138755 - crashes browser on provided URL

Status: VERIFIED WORKSFORME

(Core :: Internationalization, defect)

Description

[Jørgen Nørgaard]

From Bugzilla Helper:
User-Agent: Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en-US; rv:1.0rc1)
Gecko/20020417
BuildID:    2002041712

Log from console below:


Date/Time:  2002-04-20 12:14:40 +0200
OS Version: 10.1.4 (Build 5Q125)
Host:       localhost

Command:    Mozilla
PID:        283

Exception:  EXC_BAD_ACCESS (0x0001)
Codes:      KERN_PROTECTION_FAILURE (0x0002) at 0x00000014

Thread 0 Crashed:
 #0   0x7309e618 in SearchReferenceNode(FontFamilyArrayNode const *, short)
 #1   0x730c91ac in ResetFontFamilyInstanceIterator(FontFamilyInstanceIterator
*, short, unsigned short)
 #2   0x730b9984 in FOCreateFontFamilyInstanceIterator
 #3   0x7353f134 in CreateFontResult
 #4   0x7350a230 in GenerateFontResult
 #5   0x734e5270 in FMSwapFont
 #6   0x735168a4 in RespondToFontRequest
 #7   0x735032f4 in GetFontInfo
 #8   0x02123000 in nsFontMetricsMac::Init(nsFont const &, nsIAtom *,
nsIDeviceContext *)
 #9   0x02149688 in GetMetricsFor__11nsFontCacheFRC6nsFontP7nsIAtomRP14nsIFontMetr
 #10  0x02147f70 in GetMetricsFor__17DeviceContextImplFRC6nsFontP7nsIAtomRP14nsIFo
 #11  0x02a1b040 in 0x2a1b040
 #12  0x02a2c914 in 0x2a2c914
 #13  0x02a25ec8 in ReflowInlineFrame__12nsBlockFrameFR18nsBlockReflowStateR12nsLi
 #14  0x02a25bd8 in DoReflowInlineFrames__12nsBlockFrameFR18nsBlockReflowStateR12n
 #15  0x02a25998 in nsBlockFrame::DoReflowInlineFramesAuto(nsBlockReflowState &)
 #16  0x02a25718 in ReflowInlineFrames__12nsBlockFrameFR18nsBlockReflowState19nsLi
 #17  0x02a23bc8 in ReflowLine__12nsBlockFrameFR18nsBlockReflowState19nsLineList_i
 #18  0x02a23194 in 0x2a23194
 #19  0x02a21198 in nsBlockFrame::Reflow(nsIPresContext *, nsHTMLReflowMetrics &)
 #20  0x0297e53c in ReflowChild__16nsContainerFrameFP8nsIFrameP14nsIPresContextR19
 #21  0x029cbb6c in 0x29cbb6c
 #22  0x0297e53c in ReflowChild__16nsContainerFrameFP8nsIFrameP14nsIPresContextR19
 #23  0x029ec4cc in 0x29ec4cc
 #24  0x029ed560 in Reflow__15nsTableRowFrameFP14nsIPresContextR19nsHTMLReflowMetr
 #25  0x0297e53c in ReflowChild__16nsContainerFrameFP8nsIFrameP14nsIPresContextR19
 #26  0x029ef310 in ReflowChildren__20nsTableRowGroupFrameFP14nsIPresContextR19nsH
 #27  0x029f1234 in Reflow__20nsTableRowGroupFrameFP14nsIPresContextR19nsHTMLReflo
 #28  0x0297e53c in ReflowChild__16nsContainerFrameFP8nsIFrameP14nsIPresContextR19
 #29  0x029d8d5c in 0x29d8d5c
 #30  0x029d5080 in 0x29d5080
 #31  0x0297e53c in ReflowChild__16nsContainerFrameFP8nsIFrameP14nsIPresContextR19
 #32  0x029e7430 in OuterReflowChild__17nsTableOuterFrameFP14nsIPresContextP8nsIFr
 #33  0x029e90b4 in Reflow__17nsTableOuterFrameFP14nsIPresContextR19nsHTMLReflowMe
 #34  0x02a4a628 in DoReflowBlock__20nsBlockReflowContextFR17nsHTMLReflowState14ns
 #35  0x02a4a07c in ReflowBlock__20nsBlockReflowContextFP8nsIFrameRC6nsRectiR18nsC
 #36  0x02a25094 in 0x2a25094
 #37  0x02a237ec in 0x2a237ec
 #38  0x02a23194 in 0x2a23194
 #39  0x02a21198 in nsBlockFrame::Reflow(nsIPresContext *, nsHTMLReflowMetrics &)
 #40  0x02a4a628 in DoReflowBlock__20nsBlockReflowContextFR17nsHTMLReflowState14ns
 #41  0x02a4a07c in ReflowBlock__20nsBlockReflowContextFP8nsIFrameRC6nsRectiR18nsC
 #42  0x02a25094 in 0x2a25094
 #43  0x02a237ec in 0x2a237ec
 #44  0x02a23194 in 0x2a23194
 #45  0x02a21198 in nsBlockFrame::Reflow(nsIPresContext *, nsHTMLReflowMetrics &)
 #46  0x0297e53c in ReflowChild__16nsContainerFrameFP8nsIFrameP14nsIPresContextR19
 #47  0x029cbb6c in 0x29cbb6c
 #48  0x0297e53c in ReflowChild__16nsContainerFrameFP8nsIFrameP14nsIPresContextR19
 #49  0x029ec4cc in 0x29ec4cc
 #50  0x029ed560 in Reflow__15nsTableRowFrameFP14nsIPresContextR19nsHTMLReflowMetr
 #51  0x0297e53c in ReflowChild__16nsContainerFrameFP8nsIFrameP14nsIPresContextR19
 #52  0x029ef310 in ReflowChildren__20nsTableRowGroupFrameFP14nsIPresContextR19nsH
 #53  0x029f1234 in Reflow__20nsTableRowGroupFrameFP14nsIPresContextR19nsHTMLReflo
 #54  0x0297e53c in ReflowChild__16nsContainerFrameFP8nsIFrameP14nsIPresContextR19
 #55  0x029d8d5c in 0x29d8d5c
 #56  0x029d5080 in 0x29d5080
 #57  0x0297e53c in ReflowChild__16nsContainerFrameFP8nsIFrameP14nsIPresContextR19
 #58  0x029e7430 in OuterReflowChild__17nsTableOuterFrameFP14nsIPresContextP8nsIFr
 #59  0x029e90b4 in Reflow__17nsTableOuterFrameFP14nsIPresContextR19nsHTMLReflowMe
 #60  0x02a9bc10 in ReflowAbsoluteFrame__25nsAbsoluteContainingBlockFP8nsIFrameP14
 #61  0x02a9b8c8 in IncrementalReflow__25nsAbsoluteContainingBlockFP8nsIFrameP14ns
 #62  0x02a20c34 in 0x2a20c34
 #63  0x0297e53c in ReflowChild__16nsContainerFrameFP8nsIFrameP14nsIPresContextR19
 #64  0x02b1e4ac in CanvasFrame::Reflow(nsIPresContext *, nsHTMLReflowMetrics &,  &)
 #65  0x02ad9798 in Reflow__19nsBoxToBlockAdaptorFR16nsBoxLayoutStateP14nsIPresCon
 #66  0x02ad91d8 in nsBoxToBlockAdaptor::DoLayout(nsBoxLayoutState &)
 #67  0x02ad3e6c in nsBox::Layout(nsBoxLayoutState &)
 #68  0x02b0581c in 0x2b0581c
 #69  0x02ad3e6c in nsBox::Layout(nsBoxLayoutState &)
 #70  0x02adc758 in LayoutChildAt__14nsContainerBoxFR16nsBoxLayoutStateP6nsIBoxRC6
 #71  0x02ac871c in nsGfxScrollFrameInner::LayoutBox(nsBoxLayoutState &, nsIBox *)
 #72  0x02ac8bfc in 0x2ac8bfc
 #73  0x02ac87d4 in nsGfxScrollFrame::DoLayout(nsBoxLayoutState &)
 #74  0x02ad3e6c in nsBox::Layout(nsBoxLayoutState &)
 #75  0x02a95ee0 in nsBoxFrame::Reflow(nsIPresContext *, nsHTMLReflowMetrics &,
 const &)
 #76  0x02ac7850 in Reflow__16nsGfxScrollFrameFP14nsIPresContextR19nsHTMLReflowMet
 #77  0x0297e53c in ReflowChild__16nsContainerFrameFP8nsIFrameP14nsIPresContextR19
 #78  0x02a674c0 in Reflow__13ViewportFrameFP14nsIPresContextR19nsHTMLReflowMetric
 #79  0x029f3df0 in Dispatch__19nsHTMLReflowCommandFP14nsIPresContextR19nsHTMLRefl
 #80  0x029a3bc4 in ProcessReflowCommand__9PresShellFR11nsVoidArrayiR19nsHTMLReflo
 #81  0x029a3dac in PresShell::ProcessReflowCommands(int)
 #82  0x029a3738 in HandlePLEvent(ReflowEvent *)
 #83  0x005efbf0 in PL_HandleEvent
 #84  0x005efa5c in PL_ProcessPendingEvents
 #85  0x00595a6c in nsEventQueueImpl::ProcessPendingEvents(void)
 #86  0x01ee89ac in nsMacNSPREventQueueHandler::ProcessPLEventQueue(void)
 #87  0x01ee8850 in nsMacNSPREventQueueHandler::RepeatAction(EventRecord const &)
 #88  0x01ae5b14 in Repeater::DoRepeaters(EventRecord const &)
 #89  0x01efea78 in nsMacMessagePump::DispatchEvent(int, EventRecord *)
 #90  0x01efe7a0 in nsMacMessagePump::DoMessagePump(void)
 #91  0x01efe11c in nsAppShell::Run(void)
 #92  0x01e2320c in nsAppShellService::Run(void)
 #93  0x004c9aec in main1(int, char **, nsISupports *)
 #94  0x004ca52c in main

Thread 1:
 #0   0x7000497c in syscall
 #1   0x70557600 in BSD_waitevent
 #2   0x70554b80 in CarbonSelectThreadFunc
 #3   0x7002054c in _pthread_body

Thread 2:
 #0   0x7003f4c8 in semaphore_wait_signal_trap
 #1   0x7003f2c8 in _pthread_cond_wait
 #2   0x705593ec in CarbonOperationThreadFunc
 #3   0x7002054c in _pthread_body

Thread 3:
 #0   0x70044cf8 in semaphore_timedwait_signal_trap
 #1   0x70044cd8 in semaphore_timedwait_signal
 #2   0x70283ea4 in TSWaitOnConditionTimedRelative
 #3   0x7027d748 in TSWaitOnSemaphoreCommon
 #4   0x702c2078 in TimerThread
 #5   0x7002054c in _pthread_body

Thread 4:
 #0   0x7003f4c8 in semaphore_wait_signal_trap
 #1   0x7003f2c8 in _pthread_cond_wait
 #2   0x70250ab0 in TSWaitOnCondition
 #3   0x7027d730 in TSWaitOnSemaphoreCommon
 #4   0x70243d14 in AsyncFileThread
 #5   0x7002054c in _pthread_body

Thread 5:
 #0   0x7003f4c8 in semaphore_wait_signal_trap
 #1   0x7003f2c8 in _pthread_cond_wait
 #2   0x7055b884 in CarbonInetOperThreadFunc
 #3   0x7002054c in _pthread_body

Thread 6:
 #0   0x70000978 in mach_msg_overwrite_trap
 #1   0x70005a04 in mach_msg
 #2   0x76178580 in JNI_CreateJavaVM_Impl
 #3   0x761784fc in JNI_CreateJavaVM_Impl
 #4   0x761784a0 in JNI_CreateJavaVM_Impl
 #5   0x7002054c in _pthread_body

Thread 7:
 #0   0x70000978 in mach_msg_overwrite_trap
 #1   0x70005a04 in mach_msg
 #2   0x760c6ca0 in __floatdidf
 #3   0x760eb0a0 in JVM_Read
 #4   0x760f88d4 in JVM_MonitorNotifyAll
 #5   0x7618cea8 in restFP
 #6   0x761784a0 in JNI_CreateJavaVM_Impl
 #7   0x7002054c in _pthread_body

Thread 8:
 #0   0x70000978 in mach_msg_overwrite_trap
 #1   0x70005a04 in mach_msg
 #2   0x760c6c24 in __floatdidf
 #3   0x760e8aa0 in JVM_Read
 #4   0x7610ac88 in JVM_MonitorNotify
 #5   0x76100adc in JVM_MonitorWait
 #6   0x3e102668 in 0x3e102668
 #7   0x3e10068c in 0x3e10068c
 #8   0x3e10068c in 0x3e10068c
 #9   0x860d3cac in bad_cast virtual table
 #10  0x760df3f8 in JVM_GetCPMethodClassNameUTF
 #11  0x761061e4 in __ashrdi3
 #12  0x76134a20 in JVM_InternString
 #13  0x761673f0 in JVM_IsNaN
 #14  0x76162c1c in __builtin_new
 #15  0x76162c98 in __builtin_new
 #16  0x7615cd9c in JVM_GetInheritedAccessControlContext
 #17  0x761784a0 in JNI_CreateJavaVM_Impl
 #18  0x7002054c in _pthread_body

Thread 9:
 #0   0x70000978 in mach_msg_overwrite_trap
 #1   0x70005a04 in mach_msg
 #2   0x760c6c24 in __floatdidf
 #3   0x760e8aa0 in JVM_Read
 #4   0x7610ac88 in JVM_MonitorNotify
 #5   0x76100adc in JVM_MonitorWait
 #6   0x3e102668 in 0x3e102668
 #7   0x3e10068c in 0x3e10068c
 #8   0x3e1005cc in 0x3e1005cc
 #9   0x3e1005cc in 0x3e1005cc
 #10  0x860d3cac in bad_cast virtual table
 #11  0x760df3f8 in JVM_GetCPMethodClassNameUTF
 #12  0x761061e4 in __ashrdi3
 #13  0x76134a20 in JVM_InternString
 #14  0x761673f0 in JVM_IsNaN
 #15  0x76162c1c in __builtin_new
 #16  0x76162c98 in __builtin_new
 #17  0x7615cd9c in JVM_GetInheritedAccessControlContext
 #18  0x761784a0 in JNI_CreateJavaVM_Impl
 #19  0x7002054c in _pthread_body

Thread 10:
 #0   0x70000978 in mach_msg_overwrite_trap
 #1   0x70005a04 in mach_msg
 #2   0x760c6ca0 in __floatdidf
 #3   0x760ccc94 in __floatdidf
 #4   0x760d480c in JVM_GetMethodIxExceptionTableLength
 #5   0x761784a0 in JNI_CreateJavaVM_Impl
 #6   0x7002054c in _pthread_body

Thread 11:
 #0   0x70000978 in mach_msg_overwrite_trap
 #1   0x70005a04 in mach_msg
 #2   0x760eb104 in JVM_Read
 #3   0x76174b64 in JVM_GetSystemPackage
 #4   0x7618ecb4 in JVM_InitProperties
 #5   0x76162c98 in __builtin_new
 #6   0x7615cd9c in JVM_GetInheritedAccessControlContext
 #7   0x761784a0 in JNI_CreateJavaVM_Impl
 #8   0x7002054c in _pthread_body

Thread 12:
 #0   0x70000978 in mach_msg_overwrite_trap
 #1   0x70005a04 in mach_msg
 #2   0x760c6c24 in __floatdidf
 #3   0x760eb104 in JVM_Read
 #4   0x76120754 in JVM_GetMethodIxExceptionsCount
 #5   0x76114cb4 in JVM_GetClassLoader
 #6   0x7618f4f8 in JVM_InitProperties
 #7   0x76162c98 in __builtin_new
 #8   0x7615cd9c in JVM_GetInheritedAccessControlContext
 #9   0x761784a0 in JNI_CreateJavaVM_Impl
 #10  0x7002054c in _pthread_body

Thread 13:
 #0   0x70000978 in mach_msg_overwrite_trap
 #1   0x70005a04 in mach_msg
 #2   0x760c6c24 in __floatdidf
 #3   0x760e8aa0 in JVM_Read
 #4   0x7610ac88 in JVM_MonitorNotify
 #5   0x76100adc in JVM_MonitorWait
 #6   0x3e102668 in 0x3e102668
 #7   0x3e10068c in 0x3e10068c
 #8   0x3e10068c in 0x3e10068c
 #9   0x3e1005cc in 0x3e1005cc
 #10  0x3e1005cc in 0x3e1005cc
 #11  0x3e10068c in 0x3e10068c
 #12  0x3e10068c in 0x3e10068c
 #13  0x860d3cac in bad_cast virtual table
 #14  0x760df3f8 in JVM_GetCPMethodClassNameUTF
 #15  0x761061e4 in __ashrdi3
 #16  0x76134a20 in JVM_InternString
 #17  0x761673f0 in JVM_IsNaN
 #18  0x76162c1c in __builtin_new
 #19  0x76162c98 in __builtin_new
 #20  0x7615cd9c in JVM_GetInheritedAccessControlContext
 #21  0x761784a0 in JNI_CreateJavaVM_Impl
 #22  0x7002054c in _pthread_body

Thread 14:
 #0   0x70000978 in mach_msg_overwrite_trap
 #1   0x70005a04 in mach_msg
 #2   0x760c6c24 in __floatdidf
 #3   0x760e8aa0 in JVM_Read
 #4   0x7610ac88 in JVM_MonitorNotify
 #5   0x76100adc in JVM_MonitorWait
 #6   0x3e102668 in 0x3e102668
 #7   0x3e10068c in 0x3e10068c
 #8   0x3e10068c in 0x3e10068c
 #9   0x860d3cac in bad_cast virtual table
 #10  0x760df3f8 in JVM_GetCPMethodClassNameUTF
 #11  0x761061e4 in __ashrdi3
 #12  0x76134a20 in JVM_InternString
 #13  0x761673f0 in JVM_IsNaN
 #14  0x76162c1c in __builtin_new
 #15  0x76162c98 in __builtin_new
 #16  0x7615cd9c in JVM_GetInheritedAccessControlContext
 #17  0x761784a0 in JNI_CreateJavaVM_Impl
 #18  0x7002054c in _pthread_body

Thread 15:
 #0   0x70000978 in mach_msg_overwrite_trap
 #1   0x70005a04 in mach_msg
 #2   0x70026a2c in _pthread_become_available
 #3   0x70026724 in pthread_exit
 #4   0x70020550 in _pthread_body

Thread 16:
 #0   0x70000978 in mach_msg_overwrite_trap
 #1   0x70005a04 in mach_msg
 #2   0x760e8aa0 in JVM_Read
 #3   0x7610ac88 in JVM_MonitorNotify
 #4   0x76100adc in JVM_MonitorWait
 #5   0x3e102668 in 0x3e102668
 #6   0x3e10068c in 0x3e10068c
 #7   0x3e10068c in 0x3e10068c
 #8   0x3e1005cc in 0x3e1005cc
 #9   0x3e1005cc in 0x3e1005cc
 #10  0x3e10068c in 0x3e10068c
 #11  0x3e10068c in 0x3e10068c
 #12  0x860d3cac in bad_cast virtual table
 #13  0x760df3f8 in JVM_GetCPMethodClassNameUTF
 #14  0x761061e4 in __ashrdi3
 #15  0x76134a20 in JVM_InternString
 #16  0x761673f0 in JVM_IsNaN
 #17  0x76162c1c in __builtin_new
 #18  0x76162c98 in __builtin_new
 #19  0x7615cd9c in JVM_GetInheritedAccessControlContext
 #20  0x761784a0 in JNI_CreateJavaVM_Impl
 #21  0x7002054c in _pthread_body

Thread 17:
 #0   0x70000978 in mach_msg_overwrite_trap
 #1   0x70005a04 in mach_msg
 #2   0x760e8aa0 in JVM_Read
 #3   0x7610ac88 in JVM_MonitorNotify
 #4   0x76100adc in JVM_MonitorWait
 #5   0x3e102668 in 0x3e102668
 #6   0x3e10068c in 0x3e10068c
 #7   0x3e10068c in 0x3e10068c
 #8   0x860d3cac in bad_cast virtual table
 #9   0x760df3f8 in JVM_GetCPMethodClassNameUTF
 #10  0x761061e4 in __ashrdi3
 #11  0x76134a20 in JVM_InternString
 #12  0x761673f0 in JVM_IsNaN
 #13  0x76162c1c in __builtin_new
 #14  0x76162c98 in __builtin_new
 #15  0x7615cd9c in JVM_GetInheritedAccessControlContext
 #16  0x761784a0 in JNI_CreateJavaVM_Impl
 #17  0x7002054c in _pthread_body

Thread 18:
 #0   0x70000978 in mach_msg_overwrite_trap
 #1   0x70005a04 in mach_msg
 #2   0x760c6c24 in __floatdidf
 #3   0x760e8aa0 in JVM_Read
 #4   0x7610ac88 in JVM_MonitorNotify
 #5   0x76100adc in JVM_MonitorWait
 #6   0x3e102668 in 0x3e102668
 #7   0x3e10068c in 0x3e10068c
 #8   0x3e10068c in 0x3e10068c
 #9   0x3e10068c in 0x3e10068c
 #10  0x3e10086c in 0x3e10086c
 #11  0x860d3cac in bad_cast virtual table
 #12  0x760df3f8 in JVM_GetCPMethodClassNameUTF
 #13  0x761061e4 in __ashrdi3
 #14  0x76134a20 in JVM_InternString
 #15  0x761673f0 in JVM_IsNaN
 #16  0x76162c1c in __builtin_new
 #17  0x76162c98 in __builtin_new
 #18  0x7615cd9c in JVM_GetInheritedAccessControlContext
 #19  0x761784a0 in JNI_CreateJavaVM_Impl
 #20  0x7002054c in _pthread_body

Thread 19:
 #0   0x70000978 in mach_msg_overwrite_trap
 #1   0x70005b34 in mach_msg_overwrite
 #2   0x70012cfc in vm_copy
 #3   0x7309367c in ResetFontNamesCache
 #4   0x730a4828 in SynchronizeDatabaseInformation(DBSynchMessageReply *)
 #5   0x730c9eb4 in SendComputeFontSpecsMessage
 #6   0x730a3028 in FOGetFontSpecs
 #7   0x730a5e10 in GetFontInformation(unsigned long, FontInformation *)
 #8   0x730ac02c in ATSFontGetGlyphCount
 #9   0x73c9190c in ats_font_create
 #10  0x771e3ca8 in CGFontCreateWithDataProvider
 #11  0x76482784 in AWT2QuartzCreateQuartzFont
 #12  0x04bb481c in 0x4bb481c
 #13  0x3e102668 in 0x3e102668
 #14  0x3e1005cc in 0x3e1005cc
 #15  0x3e1005cc in 0x3e1005cc
 #16  0x3e1005cc in 0x3e1005cc
 #17  0x3e10068c in 0x3e10068c
 #18  0x3e10068c in 0x3e10068c
 #19  0x860d3cac in bad_cast virtual table
 #20  0x760df3f8 in JVM_GetCPMethodClassNameUTF
 #21  0x761061e4 in __ashrdi3
 #22  0x760fc368 in JVM_DoPrivileged
 #23  0x3e102668 in 0x3e102668
 #24  0x3e1005cc in 0x3e1005cc
 #25  0x3e10068c in 0x3e10068c
 #26  0x3e10068c in 0x3e10068c
 #27  0x3e1005cc in 0x3e1005cc
 #28  0x3e1005cc in 0x3e1005cc
 #29  0x3e1005cc in 0x3e1005cc
 #30  0x860d3cac in bad_cast virtual table
 #31  0x760df3f8 in JVM_GetCPMethodClassNameUTF
 #32  0x761061e4 in __ashrdi3
 #33  0x761509f4 in JVM_GetMethodIxExceptionTableEntry
 #34  0x76128560 in JVM_NewInstance
 #35  0x3e102668 in 0x3e102668
 #36  0x3e1005cc in 0x3e1005cc
 #37  0x3e1005cc in 0x3e1005cc
 #38  0x3e1005cc in 0x3e1005cc
 #39  0x3e10068c in 0x3e10068c
 #40  0x3e10086c in 0x3e10086c
 #41  0x860d3cac in bad_cast virtual table
 #42  0x760df3f8 in JVM_GetCPMethodClassNameUTF
 #43  0x761061e4 in __ashrdi3
 #44  0x76134a20 in JVM_InternString
 #45  0x761673f0 in JVM_IsNaN
 #46  0x76162c1c in __builtin_new
 #47  0x76162c98 in __builtin_new
 #48  0x7615cd9c in JVM_GetInheritedAccessControlContext
 #49  0x761784a0 in JNI_CreateJavaVM_Impl
 #50  0x7002054c in _pthread_body

Thread 20:
 #0   0x70000978 in mach_msg_overwrite_trap
 #1   0x70005a04 in mach_msg
 #2   0x760e8aa0 in JVM_Read
 #3   0x7610ac88 in JVM_MonitorNotify
 #4   0x76100adc in JVM_MonitorWait
 #5   0x3e102668 in 0x3e102668
 #6   0x3e10068c in 0x3e10068c
 #7   0x3e10068c in 0x3e10068c
 #8   0x860d3cac in bad_cast virtual table
 #9   0x760df3f8 in JVM_GetCPMethodClassNameUTF
 #10  0x761061e4 in __ashrdi3
 #11  0x76134a20 in JVM_InternString
 #12  0x761673f0 in JVM_IsNaN
 #13  0x76162c1c in __builtin_new
 #14  0x76162c98 in __builtin_new
 #15  0x7615cd9c in JVM_GetInheritedAccessControlContext
 #16  0x761784a0 in JNI_CreateJavaVM_Impl
 #17  0x7002054c in _pthread_body

Thread 21:
 #0   0x70000978 in mach_msg_overwrite_trap
 #1   0x70005a04 in mach_msg
 #2   0x760c6ca0 in __floatdidf
 #3   0x760ccbb0 in __floatdidf
 #4   0x7613a98c in JVM_Sleep
 #5   0x3e102668 in 0x3e102668
 #6   0x3e10068c in 0x3e10068c
 #7   0x3e10086c in 0x3e10086c
 #8   0x860d3cac in bad_cast virtual table
 #9   0x760df3f8 in JVM_GetCPMethodClassNameUTF
 #10  0x761061e4 in __ashrdi3
 #11  0x76134a20 in JVM_InternString
 #12  0x761673f0 in JVM_IsNaN
 #13  0x76162c1c in __builtin_new
 #14  0x76162c98 in __builtin_new
 #15  0x7615cd9c in JVM_GetInheritedAccessControlContext
 #16  0x761784a0 in JNI_CreateJavaVM_Impl
 #17  0x7002054c in _pthread_body

PPC Thread State:
  srr0: 0x7309e618 srr1: 0x0200f030                vrsave: 0x00000008
   xer: 0x00000020   lr: 0x730c91c0  ctr: 0x730b9930   mq: 0x00000000
    r0: 0x730c91ac   r1: 0xbfff90b0   r2: 0x735210b8   r3: 0x00000000
    r4: 0x00001c23   r5: 0x00000000   r6: 0xbfff92d0   r7: 0x00010001
    r8: 0x00000000   r9: 0x8309022c  r10: 0x1c230010  r11: 0x000ee000
   r12: 0x730b9930  r13: 0x00000000  r14: 0x00000000  r15: 0x02b6a24c
   r16: 0x02bdbc5c  r17: 0x00000000  r18: 0x00000426  r19: 0x01daccf0
   r20: 0xffffffff  r21: 0x03119f24  r22: 0x00010000  r23: 0xbfff9228
   r24: 0x4e464e54  r25: 0x4c57464e  r26: 0xbfff9228  r27: 0x00000000
   r28: 0x00000000  r29: 0xbfff9198  r30: 0x00001c23  r31: 0x730c917c

**********



Reproducible: Always
Steps to Reproduce:
1.start mozilla rc1
2.goto to the website
3.

Actual Results:  crash

Comment 1

[Adam Hauner]

WFM 2002041906/trunk/Win2K

Comment 2

[Junk_HbJ]

Wfm with RC1/Win98SE.

Comment 3

[Kai Lahmann (is there, where MNG is)]

wfm. Linux, 1.0RC1

maybe related to Java or Flash?

Comment 4

[Boris Zbarsky [:bzbarsky]]

crash in font code with enough info to debug --> confirming.

Comment 5

[Ken Harris]

Fonts don't look great, but can't get it to crash.

WFM, Mac OS X 10.1.4, Mozilla 1.0rc1.

Comment 6

[Jørgen Nørgaard]

Additional information:
doesn't crash in every login session.
But when in a login session that crashes it appears consistently.

Comment 7

[Roy Yokoyama]

Mac system call to GetFontInfo() causing to crash.
Assign to nhotta

Comment 8

[nhottanscp]

I cannot reproduce the crash by just going to that site http://www.kkb.bib.dk/
used 4/22 MacOS X commercial branch

>But when in a login session that crashes it appears consistently.
I don't know how to login.
Reporter, could you provide more detail info how to reproduce the crash?

crasher -> nominating for nsbeta1 (but need a reproducible procedure)

Reassign to ftang.

Comment 9

[Jørgen Nørgaard]

I am unable to reliably reproduce the crash right now. When submitting the crash
it was consistent.

From the comments it seems that at least one tester has seen the crash also.

I wonder if unstable serving of the style may be involved. Shouldn't crash the
browser though.



"login session" only refers to logging into OS X (10.1.4)

Comment 10

[nhottanscp]

So, just go to http://www.kkb.bib.dk/ to reproduce the crash?

Comment 11

[Yuying Long]

I don't encounter the crash when I load page: http://www.kkb.bib.dk/ on both
04-23 branch build and trunk build with Mac10.1.3.

Comment 12

[Frank Tang]

the stack trace show it crash deep inside Mac OS X font manager code
Thread 0 Crashed:
 #0   0x7309e618 in SearchReferenceNode(FontFamilyArrayNode const *, short)
 #1   0x730c91ac in ResetFontFamilyInstanceIterator(FontFamilyInstanceIterator
*, short, unsigned short)
 #2   0x730b9984 in FOCreateFontFamilyInstanceIterator
 #3   0x7353f134 in CreateFontResult
 #4   0x7350a230 in GenerateFontResult
 #5   0x734e5270 in FMSwapFont
 #6   0x735168a4 in RespondToFontRequest
 #7   0x735032f4 in GetFontInfo

add sdagley to the cc list. 

steve: can you search the ADC and figure out is this a konwn issues or not ?

Comment 13

[Steve Dagley]

Frank, I don't know of any way to search Apple's RADAR bug database (which is
what I think you're asking) without being inside Apple's firewall.  I'd suggest
you ask Xavier and if this needs to be escelated to DTS I can provide you with a
'support incident' asset.

Comment 14

[Jørgen Nørgaard]

Reply to comment #10:

Yes, just go to the URL.

After installing mozilla RC1 and the MRJ plugin fc1 in a system-wide location, I
logged out and logged in with my ordinary username. Then went to the URL, at the
time, saturday, the crash was repeatable. Start mozilla, enter url, crash.


During the next few days I could repeat the crash a couple of times. Right now I
am unable to reproduce it. 

Comment 15

[Frank Tang]

the reporter can no longer reproduce the bug. mark it as work for me now.
QA, please verify this bug is gone. 

Comment 16

[Yuying Long]

I tried a few times but have never can reproduce it.

Mark as verified.

Comment 17

[Jørgen Nørgaard]

Attachment: Console log from 25/4