196910 - after php page loads, scrolling (wheel or scroll bar action) crashes browser

Status: RESOLVED INVALID

(SeaMonkey :: General, defect)

Description

[jay childs]

User-Agent:       Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.2.1) Gecko/20030311

Downloaded mozilla-source-1.2.1.tar.gz from 
http://ftp.mozilla.org/pub/mozilla/releases/mozilla1.2.1/src/mozilla-source-
1.2.1.tar.bz2

Configured as: ./configure --prefix=/usr/mozilla --enable-default-mozilla-five-
home --enable-toolkit-gtk2 --enable-default-toolkit=gtk2 --with-x --with-system-
lib --with-system-jpeg --with-system-png --with-system-mng --enable-xft --
enable-crypto --enable-java-supplement --disable-accessibility --disable-tests -
-disable-debug --enable-optimizer=-O3 --disable-logging --enable-reorder --
enable-strip --enable-elf-dynstr-gc --enable-cpp-rtti --enable-
extensions=all,spellcheck --enable-svg

Reproducible: Always

Steps to Reproduce:
1. Go to http://www.php.net/manual/en/install.apache.php
2. Wait for page to load
3. Try scrolling

Actual Results:  
Mozilla Browser window closed

Expected Results:  
Allow user to scroll through page

I will recompile without --disable-debug to see if I get any messages at stderr.

Comment 1

[Matthias Versen [:Matti]]

Provide a stacktrace from a debug build and/or rebuild without xft and see if
that fixes your problem.

Comment 2

[jay childs]

I think this is what you're looking for:

Backtrace from debug enabled build using gdb bt command
#0  0x420042df in nsTextFrame::TextStyle::TextStyle(nsIPresContext*, nsIRenderin
gContext&, nsIStyleContext*) ()
   from /usr/mozilla/lib/mozilla-1.2.1/components/libgklayout.so
#1  0x41ffb83e in nsTextFrame::GetPosition(nsIPresContext*, nsPoint const&, nsIC
ontent**, int&, int&) ()
   from /usr/mozilla/lib/mozilla-1.2.1/components/libgklayout.so
#2  0x41ffc399 in nsTextFrame::GetContentAndOffsetsFromPoint(nsIPresContext*, ns
Point const&, nsIContent**, int&, int&, int&) ()
   from /usr/mozilla/lib/mozilla-1.2.1/components/libgklayout.so
#3  0x41f66528 in nsFrame::GetContentAndOffsetsFromPoint(nsIPresContext*, nsPoin
t const&, nsIContent**, int&, int&, int&) ()
   from /usr/mozilla/lib/mozilla-1.2.1/components/libgklayout.so
#4  0x41f66528 in nsFrame::GetContentAndOffsetsFromPoint(nsIPresContext*, nsPoin
t const&, nsIContent**, int&, int&, int&) ()
   from /usr/mozilla/lib/mozilla-1.2.1/components/libgklayout.so
#5  0x41f66528 in nsFrame::GetContentAndOffsetsFromPoint(nsIPresContext*, nsPoin
t const&, nsIContent**, int&, int&, int&) ()
   from /usr/mozilla/lib/mozilla-1.2.1/components/libgklayout.so
#6  0x41f66528 in nsFrame::GetContentAndOffsetsFromPoint(nsIPresContext*, nsPoin
t const&, nsIContent**, int&, int&, int&) ()
   from /usr/mozilla/lib/mozilla-1.2.1/components/libgklayout.so
#7  0x41f66528 in nsFrame::GetContentAndOffsetsFromPoint(nsIPresContext*, nsPoin
t const&, nsIContent**, int&, int&, int&) ()
   from /usr/mozilla/lib/mozilla-1.2.1/components/libgklayout.so
#8  0x41f66528 in nsFrame::GetContentAndOffsetsFromPoint(nsIPresContext*, nsPoin
t const&, nsIContent**, int&, int&, int&) ()
   from /usr/mozilla/lib/mozilla-1.2.1/components/libgklayout.so
#9  0x41f66528 in nsFrame::GetContentAndOffsetsFromPoint(nsIPresContext*, nsPoin
t const&, nsIContent**, int&, int&, int&) ()
   from /usr/mozilla/lib/mozilla-1.2.1/components/libgklayout.so
#10 0x41f69da3 in nsFrame::GetNextPrevLineFromeBlockFrame(nsIPresContext*, nsPee
kOffsetStruct*, nsIFrame*, int, signed char) ()
   from /usr/mozilla/lib/mozilla-1.2.1/components/libgklayout.so
#11 0x41f4a616 in nsBlockFrame::HandleEvent(nsIPresContext*, nsGUIEvent*, nsEven
tStatus*) () from /usr/mozilla/lib/mozilla-1.2.1/components/libgklayout.so
#12 0x41fdc5e1 in PresShell::HandleEventInternal(nsEvent*, nsIView*, unsigned, n
sEventStatus*) () from /usr/mozilla/lib/mozilla-1.2.1/components/libgklayout.so
#13 0x41fdc0cd in PresShell::HandleEvent(nsIView*, nsGUIEvent*, nsEventStatus*,
int, int&) () from /usr/mozilla/lib/mozilla-1.2.1/components/libgklayout.so
#14 0x415db4fe in nsViewManager::HandleEvent(nsView*, nsGUIEvent*, int) ()
   from /usr/mozilla/lib/mozilla-1.2.1/components/libgkview.so
#15 0x415cac1e in nsView::HandleEvent(nsViewManager*, nsGUIEvent*, int) ()
   from /usr/mozilla/lib/mozilla-1.2.1/components/libgkview.so
#16 0x415daa20 in nsViewManager::DispatchEvent(nsGUIEvent*, nsEventStatus*) ()
   from /usr/mozilla/lib/mozilla-1.2.1/components/libgkview.so
#17 0x415c9f26 in _init ()
   from /usr/mozilla/lib/mozilla-1.2.1/components/libgkview.so
#18 0x41620764 in nsCommonWidget::DispatchEvent(nsGUIEvent*, nsEventStatus&) ()
   from /usr/mozilla/lib/mozilla-1.2.1/components/libwidget_gtk2.so
#19 0x416132cc in nsWindow::OnButtonPressEvent(_GtkWidget*, _GdkEventButton*)
    () from /usr/mozilla/lib/mozilla-1.2.1/components/libwidget_gtk2.so
#20 0x41616944 in nsWindow::SetPluginType(int) ()
   from /usr/mozilla/lib/mozilla-1.2.1/components/libwidget_gtk2.so
#21 0x40ece372 in _gtk_marshal_BOOLEAN__BOXED (closure=0x81aeb28,
    return_value=0xbfffeb58, n_param_values=2, param_values=0xbfffeca8,
    invocation_hint=0xbfffeb74, marshal_data=0x0) at gtkmarshalers.c:82
#22 0x41116dab in g_closure_invoke (closure=0x81aeb28,
    return_value=0xbfffeb58, n_param_values=2, param_values=0xbfffeca8,
    invocation_hint=0xbfffeb74) at gclosure.c:437
#23 0x41129ea3 in signal_emit_unlocked_R (node=0x8274030, detail=0,
    instance=0x81ac1a0, emission_return=0xbfffec68,
    instance_and_params=0xbfffeca8) at gsignal.c:2822
#24 0x41128787 in g_signal_emit_valist (instance=0x81ac1a0, signal_id=27,
    detail=0, var_args=0xbfffee30) at gsignal.c:2564
#25 0x411289c5 in g_signal_emit (instance=0x81ac1a0, signal_id=27, detail=0)
    at gsignal.c:2612
#26 0x40f89e42 in gtk_widget_event_internal (widget=0x81ac1a0, event=0x81b6530)
    at gtkwidget.c:3143
#27 0x40f89aa0 in gtk_widget_event (widget=0x81ac1a0, event=0x81b6530)
    at gtkwidget.c:3004
#28 0x40ece223 in gtk_propagate_event (widget=0x81ac1a0, event=0x81b6530)
    at gtkmain.c:2253
#29 0x40ecd22e in gtk_main_do_event (event=0x81b6530) at gtkmain.c:1502
#30 0x410604fd in gdk_event_dispatch (source=0x8351e90, callback=0,
    user_data=0x0) at gdkevents-x11.c:2018
#31 0x41167f09 in g_main_dispatch (context=0x8351ed8) at gmain.c:1653
#32 0x41168d27 in g_main_context_dispatch (context=0x8351ed8) at gmain.c:2197
#33 0x41169103 in g_main_context_iterate (context=0x8351ed8, block=1,
    dispatch=1, self=0x836f778) at gmain.c:2278
#34 0x411697df in g_main_loop_run (loop=0x818e9c0) at gmain.c:2498
#35 0x40ecc917 in gtk_main () at gtkmain.c:1092
#36 0x4161da46 in nsAppShell::Run() ()
   from /usr/mozilla/lib/mozilla-1.2.1/components/libwidget_gtk2.so
#37 0x4270e7b4 in nsAppShellService::Run() ()
   from /usr/mozilla/lib/mozilla-1.2.1/components/libnsappshell.so
#38 0x08057dab in nsAString::do_AssignFromReadable(nsAString const&) ()
#39 0x08053500 in nsAString::do_AssignFromReadable(nsAString const&) ()
#40 0x4044c17d in __libc_start_main (
    main=0x80532e0 <nsAString::do_AssignFromReadable(nsAString const&)+272>,
    argc=1, ubp_av=0xbffff2f4, init=0x8051778 <_init>,
    fini=0x80619fc <nsXPIDLString::nsXPIDLString()+11702>,
    rtld_fini=0x4000a534 <_dl_fini>, stack_end=0xbffff2ec)
    at ../sysdeps/generic/libc-start.c:129

Looking at this it definitely looks like a font rendering problem, and the text 
in the table dislayed on this specific page overruns the boundary of the table 
cells.

I don't want to give up my anti-aliased fonts :(

Comment 3

[Matthias Versen [:Matti]]

can you try bug 182926#c9 and if you still crash can you please try 1.3b or later 
(we accept only bug reports from up to 2 week old builds...).

I assign the bug 2 different people if you crash with xft but not without...

Comment 4

[jay childs]

Thanks for the pointer to the pheonix bug 182926.
Reruning fc-cache fixed this too. The table text now appears the same as 
describe in pheonix bug 182926. Is there a definite resolution that this is a 
Xft bug or a rendering issue with mozilla/pheonix? bug 182926 kinda leaves this 
issue hanging and seems to assume that it is an Xft bug.

Comment 5

[Matthias Versen [:Matti]]

-> blizzard

Comment 6

[Christopher Blizzard (:blizzard)]

If re-running fc-cache fixed it for you I'm marking this as INVALID.