Closed Bug 274105 Opened 20 years ago Closed 20 years ago

Trunk crash [@ nsScannerBufferList::Position::Distance]

Categories

(Core :: DOM: HTML Parser, defect)

Product:
Core
Component:
DOM: HTML Parser
Platform:
x86
Windows XP
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
VERIFIED FIXED

People

(Reporter: jay, Unassigned)

References

(
URL
)

Details

(Keywords: crash, topcrash)

Crash Data

This is a topcrasher for recent MozillaTrunk builds.  Not much useful info
Talkback user comments/urls, but maybe we can get an idea of what's going on
from the stack:

Rank    StackSignature    Count  

3   nsScannerBufferList::Position::Distance   17 

 
 	Source File :
c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/parser/htmlparser/src/nsScannerString.cpp
line : 153
 
====================================================================================================
     Count   Offset    Real Signature
[ 4   nsScannerBufferList::Position::Distance 0d2ee4be -
nsScannerBufferList::Position::Distance ]
 
     Crash date range: 01-DEC-04 to 07-DEC-04
     Min/Max Seconds since last crash: 2948 - 15352
     Min/Max Runtime: 2948 - 15352
 
     Count   Platform List 
     4   Windows XP [Windows NT 5.1 build 2600] 
 
     Count   Build Id List 
     1   2004120606
     1   2004120506
     1   2004120304
     1   2004120106
 
     No of Unique Users         3
 
 Stack trace(Frame) 

	 nsScannerBufferList::Position::Distance
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/parser/htmlparser/src/nsScannerString.cpp
 line 153] 
	 Distance	[../../../dist/include/htmlparser\nsScannerString.h  line 577] 
	 nsScanner::SetPosition
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/parser/htmlparser/src/nsScanner.cpp
 line 1377] 
	 CWhitespaceToken::Consume
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/parser/htmlparser/src/nsHTMLTokens.cpp
 line 2087] 
	 nsHTMLTokenizer::ConsumeWhitespace
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/parser/htmlparser/src/nsHTMLTokenizer.cpp
 line 950] 
	 nsHTMLTokenizer::ConsumeToken
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/parser/htmlparser/src/nsHTMLTokenizer.cpp
 line 527] 
	 nsParser::Tokenize
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/parser/htmlparser/src/nsParser.cpp
 line 2707] 
	 nsParser::Tokenize
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/parser/htmlparser/src/nsParser.cpp
 line 2698] 
	 nsParser::ResumeParse
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/parser/htmlparser/src/nsParser.cpp
 line 1890] 
	 nsParser::ContinueParsing
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/parser/htmlparser/src/nsParser.cpp
 line 1428] 
	 gkparser.dll + 0x2920c (0x604c920c)  
	 nsExpatDriver::AddRef
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/parser/htmlparser/src/nsExpatDriver.cpp
 line 303] 
	 0x8556104d   
 
     (2376853)	URL: gaydar.com.au
 
====================================================================================================
     Count   Offset    Real Signature
[ 3   nsScannerBufferList::Position::Distance 3e42b70f -
nsScannerBufferList::Position::Distance ]
 
     Crash date range: 02-DEC-04 to 08-DEC-04
     Min/Max Seconds since last crash: 37508 - 255848
     Min/Max Runtime: 37508 - 255848
 
     Count   Platform List 
     3   Windows 2K [Windows NT 5.0 build 2195] 
 
     Count   Build Id List 
     2   2004113004
     1   2004120405
 
     No of Unique Users         3
 
 Stack trace(Frame) 

	 nsScannerBufferList::Position::Distance
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/parser/htmlparser/src/nsScannerString.cpp
 line 153] 
	 Distance	[../../../dist/include/htmlparser\nsScannerString.h  line 577] 
	 nsScanner::SetPosition
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/parser/htmlparser/src/nsScanner.cpp
 line 1377] 
	 CWhitespaceToken::Consume
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/parser/htmlparser/src/nsHTMLTokens.cpp
 line 1928] 
	 nsHTMLTokenizer::ConsumeWhitespace
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/parser/htmlparser/src/nsHTMLTokenizer.cpp
 line 961] 
	 nsHTMLTokenizer::ConsumeToken
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/parser/htmlparser/src/nsHTMLTokenizer.cpp
 line 539] 
	 nsParser::Tokenize
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/parser/htmlparser/src/nsParser.cpp
 line 2711] 
	 nsParser::ResumeParse
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/parser/htmlparser/src/nsParser.cpp
 line 1894] 
	 nsParser::ContinueParsing
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/parser/htmlparser/src/nsParser.cpp
 line 1432]  
 
     (2415740)	URL: http://pazari.dnevnik.bg
     (2415740)	Comments: crash after browsing for some time
     (2327109)	Comments: reloading a page (connection came down)

For all incidents for this stack signature go to:
http://talkback-public.mozilla.org/talkback/fastfind.jsp?search=1&searchby=stacksig&match=contains&searchfor=nsScannerBufferList%3A%3APosition%3A%3ADistance&vendor=All&product=All&platform=All&buildid=&sdate=&stime=&edate=&etime=&sortby=bbid
Cc'ing bryner and darin to see if they can help.
Jay: is there enough data in talkback to get a regression window?
Unfortunately, we are only able to keep about 10 days worth of data in the
database right now due to diskspace limitations.  Can't really get a regression
window from looking at the current data:
http://talkback-public.mozilla.org/reports/mozilla/Trunk/Trunk-topcrashers.html

This crash has been showing up since 11/30...and most likely before that as
well.  I see a few crashes in Firefox10 from August and September in the query
results.
Correction: We are keeping about 20 days of Talkback data in the db (from the
date query I just ran at http://talkback-public.mozilla.org ...no incidents
today for any crashes submitted before 11/20)
I've just hit this crash (TB2486211H) using today's Firefox trunk on Windows.

Not sure I can add anything useful in terms of what I was doing when it
happened. I was flipping through news sites - I hit my Mozillazine bookmark by
mistake, and just as that page started loading, hit my news.bbc.co.uk bookmark,
which started loading and then crashed.  I've tried doing similar stuff again,
but can't reproduce.
As a note, I think that once bug 273085 is fixed, this crash will also be fixed
(both bugs point to the same exact line of code).
I'm tentatively marking this FIXED. I've been looking at the talkback reports
that crash in ::Distance, and the last build that crashes is 2004121415 (which
makes sense, as that's just before the fix for bug 273085 was checked in). If
there's some other data that shows this isn't fixed, please reopen.
Status: NEW → RESOLVED
Closed: 20 years ago
Depends on: 273085
Resolution: --- → FIXED
*** Bug 275356 has been marked as a duplicate of this bug. ***
I just crashed with the same stack, but using a nightly trunk build of
Seamonkey: build 2004-12-21-06.

http://talkback-public.mozilla.org/talkback/fastfind.jsp?search=2&type=iid&id=TB2686166W

Reopening.
Status: RESOLVED → REOPENED
Resolution: FIXED → ---
Unless I'm mistaken, the stack in that talkback report is different (and points
to CTextToken::ConsumeParsedCharacterData instead of CWhitespaceToken::Consume)
so it would seem to be a different bug, though it's certainly related. I'll
leave this open in the case that I'm mistaken.
Oh, sorry; I was looking at the top of the frame
(nsScannerBufferList::Position::Distance)...
Re-resolving this as fixed. I've filed bug 275651 to deal with the new stack.
Status: REOPENED → RESOLVED
Closed: 20 years ago → 20 years ago
Resolution: --- → FIXED
All crashes lie in the 1.0 versions of Firefox and Thunderbird; no more trunk
crashers.

Verified FIXED using http://talkback-public.mozilla.org to query for
nsScannerBufferList::Position::Distance
Status: RESOLVED → VERIFIED
Crash Signature: [@ nsScannerBufferList::Position::Distance]
You need to log in before you can comment on or make changes to this bug.