136117 - Crash on search on http://www.nuhorizons.com/ [@BCCorners::~BCCorners]

Status: VERIFIED WORKSFORME

(Core :: Layout, defect)

Description

[Yanko Kaneti]

mozilla 0.9.9 - Linux RedHat7,Windows - (anon)CVS build from one hour ago   

from galeon bug http://bugzilla.gnome.org/show_bug.cgi?id=77968

1. go to http://www.nuhorizons.com/
2. type "XC2S200" into the "Part Number (Order/Quote)" edit line and
press [Enter]
3. from now on several things may cause a freeze
 - type into the top editline e.g. "XC2S100" and press [Enter]
 - click the [Next] button at the bottom right
 - move another window over galeon
 - ...

below is debug spew(cut a bit) and backtrace.
the same bug was reproduced on Windows with mozilla 0.9.9 (TB4942927X)


WARNING: not supported, file nsImageControlFrame.cpp, line 255
pldhash: for the table at address 0x0x888264c, the given entrySize of 28
probably favors chaining over double hashing.
JavaScript error:
http://nunext.nuhorizons.com/NuNext/servlet/NUHOnlineOrderingPartSearch?mode=Search
line 15: oCMenu is not defined

GetPrimaryFrameFor() called while FrameManager is being destroyed!

(multiple with different adresses)
frame: Inline(hr)(0) (0x879052c) style: 0x87904a4 :before {}
Wrong parent style context:  style: 0x8790344 {}
should be using:  style: 0x883df90 :cell-content {}

(multiple with lines 5469 and 5514 intermixed)
###!!! ASSERTION: program error: '(i >= startIndex) && (i <= endIndex)', file
nsTableFrame.cpp, line 5469
###!!! Break: at file nsTableFrame.cpp, line 5469

Program received signal SIGSEGV, Segmentation fault.
0x40640ee9 in chunk_free (ar_ptr=0x406d5040, p=0x867fa20) at malloc.c:3047
3047  malloc.c: No such file or directory.
   in malloc.c
(gdb) bt
#0  0x40640ee9 in chunk_free (ar_ptr=0x406d5040, p=0x867fa20) at malloc.c:3047
#1  0x40640d75 in __libc_free (mem=0x867fa28) at malloc.c:2959
#2  0x4070c14e in __builtin_vec_delete (ptr=0x867fa28)
   from /usr/lib/libstdc++-libc6.1-1.so.2
#3  0x41e115c7 in BCCorners::~BCCorners (this=0xbfffc388, __in_chrg=2)
    at nsTableFrame.cpp:5466
#4  0x41ccaa7c in nsTableFrame::CalcBCBorders (this=0x877972c, 
    aPresContext=@0x8879150) at nsTableFrame.cpp:6136
#5  0x41ccf9e1 in nsTableOuterFrame::InitChildReflowState (this=0x87795dc, 
    aPresContext=@0x8879150, aReflowState=@0xbfffc520)
    at nsTableOuterFrame.cpp:487
#6  0x41ccfaf6 in nsTableOuterFrame::GetMarginPadding (this=0x87795dc,
    aPresContext=0x8879150, aOuterRS=@0xbfffcba4, aChildFrame=0x877972c, 
    aMargin=@0xbfffc608, aMarginNoAuto=@0xbfffc894, aPadding=@0xbfffc874)
    at nsTableOuterFrame.cpp:514
#7  0x41ccfc7a in nsTableOuterFrame::GetChildAvailWidth (this=0x87795dc,
    aPresContext=0x8879150, aChildFrame=0x877972c, aOuterRS=@0xbfffcba4,  
    aOuterWidth=14592, aMarginNoAuto=@0xbfffc894, aPadding=@0xbfffc874)
    at nsTableOuterFrame.cpp:552
#8  0x41cd0b9b in nsTableOuterFrame::OuterReflowChild (this=0x87795dc,
    aPresContext=0x8879150, aChildFrame=0x877972c, aOuterRS=@0xbfffcba4, 
    aMetrics=@0xbfffc828, aAvailWidth=0x0, aDesiredSize=@0xbfffc8a4,
    aMargin=@0xbfffc894, aMarginNoAuto=@0xbfffc884, aPadding=@0xbfffc874,
    aReflowReason=eReflowReason_Incremental, aStatus=@0xbfffcd40)
    at nsTableOuterFrame.cpp:969
#9  0x41cd1b0e in nsTableOuterFrame::IR_InnerTableReflow (this=0x87795dc,
    aPresContext=0x8879150, aOuterMet=@0xbfffce64, aOuterRS=@0xbfffcba4,
    aStatus=@0xbfffcd40) at nsTableOuterFrame.cpp:1326
....

The full output can be found here:
http://www.declera.com/~yaneti/mozbt1.txt

Comment 1

[Arthur]

No problems with linux 2002040706. Please try a recent nightly from
http://ftp.mozilla.org/pub/mozilla/nightly/latest/
Thank's for testing mozilla.

Comment 2

[Yanko Kaneti]

Whatever it was I am unable to reproduce it with 2002040616 on RH7 and
2002040708 on Windows   while the testcase always crashes 0.9.9 and my very
recent cvs build

go figure

Comment 3

[Christine Hoffman]

Changing QA contact

Comment 4

[Moied]

verified WFM with build ID 20020416