254809 - crash while loading page [@ nsHTMLReflowState::IsBidiFormControl ]

Status: RESOLVED WORKSFORME

(Core :: Layout: Text and Fonts, defect)

Description

[Christian Persch (GNOME) (away; not receiving bug mail)]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.0.1) Gecko/20020823 Netscape/7.0
Build Identifier: 

[Guessing component based on the trace.]

Forwarded from http://bugzilla.gnome.org/show_bug.cgi?id=146932 :

Browser crashes when loading a page. We've 3 duplicates of the bug, with
different sites mentioned (http://firebird.sourceforge.net/,
http://www.linuxpackages.com/,http://www.globegazette.com/). 2 of those reports
state that the crash was reproducible also in mozilla/firefox. All reporters
were using Mozilla 1.7, on Slackware 9.1 or 10.0.

The best trace we've got is this (from
http://bugzilla.gnome.org/show_bug.cgi?id=146932):

#4  <signal handler called>
No symbol table info available.
#5  0x41706b71 in nsHTMLReflowState::IsBidiFormControl(nsIPresContext*)
()
   from /usr/lib/mozilla-1.7/components/libgklayout.so
No symbol table info available.
#6  0x41705f81 in nsHTMLReflowState::CalcLineHeight(nsIPresContext*,
nsIRenderingContext*, nsIFrame*) () from
/usr/lib/mozilla-1.7/components/libgklayout.so
No symbol table info available.
#7  0x416eb4f6 in
nsBlockReflowState::nsBlockReflowState(nsHTMLReflowState const&,
nsIPresContext*, nsBlockFrame*, nsHTMLReflowMetrics const&, int) ()
   from /usr/lib/mozilla-1.7/components/libgklayout.so
No symbol table info available.
#8  0x416e21df in nsBlockFrame::Reflow(nsIPresContext*,
nsHTMLReflowMetrics&, nsHTMLReflowState const&, unsigned&) ()
   from /usr/lib/mozilla-1.7/components/libgklayout.so
No symbol table info available.
#9  0x416ea6fa in nsBlockReflowContext::ReflowBlock(nsRect const&, int,
nsCollapsingMargin&, int, nsMargin&, nsHTMLReflowState&, unsigned&) ()
   from /usr/lib/mozilla-1.7/components/libgklayout.so
No symbol table info available.
#10 0x416e4fed in nsBlockFrame::ReflowBlockFrame(nsBlockReflowState&,
nsLineList_iterator, int*) () from
/usr/lib/mozilla-1.7/components/libgklayout.so
No symbol table info available.
#11 0x416e42e9 in nsBlockFrame::ReflowLine(nsBlockReflowState&,
nsLineList_iterator, int*, int) () from
/usr/lib/mozilla-1.7/components/libgklayout.so
No symbol table info available.
#12 0x416e3e91 in nsBlockFrame::ReflowDirtyLines(nsBlockReflowState&)
()
   from /usr/lib/mozilla-1.7/components/libgklayout.so
No symbol table info available.
#13 0x416e228b in nsBlockFrame::Reflow(nsIPresContext*,
nsHTMLReflowMetrics&, nsHTMLReflowState const&, unsigned&) ()
   from /usr/lib/mozilla-1.7/components/libgklayout.so
No symbol table info available.
#14 0x416f0817 in nsContainerFrame::ReflowChild(nsIFrame*,
nsIPresContext*, nsHTMLReflowMetrics&, nsHTMLReflowState const&, int,
int, unsigned, unsigned&) ()
   from /usr/lib/mozilla-1.7/components/libgklayout.so
No symbol table info available.
#15 0x417025d4 in CanvasFrame::Reflow(nsIPresContext*,
nsHTMLReflowMetrics&, nsHTMLReflowState const&, unsigned&) ()
   from /usr/lib/mozilla-1.7/components/libgklayout.so
No symbol table info available.
#16 0x417c607c in nsBoxToBlockAdaptor::Reflow(nsBoxLayoutState&,
nsIPresContext*, nsHTMLReflowMetrics&, nsHTMLReflowState const&,
unsigned&, int, int, int, int, int) () from
/usr/lib/mozilla-1.7/components/libgklayout.so
No symbol table info available.
#17 0x417c5d6b in nsBoxToBlockAdaptor::DoLayout(nsBoxLayoutState&) ()
   from /usr/lib/mozilla-1.7/components/libgklayout.so
No symbol table info available.
#18 0x417bdd5c in nsBox::Layout(nsBoxLayoutState&) ()
   from /usr/lib/mozilla-1.7/components/libgklayout.so
No symbol table info available.
#19 0x417ba7e2 in nsScrollBoxFrame::DoLayout(nsBoxLayoutState&) ()
   from /usr/lib/mozilla-1.7/components/libgklayout.so
No symbol table info available.
#20 0x417bdd5c in nsBox::Layout(nsBoxLayoutState&) ()
   from /usr/lib/mozilla-1.7/components/libgklayout.so
No symbol table info available.
#21 0x417c7901 in nsContainerBox::LayoutChildAt(nsBoxLayoutState&,
nsIBox*, nsRect const&) () from
/usr/lib/mozilla-1.7/components/libgklayout.so
No symbol table info available.
#22 0x416ff02d in nsGfxScrollFrameInner::Layout(nsBoxLayoutState&) ()
   from /usr/lib/mozilla-1.7/components/libgklayout.so
No symbol table info available.
#23 0x416fedf1 in nsGfxScrollFrame::DoLayout(nsBoxLayoutState&) ()
   from /usr/lib/mozilla-1.7/components/libgklayout.so
No symbol table info available.
#24 0x417bdd5c in nsBox::Layout(nsBoxLayoutState&) ()
   from /usr/lib/mozilla-1.7/components/libgklayout.so
No symbol table info available.
#25 0x417c1488 in nsBoxFrame::Reflow(nsIPresContext*,
nsHTMLReflowMetrics&, nsHTMLReflowState const&, unsigned&) ()
   from /usr/lib/mozilla-1.7/components/libgklayout.so
No symbol table info available.
#26 0x416fdc9b in nsGfxScrollFrame::Reflow(nsIPresContext*,
nsHTMLReflowMetrics&, nsHTMLReflowState const&, unsigned&) ()
   from /usr/lib/mozilla-1.7/components/libgklayout.so
No symbol table info available.
#27 0x416f0817 in nsContainerFrame::ReflowChild(nsIFrame*,
nsIPresContext*, nsHTMLReflowMetrics&, nsHTMLReflowState const&, int,
int, unsigned, unsigned&) ()
   from /usr/lib/mozilla-1.7/components/libgklayout.so
No symbol table info available.
#28 0x41742e9b in ViewportFrame::Reflow(nsIPresContext*,
nsHTMLReflowMetrics&, nsHTMLReflowState const&, unsigned&) ()
   from /usr/lib/mozilla-1.7/components/libgklayout.so
No symbol table info available.
#29 0x41723128 in IncrementalReflow::Dispatch(nsIPresContext*,
nsHTMLReflowMetrics&, nsSize const&, nsIRenderingContext&) ()
   from /usr/lib/mozilla-1.7/components/libgklayout.so
No symbol table info available.
#30 0x4172f160 in PresShell::ProcessReflowCommands(int) ()
   from /usr/lib/mozilla-1.7/components/libgklayout.so
No symbol table info available.
#31 0x41730cbc in ReflowEvent::HandleEvent() ()
   from /usr/lib/mozilla-1.7/components/libgklayout.so
No symbol table info available.
#32 0x4173019b in
PresShellViewEventListener::DidRefreshRect(nsIViewManager*, nsIView*,
nsIRenderingContext*, nsRect const*, unsigned) ()
   from /usr/lib/mozilla-1.7/components/libgklayout.so
No symbol table info available.
#33 0x4016ff57 in PL_HandleEvent () from
/usr/lib/mozilla-1.7/libxpcom.so
No symbol table info available.
#34 0x4016fe84 in PL_ProcessPendingEvents ()
   from /usr/lib/mozilla-1.7/libxpcom.so
No symbol table info available.
#35 0x40171e5f in nsEventQueueImpl::ProcessPendingEvents() ()
   from /usr/lib/mozilla-1.7/libxpcom.so
No symbol table info available.
#36 0x41f8dfae in nsAppShell::Exit() ()
   from /usr/lib/mozilla-1.7/components/libwidget_gtk2.so
No symbol table info available.
#37 0x40ab12bf in g_vasprintf () from /usr/lib/./libglib-2.0.so.0
No symbol table info available.
#38 0x40a8bf55 in g_main_depth () from /usr/lib/./libglib-2.0.so.0
No symbol table info available.
#39 0x40a8d0a8 in g_main_context_dispatch () from
/usr/lib/./libglib-2.0.so.0
No symbol table info available.
#40 0x40a8d3dc in g_main_context_dispatch () from
/usr/lib/./libglib-2.0.so.0
No symbol table info available.
#41 0x40a8da91 in g_main_loop_run () from /usr/lib/./libglib-2.0.so.0
No symbol table info available.
#42 0x4052bd03 in gtk_main () from /usr/lib/./libgtk-x11-2.0.so.0
No symbol table info available.
#43 0x0806dc51 in main ()
No symbol table info available.
#44 0x40b28d06 in __libc_start_main () from /lib/libc.so.6
No symbol table info available.
#0  0x407f160c in waitpid () from /lib/libpthread.so.0








Reproducible: Always
Steps to Reproduce:
1. Go to one of the mentioned pages.

Comment 1

[Boris Zbarsky [:bzbarsky]]

The real issue is probably that the font metrics in CalcLineHeight are bogus...
there are known issues with some versions of Xft there.

Comment 2

[Gervase Markham [:gerv]]

This is an automated message, with ID "auto-resolve01".

This bug has had no comments for a long time. Statistically, we have found that
bug reports that have not been confirmed by a second user after three months are
highly unlikely to be the source of a fix to the code.

While your input is very important to us, our resources are limited and so we
are asking for your help in focussing our efforts. If you can still reproduce
this problem in the latest version of the product (see below for how to obtain a
copy) or, for feature requests, if it's not present in the latest version and
you still believe we should implement it, please visit the URL of this bug
(given at the top of this mail) and add a comment to that effect, giving more
reproduction information if you have it.

If it is not a problem any longer, you need take no action. If this bug is not
changed in any way in the next two weeks, it will be automatically resolved.
Thank you for your help in this matter.

The latest beta releases can be obtained from:
Firefox:     http://www.mozilla.org/projects/firefox/
Thunderbird: http://www.mozilla.org/products/thunderbird/releases/1.5beta1.html
Seamonkey:   http://www.mozilla.org/projects/seamonkey/

Comment 3

[Wayne Mery (:wsmwk)]

there are currently no crashes of this listed on talkback or crash-stats

Comment 4

[Matthias Versen [:Matti]]

not enough information and no other reports