Closed Bug 278345 Opened 20 years ago Closed 19 years ago

Firefox 1.0 crash replying to thread at CodingForums.com (recursion) [@ 0x00000063 - nsCaret::DrawCaret ]

Categories

(Core :: Layout, defect)

x86
Other
defect
Not set
critical

Tracking

()

RESOLVED INVALID

People

(Reporter: WeirdAl, Unassigned)

References

()

Details

(Keywords: crash)

Crash Data

Steps to reproduce:
(1) http://www.codingforums.com, XML forum, reply to thread.  Note you may need
to be logged in to reproduce this.  (I can probably talk to the owner of
codingforums, a friend, about getting a dummy login for this.  My account is a
moderator-level one, and not one I'd share.)

Nearly identical stacks seen through TB3057747H and TB2994072K.

Stack Signature	 0x00000063 644fb3e3
Product ID	Firefox10
Build ID	2004110711
Trigger Time	2005-01-09 09:40:37.0
Platform	Win32
Operating System	Windows 98 4.10 build 67766446
Module	
URL visited	http://www.codingforums.com
User Comments	Replying to a thread
Since Last Crash	385 sec
Total Uptime	254198 sec
Trigger Reason	Illegal instruction
Source File, Line No.	N/A
Stack Trace 	
0x00000063
nsCaret::DrawCaret 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/base/src/nsCaret.cpp,
line 927]
nsCaret::StartBlinking 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/base/src/nsCaret.cpp,
line 512]
nsEditor::EndPlaceHolderTransaction 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/editor/libeditor/base/nsEditor.cpp,
line 786]
nsPlaintextEditor::InsertText 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/editor/libeditor/text/nsPlaintextEditor.cpp,
line 928]
nsTextControlFrame::SetValue 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/forms/src/nsTextControlFrame.cpp,
line 3190]
nsTextControlFrame::InitEditor 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/forms/src/nsTextControlFrame.cpp,
line 1749]
nsCSSFrameConstructor::CreateAnonymousFrames 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp,
line 5180]
nsCSSFrameConstructor::CreateAnonymousFrames 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp,
line 5085]
nsCSSFrameConstructor::ConstructHTMLFrame 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp,
line 4959]
nsCSSFrameConstructor::ConstructFrameInternal 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp,
line 7243]
nsCSSFrameConstructor::ConstructFrame 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp,
line 7140]
nsCSSFrameConstructor::ProcessChildren 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp,
line 11485]
nsCSSFrameConstructor::ConstructTableCellFrame 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp,
line 2995]
nsCSSFrameConstructor::TableProcessChild 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp,
line 3273]
nsCSSFrameConstructor::TableProcessChildren 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp,
line 3169]
nsCSSFrameConstructor::ConstructTableRowFrame 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp,
line 2845]
nsCSSFrameConstructor::TableProcessChild 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp,
line 3259]
nsCSSFrameConstructor::TableProcessChildren 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp,
line 3169]
nsCSSFrameConstructor::ConstructTableRowGroupFrame 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp,
line 2734]
nsCSSFrameConstructor::TableProcessChild 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp,
line 3253]
nsCSSFrameConstructor::TableProcessChildren 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp,
line 3169]
nsCSSFrameConstructor::ConstructTableFrame 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp,
line 2612]
nsCSSFrameConstructor::ConstructFrameByDisplayType 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp,
line 6457]
nsCSSFrameConstructor::ConstructFrameInternal 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp,
line 7278]
nsCSSFrameConstructor::ConstructFrame 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp,
line 7140]
nsCSSFrameConstructor::ProcessChildren 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp,
line 11485]
nsCSSFrameConstructor::ConstructBlock 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp,
line 12534]
nsCSSFrameConstructor::ConstructFrameByDisplayType 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp,
line 6388]
nsCSSFrameConstructor::ConstructFrameInternal 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp,
line 7278]
nsCSSFrameConstructor::ConstructFrame 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp,
line 7140]
nsCSSFrameConstructor::ProcessChildren 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp,
line 11485]
nsCSSFrameConstructor::ConstructTableCellFrame 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp,
line 2995]
nsCSSFrameConstructor::TableProcessChild 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp,
line 3273]
nsCSSFrameConstructor::TableProcessChildren 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp,
line 3169]
nsCSSFrameConstructor::ConstructTableRowFrame 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp,
line 2845]
nsCSSFrameConstructor::TableProcessChild 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp,
line 3259]
nsCSSFrameConstructor::TableProcessChildren 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp,
line 3169]
nsCSSFrameConstructor::ConstructTableRowGroupFrame 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp,
line 2734]
nsCSSFrameConstructor::TableProcessChild 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp,
line 3253]
nsCSSFrameConstructor::TableProcessChildren 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp,
line 3169]
nsCSSFrameConstructor::ConstructTableFrame 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp,
line 2612]
nsCSSFrameConstructor::ConstructFrameByDisplayType 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp,
line 6457]
nsCSSFrameConstructor::ConstructFrameInternal 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp,
line 7278]
nsCSSFrameConstructor::ConstructFrame 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp,
line 7140]
nsCSSFrameConstructor::ProcessChildren 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp,
line 11485]
nsCSSFrameConstructor::ConstructBlock 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp,
line 12534]
nsCSSFrameConstructor::ConstructFrameByDisplayType 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp,
line 6388]
nsCSSFrameConstructor::ConstructFrameInternal 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp,
line 7278]
nsCSSFrameConstructor::ConstructFrame 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp,
line 7140]
nsCSSFrameConstructor::ProcessChildren 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp,
line 11485]
nsCSSFrameConstructor::ConstructBlock 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp,
line 12534]
nsCSSFrameConstructor::ConstructFrameByDisplayType 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp,
line 6388]
nsCSSFrameConstructor::ConstructFrameInternal 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp,
line 7278]
nsCSSFrameConstructor::ConstructFrame 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp,
line 7140]
nsCSSFrameConstructor::ProcessChildren 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp,
line 11485]
nsCSSFrameConstructor::ConstructTableCellFrame 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp,
line 2995]
nsCSSFrameConstructor::TableProcessChild 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp,
line 3273]
nsCSSFrameConstructor::TableProcessChildren 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp,
line 3169]
nsCSSFrameConstructor::ConstructTableRowFrame 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp,
line 2845]
nsCSSFrameConstructor::TableProcessChild 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp,
line 3259]
nsCSSFrameConstructor::TableProcessChildren 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp,
line 3169]
nsCSSFrameConstructor::ConstructTableRowGroupFrame 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp,
line 2734]
nsCSSFrameConstructor::TableProcessChild 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp,
line 3253]
Note: this bug is not 100% reproducible.
Severity: normal → critical
Keywords: crash
Summary: Firefox 1.0 crash replying to thread at CodingForums.com (recursion) → Firefox 1.0 crash replying to thread at CodingForums.com (recursion) [@ 0x00000063 - nsCaret::DrawCaret ]
Reproduced quickly (after several seconds) with Firefox nightly.

Talkback TB3058637M is less informative.

Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.8b) Gecko/20050113 Firefox/1.0+
> (1) http://www.codingforums.com, XML forum, reply to thread.

I'll look at this later today, but explaining these steps in a bit more detail
("click on text that says 'foo'", etc) would be helpful...
Looks like this does indeed need a login (as well as specific details about
whether you're using the PostReply button or the Quote button, which thread,
etc, etc).
I don't actually see a testcase here, so removing the "testcase" keyword.
Keywords: testcase
Considering I haven't seen this in months, and I use Firefox 1.0.7, and I've
used Firefox 1.0.6, 1.0.5, etc., and I was the only one who's seen it, and I use
CodingForums regularly, I don't think this bug is valid.
Status: NEW → RESOLVED
Closed: 19 years ago
Resolution: --- → INVALID
Crash Signature: [@ 0x00000063 - nsCaret::DrawCaret ]
You need to log in before you can comment on or make changes to this bug.