139718 - Mozilla 1.rc1 crashes when accessing URL

Status: RESOLVED FIXED

(Core :: Layout, defect, P3)

Description

[David Favor]

From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; AIX 000D86BD4C00; en-US; rv:1.0rc1) Gecko/20020418
BuildID:    2002041818

Mozilla dies with signal 4 when accessing the referenced URL. Also
the stack trace is garbage.

Reproducible: Always
Steps to Reproduce:
Open URL.

Comment 1

[David Favor]

The URL:

   http://www.aweber.com/traffic1

produces the same crash 100% of the time.

Comment 2

[Arthur]

WorksForMe on Linux 2002042308 1.0.0 branch. AIX only?

Comment 3

[Erwan Hamon]

WFM Mozilla/5.0 (Windows; U; WinNT4.0; en-US; rv:1.0rc1) Gecko/20020417

Comment 4

[Robert Seifert]

WFM Using Winxows XP Mozilla RC1 No problems at all.

Comment 5

[David Gerard]

http://msdn.microsoft.com/library/en-us/xmlsdk30/htm/xmmscxmldomenumeratedconstants.asp
and http://www.aweber.com/traffic1 both WFM - Win2k, 2002042206-1.0 branch. The
MSDN page looks ****, but it doesn't take the browser down.

Wonder what it does on Mac, or on Galeon/Kmeleon/Chimera ...

Comment 6

[Jim Dunn]

Looks like AIX only and it looks gtk/gdk'ish in nature

Dave in the future if you only see it crash on AIX
set the Platform to "Other" and not "All", since 
All raises a red flag for many people.

Also why is the URL field in the bug set to msdn site
and the problem is with a totally different site... confusing.

The traceback from dbx on this crash looks really weird.

ddowprnt.mbcounter() at 0xd2600c7c
dowprnt.mbcounter() at 0xd26052cc
_new.rw_cc() at 0xd1264ab0
_new.rw_cc() at 0xd1264e18
_new.rw_cc() at 0xd12e7000
dowprnt.mbcounter() at 0xd19ba578
dowprnt.mbcounter() at 0xd19ba864
g_io_unix_dispatch() at 0xd165c99c
g_main_dispatch() at 0xd165d5fc
g_main_iterate() at 0xd165d3c4
g_main_run() at 0xd165e56c
gtk_main() at 0xd143c8ec
dowprnt.mbcounter() at 0xd19ba1f8
dowprnt.mbcounter() at 0xd1966954
.() at 0x10002a4c
.() at 0x10001bec

Comment 7

[Philip K. Warren]

Looks like optimization problems with the compiler. I am able to access both
pages without crashing with a debug Mozilla 1.0rc1 build.

Comment 8

[Laura Krietemeyer]

Changing QA Contact

Comment 9

[Philip K. Warren]

Turning off optimization for layout/html/table/src/nsTableFrame.cpp seems to
resolve these crashes for me. There was a new PTF released for the VisualAge C++
compiler - I'm going to see if that fixes the problem.

Comment 10

[Paul Figura]

WFM, Mozilla 1.0RC1 Windows 98SE, Build 2002021711.

Comment 11

[Philip K. Warren]

The new compiler PTF did not fix this problem. The current workaround we are
using is to compile nsTableFrame.cpp with ansi aliasing turned off.

Comment 12

[Philip K. Warren]

Attachment: Disable ansi aliasing on nsTableFrame.cpp

Comment 13

[Jim Dunn]

*** Bug 141968 has been marked as a duplicate of this bug. ***

Comment 14

[Jim Dunn]

I debugged this further and believe that the lines that 
xlC's optimizer is having problems on are: 5093 & 5094
  aCellInfo.leftCol->GetParent((nsIFrame**)&aCellInfo.cg);
  PRInt32 cgStart  =     aCellInfo.cg->GetStartColumnIndex();

We crash trying to access aCellInfo.cg, however if you
put a printf in between the two
  printf("aCellInfo.cg %x\n", aCellInfo.cg);
we no longer crash (however, in the printf aCellInfo.cg is 0)

I guess at this point looking at "GetParent" is the logical next step.

The good thing is that we have a workaround and so rc2 can at
least be made to work.

Comment 15

[andre.wobst]

I already mentioned the following url as a testcase (Bug 141968):
http://selfhtml.teamone.de/css/eigenschaften/anzeige/border_collapse.htm

However, I see a crash also for any pages using the table rules attribute as in:
http://selfhtml.teamone.de/html/tabellen/anzeige/table_rules.htm

I expect this to be the same bug, although the first attribute is css but the
second html. It would just be good to check if the proposed workaround is valid
for this case too.

Comment 16

[Jim Dunn]

yup -qalias=noansi fixes the table_rules.htm as well.

Comment 17

[Jim Dunn]

the fix is to buidl with -qalias=noansi
mozilla 1.0rc2 build (just published) works with these urls.

Comment 18

[Roland Mainz]

Does the issue go away when some |volatile|s are placed into the source ?