14698 - JS_Assert (crash) when clicking on javascript: URL

Status: VERIFIED DUPLICATE of bug 14049

(Core :: JavaScript Engine, defect, P3)

Description

[Alec Flett]

I don't know if this is unique to yahoo, or if it's all javascript: URLs, but I
crash here:
(gdb) where
#0  0x4022d111 in __kill ()
#1  0x4017bf7b in raise (sig=6) at signals.c:63
#2  0x4022e447 in abort () at ../sysdeps/generic/abort.c:88
#3  0x4008eeeb in Letext () at jsutil.c:130
#4  0x4006d7ec in js_LockObj (cx=0x880ceb8, obj=0x880a908) at jslock.c:699
#5  0x4006cc0e in js_GetSlotWhileLocked (cx=0x880ceb8, obj=0x880a908, slot=2)
    at jslock.c:259
#6  0x400486ea in JS_GetPrivate (cx=0x880ceb8, obj=0x880a908) at jsapi.c:1309
#7  0x40398bb6 in nsJSContext::GetGlobalObject (this=0x8803838)
    at nsJSEnvironment.cpp:252
#8  0x40398609 in nsJSContext::EvaluateString (this=0x8803838,
    aScript=@0xbf7ffa30, jsObj=0x880a908, principal=0x0, aURL=0x0, aLineNo=0,
    aRetValue=@0xbf7ffa4c, aIsUndefined=0xbf7ffa20) at nsJSEnvironment.cpp:159
#9  0x4109f4fa in ?? ()
   from /home1/alecf/xpc/mozilla/dist/bin/components/libjsurl.so
#10 0x4109f620 in ?? ()
   from /home1/alecf/xpc/mozilla/dist/bin/components/libjsurl.so
#11 0x4083c006 in ?? ()
   from /home1/alecf/xpc/mozilla/dist/bin/components/libnecko.so
#12 0x4083bc5c in ?? ()
   from /home1/alecf/xpc/mozilla/dist/bin/components/libnecko.so
#13 0x4010528e in ?? () from /home1/alecf/xpc/mozilla/dist/bin/libxpcom.so
#14 0x40103f39 in ?? () from /home1/alecf/xpc/mozilla/dist/bin/libxpcom.so
---Type <return> to continue, or q <return> to quit---
#15 0x4016626b in ?? () from /home1/alecf/xpc/mozilla/dist/bin/libnspr3.so
#16 0x40179ce9 in pthread_start_thread (arg=0xbf7ffe7c) at manager.c:204



This particular case happens consistently when I click the "Check All" link at
the bottom of the message list window in yahoo mail.

Comment 1

[Alec Flett]

Sure enough, any javascript: URL crashes.
do we have to call abort() on an assert? Can't we have some kind of compile-time
flag that says whether or not we want to crash the whole-durn-app?

Comment 2

[Norris Boyd]

*** This bug has been marked as a duplicate of 14049 ***

Comment 3

[Joseph Elwell]

[bugday] there's a more generic javascript: URL bug, but this one will do just
fine.
marking verified.