27708 - Crash at loading this page

Status: VERIFIED WORKSFORME

(Core :: XBL, defect, P3)

Description

[Teruko Kobayashi]

When you go to the page, Mozilla will crash at loading.

Steps of reproduce
1. Launch Mozilla
2. Go to above URL
Mozilla will crash.

Stacktrace incident 5362454
 Trigger Type:  Program Crash 

 Trigger Reason:  SIGSEGV: Segmentation Fault: (signal 11) 

 Call Stack:    (Signature = 0x00000015 1199699e) 
     
     0x00000015 
     nsCSSFrameConstructor::AttributeChanged() 
     StyleSetImpl::AttributeChanged() 
     PresShell::AttributeChanged() 
     nsDocument::AttributeChanged() 
     nsGenericHTMLElement::SetAttribute() 
     nsHTMLImageElement::SetSrcInner() 
     nsHTMLImageElement::SetProperty() 
     nsJSUtils::nsCallJSScriptObjectSetProperty() 
     SetHTMLImageElementProperty() 
     js_SetProperty() 
     js_Interpret() 
     js_Execute() 
     obj_eval() 
     js_Invoke() 
     js_Interpret() 
     js_Invoke() 
     js_Interpret() 
     js_Execute() 
     JS_EvaluateUCScriptForPrincipals() 
     nsJSContext::EvaluateString() 
     HTMLContentSink::EvaluateScript() 
     HTMLContentSink::OnStreamComplete() 
     nsStreamLoader::OnStopRequest() 
     InterceptStreamListener::OnStopRequest() 
     nsHTTPChannel::ResponseCompleted() 
     nsHTTPResponseListener::OnStopRequest() 
     nsOnStopRequestEvent::HandleEvent() 
     nsStreamListenerEvent::HandlePLEvent() 
     PL_HandleEvent() 
     PL_ProcessPendingEvents() 
     nsEventQueueImpl::ProcessPendingEvents() 
     event_processor_callback() 
     our_gdk_io_invoke() 
     libglib-1.2.so.0 + 0xe52a (0x406a752a) 
     libglib-1.2.so.0 + 0xfbe6 (0x406a8be6) 
     libglib-1.2.so.0 + 0x101a1 (0x406a91a1) 
     libglib-1.2.so.0 + 0x10341 (0x406a9341) 
     libgtk-1.2.so.0 + 0x8c209 (0x405d0209) 
     nsAppShell::Run() 
     nsAppShellService::Run() 
     main1() 
     main() 
     libc.so.6 + 0x181eb (0x4021f1eb) 

I tested this in 2000021408 Linux build.  This does not happen 2000021111 Linux build and 2000021408 Win32 build.

Comment 1

[Richard Zach]

Could not reproduce crash on Linux build 2000.02.14.09.  However, site uses
unsupported  <layer> and document.layer; sent email to [e-mail]
using http://sites.netscape.net/ekrock/fixit/layer.html and
http://sites.netscape.net/ekrock/fixit/useragent.html.

Comment 2

[David Hyatt]

layout bug

Comment 3

[rickg]

Pierre -- given the stack trace -- I'm forwarding this to you.

Comment 4

[Teruko Kobayashi]

This does not happen in 2000021708 and 2000021808 Linux build.

Comment 5

[Teruko Kobayashi]

verified