Closed Bug 20331 Opened 25 years ago Closed 25 years ago

Crash on stress test

Categories

(Core :: Layout, defect, P3)

x86
Windows NT
defect

Tracking

()

VERIFIED DUPLICATE of bug 20645

People

(Reporter: sitsofe, Assigned: vidur)

References

()

Details

Attachments

(1 file)

I noticed that after visting multiple pages on the delphi site Moz would crash.
It never seemed to be the same page though... Clearing my cookies then visiting
lots of pages seems to help to bring about the bug.

Enclosing Dr. Watson log.

System:
1999112908 WinNT SP 6
Attached file Dr Watson log
Assignee: leger → troy
Component: Browser-General → Layout
QA Contact: leger → petersen
This could be a memory leak problem.  petersen, can you investigate.
Assignee: troy → pnunn
Stack trace shows it crashing in image library.
I've had another crash, this time after testing with the browser buster page.
Would it help if I attached another Dr Watson log?
Status: NEW → ASSIGNED
Target Milestone: M12
I'm on it.
No extra Dr.Watsons needed.
More test urls would be good.

-pn
I'm not seeing a crash on the delphi site, but I do
see it on developer.com.
Here is my stacktrace at the crash:

SinkContext::CloseContainer(const nsIParserNode & {...}) line 1231 + 121 bytes
HTMLContentSink::CloseContainer(HTMLContentSink * const 0x01f12210, const
nsIParserNode & {...}) line 2587 + 15 bytes
CNavDTD::CloseContainer(const nsIParserNode * 0x0230a990, nsHTMLTag
eHTMLTag_center, int 0) line 2840 + 31 bytes
CNavDTD::CloseContainersTo(int 6, nsHTMLTag eHTMLTag_center, int 0) line 2873 +
20 bytes
CNavDTD::CloseContainersTo(nsHTMLTag eHTMLTag_center, int 0) line 2962 + 20
bytes
CNavDTD::HandleEndToken(CToken * 0x022cee60) line 1561 + 20 bytes
CNavDTD::HandleToken(CNavDTD * const 0x01ebae30, CToken * 0x022cee60, nsIParser
* 0x01f12420) line 738 + 12 bytes
CNavDTD::HandleSavedTokens(int 6) line 1632 + 23 bytes
CNavDTD::HandleOmittedTag(CToken * 0x022ccea0, nsHTMLTag eHTMLTag_a, nsHTMLTag
eHTMLTag_tr, nsIParserNode * 0x0230adb0) line 1214 + 12 bytes
CNavDTD::HandleDefaultStartToken(CToken * 0x022ccea0, nsHTMLTag eHTMLTag_a,
nsIParserNode * 0x0230adb0) line 962 + 24 bytes
CNavDTD::HandleStartToken(CToken * 0x022ccea0) line 1328 + 22 bytes
CNavDTD::HandleToken(CNavDTD * const 0x01ebae30, CToken * 0x022ccea0, nsIParser
* 0x01f12420) line 736 + 12 bytes
CNavDTD::BuildModel(CNavDTD * const 0x01ebae30, nsIParser * 0x01f12420,
nsITokenizer * 0x01ebaa10, nsITokenObserver * 0x00000000, nsIContentSink *
0x01f12210) line 529 + 20 bytes
nsParser::BuildModel() line 1034 + 34 bytes
nsParser::ResumeParse(nsIDTD * 0x00000000, int 0) line 960 + 11 bytes
nsParser::EnableParser(int 1) line 683 + 15 bytes
HTMLContentSink::ResumeParsing() line 3555 + 19 bytes
HTMLContentSink::OnUnicharStreamComplete(HTMLContentSink * const 0x01f12214,
nsIUnicharStreamLoader * 0x022e5950, unsigned int 0, unsigned int 430, const
unsigned short * 0x00d56e38) line 3655 + 11 bytes
nsUnicharStreamLoader::OnStopRequest(nsUnicharStreamLoader * const 0x022e5954,
nsIChannel * 0x022e5750, nsISupports * 0x00000000, unsigned int 0, const
unsigned short * 0x00000000) line 127 + 63 bytes
nsChannelListener::OnStopRequest(nsChannelListener * const 0x022e55e0,
nsIChannel * 0x022e5750, nsISupports * 0x00000000, unsigned int 0, const
unsigned short * 0x00000000) line 1580
nsHTTPChannel::ResponseCompleted(nsIChannel * 0x022e5180, unsigned int 0, const
unsigned short * 0x00000000) line 825 + 50 bytes
nsHTTPResponseListener::OnStopRequest(nsHTTPResponseListener * const 0x022e6030,
nsIChannel * 0x022e5180, nsISupports * 0x022e5750, unsigned int 0, const
unsigned short * 0x00000000) line 274
nsOnStopRequestEvent::HandleEvent(nsOnStopRequestEvent * const 0x022e7bd0) line
279
nsStreamListenerEvent::HandlePLEvent(PLEvent * 0x022e7b80) line 93 + 12 bytes
PL_HandleEvent(PLEvent * 0x022e7b80) line 537 + 10 bytes
PL_ProcessPendingEvents(PLEventQueue * 0x00c6a430) line 498 + 9 bytes
_md_EventReceiverProc(HWND__ * 0x00a70354, unsigned int 49365, unsigned int 0,
long 13018160) line 972 + 9 bytes
USER32! 77e71820()
00c6a430()


We may be seeing 2 different bugs here.
sitsofe,
What is the build date you are using?
Release build or debug build?

I checked in a fix yesterday for a bug that occurred
with several banner ad images. I hit the added code
when I looked at delphi.com. If your build is older than
yesterday afternoon, this part of the bug may be fixed.

-pn
Assignee: pnunn → troy
Status: ASSIGNED → NEW
After clicking around on delphi.com with a break point at the
fix I checked in yesterday, I think that fix took care of the
crash documented in the attached drWatson.

but. I still see a crash on developer.com.
Before crashing, I get an assert at line 1224, in
mozilla/layout/html/document/src/nsHTMLContentSink.cpp:
    NS_ASSERTION(mStackPos > 0, "container w/o parent");

Troy,
 Would you take a look at this?
thnx,
P
Assignee: troy → vidur
V., the assert looks it is coming from the content sink
Moving off M12 radar for the time being. One or more might get back once I get a
chance to really look at them.
In an attempt to get my bug list in order again, marking all the bugs I have
currently as ASSIGNED.
Status: ASSIGNED → RESOLVED
Closed: 25 years ago
Resolution: --- → DUPLICATE
DUPing with 20645. It's the same bug.

*** This bug has been marked as a duplicate of 20645 ***
Status: RESOLVED → VERIFIED
Marking as verified dup of 20645.
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: