLE --> FORM

Comment 16

[Chris Petersen]

Adding testcase

Comment 17

[Marc Attinasi]

Attachment: Further reduced testcase: appears to be a problem with a HEAD inside of a <SPAN> and a button in the mix somewhere too ;)

Comment 18

[Marc Attinasi]

Looking at this, I do not think it is all that critical.  Sure, it crashes, but
the markup is very bad and very specific - I do not think it is the most serious
crasher we have.  I wanted to look at it because I have seen that assertion more
than I'd like - I'll downgrade to a P2 for now only because I have other more
common crashers to look at, and hopefully I can get back to this one in the
current  milestone.

Comment 19

[Marc Attinasi]

BTW: this is a regerssion, Netscape 6.2.1 works fine :)

Comment 20

[Marc Attinasi]

How did this get marked fixed? Sheesh, reopening...

Comment 21

[Kevin McCluskey (gone)]

Marking nsbeta1- based on Marc's comment "markup is very bad and very specific"

Comment 22

[Marc Attinasi]

Moving out to 1.0.1 for nsbeta1- 

Comment 23

[Marc Attinasi]

Moving Mozilla 1.01 bugs to 'future' milestone with priority P1

I will be pulling bugs from 'future' milestones when scheduling later work.

Comment 24

[karnaze (gone)]

I'm not crashing on a win2k debug build. wfm.

Comment 25

[Chris Petersen]

Verified WFM in the April 23rd build OS X(2002-04-23-08) and Windows ME
(2002-04-23-06).

Comment 26

[Jesse Ruderman]

Crashtest added as part of http://hg.mozilla.org/mozilla-central/rev/54417ebbaea2