207482 - Switching from one tab to the other crashes Camino.

Status: VERIFIED INVALID

(Camino Graveyard :: Tabbed Browsing, defect)

Description

[Ludovic Hirlimann [:Usul]]

User-Agent:       Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.5a) Gecko/20030528 Camino/0.7+
Build Identifier: Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.5a) Gecko/20030528 Camino/0.7+

I have two tabs open. When going back to the second tab Camino crashes.

Reproducible: Always

Steps to Reproduce:
1. Open first tab at http://www.czuba-tech.com/
2. Open second tab at http://www.blackholeinc.com/
3. While second tab is loading switch to first tab
4. Click on French flag
5. Switch to second tab
6. Let the mouse cursor go down on the page
7. Camino crashes.

Actual Results:  
Got talback up. 

Expected Results:  
Mozilla nightly 2003052808 does not crash when doing the same steps.


This is also true with the "official" camino released from 3 months ago.

Comment 1

[Mike Pinkerton (not reading bugmail)]

stack trace?

Comment 2

[Ludovic Hirlimann [:Usul]]

sure I have the following TalckBacks :
TB271491K
TB271491G
TB271512W

Mike do you need more ? If so please ask I will do the nexessary steps.

Comment 3

[Ludovic Hirlimann [:Usul]]

stack trace :
Date/Time:  2003-05-29 15:24:32 +0200
OS Version: 10.2.6 (Build 6L60)
Host:       grisreve.local.

Command:    Camino
PID:        6601

Exception:  EXC_BAD_ACCESS (0x0001)
Codes:      KERN_PROTECTION_FAILURE (0x0002) at 0x00000000

Thread 0 Crashed:
 #0   0x91a7f470 in GetQDGlobalsBlack
 #1   0x03b70d70 in 0x3b70d70
 #2   0x03bddea8 in 0x3bddea8
 #3   0x03bdd964 in 0x3bdd964
 #4   0x03b6f8d4 in 0x3b6f8d4
 #5   0x03beebbc in 0x3beebbc
 #6   0x03bcd86c in 0x3bcd86c
 #7   0x03bd413c in 0x3bd413c
 #8   0x03bdd62c in 0x3bdd62c
 #9   0x03c00aec in 0x3c00aec
 #10  0x03b66070 in 0x3b66070
 #11  0x03b659b0 in 0x3b659b0
 #12  0x0067057c in
ns4xPluginStreamListener::OnDataAvailable(nsIPluginStreamInfo*, nsIInputStream*,
unsigned)
 #13  0x00384ed4 in nsPluginStreamListenerPeer::OnDataAvailable(nsIRequest*,
nsISupports*, nsIInputStream*, unsigned, unsigned)
 #14  0x0019004c in nsStreamListenerTee::OnDataAvailable(nsIRequest*,
nsISupports*, nsIInputStream*, unsigned, unsigned)
 #15  0x0046dc5c in nsHttpChannel::OnDataAvailable(nsIRequest*, nsISupports*,
nsIInputStream*, unsigned, unsigned)
 #16  0x0017d438 in nsInputStreamPump::OnStateTransfer()
 #17  0x0017d1f0 in nsInputStreamPump::OnInputStreamReady(nsIAsyncInputStream*)
 #18  0x05090494 in nsInputStreamReadyEvent::EventHandler(PLEvent*)
 #19  0x05045f30 in PL_HandleEvent
 #20  0x05045e54 in PL_ProcessPendingEvents
 #21  0x05046dec in nsEventQueueImpl::ProcessPendingEvents()
 #22  0x00402e64 in -[EventQueueHandler eventTimer:]
 #23  0x907e521c in __NSFireTimer
 #24  0x90163230 in __CFRunLoopDoTimer
 #25  0x90148d28 in __CFRunLoopRun
 #26  0x90180f58 in CFRunLoopRunSpecific
 #27  0x969a3b70 in RunCurrentEventLoopInMode
 #28  0x969b3b00 in ReceiveNextEventCommon
 #29  0x969dabbc in BlockUntilNextEventMatchingListInMode
 #30  0x9308dedc in _DPSNextEvent
 #31  0x930a0158 in -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:]
 #32  0x930b1d88 in -[NSApplication run]
 #33  0x9315fc58 in NSApplicationMain
 #34  0x00004fc8 in _start
 #35  0x00004e48 in start

Thread 1:
 #0   0x9002578c in select
 #1   0x0101e9e4 in poll
 #2   0x0101b1d8 in _pr_poll_with_poll
 #3   0x0018ade8 in nsSocketTransportService::Run()
 #4   0x050485cc in nsThread::Main(void*)
 #5   0x0101c640 in _pt_root
 #6   0x90020d28 in _pthread_body

Thread 2:
 #0   0x9003ea88 in semaphore_wait_signal_trap
 #1   0x9003e8a4 in _pthread_cond_wait
 #2   0x010177e4 in PR_WaitCondVar
 #3   0x0015b2b0 in nsDNSService::DequeuePendingQ()
 #4   0x0015acec in nsDNSService::Run()
 #5   0x050485cc in nsThread::Main(void*)
 #6   0x0101c640 in _pt_root
 #7   0x90020d28 in _pthread_body

Thread 3:
 #0   0x90042668 in semaphore_timedwait_signal_trap
 #1   0x9003e894 in _pthread_cond_wait
 #2   0x010175a8 in pt_TimedWait
 #3   0x010177f8 in PR_WaitCondVar
 #4   0x0504c018 in TimerThread::Run()
 #5   0x050485cc in nsThread::Main(void*)
 #6   0x0101c640 in _pt_root
 #7   0x90020d28 in _pthread_body

Thread 4:
 #0   0x90073c28 in mach_msg_trap
 #1   0x90005f70 in mach_msg
 #2   0x928ec28c in JNI_CreateJavaVM_Impl
 #3   0x928ec224 in JNI_CreateJavaVM_Impl
 #4   0x928a51fc in JVM_GetClassMethodsCount
 #5   0x90020d28 in _pthread_body

Thread 5:
 #0   0x90073c28 in mach_msg_trap
 #1   0x90005f70 in mach_msg
 #2   0x9283de9c in JVM_NewInstance
 #3   0x9285eae4 in JVM_FillInStackTrace
 #4   0x928647a0 in JVM_Send
 #5   0x9290114c in JNI_CreateJavaVM_Impl
 #6   0x928a51fc in JVM_GetClassMethodsCount
 #7   0x90020d28 in _pthread_body

Thread 6:
 #0   0x90073c28 in mach_msg_trap
 #1   0x90005f70 in mach_msg
 #2   0x9283ddf4 in JVM_NewInstance
 #3   0x92845d80 in JVM_ArrayCopy
 #4   0x9285d620 in JVM_MonitorNotify
 #5   0x9285e2f8 in JVM_MonitorWait
 #6   0x0a12e678 in 0xa12e678
 #7   0x0a12c68c in 0xa12c68c
 #8   0x0a12c68c in 0xa12c68c
 #9   0xa2843c38 in typeinfo name for std::bad_exception
 #10  0x92838bdc in JVM_CurrentTimeMillis
 #11  0x92878c28 in JVM_FindClassFromClass
 #12  0x92892c90 in JVM_IsSameClassPackage
 #13  0x9288cf70 in JVM_GetMethodIxExceptionTableEntry
 #14  0x928787a0 in JVM_FindClassFromClass
 #15  0x928a51fc in JVM_GetClassMethodsCount
 #16  0x90020d28 in _pthread_body

Thread 7:
 #0   0x90073c28 in mach_msg_trap
 #1   0x90005f70 in mach_msg
 #2   0x9283ddf4 in JVM_NewInstance
 #3   0x92845d80 in JVM_ArrayCopy
 #4   0x9285d620 in JVM_MonitorNotify
 #5   0x9285e2f8 in JVM_MonitorWait
 #6   0x0a12e678 in 0xa12e678
 #7   0x0a12c68c in 0xa12c68c
 #8   0x0a12c5cc in 0xa12c5cc
 #9   0x0a12c5cc in 0xa12c5cc
 #10  0xa2843c38 in typeinfo name for std::bad_exception
 #11  0x92838bdc in JVM_CurrentTimeMillis
 #12  0x92878c28 in JVM_FindClassFromClass
 #13  0x92892c90 in JVM_IsSameClassPackage
 #14  0x9288cf70 in JVM_GetMethodIxExceptionTableEntry
 #15  0x928787a0 in JVM_FindClassFromClass
 #16  0x928a51fc in JVM_GetClassMethodsCount
 #17  0x90020d28 in _pthread_body

Thread 8:
 #0   0x90073c28 in mach_msg_trap
 #1   0x90005f70 in mach_msg
 #2   0x9283de9c in JVM_NewInstance
 #3   0x92844e18 in JVM_GetClassLoader
 #4   0x92844ba4 in JVM_GetClassLoader
 #5   0x928a51fc in JVM_GetClassMethodsCount
 #6   0x90020d28 in _pthread_body

Thread 9:
 #0   0x90073c28 in mach_msg_trap
 #1   0x90005f70 in mach_msg
 #2   0x9283ddf4 in JVM_NewInstance
 #3   0x9285eb40 in JVM_FillInStackTrace
 #4   0x92903300 in JVM_InitProperties
 #5   0x92903138 in JVM_InitProperties
 #6   0x928787a0 in JVM_FindClassFromClass
 #7   0x928a51fc in JVM_GetClassMethodsCount
 #8   0x90020d28 in _pthread_body

Thread 10:
 #0   0x90073c28 in mach_msg_trap
 #1   0x90005f70 in mach_msg
 #2   0x9283ddf4 in JVM_NewInstance
 #3   0x9285eb40 in JVM_FillInStackTrace
 #4   0x9288890c in JVM_StartThread
 #5   0x92876c10 in JVM_FindLoadedClass
 #6   0x928787a0 in JVM_FindClassFromClass
 #7   0x928a51fc in JVM_GetClassMethodsCount
 #8   0x90020d28 in _pthread_body

Thread 11:
 #0   0x9003ea88 in semaphore_wait_signal_trap
 #1   0x9003e8a4 in _pthread_cond_wait
 #2   0x010177e4 in PR_WaitCondVar
 #3   0x050496f4 in nsThreadPool::GetRequest(nsIThread*)
 #4   0x05049fc0 in nsThreadPoolRunnable::Run()
 #5   0x050485cc in nsThread::Main(void*)
 #6   0x0101c640 in _pt_root
 #7   0x90020d28 in _pthread_body

Thread 12:
 #0   0x9003ea88 in semaphore_wait_signal_trap
 #1   0x9003e8a4 in _pthread_cond_wait
 #2   0x90824180 in -[NSConditionLock lockWhenCondition:]
 #3   0x930819a0 in -[NSUIHeartBeat _heartBeatThread:]
 #4   0x9081cd38 in forkThreadForFunction
 #5   0x90020d28 in _pthread_body

PPC Thread State:
  srr0: 0x91a7f470 srr1: 0x0200f930                vrsave: 0x00000000
   xer: 0x20000000   lr: 0x03b70d70  ctr: 0x91a7f438   mq: 0x00000000
    r0: 0xffff0000   r1: 0xbfffe2e0   r2: 0x91a91910   r3: 0x00000000
    r4: 0x0226aa70   r5: 0x00000010   r6: 0x000000ff   r7: 0x91a7f440
    r8: 0x0000ffff   r9: 0x0000ffff  r10: 0xffff0000  r11: 0xffffffff
   r12: 0xffffffff  r13: 0x00000000  r14: 0x00000000  r15: 0x00000001
   r16: 0x00000001  r17: 0x00000000  r18: 0x24002280  r19: 0x00000000
   r20: 0x0000c743  r21: 0x00000000  r22: 0x00d8d260  r23: 0x00000000
   r24: 0x0349b000  r25: 0x03591f18  r26: 0x03acc020  r27: 0x0349b000
   r28: 0x000003bf  r29: 0x03a77ae4  r30: 0x03a77ae4  r31: 0x03a78108

Comment 4

[Mike Pinkerton (not reading bugmail)]

update to the latest flash and this will disappear.

Comment 5

[Ludovic Hirlimann [:Usul]]

I updated to latest flash and it diseapeared