281318 - Assertion failure: buf != NULL, at sslsecur.c / crash on repost of form with file input box

Status: RESOLVED EXPIRED

(SeaMonkey :: General, defect)

Description

[Edwin Groothuis]

User-Agent:       Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.7.5) Gecko/20050127
Build Identifier: Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.7.5) Gecko/20050127

When I post a form with a file input box (input type="file" name="blaat"),
mozilla crashes after the form has been reposted.

Reproducible: Always

Steps to Reproduce:
1. Go to https://customer.copyright.org.au/moreinformation.php
2. Just fill in everything with "no" etc
3. At the last page, select a file to upload.
4. Continue
5. Repost

Actual Results:  
Feb  7 12:31:24 k7 kernel: pid 29703 (mozilla-bin), uid 1001: exited on signal 11

tcpdump shows no additional traffic except a lot of FIN packets.

Expected Results:  
repost of the form.

Comment 1

[Edwin Groothuis]

Please use the email address a@a when trying to get through the first form.
(sorry for the inconvinience[sp])

Comment 2

[Edwin Groothuis]

I have compiled mozilla with gdb and debug information:

It ended with:
<pre>
CSS Error (https://customer.copyright.org.au/moreinformation.php :1.29): Error
in parsing value for property 'cursor'.  Declaration dropped.
CSS Error (https://customer.copyright.org.au/moreinformation.php :1.29): Error
in parsing value for property 'cursor'.  Declaration dropped.
Document https://customer.copyright.org.au/moreinformation.php loaded successfully
++WEBSHELL == 4
++DOMWINDOW == 4
frame: DocElementBox(dialog)(-1) (0x8aff864) style: 0x8aff838 {}
Has parent context:  style: 0x8aff5cc :-moz-canvas {}
Should be null

WARNING: nsTimeoutImpl::Release() proceeding without context., file
nsGlobalWindow.cpp, line 5432
--WEBSHELL == 3
Assertion failure: buf != NULL, at sslsecur.c:1048
Abort trap
</pre>

but it didn't leave a coredump.

Comment 3

[Boris Zbarsky [:bzbarsky]]

Hmm...  That assertion is in NSS (and that's what kills the browser; it's not
actually a crash, which is why there was no coredump).

This worksforme with a current trunk Linux build, though.  Is the problem
BSD-specific?

Comment 4

[Gervase Markham [:gerv]]

This is an automated message, with ID "auto-resolve01".

This bug has had no comments for a long time. Statistically, we have found that
bug reports that have not been confirmed by a second user after three months are
highly unlikely to be the source of a fix to the code.

While your input is very important to us, our resources are limited and so we
are asking for your help in focussing our efforts. If you can still reproduce
this problem in the latest version of the product (see below for how to obtain a
copy) or, for feature requests, if it's not present in the latest version and
you still believe we should implement it, please visit the URL of this bug
(given at the top of this mail) and add a comment to that effect, giving more
reproduction information if you have it.

If it is not a problem any longer, you need take no action. If this bug is not
changed in any way in the next two weeks, it will be automatically resolved.
Thank you for your help in this matter.

The latest beta releases can be obtained from:
Firefox:     http://www.mozilla.org/projects/firefox/
Thunderbird: http://www.mozilla.org/products/thunderbird/releases/1.5beta1.html
Seamonkey:   http://www.mozilla.org/projects/seamonkey/

Comment 5

[Gervase Markham [:gerv]]

This bug has been automatically resolved after a period of inactivity (see above
comment). If anyone thinks this is incorrect, they should feel free to reopen it.