Closed
Bug 18086
Opened 26 years ago
Closed 26 years ago
I get a SIGSEV using the mozilla bug form.
Categories
(Core :: Layout: Form Controls, defect, P3)
Tracking
()
People
(Reporter: dejong, Assigned: leger)
Details
I went to http://bugzilla.mozilla.org/ and entered a bug number
(9804) into the "Find bug #" dialog. When I pressed the Find
button I got this SIGSEV from mozilla. I was running this on
a RedHat 5.2 system (Linux-Intel) form the CVS Fri Nov 4.
The code in question is here
(layout/html/forms/src/nsListControlFrame.cpp Line 1115)
1111 nsIDOMHTMLSelectElement*
1112 nsListControlFrame::GetSelect(nsIContent * aContent)
1113 {
1114 nsIDOMHTMLSelectElement* selectElement = nsnull;
1115 nsresult result =
aContent->QueryInterface(nsCOMTypeInfo<nsIDOMHTMLSelectElement>::GetIID(),
The problem is that the aContent pointer is NULL so it creates
a SIGSEV.
#0 0x40e76dd2 in nsListControlFrame::GetSelect (aContent=0x0)
at ../../../../../layout/html/forms/src/nsListControlFrame.cpp:1115
#1 0x40e76f4e in nsListControlFrame::GetOptions (aContent=0x0, aSelect=0x0)
at ../../../../../layout/html/forms/src/nsListControlFrame.cpp:1168
#2 0x40e76ece in nsListControlFrame::GetOptionContent (this=0x85ec868,
aIndex=2)
at ../../../../../layout/html/forms/src/nsListControlFrame.cpp:1151
#3 0x40e773b2 in nsListControlFrame::SetContentSelected (this=0x85ec868,
aIndex=2, aSelected=0)
at ../../../../../layout/html/forms/src/nsListControlFrame.cpp:1286
#4 0x40e77464 in nsListControlFrame::Deselect (this=0x85ec868)
at ../../../../../layout/html/forms/src/nsListControlFrame.cpp:1308
#5 0x40e77634 in nsListControlFrame::Reset (this=0x85ec868,
aPresContext=0x832ed30)
at ../../../../../layout/html/forms/src/nsListControlFrame.cpp:1392
#6 0x40e78111 in nsListControlFrame::AddOption (this=0x85ec868,
aPresContext=0x832ed30, aIndex=2)
at ../../../../../layout/html/forms/src/nsListControlFrame.cpp:1682
#7 0x40e51fff in nsComboboxControlFrame::AddOption (this=0x85ec7a0,
aPresContext=0x832ed30, aIndex=2)
at ../../../../../layout/html/forms/src/nsComboboxControlFrame.cpp:1087
#8 0x40e0a8fb in nsHTMLSelectElement::AddOption (this=0x8350bc8,
aContent=0x8556c14)
at ../../../../../layout/html/content/src/nsHTMLSelectElement.cpp:662
#9 0x40dfb5ac in nsHTMLOptionElement::SetParent (this=0x8556c08,
aParent=0x8350bd8)
at ../../../../../layout/html/content/src/nsHTMLOptionElement.cpp:207
#10 0x40da98ee in nsGenericHTMLContainerElement::AppendChildTo (
this=0x8350bec, aKid=0x8556c14, aNotify=0)
at ../../../../../layout/html/content/src/nsGenericHTMLElement.cpp:2945
#11 0x40e0c1b2 in nsHTMLSelectElement::AppendChildTo (this=0x8350bc8,
aKid=0x8556c14, aNotify=0)
at ../../../../../layout/html/content/src/nsHTMLSelectElement.cpp:165
#12 0x40e3052a in SinkContext::CloseContainer (this=0x873c820,
aNode=@0xbffff068)
at ../../../../../layout/html/document/src/nsHTMLContentSink.cpp:1217
#13 0x40e3404d in HTMLContentSink::CloseContainer (this=0x873b978,
aNode=@0xbffff068)
at ../../../../../layout/html/document/src/nsHTMLContentSink.cpp:2547
#14 0x410eeb5e in CNavDTD::CloseContainer (this=0x8733c38, aNode=@0xbffff068,
aTag=eHTMLTag_option, aClosedByStartTag=1)
at ../../../htmlparser/src/CNavDTD.cpp:2733
#15 0x410eecaf in CNavDTD::CloseContainersTo (this=0x8733c38, anIndex=7,
aTag=eHTMLTag_option, aClosedByStartTag=1)
at ../../../htmlparser/src/CNavDTD.cpp:2770
#16 0x410eb478 in CNavDTD::HandleDefaultStartToken (this=0x8733c38,
aToken=0x82fa718, aChildTag=eHTMLTag_option, aNode=@0x85d45b0)
at ../../../htmlparser/src/CNavDTD.cpp:973
#17 0x410ebe6a in CNavDTD::HandleStartToken (this=0x8733c38, aToken=0x82fa718)
at ../../../htmlparser/src/CNavDTD.cpp:1285
#18 0x410eac12 in CNavDTD::HandleToken (this=0x8733c38, aToken=0x82fa718,
aParser=0x873b6a0) at ../../../htmlparser/src/CNavDTD.cpp:654
#19 0x410ea5fc in CNavDTD::BuildModel (this=0x8733c38, aParser=0x873b6a0,
aTokenizer=0x85f2a50, anObserver=0x0, aSink=0x873b978)
at ../../../htmlparser/src/CNavDTD.cpp:458
#20 0x410f917c in nsParser::BuildModel (this=0x873b6a0)
at ../../../htmlparser/src/nsParser.cpp:1048
#21 0x410f903c in nsParser::ResumeParse (this=0x873b6a0, aDefaultDTD=0x0,
aIsFinalChunk=0) at ../../../htmlparser/src/nsParser.cpp:959
#22 0x410f9b32 in nsParser::OnDataAvailable (this=0x873b6a0,
channel=0x8732020, aContext=0x0, pIStream=0x85c43c0, sourceOffset=0,
aLength=1460) at ../../../htmlparser/src/nsParser.cpp:1335
#23 0x408e0cbb in nsDocumentBindInfo::OnDataAvailable (this=0x8721c80,
channel=0x8732020, ctxt=0x0, aStream=0x85c43c0, sourceOffset=0,
aLength=1460) at ../../../webshell/src/nsDocLoader.cpp:1216
#24 0x408e1938 in nsChannelListener::OnDataAvailable (this=0x871bf10,
aChannel=0x8732020, aContext=0x0, aInStream=0x85c43c0, aOffset=0,
aCount=1460) at ../../../webshell/src/nsDocLoader.cpp:1401
#25 0x4129cd7d in nsHTTPResponseListener::OnDataAvailable (this=0x870d4d0,
channel=0x87357d0, context=0x8732020, i_pStream=0x85c43c0,
i_SourceOffset=2753, i_Length=1460)
at ../../../../../netwerk/protocol/http/src/nsHTTPResponseListener.cpp:171
#26 0x40877c5a in nsOnDataAvailableEvent::HandleEvent (this=0x8733110)
at ../../../../netwerk/base/src/nsAsyncStreamListener.cpp:412
#27 0x40877202 in nsStreamListenerEvent::HandlePLEvent (aEvent=0x8733138)
at ../../../../netwerk/base/src/nsAsyncStreamListener.cpp:169
#28 0x401872fb in PL_HandleEvent (self=0x8733138) at plevent.c:537
#29 0x4018720d in PL_ProcessPendingEvents (self=0x80a00e8) at plevent.c:498
#30 0x4014a915 in nsEventQueueImpl::ProcessPendingEvents (this=0x80a00c0)
at ../../../xpcom/threads/nsEventQueue.cpp:190
#31 0x4049d2fc in event_processor_callback (data=0x80a00c0, source=5,
condition=GDK_INPUT_READ) at ../../../../widget/src/gtk/nsAppShell.cpp:228
#32 0x4049cc03 in our_gdk_io_invoke (source=0x8191ce8, condition=G_IO_IN,
data=0x81adf20) at ../../../../widget/src/gtk/nsAppShell.cpp:49
#33 0x4062c72e in g_io_unix_dispatch (source_data=0x8191d00,
current_time=0xbffff700, user_data=0x81adf20) at giounix.c:135
#34 0x4062dc8f in g_main_dispatch (current_time=0xbffff700) at gmain.c:652
#35 0x4062e277 in g_main_iterate (block=1, dispatch=1) at gmain.c:870
#36 0x4062e3f9 in g_main_run (loop=0x80f6830) at gmain.c:928
#37 0x4055eedf in gtk_main () at gtkmain.c:475
#38 0x4049d80f in nsAppShell::Run (this=0x80a0ab0)
at ../../../../widget/src/gtk/nsAppShell.cpp:395
#39 0x4032a031 in nsAppShellService::Run (this=0x809fdb8)
at ../../../../xpfe/appshell/src/nsAppShellService.cpp:480
#40 0x804c85c in main1 (argc=1, argv=0xbffff914)
at ../../../xpfe/bootstrap/nsAppRunner.cpp:577
#41 0x804cae9 in main (argc=1, argv=0xbffff914)
at ../../../xpfe/bootstrap/nsAppRunner.cpp:667
Status: NEW → RESOLVED
Closed: 26 years ago
Component: Browser-General → HTML Form Controls
Resolution: --- → DUPLICATE
*** This bug has been marked as a duplicate of 17852 ***
You need to log in
before you can comment on or make changes to this bug.
Description
•