19913 - Death on typing in "Login" Slashbox

Status: VERIFIED WORKSFORME

(Core :: Layout: Form Controls, defect, P3)

Description

[Justin A. Kolodziej]

As you may or may not know, Slashdot has several boxes affectionately known as
"Slashboxes" on the side.  One of them is for logging in.  Clicking in it, then
typing one character crashes Mozilla.  Here is the register dump and stacktrace:

$r
gs	0x10f				ecx	0xdffdb480  _vt.13NetReaderImpl
fs	0x0				eax	0x87cb488
es	0x1f				trapno	0xe
ds	0x1f				err	0x4
edi	0x895c328			eip	0xdffcf983  il_image_abort__FP19il_container_struct+0x23
esi	0x895c328			cs	0x17
ebp	0x8046b4c			efl	0x10207
kesp	0xe7f05fe4			esp	0x8046b28
ebx	0xdffd8a9c  _12nsColorNames.kColors+0x1e1c
ss	0x1f
edx	0x18d017a

il_image_abort__FP19il_container_struct+0x23:	movl   (%edx),%ecx
$C
8046b4c
il_image_abort__FP19il_container_struct(0x895c328,0x3,0x8046bac,0xdffcff3a) + 23
8046b7c
IL_StreamAbort__FP19il_container_structi(0x895c328,0xffffff37,0x8046ba8,0xdffd4538,0xdffd8a9c,0x8046cbc)
+ 21
8046bac
StreamAbort__13NetReaderImpli(0x87cb488,0xffffff37,0xde32f054,0xdffc8be6) + 32
8046bec
OnDataAvailable__13ImageConsumerP10nsIChannelP11nsISupportsP14nsIInputStreamUiUi(0x891fa48,0x8a56d38,0x0,0x8a0add0,0x0,0x1f07)
+ 68
8046c2c
OnDataAvailable__17nsChannelListenerP10nsIChannelP11nsISupportsP14nsIInputStreamUiUi(0x88dd430,0x8a56d38,0x0,0x8a0add0,0x0,0x1f07)
+ 39
8046c6c
OnDataAvailable__17nsChannelListenerP10nsIChannelP11nsISupportsP14nsIInputStreamUiUi(0x88dd3b8,0x8a56d38,0x0,0x8a0add0,0x0,0x1f07)
+ 39
8046ccc
OnDataAvailable__22nsHTTPResponseListenerP10nsIChannelP11nsISupportsP14nsIInputStreamUiUi(0x8a558d0,0x8a57098,0x8a56d38,0x8a0add0,0x0,0x2000)
+	19a
8046d0c
HandleEvent__22nsOnDataAvailableEvent(0x8589570,0x0,0x8046d4c,0xdf2863f3,0x8a2d918,0x1)
+ 3c
8046d4c
HandlePLEvent__21nsStreamListenerEventP7PLEvent(0x8a2d918,0x865d9c0,0x88833b8,0xdfe5436e,0xdfe5626c,0x8a2d918)
+ 33
8046d7c	PL_HandleEvent(0x8a2d918,0x80b4258,0xdfd2a8f0,0xdfe5427a) + 25
8046dac	PL_ProcessPendingEvents(0x808f898,0xdef56478,0x80b4258,0xdfefbf51) + 81
8046ddc
ProcessPendingEvents__16nsEventQueueImpl(0x80a5288,0x8046e08,0xdfcd83c2,0xdf184240,0xdf1c9400,0xdfd2b758)
+ 22
8046e0c
SetDispatchListener__10nsAppShellP18nsDispatchListener(0x80a5288,0x5,0x1,0xdf183d79,0xdef658d4,0x0)
+ 3b
8046e3c	parent_class(0x81ff090,0x1,0x81e5288,0xdef53204,0xdef658d4,0xdef658d4) +
64b02
8046e6c	g_io_unix_dispatch(0x828ff08,0x8046f24,0x81e5288,0xdef547de) + 2c
8046ebc
g_main_dispatch(0x8046f24,0x80b41b8,0x8046f2c,0xdef54e9d,0x80dfd68,0x80b41b8) +
ea
8046f2c	g_main_iterate(0x1,0x1,0xdef45b34,0xdef54fc9) +	54b
8046f5c	g_main_run(0x81e52c8,0xdfffee9c,0x99d,0xdf03596e) + 88
8046f9c	gtk_main(0x80c64f0,0x80a5288,0x1,0xdf184526) + cb
8046fec
Run__10nsAppShell(0x80c64f0,0xde997578,0x804701c,0xdfc36108,0x804f034,0x8047060)
+ 153
804701c
Run__17nsAppShellService(0x808b0e8,0x8047054,0x804707c,0x804b5ac,0x804f034,0x8047104)
+	2a
804707c	NS_CanRun__Fv(0x1,0x8047104,0x80470dc,0x804b7ab,0x0,0x0) + 10dc
80470dc	main(0x1,0x8047104,0x804710c) +	124

This is if you click and type at a fast-but-normal speed.  Clicking and waiting
a while allows it to work--well, sort of.

Comment 1

[karnaze (gone)]

Reassigning to Eric.

Comment 2

[gerardok]

QA Contact update.

Comment 3

[Eric Pollmann]

I tried this in all manner of speeds in today's build and couldn't reproduce the
crash.  I think Steve ([e-mail]) has been fixing bugs like this at a
madman's pace recently, so it was probably fixed by him.  Marking this
WORKSFORME.  :)

To verify try today's build.  I tried Linux and Windows.

Comment 4

[ckritzer (gone)]

Not any more.
Marking VERIFIED WORKSFORME on:
- Linux6 2000-02-01-10 Commercial build
- Win98 2000-02-01-08 Commercial build
- MacOS86 2000-02-01-09 Commercial build