209270 - When querying Sun's bigadmin database, mozilla crashes [@ nsTextControlFrame::SetValue]

Status: RESOLVED WORKSFORME

(Core :: Layout: Form Controls, defect, P1)

Description

[Pedro Madeira]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.4) Gecko/20030611
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.4) Gecko/20030611

When quering Sun's bigadmin database, mozilla suite closes.

Reproducible: Always

Steps to Reproduce:
1. put a query in the Search BigAdmin: field
2. press >> button

Actual Results:  
mozilla closes completely

Expected Results:  
perform the search

Comment 1

[GavinS]

This looks like a dupe of bug#208243, which was resolved as a dupe of
bug#117695, I'm not resolving as such, because I'm not so sure about bug#117695,
but someone may know more than me...

Comment 2

[Hermann Schwab]

reporter, can you try to load this testcase from bug 117695,
it should crash, if this is a dupe of bug 117695.
http://bugzilla.mozilla.org/attachment.cgi?id=66892&action=view

Could you supply a talkback ID?

Comment 3

[james davis]

Confirmed - crashes for me with win2k 061204 build (search bigadmin for 'linux').
The test cases in the other mentioned bug in comment #2 don't crash this
build (for me anyway). Talkback took a dump but I don't have the ID (not marking
new till I get an ID to submit).

Comment 4

[james davis]

re comment #1 - I'm not thinking that whatever is crashing using bigadmin search
is the same as bug http://bugzilla.mozilla.org/show_bug.cgi?id=117695
The test cases in that bug didn't crash 061204 but searching bigadmin still does.
The other bug http://bugzilla.mozilla.org/show_bug.cgi?id=208243 and this one
are the "same" and prob shouldn't be duped to 117695.

BTW - two talkbacks for the crashed search: TB21005142G and TB21004730M

Comment 5

[Pedro Madeira]

The problem does not happen in:

Mozilla 1.2.1 Beta for Solaris™

Mozilla/5.0 (X11; U; SunOS sun4u; en-US; rv:1.2.1) Gecko/20030313

OS: SunOS 9 for Sparc

Comment 6

[Andrew Schultz]

Attachment: stacktrace

(gdb) frame 4
#4  0x40fe131c in nsTextControlFrame::SetValue(nsAString const&)
(this=0x891de38, aValue=@0xbfffb0b0) at nsTextControlFrame.cpp:3029
3029	      mEditor->SetFlags(savedFlags);
(gdb) p mEditor
$1 = {mRawPtr = 0xffffffff}

Comment 7

[Andrew Schultz]

==> layout/form controls?

I couldn't get this to crash loading the query result locally

Comment 8

[Andrew Schultz]

.

Comment 9

[Andrew Schultz]

this regressed between linux trunk builds 2003043005 and 2003050105

Comment 10

[james davis]

Bug 208234 (reopened) was first, this is a dup.

*** This bug has been marked as a duplicate of 208234 ***

Comment 11

[Andrew Schultz]

wrong dupe.  reopening.

Comment 12

[Andrew Schultz]

*** Bug 208243 has been marked as a duplicate of this bug. ***

Comment 13

[Alexander Kruppa]

Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.4) Gecko/20030624 (1.4rc3) still
crashes, see TB21338074M

Comment 14

[james davis]

Changing summary from "mozilla suite closes" to "mozilla crashes" - it's a bit
more descriptive and accurate (and is caught in Summary searches for "crash")

Comment 15

[Pedro Madeira]

WFM
using
Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.4) Gecko/20030701

Comment 16

[Andrew Schultz]

Sun must have changed their page as I can't get any build to crash, including
those that crashed before.  

since this was unreproducible locally, marking WORKSFORME.  reopen if you can
still reproduce the crash.

Comment 17

[james davis]

Still crashes windows 2k - running build 071108 - reopening & marking win2k
Talkback ID: TB21877711Y

Comment 18

[Matthias Versen [:Matti]]

*** Bug 213387 has been marked as a duplicate of this bug. ***

Comment 19

[james davis]

Still crashing using Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.5b)
Gecko/2003081304

Is this bug getting any attention at a higher level? I'm certain there may be
something wrong with Sun's frame stuff but it "shouldn't" crash the browser.
Can anyone test other platforms with current nightlies? Also, given that bigadmin
is a common and well traveled site by many, there should be way more than enough
talkbacks submitted by now in order to help debug this.

Comment 20

[Andrew Schultz]

> there should be way more than enough talkbacks submitted

the stack signature I saw does not show up in current talkback data:
http://ftp.mozilla.org/pub/data/crash-data/

Comment 21

[Michiel van Leeuwen (email: mvl+moz@)]

*** Bug 217399 has been marked as a duplicate of this bug. ***

Comment 22

[james davis]

re: #20 - it is #22 in the list (today) - if that is the same one...

Comment 23

[Anders Pedersen]

WFM.

Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7b) Gecko/20040330
Microsoft Windows 2000 Pro 5.00.2195 SP4

Comment 24

[Wayne Mery (:wsmwk)]

(In reply to comment #23)
> WFM.
> 
> Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7b) Gecko/20040330
> Microsoft Windows 2000 Pro 5.00.2195 SP4

nsTextControlFrame::SetValue is still evident as a top of stack in recent crashes [1]. However, a) the stacks vary, b) it's not clear they match up to this bug.

[1] http://crash-stats.mozilla.com/report/list?product=Firefox&query_search=signature&query_type=exact&query=nsTextControlFrame%3A%3ASetValue%28nsAString_internal%20const%26%29&date=&range_value=4&range_unit=weeks&do_query=1&signature=nsTextControlFrame%3A%3ASetValue%28nsAString_internal%20const%26%29

Comment 25

[timeless]

bug 373586 tried to fix this, it doesn't seem to have worked.

the logic /seems/ reasonable, but i don't have enough time to verify that it isn't missing something.

Comment 26

[Jesse Ruderman on Windows]

This bug is WFM.  wsmwk / timeless, file a new bug if 14 not-quite-the-same crashes in a week bothers you.