Closed Bug 21878 Opened 25 years ago Closed 25 years ago

mozilla from CVS SIGSEVs on this page

Categories

(Core :: Layout: Tables, defect, P3)

x86
Linux
defect

Tracking

()

VERIFIED DUPLICATE of bug 21918

People

(Reporter: dejong, Assigned: karnaze)

References

()

Details

(Keywords: verifyme)

I was running on a RedHat 6.0 system when I got this error.

The program printed this out a bunch of times.

##!!! ASSERTION: invalid col span or col index: 'effColSpan > 0', file
../../../../../mozilla/layout/html/table/src/nsCellMap.cpp, line 1100
###!!! Break: at file
../../../../../mozilla/layout/html/table/src/nsCellMap.cpp, line 1100

Then it generates a SIGSEV.

Program received signal SIGSEGV, Segmentation fault.
nsTableColFrame::GetMinWidth (this=0x0)
    at ../../../../../mozilla/layout/html/table/src/nsTableColFrame.cpp:176
176       return PR_MAX(mWidths[MIN_CON], mWidths[MIN_ADJ]);


The crash happens because of a NULL pointer for colFrame on line 1785.


#1  0x40eeace1 in BasicTableLayoutStrategy::ColumnsAreValidFor (this=0x8962eb0,
    aCellFrame=@0x886c884, aPrevCellMin=75, aPrevCellDes=75)
    at
../../../../../mozilla/layout/html/table/src/BasicTableLayoutStrategy.cpp:1785

1785      nscoord colMin  = colFrame->GetMinWidth();

(gdb) list
1780      nsTableColFrame* colFrame = mTableFrame->GetColFrame(colIndex);
1781      nscoord colSpan = mTableFrame->GetEffectiveColSpan(&aCellFrame);
1782
1783      nscoord cellMin = aCellFrame.GetPass1MaxElementSize().width;
1784      nscoord cellDes = aCellFrame.GetPass1DesiredSize().width;
1785      nscoord colMin  = colFrame->GetMinWidth();
1786      nscoord colDes  = colFrame->GetDesWidth();
1787
1788      PRBool minChanged = PR_TRUE;
1789      if (((cellMin > aPrevCellMin) && (cellMin <= colMin)) ||

(gdb) print colFrame
$2 = (nsTableColFrame *) 0x0

So the colFrame->GetMinWidth() causes the crash.


Here is the full backtrace in case anyone wants to track it down.
I also tried to save the html page to the local disk, but it does
not crash when loaded from the local disk.


#0  nsTableColFrame::GetMinWidth (this=0x0)
    at ../../../../../mozilla/layout/html/table/src/nsTableColFrame.cpp:176
#1  0x40eeace1 in BasicTableLayoutStrategy::ColumnsAreValidFor (this=0x8962eb0,
    aCellFrame=@0x886c884, aPrevCellMin=75, aPrevCellDes=75)
    at
../../../../../mozilla/layout/html/table/src/BasicTableLayoutStrategy.cpp:1785
#2  0x40efc727 in nsTableFrame::ColumnsAreValidFor (this=0x8944dd0,
    aCellFrame=@0x886c884, aPrevCellMin=75, aPrevCellDes=75)
    at ../../../../../mozilla/layout/html/table/src/nsTableFrame.cpp:3630
#3  0x40f03b0e in nsTableRowFrame::IR_TargetIsChild (this=0x886c83c,
    aPresContext=0x88bd3e0, aDesiredSize=@0xbfff9898, aReflowState=@0xbfff97e4,
    aStatus=@0xbfffa528, aNextFrame=0x886c884)
    at ../../../../../mozilla/layout/html/table/src/nsTableRowFrame.cpp:1312
#4  0x40f03633 in nsTableRowFrame::IncrementalReflow (this=0x886c83c,
    aPresContext=0x88bd3e0, aDesiredSize=@0xbfff9898, aReflowState=@0xbfff97e4,
    aStatus=@0xbfffa528)
    at ../../../../../mozilla/layout/html/table/src/nsTableRowFrame.cpp:1139
#5  0x40f03e54 in nsTableRowFrame::Reflow (this=0x886c83c,
aPresContext=0x88bd3e0,
    aDesiredSize=@0xbfff9898, aReflowState=@0xbfff98c8, aStatus=@0xbfffa528)
    at ../../../../../mozilla/layout/html/table/src/nsTableRowFrame.cpp:1414
#6  0x40d47335 in nsContainerFrame::ReflowChild (this=0x886c464,
aKidFrame=0x886c83c,
    aPresContext=0x88bd3e0, aDesiredSize=@0xbfff9898, aReflowState=@0xbfff98c8,
aX=0,
    aY=3600, aFlags=0, aStatus=@0xbfffa528)
    at ../../../../../mozilla/layout/html/base/src/nsContainerFrame.cpp:621
#7  0x40f076cd in nsTableRowGroupFrame::IR_TargetIsChild (this=0x886c464,
    aPresContext=0x88bd3e0, aDesiredSize=@0xbfff9bdc, aReflowState=@0xbfff9a34,
    aStatus=@0xbfffa528, aNextFrame=0x886c83c)
    at
../../../../../mozilla/layout/html/table/src/nsTableRowGroupFrame.cpp:1479
#8  0x40f06b85 in nsTableRowGroupFrame::IncrementalReflow (this=0x886c464,
    aPresContext=0x88bd3e0, aDesiredSize=@0xbfff9bdc, aReflowState=@0xbfff9a34,
    aStatus=@0xbfffa528)
    at
../../../../../mozilla/layout/html/table/src/nsTableRowGroupFrame.cpp:1137
#9  0x40f06783 in nsTableRowGroupFrame::Reflow (this=0x886c464,
    aPresContext=0x88bd3e0, aDesiredSize=@0xbfff9bdc, aReflowState=@0xbfff9b3c,
    aStatus=@0xbfffa528)
    at
../../../../../mozilla/layout/html/table/src/nsTableRowGroupFrame.cpp:1046
#10 0x40d47335 in nsContainerFrame::ReflowChild (this=0x8944dd0,
aKidFrame=0x886c464,
    aPresContext=0x88bd3e0, aDesiredSize=@0xbfff9bdc, aReflowState=@0xbfff9b3c,
aX=0,
    aY=0, aFlags=0, aStatus=@0xbfffa528)
    at ../../../../../mozilla/layout/html/base/src/nsContainerFrame.cpp:621
#11 0x40efa2c1 in nsTableFrame::IR_TargetIsChild (this=0x8944dd0,
    aPresContext=0x88bd3e0, aDesiredSize=@0xbfffa084, aReflowState=@0xbfff9c68,
    aStatus=@0xbfffa528, aNextFrame=0x886c464)
    at ../../../../../mozilla/layout/html/table/src/nsTableFrame.cpp:2656
#12 0x40ef9d35 in nsTableFrame::IncrementalReflow (this=0x8944dd0,
    aPresContext=0x88bd3e0, aDesiredSize=@0xbfffa084, aReflowState=@0xbfff9fe0,
    aStatus=@0xbfffa528)
    at ../../../../../mozilla/layout/html/table/src/nsTableFrame.cpp:2451
#13 0x40ef78e8 in nsTableFrame::Reflow (this=0x8944dd0, aPresContext=0x88bd3e0,
    aDesiredSize=@0xbfffa084, aReflowState=@0xbfff9fe0, aStatus=@0xbfffa528)
    at ../../../../../mozilla/layout/html/table/src/nsTableFrame.cpp:1495
#14 0x40d47335 in nsContainerFrame::ReflowChild (this=0x8944d80,
aKidFrame=0x8944dd0,
    aPresContext=0x88bd3e0, aDesiredSize=@0xbfffa084, aReflowState=@0xbfff9fe0,
aX=0,
    aY=0, aFlags=3, aStatus=@0xbfffa528)
    at ../../../../../mozilla/layout/html/base/src/nsContainerFrame.cpp:621
#15 0x40effede in nsTableOuterFrame::IR_InnerTableReflow (this=0x8944d80,
    aPresContext=0x88bd3e0, aDesiredSize=@0xbfffa628, aReflowState=@0xbfffa364,
    aStatus=@0xbfffa528)
    at ../../../../../mozilla/layout/html/table/src/nsTableOuterFrame.cpp:588
#16 0x40eff6fc in nsTableOuterFrame::IR_TargetIsInnerTableFrame (this=0x8944d80,
    aPresContext=0x88bd3e0, aDesiredSize=@0xbfffa628, aReflowState=@0xbfffa364,
    aStatus=@0xbfffa528)
    at ../../../../../mozilla/layout/html/table/src/nsTableOuterFrame.cpp:377
#17 0x40eff5e5 in nsTableOuterFrame::IR_TargetIsChild (this=0x8944d80,
    aPresContext=0x88bd3e0, aDesiredSize=@0xbfffa628, aReflowState=@0xbfffa364,
    aStatus=@0xbfffa528, aNextFrame=0x8944dd0)
    at ../../../../../mozilla/layout/html/table/src/nsTableOuterFrame.cpp:350
#18 0x40eff583 in nsTableOuterFrame::IncrementalReflow (this=0x8944d80,
    aPresContext=0x88bd3e0, aDesiredSize=@0xbfffa628, aReflowState=@0xbfffa364,
    aStatus=@0xbfffa528)
    at ../../../../../mozilla/layout/html/table/src/nsTableOuterFrame.cpp:333
#19 0x40f008ec in nsTableOuterFrame::Reflow (this=0x8944d80,
aPresContext=0x88bd3e0,
    aDesiredSize=@0xbfffa628, aReflowState=@0xbfffa3d4, aStatus=@0xbfffa528)
    at ../../../../../mozilla/layout/html/table/src/nsTableOuterFrame.cpp:864
#20 0x40d433eb in nsBlockReflowContext::ReflowBlock (this=0xbfffa5e8,
    aFrame=0x8944d80, aSpace=@0xbfffa530, aApplyTopMargin=1,
aPrevBottomMargin=0,
    aIsAdjacentWithTop=0, aComputedOffsets=@0xbfffa540,
    aFrameReflowStatus=@0xbfffa528)
    at ../../../../../mozilla/layout/html/base/src/nsBlockReflowContext.cpp:259
#21 0x40d3ce10 in nsBlockFrame::ReflowBlockFrame (this=0x8907e70,
aState=@0xbfffa980,
    aLine=0x89b9610, aKeepReflowGoing=0xbfffa760)
    at ../../../../../mozilla/layout/html/base/src/nsBlockFrame.cpp:3250
#22 0x40d3b9ae in nsBlockFrame::ReflowLine (this=0x8907e70, aState=@0xbfffa980,
    aLine=0x89b9610, aKeepReflowGoing=0xbfffa760, aDamageDirtyArea=1)
    at ../../../../../mozilla/layout/html/base/src/nsBlockFrame.cpp:2616
#23 0x40d3b2be in nsBlockFrame::ReflowDirtyLines (this=0x8907e70,
aState=@0xbfffa980)
    at ../../../../../mozilla/layout/html/base/src/nsBlockFrame.cpp:2427
#24 0x40d397e0 in nsBlockFrame::Reflow (this=0x8907e70, aPresContext=0x88bd3e0,
    aMetrics=@0xbfffacd0, aReflowState=@0xbfffac30, aStatus=@0xbfffbd48)
    at ../../../../../mozilla/layout/html/base/src/nsBlockFrame.cpp:1491
#25 0x40d47335 in nsContainerFrame::ReflowChild (this=0x8816e8c,
aKidFrame=0x8907e70,
    aPresContext=0x88bd3e0, aDesiredSize=@0xbfffacd0, aReflowState=@0xbfffac30,
aX=0,
    aY=0, aFlags=0, aStatus=@0xbfffbd48)
    at ../../../../../mozilla/layout/html/base/src/nsContainerFrame.cpp:621
#26 0x40ef0c5f in nsTableCellFrame::Reflow (this=0x8816e8c,
aPresContext=0x88bd3e0,
    aDesiredSize=@0xbfffae8c, aReflowState=@0xbfffadec, aStatus=@0xbfffbd48)
    at ../../../../../mozilla/layout/html/table/src/nsTableCellFrame.cpp:663
#27 0x40d47335 in nsContainerFrame::ReflowChild (this=0x8816e44,
aKidFrame=0x8816e8c,
    aPresContext=0x88bd3e0, aDesiredSize=@0xbfffae8c, aReflowState=@0xbfffadec,
aX=0,
    aY=0, aFlags=0, aStatus=@0xbfffbd48)
    at ../../../../../mozilla/layout/html/base/src/nsContainerFrame.cpp:621
#28 0x40f039e3 in nsTableRowFrame::IR_TargetIsChild (this=0x8816e44,
    aPresContext=0x88bd3e0, aDesiredSize=@0xbfffb0b8, aReflowState=@0xbfffb004,
    aStatus=@0xbfffbd48, aNextFrame=0x8816e8c)
    at ../../../../../mozilla/layout/html/table/src/nsTableRowFrame.cpp:1252
#29 0x40f03633 in nsTableRowFrame::IncrementalReflow (this=0x8816e44,
    aPresContext=0x88bd3e0, aDesiredSize=@0xbfffb0b8, aReflowState=@0xbfffb004,
    aStatus=@0xbfffbd48)
    at ../../../../../mozilla/layout/html/table/src/nsTableRowFrame.cpp:1139
#30 0x40f03e54 in nsTableRowFrame::Reflow (this=0x8816e44,
aPresContext=0x88bd3e0,
    aDesiredSize=@0xbfffb0b8, aReflowState=@0xbfffb0e8, aStatus=@0xbfffbd48)
    at ../../../../../mozilla/layout/html/table/src/nsTableRowFrame.cpp:1414
#31 0x40d47335 in nsContainerFrame::ReflowChild (this=0x884c160,
aKidFrame=0x8816e44,
    aPresContext=0x88bd3e0, aDesiredSize=@0xbfffb0b8, aReflowState=@0xbfffb0e8,
aX=0,
    aY=1440, aFlags=0, aStatus=@0xbfffbd48)
    at ../../../../../mozilla/layout/html/base/src/nsContainerFrame.cpp:621
#32 0x40f076cd in nsTableRowGroupFrame::IR_TargetIsChild (this=0x884c160,
    aPresContext=0x88bd3e0, aDesiredSize=@0xbfffb3fc, aReflowState=@0xbfffb254,
    aStatus=@0xbfffbd48, aNextFrame=0x8816e44)
    at
../../../../../mozilla/layout/html/table/src/nsTableRowGroupFrame.cpp:1479
#33 0x40f06b85 in nsTableRowGroupFrame::IncrementalReflow (this=0x884c160,
    aPresContext=0x88bd3e0, aDesiredSize=@0xbfffb3fc, aReflowState=@0xbfffb254,
    aStatus=@0xbfffbd48)
    at
../../../../../mozilla/layout/html/table/src/nsTableRowGroupFrame.cpp:1137
#34 0x40f06783 in nsTableRowGroupFrame::Reflow (this=0x884c160,
    aPresContext=0x88bd3e0, aDesiredSize=@0xbfffb3fc, aReflowState=@0xbfffb35c,
    aStatus=@0xbfffbd48)
    at
../../../../../mozilla/layout/html/table/src/nsTableRowGroupFrame.cpp:1046
#35 0x40d47335 in nsContainerFrame::ReflowChild (this=0x884c0f4,
aKidFrame=0x884c160,
    aPresContext=0x88bd3e0, aDesiredSize=@0xbfffb3fc, aReflowState=@0xbfffb35c,
aX=0,
    aY=0, aFlags=0, aStatus=@0xbfffbd48)
    at ../../../../../mozilla/layout/html/base/src/nsContainerFrame.cpp:621
#36 0x40efa2c1 in nsTableFrame::IR_TargetIsChild (this=0x884c0f4,
    aPresContext=0x88bd3e0, aDesiredSize=@0xbfffb8a4, aReflowState=@0xbfffb488,
    aStatus=@0xbfffbd48, aNextFrame=0x884c160)
    at ../../../../../mozilla/layout/html/table/src/nsTableFrame.cpp:2656
#37 0x40ef9d35 in nsTableFrame::IncrementalReflow (this=0x884c0f4,
    aPresContext=0x88bd3e0, aDesiredSize=@0xbfffb8a4, aReflowState=@0xbfffb800,
    aStatus=@0xbfffbd48)
    at ../../../../../mozilla/layout/html/table/src/nsTableFrame.cpp:2451
#38 0x40ef78e8 in nsTableFrame::Reflow (this=0x884c0f4, aPresContext=0x88bd3e0,
    aDesiredSize=@0xbfffb8a4, aReflowState=@0xbfffb800, aStatus=@0xbfffbd48)
    at ../../../../../mozilla/layout/html/table/src/nsTableFrame.cpp:1495
#39 0x40d47335 in nsContainerFrame::ReflowChild (this=0x884c0a4,
aKidFrame=0x884c0f4,
    aPresContext=0x88bd3e0, aDesiredSize=@0xbfffb8a4, aReflowState=@0xbfffb800,
aX=0,
    aY=0, aFlags=3, aStatus=@0xbfffbd48)
    at ../../../../../mozilla/layout/html/base/src/nsContainerFrame.cpp:621
#40 0x40effede in nsTableOuterFrame::IR_InnerTableReflow (this=0x884c0a4,
    aPresContext=0x88bd3e0, aDesiredSize=@0xbfffbe48, aReflowState=@0xbfffbb84,
    aStatus=@0xbfffbd48)
    at ../../../../../mozilla/layout/html/table/src/nsTableOuterFrame.cpp:588
#41 0x40eff6fc in nsTableOuterFrame::IR_TargetIsInnerTableFrame (this=0x884c0a4,
    aPresContext=0x88bd3e0, aDesiredSize=@0xbfffbe48, aReflowState=@0xbfffbb84,
    aStatus=@0xbfffbd48)
    at ../../../../../mozilla/layout/html/table/src/nsTableOuterFrame.cpp:377
#42 0x40eff5e5 in nsTableOuterFrame::IR_TargetIsChild (this=0x884c0a4,
    aPresContext=0x88bd3e0, aDesiredSize=@0xbfffbe48, aReflowState=@0xbfffbb84,
    aStatus=@0xbfffbd48, aNextFrame=0x884c0f4)
    at ../../../../../mozilla/layout/html/table/src/nsTableOuterFrame.cpp:350
#43 0x40eff583 in nsTableOuterFrame::IncrementalReflow (this=0x884c0a4,
    aPresContext=0x88bd3e0, aDesiredSize=@0xbfffbe48, aReflowState=@0xbfffbb84,
    aStatus=@0xbfffbd48)
    at ../../../../../mozilla/layout/html/table/src/nsTableOuterFrame.cpp:333
#44 0x40f008ec in nsTableOuterFrame::Reflow (this=0x884c0a4,
aPresContext=0x88bd3e0,
    aDesiredSize=@0xbfffbe48, aReflowState=@0xbfffbbf4, aStatus=@0xbfffbd48)
    at ../../../../../mozilla/layout/html/table/src/nsTableOuterFrame.cpp:864
#45 0x40d433eb in nsBlockReflowContext::ReflowBlock (this=0xbfffbe08,
    aFrame=0x884c0a4, aSpace=@0xbfffbd50, aApplyTopMargin=0,
aPrevBottomMargin=0,
    aIsAdjacentWithTop=1, aComputedOffsets=@0xbfffbd60,
    aFrameReflowStatus=@0xbfffbd48)
    at ../../../../../mozilla/layout/html/base/src/nsBlockReflowContext.cpp:259
#46 0x40d3ce10 in nsBlockFrame::ReflowBlockFrame (this=0x884bfac,
aState=@0xbfffc1a0,
    aLine=0x8acd7c0, aKeepReflowGoing=0xbfffbf80)
    at ../../../../../mozilla/layout/html/base/src/nsBlockFrame.cpp:3250
#47 0x40d3b9ae in nsBlockFrame::ReflowLine (this=0x884bfac, aState=@0xbfffc1a0,
    aLine=0x8acd7c0, aKeepReflowGoing=0xbfffbf80, aDamageDirtyArea=1)
    at ../../../../../mozilla/layout/html/base/src/nsBlockFrame.cpp:2616
#48 0x40d3b2be in nsBlockFrame::ReflowDirtyLines (this=0x884bfac,
aState=@0xbfffc1a0)
    at ../../../../../mozilla/layout/html/base/src/nsBlockFrame.cpp:2427
#49 0x40d397e0 in nsBlockFrame::Reflow (this=0x884bfac, aPresContext=0x88bd3e0,
    aMetrics=@0xbfffc618, aReflowState=@0xbfffc3c4, aStatus=@0xbfffc518)
    at ../../../../../mozilla/layout/html/base/src/nsBlockFrame.cpp:1491
#50 0x40d433eb in nsBlockReflowContext::ReflowBlock (this=0xbfffc5d8,
    aFrame=0x884bfac, aSpace=@0xbfffc520, aApplyTopMargin=1,
aPrevBottomMargin=0,
    aIsAdjacentWithTop=1, aComputedOffsets=@0xbfffc530,
    aFrameReflowStatus=@0xbfffc518)
    at ../../../../../mozilla/layout/html/base/src/nsBlockReflowContext.cpp:259
#51 0x40d3ce10 in nsBlockFrame::ReflowBlockFrame (this=0x884beac,
aState=@0xbfffc970,
    aLine=0x869a590, aKeepReflowGoing=0xbfffc750)
    at ../../../../../mozilla/layout/html/base/src/nsBlockFrame.cpp:3250
#52 0x40d3b9ae in nsBlockFrame::ReflowLine (this=0x884beac, aState=@0xbfffc970,
    aLine=0x869a590, aKeepReflowGoing=0xbfffc750, aDamageDirtyArea=1)
    at ../../../../../mozilla/layout/html/base/src/nsBlockFrame.cpp:2616
#53 0x40d3b2be in nsBlockFrame::ReflowDirtyLines (this=0x884beac,
aState=@0xbfffc970)
    at ../../../../../mozilla/layout/html/base/src/nsBlockFrame.cpp:2427
#54 0x40d397e0 in nsBlockFrame::Reflow (this=0x884beac, aPresContext=0x88bd3e0,
    aMetrics=@0xbfffcd7c, aReflowState=@0xbfffccdc, aStatus=@0xbfffd498)
    at ../../../../../mozilla/layout/html/base/src/nsBlockFrame.cpp:1491
#55 0x40d36176 in nsAreaFrame::Reflow (this=0x884beac, aPresContext=0x88bd3e0,
    aMetrics=@0xbfffcd7c, aReflowState=@0xbfffccdc, aStatus=@0xbfffd498)
    at ../../../../../mozilla/layout/html/base/src/nsAreaFrame.cpp:270
#56 0x40d47335 in nsContainerFrame::ReflowChild (this=0x8824b74,
aKidFrame=0x884beac,
    aPresContext=0x88bd3e0, aDesiredSize=@0xbfffcd7c, aReflowState=@0xbfffccdc,
aX=0,
    aY=0, aFlags=0, aStatus=@0xbfffd498)
    at ../../../../../mozilla/layout/html/base/src/nsContainerFrame.cpp:621
#57 0x40d5ccb7 in RootFrame::Reflow (this=0x8824b74, aPresContext=0x88bd3e0,
    aDesiredSize=@0xbfffcf2c, aReflowState=@0xbfffce68, aStatus=@0xbfffd498)
    at ../../../../../mozilla/layout/html/base/src/nsHTMLFrame.cpp:326
#58 0x40d47335 in nsContainerFrame::ReflowChild (this=0x8824bfc,
aKidFrame=0x8824b74,
    aPresContext=0x88bd3e0, aDesiredSize=@0xbfffcf2c, aReflowState=@0xbfffce68,
aX=0,
    aY=0, aFlags=1, aStatus=@0xbfffd498)
    at ../../../../../mozilla/layout/html/base/src/nsContainerFrame.cpp:621
#59 0x40d92e5d in nsScrollPortFrame::Reflow (this=0x8824bfc,
aPresContext=0x88bd3e0,
    aDesiredSize=@0xbfffd194, aReflowState=@0xbfffd04c, aStatus=@0xbfffd498)
    at ../../../../../mozilla/layout/html/base/src/nsScrollPortFrame.cpp:402
#60 0x40d47335 in nsContainerFrame::ReflowChild (this=0x8824bb0,
aKidFrame=0x8824bfc,
    aPresContext=0x88bd3e0, aDesiredSize=@0xbfffd194, aReflowState=@0xbfffd04c,
aX=0,
    aY=0, aFlags=3, aStatus=@0xbfffd498)
    at ../../../../../mozilla/layout/html/base/src/nsContainerFrame.cpp:621
#61 0x40d90e5c in nsGfxScrollFrameInner::ReflowFrame (this=0x8532ae0,
    aPresContext=0x88bd3e0, aDesiredSize=@0xbfffd194, aReflowState=@0xbfffd2b0,
    aStatus=@0xbfffd498, aFrame=0x8824bfc, aAvailable=@0xbfffd18c,
    aComputed=@0xbfffd18c, aResized=@0xbfffd188, aIncrementalChild=@0xbfffd210)
    at ../../../../../mozilla/layout/html/base/src/nsGfxScrollFrame.cpp:1250
#62 0x40d91042 in nsGfxScrollFrameInner::ReflowScrollArea (this=0x8532ae0,
    aPresContext=0x88bd3e0, aDesiredSize=@0xbfffd358, aReflowState=@0xbfffd2b0,
    aStatus=@0xbfffd498, aHscrollbarNeedsReflow=@0xbfffd21c,
    aVscrollbarNeedsReflow=@0xbfffd218, aScrollAreaNeedsReflow=@0xbfffd214,
    aIncrementalChild=@0xbfffd210)
    at ../../../../../mozilla/layout/html/base/src/nsGfxScrollFrame.cpp:1316
#63 0x40d8fb8f in nsGfxScrollFrame::Reflow (this=0x8824bb0,
aPresContext=0x88bd3e0,
    aDesiredSize=@0xbfffd358, aReflowState=@0xbfffd2b0, aStatus=@0xbfffd498)
    at ../../../../../mozilla/layout/html/base/src/nsGfxScrollFrame.cpp:512
#64 0x40d47335 in nsContainerFrame::ReflowChild (this=0x8824b38,
aKidFrame=0x8824bb0,
    aPresContext=0x88bd3e0, aDesiredSize=@0xbfffd358, aReflowState=@0xbfffd2b0,
aX=0,
    aY=0, aFlags=0, aStatus=@0xbfffd498)
    at ../../../../../mozilla/layout/html/base/src/nsContainerFrame.cpp:621
#65 0x40d8ee75 in ViewportFrame::Reflow (this=0x8824b38, aPresContext=0x88bd3e0,
    aDesiredSize=@0xbfffd4ec, aReflowState=@0xbfffd3f8, aStatus=@0xbfffd498)
    at ../../../../../mozilla/layout/html/base/src/nsViewportFrame.cpp:526
#66 0x40d5e417 in nsHTMLReflowCommand::Dispatch (this=0x888b3b0,
    aPresContext=0x88bd3e0, aDesiredSize=@0xbfffd4ec, aMaxSize=@0xbfffd4d0,
    aRendContext=@0x888b3e8)
    at ../../../../../mozilla/layout/html/base/src/nsHTMLReflowCommand.cpp:144
#67 0x40d7a52d in PresShell::ProcessReflowCommands (this=0x87ad7f8)
    at ../../../../../mozilla/layout/html/base/src/nsPresShell.cpp:1841
#68 0x40d77205 in PresShell::ExitReflowLock (this=0x87ad7f8, aTryToReflow=1,
    aDoSynchronousReflow=1)
    at ../../../../../mozilla/layout/html/base/src/nsPresShell.cpp:824
#69 0x40d7bcb7 in PresShell::ContentAppended (this=0x87ad7f8,
aDocument=0x8941408,
    aContainer=0x89da920, aNewIndexInContainer=1)
    at ../../../../../mozilla/layout/html/base/src/nsPresShell.cpp:2295
#70 0x40f5d257 in nsDocument::ContentAppended (this=0x8941408,
aContainer=0x89da920,
    aNewIndexInContainer=1) at
../../../../mozilla/layout/base/src/nsDocument.cpp:1541
#71 0x40e34bae in nsHTMLDocument::ContentAppended (this=0x8941408,
    aContainer=0x89da920, aNewIndexInContainer=1)
    at ../../../../../mozilla/layout/html/document/src/nsHTMLDocument.cpp:1099
#72 0x40d9ba9d in nsGenericHTMLContainerElement::AppendChildTo (this=0x89da928,
    aKid=0x8a121d0, aNotify=1)
    at
../../../../../mozilla/layout/html/content/src/nsGenericHTMLElement.cpp:2959
#73 0x40e0e876 in nsHTMLTableCellElement::AppendChildTo (this=0x89da910,
    aKid=0x8a121d0, aNotify=1)
    at
../../../../../mozilla/layout/html/content/src/nsHTMLTableCellElement.cpp:112
#74 0x40e242f3 in SinkContext::CloseContainer (this=0x8886008,
aNode=@0xbfffd960)
    at
../../../../../mozilla/layout/html/document/src/nsHTMLContentSink.cpp:1264
#75 0x40e28589 in HTMLContentSink::CloseForm (this=0x86f1618, aNode=@0xbfffd960)
    at
../../../../../mozilla/layout/html/document/src/nsHTMLContentSink.cpp:2658
#76 0x407e97ae in CNavDTD::CloseForm (this=0x88623d0, aNode=0xbfffd960)
    at ../../../mozilla/htmlparser/src/CNavDTD.cpp:2641
#77 0x407e9fce in CNavDTD::CloseContainer (this=0x88623d0, aNode=0xbfffd960,
    aTarget=eHTMLTag_form, aClosedByStartTag=0)
    at ../../../mozilla/htmlparser/src/CNavDTD.cpp:2891
#78 0x407e7bd4 in CNavDTD::HandleEndToken (this=0x88623d0, aToken=0x879f318)
    at ../../../mozilla/htmlparser/src/CNavDTD.cpp:1534
#79 0x407e63f1 in CNavDTD::HandleToken (this=0x88623d0, aToken=0x879f318,
    aParser=0x89483c8) at ../../../mozilla/htmlparser/src/CNavDTD.cpp:754
#80 0x407e5d8b in CNavDTD::BuildModel (this=0x88623d0, aParser=0x89483c8,
    aTokenizer=0x894abb8, anObserver=0x0, aSink=0x86f1618)
    at ../../../mozilla/htmlparser/src/CNavDTD.cpp:523
#81 0x407f42ec in nsParser::BuildModel (this=0x89483c8)
    at ../../../mozilla/htmlparser/src/nsParser.cpp:1040
#82 0x407f419c in nsParser::ResumeParse (this=0x89483c8, aDefaultDTD=0x0,
    aIsFinalChunk=0) at ../../../mozilla/htmlparser/src/nsParser.cpp:966
#83 0x407f3c1e in nsParser::Parse (this=0x89483c8, aSourceBuffer=@0xbfffdbb8,
    aKey=0x1, aContentType=@0xbfffdb9c, aVerifyEnabled=0, aLastCall=1,
    aMode=eParseMode_autodetect) at
../../../mozilla/htmlparser/src/nsParser.cpp:844
#84 0x40e374e5 in nsHTMLDocument::ScriptWriteCommon (this=0x8941408,
cx=0x84f8c88,
    argv=0x82bfce4, argc=1, aNewlineTerminate=0)
    at ../../../../../mozilla/layout/html/document/src/nsHTMLDocument.cpp:1904
#85 0x40e37590 in nsHTMLDocument::Write (this=0x8941408, cx=0x84f8c88,
    argv=0x82bfce4, argc=1)
    at ../../../../../mozilla/layout/html/document/src/nsHTMLDocument.cpp:1917
#86 0x4113bdc2 in NSHTMLDocumentWrite (cx=0x84f8c88, obj=0x8494430, argc=1,
    argv=0x82bfce4, rval=0xbfffdd84)
    at ../../../../mozilla/dom/src/html/nsJSHTMLDocument.cpp:1168
#87 0x4008a32e in js_Invoke (cx=0x84f8c88, argc=1, flags=0)
    at ../../../mozilla/js/src/jsinterp.c:665
#88 0x40098aa1 in js_Interpret (cx=0x84f8c88, result=0xbfffe840)
    at ../../../mozilla/js/src/jsinterp.c:2226
#89 0x4008a8ae in js_Execute (cx=0x84f8c88, chain=0x84651c8, script=0x8939340,
    fun=0x0, down=0x0, flags=0, result=0xbfffe840)
    at ../../../mozilla/js/src/jsinterp.c:838
#90 0x4005f441 in JS_EvaluateUCScriptForPrincipals (cx=0x84f8c88, obj=0x84651c8,
    principals=0x8917e54, chars=0x8863fd8, length=169,
    filename=0x8882e68
"http://www.cnn.com/1999/SHOWBIZ/Music/12/14/mccartney02/index.h
tml", lineno=212, rval=0xbfffe840) at ../../../mozilla/js/src/jsapi.c:2705
#91 0x410d9737 in nsJSContext::EvaluateString (this=0x85049d8,
aScript=@0xbfffeb08,
    aScopeObject=0x84651c8, aPrincipal=0x8917e50,
    aURL=0x8882e68
"http://www.cnn.com/1999/SHOWBIZ/Music/12/14/mccartney02/index.html",
aLineNo=212, aVersion=0x0, aRetValue=@0xbfffe8fc, aIsUndefined=0xbfffe8f0)
    at ../../../../mozilla/dom/src/base/nsJSEnvironment.cpp:284
#92 0x40e2c348 in HTMLContentSink::EvaluateScript (this=0x86f1618,
    aScript=@0xbfffeb08, aLineNo=212, aVersion=0x0)
    at
../../../../../mozilla/layout/html/document/src/nsHTMLContentSink.cpp:3843
#93 0x40e2d174 in HTMLContentSink::ProcessSCRIPTTag (this=0x86f1618,
aNode=@0x8ac6638)
    at
../../../../../mozilla/layout/html/document/src/nsHTMLContentSink.cpp:4034
#94 0x40e28a5c in HTMLContentSink::AddLeaf (this=0x86f1618, aNode=@0x8ac6638)
    at
../../../../../mozilla/layout/html/document/src/nsHTMLContentSink.cpp:2818
#95 0x407ea383 in CNavDTD::AddLeaf (this=0x88623d0, aNode=0x8ac6638)
    at ../../../mozilla/htmlparser/src/CNavDTD.cpp:3110
#96 0x407e8499 in CNavDTD::HandleScriptToken (this=0x88623d0, aNode=0x8ac6638)
    at ../../../mozilla/htmlparser/src/CNavDTD.cpp:1792
#97 0x407e9d24 in CNavDTD::OpenContainer (this=0x88623d0, aNode=0x8ac6638,
    aTag=eHTMLTag_script, aClosedByStartTag=1, aStyleStack=0x0)
    at ../../../mozilla/htmlparser/src/CNavDTD.cpp:2824
#98 0x407e6bdd in CNavDTD::HandleDefaultStartToken (this=0x88623d0,
aToken=0x862f218,
    aChildTag=eHTMLTag_script, aNode=0x8ac6638)
    at ../../../mozilla/htmlparser/src/CNavDTD.cpp:1048
#99 0x407e7516 in CNavDTD::HandleStartToken (this=0x88623d0, aToken=0x862f218)
    at ../../../mozilla/htmlparser/src/CNavDTD.cpp:1352
#100 0x407e63da in CNavDTD::HandleToken (this=0x88623d0, aToken=0x879f318,
    aParser=0x89483c8) at ../../../mozilla/htmlparser/src/CNavDTD.cpp:751
#101 0x407e5d8b in CNavDTD::BuildModel (this=0x88623d0, aParser=0x89483c8,
    aTokenizer=0x8808708, anObserver=0x0, aSink=0x86f1618)
    at ../../../mozilla/htmlparser/src/CNavDTD.cpp:523
#102 0x407f42ec in nsParser::BuildModel (this=0x89483c8)
    at ../../../mozilla/htmlparser/src/nsParser.cpp:1040
#103 0x407f419c in nsParser::ResumeParse (this=0x89483c8, aDefaultDTD=0x0,
    aIsFinalChunk=0) at ../../../mozilla/htmlparser/src/nsParser.cpp:966
#104 0x407f4cdf in nsParser::OnDataAvailable (this=0x89483c8, channel=0x88a66c8,
    aContext=0x0, pIStream=0x8956700, sourceOffset=0, aLength=1448)
    at ../../../mozilla/htmlparser/src/nsParser.cpp:1326
#105 0x41bde399 in nsDocumentBindInfo::OnDataAvailable (this=0x89539b0,
    channel=0x88a66c8, ctxt=0x0, aStream=0x8956700, sourceOffset=0,
aLength=1448)
    at ../../../mozilla/webshell/src/nsDocLoader.cpp:1455
#106 0x405315b9 in nsDocumentOpenInfo::OnDataAvailable (this=0x891dbd8,
    aChannel=0x88a66c8, aCtxt=0x0, inStr=0x8956700, sourceOffset=0, count=1448)
    at ../../../mozilla/uriloader/base/nsURILoader.cpp:216
#107 0x41bdee58 in nsChannelListener::OnDataAvailable (this=0x8981248,
    aChannel=0x88a66c8, aContext=0x0, aInStream=0x8956700, aOffset=0,
aCount=1448)
    at ../../../mozilla/webshell/src/nsDocLoader.cpp:1603
#108 0x404bfcfb in nsHTTPResponseListener::OnDataAvailable (this=0x869fe00,
    channel=0x878c6c0, context=0x88a66c8, i_pStream=0x8956700,
i_SourceOffset=10650,
    i_Length=1448)
    at
../../../../../mozilla/netwerk/protocol/http/src/nsHTTPResponseListener.cpp:193
#109 0x404143d1 in nsOnDataAvailableEvent::HandleEvent (this=0x41d587e0)
    at ../../../../mozilla/netwerk/base/src/nsAsyncStreamListener.cpp:369
#110 0x404137f7 in nsStreamListenerEvent::HandlePLEvent (aEvent=0x41d572d0)
    at ../../../../mozilla/netwerk/base/src/nsAsyncStreamListener.cpp:93
#111 0x401b936b in PL_HandleEvent (self=0x41d572d0) at plevent.c:522
#112 0x401b927c in PL_ProcessPendingEvents (self=0x814a6d8) at plevent.c:483
#113 0x4016ea79 in nsEventQueueImpl::ProcessPendingEvents (this=0x814a6a0)
    at ../../../mozilla/xpcom/threads/nsEventQueue.cpp:197
#114 0x41b0fd1c in event_processor_callback (data=0x814a6a0, source=8,
    condition=GDK_INPUT_READ) at
../../../../mozilla/widget/src/gtk/nsAppShell.cpp:233
#115 0x41b0f62f in our_gdk_io_invoke (source=0x81fe288, condition=G_IO_IN,
    data=0x8200868) at ../../../../mozilla/widget/src/gtk/nsAppShell.cpp:54
#116 0x409a13ca in g_io_unix_dispatch ()
#117 0x409a2a86 in g_main_dispatch ()
#118 0x409a3041 in g_main_iterate ()
#119 0x409a31e1 in g_main_run ()
#120 0x408cf7a9 in gtk_main ()
#121 0x41b102e5 in nsAppShell::Run (this=0x8158010)
    at ../../../../mozilla/widget/src/gtk/nsAppShell.cpp:400
#122 0x41aafa21 in nsAppShellService::Run (this=0x814a310)
    at ../../../../mozilla/xpfe/appshell/src/nsAppShellService.cpp:481
#123 0x804bf8d in main1 (argc=1, argv=0xbffff5d4)
    at ../../../mozilla/xpfe/bootstrap/nsAppRunner.cpp:609
#124 0x804c2d9 in main (argc=1, argv=0xbffff5d4)
    at ../../../mozilla/xpfe/bootstrap/nsAppRunner.cpp:677
#125 0x402bbcb3 in __libc_start_main (main=0x804c0c8 <main>, argc=1,
argv=0xbffff5d4,
    init=0x804a248 <_init>, fini=0x8050b48 <_fini>, rtld_fini=0x4000a350
<_dl_fini>,
    stack_end=0xbffff5cc) at ../sysdeps/generic/libc-start.c:78
Oops, I forgot to mention that it was from the CVS today, Wed Dec 15.
Assignee: leger → karnaze
Component: Browser-General → HTMLTables
Status: NEW → RESOLVED
Closed: 25 years ago
Resolution: --- → DUPLICATE
I realize that this was reported before 21918 but I have a test case there.

*** This bug has been marked as a duplicate of 21918 ***
Putting on verifyme keyword.
Keywords: verifyme
VERIFY duplicate
Status: RESOLVED → VERIFIED
You need to log in before you can comment on or make changes to this bug.