Closed Bug 17119 Opened 25 years ago Closed 25 years ago

Crash due to invalid frame

Categories

(Core :: Layout, defect, P3)

Product:
Core
Component:
Layout
Platform:
Other
Other
Type:
defect

Tracking

()

Status:
VERIFIED FIXED

People

(Reporter: dp, Assigned: troy)

References

Details

To reproduce here is what i think I did:

- File->OpenWebLocation
- type in my.netscape.com ENTER
- after page load, type in "sites.netscape.net/dpsuresh/personal" in the url
  bar
- BOOM.

I will try reproducing this again.

(gdb) bt
#0  0x402d548f in ?? () from /lib/libc.so.6
#1  0x4024ff6e in ?? () from /usr/lib/libstdc  -libc6.1-1.so.2
#2  0x40dad562 in MaxElementSizePropertyDtor (aPresContext=0x824fa30,
aFrame=0xdadadada, aPropertyName=0x81c63c8, aPropertyValue=0xdadadada) at
nsBlockBandData.cpp:297
#3  0x40ffe7a5 in DestroyPropertyValuesFunctor::operator() (this=0xbffff020,
aKey=0xdadadada, aValue=0xdadadada) at nsFrameManager.cpp:1852
#4  0x40dbde1b in nsDST::EnumTree (this=0x87b3950, aNode=0x87bfe10,
aFunctor=@0xbffff020) at nsDST.cpp:375
#5  0x40dbddc1 in nsDST::Enumerate (this=0x87b3950, aFunctor=@0xbffff020) at
nsDST.cpp:362
#6  0x40dcafea in FrameManager::PropertyList::RemoveAllProperties
(this=0x87b3938, aPresContext=0x824fa30) at nsFrameManager.cpp:1867
#7  0x40dca52c in FrameManager::DestroyPropertyList (this=0x833a510,
aPresContext=0x824fa30) at nsFrameManager.cpp:1565
#8  0x40dc7085 in FrameManager::~FrameManager (this=0x833a510, __in_chrg=3) at
nsFrameManager.cpp:339
#9  0x40dc6f52 in FrameManager::Release (this=0x833a510) at
nsFrameManager.cpp:318
#10 0x40dec8b5 in PresShell::~PresShell (this=0x833a620, __in_chrg=3) at
nsPresShell.cpp:552
#11 0x40dec575 in PresShell::Release (this=0x833a620) at nsPresShell.cpp:483
#12 0x40ff9ff4 in nsCOMPtr
<nsIPresShell>::~nsCOMPtr (this=0x8781788, __in_chrg=2) at
../../../dist/include/nsCOMPtr.h:457
#13 0x40fbc3f1 in DocumentViewerImpl::~DocumentViewerImpl (this=0x8781760,
__in_chrg=3) at nsDocumentViewer.cpp:273
#14 0x40fbc100 in DocumentViewerImpl::Release (this=0x8781760) at
nsDocumentViewer.cpp:217
#15 0x40952be6 in ?? () from
/home/dp/build.debug/mozilla/dist/bin/libraptorwebwidget.so
#16 0x40950948 in ?? () from
/home/dp/build.debug/mozilla/dist/bin/libraptorwebwidget.so
#17 0x409514af in ?? () from
/home/dp/build.debug/mozilla/dist/bin/libraptorwebwidget.so
#18 0x409514af in ?? () from
/home/dp/build.debug/mozilla/dist/bin/libraptorwebwidget.so
#19 0x414e7ad0 in ?? () from
/home/dp/build.debug/mozilla/dist/bin/components/libnecko_http.so
#20 0x414e6a04 in ?? () from
/home/dp/build.debug/mozilla/dist/bin/components/libnecko_http.so
#21 0x408eab21 in ?? () from
/home/dp/build.debug/mozilla/dist/bin/components/libnecko.so
#22 0x408ea0ba in ?? () from
/home/dp/build.debug/mozilla/dist/bin/components/libnecko.so
#23 0x4019933b in ?? () from /home/dp/build.debug/mozilla/dist/bin/libplds3.so
#24 0x4019924c in ?? () from /home/dp/build.debug/mozilla/dist/bin/libplds3.so
#25 0x40157b09 in nsEventQueueImpl::ProcessPendingEvents (this=0x80a0d80) at
nsEventQueue.cpp:190
#26 0x40526966 in ?? () from
/home/dp/build.debug/mozilla/dist/bin/libwidget_gtk.so
#27 0x4052632f in ?? () from
/home/dp/build.debug/mozilla/dist/bin/libwidget_gtk.so
#28 0x406b4d6a in ?? () from /usr/lib/libglib-1.2.so.0
#29 0x406b62c6 in ?? () from /usr/lib/libglib-1.2.so.0
#30 0x406b6801 in ?? () from /usr/lib/libglib-1.2.so.0
#31 0x406b6979 in ?? () from /usr/lib/libglib-1.2.so.0
#32 0x405e5f3a in ?? () from /usr/lib/libgtk-1.2.so.0
#33 0x40526e6f in ?? () from
/home/dp/build.debug/mozilla/dist/bin/libwidget_gtk.so
#34 0x4039af41 in ?? () from
/home/dp/build.debug/mozilla/dist/bin/libnsappshell.so
#35 0x804b777 in main1 (argc=1, argv=0xbffffa34) at nsAppRunner.cpp:604
#36 0x804b9f9 in main (argc=1, argv=0xbffffa34) at nsAppRunner.cpp:694
#37 0x40294cb3 in ?? () from /lib/libc.so.6
(gdb)
Status: NEW → RESOLVED
Closed: 25 years ago
Resolution: --- → FIXED
Update nsDST.cpp
*** Bug 17139 has been marked as a duplicate of this bug. ***
Status: RESOLVED → VERIFIED
With the Oct 25th build (1999102508), the problem has been fixed.
*** Bug 17198 has been marked as a duplicate of this bug. ***
You need to log in before you can comment on or make changes to this bug.