Closed Bug 132581 Opened 22 years ago Closed 22 years ago

Crash when closing tab with www.pike.org

Categories

(Core :: XUL, defect)

Product:
Core
Component:
XUL
Platform:
All
Linux
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED WORKSFORME

People

(Reporter: pj, Assigned: jag+mozilla)

References

(
URL
)

Details

(Keywords: crash) 

I got a crash with Mozilla 0.9.8 when closing a tab with http://www.pike.org.
The other tab open was bugzilla showing a bug. Stacktrace:

#0  0xfed1cce0 in _XFlushInt () from /usr/lib/libX11.so.4
#1  0xfed30fec in XGetGeometry () from /usr/lib/libX11.so.4
#2  0xff07c144 in gdk_window_get_geometry (window=0x53a110, x=0xffbead44,
y=0xffbead40, width=0xffbead3c, height=0xffbead38, depth=0xffbead34) at
gdkwindow.c:1350
#3  0xfdadd870 in nsDeviceContextGTK::GetRect () from
/usr/local/mozilla/dist/bin/components/libgfx_gtk.so
#4  0xfdaddab8 in nsDeviceContextGTK::GetClientRect () from
/usr/local/mozilla/dist/bin/components/libgfx_gtk.so
#5  0xfd341c6c in ScreenImpl::GetAvailWidth () from
/usr/local/mozilla/dist/bin/components/libjsdom.so
#6  0xfe984b68 in nsWindowWatcher::SizeOpenedDocShellItem () from
/usr/local/mozilla/dist/bin/components/libembedcomponents.so
#7  0xfe982884 in nsWindowWatcher::OpenWindowJS () from
/usr/local/mozilla/dist/bin/components/libembedcomponents.so
#8  0xfe981ba0 in nsWindowWatcher::OpenWindow () from
/usr/local/mozilla/dist/bin/components/libembedcomponents.so
#9  0xfd335d1c in GlobalWindowImpl::OpenInternal () from
/usr/local/mozilla/dist/bin/components/libjsdom.so
#10 0xfd3328b8 in GlobalWindowImpl::Open () from
/usr/local/mozilla/dist/bin/components/libjsdom.so
#11 0xff1bc32c in XPTC_InvokeByIndex () from
/usr/local/mozilla/dist/bin/libxpcom.so
#12 0xfde51200 in XPCWrappedNative::CallMethod () from
/usr/local/mozilla/dist/bin/components/libxpconnect.so
#13 0xfde56d10 in XPC_WN_CallMethod () from
/usr/local/mozilla/dist/bin/components/libxpconnect.so
#14 0xff2b5dd4 in js_Invoke () from /usr/local/mozilla/dist/bin/libmozjs.so
#15 0xff2bd7f8 in js_Interpret () from /usr/local/mozilla/dist/bin/libmozjs.so
#16 0xff2b5e2c in js_Invoke () from /usr/local/mozilla/dist/bin/libmozjs.so
#17 0xff2b6030 in js_InternalInvoke () from
/usr/local/mozilla/dist/bin/libmozjs.so
#18 0xff295d9c in JS_CallFunctionValue () from
/usr/local/mozilla/dist/bin/libmozjs.so
#19 0xfd327818 in nsJSContext::CallEventHandler () from
/usr/local/mozilla/dist/bin/components/libjsdom.so
#20 0xfd3552a0 in nsJSEventListener::HandleEvent () from
/usr/local/mozilla/dist/bin/components/libjsdom.so
#21 0xfd57ba70 in nsEventListenerManager::HandleEventSubType () from
/usr/local/mozilla/dist/bin/components/libgkcontent.so
#22 0xfd57d478 in nsEventListenerManager::HandleEvent () from
/usr/local/mozilla/dist/bin/components/libgkcontent.so
#23 0xfd32c208 in GlobalWindowImpl::HandleDOMEvent () from
/usr/local/mozilla/dist/bin/components/libjsdom.so
#24 0xfd6ec878 in DocumentViewerImpl::Unload () from
/usr/local/mozilla/dist/bin/components/libgkcontent.so
#25 0xfda821f8 in nsDocShell::FireUnloadNotification () from
/usr/local/mozilla/dist/bin/components/libdocshell.so
#26 0xfda878d8 in nsDocShell::Destroy () from
/usr/local/mozilla/dist/bin/components/libdocshell.so
#27 0xfda96e1c in nsWebShell::Destroy () from
/usr/local/mozilla/dist/bin/components/libdocshell.so
#28 0xfd04dffc in nsHTMLFrameInnerFrame::~nsHTMLFrameInnerFrame () from
/usr/local/mozilla/dist/bin/components/libgklayout.so
#29 0xfcff8fd0 in nsFrame::Destroy () from
/usr/local/mozilla/dist/bin/components/libgklayout.so
#30 0xfd112bdc in nsFrameList::DestroyFrames () from
/usr/local/mozilla/dist/bin/components/libgklayout.so
#31 0xfcff6ca4 in nsContainerFrame::Destroy () from
/usr/local/mozilla/dist/bin/components/libgklayout.so
#32 0xfd112d74 in nsFrameList::DestroyFrame () from
/usr/local/mozilla/dist/bin/components/libgklayout.so
#33 0xfd0e9aac in nsBoxFrame::RemoveFrame () from
/usr/local/mozilla/dist/bin/components/libgklayout.so
#34 0xfd001048 in FrameManager::RemoveFrame () from
/usr/local/mozilla/dist/bin/components/libgklayout.so
#35 0xfd08e9fc in nsCSSFrameConstructor::ContentRemoved () from
/usr/local/mozilla/dist/bin/components/libgklayout.so
#36 0xfd736280 in StyleSetImpl::ContentRemoved () from
/usr/local/mozilla/dist/bin/components/libgkcontent.so
#37 0xfd035e20 in PresShell::ContentRemoved () from
/usr/local/mozilla/dist/bin/components/libgklayout.so
#38 0xfd67d480 in nsXULDocument::ContentRemoved () from
/usr/local/mozilla/dist/bin/components/libgkcontent.so
#39 0xfd665784 in nsXULElement::RemoveChildAt () from
/usr/local/mozilla/dist/bin/components/libgkcontent.so
#40 0xfd662720 in nsXULElement::RemoveChild () from
/usr/local/mozilla/dist/bin/components/libgkcontent.so
#41 0xff1bc32c in XPTC_InvokeByIndex () from
/usr/local/mozilla/dist/bin/libxpcom.so
#42 0xfde51200 in XPCWrappedNative::CallMethod () from
/usr/local/mozilla/dist/bin/components/libxpconnect.so
#43 0xfde56d10 in XPC_WN_CallMethod () from
/usr/local/mozilla/dist/bin/components/libxpconnect.so
#44 0xff2b5dd4 in js_Invoke () from /usr/local/mozilla/dist/bin/libmozjs.so
#45 0xff2bd7f8 in js_Interpret () from /usr/local/mozilla/dist/bin/libmozjs.so
#46 0xff2b5e2c in js_Invoke () from /usr/local/mozilla/dist/bin/libmozjs.so
#47 0xff2b6030 in js_InternalInvoke () from
/usr/local/mozilla/dist/bin/libmozjs.so
#48 0xff295d9c in JS_CallFunctionValue () from
/usr/local/mozilla/dist/bin/libmozjs.so
#49 0xfd327818 in nsJSContext::CallEventHandler () from
/usr/local/mozilla/dist/bin/components/libjsdom.so
#50 0xfd3552a0 in nsJSEventListener::HandleEvent () from
/usr/local/mozilla/dist/bin/components/libjsdom.so
#51 0xfd57ba70 in nsEventListenerManager::HandleEventSubType () from
/usr/local/mozilla/dist/bin/components/libgkcontent.so
#52 0xfd57df70 in nsEventListenerManager::HandleEvent () from
/usr/local/mozilla/dist/bin/components/libgkcontent.so
#53 0xfd667fc8 in nsXULElement::HandleDOMEvent () from
/usr/local/mozilla/dist/bin/components/libgkcontent.so
#54 0xfd037500 in PresShell::HandleDOMEventWithTarget () from
/usr/local/mozilla/dist/bin/components/libgklayout.so
#55 0xfd0daca0 in nsButtonBoxFrame::MouseClicked () from
/usr/local/mozilla/dist/bin/components/libgklayout.so
#56 0xfd0da900 in nsButtonBoxFrame::HandleEvent () from
/usr/local/mozilla/dist/bin/components/libgklayout.so
#57 0xfd03740c in PresShell::HandleEventInternal () from
/usr/local/mozilla/dist/bin/components/libgklayout.so
#58 0xfd037204 in PresShell::HandleEventWithTarget () from
/usr/local/mozilla/dist/bin/components/libgklayout.so
#59 0xfd584a24 in nsEventStateManager::CheckForAndDispatchClick () from
/usr/local/mozilla/dist/bin/components/libgkcontent.so
#60 0xfd582dc8 in nsEventStateManager::PostHandleEvent () from
/usr/local/mozilla/dist/bin/components/libgkcontent.so
#61 0xfd037454 in PresShell::HandleEventInternal () from
/usr/local/mozilla/dist/bin/components/libgklayout.so
#62 0xfd037194 in PresShell::HandleEvent () from
/usr/local/mozilla/dist/bin/components/libgklayout.so
#63 0xfced90ec in nsView::HandleEvent () from
/usr/local/mozilla/dist/bin/components/libgkview.so
#64 0xfcee4408 in nsViewManager::DispatchEvent () from
/usr/local/mozilla/dist/bin/components/libgkview.so
#65 0xfced8900 in HandleEvent () from
/usr/local/mozilla/dist/bin/components/libgkview.so
#66 0xfdebb308 in nsWidget::DispatchEvent () from
/usr/local/mozilla/dist/bin/components/libwidget_gtk.so
#67 0xfdebb218 in nsWidget::DispatchWindowEvent () from
/usr/local/mozilla/dist/bin/components/libwidget_gtk.so
#68 0xfdebb3a8 in nsWidget::DispatchMouseEvent () from
/usr/local/mozilla/dist/bin/components/libwidget_gtk.so
#69 0xfdebc098 in nsWidget::OnButtonReleaseSignal () from
/usr/local/mozilla/dist/bin/components/libwidget_gtk.so
#70 0xfdebfb90 in nsWindow::HandleGDKEvent () from
/usr/local/mozilla/dist/bin/components/libwidget_gtk.so
#71 0xfdeb5370 in dispatch_superwin_event () from
/usr/local/mozilla/dist/bin/components/libwidget_gtk.so
#72 0xfdeb5098 in handle_gdk_event () from
/usr/local/mozilla/dist/bin/components/libwidget_gtk.so
#73 0xff06a5a8 in gdk_event_dispatch (source_data=0x220e80,
current_time=0xffbef450, user_data=0x0) at gdkevents.c:2139
#74 0xfee46fb0 in g_main_dispatch (current_time=0xffbef450) at gmain.c:652
#75 0xfee477c8 in g_main_iterate (block=1237248, dispatch=1) at gmain.c:870
#76 0xfee479e8 in g_main_run (loop=0x208508) at gmain.c:928
#77 0xfef49bac in gtk_main () at gtkmain.c:475
#78 0xfdeade18 in nsAppShell::Run () from
/usr/local/mozilla/dist/bin/components/libwidget_gtk.so
#79 0xfe89b49c in nsAppShellService::Run () from
/usr/local/mozilla/dist/bin/components/libnsappshell.so
#80 0x1800c in main1 ()
I can't load www.pike.org -- it times out.

Could you possibly test with a recent build?
Build from CVS about 10 minutes ago gives the same behaviour. There seems to be
a limit of how much traffic one is allowed to transfer from the site each period
(24 hours?), highly annoying. The good news is that it is reproducible - just
load http://www.pike.org which goes to
http://www.netidentity.com/default.asp?d=pike.org - load up another tab with
bugzilla and then close the pike.org tab and it will SIGBUS.

New stacktrace with debugbuild - this is from FreeBSD:

#0  0x086dab82 in ?? ()
#1  0x485ab4fc in _XFlush () from /usr/X11R6/lib/libX11.so.6
#2  0x4859722d in XGetGeometry () from /usr/X11R6/lib/libX11.so.6
#3  0x48534c0c in gdk_window_get_geometry () from /usr/X11R6/lib/libgdk12.so.2
#4  0x4970ceed in nsDeviceContextGTK::GetRect (this=0x86f5f00, 
    aRect=@0xbfbf93b4) at nsDeviceContextGTK.cpp:469
#5  0x4970d139 in nsDeviceContextGTK::GetClientRect (this=0x86f5f00, 
    aRect=@0xbfbf93b4) at nsDeviceContextGTK.cpp:496
#6  0x4988502c in ScreenImpl::GetAvailWidth (this=0x8900e80, 
    aAvailWidth=0xbfbf94fc) at nsScreen.cpp:195
#7  0x487dc6b9 in nsWindowWatcher::SizeOpenedDocShellItem (
    aDocShellItem=0x8b04804, aParent=0x86b6d04, 
    aFeatures=0x888f200
"height=1,width=1,left=10000,top=10000,location=0,menubar=0,statusbar=0,locationbar=0,scrollbars=0,resizable=0",
aChromeFlags=1030)
    at nsWindowWatcher.cpp:1467
#8  0x487d9a31 in nsWindowWatcher::OpenWindowJS (this=0x81aedc0, 
    aParent=0x86b6d04, 
    aUrl=0x86ce280
"http://nitrous.exitfuel.com/?BPROGRAM=EF1&LINKIN=netid&REF=http://www.netidentity.com/default.asp?d=pike.org",
aName=0x86c8450 "ef", 
    aFeatures=0x888f180
"height=1,width=1,left=10000,top=10000,location=0,menubar=0,statusbar=0,locationbar=0,scrollbars=0,resizable=0",
aDialog=0, argc=0, 
    argv=0x0, _retval=0xbfbf9ba8) at nsWindowWatcher.cpp:697
#9  0x487d7b36 in nsWindowWatcher::OpenWindow (this=0x81aedc0, 
    aParent=0x86b6d04, 
    aUrl=0x86ce280
"http://nitrous.exitfuel.com/?BPROGRAM=EF1&LINKIN=netid&REF=http://www.netidentity.com/default.asp?d=pike.org",
aName=0x86c8450 "ef", 
    aFeatures=0x888f180
"height=1,width=1,left=10000,top=10000,location=0,menubar=0,statusbar=0,locationbar=0,scrollbars=0,resizable=0",
aArguments=0x0, 
    _retval=0xbfbf9ba8) at nsWindowWatcher.cpp:451
#10 0x4987255c in GlobalWindowImpl::OpenInternal (this=0x86b6d00, 
    aUrl=@0xbfbf9d6c, aName=@0xbfbf9cdc, aOptions=@0xbfbf9c4c, aDialog=0, 
    argv=0x0, argc=0, aExtraArgument=0x0, aReturn=0xbfbfa0a0)
    at nsGlobalWindow.cpp:3869
#11 0x4986c14d in GlobalWindowImpl::Open (this=0x86b6d00, _retval=0xbfbfa0a0)
    at nsGlobalWindow.cpp:2687
#12 0x482f6fdc in XPTC_InvokeByIndex (that=0x86b6d08, methodIndex=13, 
    paramCount=1, params=0xbfbfa0a0) at xptcinvoke_unixish_x86.cpp:153
#13 0x48900465 in XPCWrappedNative::CallMethod (ccx=@0xbfbfa158, 
    mode=CALL_METHOD) at xpcwrappednative.cpp:2025
#14 0x489096ae in XPC_WN_CallMethod (cx=0x86b8400, obj=0x84ebeb8, argc=3, 
    argv=0x88700c0, vp=0xbfbfa28c) at xpcwrappednativejsops.cpp:1266
#15 0x4817507e in js_Invoke (cx=0x86b8400, argc=3, flags=0) at jsinterp.c:788
#16 0x481842fe in js_Interpret (cx=0x86b8400, result=0xbfbfac68)
    at jsinterp.c:2745
#17 0x481750fc in js_Invoke (cx=0x86b8400, argc=1, flags=2) at jsinterp.c:805
#18 0x48175473 in js_InternalInvoke (cx=0x86b8400, obj=0x84ebeb8, 
    fval=139374160, flags=0, argc=1, argv=0xbfbfb14c, rval=0xbfbfae30)
    at jsinterp.c:880
#19 0x48143d11 in JS_CallFunctionValue (cx=0x86b8400, obj=0x84ebeb8, 
    fval=139374160, argc=1, argv=0xbfbfb14c, rval=0xbfbfae30) at jsapi.c:3412
#20 0x4985a274 in nsJSContext::CallEventHandler (this=0x86cde00, 
    aTarget=0x84ebeb8, aHandler=0x84eae50, argc=1, argv=0xbfbfb14c, 
    aBoolResult=0xbfbfaf6c, aReverseReturnResult=0) at nsJSEnvironment.cpp:1015
#21 0x498a62bb in nsJSEventListener::HandleEvent (this=0x87070e0, 
    aEvent=0x8814c88) at nsJSEventListener.cpp:180
#22 0x48f76d09 in nsEventListenerManager::HandleEventSubType (this=0x883aac0, 
    aListenerStruct=0x8851e40, aDOMEvent=0x8814c88, aCurrentTarget=0x86b6d10, 
    aSubType=2, aPhaseFlags=7) at nsEventListenerManager.cpp:1217
#23 0x48f799c4 in nsEventListenerManager::HandleEvent (this=0x883aac0, 
    aPresContext=0x8782000, aEvent=0xbfbfb8dc, aDOMEvent=0xbfbfb878, 
    aCurrentTarget=0x86b6d10, aFlags=7, aEventStatus=0xbfbfb904)
    at nsEventListenerManager.cpp:1890
#24 0x49861969 in GlobalWindowImpl::HandleDOMEvent (this=0x86b6d00, 
    aPresContext=0x8782000, aEvent=0xbfbfb8dc, aDOMEvent=0xbfbfb878, aFlags=1, 
    aEventStatus=0xbfbfb904) at nsGlobalWindow.cpp:696
#25 0x491dbcb0 in DocumentViewerImpl::Unload (this=0x87e2d00)
    at nsDocumentViewer.cpp:1354
#26 0x49798d6a in nsDocShell::FireUnloadNotification (this=0x8666200)
    at nsDocShell.cpp:746
#27 0x497a2a13 in nsDocShell::Destroy (this=0x8666200) at nsDocShell.cpp:2591
#28 0x497bd579 in nsWebShell::Destroy (this=0x8666200) at nsWebShell.cpp:1246
#29 0x49c91d68 in nsHTMLFrameInnerFrame::~nsHTMLFrameInnerFrame (
    this=0x86cfaf8, __in_chrg=3) at nsFrameFrame.cpp:673
#30 0x49bfcb7f in nsFrame::Destroy (this=0x86cfaf8, aPresContext=0x8330400)
    at nsFrame.cpp:466
#31 0x49dd5582 in nsFrameList::DestroyFrames (this=0x86cfaec, 
    aPresContext=0x8330400) at nsFrameList.cpp:130
#32 0x49bf82bb in nsContainerFrame::Destroy (this=0x86cfab8, 
    aPresContext=0x8330400) at nsContainerFrame.cpp:138
#33 0x49dd58dd in nsFrameList::DestroyFrame (this=0x86cf9b0, 
    aPresContext=0x8330400, aFrame=0x86cfab8) at nsFrameList.cpp:217
#34 0x49d94b88 in nsBoxFrame::RemoveFrame (this=0x86cf97c, 
    aPresContext=0x8330400, aPresShell=@0x8330c00, aListName=0x0, 
    aOldFrame=0x86cfab8) at nsBoxFrame.cpp:1293
#35 0x49c0f529 in FrameManager::RemoveFrame (this=0x82a7b80, 
    aPresContext=0x8330400, aPresShell=@0x8330c00, aParentFrame=0x86cf97c, 
    aListName=0x0, aOldFrame=0x86cfab8) at nsFrameManager.cpp:970
#36 0x49cf8792 in nsCSSFrameConstructor::ContentRemoved (this=0x833b600, 
    aPresContext=0x8330400, aContainer=0x869df80, aChild=0x869dfc0, 
    aIndexInContainer=0, aInContentReplaced=0)
    at nsCSSFrameConstructor.cpp:9810
#37 0x4925f149 in StyleSetImpl::ContentRemoved (this=0x82a7800,    
aPresContext=0x8330400, aContainer=0x869df80, aChild=0x869dfc0, 
    aIndexInContainer=0) at nsStyleSet.cpp:1471
#38 0x49c67281 in PresShell::ContentRemoved (this=0x8330c00, 
    aDocument=0x8242800, aContainer=0x869df80, aChild=0x869dfc0, 
    aIndexInContainer=0) at nsPresShell.cpp:5208
#39 0x491253db in nsXULDocument::ContentRemoved (this=0x8242800, 
    aContainer=0x869df80, aChild=0x869dfc0, aIndexInContainer=0)
    at nsXULDocument.cpp:2200
#40 0x490ffa13 in nsXULElement::RemoveChildAt (this=0x869df80, aIndex=0, 
    aNotify=1) at nsXULElement.cpp:2440
#41 0x490f9dfd in nsXULElement::RemoveChild (this=0x869df80, 
    aOldChild=0x869dfc4, aReturn=0xbfbfc90c) at nsXULElement.cpp:1129
#42 0x482f6fdc in XPTC_InvokeByIndex (that=0x869df84, methodIndex=17, 
    paramCount=2, params=0xbfbfc8fc) at xptcinvoke_unixish_x86.cpp:153
#43 0x48900465 in XPCWrappedNative::CallMethod (ccx=@0xbfbfc9b4, 
    mode=CALL_METHOD) at xpcwrappednative.cpp:2025
#44 0x489096ae in XPC_WN_CallMethod (cx=0x8282200, obj=0x83ee030, argc=1, 
    argv=0x886d14c, vp=0xbfbfcae8) at xpcwrappednativejsops.cpp:1266
#45 0x4817507e in js_Invoke (cx=0x8282200, argc=1, flags=0) at jsinterp.c:788
#46 0x481842fe in js_Interpret (cx=0x8282200, result=0xbfbfd4c4)
    at jsinterp.c:2745
#47 0x481750fc in js_Invoke (cx=0x8282200, argc=1, flags=2) at jsinterp.c:805
#48 0x48175473 in js_InternalInvoke (cx=0x8282200, obj=0x84ea538, 
    fval=143140296, flags=0, argc=1, argv=0xbfbfd9a8, rval=0xbfbfd68c)
    at jsinterp.c:880
#49 0x48143d11 in JS_CallFunctionValue (cx=0x8282200, obj=0x84ea538, 
    fval=143140296, argc=1, argv=0xbfbfd9a8, rval=0xbfbfd68c) at jsapi.c:3412
#50 0x4985a274 in nsJSContext::CallEventHandler (this=0x8104e80, 
    aTarget=0x84ea538, aHandler=0x88825c8, argc=1, argv=0xbfbfd9a8, 
    aBoolResult=0xbfbfd7c8, aReverseReturnResult=0) at nsJSEnvironment.cpp:1015
#51 0x498a62bb in nsJSEventListener::HandleEvent (this=0x866db20, 
    aEvent=0x8894b88) at nsJSEventListener.cpp:180
#52 0x48f76d09 in nsEventListenerManager::HandleEventSubType (this=0x86c9400, 
    aListenerStruct=0x86c81d0, aDOMEvent=0x8894b88, aCurrentTarget=0x86c9148, 
    aSubType=8, aPhaseFlags=7) at nsEventListenerManager.cpp:1217
#53 0x48f7ad94 in nsEventListenerManager::HandleEvent (this=0x86c9400, 
    aPresContext=0x8330400, aEvent=0xbfbfe88c, aDOMEvent=0xbfbfe6ec, 
    aCurrentTarget=0x86c9148, aFlags=7, aEventStatus=0xbfbfe884)
    at nsEventListenerManager.cpp:2207
#54 0x491051bc in nsXULElement::HandleDOMEvent (this=0x86c9140, 
    aPresContext=0x8330400, aEvent=0xbfbfe88c, aDOMEvent=0xbfbfe6ec, aFlags=1, 
    aEventStatus=0xbfbfe884) at nsXULElement.cpp:3456
#55 0x49c6a372 in PresShell::HandleDOMEventWithTarget (this=0x8330c00, 
    aTargetContent=0x86c9140, aEvent=0xbfbfe88c, aStatus=0xbfbfe884)
    at nsPresShell.cpp:6102
#56 0x49d7ca6b in nsButtonBoxFrame::MouseClicked (this=0x86cf4f0, 
    aPresContext=0x8330400, aEvent=0xbfbfebc4) at nsButtonBoxFrame.cpp:194
#57 0x49d7c3e3 in nsButtonBoxFrame::HandleEvent (this=0x86cf4f0, 
    aPresContext=0x8330400, aEvent=0xbfbfebc4, aEventStatus=0xbfbff100)
    at nsButtonBoxFrame.cpp:138
#58 0x49c6a192 in PresShell::HandleEventInternal (this=0x8330c00, 
    aEvent=0xbfbfebc4, aView=0x0, aFlags=1, aStatus=0xbfbff100)
    at nsPresShell.cpp:6070
#59 0x49c69e0a in PresShell::HandleEventWithTarget (this=0x8330c00, 
    aEvent=0xbfbfebc4, aFrame=0x86cf4f0, aContent=0x86c9140, aFlags=1, 
    aStatus=0xbfbff100) at nsPresShell.cpp:6024
#60 0x48f884b0 in nsEventStateManager::CheckForAndDispatchClick (
    this=0x82fd800, aPresContext=0x8330400, aEvent=0xbfbff438, 
    aStatus=0xbfbff100) at nsEventStateManager.cpp:2602
#61 0x48f85108 in nsEventStateManager::PostHandleEvent (this=0x82fd800, 
    aPresContext=0x8330400, aEvent=0xbfbff438, aTargetFrame=0x86cf4f0, 
    aStatus=0xbfbff100, aView=0x82a7780) at nsEventStateManager.cpp:1684
#62 0x49c6a205 in PresShell::HandleEventInternal (this=0x8330c00, 
    aEvent=0xbfbff438, aView=0x82a7780, aFlags=1, aStatus=0xbfbff100)
    at nsPresShell.cpp:6075
#63 0x49c69a61 in PresShell::HandleEvent (this=0x8330c00, aView=0x82a7780, 
    aEvent=0xbfbff438, aEventStatus=0xbfbff100, aForceHandle=1, 
    aHandled=@0xbfbff098) at nsPresShell.cpp:5978
#64 0x4a018f17 in nsViewManager::HandleEvent (this=0x8329d00, aView=0x82a7780, 
    aEvent=0xbfbff438, aCaptured=1) at nsViewManager.cpp:2062
#65 0x4a0092dd in nsView::HandleEvent (this=0x82a7780, aVM=0x8329d00, 
    aEvent=0xbfbff438, aCaptured=1) at nsView.cpp:305
#66 0x4a0185c1 in nsViewManager::DispatchEvent (this=0x8329d00, 
    aEvent=0xbfbff438, aStatus=0xbfbff28c) at nsViewManager.cpp:1870
#67 0x4a00898e in HandleEvent (aEvent=0xbfbff438) at nsView.cpp:80
#68 0x49609170 in nsWidget::DispatchEvent (this=0x8325400, aEvent=0xbfbff438, 
    aStatus=@0xbfbff37c) at nsWidget.cpp:1483
#69 0x49608d01 in nsWidget::DispatchWindowEvent (this=0x8325400, 
    event=0xbfbff438) at nsWidget.cpp:1371
#70 0x49609267 in nsWidget::DispatchMouseEvent (this=0x8325400, 
    aEvent=@0xbfbff438) at nsWidget.cpp:1510
#71 0x4960a95a in nsWidget::OnButtonReleaseSignal (this=0x8325400, 
    aGdkButtonEvent=0x82a4018) at nsWidget.cpp:2072
#72 0x49610d3e in nsWindow::HandleGDKEvent (this=0x8325400, event=0x82a4018)
    at nsWindow.cpp:1590
#73 0x496001f0 in dispatch_superwin_event (event=0x82a4018, window=0x8325400)
    at nsGtkEventHandler.cpp:944
#74 0x495ffdc4 in handle_gdk_event (event=0x82a4018, data=0x0)
    at nsGtkEventHandler.cpp:810
#75 0x4852587c in gdk_event_dispatch () from /usr/X11R6/lib/libgdk12.so.2
#76 0x48553cf3 in g_main_dispatch () from /usr/local/lib/libglib12.so.3
#77 0x4855431c in g_main_iterate () from /usr/local/lib/libglib12.so.3
#78 0x485544b4 in g_main_run () from /usr/local/lib/libglib12.so.3
#79 0x48474813 in gtk_main () from /usr/X11R6/lib/libgtk12.so.2
#80 0x495f57a9 in nsAppShell::Run (this=0x8172b90) at nsAppShell.cpp:364
#81 0x49584cfd in nsAppShellService::Run (this=0x812bb00)
    at nsAppShellService.cpp:308
#82 0x0805c2fc in main1 (argc=2, argv=0xbfbffae4, nativeApp=0x0)
    at nsAppRunner.cpp:1350
#83 0x0805d191 in main (argc=2, argv=0xbfbffae4) at nsAppRunner.cpp:1698
#84 0x08056cd1 in _start ()
URL: http://www.pike.org → http://www.netidentity.com/default.as...
Keywords: crash
Ok, confirmed on Linux.  Make sure that you have "allow pages to open
unrequested windows" _enabled_ in scripts & windows prefs to reproduce

Setting OS to Linux because it's more likely to get attention this way... :(
Severity: normal → critical
Status: UNCONFIRMED → NEW
Ever confirmed: true
OS: Solaris → Linux
Hardware: Sun → All
can anybody reproduce it now? I can not reproduce it now, I am using mozilla1.0

and this bug is very similar with http://bugzilla.mozilla.org/show_bug.cgi?id=148309

there is also difficulity to reproduce bug 148309: even the bug reporter and the
patch author can not reproduce it now, anyway, there is a patch for bug 148309,
checking the validaty of the pointer before use it.
Jay,
I think maybe this bug is similar to
http://dtsw.eng.sun.com/cgi-bin/bugtraq_showbug?bugid=4708122
for the Stacktrace is the same.
 
yes, I saw 2 bugs which are crash while closing tab, but it seems there is
difficulity to reproduce.
As people have pointed out this is no longer reproducible. The crash was not
hard to reproduce when I filed this report so I'm closing it with WFM since it
has stopped to occur.
Status: NEW → RESOLVED
Closed: 22 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.