151891 - Website Testing; Chimera crashes on this link

Status: VERIFIED FIXED

(Camino Graveyard :: General, defect)

Description

[stone]

chimera 0.3.0, nightly build 6.14, Mac OS X 10.1.5,
I just tried to open that link and the only think happend - chimera crashed!

Date/Time:  2002-06-14 21:59:49 +0200
OS Version: 10.1.5 (Build 5S60)

Command:    Navigator
PID:        381

Exception:  EXC_BAD_ACCESS (0x0001)
Codes:      KERN_INVALID_ADDRESS (0x0001) at 0x78807d30

Thread 0:
 #0   0x001080ec in OnDataSizeChange__14nsCacheServiceP12nsCacheEntryi
 #1   0x006fb104 in RequestDataSizeChange__22nsCacheEntryDescriptori
 #2   0x006fc248 in OnWrite__Q222nsCacheEntryDescriptor21nsOutputStreamWrapperUi
 #3   0x006fc11c in Write__Q222nsCacheEntryDescriptor21nsOutputStreamWrapperPCcUiPUi
 #4   0x00e71d60 in TeeSegment__16nsInputStreamTeePCcUi
 #5   0x00e71ddc in WriteSegmentFun__16nsInputStreamTeeP14nsIInputStreamPvPCcUiUiPUi
 #6   0x00e74f80 in
ReadSegments__Q26nsPipe17nsPipeInputStreamPFP14nsIInputStreamPvPCcUiUiPUi_UiPvUiPUi
 #7   0x00e72178 in
ReadSegments__16nsInputStreamTeePFP14nsIInputStreamPvPCcUiUiPUi_UiPvUiPUi
 #8   0x002e2928 in WriteFrom__13nsGIFDecoder2P14nsIInputStreamUiPUi
 #9   0x005a9464 in
OnDataAvailable__10imgRequestP10nsIRequestP11nsISupportsP14nsIInputStreamUiUi
 #10  0x002fea6c in
OnDataAvailable__13ProxyListenerP10nsIRequestP11nsISupportsP14nsIInputStreamUiUi
 #11  0x0017c698 in
OnDataAvailable__19nsStreamListenerTeeP10nsIRequestP11nsISupportsP14nsIInputStreamUiUi
 #12  0x004a6894 in
OnDataAvailable__13nsHttpChannelP10nsIRequestP11nsISupportsP14nsIInputStreamUiUi
 #13  0x00176f64 in HandleEvent__22nsOnDataAvailableEvent
 #14  0x0017c95c in HandlePLEvent__23nsARequestObserverEventP7PLEvent
 #15  0x00e8fe04 in PL_HandleEvent
 #16  0x00e8fcec in PL_ProcessPendingEvents
 #17  0x00e90cb4 in ProcessPendingEvents__16nsEventQueueImpl
 #18  0x0040fe5c in -[EventQueueHandler eventTimer:]
 #19  0x708d06e8 in __NSFireTimer
 #20  0x70196cbc in __CFRunLoopDoTimer
 #21  0x7017c244 in __CFRunLoopRun
 #22  0x701b70ec in CFRunLoopRunSpecific
 #23  0x7017b8cc in CFRunLoopRunInMode
 #24  0x7312d904 in RunEventLoopInModeUntilEventArrives
 #25  0x731407a4 in ReceiveNextEventCommon
 #26  0x731715fc in BlockUntilNextEventMatchingListInMode
 #27  0x70bd70b8 in _DPSNextEvent
 #28  0x70bfe5d8 in -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:]
 #29  0x70c23468 in -[NSApplication run]
 #30  0x70c91ed0 in NSApplicationMain
 #31  0x00002730 in _start
 #32  0x00002560 in start

Thread 1:
 #0   0x70000978 in mach_msg_overwrite_trap
 #1   0x70005a04 in mach_msg
 #2   0x70026a2c in _pthread_become_available
 #3   0x70026724 in pthread_exit
 #4   0x70848ba0 in -[NSThread _exit]
 #5   0x70842368 in forkThreadForFunction
 #6   0x7002054c in _pthread_body

Thread 2:
 #0   0x700252fc in select
 #1   0x00dbe758 in poll
 #2   0x00dbae70 in _pr_poll_with_poll
 #3   0x00151b3c in Run__24nsSocketTransportService
 #4   0x00e92874 in Main__8nsThreadPv
 #5   0x00dbc32c in _pt_root
 #6   0x7002054c in _pthread_body

Thread 3:
 #0   0x7003f4c8 in semaphore_wait_signal_trap
 #1   0x7003f2c8 in _pthread_cond_wait
 #2   0x00db7418 in PR_WaitCondVar
 #3   0x00132ccc in DequeuePendingQ__12nsDNSService
 #4   0x001326d4 in Run__12nsDNSService
 #5   0x00e92874 in Main__8nsThreadPv
 #6   0x00dbc32c in _pt_root
 #7   0x7002054c in _pthread_body

Thread 4:
 #0   0x70044cf8 in semaphore_timedwait_signal_trap
 #1   0x70044cd8 in semaphore_timedwait_signal
 #2   0x7003f2b8 in _pthread_cond_wait
 #3   0x00db71b4 in pt_TimedWait
 #4   0x00db742c in PR_WaitCondVar
 #5   0x00e962d4 in Run__11TimerThread
 #6   0x00e92874 in Main__8nsThreadPv
 #7   0x00dbc32c in _pt_root
 #8   0x7002054c in _pthread_body

Thread 5:
 #0   0x7003f4c8 in semaphore_wait_signal_trap
 #1   0x7003f2c8 in _pthread_cond_wait
 #2   0x00db7418 in PR_WaitCondVar
 #3   0x00e93994 in GetRequest__12nsThreadPoolP9nsIThread
 #4   0x00e942e8 in Run__20nsThreadPoolRunnable
 #5   0x00e92874 in Main__8nsThreadPv
 #6   0x00dbc32c in _pt_root
 #7   0x7002054c in _pthread_body

Thread 6:
 #0   0x7003f4c8 in semaphore_wait_signal_trap
 #1   0x7003f2c8 in _pthread_cond_wait
 #2   0x7086c34c in -[NSConditionLock lockWhenCondition:]
 #3   0x70ba1358 in -[NSUIHeartBeat _heartBeatThread:]
 #4   0x70842358 in forkThreadForFunction
 #5   0x7002054c in _pthread_body


PPC Thread State:
  srr0: 0x001080ec srr1: 0x0200f030                vrsave: 0x00000000
   xer: 0x00000010   lr: 0x001080b8  ctr: 0x70000a30   mq: 0x00000000
    r0: 0x001080b8   r1: 0xbfffe5d0   r2: 0xbfffe96a   r3: 0x00ffffff
    r4: 0x0355e6b0   r5: 0x000000a3   r6: 0xbfffe758   r7: 0x00000000
    r8: 0x00000000   r9: 0x78807d00  r10: 0x00004c80  r11: 0x00dd2fbc
   r12: 0x70000a30  r13: 0x00000000  r14: 0x00000033  r15: 0x00060840
   r16: 0x00000001  r17: 0x80160fa8  r18: 0x0005f7f8  r19: 0x00001707
   r20: 0x00000000  r21: 0x0000001c  r22: 0x70004234  r23: 0x700042c8
   r24: 0x7016b0c8  r25: 0x006bac3c  r26: 0x8081ab5c  r27: 0x40bc2000
   r28: 0x00000000  r29: 0xbfffef00  r30: 0x00000000  r31: 0x00000001

**********

Comment 1

[Winnie Lam]

Attachment: Crash log

This page crashed for me too.  Tested using chimera 0.3.0 06-14 build on OS
10.1.5.  My attached crash log looks slightly different from the reporter's.

I was able to see the page for a few seconds, and then chimera crashed.

Comment 2

[Steve Smart]

Attachment: Testcase

This is the same as bug 149091 where there is a huge background image (this one
is 8,000x1 pixels). Note that the image doesn't need to be a background, you
can just go to https://secure.liveoaktelecom.com/service/pic/bg.gif and Chimera
will crash. Alternately you can look at the testcase.

Comment 3

[Greg K.]

Confirmed using Chimera/20020614, but my stack looks different than either
Stone's or Winnie's, crashing instead in [objc_msgSend]. Will attach.

Comment 4

[Greg K.]

Attachment: Crash Report generated by Chimera/20020614 showing crash in [objc_msgSend]

Comment 5

[Steve Smart]

Bug 149091 is fixed, so this is as well (verified in 06-15).

Comment 6

[saari (gone)]

yeah, bryner and I fixed this

Comment 7

[Winnie Lam]

Verified with 06-18 build on OS 10.1.5.