Closed Bug 187016 Opened 22 years ago Closed 22 years ago

Crash loading Java applet at www.nfl.com [@ nsLineLayout::ReflowFrame ]

Categories

(Core :: Layout, defect, P1)

Product:
Core
Component:
Layout
Platform:
x86
All
Type:
defect

Tracking

()

Status:
RESOLVED DUPLICATE of bug 136927
Milestone:
Future

People

(Reporter: greer, Assigned: peterl-bugs)

Details

(Keywords: crash)

Crash Data

Alex, I got a crash at the signature in 152755 but with different frames in the
stack itself. Could you take a look at it and let me know if it's the same
issue. I would think it was a plugin problem but the stack says line layout.
I've repro'ed three times today (see also 15567156, 15567181)

I listed my steps. (While I was with Talkback I seem to remember a lot of users
who crashed while using CBS Sportsline (like this site) or CBS Marketwatch.)

Thx, Tom.

Product ID  	MozillaTrunk
Build ID 	2002122808
Trigger Time 	2002-12-28 12:29:49
Platform 	Win32
Operating System Windows NT 5.0 build 2195
Module 	gklayout.dll
URL visited 	www.nfl.com/gamecenter/playbyplay
User Comments 	I Tried to watch the play by play for a live football game. Used
these steps: 
1. go to nfl.com 
2. on the live game click "play by play" 
3. on the top part of the screen (below "Gamecenter: Play-by-play" click the
"Game Day Live" link 
4. the browser has trouble loading the applet. Wait a moment then close the new
window using the "X" in the upper right corner. Reproduced twice, once with an
old build (no Talkback) and once again with this Trunk build (12/28/02)

Stack Trace 	
nsLineLayout::ReflowFrame
[c:/builds/seamonkey/mozilla/layout/html/base/src/nsLineLayout.cpp, line 1260]
nsBlockFrame::ReflowInlineFrame
[c:/builds/seamonkey/mozilla/layout/html/base/src/nsBlockFrame.cpp, line 3910]
nsBlockFrame::DoReflowInlineFrames
[c:/builds/seamonkey/mozilla/layout/html/base/src/nsBlockFrame.cpp, line 3738]
nsBlockFrame::DoReflowInlineFramesAuto
[c:/builds/seamonkey/mozilla/layout/html/base/src/nsBlockFrame.cpp, line 3640]
nsBlockFrame::ReflowInlineFrames
[c:/builds/seamonkey/mozilla/layout/html/base/src/nsBlockFrame.cpp, line 3585]
nsBlockFrame::ReflowLine
[c:/builds/seamonkey/mozilla/layout/html/base/src/nsBlockFrame.cpp, line 2676]
nsBlockFrame::ReflowDirtyLines
[c:/builds/seamonkey/mozilla/layout/html/base/src/nsBlockFrame.cpp, line 2322]
nsBlockFrame::Reflow
[c:/builds/seamonkey/mozilla/layout/html/base/src/nsBlockFrame.cpp, line 954]
nsBlockReflowContext::ReflowBlock
[c:/builds/seamonkey/mozilla/layout/html/base/src/nsBlockReflowContext.cpp, line
549]
nsBlockFrame::ReflowBlockFrame
[c:/builds/seamonkey/mozilla/layout/html/base/src/nsBlockFrame.cpp, line 3343]
nsBlockFrame::ReflowLine
[c:/builds/seamonkey/mozilla/layout/html/base/src/nsBlockFrame.cpp, line 2544]
nsBlockFrame::ReflowDirtyLines
[c:/builds/seamonkey/mozilla/layout/html/base/src/nsBlockFrame.cpp, line 2322]
nsBlockFrame::Reflow
[c:/builds/seamonkey/mozilla/layout/html/base/src/nsBlockFrame.cpp, line 954]
nsContainerFrame::ReflowChild
[c:/builds/seamonkey/mozilla/layout/html/base/src/nsContainerFrame.cpp, line 951]
CanvasFrame::Reflow
[c:/builds/seamonkey/mozilla/layout/html/base/src/nsHTMLFrame.cpp, line 590]
nsBoxToBlockAdaptor::Reflow
[c:/builds/seamonkey/mozilla/layout/xul/base/src/nsBoxToBlockAdaptor.cpp, line 927]
nsBoxToBlockAdaptor::DoLayout
[c:/builds/seamonkey/mozilla/layout/xul/base/src/nsBoxToBlockAdaptor.cpp, line 668]
nsBox::Layout [c:/builds/seamonkey/mozilla/layout/xul/base/src/nsBox.cpp, line 1074]
nsScrollBoxFrame::DoLayout
[c:/builds/seamonkey/mozilla/layout/xul/base/src/nsScrollBoxFrame.cpp, line 361]
nsBox::Layout [c:/builds/seamonkey/mozilla/layout/xul/base/src/nsBox.cpp, line 1074]
nsBoxFrame::Reflow
[c:/builds/seamonkey/mozilla/layout/xul/base/src/nsBoxFrame.cpp, line 902]
nsContainerFrame::ReflowChild
[c:/builds/seamonkey/mozilla/layout/html/base/src/nsContainerFrame.cpp, line 951]
ViewportFrame::Reflow
[c:/builds/seamonkey/mozilla/layout/html/base/src/nsViewportFrame.cpp, line 581]
IncrementalReflow::Dispatch
[c:/builds/seamonkey/mozilla/layout/html/base/src/nsPresShell.cpp, line 896]
PresShell::ProcessReflowCommands
[c:/builds/seamonkey/mozilla/layout/html/base/src/nsPresShell.cpp, line 6439]
PresShell::FlushPendingNotifications
[c:/builds/seamonkey/mozilla/layout/html/base/src/nsPresShell.cpp, line 5139]
nsDocument::FlushPendingNotifications
[c:/builds/seamonkey/mozilla/content/base/src/nsDocument.cpp, line 3747]
nsHTMLDocument::FlushPendingNotifications
[c:/builds/seamonkey/mozilla/content/html/document/src/nsHTMLDocument.cpp, line
1585]
nsHTMLExternalObjSH::GetPluginInstance
[c:/builds/seamonkey/mozilla/dom/src/base/nsDOMClassInfo.cpp, line 5341]
nsHTMLExternalObjSH::PostCreate
[c:/builds/seamonkey/mozilla/dom/src/base/nsDOMClassInfo.cpp, line 5402]
XPCWrappedNative::GetNewOrUsed
[c:/builds/seamonkey/mozilla/js/src/xpconnect/src/xpcwrappednative.cpp, line 418]
XPCConvert::NativeInterface2JSObject
[c:/builds/seamonkey/mozilla/js/src/xpconnect/src/xpcconvert.cpp, line 1061]
nsXPConnect::WrapNative
[c:/builds/seamonkey/mozilla/js/src/xpconnect/src/nsXPConnect.cpp, line 566]
nsDOMClassInfo::WrapNative
[c:/builds/seamonkey/mozilla/dom/src/base/nsDOMClassInfo.cpp, line 989]
nsNamedArraySH::GetProperty
[c:/builds/seamonkey/mozilla/dom/src/base/nsDOMClassInfo.cpp, line 4475]
XPC_WN_Helper_GetProperty
[c:/builds/seamonkey/mozilla/js/src/xpconnect/src/xpcwrappednativejsops.cpp,
line 811]
js_GetProperty [c:/builds/seamonkey/mozilla/js/src/jsobj.c, line 2494]
js_Interpret [c:/builds/seamonkey/mozilla/js/src/jsinterp.c, line 2640]
js_Execute [c:/builds/seamonkey/mozilla/js/src/jsinterp.c, line 1022]
JS_EvaluateUCScriptForPrincipals [c:/builds/seamonkey/mozilla/js/src/jsapi.c,
line 3384]
nsJSContext::EvaluateString
[c:/builds/seamonkey/mozilla/dom/src/base/nsJSEnvironment.cpp, line 702]
nsScriptLoader::EvaluateScript
[c:/builds/seamonkey/mozilla/content/base/src/nsScriptLoader.cpp, line 584]
nsScriptLoader::ProcessRequest
[c:/builds/seamonkey/mozilla/content/base/src/nsScriptLoader.cpp, line 492]
nsScriptLoader::ProcessScriptElement
[c:/builds/seamonkey/mozilla/content/base/src/nsScriptLoader.cpp, line 436]
nsHTMLScriptElement::MaybeProcessScript
[c:/builds/seamonkey/mozilla/content/html/content/src/nsHTMLScriptElement.cpp,
line 697]
nsHTMLScriptElement::SetDocument
[c:/builds/seamonkey/mozilla/content/html/content/src/nsHTMLScriptElement.cpp,
line 501]
nsGenericHTMLContainerElement::AppendChildTo
[c:/builds/seamonkey/mozilla/content/html/content/src/nsGenericHTMLElement.cpp,
line 4064]
HTMLContentSink::ProcessSCRIPTTag
[c:/builds/seamonkey/mozilla/content/html/document/src/nsHTMLContentSink.cpp,
line 5642]
HTMLContentSink::AddLeaf
[c:/builds/seamonkey/mozilla/content/html/document/src/nsHTMLContentSink.cpp,
line 3623]
CNavDTD::AddLeaf [c:/builds/seamonkey/mozilla/htmlparser/src/CNavDTD.cpp, line 3756]
CNavDTD::HandleScriptToken
[c:/builds/seamonkey/mozilla/htmlparser/src/CNavDTD.cpp, line 2255]
CNavDTD::OpenContainer [c:/builds/seamonkey/mozilla/htmlparser/src/CNavDTD.cpp,
line 3404]
CNavDTD::HandleDefaultStartToken
[c:/builds/seamonkey/mozilla/htmlparser/src/CNavDTD.cpp, line 1348]
CNavDTD::HandleStartToken
[c:/builds/seamonkey/mozilla/htmlparser/src/CNavDTD.cpp, line 1749]
CNavDTD::HandleToken [c:/builds/seamonkey/mozilla/htmlparser/src/CNavDTD.cpp,
line 910]
CNavDTD::BuildModel [c:/builds/seamonkey/mozilla/htmlparser/src/CNavDTD.cpp,
line 530]
nsParser::BuildModel [c:/builds/seamonkey/mozilla/htmlparser/src/nsParser.cpp,
line 1911]
nsParser::ResumeParse [c:/builds/seamonkey/mozilla/htmlparser/src/nsParser.cpp,
line 1775]
nsParser::OnDataAvailable
[c:/builds/seamonkey/mozilla/htmlparser/src/nsParser.cpp, line 2411]
nsDocumentOpenInfo::OnDataAvailable
[c:/builds/seamonkey/mozilla/uriloader/base/nsURILoader.cpp, line 246]
nsStreamListenerTee::OnDataAvailable
[c:/builds/seamonkey/mozilla/netwerk/base/src/nsStreamListenerTee.cpp, line 98]
nsHttpChannel::OnDataAvailable
[c:/builds/seamonkey/mozilla/netwerk/protocol/http/src/nsHttpChannel.cpp, line 3088]
nsOnDataAvailableEvent::HandleEvent
[c:/builds/seamonkey/mozilla/netwerk/base/src/nsStreamListenerProxy.cpp, line 205]
PL_HandleEvent [c:/builds/seamonkey/mozilla/xpcom/threads/plevent.c, line 664]
Keywords: crash
following the steps, I crashed Mozilla 20021228 on Linux + JRE 1.4.1_01

#0  0x405d4277 in malloc () from /lib/libc.so.6
#1  0x405d4068 in malloc () from /lib/libc.so.6
#2  0x41810cdb in checked_malloc ()
   from /usr/lib/j2re1.4.1_01/plugin/i386/ns610/libjavaplugin_oji.so
#3  0x4180f4bd in jni_SecureNewObject ()
   from /usr/lib/j2re1.4.1_01/plugin/i386/ns610/libjavaplugin_oji.so
#4  0x418020be in CSecureJNIEnv::NewObject ()
   from /usr/lib/j2re1.4.1_01/plugin/i386/ns610/libjavaplugin_oji.so
#5  0x41675ba0 in ProxyJNIEnv::NewObjectV (env=0x84ab0b0, clazz=0x81a4ae0, 
    methodID=0x851d920, args=0xbfffee20) at ProxyJNI.cpp:467
#6  0x41675b17 in ProxyJNIEnv::NewObject (env=0x84ab0b0, clazz=0x81a4ae0, 
    methodID=0x851d920) at ProxyJNI.cpp:451
#7  0x41690f1c in jsj_ConvertJSValueToJavaObject (cx=0x84a1f60, 
    jEnv=0x84ab0b0, v=6, signature=0x8522ce8, cost=0xbfffee88, 
    java_value=0xbfffee8c, is_local_refp=0xbfffee90) at jsj_convert.c:286
#8  0x4169778d in nsCLiveconnect::Call (this=0x8556d88, jEnv=0x84ab0b0, 
    obj=139600944, name=0x8554d58, length=9, java_args=0x0, 
    principalsArray=0x0, numPrincipals=0, securitySupports=0x8523788, 
    pjobj=0xbfffef64) at nsCLiveconnect.cpp:586
#9  0x41810381 in JSObjectCall ()
   from /usr/lib/j2re1.4.1_01/plugin/i386/ns610/libjavaplugin_oji.so
#10 0x41810980 in JSHandler ()
   from /usr/lib/j2re1.4.1_01/plugin/i386/ns610/libjavaplugin_oji.so
#11 0x41805bf1 in JavaVM5::ProcessSpontaneousQueue ()
   from /usr/lib/j2re1.4.1_01/plugin/i386/ns610/libjavaplugin_oji.so
#12 0x41804e77 in spont_queue_processor ()
   from /usr/lib/j2re1.4.1_01/plugin/i386/ns610/libjavaplugin_oji.so
#13 0x41801a86 in QueueRunnable::Run ()
   from /usr/lib/j2re1.4.1_01/plugin/i386/ns610/libjavaplugin_oji.so
#14 0x4166b342 in handleRunnableEvent (aEvent=0x8554cc0)
    at nsJVMManager.cpp:299
#15 0x4018a334 in PL_HandleEvent (self=0x8554cc0) at plevent.c:663
#16 0x4018a167 in PL_ProcessPendingEvents (self=0x808f0f8) at plevent.c:593
#17 0x4018bee4 in nsEventQueueImpl::ProcessPendingEvents (this=0x808f0b0)
    at nsEventQueue.cpp:388
#18 0x41145916 in event_processor_callback (data=0x808f0b0, source=5, 
    condition=GDK_INPUT_READ) at nsAppShell.cpp:199
#19 0x41145485 in our_gdk_io_invoke (source=0x82f5010, condition=G_IO_IN, 
    data=0x82f5000) at nsAppShell.cpp:77
Summary: Crash loading Java applet at www.nfl.com → Crash loading Java applet at www.nfl.com [@ nsLineLayout::ReflowFrame ]
Given Oliviere's comment, OS -> All
OS: Windows 2000 → All
...And my apologies for mistyping Olivier's name :)
Kevin, this bug is easily reproducible and needs triage in Alex's absence.
Thanks, Tom
Assignee: alexsavulov → kmcclusk
-> peterl
Assignee: kmcclusk → peterl
Priority: -- → P1
Target Milestone: --- → Future
Yes, it's the same class of problem as bug 136927-- in this case, scripting the
plugin causes a reflow.

*** This bug has been marked as a duplicate of 136927 ***
Status: NEW → RESOLVED
Closed: 22 years ago
Resolution: --- → DUPLICATE
Crash Signature: [@ nsLineLayout::ReflowFrame ]
You need to log in before you can comment on or make changes to this bug.