252828 - Site crashes Firefox 0.9.2 [@JS_LookupProperty]

Status: RESOLVED WORKSFORME

(Core :: JavaScript Engine, defect)

Description

[Brent Garber]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7) Gecko/20040707 Firefox/0.9.2
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7) Gecko/20040707 Firefox/0.9.2

When loading this site the page apparently causes Firefox to crash with an error
in js3250.dll

Reproducible: Always
Steps to Reproduce:
1. Open http://www.imao.us
2. Nothing
3. Nothing

Actual Results:  
Browser Crashes

Expected Results:  
Page loads

Talkback crash ID(s) TB398609Y TB398585E TB398575G

Comment 1

[Bill Mason]

WFM 20040722 trunk PC/Win2000

Comment 2

[Peter van der Woude [:Peter6]]

WFM
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7) Gecko/20040723
Firefox/0.9.1+

Comment 3

[Brent Garber]

Additional Talkback id: TB399591X

Comment 4

[Ryan Polk (Quark)]

There's two seperate crash locations listed in the TBs.  3 point to
JS_HashTableRawAdd, 1 points to JS_LookupProperty.  talkback-public lists 119
crashes at JS_HashTableRawAdd
(http://talkback-public.mozilla.org/talkback/fastfind.jsp?search=1&searchby=stacksig&match=contains&searchfor=JS_HashTableRawAdd)
 and 867 crashes at JS_LookupProperty
(http://talkback-public.mozilla.org/talkback/fastfind.jsp?search=1&searchby=stacksig&match=contains&searchfor=js_LookupProperty).

Not sure of the etiquette for modifying a bug like this, so I'll leave that to
someone else.  There's three UNCONFIRMED lookupproperty bugs, but nothing on
HashTableRawAdd

Comment 5

[Frank Wein [:mcsmurf]]

-->js engine, now choose JS_LookupProperty as where it crashes, since the
additional TB id also had that one as crasher.

Comment 6

[timeless]

my build didn't crash when run under purify, nor did purify have any 
interesting complaints about the page. my build is from the beginning of last 
week, it'll probably be updated at the beginning of this week, someone can 
remind me on irc to check this out tuesday or so...

Comment 7

[Brent Garber]

This is reproduceable with the latest 1.0PR build as well.

Mozilla/5.0 (Windows; U; Windows NT 5.1; rv:1.7.3) Gecko/20041001 Firefox/0.10.1

I have the following extensions loaded:
Web Developer 0.8
Adblock v.5 d2 * nightly 39
User Agen Switcher 0.6
Firesomething 1.6.0
BugMeNot 0.6
RadialContext 2004.08.22
LiveHTTPHeaders 0.9
Tabbrowser Extension 1.11.2004092801

The Talkback id is: 1116073

Comment 8

[Brent Garber]

I'm 60% sure this bug is caused by TBE.

TBE is known for crashers like this.  Since disabling TBE I haven't noticed this
problem.  I'll leave as Unconfirmed till i'm 100% sure, but if somebody feels
obligated, feel free to mark INVALID or whatever the requisite resolution is.

Comment 9

[Jay Patel [:jay]]

I'm going to mark this worksforme, I have not been able to reproduce this (along
with others in this bug).  Don't want to mark it invalid since people with TBE
installed might still see this.  Adding [TBE related crash] to status whiteboard.