153587 - Browser crashes when scrolling horizontally on page with _very_ long string.

Status: RESOLVED WORKSFORME

(Core :: Layout, defect, P3)

Description

[Christian Reis]

When loading a page with a _very_ long, unbroken string, horizontal scrolling
(obviously) to the right will result in a browser crash. This occurs both in the
browser layout window and in the view source window.

I'll attach a testcase, and if I can, a stack trace.

Comment 1

[Christian Reis]

Attachment: file that kills mozilla

The attached file crashes mozilla and brings down X. The string isn't _that_
long, and i've tried to reproduce with a longer string with different contents
with no success, so I'm not sure. This one works 100% of the time, though. 

Steps to reproduce:
1. Load attachment in mozilla. Mine is 2002061908.
2. Scroll horizontally slowly to the right. If no crash occurs, repeat this;
I've had it happen on the first try, and on the 10th try, so insist a bit.
3. Watch mozilla go boom and bring X11 down with it.

Comment 2

[Christian Reis]

Yep, it crashes through http:// and file:// - I just did the test. :-)

Comment 3

[Andrew Schultz]

Do you get any errors in your XFree86 logs?  What version of XFree86 are you
running?  Do you mean by "slowly" that I need to just hold the arrow button, or
does this occur with dragging the slider?

worksforme with linux trunk build 20020622 and RH73 (XFree86 4.2.0), although I
wasn't extremely persistent.

Comment 4

[Christian Reis]

It's XFree4.0.3, and no, X just dies. It happens when dragging the slider,
sorry, and it has to be slowly and multiple times right to left, left to right.
But on occasion it's just once and that's it.

Comment 5

[Moied]

WFM:By loading attached testcase using Linux Branch build 20020625 on RH70 and
when dragging the slider,slowly and multiple times right to left, left to right,
I dont see a crash, 

Comment 6

[Christian Reis]

Let me pull a newer build then.

Comment 7

[Christian Reis]

Well, it still crashes for me on 2002062808. This is hard to reproduce sometimes
- i had to resize the window and try about 5 times after that, but it bombed out
in the end.

It could be an XFree issue, I guess. This is X 4.1.0, and I have reproduced on
both 4.1.0 and 4.0.3 boxes. Nobody can reproduce this? Wish I had filed as
unconfirmed...

What else can I do that would be useful? 

Comment 8

[Andrew Schultz]

does the crash trigger talkback?  are you using an RPM build?

Comment 9

[Moied]

WFM: with 20020709 branch build

Comment 10

[Christian Reis]

No, it's a nightly, and I think it doesn't generate talkback IDs - X crashes
completely. I can generate a stack trace, and it's reproducible on every nightly
I've tested with. As I said, could be an X thing.

Comment 11

[kill this account]

WFM: I used this nightly: 
ftp://ftp.mozilla.org/pub/mozilla/nightly/2002-07-11-18-trunk/mozilla-i686-pc-linux-gnu-sea.tar.gz

I scrolled 10 times (one time = scroll slowly all the way to right then scroll
slowly all the way back)

This is a Redhat 7.1 system with a stock X server (I believe this is XFree86
 4.01)

Comment 12

[kill this account]

actually 4.0.3

Comment 13

[leon.zhang]

WFM 20020819

Comment 14

[Christian Reis]

BT, can you try and reproduce this on a nightly build and close if not? I know
you have a surefire way of checking if it still happens.

Comment 15

[Bruno Trevisan [Async Open Source]]

Tested on 2003021808
RH8

No mores craches. 
I can't close it, have no permission :(

Comment 16

[Christopher Blizzard (:blizzard)]

Marking worksforme based on reporter comments.