131203 - crash switching to bookmarks sidebar tab

Status: VERIFIED WORKSFORME

(SeaMonkey :: Sidebar, defect)

Description

[Tracy Walker [:tracy]]

seen on commercial builds:

windows 2002-03-15-05-trunk
linux 2002-03-15-06-trunk

this isn't reproducable 100% of the time. but these steps seem to 'cause it most 
often

-close the sidebar with the grippy
-enter a search subject in the URL field
-click search (search result appear in browser window and sidebar pops open with 
search tab)
-click on the bookmarks tab

crash! (often)

Comment 1

[Tracy Walker [:tracy]]

talkback for windows crash:

                 Incident ID 4072017
 Stack Signature
                 JS_GetPrivate 5c7874c4
 Trigger Time
                 2002-03-15 08:43:47
 Email Address
                 [e-mail]
 URL visited
 Build ID
                 2002031505
 Product ID
                 MozillaTrunk
 Platform
 Operating System
                 Win32
 Module
 Trigger Reason
                 Access violation
 User Comments
                  crash switching to bookmarks tab in sidebar 
 Stack Trace

JS_GetPrivate [d:\builds\seamonkey\mozilla\js\src\jsapi.c, line 1913] 
nsJSContext::ExecuteScript 
[d:\builds\seamonkey\mozilla\dom\src\base\nsJSEnvironment.cpp, line 824] 
nsXULDocument::ExecuteScript 
[d:\builds\seamonkey\mozilla\content\xul\document\src\nsXULDocument.cpp, line 
6196] 
nsXULDocument::LoadScript 
[d:\builds\seamonkey\mozilla\content\xul\document\src\nsXULDocument.cpp, line 
5988] 
nsXULDocument::ResumeWalk 
[d:\builds\seamonkey\mozilla\content\xul\document\src\nsXULDocument.cpp, line 
5767] 
nsXULDocument::EndLoad 
[d:\builds\seamonkey\mozilla\content\xul\document\src\nsXULDocument.cpp, line 
1671] 
XULContentSinkImpl::DidBuildModel 
[d:\builds\seamonkey\mozilla\content\xul\document\src\nsXULContentSink.cpp, line 
537] 
nsExpatDriver::DidBuildModel 
[d:\builds\seamonkey\mozilla\htmlparser\src\nsExpatDriver.cpp, line 881] 
nsParser::DidBuildModel 
[d:\builds\seamonkey\mozilla\htmlparser\src\nsParser.cpp, line 1391] 
nsParser::ResumeParse [d:\builds\seamonkey\mozilla\htmlparser\src\nsParser.cpp, 
line 1930] 
nsParser::OnStopRequest 
[d:\builds\seamonkey\mozilla\htmlparser\src\nsParser.cpp, line 2548] 
nsJARChannel::OnStopRequest 
[d:\builds\seamonkey\mozilla\netwerk\protocol\jar\src\nsJARChannel.cpp, line 
602] 
nsOnStopRequestEvent::HandleEvent 
[d:\builds\seamonkey\mozilla\netwerk\base\src\nsRequestObserverProxy.cpp, line 
213] 
PL_HandleEvent [d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c, line 591] 
PL_ProcessPendingEvents [d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c, 
line 524] 
_md_EventReceiverProc [d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c, line 
1072] 
KERNEL32.DLL + 0x24407 (0xbff94407) 
0x00688c16 



talkback for linux crash:

                                      Incident ID 4072008
 Stack Signature
                 JS_GetPrivate() c3a9a34e
 Trigger Time
                 2002-03-15 07:39:05
 Email Address
                 [e-mail]
 URL visited
 Build ID
                 2002031506
 Product ID
                 MozillaTrunk
 Platform
 Operating System
                 LinuxIntel
 Module
 Trigger Reason
                 SIGSEGV: Segmentation Fault: (signal 11)
 User Comments
                  had just finished a url bar search and was switching sidebar 
tab to bookmarks when the app crashed 
 Stack Trace

JS_GetPrivate() 
nsJSContext::ExecuteScript() 
nsXULDocument::ExecuteScript() 
nsXULDocument::LoadScript() 
nsXULDocument::ResumeWalk() 
nsXULDocument::EndLoad() 
XULContentSinkImpl::DidBuildModel() 
nsExpatDriver::DidBuildModel() 
nsParser::DidBuildModel() 
nsParser::ResumeParse() 
nsParser::OnStopRequest() 
nsJARChannel::OnStopRequest() 
nsOnStopRequestEvent::HandleEvent() 
nsARequestObserverEvent::HandlePLEvent() 
PL_HandleEvent() 
PL_ProcessPendingEvents() 
nsEventQueueImpl::ProcessPendingEvents() 
event_processor_callback() 
our_gdk_io_invoke() 
libglib-1.2.so.0 + 0xe52a (0x4036852a) 
libglib-1.2.so.0 + 0xfbe6 (0x40369be6) 
libglib-1.2.so.0 + 0x101a1 (0x4036a1a1) 
libglib-1.2.so.0 + 0x10341 (0x4036a341) 
libgtk-1.2.so.0 + 0x8c209 (0x40291209) 
nsAppShell::Run() 
nsAppShellService::Run() 
netscape-bin + 0x84a9 (0x080504a9) 
netscape-bin + 0x8cf7 (0x08050cf7) 
libc.so.6 + 0x181eb (0x404691eb) 

Comment 2

[David Baron :dbaron: (⌚️UTC-5, no longer working on Mozilla)]

Hrm.  If this is reproducable reliably it would be a good way to debug bug 128273.

Comment 3

[Samir Gehani]

Crashing in the JS engine.  Punt back if this looks like the front-end is
misbehaving.  

Comment 4

[Mike Shaver (:shaver emeritus)]

Back atcha.  Crashing with only JS_GetPrivate on the stack isn't going to be a
JS engine bug: we're being called with bogus input (mis-rooted object?), dollars
to donuts.

Probably not a Sidebar bug, but it's not a JS Engine issue.

Comment 5

[Aleksey Nogin]

See also bug 131247 - "Crash when switching to bookmarks tab in sidebar
[nsXULOutlinerBuilder::GetTemplateActionCellFor]". There the crash is 100%
reproducible and happens in nsXULOutlinerBuilder::GetTemplateActionCellFor, not
in JS. I suspect that it's caused by the bug 128815 check-in.

Comment 6

[sujay]

*** Bug 131247 has been marked as a duplicate of this bug. ***

Comment 7

[Aleksey Nogin]

I am not sure bug 131247 is really a dup, but here is some information from it:

Reproducible: always.
To reproduce:

0) Make sure sidebar has both "search" and "bookmarks" tabs and "bookmarks" is
active.
1) To to Bugzilla query page and query for something.
-> Bugzilla displays the bug list and sidebar automagically switches to the
search tab
2) Click on the bookmarks tab in sidebar.

Expected: you get bookmarks tab displayed.
Actual: crash :-(

With BuildID 2002031319 on RedHat Linux 7.2 (+ all updates) gdb says:

(gdb) bt
#0  0x40df2353 in nsXULOutlinerBuilder::GetTemplateActionCellFor ()
   from /usr/lib/mozilla/components/libgkcontent.so
#1  0x40deff89 in nsXULOutlinerBuilder::GetCellProperties () from
/usr/lib/mozilla/components/libgkcontent.so
#2  0x41a366ed in nsOutlinerBodyFrame::PaintCell () from
/usr/lib/mozilla/components/libgklayout.so
#3  0x41a365e6 in nsOutlinerBodyFrame::PaintRow () from
/usr/lib/mozilla/components/libgklayout.so
#4  0x41a35b54 in nsOutlinerBodyFrame::Paint () from
/usr/lib/mozilla/components/libgklayout.so
#5  0x41933606 in PresShell::Paint () from
/usr/lib/mozilla/components/libgklayout.so
#6  0x41ab8e6d in nsView::Paint () from /usr/lib/mozilla/components/libgkview.so
#7  0x41ac15c8 in nsViewManager::RenderDisplayListElement () from
/usr/lib/mozilla/components/libgkview.so
#8  0x41ac1433 in nsViewManager::RenderViews () from
/usr/lib/mozilla/components/libgkview.so
#9  0x41ac037e in nsViewManager::Refresh () from
/usr/lib/mozilla/components/libgkview.so
#10 0x41ac284b in nsViewManager::DispatchEvent () from
/usr/lib/mozilla/components/libgkview.so
#11 0x41ab89f1 in HandleEvent () from /usr/lib/mozilla/components/libgkview.so
#12 0x411a71d2 in nsWidget::DispatchEvent () from
/usr/lib/mozilla/components/libwidget_gtk.so
#13 0x411a70f2 in nsWidget::DispatchWindowEvent () from
/usr/lib/mozilla/components/libwidget_gtk.so
#14 0x411aa224 in nsWindow::DoPaint () from
/usr/lib/mozilla/components/libwidget_gtk.so
#15 0x411aa335 in nsWindow::Update () from
/usr/lib/mozilla/components/libwidget_gtk.so
#16 0x411aa49d in nsWindow::Update () from
/usr/lib/mozilla/components/libwidget_gtk.so
#17 0x411aa0ba in nsWindow::UpdateIdle () from
/usr/lib/mozilla/components/libwidget_gtk.so
#18 0x4039d79d in g_idle_dispatch () from /usr/lib/libglib-1.2.so.0
#19 0x4039c773 in g_main_dispatch () from /usr/lib/libglib-1.2.so.0
#20 0x4039cd39 in g_main_iterate () from /usr/lib/libglib-1.2.so.0
#21 0x4039ceec in g_main_run () from /usr/lib/libglib-1.2.so.0
#22 0x402b7333 in gtk_main () from /usr/lib/libgtk-1.2.so.0
#23 0x4119aae6 in nsAppShell::Run () from
/usr/lib/mozilla/components/libwidget_gtk.so
#24 0x4117a9de in nsAppShellService::Run () from
/usr/lib/mozilla/components/libnsappshell.so
#25 0x08051e61 in DoCommandLines ()
#26 0x080527ab in main ()
#27 0x404fa627 in __libc_start_main (main=0x8052660 <main>, argc=1,
ubp_av=0xbfffe964,
    init=0x804c9fc <_init>, fini=0x8053e1c <_fini>, rtld_fini=0x4000dcc4
<_dl_fini>, stack_end=0xbfffe95c)
    at ../sysdeps/generic/libc-start.c:129

This seems to be a very recent regression - could this be caused by the recent
check-in
to nsXULOutlinerBuilder.cpp?

revision 1.45
date: 2002/03/12 22:45:05;  author: ben%netscape.com;  state: Exp;  lines: +73 -58
Fix for 128815 - numerous bookmarks improvements, including fixes for bugs:
77411, 114142, 126748, 128571.
- update outliner builder to expose "Sort" method publicly.
r=blake, sr=hyatt, a=asa

P.S. Sorry, no talkback due to bug 86068

Comment 8

[Aleksey Nogin]

Is this bug still there? I can no longer reproduce it with BuildId 2002031607...

Comment 9

[Tracy Walker [:tracy]]

this is working as seen on commercial trunk builds:

windows 2002-03-18-05-trunk
linux 2002-03-18-06-trunk
mac os9 2002-03-18-03-trunk

Comment 10

[sujay]

verified.