Closed Bug 195198 Opened 22 years ago Closed 22 years ago

crash if I try to print out the page

Categories

(Core :: Printing: Output, defect)

Product:
Core
Component:
Printing: Output
Platform:
x86
Linux
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
VERIFIED DUPLICATE of bug 193686

People

(Reporter: trond.bo, Assigned: rods)

References

(
URL
)

Details

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.3b) Gecko/20030226
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.3b) Gecko/20030226


Crash if I try to print out the page.

Reproducible: Always

Steps to Reproduce:
1.
2.
3.
perhaps bug 194107 ?
Happens on OS/2, too -> OS should be ALL
No problems in PrintPreview -> not bug 194107

Here is the dump of OS/2 (VisualAge CPP 3.65) retail build 27-feb-2003:

005b:1df76cc0 53             push      ebx
005b:1df76cc1 8bda           mov       ebx,edx
005b:1df76cc3 83ec18         sub       esp,+18
005b:1df76cc6 8b4014         mov       eax,dword ptr [eax+14]
005b:1df76cc9 c744241400000000 mov       dword ptr [esp+14],00000000
005b:1df76cd1 8b08           mov       ecx,dword ptr [eax]
005b:1df76cd3 8d542414       lea       edx,[esp+14]
005b:1df76cd7 0381dc000000   add       eax,dword ptr [ecx+000000dc]
005b:1df76cdd ff91d8000000   call      dword ptr [ecx+000000d8]
005b:1df76ce3 8b442414       mov       eax,dword ptr [esp+14]
005b:1df76ce7 8bd3           mov       edx,ebx
005b:1df76ce9 8d4c2410       lea       ecx,[esp+10]
005b:1df76ced 8b18           mov       ebx,dword ptr [eax]
005b:1df76cef 03837c010000   add       eax,dword ptr [ebx+0000017c]
005b:1df76cf5 ff9378010000   call      dword ptr [ebx+00000178]
005b:1df76cfb 833da0e0431700 cmp       dword ptr [1743e0a0],+00
005b:1df76d02 755e           jnz       1df76d62
005b:1df76d04 c705a0e0431701000000 mov       dword ptr [1743e0a0],00000001
005b:1df76d0e c7056cde431730185fc9 mov       dword ptr [1743de6c],c95f1830
005b:1df76d18 66c70570de431776c3 mov       word ptr [1743de70],c376
005b:1df76d21 66c70572de4317d111 mov       word ptr [1743de72],11d1
005b:1df76d2a c60574de4317b7 mov       byte ptr [1743de74],b7
005b:1df76d31 c60575de431721 mov       byte ptr [1743de75],21 ;'!'
005b:1df76d38 c60576de431700 mov       byte ptr [1743de76],00
005b:1df76d3f c60577de431760 mov       byte ptr [1743de77],60 ;'`'
005b:1df76d46 c60578de431708 mov       byte ptr [1743de78],08
005b:1df76d4d c60579de431791 mov       byte ptr [1743de79],91
005b:1df76d54 c6057ade4317d8 mov       byte ptr [1743de7a],d8
005b:1df76d5b c6057bde4317c9 mov       byte ptr [1743de7b],c9
005b:1df76d62 8b442410       mov       eax,dword ptr [esp+10]
005b:1df76d66 8d4c240c       lea       ecx,[esp+0c]
005b:1df76d6a ba6cde4317     mov       edx,1743de6c
005b:1df76d6f 8b18           mov       ebx,dword ptr [eax]
005b:1df76d71 03430c         add       eax,dword ptr [ebx+0c]

005b:1df76d74 ff5308         call      dword ptr [ebx+08] ; !!!!!!!! TRAP HERE

005b:1df76d77 8b44240c       mov       eax,dword ptr [esp+0c]
005b:1df76d7b 83c418         add       esp,+18
005b:1df76d7e 5b             pop       ebx
005b:1df76d7f c3             retd


##r
eax=010133d8 ebx=01013460 ecx=00140a88 edx=1743de6c esi=00d553d0 edi=00d553d0
eip=1df76d74 esp=00140a7c ebp=00140cd4 iopl=2 -- -- -- nv up ei pl nz na pe nc
cs=005b ss=0053 ds=0053 es=0053 fs=150b gs=0000  cr2=011036f0  cr3=00213000
005b:1df76d74 ff5308         call  dword ptr [ebx+08] ;br1 ds:01013468=00000000

##db ss:esp
0053:00140a7c f4 a3 0c 01 d0 53 d5 00-8c 0a 14 00 bc 0a 14 00 t#..PSU.....<...
0053:00140a8c d8 33 01 01 f4 a3 0c 01-5c a3 0c 01 75 66 f7 1d X3..t#..\#..ufw.
0053:00140a9c 1c 00 00 00 40 9e 0c 01-40 9e 0c 01 63 31 be 1d ....@...@...c1>.
0053:00140aac 1c 55 d5 00 00 00 00 00-d0 53 d5 00 00 00 00 00 .UU.....PSU.....
0053:00140abc b0 a0 0c 01 21 1f d1 1d-d4 0c 14 00 00 00 00 00 0 ..!.Q.T.......
0053:00140acc 00 00 00 00 d0 53 d5 00-80 a0 0c 01 e9 3f c2 1d ....PSU.. ..i?B.
0053:00140adc 80 a0 0c 01 d0 53 d5 00-ec 0a 14 00 d0 53 d5 00 . ..PSU.l...PSU.
0053:00140aec 00 00 00 00 00 00 00 00-d0 53 d5 00 f1 6c c2 1d ........PSU.qlB.
0053:00140afc 80 a0 0c 01 d0 53 d5 00-00 00 00 00 00 00 00 00 . ..PSU.........
0053:00140b0c d0 53 d5 00 d0 53 d5 00-c4 9d 0c 01 b1 63 c1 1d PSU.PSU.D...1cA.
0053:00140b1c d0 53 d5 00 fc 9d 0c 01-e8 94 0c 01 00 00 00 00 PSU.|...h.......
0053:00140b2c 98 9d 0c 01 21 1f d1 1d-c4 9d 0c 01 d0 53 d5 00 ....!.Q.D...PSU.
0053:00140b3c d0 53 d5 00 d0 53 d5 00-68 9d 0c 01 e9 3f c2 1d PSU.PSU.h...i?B.
0053:00140b4c 68 9d 0c 01 d0 53 d5 00-5c 0b 14 00 a8 f4 bd 1d h...PSU.\...(t=.
0053:00140b5c 00 00 00 00 70 a7 0c 01-48 9d 0c 01 21 1f d1 1d ....p'..H...!.Q.
0053:00140b6c 68 9d 0c 01 d0 53 d5 00-d0 53 d5 00 d0 53 d5 00 h...PSU.PSU.PSU.


From what I see this is in nsGfxScrollFrameInner::GetScrollableView ()

I can confirm. Here's the backtrace from a CVS release build checked out on
2003022703.

#0  0x44fae2d8 in ?? ()
#1  0x408dd0b7 in nsGfxScrollFrame::Destroy () from
/psolanki/mozilla/obj/dist/bin/components/libgklayout.so
#2  0x409f95f0 in nsFrameList::DestroyFrames () from
/psolanki/mozilla/obj/dist/bin/components/libgklayout.so
#3  0x408cbf0d in nsContainerFrame::Destroy () from
/psolanki/mozilla/obj/dist/bin/components/libgklayout.so
#4  0x409cf4a3 in nsBoxFrame::Destroy () from
/psolanki/mozilla/obj/dist/bin/components/libgklayout.so
#5  0x409462aa in nsTextControlFrame::Destroy () from
/psolanki/mozilla/obj/dist/bin/components/libgklayout.so
#6  0x408f006d in nsLineBox::DeleteLineList () from
/psolanki/mozilla/obj/dist/bin/components/libgklayout.so
#7  0x408c3375 in nsBlockFrame::Destroy () from
/pso:wqlanki/mozilla/obj/dist/bin/components/libgklayout.so
#8  0x409f95f0 in nsFrameList::DestroyFrames () from
/psolanki/mozilla/obj/dist/bin/components/libgklayout.so
#9  0x408cbf0d in nsContainerFrame::Destroy () from
/psolanki/mozilla/obj/dist/bin/components/libgklayout.so
#10 0x409f95f0 in nsFrameList::DestroyFrames () from
/psolanki/mozilla/obj/dist/bin/components/libgklayout.so
#11 0x408cbf0d in nsContainerFrame::Destroy () from
/psolanki/mozilla/obj/dist/bin/components/libgklayout.so
#12 0x409f95f0 in nsFrameList::DestroyFrames () from
/psolanki/mozilla/obj/dist/bin/components/libgklayout.so
#13 0x408cbf0d in nsContainerFrame::Destroy () from
/psolanki/mozilla/obj/dist/bin/components/libgklayout.so
#14 0x409f95f0 in nsFrameList::DestroyFrames () from
/psolanki/mozilla/obj/dist/bin/components/libgklayout.so
#15 0x408cbf0d in nsContainerFrame::Destroy () from
/psolanki/mozilla/obj/dist/bin/components/libgklayout.so
#16 0x4099eafd in nsTableFrame::Destroy () from
/psolanki/mozilla/obj/dist/bin/components/libgklayout.so
#17 0x409f95f0 in nsFrameList::DestroyFrames () from
/psolanki/mozilla/obj/dist/bin/components/libgklayout.so
#18 0x408cbf0d in nsContainerFrame::Destroy () from
/psolanki/mozilla/obj/dist/bin/components/libgklayout.so
#19 0x409a56eb in nsTableOuterFrame::Destroy () from
/psolanki/mozilla/obj/dist/bin/components/libgklayout.so
#20 0x408f006d in nsLineBox::DeleteLineList () from
/psolanki/mozilla/obj/dist/bin/components/libgklayout.so
#21 0x408c3de4 in DestroyOverflowLines () from
/psolanki/mozilla/obj/dist/bin/components/libgklayout.so
#22 0x408da441 in DestroyPropertyEnumerator () from
/psolanki/mozilla/obj/dist/bin/components/libgklayout.so
#23 0x405b6c38 in PL_DHashTableEnumerate () from
/psolanki/mozilla/obj/dist/bin/libxpcom.so
#24 0x408da303 in FrameManager::PropertyList::Destroy () from
/psolanki/mozilla/obj/dist/bin/components/libgklayout.so
#25 0x408d9ee3 in FrameManager::DestroyPropertyList () from
/psolanki/mozilla/obj/dist/bin/components/libgklayout.so
#26 0x408d5f16 in FrameManager::Destroy () from
/psolanki/mozilla/obj/dist/bin/components/libgklayout.so
#27 0x40905d52 in PresShell::Destroy () from
/psolanki/mozilla/obj/dist/bin/components/libgklayout.so
#28 0x40bdc965 in nsPrintObject::DestroyPresentation () from
/psolanki/mozilla/obj/dist/bin/components/libgklayout.so
#29 0x40bd60ce in nsPrintEngine::SetupToPrintContent () from
/psolanki/mozilla/obj/dist/bin/components/libgklayout.so
#30 0x40bd4701 in nsPrintEngine::DocumentReadyForPrinting () from
/psolanki/mozilla/obj/dist/bin/components/libgklayout.so
#31 0x40bd1597 in nsPrintEngine::Print () from
/psolanki/mozilla/obj/dist/bin/components/libgklayout.so
#32 0x40bfbc72 in DocumentViewerImpl::Print () from
/psolanki/mozilla/obj/dist/bin/components/libgklayout.so
#33 0x406236f8 in XPTC_InvokeByIndex () from
/psolanki/mozilla/obj/dist/bin/libxpcom.so
#34 0x40745dca in XPCWrappedNative::CallMethod () from
/psolanki/mozilla/obj/dist/bin/components/libxpconnect.so
#35 0x4074c3b5 in XPC_WN_CallMethod () from
/psolanki/mozilla/obj/dist/bin/components/libxpconnect.so
#36 0x4005fc8f in js_Invoke () from /psolanki/mozilla/obj/dist/bin/libmozjs.so
#37 0x400683e7 in js_Interpret () from /psolanki/mozilla/obj/dist/bin/libmozjs.so
#38 0x4005fcf0 in js_Invoke () from /psolanki/mozilla/obj/dist/bin/libmozjs.so
#39 0x4005ff0b in js_InternalInvoke () from
/psolanki/mozilla/obj/dist/bin/libmozjs.so
#40 0x4002ee62 in JS_CallFunctionValue () from
/psolanki/mozilla/obj/dist/bin/libmozjs.so
#41 0x4158e220 in nsJSContext::CallEventHandler () from
/psolanki/mozilla/obj/dist/bin/components/libjsdom.so
#42 0x415c2058 in nsJSEventListener::HandleEvent () from
/psolanki/mozilla/obj/dist/bin/components/libjsdom.so
#43 0x40a375c3 in nsEventListenerManager::HandleEventSubType () from
/psolanki/mozilla/obj/dist/bin/components/libgklayout.so
#44 0x40a39ff9 in nsEventListenerManager::HandleEvent () from
/psolanki/mozilla/obj/dist/bin/components/libgklayout.so
#45 0x40b597b0 in nsXULElement::HandleDOMEvent () from
/psolanki/mozilla/obj/dist/bin/components/libgklayout.so
#46 0x4090fe65 in PresShell::HandleDOMEventWithTarget () from
/psolanki/mozilla/obj/dist/bin/components/libgklayout.so
#47 0x409e2181 in nsMenuFrame::Execute () from
/psolanki/mozilla/obj/dist/bin/components/libgklayout.so
#48 0x409dd47a in nsMenuFrame::HandleEvent () from
/psolanki/mozilla/obj/dist/bin/components/libgklayout.so
#49 0x4090fd4b in PresShell::HandleEventInternal () from
/psolanki/mozilla/obj/dist/bin/components/libgklayout.so
#50 0x4090fb0d in PresShell::HandleEvent () from
/psolanki/mozilla/obj/dist/bin/components/libgklayout.so
#51 0x41c0f1ac in nsViewManager::HandleEvent () from
/psolanki/mozilla/obj/dist/bin/components/libgkview.so
#52 0x41c05297 in nsView::HandleEvent () from
/psolanki/mozilla/obj/dist/bin/components/libgkview.so
#53 0x41c0e66f in nsViewManager::DispatchEvent () from
/psolanki/mozilla/obj/dist/bin/components/libgkview.so
#54 0x41c04f4e in HandleEvent () from
/psolanki/mozilla/obj/dist/bin/components/libgkview.so
---Type <return> to continue, or q <return> to quit---
#55 0x40e2d0b1 in nsWidget::DispatchEvent () from
/psolanki/mozilla/obj/dist/bin/components/libwidget_gtk.so
#56 0x40e2b66a in nsWidget::DispatchMouseEvent () from
/psolanki/mozilla/obj/dist/bin/components/libwidget_gtk.so
#57 0x40e2bff3 in nsWidget::OnButtonReleaseSignal () from
/psolanki/mozilla/obj/dist/bin/components/libwidget_gtk.so
#58 0x40e349c9 in nsWindow::OnButtonReleaseSignal () from
/psolanki/mozilla/obj/dist/bin/components/libwidget_gtk.so
#59 0x40e34afd in nsWindow::HandleGDKEvent () from
/psolanki/mozilla/obj/dist/bin/components/libwidget_gtk.so
#60 0x40e2654a in dispatch_superwin_event () from
/psolanki/mozilla/obj/dist/bin/components/libwidget_gtk.so
#61 0x40e2610f in handle_gdk_event () from
/psolanki/mozilla/obj/dist/bin/components/libwidget_gtk.so
#62 0x40260d7f in gdk_event_dispatch () from /usr/lib/libgdk-1.2.so.0
#63 0x40293773 in g_main_dispatch () from /usr/lib/libglib-1.2.so.0
#64 0x40293d39 in g_main_iterate () from /usr/lib/libglib-1.2.so.0
#65 0x40293eec in g_main_run () from /usr/lib/libglib-1.2.so.0
#66 0x401af333 in gtk_main () from /usr/lib/libgtk-1.2.so.0
#67 0x40e1dc69 in nsAppShell::Run () from
/psolanki/mozilla/obj/dist/bin/components/libwidget_gtk.so
#68 0x40dfffc2 in nsAppShellService::Run () from
/psolanki/mozilla/obj/dist/bin/components/libnsappshell.so
#69 0x08059556 in main1 ()
#70 0x08059cf0 in main ()
#71 0x40435657 in __libc_start_main (main=0x8059b60 <main>, argc=4,
ubp_av=0xbffff4d4, init=0x8054c40 <_init>, fini=0x8078d60 <_fini>,
rtld_fini=0x4000dcd4 <_dl_fini>, 
    stack_end=0xbffff4cc) at ../sysdeps/generic/libc-start.c:129:
Status: UNCONFIRMED → NEW
Ever confirmed: true
ugh, my stacktrace turned up horribly unformatted. Anyway, I think this is a
dupe of bug 193686 since I also see a crash when I do print preview.

*** This bug has been marked as a duplicate of 193686 ***
Status: NEW → RESOLVED
Closed: 22 years ago
Resolution: --- → DUPLICATE
v
Status: RESOLVED → VERIFIED
You need to log in before you can comment on or make changes to this bug.