14213 - Crash-Translate English to German

Status: VERIFIED WORKSFORME

(Core :: Internationalization, defect, P3)

Description

[Teruko Kobayashi]

When you try to translate the English page to German, Apprunner will crash

Steps of reproduce
1. Go to above URL
2. Select menu View|Translate -> English - German

Apprunner will crash.

Tested 9-17 Win32 build. This does not happen in Mac and Linux.

Talkback incident 13599686
Trigger Type:  Program Crash

 Trigger Reason:  Access violation
 Call Stack:    (Signature = CopyChars2To1 d2206746)

 CopyChars2To1

[d:\builds\seamonkey\mozilla\xpcom\ds\bufferRoutines.h, line 232]
 nsStr::Append

[d:\builds\seamonkey\mozilla\xpcom\ds\nsStr.cpp, line 180]
 nsStr::Assign

[d:\builds\seamonkey\mozilla\xpcom\ds\nsStr.cpp, line 158]
 nsCString::nsCString

[d:\builds\seamonkey\mozilla\xpcom\ds\nsString.cpp, line 115]
 nsCAutoString::nsCAutoString

[d:\builds\seamonkey\mozilla\xpcom\ds\nsString.cpp, line 1779]
 nsWebShell::DoLoadURL

[d:\builds\seamonkey\mozilla\webshell\src\nsWebShell.cpp, line 1996]
 nsWebShell::LoadURI

[d:\builds\seamonkey\mozilla\webshell\src\nsWebShell.cpp, line 2226]
 nsWebShell::LoadURL

[d:\builds\seamonkey\mozilla\webshell\src\nsWebShell.cpp, line 2324]
 nsWebShell::LoadURL

[d:\builds\seamonkey\mozilla\webshell\src\nsWebShell.cpp, line 1933]
 nsHistoryEntry::Load

[d:\builds\seamonkey\mozilla\xpfe\appshell\src\nsSessionHistory.cpp, line 515]
 nsSessionHistory::Goto

[d:\builds\seamonkey\mozilla\xpfe\appshell\src\nsSessionHistory.cpp, line 1001]
 nsSessionHistory::Reload

[d:\builds\seamonkey\mozilla\xpfe\appshell\src\nsSessionHistory.cpp, line 1044]
 nsXPCWrappedNativeClass::CallWrappedMethod

[d:\builds\seamonkey\mozilla\js\src\xpconnect\src\xpcwrappednativeclass.cpp,
line 662]
 WrappedNative_CallMethod

[d:\builds\seamonkey\mozilla\js\src\xpconnect\src\xpcwrappednativejsops.cpp,
line 171]
 js_Invoke

[d:\builds\seamonkey\mozilla\js\src\jsinterp.c, line 655]
 js_Interpret

[d:\builds\seamonkey\mozilla\js\src\jsinterp.c, line 2229]
 js_Invoke

[d:\builds\seamonkey\mozilla\js\src\jsinterp.c, line 675]
 js_Interpret

[d:\builds\seamonkey\mozilla\js\src\jsinterp.c, line 2229]
 js_Invoke

[d:\builds\seamonkey\mozilla\js\src\jsinterp.c, line 675]
 js_InternalCall

[d:\builds\seamonkey\mozilla\js\src\jsinterp.c, line 748]
 JS_CallFunctionValue

[d:\builds\seamonkey\mozilla\js\src\jsapi.c, line 2664]
 nsJSEventListener::HandleEvent

[d:\builds\seamonkey\mozilla\dom\src\events\nsJSEventListener.cpp, line 112]
 nsEventListenerManager::HandleEvent

[d:\builds\seamonkey\mozilla\layout\events\src\nsEventListenerManager.cpp, line
628]
 RDFElementImpl::HandleDOMEvent

[d:\builds\seamonkey\mozilla\rdf\content\src\nsRDFElement.cpp, line 2872]
 nsEventStateManager::CheckForAndDispatchClick

[d:\builds\seamonkey\mozilla\layout\events\src\nsEventStateManager.cpp, line
880]
 nsEventStateManager::PostHandleEvent

[d:\builds\seamonkey\mozilla\layout\events\src\nsEventStateManager.cpp, line
398]
 PresShell::HandleEvent

[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 2043]
 nsView::HandleEvent

[d:\builds\seamonkey\mozilla\view\src\nsView.cpp, line 828]
 nsViewManager::DispatchEvent

[d:\builds\seamonkey\mozilla\view\src\nsViewManager.cpp, line 1644]
 HandleEvent

[d:\builds\seamonkey\mozilla\view\src\nsView.cpp, line 63]
 nsWindow::DispatchEvent

[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 336]
 nsWindow::DispatchWindowEvent

[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 353]
 nsWindow::DispatchMouseEvent

[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 3162]
 ChildWindow::DispatchMouseEvent

[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 3378]
 nsWindow::ProcessMessage

[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 2384]
 nsWindow::WindowProc

[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 402]
 USER32.dll + 0x1186 (0x77e41186)

Comment 1

[Robert John Churchill]

The translation stuff is all in JavaScript [in navigator.js].  Thanks for the
stack dump... I'm reassigning this to rickg (Mr. nsString).

Robert

Comment 2

[Frank Tang]

I suspect it is related to 14067. Not sure, it crash very soon after the
theAgen->Realloc code.

Comment 3

[rickg]

I'm not crashing in nsStr; Here's the stack trace I see:

__sbh_alloc_block(int 3409484) line 591
_heap_alloc(unsigned int 14) line 152
_nh_malloc(unsigned int 14, int 0) line 108
malloc(unsigned int 14) line 52 + 15 bytes
PL_strdup(const char * 0x027d82e0) line 30 + 13 bytes
nsCRT::strdup(const char * 0x027d82e0) line 151 + 9 bytes
nsStdURL::nsStdURL(const nsStdURL & {...}) line 70 + 22 bytes
nsStdURL::Clone(nsStdURL * const 0x027d8c20, nsIURI * * 0x0012fc2c) line 156 +
31 bytes
nsChromeProtocolHandler::NewChannel(nsChromeProtocolHandler * const 0x004afaf0,
const char * 0x00cbaa40, nsIURI * 0x027d8c20, nsILoadGroup * 0x017d4210,
nsIEventSinkGetter * 0x00000000, nsIChannel * * 0x0012fc8c) line 159 + 16 bytes
nsIOService::NewChannelFromURI(nsIOService * const 0x004a99d0, const char *
0x00cbaa40, nsIURI * 0x027d8c20, nsILoadGroup * 0x017d4210, nsIEventSinkGetter *
0x00000000, nsIChannel * * 0x0012fcd0) line 220 + 43 bytes
NS_OpenURI(nsIChannel * * 0x0012fd2c, nsIURI * 0x027d8c20, nsILoadGroup *
0x017d4210, nsIEventSinkGetter * 0x00000000) line 63 + 33 bytes
ImageNetContextImpl::GetURL(ilIURL * 0x027d8b40, NET_ReloadMethod
NET_CACHE_ONLY_RELOAD, ilINetReader * 0x027d8b90) line 603 + 42 bytes
il_image_complete(il_container_struct * 0x027d40d0) line 1507
ImgDCallbk::ImgDCBHaveImageAll(ImgDCallbk * const 0x027196b0) line 159 + 12
bytes
process_buffered_gif_input_data(gif_struct * 0x027dad00) line 651
gif_delay_time_callback(void * 0x027d40d0) line 670 + 9 bytes
timer_callback(nsITimer * 0x027d8040, void * 0x027d8540) line 67 + 12 bytes
TimerImpl::Fire(unsigned long 149274515) line 308 + 17 bytes
TimerImpl::ProcessTimeouts(unsigned long 149274515) line 187
FireTimeout(HWND__ * 0x00000000, unsigned int 275, unsigned int 28733, unsigned
long 149274515) line 101 + 9 bytes
USER32! 77e7128c()
nsAppShellService::Run(nsAppShellService * const 0x00457c80) line 456
main1(int 1, char * * 0x004101d0) line 591 + 12 bytes
main(int 1, char * * 0x004101d0) line 637 + 13 bytes
APPRUNNER! mainCRTStartup + 227 bytes
KERNEL32! 77f1b304()

Comment 4

[Peter Trudelle]

rick, why'd you assign this to me?  I don't see how XPToolkit could have
anything to do with it, and I don't know who would.
BTW, is this feature on the must-have list for 'beta'?

Comment 5

[Robert John Churchill]

Note: In a build from today (Sep 20), this now works for me.  I suspect its
fixed due to changes that went into nsString over the weekend.

Comment 6

[Peter Trudelle]

so it does. resolving as worksforme

Comment 7

[Teruko Kobayashi]

I verified this in 11-01-08 build.