Closed Bug 25156 Opened 25 years ago Closed 25 years ago

Java Plug-in 1.3beta crashes with nightly build from 27.1.2000

Categories

(Core :: Layout, defect, P3)

x86
Windows NT
defect

Tracking

()

VERIFIED FIXED

People

(Reporter: bruenae.stuessi, Assigned: serhunt)

References

()

Details

(Keywords: crash, Whiteboard: [pdt+])

Java Plug-in 1.3beta (3 dlls copied into new "plugins" folder) initializes well, 
but only when loading the framed html page and instantiating its applet
the crash occurs. Following is the Dr. Watson 32 dump only of the crashing 
thread (function: nsTextFragment::CopyTo):

State Dump for Thread Id 0xab

eax=00000054 ebx=00000000 ecx=0012ded4 edx=00000000 esi=0a76da44 edi=00000003
eip=6018ff6e esp=0012de74 ebp=0012de88 iopl=0         nv up ei pl zr na po nc
cs=001b  ss=0023  ds=0023  es=0023  fs=0038  gs=0000             efl=00000246


function: nsTextFragment::CopyTo
        6018ff57 7408             jz      nsTextFragment::CopyTo+0x57b4 
(6018ff61)
        6018ff59 47               inc     edi
        6018ff5a 3b7e48           cmp     edi,[esi+0x48]         
ds:0b82c44a=????????
        6018ff5d 7ce6             jl      nsTextFragment::CopyTo+0x5798 
(6018ff45)
        6018ff5f eb08             jmp     nsTextFragment::CopyTo+0x57bc 
(6018ff69)
        6018ff61 8b4650           mov     eax,[esi+0x50]         
ds:0b82c44a=????????
        6018ff64 8b04b8           mov     eax,[eax+edi*4]        
ds:00000003=????????
        6018ff67 8903             mov     [ebx],eax              
ds:00000000=????????
        6018ff69 3b7e48           cmp     edi,[esi+0x48]         
ds:0b82c44a=????????
        6018ff6c 7c06             jl      nsTextFragment::CopyTo+0x57c7 
(6018ff74)
FAULT ->6018ff6e c703b83f2960     mov dword ptr [ebx],0x60293fb8 
ds:00000000=????????
        6018ff74 5f               pop     edi
        6018ff75 5e               pop     esi
        6018ff76 33c0             xor     eax,eax
        6018ff78 5b               pop     ebx
        6018ff79 c9               leave
        6018ff7a c20c00           ret     0xc
        6018ff7d 55               push    ebp
        6018ff7e 8bec             mov     ebp,esp
        6018ff80 51               push    ecx
        6018ff81 51               push    ecx
        6018ff82 8b4508           mov     eax,[ebp+0x8]          
ss:011ec88e=????????

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1  Param#2  Param#3  Param#4  Function Name
0012de88 609f5841 0003da44 0012ded4 00000000 09774ea0 
gkhtml!nsTextFragment::CopyTo [omap] 
0012dea0 5035517b 0a76da44 0012ded4 00000000 0a76d2e0 gkplugin!NSGetFactory 
0012decc 50355846 00000000 0a76dcc8 0a76da40 609f2979 jpins32!<nosymbols> 
0012dedc 609f2979 09774ea0 0a76da58 0973bfe8 0012e240 jpins32!<nosymbols>  (FPO: 
[2,0,1])
0012defc 6018e9cc 004a1330 0a76a2a0 0a76d9a0 0a76da58 
gkplugin!nsGetServiceByProgID::operator= 
0012df30 6018e28b 0a76da58 00000000 0012e198 004a1334 
gkhtml!nsTextFragment::CopyTo [omap] 
0012e170 601a236d 004a1334 0a726300 0012e240 0012e198 
gkhtml!nsTextFragment::CopyTo [omap] 
0012e2a0 601a9aab 0973bfe8 00000000 0012e2d4 00000000 gkhtml!NS_NewPresShell 
0012e2dc 601a9963 0012eaec 0012e338 0a76f5f0 0973bfe8 gkhtml!NS_NewFrameManager 
0012e310 601a9858 0012eaec 0012e338 0973bfe8 0012ead0 gkhtml!NS_NewFrameManager 
0012e9d0 601a9741 0012eaec 0a76f5f0 0012ead0 0012ea0b gkhtml!NS_NewFrameManager 
0012e9f8 601a8bd2 0012eaec 0a76f5f0 0212ead0 00000000 gkhtml!NS_NewFrameManager 
0012ea50 601a881f 0012eaec 0a76f5f0 0012ead0 00000001 gkhtml!NS_NewFrameManager 
0012ead4 601a7d93 00000001 00000000 0973bf6c 0012eebc gkhtml!NS_NewFrameManager 
0012ecc8 601ad528 00000000 0a726300 0012eefc 00000000 gkhtml!NS_NewFrameManager 
0012edbc 601a940e 0973bf6c 00000000 00000001 00000000 gkhtml!NS_NewFrameManager 
0012efa4 601a8a58 0012f094 00000000 0012f078 0a76a440 gkhtml!NS_NewFrameManager 
0012eff8 601a881f 0012f094 0a76a440 0012f078 00000001 gkhtml!NS_NewFrameManager 
0012f07c 601a7d93 00000001 0012f474 0973bf24 00000000 gkhtml!NS_NewFrameManager 
0012f270 6022ec1a 00000000 0a726300 0012f474 0a76dac0 gkhtml!NS_NewFrameManager 
0012f350 6019dcc2 ffffffff 0a726300 0012f474 0012f3ac 
gkhtml!NS_NewDocumentFragment 
0012f378 6018d36a 0973bf24 0a726300 0012f474 0012f3ac gkhtml!NS_NewPresShell 
0012f4b0 6019dcc2 09739620 0a726300 0012f64c 0973bf24 
gkhtml!nsTextFragment::CopyTo [omap] 
0012f4d8 6022fc48 09739620 0a726300 0012f64c 0012f5ac gkhtml!NS_NewPresShell 
0012f6b0 6019dcc2 097396a0 0a726300 0012f800 0973bf6c 
gkhtml!NS_NewDocumentFragment 
0012f6d8 60230f89 097396a0 0a726300 0012f800 0012f70c gkhtml!NS_NewPresShell 
0012f7c8 6023107b 0a726300 0012f800 0012f934 0012faf8 
gkhtml!NS_NewDocumentFragment 
0012f878 60230631 0a726300 0012f9d4 0012f934 0012faf8 
gkhtml!NS_NewDocumentFragment 
0012f8d8 6019dcc2 09739658 0a726300 0012f9d4 00000000 
gkhtml!NS_NewDocumentFragment 
0012f900 6022f5af 09739658 0a726300 0012f9d4 0012f934 gkhtml!NS_NewPresShell 
0012fa30 601a060e 097395e8 0a726300 0012fb24 09739658 
gkhtml!NS_NewDocumentFragment 
0012fafc 60199803 0a75a890 0a726300 0012fb24 0012fb54 gkhtml!NS_NewPresShell 
0012fb70 601985f0 0a76a3b0 00000000 0a75a2d0 0a75a2d8 gkhtml!NS_NewPresShell 
0012fb84 6019a165 0a75a2d0 00000001 0a75a2d8 60c19b84 gkhtml!NS_NewPresShell  
(FPO: [2,0,2])
0012fba0 6022c5b0 00000000 0a6f10a0 0973bf6c 00000000 gkhtml!NS_NewPresShell 
0012fbc8 601be881 0a6f10a0 0a759f5c 00000000 00000014 
gkhtml!nsStyleChangeList::Clear 
0012fbe4 601b91a9 0a6f10a0 0a759f5c 00000000 0a713580 gkhtml!NS_NewHTMLDocument 
0012fbf8 601b65c6 0a759f5c 00000000 00000000 0a7136b0 
gkhtml!NS_CreateHTMLElement [omap]  (FPO: [2,0,1])
0012fc20 601b750f 0a759c90 0012fc7c 602b81da 00000000 
gkhtml!NS_CreateHTMLElement [omap] 
0012fc2c 602b81da 00000000 0a759c90 602b849d 0a759c90 
gkhtml!NS_CreateHTMLElement [omap] 
0012fc38 602b849d 0a759c90 0a759c90 0a75ac10 0a75ac10 
gkparser!CNavDTD::CloseBody  (FPO: [1,0,0])
0012fc4c 602b853f 0a759c90 0000000f 00000000 00000000 
gkparser!CNavDTD::CloseContainer  (FPO: [3,0,3])
0012fc7c 602b8731 00000001 0000000f 00000000 0a75ac10 
gkparser!CNavDTD::CloseContainersTo [omap] 
0012fc98 602b673e 0000000f 00000000 602d4830 00000000 
gkparser!CNavDTD::CloseContainersTo [omap] 
0012fccc 602bd2f6 0a75ac10 00000000 00000001 0a6f3380 
gkparser!CNavDTD::DidBuildModel 
0012fce8 602bdb13 00000000 0a744938 0a6f3384 0012fdb0 
gkparser!nsParser::DidBuildModel  (FPO: [1,0,1])
0012fd00 602be108 804e03e8 00000001 0a74461c 0a7448f0 
gkparser!nsParser::ResumeParse  (FPO: [EBP 0x0a744938] [2,0,4])
0a744938 00000000 00000000 00000000 00000061 00000031 
gkparser!nsParser::OnStopRequest 
0a744610 00000001 0a740bcc 0a6f3384 00000000 60c39df0 mozilla!<nosymbols> 

*----> Raw Stack Dump <----*
0012de74  00 00 00 80 00 00 00 00 - e0 d2 76 0a 80 d5 76 0a  ..........v...v.
0012de84  70 d1 76 0a a0 de 12 00 - 41 58 9f 60 44 da 03 00  p.v.....AX.`D...
0012de94  d4 de 12 00 00 00 00 00 - a0 4e 77 09 cc de 12 00  .........Nw.....
0012dea4  7b 51 35 50 44 da 76 0a - d4 de 12 00 00 00 00 00  {Q5PD.v.........
0012deb4  e0 d2 76 0a 00 00 00 00 - 00 00 00 00 00 00 00 00  ..v.............
0012dec4  00 00 00 00 00 00 00 00 - fc de 12 00 46 58 35 50  ............FX5P
0012ded4  00 00 00 00 c8 dc 76 0a - 40 da 76 0a 79 29 9f 60  ......v.@.v.y).`
0012dee4  a0 4e 77 09 58 da 76 0a - e8 bf 73 09 40 e2 12 00  .Nw.X.v...s.@...
0012def4  00 63 72 0a a0 4e 77 09 - 30 df 12 00 cc e9 18 60  .cr..Nw.0......`
0012df04  30 13 4a 00 a0 a2 76 0a - a0 d9 76 0a 58 da 76 0a  0.J...v...v.X.v.
0012df14  00 63 72 0a 00 00 00 80 - e8 bf 73 09 00 00 00 00  .cr.......s.....
0012df24  00 00 00 00 c0 9a 76 0a - 89 88 88 3d 70 e1 12 00  ......v....=p...
0012df34  8b e2 18 60 58 da 76 0a - 00 00 00 00 98 e1 12 00  ...`X.v.........
0012df44  34 13 4a 00 a0 a2 76 0a - a0 d9 76 0a 00 00 00 00  4.J...v...v.....
0012df54  e8 bf 73 09 38 e3 12 00 - 84 df 12 00 55 51 c1 60  ..s.8.......UQ.`
0012df64  80 41 77 0a 20 c4 28 60 - 8c df 12 00 b8 df 12 00  .Aw. .(`........
0012df74  af 51 c1 60 30 0d 19 60 - 00 00 00 00 cc df 12 00  .Q.`0..`........
0012df84  00 00 00 00 01 00 00 00 - 00 00 00 00 b0 bf 73 09  ..............s.
0012df94  20 00 12 00 00 00 00 00 - 00 00 00 00 00 00 00 00   ...............
0012dfa4  70 e1 12 00 19 75 19 60 - b0 46 19 60 20 62 77 0a  p....u.`.F.` bw.
QA Assigning to paw, who probably knows where this goes...
QA Contact: nobody → paw
Changing component to OJI and assigned to drapeau@eng.sun.com
Assignee: nobody → drapeau
Component: Browser-General → OJI
Adding "crash" keyword to all known open crasher bugs.
Keywords: crash
I'm seeing a similar problem with M13 (installer build)
and the JDK1.3ea1 release on my Win'98 machine.  After
installing the npjava*.dll files, visiting a page containing
an applet causes a page fault in GKHTML.DLL (looks consistent
with the stack trace given here).
Now that M13 and Java Plug-in 1.3rc are out, I have tried out this most uptodate 
combination; the crash still occurs. I think that this could be a bug in M13, as 
M12 and Java Plug-in 1.3rc does NOT crash at all.
The latest publically available Java Plug-in from Sun DOES NOT WORK with 
Mozilla M13.  This is because M13 introduced several binary incompatibilities.  
If you want java in mozilla stick with M12, or wait for JDK 1.3.1 to come out 
from Sun.
Assignee: drapeau → edburns
*** Bug 25866 has been marked as a duplicate of this bug. ***
getting critical java bugs on the beta1 radar
Keywords: beta1
Whiteboard: [pdt+]
I'm pulling new SeaMonkey source now.  Once I've got today's build, I'll 
install the same JRE that I gave to PAW yesterday and try this bug.
I tried the JRE installer, and found that applets don't work at all.  Jest the 
grey APPLET box.  

I'm tempted to think this is a mozilla problem, since the same JRE/JPI code 
worked with the mozilla build from the last week of January.  It smells like a 
layout bug.  I don't think the box should be displaying applet.

Assignee: edburns → troy
Component: OJI → Layout
QA Contact: paw → petersen
applet/plugin related
Assignee: troy → av
Putting on M14 radar.
Target Milestone: M14
I do not see the crash in todays commercial build. However the applet is not 
loaded. This problem could be related to 27763. Marking what... fixed? If 
anybody thinks this is not a dup of 27763 please open a new bug. Or reopen if 
this crash still occurs.
Status: NEW → RESOLVED
Closed: 25 years ago
Resolution: --- → FIXED
I have tried Mozilla Nightly build from 15th January 2000.
The crash IS STILL PRESENT.
The symptom is the same as in M13.
The reason I think also: The crash occurs still in function 
nsTextFragment::CopyTo of dll components/gkhtml.dll, so I think this function 
has NOT BEEN FIXED at all.

Again:
Mozilla comes up fine including loading Java Plug-in 1.3rc and showing its 
console,
but when loading a html page containing an "Java Plug-in" applet Mozilla
crashes (Note: the html page is contained in a HTML FrameSet).

Following the current thread dump generated by DrWatson32:

State Dump for Thread Id 0xc3

eax=00000054 ebx=00000000 ecx=0012da60 edx=00000000 esi=0a745634 edi=00000003
eip=60180a44 esp=0012da00 ebp=0012da14 iopl=0         nv up ei pl zr na po nc
cs=001b  ss=0023  ds=0023  es=0023  fs=0038  gs=0000             efl=00000246


function: nsTextFragment::CopyTo
        60180a2d 7408             jz      nsTextFragment::CopyTo+0x5847 
(60180a37)
        60180a2f 47               inc     edi
        60180a30 3b7e48           cmp     edi,[esi+0x48]         
ds:0b80403a=????????
        60180a33 7ce6             jl      nsTextFragment::CopyTo+0x582b 
(60180a1b)
        60180a35 eb08             jmp     nsTextFragment::CopyTo+0x584f 
(60180a3f)
        60180a37 8b4650           mov     eax,[esi+0x50]         
ds:0b80403a=????????
        60180a3a 8b04b8           mov     eax,[eax+edi*4]        
ds:00000003=????????
        60180a3d 8903             mov     [ebx],eax              
ds:00000000=????????
        60180a3f 3b7e48           cmp     edi,[esi+0x48]         
ds:0b80403a=????????
        60180a42 7c06             jl      nsTextFragment::CopyTo+0x585a 
(60180a4a)
FAULT ->60180a44 c70370422860     mov dword ptr [ebx],0x60284270 
ds:00000000=????????
        60180a4a 5f               pop     edi
        60180a4b 5e               pop     esi
        60180a4c 33c0             xor     eax,eax
        60180a4e 5b               pop     ebx
        60180a4f c9               leave
        60180a50 c20c00           ret     0xc
        60180a53 55               push    ebp
        60180a54 8bec             mov     ebp,esp
        60180a56 51               push    ecx
        60180a57 51               push    ecx
        60180a58 8b4508           mov     eax,[ebp+0x8]          
ss:011ec41a=????????

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1  Param#2  Param#3  Param#4  Function Name
0012da14 60a359c5 00035634 0012da60 00000000 017a1e38 
gkhtml!nsTextFragment::CopyTo [omap] 
0012da2c 5035517b 0a745634 0012da60 00000000 0a745020 gkplugin!NSGetFactory 
0012da58 50355846 00000000 0a7452b8 0a745630 60a329b3 jpins32!<nosymbols> 
0012da68 60a329b3 017a1e38 0a745648 017532c0 0012ddd8 jpins32!<nosymbols>  (FPO: 
[2,0,1])
0012da88 6017f40e 00ce2c70 0a745610 0a745570 0a745648 
gkplugin!nsGetServiceByProgID::operator= 
0012dabc 6017eccd 0a745648 00000000 0012dd24 00ce2c74 
gkhtml!nsTextFragment::CopyTo [omap] 
0012dcfc 60193625 00ce2c74 0a6ed070 0012ddd8 0012dd24 
gkhtml!nsTextFragment::CopyTo [omap] 
0012de3c 6019b17e 017532c0 00000000 0012de70 00000000 gkhtml!NS_NewPresShell 
0012de78 6019b01f 0012e840 0012ded4 0a744020 017532c0 gkhtml!NS_NewFrameManager 
0012deac 6019af10 0012e840 0012ded4 017532c0 0012e674 gkhtml!NS_NewFrameManager 
0012e570 6019adf9 0012e840 0a744020 0012e674 0012e5ab gkhtml!NS_NewFrameManager 
0012e598 6019a279 0012e840 0a744020 0212e674 00000000 gkhtml!NS_NewFrameManager 
0012e5f4 60199e68 0012e840 0a744020 0012e674 00000001 gkhtml!NS_NewFrameManager 
0012e678 601993ea 00000001 00000000 01753244 0012ec1c gkhtml!NS_NewFrameManager 
0012ea28 6019ed55 00000000 0a6ed070 0012ec5c 00000000 gkhtml!NS_NewFrameManager 
0012eb1c 6019aab5 01753244 0012ecd4 00000001 00000000 gkhtml!NS_NewFrameManager 
0012ed04 6019a0a1 0012efa8 00000000 0012eddc 0a7324f0 gkhtml!NS_NewFrameManager 
0012ed5c 60199e68 0012efa8 0a7324f0 0012eddc 00000001 gkhtml!NS_NewFrameManager 
0012ede0 601993ea 00000001 0012f394 017531c4 00000000 gkhtml!NS_NewFrameManager 
0012f190 60223dd7 00000000 0a6ed070 0012f394 0a7456b0 gkhtml!NS_NewFrameManager 
0012f270 6018ee7b ffffffff 0a6ed070 0012f394 0012f2cc 
gkhtml!NS_NewDocumentFragment 
0012f298 6017dda7 017531c4 0a6ed070 0012f394 0012f2cc gkhtml!NS_NewPresShell 
0012f3d0 6018ee7b 0179c2a8 0a6ed070 0012f56c 017531c4 
gkhtml!nsTextFragment::CopyTo [omap] 
0012f3f8 60224e84 0179c2a8 0a6ed070 0012f56c 0012f42c gkhtml!NS_NewPresShell 
0012f5c0 6018ee7b 0179c328 0a6ed070 0012f714 40000000 
gkhtml!NS_NewDocumentFragment 
0012f5e8 60226345 0179c328 0a6ed070 0012f714 0012f61c gkhtml!NS_NewPresShell 
0012f6dc 60226415 0a6ed070 0012f714 0012f8c8 0012fa8c 
gkhtml!NS_NewDocumentFragment 
0012f790 6022597f 0a6ed070 0012f968 0012f8c8 0012fa8c 
gkhtml!NS_NewDocumentFragment 
0012f86c 6018ee7b 01753244 0a6ed070 0012f968 00000000 
gkhtml!NS_NewDocumentFragment 
0012f894 6022474d 0179c2e0 0a6ed070 0012f968 0012f8c8 gkhtml!NS_NewPresShell 
0012f9c4 6019180c 0179c270 0a6ed070 0012fab8 0179c2e0 
gkhtml!NS_NewDocumentFragment 
0012fa90 6018a85f 0a7216e0 0a6ed070 0012fab8 0012fae8 gkhtml!NS_NewPresShell 
0012fb08 601893c8 0a745830 00000000 0a725df0 0a725df8 gkhtml!NS_NewPresShell 
0012fb1c 6018b27f 0a725df0 00000001 0a725df8 60c49cf6 gkhtml!NS_NewPresShell  
(FPO: [2,0,2])
0012fb38 60221733 00000000 0a6c7a20 01753244 00000000 gkhtml!NS_NewPresShell 
0012fb60 601b0eec 0a6c7a20 0a724afc 00000000 0a67dc10 
gkhtml!nsStyleChangeList::Clear 
0012fb7c 601ab6e1 0a6c7a20 0a724afc 00000000 00000014 gkhtml!NS_NewHTMLDocument 
0012fb94 601a83e3 0a724afc 00000000 0a67dc10 0a67db10 
gkhtml!NS_CreateHTMLElement [omap]  (FPO: [2,0,2])
0012fbbc 601a9630 00000001 0a725610 0a7258d0 0012fc28 
gkhtml!NS_CreateHTMLElement [omap] 
0012fbd0 602a8634 00000000 0a725610 0a725610 0a7258d0 
gkhtml!NS_CreateHTMLElement [omap] 
0012fbe4 602a8a46 0a725610 0a725610 0a7258d0 0a7258d0 
gkparser!CNavDTD::CloseBody  (FPO: [1,0,2])
0012fbf8 602a8b39 0a725610 0000000f 00000000 00000000 
gkparser!CNavDTD::CloseContainer  (FPO: [3,0,3])
0012fc28 602a8d22 00000001 0000000f 00000000 0a7258d0 
gkparser!CNavDTD::CloseContainersTo [omap] 
0012fc44 602a69ab 0000000f 00000000 602c9868 00000000 
gkparser!CNavDTD::CloseContainersTo [omap] 
0012fc78 602b0f9e 0a7258d0 00000000 00000001 0a67dc60 
gkparser!CNavDTD::DidBuildModel 
0012fc94 602b17e1 00000000 0a68ef18 0a67dc64 0012fd5c 
gkparser!nsParser::DidBuildModel  (FPO: [1,0,1])
0012fcac 602b1e30 804e03e8 00000001 0a68b70c 0a68eed0 
gkparser!nsParser::ResumeParse  (FPO: [EBP 0x0a68ef18] [2,0,4])
0a68ef18 00000000 00000000 0000006c 00000061 00000031 
gkparser!nsParser::OnStopRequest 
0a68b700 00000001 0a686c3c 0a67dc64 00000000 60c6bdd0 mozilla!<nosymbols> 

*----> Raw Stack Dump <----*
0012da00  00 00 00 80 00 00 00 00 - 20 50 74 0a 60 69 74 0a  ........ Pt.`it.
0012da10  40 69 74 0a 2c da 12 00 - c5 59 a3 60 34 56 03 00  @it.,....Y.`4V..
0012da20  60 da 12 00 00 00 00 00 - 38 1e 7a 01 58 da 12 00  `.......8.z.X...
0012da30  7b 51 35 50 34 56 74 0a - 60 da 12 00 00 00 00 00  {Q5P4Vt.`.......
0012da40  20 50 74 0a 00 00 00 00 - 00 00 00 00 00 00 00 00   Pt.............
0012da50  00 00 00 00 00 00 00 00 - 88 da 12 00 46 58 35 50  ............FX5P
0012da60  00 00 00 00 b8 52 74 0a - 30 56 74 0a b3 29 a3 60  .....Rt.0Vt..).`
0012da70  38 1e 7a 01 48 56 74 0a - c0 32 75 01 d8 dd 12 00  8.z.HVt..2u.....
0012da80  70 d0 6e 0a 38 1e 7a 01 - bc da 12 00 0e f4 17 60  p.n.8.z........`
0012da90  70 2c ce 00 10 56 74 0a - 70 55 74 0a 48 56 74 0a  p,...Vt.pUt.HVt.
0012daa0  70 d0 6e 0a 00 00 00 80 - c0 32 75 01 00 00 00 00  p.n......2u.....
0012dab0  00 00 00 00 10 50 73 0a - 89 88 88 3d fc dc 12 00  .....Ps....=....
0012dac0  cd ec 17 60 48 56 74 0a - 00 00 00 00 24 dd 12 00  ...`HVt.....$...
0012dad0  74 2c ce 00 10 56 74 0a - 70 55 74 0a 00 00 00 00  t,...Vt.pUt.....
0012dae0  c0 32 75 01 d4 de 12 00 - 10 db 12 00 95 51 c4 60  .2u..........Q.`
0012daf0  50 3c 74 0a c0 c4 27 60 - 18 db 12 00 44 db 12 00  P<t...'`....D...
0012db00  ef 51 c4 60 2a 18 18 60 - 00 00 00 00 58 db 12 00  .Q.`*..`....X...
0012db10  00 00 00 00 01 00 00 00 - 00 00 00 00 88 32 75 01  .............2u.
0012db20  20 00 12 00 00 00 00 00 - 00 00 00 00 00 00 00 00   ...............
0012db30  fc dc 12 00 82 82 18 60 - e2 53 18 60 d0 12 73 0a  .......`.S.`..s.
Status: RESOLVED → REOPENED
Resolution: FIXED → ---
Did you mean February 15 build?
I have installed the file

mozilla-win32.zip   5901 Kb   Tue Feb 15 17:13:00 2000 Zip Compressed Data

downloaded from

ftp://ftp.mozilla.org/pub/mozilla/nightly/latest/
Can anybody else reproduce this? petersen?
I've just downloaded todays commercial build from
ftp://sweetlou/products/client/5.0x/windows/32bit/x86/current/

and even see applets running. Anybody confirm?
Your url is not valid. Apart from that I think that Java has not only to work in 
some special build, but in every. You have the exact thread dump, so you should 
be able to fix that crash, so that even if applets don't work, the browser still 
does.
With the Feb 17 th build, I still can't a applet to load and display in the 
browser window. Tested on Win 95, Win 98 and Win NT. I installed Java 2 (version 
1.3) on all of these machine so that they have current VM. My applet test cases 
are at http://slip/projects/marvin/html/. Is there something else I need to do ?
Did you try the original URL?
To bruenae.stuessi:
The URL is valid, I think it is not accessible from outside. This is not any 
kind of special build, just latest at that time. And finally, I _never_ saw this 
crash, and it's kind of hard to work on something you do not see.
Ok, I tried the specified URL. I don't get a crash when attempting to load a 
applet but it doesn't display either. Since this original issue was that the 
application crashed, this problem is appears to be fixed. Tested with Feb 18th 
build under Windows 98 using Java 2 (version 1.3).
I see two nice clocks working on 
http://slip/projects/marvin/html/applet_hspace.html
Anyway, if we cannot reproduce the crash we should close this one.
Status: REOPENED → RESOLVED
Closed: 25 years ago25 years ago
Resolution: --- → FIXED
Verified fixed in the Feb 21 build.
Status: RESOLVED → VERIFIED
The crash still occurs, but I won't reopen the bug right now.
I think Java Plug-in calls OJI with an invalid (null?) parameter
on my machine configuration.
A better thread dump, containing the whole assembler code of the
crashing method/procedure - with no symbol :( - follows:

State Dump for Thread Id 0x38
eax=00000000 ebx=00000000 ecx=0012dd50 edx=0012dd20 esi=0a5f31d4 edi=00000000
eip=60180bde esp=0012dd40 ebp=0012dd54 iopl=0         nv up ei pl zr na po nc
cs=001b  ss=0023  ds=0023  es=0023  fs=0038  gs=0000             efl=00000246

        601791b6 00001e5f   NS_NewFrameImageLoader
        6017b24e 0000003f   nsTextFragment::SetTo
        ...
        6017b28d 0000002c   nsTextFragment::AppendTo
        6017b2b9 00000068   nsTextFragment::CopyTo
FAULT ->6017b321 0000630d   nsTextFragment::CopyTo 
        6018162e 00000019   nsQueryReferent::nsQueryReferent

function: nsTextFragment::CopyTo
        60180ae2 ff4648           inc     dword ptr [esi+0x48]   
ds:0b6b1bda=????????
        60180ae5 eb33             jmp     nsTextFragment::CopyTo+0x57f9 
(60180b1a)
        60180ae7 3bcf             cmp     ecx,edi
        60180ae9 7411             jz      nsTextFragment::CopyTo+0x57db 
(60180afc)
        60180aeb 51               push    ecx
        60180aec ff1584d12560                                    
ds:6025d184=60bd75c0
                           call dword ptr 
[NS_NewDocumentFragment+0x380cc (6025d184)]
        60180af2 8b4648           mov     eax,[esi+0x48]         
ds:0b6b1bda=????????
        60180af5 59               pop     ecx
        60180af6 8b4e4c           mov     ecx,[esi+0x4c]         
ds:0b6b1bda=????????
        60180af9 893c81           mov     [ecx+eax*4],edi        
ds:00000000=????????
        60180afc 8b4648           mov     eax,[esi+0x48]         
ds:0b6b1bda=????????
        60180aff 8b4e50           mov     ecx,[esi+0x50]         
ds:0b6b1bda=????????
        60180b02 8b0481           mov     eax,[ecx+eax*4]        
ds:00000000=????????
        60180b05 3bc7             cmp     eax,edi
        60180b07 7411             jz      nsTextFragment::CopyTo+0x57f9 
(60180b1a)
        60180b09 50               push    eax
        60180b0a ff1584d12560                                    
ds:6025d184=60bd75c0
                           call dword ptr 
[NS_NewDocumentFragment+0x380cc (6025d184)]
        60180b10 8b4648           mov     eax,[esi+0x48]         
ds:0b6b1bda=????????
        60180b13 59               pop     ecx
        60180b14 8b4e50           mov     ecx,[esi+0x50]         
ds:0b6b1bda=????????
        60180b17 893c81           mov     [ecx+eax*4],edi        
ds:00000000=????????
        60180b1a 8d8d54ffffff     lea     ecx,[ebp+0xffffff54]   
ss:0012dca8=ffff0023
        60180b20 ff153cd42560                                    
ds:6025d43c=60c47c65
                           call dword ptr 
[NS_NewDocumentFragment+0x38384 (6025d43c)]
        60180b26 8d8dbcfeffff     lea     ecx,[ebp+0xfffffebc]   
ss:0012dc10=0000000a
        60180b2c ff153cd42560                                    
ds:6025d43c=60c47c65
                           call dword ptr 
[NS_NewDocumentFragment+0x38384 (6025d43c)]
        60180b32 8b45f8           mov     eax,[ebp-0x8]          
ss:011ec75a=????????
        60180b35 8b08             mov     ecx,[eax]              
ds:00000000=????????
        60180b37 50               push    eax
        60180b38 ff5108           call    dword ptr [ecx+0x8]    
ds:011ec756=????????
        60180b3b 897df8           mov     [ebp-0x8],edi          
ss:011ec75a=????????
        60180b3e 8b45fc           mov     eax,[ebp-0x4]          
ss:011ec75a=????????
        60180b41 50               push    eax
        60180b42 8b08             mov     ecx,[eax]              
ds:00000000=????????
        60180b44 ff5108           call    dword ptr [ecx+0x8]    
ds:011ec756=????????
        60180b47 ff4508           inc     dword ptr [ebp+0x8]    
ss:011ec75a=????????
        60180b4a 897dfc           mov     [ebp-0x4],edi          
ss:011ec75a=????????
        60180b4d 8b4508           mov     eax,[ebp+0x8]          
ss:011ec75a=????????
        60180b50 3b45f0           cmp     eax,[ebp-0x10]         
ss:011ec75a=????????
        60180b53 0f8c7ffeffff     jl      nsTextFragment::CopyTo+0x56b7 
(601809d8)
        60180b59 33db             xor     ebx,ebx
        60180b5b 8b45f4           mov     eax,[ebp-0xc]          
ss:011ec75a=????????
        60180b5e 33ff             xor     edi,edi
        60180b60 50               push    eax
        60180b61 8b08             mov     ecx,[eax]              
ds:00000000=????????
        60180b63 ff5108           call    dword ptr [ecx+0x8]    
ds:011ec756=????????
        60180b66 8b4d0c           mov     ecx,[ebp+0xc]          
ss:011ec75a=????????
        60180b69 668b4648         mov     ax,[esi+0x48]              
ds:0b6b1bdb=????
        60180b6d 668901           mov     [ecx],ax                   
ds:0012dd50=0000
        60180b70 8b4d10           mov     ecx,[ebp+0x10]         
ss:011ec75a=????????
        60180b73 8b464c           mov     eax,[esi+0x4c]         
ds:0b6b1bda=????????
        60180b76 8901             mov     [ecx],eax              
ds:0012dd50=00000000
        60180b78 8b4d14           mov     ecx,[ebp+0x14]         
ss:011ec75a=????????
        60180b7b 8b4650           mov     eax,[esi+0x50]         
ds:0b6b1bda=????????
        60180b7e 8901             mov     [ecx],eax              
ds:0012dd50=00000000
        60180b80 8bc7             mov     eax,edi
        60180b82 5f               pop     edi
        60180b83 5e               pop     esi
        60180b84 5b               pop     ebx
        60180b85 c9               leave
        60180b86 c21000           ret     0x10
       
--------------------------------------------------------------------------------
        60180b89 55               push    ebp
        60180b8a 8bec             mov     ebp,esp
        60180b8c 51               push    ecx
        60180b8d 51               push    ecx
        60180b8e 53               push    ebx
        60180b8f 56               push    esi
        60180b90 8b7508           mov     esi,[ebp+0x8]          
ss:011ec75a=????????
        60180b93 57               push    edi
    <IF ???==0>
        60180b94 33ff             xor     edi,edi
        60180b96 397e4c           cmp     [esi+0x4c],edi         
ds:0b6b1bda=????????
        60180b99 7512             jnz     nsTextFragment::CopyTo+0x588c 
(60180bad)
        ---
        60180b9b 8b06             mov     eax,[esi]              
ds:0a5f31d4=6025fa70
        60180b9d 8d4dfc           lea     ecx,[ebp-0x4]          
ss:011ec75a=????????
        60180ba0 51               push    ecx
        60180ba1 8d4df8           lea     ecx,[ebp-0x8]          
ss:011ec75a=????????
        60180ba4 51               push    ecx
        60180ba5 8d4d0a           lea     ecx,[ebp+0xa]          
ss:011ec75a=????????
        60180ba8 51               push    ecx
        60180ba9 56               push    esi
        60180baa ff5020           call    dword ptr [eax+0x20]   
ds:010bea06=7265762e
        ---
    </IF ???==0>
    <IF ???>???>
        60180bad 397e48           cmp     [esi+0x48],edi         
ds:0b6b1bda=????????
        60180bb0 8b5d10           mov     ebx,[ebp+0x10]         
ss:011ec75a=????????
        60180bb3 7e24             jle     nsTextFragment::CopyTo+0x58b8 
(60180bd9)
      <LOOP>
        ---
        60180bb5 ff750c           push    dword ptr [ebp+0xc]    
ss:011ec75a=????????
        60180bb8 8b464c           mov     eax,[esi+0x4c]         
ds:0b6b1bda=????????
        60180bbb ff34b8           push    dword ptr [eax+edi*4]  
ds:00000000=????????
        60180bbe e8c7d20900       call   NS_NewEventListenerManager+0x4c70 
(6021de8a)
        ---
        60180bc3 59               pop     ecx
        60180bc4 85c0             test    eax,eax
        60180bc6 59               pop     ecx
        60180bc7 7408             jz      nsTextFragment::CopyTo+0x58b0 
(60180bd1)
        60180bc9 47               inc     edi
        60180bca 3b7e48           cmp     edi,[esi+0x48]         
ds:0b6b1bda=????????
        60180bcd 7ce6             jl      nsTextFragment::CopyTo+0x5894 
(60180bb5)
      </LOOP>
        60180bcf eb08             jmp     nsTextFragment::CopyTo+0x58b8 
(60180bd9)
        60180bd1 8b4650           mov     eax,[esi+0x50]         
ds:0b6b1bda=????????
        60180bd4 8b04b8           mov     eax,[eax+edi*4]        
ds:00000000=????????
        60180bd7 8903             mov     [ebx],eax              
ds:00000000=????????
    </IF ???>???>
    <BLOCK>
enter ->60180bd9 3b7e48           cmp     edi,[esi+0x48]         
ds:0b6b1bda=????????
nojmp ->60180bdc 7c06             jl      nsTextFragment::CopyTo+0x58c3 
(60180be4)
**************************** EBX=0 [?=NULL POINTER?]
FAULT ->60180bde c70338832860     mov dword ptr [ebx],0x60288338 
ds:00000000=????????
    </BLOCK>
        60180be4 5f               pop     edi
        60180be5 5e               pop     esi
        60180be6 33c0             xor     eax,eax
        60180be8 5b               pop     ebx
        60180be9 c9               leave
        60180bea c20c00           ret     0xc
       
--------------------------------------------------------------------------------
        60180bed 55               push    ebp
        60180bee 8bec             mov     ebp,esp
        60180bf0 51               push    ecx
        60180bf1 51               push    ecx
        60180bf2 8b4508           mov     eax,[ebp+0x8]          
ss:011ec75a=????????
        60180bf5 53               push    ebx
        60180bf6 56               push    esi
        60180bf7 33db             xor     ebx,ebx
        60180bf9 395854           cmp     [eax+0x54],ebx         
ds:010bea06=7265762e
        60180bfc 8d7054           lea     esi,[eax+0x54]         
ds:010bea06=7265762e
        60180bff 7562             jnz     nsTextFragment::CopyTo+0x5942 
(60180c63)
        60180c01 8b405c           mov     eax,[eax+0x5c]         
ds:010bea06=7265762e
        60180c04 85c0             test    eax,eax
        60180c06 750c             jnz     nsTextFragment::CopyTo+0x58f3 
(60180c14)
        60180c08 8b450c           mov     eax,[ebp+0xc]          
ss:011ec75a=????????
        60180c0b 2118             and     [eax],ebx              
ds:00000000=????????
        60180c0d b805400080       mov     eax,0x80004005
        60180c12 eb58             jmp     nsTextFragment::CopyTo+0x594b 
(60180c6c)
        60180c14 8365fc00         and    dword ptr [ebp-0x4],0x0 
ss:011ec75a=????????
        60180c18 8b08             mov     ecx,[eax]              
ds:00000000=????????
        60180c1a 8d55fc           lea     edx,[ebp-0x4]          
ss:011ec75a=????????
        60180c1d 52               push    edx
        60180c1e 50               push    eax
        60180c1f ff5118           call    dword ptr [ecx+0x18]   
ds:011ec756=????????
        60180c22 8b45fc           mov     eax,[ebp-0x4]          
ss:011ec75a=????????
        60180c25 83650800         and    dword ptr [ebp+0x8],0x0 
ss:011ec75a=????????
        60180c29 8d5508           lea     edx,[ebp+0x8]          
ss:011ec75a=????????
        60180c2c 8b08             mov     ecx,[eax]              
ds:00000000=????????
        60180c2e 52               push    edx
        60180c2f 50               push    eax
        60180c30 ff5118           call    dword ptr [ecx+0x18]   
ds:011ec756=????????
        60180c33 8b4d08           mov     ecx,[ebp+0x8]          
ss:011ec75a=????????
        60180c36 8b01             mov     eax,[ecx]              
ds:0012dd50=00000000
        60180c38 ff5018           call    dword ptr [eax+0x18]   
ds:010bea06=7265762e
        60180c3b 8945f8           mov     [ebp-0x8],eax          
ss:011ec75a=????????
        60180c3e 8b08             mov     ecx,[eax]              
ds:00000000=????????
        60180c40 56               push    esi
        60180c41 50               push    eax
        60180c42 ff510c           call    dword ptr [ecx+0xc]    
ds:011ec756=????????
        60180c45 8d4df8           lea     ecx,[ebp-0x8]          
ss:011ec75a=????????
        60180c48 8bd8             mov     ebx,eax
        60180c4a e87bcd0900       call   NS_NewEventListenerManager+0x47b0 
(6021d9ca)
        60180c4f 8d4d08           lea     ecx,[ebp+0x8]          
ss:011ec75a=????????
        60180c52 e873cd0900       call   NS_NewEventListenerManager+0x47b0 
(6021d9ca)
        60180c57 8d4dfc           lea     ecx,[ebp-0x4]          
ss:011ec75a=????????
        60180c5a e86bcd0900       call   NS_NewEventListenerManager+0x47b0 
(6021d9ca)
        60180c5f 85db             test    ebx,ebx
        60180c61 7507             jnz     nsTextFragment::CopyTo+0x5949 
(60180c6a)
        60180c63 8b4d0c           mov     ecx,[ebp+0xc]          
ss:011ec75a=????????
        60180c66 8b06             mov     eax,[esi]              
ds:0a5f31d4=6025fa70
        60180c68 8901             mov     [ecx],eax              
ds:0012dd50=00000000
        60180c6a 8bc3             mov     eax,ebx
        60180c6c 5e               pop     esi
        60180c6d 5b               pop     ebx
        60180c6e c9               leave
        60180c6f c20800           ret     0x8
        60180c72 681c082860       push    0x6028081c
        60180c77 ff156cd02560                                    
ds:6025d06c=78022a28
                           call dword ptr 
[NS_NewDocumentFragment+0x37fb4 (6025d06c)]
        60180c7d 59               pop     ecx
        60180c7e b805400080       mov     eax,0x80004005
        60180c83 c20800           ret     0x8
        60180c86 8b442404         mov     eax,[esp+0x4]          
ss:011ec747=????????
        60180c8a ff742408         push    dword ptr [esp+0x8]    
ss:011ec747=????????
        60180c8e 8b08             mov     ecx,[eax]              
ds:00000000=????????
        60180c90 6848082860       push    0x60280848
        60180c95 50               push    eax
        60180c96 ff5110           call    dword ptr [ecx+0x10]   
ds:011ec756=????????
        60180c99 c20800           ret     0x8
        60180c9c 55               push    ebp
        60180c9d 8bec             mov     ebp,esp
        60180c9f 83ec20           sub     esp,0x20
        60180ca2 53               push    ebx
        60180ca3 56               push    esi
        60180ca4 8b7508           mov     esi,[ebp+0x8]          
ss:011ec75a=????????
        60180ca7 8d4dfc           lea     ecx,[ebp-0x4]          
ss:011ec75a=????????
        60180caa 57               push    edi
        60180cab 51               push    ecx
        60180cac 8b06             mov     eax,[esi]              
ds:0a5f31d4=6025fa70
        60180cae 6850082860       push    0x60280850
        60180cb3 56               push    esi
        60180cb4 ff5010           call    dword ptr [eax+0x10]   
ds:010bea06=7265762e
        60180cb7 33ff             xor     edi,edi
        60180cb9 8945f0           mov     [ebp-0x10],eax         
ss:011ec75a=????????
        60180cbc 3bc7             cmp     eax,edi
        60180cbe 0f8518010000     jne     nsTextFragment::CopyTo+0x5abb 
(60180ddc)
        60180cc4 8b5d0c           mov     ebx,[ebp+0xc]          
ss:011ec75a=????????
        60180cc7 393b             cmp     [ebx],edi              
ds:00000000=????????
        60180cc9 893b             mov     [ebx],edi              
ds:00000000=????????
        60180ccb 0f8410010000     je      nsTextFragment::CopyTo+0x5ac0 
(60180de1)
        60180cd1 ff75fc           push    dword ptr [ebp-0x4]    
ss:011ec75a=????????
        60180cd4 ff155cd02560                                    
ds:6025d05c=7800348b
                           call dword ptr 
[NS_NewDocumentFragment+0x37fa4 (6025d05c)]
        60180cda 6a25             push    0x25
        60180cdc 894508           mov     [ebp+0x8],eax          
ss:011ec75a=????????
        60180cdf ff75fc           push    dword ptr [ebp-0x4]    
ss:011ec75a=????????
        60180ce2 ff1554d02560                                    
ds:6025d054=78010b52
                           call dword ptr 
[NS_NewDocumentFragment+0x37f9c (6025d054)]

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1  Param#2  Param#3  Param#4  Function Name
0012dd54 60a459de 000031d4 0012dda0 00000000 0985bf38 
gkhtml!nsTextFragment::CopyTo [omap] 
0012dd6c 5035517b 0a5f31d4 0012dda0 00000000 0a720810 gkplugin!NSGetFactory 
0012dd98 50355846 00000000 0a720fd8 0a5f31d0 60a429b3 jpins32!<nosymbols> 
0012dda8 60a429b3 0985bf38 0a5f31e8 098527e0 0012e118 jpins32!<nosymbols>  (FPO: 
[2,0,1])
0012ddc8 6017f59d 0109cc60 0a5f4050 0a536b70 0a5f31e8 
gkplugin!nsGetServiceByProgID::operator= 
0012ddfc 6017f10f 0a5f31e8 00000000 0012e064 0109cc64 
gkhtml!nsTextFragment::CopyTo [omap] 
0012e03c 601935f8 0109cc64 0a6bbc70 0012e118 0012e064 
gkhtml!nsTextFragment::CopyTo [omap] 
0012e17c 6019b30c 098527e0 00000000 0012e1b0 00000000 gkhtml!NS_NewPresShell 
0012e1b8 6019b1ad 0012e9e4 0012e214 0a524360 098527e0 gkhtml!NS_NewFrameManager 
0012e1ec 6019b09e 0012e9e4 0012e214 098527e0 0012e9c4 gkhtml!NS_NewFrameManager 
0012e8b0 6019af87 0012e9e4 0a524360 0012e9c4 0012e8eb gkhtml!NS_NewFrameManager 
0012e8d8 6019a401 0012e9e4 0a524360 0212e9c4 00000000 gkhtml!NS_NewFrameManager 
0012e934 60199fd1 0012e9e4 0a524360 0012e9c4 00000001 gkhtml!NS_NewFrameManager 
0012e9cc 601994c5 00000001 00000000 09852764 0012edbc gkhtml!NS_NewFrameManager 
0012ebc8 6019eede 00000000 0a6bbc70 0012edfc 00000000 gkhtml!NS_NewFrameManager 
0012ecbc 6019ac40 09852764 0012ee74 00000001 00000000 gkhtml!NS_NewFrameManager 
0012eea4 6019a229 0012efac 00000000 0012ef8c 0a71d5c0 gkhtml!NS_NewFrameManager 
0012eefc 60199fd1 0012efac 0a71d5c0 0012ef8c 00000001 gkhtml!NS_NewFrameManager 
0012ef94 601994c5 00000001 0012f394 098526e4 00000000 gkhtml!NS_NewFrameManager 
0012f190 602257c8 0a5f3250 0a6bbc70 0012f394 00000000 gkhtml!NS_NewFrameManager 
0012f270 6018ef2a ffffffff 0a6bbc70 0012f394 0012f2cc 
gkhtml!NS_NewDocumentFragment 
0012f298 6017df37 098526e4 0a6bbc70 0012f394 0012f2cc gkhtml!NS_NewPresShell 
0012f3d0 6018ef2a 09851cb0 0a6bbc70 0012f56c 098526e4 
gkhtml!nsTextFragment::CopyTo [omap] 
0012f3f8 60226863 09851cb0 0a6bbc70 0012f56c 0012f42c gkhtml!NS_NewPresShell 
0012f5c0 6018ef2a 09851d30 0a6bbc70 0012f714 40000000 
gkhtml!NS_NewDocumentFragment 
0012f5e8 60227d45 09851d30 0a6bbc70 0012f714 0012f61c gkhtml!NS_NewPresShell 
0012f6dc 60227e15 0a6bbc70 0012f714 0012f8c8 0012fa8c 
gkhtml!NS_NewDocumentFragment 
0012f790 60227361 0a6bbc70 0012f968 0012f8c8 0012fa8c 
gkhtml!NS_NewDocumentFragment 
0012f86c 6018ef2a 09852764 0a6bbc70 0012f968 00000000 
gkhtml!NS_NewDocumentFragment 
0012f894 6022613e 09851ce8 0a6bbc70 0012f968 0012f8c8 gkhtml!NS_NewPresShell 
0012f9c4 60191802 09851c78 0a6bbc70 0012fab8 09851ce8 
gkhtml!NS_NewDocumentFragment 
0012fa90 6018a91e 0a690750 0a6bbc70 0012fab8 0012fae8 gkhtml!NS_NewPresShell 
0012fb08 60189487 0a535150 00000000 0a6902d0 0a6902d8 gkhtml!NS_NewPresShell 
0012fb1c 6018b32e 0a6902d0 00000001 0a6902d8 60c49d88 gkhtml!NS_NewPresShell  
(FPO: [2,0,2])
0012fb38 602230b6 00000000 0a70de80 09852764 00000000 gkhtml!NS_NewPresShell 
0012fb60 601b0d84 0a70de80 0a6c7d5c 00000000 0a70fa88 
gkhtml!nsStyleChangeList::Clear 
0012fb7c 601ab653 0a70de80 0a6c7d5c 00000000 00000014 gkhtml!NS_NewHTMLDocument 
0012fb94 601a841d 0a6c7d5c 00000000 0a70fa88 0a70f980 
gkhtml!NS_CreateHTMLElement [omap]  (FPO: [2,0,2])
0012fbbc 601a9646 00000001 0a694ec0 0a6923a0 0012fc28 
gkhtml!NS_CreateHTMLElement [omap] 
0012fbd0 602bb26f 00000001 0a694ec0 0a694ec0 0a6923a0 
gkhtml!NS_CreateHTMLElement [omap] 
0012fbe4 602b871e 0a694ec0 0a694ec0 0a6923a0 0a6923a0 
gkparser!CNavDTD::CloseBody  (FPO: [1,0,2])
0012fbf8 602b8811 0a694ec0 0000000f 00000000 00000000 
gkparser!CNavDTD::CloseContainer  (FPO: [3,0,3])
0012fc28 602b89fa 00000001 0000000f 00000000 0a6923a0 
gkparser!CNavDTD::CloseContainersTo [omap] 
0012fc44 602b68d9 0000000f 00000000 602d9868 00000000 
gkparser!CNavDTD::CloseContainersTo [omap] 
0012fc78 602c0f99 0a6923a0 00000000 00000001 0a70fcd0 
gkparser!CNavDTD::DidBuildModel 
0012fc94 602c17dc 00000000 0a6b10d8 0a70fcd4 0012fd5c 
gkparser!nsParser::DidBuildModel  (FPO: [1,0,1])
0012fcac 602c1e2b 804e03e8 00000001 0a6b2c3c 0a6b1090 
gkparser!nsParser::ResumeParse  (FPO: [EBP 0x0a6b10d8] [2,0,4])
0a6b10d8 00000000 00000000 00000000 00000061 00000091 
gkparser!nsParser::OnStopRequest 
0a6b2c30 00000001 0a664e9c 0a70fcd4 00000000 60c6bde0 mozilla!<nosymbols> 

*----> Raw Stack Dump <----*
0012dd40  00 00 00 80 00 00 00 00 - 10 08 72 0a 00 00 00 00  ..........r.....
0012dd50  00 00 00 00 6c dd 12 00 - de 59 a4 60 d4 31 00 00  ....l....Y.`.1..
0012dd60  a0 dd 12 00 00 00 00 00 - 38 bf 85 09 98 dd 12 00  ........8.......
0012dd70  7b 51 35 50 d4 31 5f 0a - a0 dd 12 00 00 00 00 00  {Q5P.1_.........
0012dd80  10 08 72 0a 00 00 00 00 - 00 00 00 00 00 00 00 00  ..r.............
0012dd90  00 00 00 00 00 00 00 00 - c8 dd 12 00 46 58 35 50  ............FX5P
0012dda0  00 00 00 00 d8 0f 72 0a - d0 31 5f 0a b3 29 a4 60  ......r..1_..).`
0012ddb0  38 bf 85 09 e8 31 5f 0a - e0 27 85 09 18 e1 12 00  8....1_..'......
0012ddc0  70 bc 6b 0a 38 bf 85 09 - fc dd 12 00 9d f5 17 60  p.k.8..........`
0012ddd0  60 cc 09 01 50 40 5f 0a - 70 6b 53 0a e8 31 5f 0a  `...P@_.pkS..1_.
0012dde0  60 35 5e 0a 40 db 70 0a - e0 27 85 09 00 00 00 00  `5^.@.p..'......
0012ddf0  00 00 00 00 90 c9 71 0a - 89 88 88 3d 3c e0 12 00  ......q....=<...
0012de00  0f f1 17 60 e8 31 5f 0a - 00 00 00 00 64 e0 12 00  ...`.1_.....d...
0012de10  64 cc 09 01 50 40 5f 0a - 70 6b 53 0a 00 00 00 00  d...P@_.pkS.....
0012de20  e0 27 85 09 14 e2 12 00 - c8 bd c6 60 28 00 00 00  .'.........`(...
0012de30  3f 00 00 00 01 00 00 00 - 00 00 00 00 40 de 12 00  ?...........@...
0012de40  65 00 6e 00 67 00 2e 00 - 62 00 73 00 2e 00 64 00  e.n.g...b.s...d.
0012de50  69 00 73 00 63 00 64 00 - 69 00 76 00 65 00 2e 00  i.s.c.d.i.v.e...
0012de60  61 00 63 00 69 00 2e 00 - 44 00 69 00 73 00 63 00  a.c.i...D.i.s.c.
0012de70  44 00 69 00 76 00 65 00 - 41 00 70 00 70 00 6c 00  D.i.v.e.A.p.p.l.

State Dump for Thread Id 0x56

eax=000000c0 ebx=00000000 ecx=77f84dc8 edx=00000000 esi=00000000 edi=77f681a0
eip=77f681ab esp=00d8ff44 ebp=00d8ff98 iopl=0         nv up ei ng nz ac po cy
cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00000297


function: NtWaitForSingleObject
        77f681a0 b8c5000000       mov     eax,0xc5
        77f681a5 8d542404         lea     edx,[esp+0x4]          
ss:01e4e94b=????????
        77f681a9 cd2e             int     2e
        77f681ab c20c00           ret     0xc
        77f681ae 8bc0             mov     eax,eax

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1  Param#2  Param#3  Param#4  Function Name
00d8ff98 77661d0c 00000088 ffffffff 00000003 00000004 
ntdll!NtWaitForSingleObject 
00d8ffec 00000000 00000000 00000000 00000000 00000000 msafd!<nosymbols> 
00000000 00000000 00000000 00000000 00000000 00000000 mozilla!<nosymbols> 

State Dump for Thread Id 0x9e

eax=0a6bb9c4 ebx=00000000 ecx=60c6d010 edx=00000000 esi=00000000 edi=77f681a0
eip=77f681ab esp=00e8faa0 ebp=00e8faf4 iopl=0         nv up ei pl zr na po nc
cs=001b  ss=0023  ds=0023  es=0023  fs=0038  gs=0000             efl=00000246


function: NtWaitForSingleObject
        77f681a0 b8c5000000       mov     eax,0xc5
        77f681a5 8d542404         lea     edx,[esp+0x4]          
ss:01f4e4a7=????????
        77f681a9 cd2e             int     2e
        77f681ab c20c00           ret     0xc
        77f681ae 8bc0             mov     eax,eax

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1  Param#2  Param#3  Param#4  Function Name
00e8faf4 77664706 000000b0 00000084 00000001 00000004 
ntdll!NtWaitForSingleObject 
00e8fb94 776b938d 00000000 00e8fd20 00e8fc1c 00e8fe24 msafd!<nosymbols> 
00e8fbd0 60be87a9 00000000 00e8fd20 00e8fc1c 00e8fe24 ws2_32!select 

*----> Raw Stack Dump <----*
00e8faa0  b4 7f 66 77 b0 00 00 00 - 01 00 00 00 cc fa e8 00  ..fw............
00e8fab0  28 fb e8 00 20 fd e8 00 - 00 00 00 00 40 fb e8 00  (... .......@...
00e8fac0  a0 58 be 60 84 00 00 00 - 40 fb e8 00 c0 b4 b3 ff  .X.`....@.......
00e8fad0  ff ff ff ff 00 04 00 00 - 70 2d 9c 00 60 2e 9c 00  ........p-..`...
00e8fae0  d0 46 66 77 84 00 00 00 - b0 00 00 00 00 00 00 00  .Ffw............
00e8faf0  00 00 00 00 94 fb e8 00 - 06 47 66 77 b0 00 00 00  .........Gfw....
00e8fb00  84 00 00 00 01 00 00 00 - 04 00 00 00 20 fd e8 00  ............ ...
00e8fb10  01 00 00 00 d0 2c 9c 00 - 80 6c 23 eb ff ff ff ff  .....,...l#.....
00e8fb20  01 00 00 00 00 2d 9c 00 - 84 00 00 00 19 00 00 00  .....-..........
00e8fb30  cd 42 bd 60 70 2d 9c 00 - 40 fb e8 00 00 04 00 00  .B.`p-..@.......
00e8fb40  38 00 64 00 6c 00 6c 00 - 00 00 00 00 02 00 00 00  8.d.l.l.........
00e8fb50  88 20 9c 00 80 20 9c 00 - 7b 27 00 00 00 00 00 00  . ... ..{'......
00e8fb60  1c 00 00 00 80 20 9c 00 - 70 20 9c 00 23 00 00 00  ..... ..p ..#...
00e8fb70  80 69 67 ff 00 00 00 00 - f6 ff ff ff ff ff ff ff  .ig.............
00e8fb80  20 fb e8 00 2c 00 00 00 - 00 00 00 00 00 00 00 00   ...,...........
00e8fb90  18 fb e8 00 d0 fb e8 00 - 8d 93 6b 77 00 00 00 00  ..........kw....
00e8fba0  20 fd e8 00 1c fc e8 00 - 24 fe e8 00 14 fc e8 00   .......$.......
00e8fbb0  cc fb e8 00 60 2e 9c 00 - 87 d3 27 00 68 2e 9c 00  ....`.....'.h...
00e8fbc0  90 2d 8f 00 70 20 9c 00 - 40 2c 9c 00 00 00 00 00  .-..p ..@,......
00e8fbd0  00 00 00 00 a9 87 be 60 - 00 00 00 00 20 fd e8 00  .......`.... ...

State Dump for Thread Id 0x4a

eax=00010010 ebx=00000000 ecx=00002335 edx=00000000 esi=00000080 edi=00000000
eip=77f681ab esp=00f8fe9c ebp=00f8fec0 iopl=0         nv up ei pl zr na po nc
cs=001b  ss=0023  ds=0023  es=0023  fs=0038  gs=0000             efl=00000246


function: NtWaitForSingleObject
        77f681a0 b8c5000000       mov     eax,0xc5
        77f681a5 8d542404         lea     edx,[esp+0x4]          
ss:0204e8a3=????????
        77f681a9 cd2e             int     2e
        77f681ab c20c00           ret     0xc
        77f681ae 8bc0             mov     eax,eax

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1  Param#2  Param#3  Param#4  Function Name
00f8fec0 77f04f85 00000080 ffffffff 00000000 60be649c 
ntdll!NtWaitForSingleObject 
ffffffff 00000000 00000000 00000000 00000000 00000000 
kernel32!WaitForSingleObject 

State Dump for Thread Id 0x6d

eax=00142460 ebx=009c3a00 ecx=7ffd9000 edx=00000000 esi=009c3d44 edi=0108ff40
eip=77e724e7 esp=0108fefc ebp=0108ff20 iopl=0         nv up ei pl zr na po nc
cs=001b  ss=0023  ds=0023  es=0023  fs=0038  gs=0000             efl=00000246


function: InvalidateRect
        77e724ce b893110000       mov     eax,0x1193
        77e724d3 8d542404         lea     edx,[esp+0x4]          
ss:0214e903=????????
        77e724d7 cd2e             int     2e
        77e724d9 c20c00           ret     0xc
        77e724dc b87c110000       mov     eax,0x117c
        77e724e1 8d542404         lea     edx,[esp+0x4]          
ss:0214e903=????????
        77e724e5 cd2e             int     2e
        77e724e7 c21400           ret     0x14
        77e724ea 55               push    ebp
        77e724eb 8bec             mov     ebp,esp
        77e724ed 83ec0c           sub     esp,0xc
        77e724f0 53               push    ebx
        77e724f1 56               push    esi
        77e724f2 57               push    edi
        77e724f3 8b7508           mov     esi,[ebp+0x8]          
ss:0214e926=????????
        77e724f6 c745f814000000   mov   dword ptr [ebp-0x8],0x14 
ss:0214e926=????????
        77e724fd 8d7e14           lea     edi,[esi+0x14]         
ds:01a8274a=????????
        77e72500 8b4e04           mov     ecx,[esi+0x4]          
ds:01a8274a=????????
        77e72503 897dfc           mov     [ebp-0x4],edi          
ss:0214e926=????????
        77e72506 85c9             test    ecx,ecx
        77e72508 7450             jz      InvalidateRect+0x8c (77e7255a)
        77e7250a ba05000000       mov     edx,0x5
        77e7250f e854ebffff       call    TranslateMessageEx+0x5a (77e71068)
        77e72514 8bd8             mov     ebx,eax
        77e72516 85db             test    ebx,ebx
        77e72518 7440             jz      InvalidateRect+0x8c (77e7255a)
        77e7251a f6432004         test    byte ptr [ebx+0x20],0x4      
ds:01a82406=??
        77e7251e 741e             jz      InvalidateRect+0x70 (77e7253e)
        77e72520 8b06             mov     eax,[esi]              
ds:009c3d44=605703fc
        77e72522 c1e810           shr     eax,0x10
        77e72525 663d0100         cmp     ax,0x1
        77e72529 7513             jnz     InvalidateRect+0x70 (77e7253e)
        77e7252b ff760c           push    dword ptr [esi+0xc]    
ds:01a8274a=????????
        77e7252e 6a00             push    0x0
        77e72530 0fb7c0           movzx   eax,ax
        77e72533 c1e010           shl     eax,0x10
        77e72536 6a00             push    0x0
        77e72538 b002             mov     al,0x2
        77e7253a 50               push    eax
        77e7253b ff5610           call    dword ptr [esi+0x10]   
ds:01a8274a=????????
        77e7253e 8b03             mov     eax,[ebx]              
ds:009c3a00=0000006d
        77e725
I am running a P11-400 Windows 98 SE machine,  and am using the 2-26-2000 
nightly mozilla build. When I tried to open up java.sun.com, the program crashed 
before the java applets could initialize. Dr Watson gave me the following crash 
data:
Windows 98 Version 4.10.2222
MOZILLA caused an invalid page fault in
module <unknown> at 0084:00dec758.
Registers:
EAX=000000ea CS=017f EIP=00dec758 EFLGS=00010203
EBX=007987fc SS=0187 ESP=0068f904 EBP=60c45215
ECX=00dec740 DS=0187 ESI=007987fd FS=5cb7
EDX=007987fc ES=0187 EDI=00e53755 GS=7ecf
Bytes at CS:EIP:
00 00 00 00 04 00 00 00 00 00 00 00 10 de e3 00 
Stack dump:
00e53755 007987fd 60c45215 0068f924 007987fc 007987fc 00dec740 000000ea ffff0187 
00e53755 007987fd 60c45215 0068f948 007987fc 007987fc 00dec740 
I have checked out several things:
-installed SP6a over SP3 on my NT 4.0 machine
-installed IE 5.01 over IE 2.0 dito
-some other things
Nothing helped; the crash still occurs reproducible always.

Yes, java.sun.com is also crashing in my tests.

I have filed a bug report to Sun [Review ID 101777], but they
refused to accept it as bug, so I reopen it here.
Status: VERIFIED → REOPENED
Resolution: FIXED → ---
What date do you have on your npjava*.dll's (should be three of them) which are 
sitting in pligins dir next to mozilla.exe?

I still cannot reproduce it. Just tried 2-26-200, works fine.
To "av@netscape.com"
--------------------

1) Date of DLLs:
    Directory of C:\Program Files\Netscape\Seamonkey\Plugins
   02/29/00  01:08a        <DIR>          .
   02/29/00  01:08a        <DIR>          ..
   08/19/99  08:20a                11,776 npjava11.dll
   08/19/99  08:20a                11,776 npjava12.dll
   08/19/99  08:20a                11,776 npjava32.dll
   These dlls are copied from Java Plug-in 1.3rc1 (international version)
   and have the same date as the ones from Java Plug-in 1.3beta
   (in fact it seems that only JAR files have changed from beta to rc1!).

2) Location of DLLs:
   Parallel to Seamonkey I have installed Communicator 4.7 with Java Plug-in
   1.3rc1 installed, so I wouldn't have had to copy the dlls to Seamonkey,
   as it uses the ones of Communicator if not present. But it doesn't matter
   whether the dlls are installed in either or both for the crash.

3) Thread dump:
   In the 4th last comment I have send the thread dump of the crashing method:
   - Can you add the symbols of ALL methods to the dll? DrWatson32 takes the
     last symbol available ("CopyTo") but I believe - from my assembler
     knowledge - some methods after CopyTo have no symbol table entry
     including the crashing one.
   - Can you determine using a tool the C/C++ method from the assembler code?
I was not aware I had to download any plugins, so sufficed to say I do not have 
anything in my plugins directory. However, I will download the latest plug ins 
and see what happens
OK, that's what I have:

02/01/00  02:25p                24,680 npjava11.dll
02/01/00  02:25p                24,680 npjava12.dll
02/01/00  02:25p                24,680 npjava32.dll

Would you like me to send it over to you to try?
Yes, can you please send me them to bruenae.stuessi@dplanet.ch and I will try 
them out.
petersen, could you please try this and if it works for you mark it fixed?
With the Feb 29th build, the applet (referenced at the mentioned URL ) loads 
properly in the browser window. Tested under Win 98 with Java Plugin 1.3 
installed.
Status: REOPENED → RESOLVED
Closed: 25 years ago25 years ago
Resolution: --- → FIXED
Marking verified.
Status: RESOLVED → VERIFIED



I am using the March 6th nightly build along with JDK1.3 RC1 plugins located in
my Netscape 4.72 Plugins directory.  I tried accessing java.sun.com page 3
times.  Every time it resulted in a crash.  Not sure how this can be "Verified
Fixed".

I am running on Windows 2000 Pro Final and delete both the bin and users50
directories along with the mozregistry.dat every time I try out a new build, so
that is not a factor.

Better think twice on considering this fixed.  Java support needs to be pristine
in this browser.  Actually, it would be kind of embarrassing if Sun couldn't
create a plugin that worked with their own browser (since it is all pretty much
one big company anyway).

Jake


You need to log in before you can comment on or make changes to this bug.