Closed Bug 278457 Opened 20 years ago Closed 19 years ago

Crash on www.threadless.com [@ nsHTMLDocument::RegisterNamedItems]

Categories

(Core :: Layout, defect)

Product:
Core
Component:
Layout
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED WORKSFORME

People

(Reporter: moz, Unassigned)

References

(
URL
)

Details

(Keywords: crash, regression, topcrash)

Crash Data

Attachments

(3 files)

crash report from my log
22.67 KB, text/plain
Details
Crash log.
4.51 KB, text/plain
Details
Readable crash log
19.50 KB, text/plain
Details 
Going to http://www.threadless.com/ will crash the January 14th build of Camino
(in nsHTMLDocument::RegisterNamedItems(nsIContent*) ).

Full crash log forthcoming.
Wevah mentioned over irc that this wasn't a problem with yesterday's nightly.
Keywords: crash, regression
OS: All → MacOS X
talkback incident TB3071841Q filed (server currently churning through backed up
reports).
That's not the same trace that Jasper and I get; I'll have to remind him to post
his log (mine's all funny looking because I'm on 10.2).
Attached file Crash log. — 
Nevermind; attaching my (munged) crashlog anyway.
Attached file Readable crash log — 
Here you go. Same crash log as Wevah but a bit more readable.
Talkback shows this to be a fairly common crash starting on 12/26:
<http://talkback-public.mozilla.org/talkback/fastfind.jsp?search=1&searchby=stacksig&match=contains&searchfor=nsHTMLDocument%3A%3ARegisterNamedItems&vendor=All&product=All&platform=All&buildid=&sdate=&stime=&edate=&etime=&sortby=bbid>

Oddly, this is the same start date as the crash in bug 278575.
Assignee: pinkerton → nobody
Component: Page Layout → Layout
OS: MacOS X → All
Product: Camino → Core
QA Contact: layout
Hardware: Macintosh → All
Summary: Crash on www.threadless.com with Jan 14 nightly → Crash on www.threadless.com (nsHTMLDocument::RegisterNamedItems())
Version: unspecified → Trunk
jay, would this be a recent top-crasher?
Flags: blocking1.8b?
I wouldn't call this a topcrasher, but it looks like a major regression on the
CaminoTrunk as of 1/14.  Here is one Camino crash:

Incident ID: 3100078
Stack Signature	nsHTMLDocument::RegisterNamedItems() 43d4a91a
Product ID	CaminoTrunk
Build ID	2005011408
Trigger Time	2005-01-16 09:22:53.0
Platform	MacOSX
Operating System	Darwin 7.7.0
Module	Camino + (002f025c)
URL visited	
User Comments	
Since Last Crash	6 sec
Total Uptime	226 sec
Trigger Reason	SIGSEGV: Segmentation Violation: (signal 11)
Source File, Line No.
/builds/camino-release/camino/trunk/mozilla/content/html/document/src/nsHTMLDocument.cpp,
line 3115
Stack Trace 	
nsHTMLDocument::RegisterNamedItems() 
[/builds/camino-release/camino/trunk/mozilla/content/html/document/src/nsHTMLDocument.cpp,
line 3115]
nsHTMLDocument::RegisterNamedItems() 
[/builds/camino-release/camino/trunk/mozilla/content/html/document/src/nsHTMLDocument.cpp,
line 3143]
nsHTMLDocument::RegisterNamedItems() 
[/builds/camino-release/camino/trunk/mozilla/content/html/document/src/nsHTMLDocument.cpp,
line 3143]
nsHTMLDocument::RegisterNamedItems() 
[/builds/camino-release/camino/trunk/mozilla/content/html/document/src/nsHTMLDocument.cpp,
line 3143]
nsHTMLDocument::RegisterNamedItems() 
[/builds/camino-release/camino/trunk/mozilla/content/html/document/src/nsHTMLDocument.cpp,
line 3143]
nsHTMLDocument::RegisterNamedItems() 
[/builds/camino-release/camino/trunk/mozilla/content/html/document/src/nsHTMLDocument.cpp,
line 3143]
nsHTMLDocument::RegisterNamedItems() 
[/builds/camino-release/camino/trunk/mozilla/content/html/document/src/nsHTMLDocument.cpp,
line 3143]
nsHTMLDocument::RegisterNamedItems() 
[/builds/camino-release/camino/trunk/mozilla/content/html/document/src/nsHTMLDocument.cpp,
line 3143]
nsHTMLDocument::RegisterNamedItems() 
[/builds/camino-release/camino/trunk/mozilla/content/html/document/src/nsHTMLDocument.cpp,
line 3143]
nsHTMLDocument::ContentAppended() 
[/builds/camino-release/camino/trunk/mozilla/content/html/document/src/nsHTMLDocument.cpp,
line 1119]
HTMLContentSink::NotifyAppend() 
[/builds/camino-release/camino/trunk/mozilla/content/html/document/src/nsHTMLContentSink.cpp,
line 4018]
SinkContext::FlushTags() 
[/builds/camino-release/camino/trunk/mozilla/content/html/document/src/nsHTMLContentSink.cpp,
line 1797]
SinkContext::CloseContainer() 
[/builds/camino-release/camino/trunk/mozilla/content/html/document/src/nsHTMLContentSink.cpp,
line 1393]
CNavDTD::CloseContainer() 
[/builds/camino-release/camino/trunk/mozilla/parser/htmlparser/src/CNavDTD.cpp,
line 3344]
CNavDTD::CloseContainersTo() 
[/builds/camino-release/camino/trunk/mozilla/parser/htmlparser/src/CNavDTD.cpp,
line 3376]
CNavDTD::HandleEndToken() 
[/builds/camino-release/camino/trunk/mozilla/parser/htmlparser/src/CNavDTD.cpp,
line 1929]
CNavDTD::HandleToken() 
[/builds/camino-release/camino/trunk/mozilla/parser/htmlparser/src/CNavDTD.cpp,
line 901]
CNavDTD::BuildModel() 
[/builds/camino-release/camino/trunk/mozilla/parser/htmlparser/src/CNavDTD.cpp,
line 461]
nsParser::BuildModel() 
[/builds/camino-release/camino/trunk/mozilla/parser/htmlparser/src/nsParser.cpp,
line 842]
nsParser::ResumeParse() 
[/builds/camino-release/camino/trunk/mozilla/parser/htmlparser/src/nsParser.cpp,
line 1892]
nsParser::OnDataAvailable() 
[/builds/camino-release/camino/trunk/mozilla/parser/htmlparser/src/nsParser.cpp,
line 2568]
nsDocumentOpenInfo::OnDataAvailable() 
[/builds/camino-release/camino/trunk/mozilla/uriloader/base/nsURILoader.cpp,
line 848]
nsHTTPCompressConv::do_OnDataAvailable() 
[/builds/camino-release/camino/trunk/mozilla/netwerk/streamconv/converters/nsHTTPCompressConv.cpp,
line 842]
nsHTTPCompressConv::OnDataAvailable() 
[/builds/camino-release/camino/trunk/mozilla/netwerk/streamconv/converters/nsHTTPCompressConv.cpp,
line 327]
nsStreamListenerTee::OnDataAvailable() 
[/builds/camino-release/camino/trunk/mozilla/netwerk/base/src/nsStreamListenerTee.cpp,
line 842]
nsHttpChannel::OnDataAvailable() 
[/builds/camino-release/camino/trunk/mozilla/netwerk/protocol/http/src/nsHttpChannel.cpp,
line 3859]
nsInputStreamPump::OnStateTransfer() 
[/builds/camino-release/camino/trunk/mozilla/netwerk/base/src/nsInputStreamPump.cpp,
line 440]
nsInputStreamPump::OnInputStreamReady() 
[/builds/camino-release/camino/trunk/mozilla/netwerk/base/src/nsInputStreamPump.cpp,
line 340]
nsInputStreamReadyEvent::EventHandler()
PL_HandleEvent() 
[/builds/camino-release/camino/trunk/mozilla/xpcom/threads/plevent.c, line 699]
PL_ProcessPendingEvents() 
[/builds/camino-release/camino/trunk/mozilla/xpcom/threads/plevent.c, line 633]
CoreFoundation.299.33.0 + 0x3ca8 (0x90193ca8)
CoreFoundation.299.33.0 + 0x1560 (0x90191560)
CoreFoundation.299.33.0 + 0x5e8c (0x90195e8c)
HIToolbox.145.0.0 + 0x5f60 (0x927d5f60)
HIToolbox.145.0.0 + 0xc640 (0x927dc640)
HIToolbox.145.0.0 + 0x2e6a0 (0x927fe6a0)
AppKit.743.33.0 + 0x12e44 (0x92dd2e44)
AppKit.743.33.0 + 0x298c8 (0x92de98c8)
AppKit.743.33.0 + 0x3dc30 (0x92dfdc30)
AppKit.743.33.0 + 0xfa2b8 (0x92eba2b8)
NSS_SMIMEUtil_FindBulkAlgForRecipients()   start()

Looks like this has been around in some form for a while.  Here is a recent
crash with Firefox 1.0:
Incident ID: 3100971
Stack Signature	nsHTMLDocument::RegisterNamedItems 4149ef5f
Email Address	
Product ID	Firefox10
Build ID	2004110711
Trigger Time	2005-01-15 01:36:00.0
Platform	Win32
Operating System	Windows NT 5.1 build 2600
Module	firefox.exe + (0019f475)
URL visited	
User Comments	
Since Last Crash	95 sec
Total Uptime	1343412 sec
Trigger Reason	Access violation
Source File, Line No.
d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/content/html/document/src/nsHTMLDocument.cpp,
line 3231
Stack Trace 	
nsHTMLDocument::RegisterNamedItems 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/content/html/document/src/nsHTMLDocument.cpp,
line 3231]
nsHTMLDocument::RegisterNamedItems 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/content/html/document/src/nsHTMLDocument.cpp,
line 3260]
nsHTMLDocument::RegisterNamedItems 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/content/html/document/src/nsHTMLDocument.cpp,
line 3260]
nsHTMLDocument::RegisterNamedItems 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/content/html/document/src/nsHTMLDocument.cpp,
line 3260]
nsHTMLDocument::RegisterNamedItems 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/content/html/document/src/nsHTMLDocument.cpp,
line 3260]
nsHTMLDocument::RegisterNamedItems 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/content/html/document/src/nsHTMLDocument.cpp,
line 3260]
nsHTMLDocument::RegisterNamedItems 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/content/html/document/src/nsHTMLDocument.cpp,
line 3260]
nsHTMLDocument::RegisterNamedItems 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/content/html/document/src/nsHTMLDocument.cpp,
line 3260]
nsHTMLDocument::RegisterNamedItems 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/content/html/document/src/nsHTMLDocument.cpp,
line 3260]
nsHTMLDocument::RegisterNamedItems 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/content/html/document/src/nsHTMLDocument.cpp,
line 3260]
nsHTMLDocument::RegisterNamedItems 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/content/html/document/src/nsHTMLDocument.cpp,
line 3260]
nsHTMLDocument::RegisterNamedItems 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/content/html/document/src/nsHTMLDocument.cpp,
line 3260]
nsHTMLDocument::RegisterNamedItems 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/content/html/document/src/nsHTMLDocument.cpp,
line 3260]
nsHTMLDocument::RegisterNamedItems 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/content/html/document/src/nsHTMLDocument.cpp,
line 3260]
nsHTMLDocument::RegisterNamedItems 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/content/html/document/src/nsHTMLDocument.cpp,
line 3260]
nsHTMLDocument::RegisterNamedItems 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/content/html/document/src/nsHTMLDocument.cpp,
line 3260]
nsHTMLDocument::RegisterNamedItems 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/content/html/document/src/nsHTMLDocument.cpp,
line 3260]
nsHTMLDocument::RegisterNamedItems 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/content/html/document/src/nsHTMLDocument.cpp,
line 3260]
nsHTMLDocument::RegisterNamedItems 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/content/html/document/src/nsHTMLDocument.cpp,
line 3260]
nsHTMLDocument::RegisterNamedItems 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/content/html/document/src/nsHTMLDocument.cpp,
line 3260]
nsHTMLDocument::RegisterNamedItems 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/content/html/document/src/nsHTMLDocument.cpp,
line 3260]
nsHTMLDocument::RegisterNamedItems 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/content/html/document/src/nsHTMLDocument.cpp,
line 3260]
nsHTMLDocument::RegisterNamedItems 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/content/html/document/src/nsHTMLDocument.cpp,
line 3260]
nsHTMLDocument::RegisterNamedItems 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/content/html/document/src/nsHTMLDocument.cpp,
line 3260]
nsHTMLDocument::RegisterNamedItems 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/content/html/document/src/nsHTMLDocument.cpp,
line 3260]
nsHTMLDocument::RegisterNamedItems 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/content/html/document/src/nsHTMLDocument.cpp,
line 3260]
nsHTMLDocument::ContentAppended 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/content/html/document/src/nsHTMLDocument.cpp,
line 1198]
HTMLContentSink::NotifyAppend 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/content/html/document/src/nsHTMLContentSink.cpp,
line 4114]
HTMLContentSink::FlushPendingNotifications 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/content/html/document/src/nsHTMLContentSink.cpp,
line 4450]
nsHTMLDocument::ResolveName 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/content/html/document/src/nsHTMLDocument.cpp,
line 3330]
nsHTMLDocumentSH::ResolveImpl 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/dom/src/base/nsDOMClassInfo.cpp,
line 5656]
nsHTMLDocumentSH::NewResolve 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/dom/src/base/nsDOMClassInfo.cpp,
line 6205]
XPC_WN_Helper_NewResolve 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/js/src/xpconnect/src/xpcwrappednativejsops.cpp,
line 929]
js_LookupPropertyWithFlags 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/js/src/jsobj.c, line
2489]
js_LookupProperty 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/js/src/jsobj.c, line
2587]
js_GetProperty 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/js/src/jsobj.c, line
2693]
js_Interpret 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/js/src/jsinterp.c,
line 2807]
js_Execute 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/js/src/jsinterp.c,
line 1162]
JS_EvaluateUCScriptForPrincipals 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/js/src/jsapi.c, line
3649]
nsJSContext::EvaluateString 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/dom/src/base/nsJSEnvironment.cpp,
line 946]
nsScriptLoader::EvaluateScript 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/content/base/src/nsScriptLoader.cpp,
line 668]
nsScriptLoader::ProcessRequest 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/content/base/src/nsScriptLoader.cpp,
line 581]
nsScriptLoader::ProcessScriptElement 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/content/base/src/nsScriptLoader.cpp,
line 527]
nsHTMLScriptElement::MaybeProcessScript 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/content/html/content/src/nsHTMLScriptElement.cpp,
line 656]
nsHTMLScriptElement::SetDocument 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/content/html/content/src/nsHTMLScriptElement.cpp,
line 469]
HTMLContentSink::ProcessSCRIPTTag 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/content/html/document/src/nsHTMLContentSink.cpp,
line 4341]
HTMLContentSink::AddLeaf 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/content/html/document/src/nsHTMLContentSink.cpp,
line 3195]
CNavDTD::AddLeaf 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/htmlparser/src/CNavDTD.cpp,
line 3787]
CNavDTD::HandleDefaultStartToken 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/htmlparser/src/CNavDTD.cpp,
line 1459]
CNavDTD::HandleStartToken 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/htmlparser/src/CNavDTD.cpp,
line 1835]
CNavDTD::HandleToken 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/htmlparser/src/CNavDTD.cpp,
line 1019]
CNavDTD::BuildModel 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/htmlparser/src/CNavDTD.cpp,
line 511]
nsParser::BuildModel 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/htmlparser/src/nsParser.cpp,
line 2004]
Keywords: topcrash, zt4newcrash
Summary: Crash on www.threadless.com (nsHTMLDocument::RegisterNamedItems()) → Crash on www.threadless.com [@ nsHTMLDocument::RegisterNamedItems]
So.. this doesn't sound like a regression, given Jay's comment....

Could someone who can reproduce this catch it in a debugger and see what the
local vars look like at the crash site?
I believe this is on the Mac platform/OS (sorry if i'm wrong)
-dave
OS: All → MacOS X
Hardware: All → Macintosh
David: talkback shows this to be cross-platform.
OS: MacOS X → All
Hardware: Macintosh → All
too late for 1.8b1, transferring request to 1.8b2
Flags: blocking1.8b?
Flags: blocking1.8b2?
Flags: blocking1.8b-
After looking at the recent crashes with his signature, it appears that this
crash is no longer occurring on Gecko trunk (1.8), but persists in the 1.7
branch, (which, I believe, is the basis for Camino trunk).  
IIRC, Camino 0.8.x uses the 1.7 branch, but the Camino trunk uses the Gecko
trunk (1.8).
Flags: blocking1.8b2? → blocking1.8b2+
[Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.7.6) Gecko/20050319] (release) (W98SE)
[Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.8b) Gecko/20050217] (<-- 1.8b1 !)
(W98SE)
[Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.8b2) Gecko/20050329] (nightly) (W98SE)

These 3 builds WorksForMe to display <http://www.threadless.com/>...
Jay, can you find out if this is still a problem on the latest trunk builds? I'm
tempted to move it off of the blocking list if we're not seeing it with
regularity on the latest nightly trunk builds. Also, if it's not new, and not a
regression, then we should clean up the keywords.
Flags: blocking1.8b2+ → blocking1.8b2?
Flags: blocking1.8b3?
Flags: blocking1.8b2?
Flags: blocking1.8b2-
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8b2) Gecko/20050524
Firefox/1.0+ ID:2005052401

I don't see this crash anymore either.
Flags: blocking1.8b3? → blocking1.8b3-
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9a1) Gecko/20050816
Firefox/1.0+
The URL WFM.  Please close or at least remove topcrash & zt4newcrash keywords.
Even I don't see this anymore (ever). I think this should be closed WFM, unless someone is still seeing this.
Status: NEW → RESOLVED
Closed: 19 years ago
Resolution: --- → WORKSFORME
Crash Signature: [@ nsHTMLDocument::RegisterNamedItems]
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: