152545 - When component.reg is missing, browser crashes when trying to display "Charset" menu under "View" [nsCharsetMenu::InitSecondaryTiers]

Status: VERIFIED WORKSFORME

(Core :: Internationalization, defect)

Description

[Aleksey Nogin]

Reproducible: 100%

To reproduce:
1) Go to "View" menu and try to go to "Charset" submenu.

Actual: submenu never displayed, browser crashes.

BuildID 2002061717 compiled on RedHat Linux 7.2, running on RedHat Linux 7.2 and
on RedHat Linux 7.3+

(gdb) bt
#0  0x41716cbe in nsCharsetMenu::InitSecondaryTiers () from
/usr/lib/mozilla/components/libappcomps.so
#1  0x4171479d in nsCharsetMenuObserver::Observe () from
/usr/lib/mozilla/components/libappcomps.so
#2  0x4014a76f in nsObserverService::NotifyObservers () from /usr/lib/libxpcom.so
#3  0x401a5e0c in XPTC_InvokeByIndex () from /usr/lib/libxpcom.so
#4  0x4073c14e in XPCWrappedNative::CallMethod () from
/usr/lib/mozilla/components/libxpconnect.so
#5  0x40742500 in XPC_WN_CallMethod () from
/usr/lib/mozilla/components/libxpconnect.so
#6  0x400a1a1f in js_Invoke () from /usr/lib/libmozjs.so
#7  0x400a9f95 in js_Interpret () from /usr/lib/libmozjs.so
#8  0x400a1a80 in js_Invoke () from /usr/lib/libmozjs.so
#9  0x400a1c82 in js_InternalInvoke () from /usr/lib/libmozjs.so
#10 0x40081462 in JS_CallFunctionValue () from /usr/lib/libmozjs.so
#11 0x41017f80 in nsJSContext::CallEventHandler () from
/usr/lib/mozilla/components/libjsdom.so
#12 0x41049248 in nsJSEventListener::HandleEvent () from
/usr/lib/mozilla/components/libjsdom.so
#13 0x410b692a in nsEventListenerManager::HandleEventSubType ()
   from /usr/lib/mozilla/components/libgkcontent.so
#14 0x410b9218 in nsEventListenerManager::HandleEvent () from
/usr/lib/mozilla/components/libgkcontent.so
#15 0x411b7a7b in nsXULElement::HandleDOMEvent () from
/usr/lib/mozilla/components/libgkcontent.so
#16 0x411b7bad in nsXULElement::HandleDOMEvent () from
/usr/lib/mozilla/components/libgkcontent.so
#17 0x41a8451e in PresShell::HandleDOMEventWithTarget () from
/usr/lib/mozilla/components/libgklayout.so
#18 0x41b4609b in nsMenuFrame::OnCreated () from
/usr/lib/mozilla/components/libgklayout.so
#19 0x41b41ed9 in nsMenuFrame::OpenMenuInternal () from
/usr/lib/mozilla/components/libgklayout.so
#20 0x41b41598 in nsMenuFrame::AttributeChanged () from
/usr/lib/mozilla/components/libgklayout.so
#21 0x41ad881a in nsCSSFrameConstructor::AttributeChanged () from
/usr/lib/mozilla/components/libgklayout.so
#22 0x41292a8d in StyleSetImpl::AttributeChanged () from
/usr/lib/mozilla/components/libgkcontent.so
#23 0x41a82e6f in PresShell::AttributeChanged () from
/usr/lib/mozilla/components/libgklayout.so
#24 0x411cd2f8 in nsXULDocument::AttributeChanged () from
/usr/lib/mozilla/components/libgkcontent.so
#25 0x411b5979 in nsXULElement::SetAttr () from
/usr/lib/mozilla/components/libgkcontent.so
#26 0x411b21bc in nsXULElement::SetAttribute () from
/usr/lib/mozilla/components/libgkcontent.so
#27 0x41b41739 in nsMenuFrame::OpenMenu () from
/usr/lib/mozilla/components/libgklayout.so
#28 0x41b43d1d in nsMenuFrame::Notify () from
/usr/lib/mozilla/components/libgklayout.so
#29 0x40191bb0 in nsTimerImpl::Fire () from /usr/lib/libxpcom.so
#30 0x40191ce9 in handleTimerEvent () from /usr/lib/libxpcom.so
#31 0x4018d6a2 in PL_HandleEvent () from /usr/lib/libxpcom.so
#32 0x4018d589 in PL_ProcessPendingEvents () from /usr/lib/libxpcom.so
#33 0x4018e73d in nsEventQueueImpl::ProcessPendingEvents () from
/usr/lib/libxpcom.so
#34 0x4083f556 in event_processor_callback () from
/usr/lib/mozilla/components/libwidget_gtk.so
#35 0x4083f285 in our_gdk_io_invoke () from
/usr/lib/mozilla/components/libwidget_gtk.so
#36 0x403aef9e in g_io_unix_dispatch () from /usr/lib/libglib-1.2.so.0
#37 0x403b0773 in g_main_dispatch () from /usr/lib/libglib-1.2.so.0
#38 0x403b0d39 in g_main_iterate () from /usr/lib/libglib-1.2.so.0
#39 0x403b0eec in g_main_run () from /usr/lib/libglib-1.2.so.0
#40 0x402cb333 in gtk_main () from /usr/lib/libgtk-1.2.so.0
#41 0x4083f9b9 in nsAppShell::Run () from
/usr/lib/mozilla/components/libwidget_gtk.so
#42 0x4081e902 in nsAppShellService::Run () from
/usr/lib/mozilla/components/libnsappshell.so
#43 0x08053055 in getCountry ()
#44 0x0805399b in main ()
#45 0x4050e647 in __libc_start_main (main=0x8053850 <main>, argc=1,
ubp_av=0xbffed9c4,
    init=0x804cc4c <_init>, fini=0x8055220 <_fini>, rtld_fini=0x4000dcd4
<_dl_fini>, stack_end=0xbffed9bc)
    at ../sysdeps/generic/libc-start.c:129

Comment 1

[Roy Yokoyama]

Anybody else seeing this?  
tracy couldn't reproduce it on his linux 6x.

Comment 2

[Aleksey Nogin]

The binaries I've used were compiled optimized non-debug. I've reproduced the
crash on two machines with different profiles (but identical Mozilla binaries).

BTW, The View -> Charset Coding in MailNews crashes as well.

Comment 3

[Aleksey Nogin]

Ah, now I know what else is needed to reproduce it: delete your component.reg

I'll try to figure out why it wasn't properly created (obviously, it's a
different bug).

Comment 4

[Yuying Long]

I can not reproduce this on 06-18 1.0.0 branch build / Linux RH7.2.

Comment 5

[Aleksey Nogin]

component.reg not created is bug 153183 (currently marked "RESOLVED INVALID"
which I am trying to argue against).

Comment 6

[Doug Turner (:dougt)]

this is a "regression" caused by 48888.  I don't think that it is a serious
regression or problem.  

If people start deleting files, such as the component.reg, I do not think that
this is a supported configuration.  Sure Sure, we shouldn't crash, but just to
prioritize this, it shouldn't be a high priority.

Comment 7

[Yuying Long]

Is mac bug 153149(bugscape ID 16927) related? cause that one is really related
with compnent.reg.

Comment 8

[Aleksey Nogin]

Yes, I believe that bug 153149 is a dup of this one.

Comment 9

[Boris 'pi' Piwinger]

I just ran into the same problem. For comment 6 from Doug T. I have to say, that
I did not delete the file. I have no idea, why it is not here. So this is a
serious problem.

Is there a workaround to get component.reg?

pi

Comment 10

[Boris 'pi' Piwinger]

Adding to my last comment. There are several bugs where you are asked to remove
component.bug, also web pages on www.mozilla.org or other good sources, e.g.:
http://www.mozilla.org/projects/blackwood/java-plugins/
http://home.c2i.net/dark/My_Mozilla_FAQ.html
http://enigmail.mozdev.org/troubles.html
http://www.snible.org/linux/mozilla.html

pi

Comment 11

[Roy Yokoyama]

crashing on linux -> shanjian

Comment 12

[Aleksey Nogin]

Interesting, I've just realized that this WFM with BuildID 2002062920 (trunk) -
when component.reg is missing, the "View -> Character Coding -> Auto Detect"
menu is empty, but no crashes...

Comment 13

[Boris 'pi' Piwinger]

component.reg is gone for good. Also see last comment. Marking WFM then.

pi

Comment 14

[Yuying Long]

Mark as verified as woksForMe per comments above.