21845 - Browser Crases when loading www.download.com

Status: VERIFIED DUPLICATE of bug 20797

(SeaMonkey :: General, defect, P3)

Description

[J Shane Culpepper]

When using the m12 builds to load www.download.com, the browser core dumps on
HPUX 11.00.  It seems to be a problem in libraptorhtml.sl.  I tried to get a
stack trace with wdb on this but I haven't gotten anything of use from it yet.
It needs to be investigated further.  It does not fail on similar Windows NT
builds.  I haven't had time to try it on Linux yet but it could possibly crash
there as well.  Here is a listing of various things in wdb when the crash
occurs.  It's not very informative though:

Program received signal SIGBUS, Bus error.
0x7908a7f8 in  () from
/builds/pepper/Lizard/bld/mozilla/dist/bin/components/libraptorhtml.sl


Call Stack:

#0  0x7908a7f8 in  () from
/builds/pepper/Lizard/bld/mozilla/dist/bin/components/libraptorhtml.sl
#1  0x791df3c4 in SinkContext::CloseContainer (this=0x4067ecd8,
aNode=@0x4065ac08) at nsHTMLContentSink.cpp:1254
#2  0x791e666c in HTMLContentSink::CloseContainer (this=0x40616710,
aNode=@0x4065ac08) at nsHTMLContentSink.cpp:2784
#3  0x78a16284 in CNavDTD::CloseContainer (this=0x40546b30, aNode=0x4065ac08,
aTarget=eHTMLTag_td, aClosedByStartTag=0) at CNavDTD.cpp:2904
#4  0x78a163a0 in CNavDTD::CloseContainersTo (this=0x40546b30, anIndex=5,
aTarget=eHTMLTag_td, aClosedByStartTag=0) at CNavDTD.cpp:2938
#5  0x78a164a4 in CNavDTD::CloseContainersTo (this=0x40546b30,
aTarget=eHTMLTag_td, aClosedByStartTag=0) at CNavDTD.cpp:3059
#6  0x78a1393c in CNavDTD::HandleEndToken (this=0x40546b30, aToken=0x4045de38)
at CNavDTD.cpp:1585
#7  0x78a11b04 in CNavDTD::HandleToken (this=0x40546b30, aToken=0x4045de38,
aParser=0x40616418) at CNavDTD.cpp:754
#8  0x78a13ce0 in CNavDTD::HandleSavedTokens (this=0x40546b30, anIndex=6) at
CNavDTD.cpp:1657
#9  0x78a12b64 in CNavDTD::HandleOmittedTag (this=0x40546b30, aToken=0x40438610,
aChildTag=eHTMLTag_font, aParent=eHTMLTag_tbody, aNode=0x40669200) at
CNavDTD.cpp:1238
#10 0x78a121e4 in CNavDTD::HandleDefaultStartToken (this=0x40546b30,
aToken=0x40438610, aChildTag=eHTMLTag_font, aNode=0x40669200) at CNavDTD.cpp:986
#11 0x78a12fb4 in CNavDTD::HandleStartToken (this=0x40546b30, aToken=0x40438610)
at CNavDTD.cpp:1352
#12 0x78a11aec in CNavDTD::HandleToken (this=0x40546b30, aToken=0x40438610,
aParser=0x40616418) at CNavDTD.cpp:751
#13 0x78a1130c in CNavDTD::BuildModel (this=0x40546b30, aParser=0x40616418,
aTokenizer=0x40546a40, anObserver=0x0, aSink=0x40616710) at CNavDTD.cpp:523
#14 0x78a26110 in nsParser::BuildModel (this=0x40616418) at nsParser.cpp:1040
#15 0x78a25ed0 in nsParser::ResumeParse (this=0x40616418, aDefaultDTD=0x0,
aIsFinalChunk=0) at nsParser.cpp:966
#16 0x78a24e64 in nsParser::EnableParser (this=0x40616418, aState=1) at
nsParser.cpp:683
#17 0x791eb6d8 in HTMLContentSink::ResumeParsing (this=0x40616710) at
nsHTMLContentSink.cpp:3786
#18 0x791ec13c in HTMLContentSink::OnUnicharStreamComplete (this=0x40616710,
aLoader=0x40545678, aStatus=0, stringLen=1054, string=0x40577018) at
nsHTMLContentSink.cpp:3879
#19 0x7a3565d8 in nsUnicharStreamLoader::OnStopRequest (this=0x40545678,
channel=0x405736f8, ctxt=0x0, status=0, errorMsg=0x0) at
nsUnicharStreamLoader.cpp:129
#20 0x7992805c in nsChannelListener::OnStopRequest (this=0x403bb988,
aChannel=0x405736f8, aContext=0x0, aStatus=0, aMsg=0x0) at nsDocLoader.cpp:1589
#21 0x78805fa8 in nsHTTPResponseListener::OnStopRequest (this=0x40564590,
channel=0x405738d8, i_pContext=0x405736f8, i_Status=0, i_pMsg=0x0) at
nsHTTPResponseListener.cpp:255
#22 0x7a327afc in nsOnStopRequestEvent::HandleEvent (this=0x406a5f78) at
nsAsyncStreamListener.cpp:278
#23 0x7a326190 in nsStreamListenerEvent::HandlePLEvent (aEvent=0x406a5fa8) at
nsAsyncStreamListener.cpp:93
#24 0x7a9edd48 in PL_HandleEvent (self=0x406a5fa8) at plevent.c:522
#25 0x7a9edb84 in PL_ProcessPendingEvents (self=0x400c0d90) at plevent.c:483
#26 0x7a996e80 in nsEventQueueImpl::ProcessPendingEvents (this=0x400c0d40) at
nsEventQueue.cpp:197
#27 0x7a079300 in event_processor_callback (data=0x400c0d40, source=9,
condition=GDK_INPUT_READ) at nsAppShell.cpp:233
#28 0x7a07854c in our_gdk_io_invoke (source=0x40154e70, condition=G_IO_IN,
data=0x40088e88) at nsAppShell.cpp:53
#29 0xb9d08 in g_io_unix_dispatch ()
#30 0xbc078 in g_main_dispatch ()
#31 0xbc66c in g_main_iterate ()
#32 0xbcaac in g_main_run ()
#33 0x2c130 in gtk_main ()
#34 0x7a07ab80 in nsAppShell::Run (this=0x400ce038) at nsAppShell.cpp:400
#35 0x7a3ffc20 in nsAppShellService::Run (this=0x400c0a48) at
nsAppShellService.cpp:481
#36 0x27ab8 in main1 (argc=1, argv=0x7b0405c4) at nsAppRunner.cpp:609
#37 0x29208 in main (argc=1, argv=0x7b0405c4) at nsAppRunner.cpp:677

Threads:

3) system thread 3500  0x7aff0f40 in _poll_sys () from /usr/lib/libc.2
2) system thread 3499  0x7afef188 in __ksleep () from /usr/lib/libc.2
1) system thread 3609  0x7908a7f8 in  () from
/builds/pepper/Lizard/bld/mozilla/dist/bin/components/libraptorhtml.sl

Comment 1

[J Shane Culpepper]

I'm assigning this to Jim for now.  If he can't get to it, I'll retake
ownerhip and have a more detailed look at it when I return from vacation.

Comment 2

[Jim Dunn]

reassiging to Shane and marking ths M14

Comment 3

[Jim Dunn]

I did notice that stack == -1 and hence the crash.

The tag is eHTMLTag_td
The position in CNavDTD.cpp is 5 (line 3179)
I have asked Rick G for suggestions.

If u put the following in at line 1273 of nsHTMLContentSink.cpp
it doesn't crash but HALF of the page doesn't display.
if (mStackPos <= 0) {
    return NS_ERROR_FAILURE;
}

Comment 4

[Jim Dunn]

Attachment: This is one area from www.download.com that shows the error

Comment 5

[J Shane Culpepper]

Jim seems to have this one under control.  Reassigning to him for now.

Comment 6

[Jim Dunn]

Fixed on 1/10 by [e-mail]

*** This bug has been marked as a duplicate of 22623 ***

Comment 7

[harishd]

This bug is not a dup of 22623 but a dup. of 20797.

Comment 8

[harishd]

*** This bug has been marked as a duplicate of 20797 ***

Comment 9

[John Unruh]

Verified fixed.