Closed Bug 129739 Opened 22 years ago Closed 22 years ago

This URL makes Mozilla lock up permanently

Categories

(Core :: DOM: HTML Parser, defect)

Product:
Core
Component:
DOM: HTML Parser
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
VERIFIED DUPLICATE of bug 121841

People

(Reporter: mmcdouga, Assigned: asa)

References

(
URL
)

Details

(Keywords: hang) 

From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:0.9.8+) Gecko/20020222
BuildID:    2002022208

Opening this URL causes all of Mozilla (in my case, all browser and mail
windows) to stop responding. The only way to get out of this state is to kill
the Mozilla process. It looks like an infinite loop.

Reproducible: Always
Steps to Reproduce:
1. Go to http://www.cs.rpi.edu/~puninj/LOGML/logml.dtd



Actual Results:  The application freezes - status bar and icon stop changing.
The windows   will not repaint or respond to any input.

Expected Results:  Ideally, display the contents of the URL.
At the very least the error should be isolated in a single window.

I'm also seeing this on Windows on build 2002020406. I suspect it applies to all
platforms.

The URL points to a DTD so the problem is probably occuring when the browser
tries to parse the DTD as HTML. 

This is a dataloss bug. I lost an email I was composing.
confirming with win2k build 20020308..

I'll try to get a stack trace later
Status: UNCONFIRMED → NEW
Ever confirmed: true
Keywords: hang
OS: Linux → All
Hardware: PC → All
fixed my dumb typo in the summary
Summary: This URL make Mozilla lock up permanently → This URL makes Mozilla lock up permanently
I get 100+ assertions:

###!!! ASSERTION: |copy_string| will never terminate: 'count_copied > 0', file .
.\..\dist\include\string\nsAlgorithm.h, line 91
###!!! ASSERTION: You can't |write| into an |nsWritingIterator| with no space!:
'size_forward() > 0', file ..\..\dist\include\string\nsStringIterator.h, line 35
6

stack trace from the first assertion:
NTDLL! 778a018c()
nsDebug::Assertion(const char * 0x101295c0 `string', const char * 0x10129600 
`string', const char * 0x10129488 `string', int 356) line 291 + 13 bytes
nsWritingIterator<unsigned short>::write(const unsigned short * 0x038e8950, 
unsigned int 20) line 356 + 37 bytes
nsCharSinkTraits<nsWritingIterator<unsigned short> 
>::write(nsWritingIterator<unsigned short> & {...}, const unsigned short * 
0x038e8950, unsigned int 20) line 559
copy_string(nsReadingIterator<unsigned short> & {...}, const 
nsReadingIterator<unsigned short> & {...}, nsWritingIterator<unsigned short> & 
{...}) line 90 + 39 bytes
nsAString::do_AppendFromReadable(const nsAString & {...}) line 362 + 55 bytes
nsAString::AppendFromReadable(const nsAString & {...}) line 329
nsAString::Append(const nsAString & {...}) line 282 + 19 bytes
nsAutoString::nsAutoString(const nsAString & {...}) line 1230
nsCommentNode::SetText(nsCommentNode * const 0x038e93d0, const nsAString & 
{...}, int 0) line 246
nsGenericDOMDataNode::AppendData(const nsAString & {...}) line 508 + 50 bytes
nsCommentNode::AppendData(nsCommentNode * const 0x038e93ec, const nsAString & 
{...}) line 60 + 18 bytes
SinkContext::AddComment(const nsIParserNode & {...}) line 1958
HTMLContentSink::AddComment(HTMLContentSink * const 0x03550600, const 
nsIParserNode & {...}) line 3483 + 18 bytes
CNavDTD::HandleCommentToken(CToken * 0x038d2308) line 2204 + 34 bytes
CNavDTD::HandleToken(CNavDTD * const 0x038cadf8, CToken * 0x038d2308, nsIParser 
* 0x03550440) line 903 + 12 bytes
CNavDTD::BuildModel(CNavDTD * const 0x038cadf8, nsIParser * 0x03550440, 
nsITokenizer * 0x038ea290, nsITokenObserver * 0x00000000, nsIContentSink * 
0x03550600) line 521 + 20 bytes
CNavDTD::DidBuildModel(CNavDTD * const 0x038cadf8, unsigned int 0, int 1, 
nsIParser * 0x03550440, nsIContentSink * 0x03550600) line 577 + 32 bytes
nsParser::DidBuildModel(unsigned int 0) line 1388 + 41 bytes
nsParser::ResumeParse(int 1, int 1, int 1) line 1930
nsParser::OnStopRequest(nsParser * const 0x03550444, nsIRequest * 0x03884af0, 
nsISupports * 0x00000000, unsigned int 0) line 2540 + 21 bytes
nsDocumentOpenInfo::OnStopRequest(nsDocumentOpenInfo * const 0x03885338, 
nsIRequest * 0x03884af0, nsISupports * 0x00000000, unsigned int 0) line 254
nsStreamListenerTee::OnStopRequest(nsStreamListenerTee * const 0x038e8658, 
nsIRequest * 0x03884af0, nsISupports * 0x00000000, unsigned int 0) line 25
nsHttpChannel::OnStopRequest(nsHttpChannel * const 0x03884af4, nsIRequest * 
0x038c9b5c, nsISupports * 0x00000000, unsigned int 0) line 2544
nsOnStopRequestEvent::HandleEvent() line 213
nsARequestObserverEvent::HandlePLEvent(PLEvent * 0x038d152c) line 116
PL_HandleEvent(PLEvent * 0x038d152c) line 590 + 10 bytes
PL_ProcessPendingEvents(PLEventQueue * 0x01055170) line 520 + 9 bytes
_md_EventReceiverProc(HWND__ * 0x000500dc, unsigned int 49369, unsigned int 0, 
long 17125744) line 1071 + 9 bytes
USER32! 77e02e98()
USER32! 77e030e0()
USER32! 77e05824()
nsAppShellService::Run(nsAppShellService * const 0x015552f8) line 309
main1(int 2, char * * 0x00304fa0, nsISupports * 0x00000000) line 1350 + 32 bytes
main(int 2, char * * 0x00304fa0) line 1698 + 37 bytes
mainCRTStartup() line 338 + 17 bytes
KERNEL32! 77e87d08()

and this is a dupe of bug 121841

*** This bug has been marked as a duplicate of 121841 ***
Status: NEW → RESOLVED
Closed: 22 years ago
Component: Browser-General → Parser
Resolution: --- → DUPLICATE
Verify duplicate
Status: RESOLVED → VERIFIED
You need to log in before you can comment on or make changes to this bug.