Clicking player profile link crashes browser [@ PlaceFrameView]

RESOLVED WORKSFORME

Status

()

P2
critical
RESOLVED WORKSFORME
17 years ago
7 years ago

People

(Reporter: rweiler, Unassigned)

Tracking

({crash})

Trunk
Future
x86
All
crash
Points:
---
Bug Flags:
in-testsuite -

Firefox Tracking Flags

(Not tracked)

Details

(crash signature, URL)

(Reporter)

Description

17 years ago
From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:0.9.9) Gecko/20020310
BuildID:    2002031008

The www.realgm.com web site provides, among other things, player
profiles for NBA players.Attempting to access these profiles using
Mozilla 9.9 results in a crash. I only tried the Warriors link, and while the
Warriors are truly terrible, I suspect that it would crash for any team.

Reproducible: Always
Steps to Reproduce:
1.NAvigate to www.realgm.com
2.Select Player Profles on the left margin
3.Select Golden State Warriors
4. Select a player link = Crash!

Actual Results:  The browser crashed

Expected Results:  I suspect it should have displayed a page about that player.

www.realgm uses Java applets, so that might be part of the problem.
confirming with win2k build 20020327..

I get assertions:
WARNING: NS_ENSURE_TRUE(aContent) failed, file D:\moz_source\normal\mozilla\layo
ut\html\base\src\nsFrameManager.cpp, line 607
###!!! ASSERTION: nsGenericElement not thread-safe: 'owningThread == NS_CurrentT
hread()', file D:\moz_source\normal\mozilla\xpcom\glue\nsDebug.cpp, line 528
For * found plugin D:\moz_source\normal\mozilla\dist\WIN32_D.OBJ\bin\plugins\npn
ul32.dll
###!!! ASSERTION: nsGenericElement not thread-safe: 'own


(note: the last assertions is incomplete because Mozilla crashed)

and after that a crash:
PlaceFrameView(nsIPresContext * 0x0532c3e0, nsIFrame * 0x00000000) line 2784 + 
11 bytes
nsBlockFrame::PostPlaceLine(nsBlockReflowState & {...}, nsLineBox * 0x05381f14, 
const nsSize & {...}) line 4319 + 16 bytes
nsBlockFrame::PlaceLine(nsBlockReflowState & {...}, nsLineLayout & {...}, 
nsLineList_iterator {...}, int * 0x00128824, int 0) line 4191
nsBlockFrame::DoReflowInlineFrames(nsBlockReflowState & {...}, nsLineLayout & 
{...}, nsLineList_iterator {...}, int * 0x00128824, unsigned char * 0x001285e8, 
int 0, int 0) line 3648 + 32 bytes
nsBlockFrame::DoReflowInlineFramesAuto(nsBlockReflowState & {...}, 
nsLineList_iterator {...}, int * 0x00128824, unsigned char * 0x001285e8, int 0, 
int 0) line 3500 + 46 bytes
nsBlockFrame::ReflowInlineFrames(nsBlockReflowState & {...}, nsLineList_iterator 
{...}, int * 0x00128824, int 0, int 0) line 3444 + 36 bytes
nsBlockFrame::ReflowLine(nsBlockReflowState & {...}, nsLineList_iterator {...}, 
int * 0x00128824, int 0) line 2611 + 33 bytes
nsBlockFrame::ReflowDirtyLines(nsBlockReflowState & {...}) line 2250 + 31 bytes
nsBlockFrame::Reflow(nsBlockFrame * const 0x0522b904, nsIPresContext * 
0x0532c3e0, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, 
unsigned int & 0) line 844 + 15 bytes
nsBlockReflowContext::DoReflowBlock(nsHTMLReflowState & {...}, nsReflowReason 
eReflowReason_Initial, nsIFrame * 0x0522b904, const nsRect & {...}, int 1, 
nsCollapsingMargin & {...}, int 1, nsMargin & {...}, unsigned int & 0) line 580 
+ 36 bytes
nsBlockReflowContext::ReflowBlock(nsIFrame * 0x0522b904, const nsRect & {...}, 
int 1, nsCollapsingMargin & {...}, int 1, nsMargin & {...}, unsigned int & 0) 
line 356 + 50 bytes
nsBlockFrame::ReflowBlockFrame(nsBlockReflowState & {...}, nsLineList_iterator 
{...}, int * 0x00129518) line 3201 + 59 bytes
nsBlockFrame::ReflowLine(nsBlockReflowState & {...}, nsLineList_iterator {...}, 
int * 0x00129518, int 0) line 2473 + 27 bytes
nsBlockFrame::ReflowDirtyLines(nsBlockReflowState & {...}) line 2250 + 31 bytes
nsBlockFrame::Reflow(nsBlockFrame * const 0x0522b7ac, nsIPresContext * 
0x0532c3e0, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, 
unsigned int & 0) line 844 + 15 bytes
nsContainerFrame::ReflowChild(nsIFrame * 0x0522b7ac, nsIPresContext * 
0x0532c3e0, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, int 0, 
int 0, unsigned int 0, unsigned int & 0) line 782 + 31 bytes
nsTableCellFrame::Reflow(nsTableCellFrame * const 0x0522b74c, nsIPresContext * 
0x0532c3e0, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, 
unsigned int & 0) line 946
nsContainerFrame::ReflowChild(nsIFrame * 0x0522b74c, nsIPresContext * 
0x0532c3e0, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, int 0, 
int 0, unsigned int 0, unsigned int & 0) line 782 + 31 bytes
nsTableRowFrame::ReflowChildren(nsTableRowFrame * const 0x0522b634, 
nsIPresContext * 0x0532c3e0, nsHTMLReflowMetrics & {...}, const 
nsHTMLReflowState & {...}, nsTableFrame & {...}, unsigned int & 0, int 0) line 
1029 + 45 bytes
nsTableRowFrame::Reflow(nsTableRowFrame * const 0x0522b634, nsIPresContext * 
0x0532c3e0, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, 
unsigned int & 0) line 1416 + 37 bytes
nsContainerFrame::ReflowChild(nsIFrame * 0x0522b634, nsIPresContext * 
0x0532c3e0, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, int 0, 
int 0, unsigned int 0, unsigned int & 0) line 782 + 31 bytes
nsTableRowGroupFrame::ReflowChildren(nsTableRowGroupFrame * const 0x0456a680, 
nsIPresContext * 0x0532c3e0, nsHTMLReflowMetrics & {...}, nsRowGroupReflowState 
& {...}, unsigned int & 0, nsTableRowFrame * 0x00000000, int 0, nsTableRowFrame 
* * 0x00000000, int * 0x0012a30c) line 447 + 45 bytes
nsTableRowGroupFrame::Reflow(nsTableRowGroupFrame * const 0x0456a680, 
nsIPresContext * 0x0532c3e0, nsHTMLReflowMetrics & {...}, const 
nsHTMLReflowState & {...}, unsigned int & 0) line 1167 + 35 bytes
nsContainerFrame::ReflowChild(nsIFrame * 0x0456a680, nsIPresContext * 
0x0532c3e0, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, int 0, 
int 0, unsigned int 0, unsigned int & 0) line 782 + 31 bytes
nsTableFrame::ReflowChildren(nsTableFrame * const 0x0522b4e0, nsIPresContext * 
0x0532c3e0, nsTableReflowState & {...}, int 1, int 0, unsigned int & 0, nsIFrame 
* & 0x00000000, int * 0x00000000) line 3295 + 53 bytes
nsTableFrame::Reflow(nsTableFrame * const 0x0522b4e0, nsIPresContext * 
0x0532c3e0, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, 
unsigned int & 0) line 1947
nsContainerFrame::ReflowChild(nsIFrame * 0x0522b4e0, nsIPresContext * 
0x0532c3e0, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, int 0, 
int 0, unsigned int 3, unsigned int & 0) line 782 + 31 bytes
nsTableOuterFrame::OuterReflowChild(nsTableOuterFrame * const 0x0522b314, 
nsIPresContext * 0x0532c3e0, nsIFrame * 0x0522b4e0, const nsHTMLReflowState & 
{...}, nsHTMLReflowMetrics & {...}, int * 0x00000000, nsSize & {...}, nsMargin & 
{...}, nsMargin & {...}, nsMargin & {...}, nsReflowReason eReflowReason_Initial, 
unsigned int & 0) line 1008 + 47 bytes
nsTableOuterFrame::Reflow(nsTableOuterFrame * const 0x0522b314, nsIPresContext * 
0x0532c3e0, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, 
unsigned int & 0) line 1591 + 72 bytes
nsBlockReflowContext::DoReflowBlock(nsHTMLReflowState & {...}, nsReflowReason 
eReflowReason_Initial, nsIFrame * 0x0522b314, const nsRect & {...}, int 1, 
nsCollapsingMargin & {...}, int 0, nsMargin & {...}, unsigned int & 0) line 564 
+ 36 bytes
nsBlockReflowContext::ReflowBlock(nsIFrame * 0x0522b314, const nsRect & {...}, 
int 1, nsCollapsingMargin & {...}, int 0, nsMargin & {...}, unsigned int & 0) 
line 356 + 50 bytes
nsBlockFrame::ReflowBlockFrame(nsBlockReflowState & {...}, nsLineList_iterator 
{...}, int * 0x0012b398) line 3201 + 59 bytes
nsBlockFrame::ReflowLine(nsBlockReflowState & {...}, nsLineList_iterator {...}, 
int * 0x0012b398, int 1) line 2473 + 27 bytes
nsBlockFrame::ReflowDirtyLines(nsBlockReflowState & {...}) line 2250 + 31 bytes
nsBlockFrame::Reflow(nsBlockFrame * const 0x04569d6c, nsIPresContext * 
0x0532c3e0, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, 
unsigned int & 0) line 844 + 15 bytes
nsContainerFrame::ReflowChild(nsIFrame * 0x04569d6c, nsIPresContext * 
0x0532c3e0, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, int 
30, int 30, unsigned int 0, unsigned int & 0) line 782 + 31 bytes
nsTableCellFrame::Reflow(nsTableCellFrame * const 0x04569d0c, nsIPresContext * 
0x0532c3e0, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, 
unsigned int & 0) line 946
nsContainerFrame::ReflowChild(nsIFrame * 0x04569d0c, nsIPresContext * 
0x0532c3e0, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, int 0, 
int 0, unsigned int 0, unsigned int & 0) line 782 + 31 bytes
nsTableRowFrame::IR_TargetIsChild(nsTableRowFrame * const 0x04569b40, 
nsIPresContext * 0x0532c3e0, nsHTMLReflowMetrics & {...}, const 
nsHTMLReflowState & {...}, nsTableFrame & {...}, unsigned int & 0, nsIFrame * 
0x04569d0c) line 1256 + 45 bytes
nsTableRowFrame::IncrementalReflow(nsTableRowFrame * const 0x04569b40, 
nsIPresContext * 0x0532c3e0, nsHTMLReflowMetrics & {...}, const 
nsHTMLReflowState & {...}, nsTableFrame & {...}, unsigned int & 0) line 1145 + 
39 bytes
nsTableRowFrame::Reflow(nsTableRowFrame * const 0x04569b40, nsIPresContext * 
0x0532c3e0, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, 
unsigned int & 0) line 1425 + 35 bytes
nsContainerFrame::ReflowChild(nsIFrame * 0x04569b40, nsIPresContext * 
0x0532c3e0, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, int 0, 
int 0, unsigned int 0, unsigned int & 0) line 782 + 31 bytes
nsTableRowGroupFrame::IR_TargetIsChild(nsTableRowGroupFrame * const 0x0450cef8, 
nsIPresContext * 0x0532c3e0, nsHTMLReflowMetrics & {...}, nsRowGroupReflowState 
& {...}, unsigned int & 0, nsIFrame * 0x04569b40) line 1574 + 45 bytes
nsTableRowGroupFrame::IncrementalReflow(nsTableRowGroupFrame * const 0x0450cef8, 
nsIPresContext * 0x0532c3e0, nsHTMLReflowMetrics & {...}, nsRowGroupReflowState 
& {...}, unsigned int & 0) line 1244 + 35 bytes
nsTableRowGroupFrame::Reflow(nsTableRowGroupFrame * const 0x0450cef8, 
nsIPresContext * 0x0532c3e0, nsHTMLReflowMetrics & {...}, const 
nsHTMLReflowState & {...}, unsigned int & 0) line 1154 + 31 bytes
nsContainerFrame::ReflowChild(nsIFrame * 0x0450cef8, nsIPresContext * 
0x0532c3e0, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, int 0, 
int 0, unsigned int 0, unsigned int & 0) line 782 + 31 bytes
nsTableFrame::IR_TargetIsChild(nsTableFrame * const 0x05247858, nsIPresContext * 
0x0532c3e0, nsTableReflowState & {...}, unsigned int & 0, nsIFrame * 0x0450cef8) 
line 3000 + 50 bytes
nsTableFrame::IncrementalReflow(nsTableFrame * const 0x05247858, nsIPresContext 
* 0x0532c3e0, const nsHTMLReflowState & {...}, unsigned int & 0) line 2719 + 31 
bytes
nsTableFrame::Reflow(nsTableFrame * const 0x05247858, nsIPresContext * 
0x0532c3e0, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, 
unsigned int & 0) line 1963 + 27 bytes
nsContainerFrame::ReflowChild(nsIFrame * 0x05247858, nsIPresContext * 
0x0532c3e0, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, int 0, 
int 0, unsigned int 3, unsigned int & 0) line 782 + 31 bytes
nsTableOuterFrame::OuterReflowChild(nsTableOuterFrame * const 0x05247690, 
nsIPresContext * 0x0532c3e0, nsIFrame * 0x05247858, const nsHTMLReflowState & 
{...}, nsHTMLReflowMetrics & {...}, int * 0x00000000, nsSize & {...}, nsMargin & 
{...}, nsMargin & {...}, nsMargin & {...}, nsReflowReason 
eReflowReason_Incremental, unsigned int & 0) line 1008 + 47 bytes
nsTableOuterFrame::IR_InnerTableReflow(nsTableOuterFrame * const 0x05247690, 
nsIPresContext * 0x0532c3e0, nsHTMLReflowMetrics & {...}, const 
nsHTMLReflowState & {...}, unsigned int & 0) line 1325 + 69 bytes
nsTableOuterFrame::IR_TargetIsInnerTableFrame(nsTableOuterFrame * const 
0x05247690, nsIPresContext * 0x0532c3e0, nsHTMLReflowMetrics & {...}, const 
nsHTMLReflowState & {...}, unsigned int & 0) line 1113 + 31 bytes
nsTableOuterFrame::IR_TargetIsChild(nsTableOuterFrame * const 0x05247690, 
nsIPresContext * 0x0532c3e0, nsHTMLReflowMetrics & {...}, const 
nsHTMLReflowState & {...}, unsigned int & 0, nsIFrame * 0x05247858) line 1085 + 
31 bytes
nsTableOuterFrame::IncrementalReflow(nsTableOuterFrame * const 0x05247690, 
nsIPresContext * 0x0532c3e0, nsHTMLReflowMetrics & {...}, const 
nsHTMLReflowState & {...}, unsigned int & 0) line 1064 + 35 bytes
nsTableOuterFrame::Reflow(nsTableOuterFrame * const 0x05247690, nsIPresContext * 
0x0532c3e0, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, 
unsigned int & 0) line 1559 + 31 bytes
nsBlockReflowContext::DoReflowBlock(nsHTMLReflowState & {...}, nsReflowReason 
eReflowReason_Incremental, nsIFrame * 0x05247690, const nsRect & {...}, int 0, 
nsCollapsingMargin & {...}, int 1, nsMargin & {...}, unsigned int & 0) line 580 
+ 36 bytes
nsBlockReflowContext::ReflowBlock(nsIFrame * 0x05247690, const nsRect & {...}, 
int 0, nsCollapsingMargin & {...}, int 1, nsMargin & {...}, unsigned int & 0) 
line 356 + 50 bytes
nsBlockFrame::ReflowBlockFrame(nsBlockReflowState & {...}, nsLineList_iterator 
{...}, int * 0x0012d0c8) line 3201 + 59 bytes
nsBlockFrame::ReflowLine(nsBlockReflowState & {...}, nsLineList_iterator {...}, 
int * 0x0012d0c8, int 1) line 2473 + 27 bytes
nsBlockFrame::ReflowDirtyLines(nsBlockReflowState & {...}) line 2250 + 31 bytes
nsBlockFrame::Reflow(nsBlockFrame * const 0x052473f4, nsIPresContext * 
0x0532c3e0, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, 
unsigned int & 0) line 844 + 15 bytes
nsBlockReflowContext::DoReflowBlock(nsHTMLReflowState & {...}, nsReflowReason 
eReflowReason_Incremental, nsIFrame * 0x052473f4, const nsRect & {...}, int 0, 
nsCollapsingMargin & {...}, int 1, nsMargin & {...}, unsigned int & 0) line 580 
+ 36 bytes
nsBlockReflowContext::ReflowBlock(nsIFrame * 0x052473f4, const nsRect & {...}, 
int 0, nsCollapsingMargin & {...}, int 1, nsMargin & {...}, unsigned int & 0) 
line 356 + 50 bytes
nsBlockFrame::ReflowBlockFrame(nsBlockReflowState & {...}, nsLineList_iterator 
{...}, int * 0x0012ddbc) line 3201 + 59 bytes
nsBlockFrame::ReflowLine(nsBlockReflowState & {...}, nsLineList_iterator {...}, 
int * 0x0012ddbc, int 1) line 2473 + 27 bytes
nsBlockFrame::ReflowDirtyLines(nsBlockReflowState & {...}) line 2250 + 31 bytes
nsBlockFrame::Reflow(nsBlockFrame * const 0x05247040, nsIPresContext * 
0x0532c3e0, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, 
unsigned int & 0) line 844 + 15 bytes
nsBlockReflowContext::DoReflowBlock(nsHTMLReflowState & {...}, nsReflowReason 
eReflowReason_Incremental, nsIFrame * 0x05247040, const nsRect & {...}, int 1, 
nsCollapsingMargin & {...}, int 1, nsMargin & {...}, unsigned int & 0) line 580 
+ 36 bytes
nsBlockReflowContext::ReflowBlock(nsIFrame * 0x05247040, const nsRect & {...}, 
int 1, nsCollapsingMargin & {...}, int 1, nsMargin & {...}, unsigned int & 0) 
line 356 + 50 bytes
nsBlockFrame::ReflowBlockFrame(nsBlockReflowState & {...}, nsLineList_iterator 
{...}, int * 0x0012eab0) line 3201 + 59 bytes
nsBlockFrame::ReflowLine(nsBlockReflowState & {...}, nsLineList_iterator {...}, 
int * 0x0012eab0, int 1) line 2473 + 27 bytes
nsBlockFrame::ReflowDirtyLines(nsBlockReflowState & {...}) line 2250 + 31 bytes
nsBlockFrame::Reflow(nsBlockFrame * const 0x05246e1c, nsIPresContext * 
0x0532c3e0, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, 
unsigned int & 0) line 844 + 15 bytes
nsContainerFrame::ReflowChild(nsIFrame * 0x05246e1c, nsIPresContext * 
0x0532c3e0, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, int 0, 
int 0, unsigned int 0, unsigned int & 0) line 782 + 31 bytes
CanvasFrame::Reflow(CanvasFrame * const 0x0450c6a0, nsIPresContext * 0x0532c3e0, 
nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, unsigned int & 0) 
line 561
nsBoxToBlockAdaptor::Reflow(nsBoxLayoutState & {...}, nsIPresContext * 
0x0532c3e0, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, 
unsigned int & 0, int 0, int 0, int 15330, int 9480, int 1) line 836
nsBoxToBlockAdaptor::DoLayout(nsBoxToBlockAdaptor * const 0x05246d80, 
nsBoxLayoutState & {...}) line 620 + 46 bytes
nsBox::Layout(nsBox * const 0x05246d80, nsBoxLayoutState & {...}) line 1052
nsScrollBoxFrame::DoLayout(nsScrollBoxFrame * const 0x0450cb70, nsBoxLayoutState 
& {...}) line 395
nsBox::Layout(nsBox * const 0x0450cb70, nsBoxLayoutState & {...}) line 1052
nsContainerBox::LayoutChildAt(nsBoxLayoutState & {...}, nsIBox * 0x0450cb70, 
const nsRect & {...}) line 646 + 16 bytes
nsGfxScrollFrameInner::LayoutBox(nsBoxLayoutState & {...}, nsIBox * 0x0450cb70, 
const nsRect & {...}) line 1062 + 17 bytes
nsGfxScrollFrameInner::Layout(nsBoxLayoutState & {...}) line 1217
nsGfxScrollFrame::DoLayout(nsGfxScrollFrame * const 0x0450c978, nsBoxLayoutState 
& {...}) line 1070 + 15 bytes
nsBox::Layout(nsBox * const 0x0450c978, nsBoxLayoutState & {...}) line 1052
nsBoxFrame::Reflow(nsBoxFrame * const 0x0450c940, nsIPresContext * 0x0532c3e0, 
nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, unsigned int & 0) 
line 1001
nsGfxScrollFrame::Reflow(nsGfxScrollFrame * const 0x0450c940, nsIPresContext * 
0x0532c3e0, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, 
unsigned int & 0) line 777 + 25 bytes
nsContainerFrame::ReflowChild(nsIFrame * 0x0450c940, nsIPresContext * 
0x0532c3e0, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, int 0, 
int 0, unsigned int 0, unsigned int & 0) line 782 + 31 bytes
ViewportFrame::Reflow(ViewportFrame * const 0x0450c664, nsIPresContext * 
0x0532c3e0, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, 
unsigned int & 0) line 588
nsHTMLReflowCommand::Dispatch(nsIPresContext * 0x0532c3e0, nsHTMLReflowMetrics & 
{...}, const nsSize & {...}, nsIRenderingContext & {...}) line 217
PresShell::ProcessReflowCommand(nsVoidArray & {...}, int 1, nsHTMLReflowMetrics 
& {...}, nsSize & {...}, nsIRenderingContext & {...}) line 6256
PresShell::ProcessReflowCommands(int 1) line 6311
ReflowEvent::HandleEvent() line 6167
HandlePLEvent(ReflowEvent * 0x053737e8) line 6181
PL_HandleEvent(PLEvent * 0x053737e8) line 590 + 10 bytes
PL_ProcessPendingEvents(PLEventQueue * 0x00ff3068) line 520 + 9 bytes
_md_EventReceiverProc(HWND__ * 0x00030088, unsigned int 49374, unsigned int 0, 
long 16724072) line 1071 + 9 bytes
USER32! 77e02e98()
USER32! 77e030e0()
USER32! 77e05824()
nsAppShellService::Run(nsAppShellService * const 0x01638320) line 309
main1(int 2, char * * 0x00304fa0, nsISupports * 0x00000000) line 1350 + 32 bytes
main(int 2, char * * 0x00304fa0) line 1698 + 37 bytes
mainCRTStartup() line 338 + 17 bytes
KERNEL32! 77e87d08()
Assignee: asa → attinasi
Severity: major → critical
Status: UNCONFIRMED → NEW
Component: Browser-General → Layout
Ever confirmed: true
Keywords: crash
OS: Linux → All
QA Contact: doronr → petersen
Summary: Clicking player profile link crashes browser → Clicking player profile link crashes browser [@ PlaceFrameView]
WFM: Using 2002032203 build on WinXP. alexsavulov@netscape.com recently checked
in a fix related to crashes in PlaceFrameView which probably fixed this bug.

Marking WFM.
Status: NEW → RESOLVED
Last Resolved: 17 years ago
Resolution: --- → WORKSFORME

Comment 3

17 years ago
Changing QA contact
QA Contact: petersen → moied

Comment 4

17 years ago
having a crash loading URL or fallowing steps in comment #1, with 
Build ID: 2002041608 OS :win2k Talkback ID : 5361756
Build ID: 2002041810 OS :winXp Talkback ID : 5359378
Build ID: 2002041606 OS :win2k Talkback ID : 5359772,5361344
Reopening the bug 
Status: RESOLVED → REOPENED
Resolution: WORKSFORME → ---
Reassigning to Alex, because he recently fixed a similar bug.
Assignee: attinasi → alexsavulov
Status: REOPENED → NEW

Comment 6

17 years ago
i doubt it crashes with the stack from comment #1 in the latest builds since the
stak is impossible (there is a frame null pointer check that prevents
::PlaceFrameView of being called with an empty frame):

nsBlockFrame::PostPlaceLine(nsBlockReflowState& aState,
                            nsLineBox* aLine,
                            const nsSize& aMaxElementSize)
{
  // If it's inline elements, then make sure the views are correctly
  // positioned and sized
  if (aLine->IsInline()) {
    nsIFrame* frame = aLine->mFirstChild;
    for (PRInt32 i = 0; (i < aLine->GetChildCount() && frame); i++) {
       ::PlaceFrameView(aState.mPresContext, frame);
       frame->GetNextSibling(&frame);
      NS_ASSERTION(frame || (i+1) == aLine->GetChildCount(),
        "Child count bigger than the number of linked frames!!!");
    }
  }
....

(i < aLine->GetChildCount() && frame) ensures that the FOR loop only enters if
the frame is not a null pointer.

I cannot find the incidents reported in comment #4 anymore on talkback. AFAIK
old incidents are getting removed. I don't know but I suspect some installation
issues here. (old dll's, libs whatever). If someone can grab a recent stack,
that would be nice.



Comment 7

17 years ago
recent stack crash on loading URL, build ID 2002043006 using winxp
Talkback ID : 5784563,  5784563  
Priority: -- → P2

Updated

16 years ago
Keywords: testcase
Bulk moving P1-P5 un-milestoned bugs to future. 
Target Milestone: --- → Future
->Block & Inline
Assignee: alexsavulov → block-and-inline
Component: Layout → Layout: Block & Inline
QA Contact: moied → ian
WFM, SeaMonkey 2005-08-31-02 trunk Linux.

Comment 11

12 years ago
URL WFM using Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9a1) Gecko/20060526 Minefield/3.0a1 ID:2006052604

Comment 12

11 years ago
WFM, Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9b2pre) Gecko/2007120105 Minefield/3.0b2pre
Assignee: layout.block-and-inline → nobody
QA Contact: ian → layout.block-and-inline

Updated

9 years ago
Status: NEW → RESOLVED
Last Resolved: 17 years ago9 years ago
Resolution: --- → WORKSFORME

Updated

9 years ago
Flags: in-testsuite-
Keywords: testcase
(Assignee)

Updated

7 years ago
Crash Signature: [@ PlaceFrameView]
You need to log in before you can comment on or make changes to this bug.