173062 - Immediate crash loading http://geocities.com/moz_blubber [@ nsView::ConvertFromParentCoords ][@ nsView::GetClippedRect]

Status: RESOLVED DUPLICATE of bug 171334

(Core :: Layout, defect)

Description

[David Gerard]

User-Agent:       Mozilla/5.0 (Windows; U; WinNT4.0; en-US; rv:1.2b) Gecko/20021007
Build Identifier: Mozilla/5.0 (Windows; U; WinNT4.0; en-US; rv:1.2b) Gecko/20021007

Immediate crash loading http://geocities.com/moz_blubber - the moment it starts
loading.

This is GeoCities, so who knows what **** they're loading onto the page ...

Reproducible: Always

Steps to Reproduce:
1. Go to http://geocities.com/moz_blubber
2. Crash!

Actual Results:  
Crash

Expected Results:  
Load page. Works fine in IE 5.5.

Crashes in 2002100704 and 2002100308.

Talkbacks from 2002100308:
TB12198118X
TB19198178G
TB12198219Q

Talkback from 2002100704:
TB12198718M

Comment 1

[Russell Levy]

it doesn't seem to be the geocities page, but the source of the page. it works
in IE. It seems the author of the page put the code in there to break mozilla on
purpose. It has a lot of <BR>s, and then some code that doesn't actually display
anything.

Comment 2

[Olivier Cahagne]

Attachment: Stack trace from Linux 20020920

Comment 3

[Olivier Cahagne]

Didn't find dupes, marking NEW.

Comment 4

[David Gerard]

Attachment: Source of offending page

Source of offending page

Comment 5

[David Gerard]

The page presently doesn't crash Mozilla 1.0-rc3/FreeBSD. Someone got 1.0.1?

I just attached the source and, if that induces crashes, I'll try to find time
to distil a test case tomorrow.

Is NT4 and Linux enough to mark this 'OS: All'?

Comment 6

[greer]

Attachment: TB stack for incident #12198718

Comment 7

[greer]

The TB stack terminates at nsView::GetClippedRect. (cf. bug 148350) (TB incident
12198219 was a Winamp crash BTW. :) )

Comment 8

[David Gerard]

>> (TB incident 12198219 was a Winamp crash BTW. :) )

Are you quite sure about this, btw? This is on my work NT4 machine - it doesn't
even have Winamp installed, AFAIK!

Comment 9

[Matthias Versen [:Matti]]

roc: is that your bug ?

Comment 10

[Robert O'Callahan (:roc) (email my personal email if necessary)]

Yeah. This person thought they'd be clever and copied some stuff from
wheelhouse.com which crashes Mozilla. I have a fix for the crasher in bug 171334.

*** This bug has been marked as a duplicate of 171334 ***