Closed Bug 276133 Opened 20 years ago Closed 20 years ago

Firefox crashes when loading a web page.

Categories

(Firefox :: General, defect)

Product:
Firefox
Component:
General
Platform:
x86
Linux
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
VERIFIED DUPLICATE of bug 271825

People

(Reporter: tomdkat, Assigned: bugzilla)

Details

(Keywords: crash, testcase)

Attachments

(1 file)

A sanitized HTML testcase which causes the crash for me.
6.83 KB, text/html
Details 
User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.5) Gecko/20041107 Firefox/1.0
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.5) Gecko/20041107 Firefox/1.0

When accessing various adult websites, Firefox will crash where Mozilla 1.7.5
will not.  This happens with a few different websites and I will try to attach
sanitizes test cases to this bug report as well as talkback IDs to assist with
debugging.

Reproducible: Always

Steps to Reproduce:
1.Open the attached test case in Firefox 1.0 on Linux.
2.
3.

Actual Results:  
Firefox crashes.

Expected Results:  
Firefox should not crash.

I'm using a standard Firefox Linux build.  Here is the talkback ID for the crash
generated from loading the testcase:  TB2773514G
This is a sanitized HTML testcase from an adult website which causes Firefox to
crash.	Let me know if there is any more information needed from me to diagnose
the problem.

Peace...
Severity: normal → critical
Keywords: crash, testcase
Incident ID: 2773514
Stack Signature	nsTextFrame::TextStyle::TextStyle() f3b01de9
Product ID	Firefox10
Build ID	2004110712
Trigger Time	2004-12-27 11:38:42.0
Platform	LinuxIntel
Operating System	Linux 2.6.10
Module	firefox-bin + (003f9e1b)
URL visited	
User Comments	I'm developing a test case to report a Firefox crash on Linux.
Since Last Crash	0 sec
Total Uptime	296 sec
Trigger Reason	SIGSEGV: Segmentation Fault: (signal 11)
Source File, Line No.	N/A
Stack Trace 	
nsTextFrame::TextStyle::TextStyle()
nsTextFrame::Paint() 
[/builds/tinderbox/firefox-1.0/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsTextFrame.cpp,
line 1419]
nsContainerFrame::PaintChild() 
[/builds/tinderbox/firefox-1.0/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsContainerFrame.cpp,
line 132]
nsContainerFrame::PaintChildren() 
[/builds/tinderbox/firefox-1.0/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsContainerFrame.cpp,
line 683]
nsHTMLContainerFrame::PaintDecorationsAndChildren() 
[/builds/tinderbox/firefox-1.0/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsHTMLContainerFrame.cpp,
line 141]
nsInlineFrame::Paint() 
[/builds/tinderbox/firefox-1.0/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsInlineFrame.cpp,
line 337]
nsContainerFrame::PaintChild() 
[/builds/tinderbox/firefox-1.0/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsContainerFrame.cpp,
line 132]
nsContainerFrame::PaintChildren() 
[/builds/tinderbox/firefox-1.0/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsContainerFrame.cpp,
line 683]
nsHTMLContainerFrame::PaintDecorationsAndChildren() 
[/builds/tinderbox/firefox-1.0/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsHTMLContainerFrame.cpp,
line 141]
nsInlineFrame::Paint() 
[/builds/tinderbox/firefox-1.0/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsInlineFrame.cpp,
line 337]
nsContainerFrame::PaintChild() 
[/builds/tinderbox/firefox-1.0/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsContainerFrame.cpp,
line 132]
nsContainerFrame::PaintChildren() 
[/builds/tinderbox/firefox-1.0/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsContainerFrame.cpp,
line 683]
nsHTMLContainerFrame::PaintDecorationsAndChildren() 
[/builds/tinderbox/firefox-1.0/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsHTMLContainerFrame.cpp,
line 141]
nsInlineFrame::Paint() 
[/builds/tinderbox/firefox-1.0/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsInlineFrame.cpp,
line 337]
nsContainerFrame::PaintChild() 
[/builds/tinderbox/firefox-1.0/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsContainerFrame.cpp,
line 132]
nsContainerFrame::PaintChildren() 
[/builds/tinderbox/firefox-1.0/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsContainerFrame.cpp,
line 683]
nsHTMLContainerFrame::PaintDecorationsAndChildren() 
[/builds/tinderbox/firefox-1.0/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsHTMLContainerFrame.cpp,
line 141]
nsInlineFrame::Paint() 
[/builds/tinderbox/firefox-1.0/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsInlineFrame.cpp,
line 337]
nsContainerFrame::PaintChild() 
[/builds/tinderbox/firefox-1.0/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsContainerFrame.cpp,
line 132]
nsBlockFrame::PaintChildren() 
[/builds/tinderbox/firefox-1.0/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsBlockFrame.cpp,
line 5414]
nsHTMLContainerFrame::PaintDecorationsAndChildren() 
[/builds/tinderbox/firefox-1.0/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsHTMLContainerFrame.cpp,
line 141]
nsBlockFrame::Paint() 
[/builds/tinderbox/firefox-1.0/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsBlockFrame.cpp,
line 5309]
nsContainerFrame::PaintChild() 
[/builds/tinderbox/firefox-1.0/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsContainerFrame.cpp,
line 132]
nsBlockFrame::PaintChildren() 
[/builds/tinderbox/firefox-1.0/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsBlockFrame.cpp,
line 5414]
nsHTMLContainerFrame::PaintDecorationsAndChildren() 
[/builds/tinderbox/firefox-1.0/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsHTMLContainerFrame.cpp,
line 141]
nsBlockFrame::Paint() 
[/builds/tinderbox/firefox-1.0/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsBlockFrame.cpp,
line 5309]
nsContainerFrame::PaintChild() 
[/builds/tinderbox/firefox-1.0/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsContainerFrame.cpp,
line 132]
nsContainerFrame::PaintChildren() 
[/builds/tinderbox/firefox-1.0/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsContainerFrame.cpp,
line 683]
nsTableCellFrame::Paint() 
[/builds/tinderbox/firefox-1.0/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/table/src/nsTableCellFrame.cpp,
line 476]
nsContainerFrame::PaintChild() 
[/builds/tinderbox/firefox-1.0/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsContainerFrame.cpp,
line 132]
nsContainerFrame::PaintChildren() 
[/builds/tinderbox/firefox-1.0/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsContainerFrame.cpp,
line 683]
nsTableRowFrame::Paint() 
[/builds/tinderbox/firefox-1.0/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/table/src/nsTableRowFrame.cpp,
line 570]
nsTableRowGroupFrame::PaintChildren() 
[/builds/tinderbox/firefox-1.0/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/table/src/nsTableRowGroupFrame.cpp,
line 287]
nsTableRowGroupFrame::Paint() 
[/builds/tinderbox/firefox-1.0/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/table/src/nsTableRowGroupFrame.cpp,
line 235]
nsContainerFrame::PaintChild() 
[/builds/tinderbox/firefox-1.0/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsContainerFrame.cpp,
line 132]
nsContainerFrame::PaintChildren() 
[/builds/tinderbox/firefox-1.0/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsContainerFrame.cpp,
line 683]
nsTableFrame::PaintChildren() 
[/builds/tinderbox/firefox-1.0/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/table/src/nsTableFrame.cpp,
line 1383]
nsTableFrame::Paint() 
[/builds/tinderbox/firefox-1.0/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/table/src/nsTableFrame.cpp,
line 1456]
nsContainerFrame::PaintChild() 
[/builds/tinderbox/firefox-1.0/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsContainerFrame.cpp,
line 132]
nsTableOuterFrame::Paint() 
[/builds/tinderbox/firefox-1.0/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/table/src/nsTableOuterFrame.cpp,
line 683]
nsContainerFrame::PaintChild() 
[/builds/tinderbox/firefox-1.0/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsContainerFrame.cpp,
line 132]
nsBlockFrame::PaintChildren() 
[/builds/tinderbox/firefox-1.0/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsBlockFrame.cpp,
line 5414]
nsHTMLContainerFrame::PaintDecorationsAndChildren() 
[/builds/tinderbox/firefox-1.0/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsHTMLContainerFrame.cpp,
line 141]
nsBlockFrame::Paint() 
[/builds/tinderbox/firefox-1.0/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsBlockFrame.cpp,
line 5309]
nsContainerFrame::PaintChild() 
[/builds/tinderbox/firefox-1.0/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsContainerFrame.cpp,
line 132]
nsBlockFrame::PaintChildren() 
[/builds/tinderbox/firefox-1.0/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsBlockFrame.cpp,
line 5414]
nsHTMLContainerFrame::PaintDecorationsAndChildren() 
[/builds/tinderbox/firefox-1.0/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsHTMLContainerFrame.cpp,
line 141]
nsBlockFrame::Paint() 
[/builds/tinderbox/firefox-1.0/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsBlockFrame.cpp,
line 5309]
nsContainerFrame::PaintChild() 
[/builds/tinderbox/firefox-1.0/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsContainerFrame.cpp,
line 132]
nsContainerFrame::PaintChildren() 
[/builds/tinderbox/firefox-1.0/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsContainerFrame.cpp,
line 683]
nsHTMLContainerFrame::Paint() 
[/builds/tinderbox/firefox-1.0/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsHTMLContainerFrame.cpp,
line 89]
CanvasFrame::Paint() 
[/builds/tinderbox/firefox-1.0/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsHTMLFrame.cpp,
line 394]
PresShell::Paint() 
[/builds/tinderbox/firefox-1.0/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsPresShell.cpp,
line 5563]
nsView::Paint() 
[/builds/tinderbox/firefox-1.0/Linux_2.4.20-28.8_Clobber/mozilla/view/src/nsView.cpp,
line 710]
nsViewManager::RenderDisplayListElement() 
[/builds/tinderbox/firefox-1.0/Linux_2.4.20-28.8_Clobber/mozilla/view/src/nsViewManager.cpp,
line 1452]
nsViewManager::RenderViews() 
[/builds/tinderbox/firefox-1.0/Linux_2.4.20-28.8_Clobber/mozilla/view/src/nsViewManager.cpp,
line 1370]
nsViewManager::Refresh() 
[/builds/tinderbox/firefox-1.0/Linux_2.4.20-28.8_Clobber/mozilla/view/src/nsViewManager.cpp,
line 929]
nsViewManager::DispatchEvent() 
[/builds/tinderbox/firefox-1.0/Linux_2.4.20-28.8_Clobber/mozilla/view/src/nsViewManager.cpp,
line 704]
HandleEvent() 
[/builds/tinderbox/firefox-1.0/Linux_2.4.20-28.8_Clobber/mozilla/view/src/nsView.cpp,
line 243]
nsCommonWidget::DispatchEvent() 
[/builds/tinderbox/firefox-1.0/Linux_2.4.20-28.8_Clobber/mozilla/widget/src/gtk2/nsCommonWidget.cpp,
line 215]
nsWindow::OnExposeEvent() 
[/builds/tinderbox/firefox-1.0/Linux_2.4.20-28.8_Clobber/mozilla/widget/src/gtk2/nsWindow.cpp,
line 1208]
expose_event_cb() 
[/builds/tinderbox/firefox-1.0/Linux_2.4.20-28.8_Clobber/mozilla/widget/src/gtk2/nsWindow.cpp,
line 3165]
libgtk-x11-2.0.so.0 + 0x11d88e (0x402da88e)
libgobject-2.0.so.0 + 0x82cb (0x405822cb)
libgobject-2.0.so.0 + 0x1ce1d (0x40596e1d)
libgobject-2.0.so.0 + 0x1e0e3 (0x405980e3)
libgobject-2.0.so.0 + 0x1e686 (0x40598686)
libgtk-x11-2.0.so.0 + 0x20fa74 (0x403cca74)
libgtk-x11-2.0.so.0 + 0x11c262 (0x402d9262)
libgdk-x11-2.0.so.0 + 0x2b4fd (0x404be4fd)
libgdk-x11-2.0.so.0 + 0x2b5ed (0x404be5ed)
libgdk-x11-2.0.so.0 + 0x2b663 (0x404be663)
libglib-2.0.so.0 + 0x27e41 (0x405dfe41)
libglib-2.0.so.0 + 0x24c47 (0x405dcc47)
libglib-2.0.so.0 + 0x265fe (0x405de5fe)
libglib-2.0.so.0 + 0x2692a (0x405de92a)
libgtk-x11-2.0.so.0 + 0x11b333 (0x402d8333)
nsAppShell::Run() 
[/builds/tinderbox/firefox-1.0/Linux_2.4.20-28.8_Clobber/mozilla/widget/src/gtk2/nsAppShell.cpp,
line 144]
nsAppShellService::Run() 
[/builds/tinderbox/firefox-1.0/Linux_2.4.20-28.8_Clobber/mozilla/xpfe/appshell/src/nsAppShellService.cpp,
line 495]
xre_main() 
[/builds/tinderbox/firefox-1.0/Linux_2.4.20-28.8_Clobber/mozilla/toolkit/xre/nsAppRunner.cpp,
line 692]
main() 
[/builds/tinderbox/firefox-1.0/Linux_2.4.20-28.8_Clobber/mozilla/browser/app/nsBrowserApp.cpp,
line 59]
libc.so.6 + 0x15ca6 (0x40985ca6)


*** This bug has been marked as a duplicate of 271825 ***
Status: UNCONFIRMED → RESOLVED
Closed: 20 years ago
Resolution: --- → DUPLICATE
Status: RESOLVED → VERIFIED
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: