Closed Bug 292210 Opened 20 years ago Closed 20 years ago

the browser crashes immidiately when trying to display the page

Categories

(Firefox :: General, defect)

1.0 Branch
x86
Windows XP
defect
Not set
critical

Tracking

()

RESOLVED WORKSFORME

People

(Reporter: Heinz77787, Unassigned)

References

()

Details

(Keywords: crash, helpwanted, qawanted)

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; de-DE; rv:1.7.7) Gecko/20050414 Firefox/1.0.3 Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; de-DE; rv:1.7.7) Gecko/20050414 Firefox/1.0.3 Firefox crashes after parsing the entry #mainpage #intro2 #product-id-img { FLOAT: right } starting at line 437 in "products.css". All it takes is "main.html" and "products.css" (up to and including line 437) to reproduce the crash. Reproducible: Always Steps to Reproduce: just browse the page Actual Results: Windows Protection Fault Alert Box - Quality Feedback Agent... the usual Expected Results: display the page contents firefox.exe @ 0056FE84
WFM Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8b2) Gecko/20050427 Firefox/1.0+ Reporter, what talkback IDs did you submit? Run /firefox/components/talkback.exe and post the TBIDs here please. Thanks!
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8b2) Gecko/20050428 Firefox/1.0+ WFM
wfm with Mozilla/5.0 (Windows; U; Windows NT 5.2; de-DE; rv:1.8b2) Gecko/20050426
Keywords: crash
WFM using Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8b2) Gecko/20050428 Firefox/1.0+ .
Here are the TalkBack ID´s as requested: TB5445248X, TB5419085Q
Incident ID: 5445248 Stack Signature Detecting 51cc60fb Product ID Firefox10 Build ID 2005041420 Trigger Time 2005-04-29 03:22:05.0 Platform Win32 Operating System Windows NT 5.1 build 2600 Module js3250.dll + (00028bd8) URL visited http://www.adobe.com/products/photoshop/main.html User Comments Since Last Crash 54 sec Total Uptime 199448 sec Trigger Reason Access violation Source File, Line No. c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/js/src/jsobj.c, line 2366 Stack Trace Detecting [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/js/src/jsobj.c, line 2366] js_LookupProperty [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/js/src/jsobj.c, line 2598] js_GetProperty [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/js/src/jsobj.c, line 2704] nsXPCWrappedJSClass::CallQueryInterfaceOnJSObject [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/js/src/xpconnect/src/xpcwrappedjsclass.cpp, line 243] nsXPCWrappedJSClass::DelegatedQueryInterface [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/js/src/xpconnect/src/xpcwrappedjsclass.cpp, line 589] nsXPCWrappedJS::QueryInterface [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/js/src/xpconnect/src/xpcwrappedjs.cpp, line 97] nsEventListenerManager::HandleEvent [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/content/events/src/nsEventListenerManager.cpp, line 1524] nsXULDocument::HandleDOMEvent [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/content/xul/document/src/nsXULDocument.cpp, line 1261] nsXULElement::HandleDOMEvent [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/content/xul/content/src/nsXULElement.cpp, line 2823] nsXULElement::HandleDOMEvent [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/content/xul/content/src/nsXULElement.cpp, line 2821] nsXULElement::HandleDOMEvent [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/content/xul/content/src/nsXULElement.cpp, line 2821] nsXULElement::HandleDOMEvent [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/content/xul/content/src/nsXULElement.cpp, line 2821] nsXULElement::HandleDOMEvent [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/content/xul/content/src/nsXULElement.cpp, line 2821] nsXULElement::HandleDOMEvent [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/content/xul/content/src/nsXULElement.cpp, line 2821] nsXULElement::HandleDOMEvent [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/content/xul/content/src/nsXULElement.cpp, line 2821] nsXULElement::HandleDOMEvent [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/content/xul/content/src/nsXULElement.cpp, line 2821] nsXULElement::HandleChromeEvent [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/content/xul/content/src/nsXULElement.cpp, line 3988] GlobalWindowImpl::HandleDOMEvent [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/dom/src/base/nsGlobalWindow.cpp, line 916] nsDocument::HandleDOMEvent [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/content/base/src/nsDocument.cpp, line 3742] nsGenericElement::HandleDOMEvent [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/content/base/src/nsGenericElement.cpp, line 1918] nsGenericElement::HandleDOMEvent [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/content/base/src/nsGenericElement.cpp, line 1915] nsGenericElement::HandleDOMEvent [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/content/base/src/nsGenericElement.cpp, line 1915] nsGenericElement::HandleDOMEvent [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/content/base/src/nsGenericElement.cpp, line 1915] nsGenericElement::HandleDOMEvent [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/content/base/src/nsGenericElement.cpp, line 1915] nsEventStateManager::DispatchMouseEvent [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/content/events/src/nsEventStateManager.cpp, line 2570] nsEventStateManager::GenerateMouseEnterExit [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/content/events/src/nsEventStateManager.cpp, line 2659] nsEventStateManager::PreHandleEvent [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/content/events/src/nsEventStateManager.cpp, line 447] PresShell::HandleEventInternal [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/layout/html/base/src/nsPresShell.cpp, line 6056] PresShell::HandleEvent [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/layout/html/base/src/nsPresShell.cpp, line 5921] nsViewManager::HandleEvent [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/view/src/nsViewManager.cpp, line 2326] nsViewManager::DispatchEvent [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/view/src/nsViewManager.cpp, line 2066] HandleEvent [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/view/src/nsView.cpp, line 77] nsWindow::DispatchEvent [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/widget/src/windows/nsWindow.cpp, line 1067] nsWindow::DispatchMouseEvent [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/widget/src/windows/nsWindow.cpp, line 5261] ChildWindow::DispatchMouseEvent [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/widget/src/windows/nsWindow.cpp, line 5511] nsWindow::WindowProc [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/widget/src/windows/nsWindow.cpp, line 1349] USER32.dll + 0x8709 (0x77d18709) USER32.dll + 0x87eb (0x77d187eb) USER32.dll + 0x89a5 (0x77d189a5) USER32.dll + 0x89e8 (0x77d189e8) nsAppShell::Run [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/widget/src/windows/nsAppShell.cpp, line 159] nsAppShellService::Run [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/xpfe/appshell/src/nsAppShellService.cpp, line 495] main [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/browser/app/nsBrowserApp.cpp, line 58] kernel32.dll + 0x16d4f (0x7c816d4f) Incident ID: 5419085 Stack Signature nsCSSFrameConstructor::AppendFrames 8b1fc1fe Product ID Firefox10 Build ID 2005041420 Trigger Time 2005-04-28 02:46:17.0 Platform Win32 Operating System Windows NT 5.1 build 2600 Module firefox.exe + (0016fe84) URL visited http://www.adobe.com/products/photoshop/main.html User Comments This crash is reproduceable. The Problem seems to be located within "product.css" Since Last Crash 156 sec Total Uptime 116406 sec Trigger Reason Access violation Source File, Line No. c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp, line 7603 Stack Trace nsCSSFrameConstructor::AppendFrames [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp, line 7603] nsCSSFrameConstructor::ContentAppended [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp, line 8388] PresShell::ContentAppended [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/layout/html/base/src/nsPresShell.cpp, line 5221] nsHTMLDocument::ContentAppended [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/content/html/document/src/nsHTMLDocument.cpp, line 1201] HTMLContentSink::NotifyAppend [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/content/html/document/src/nsHTMLContentSink.cpp, line 4114] HTMLContentSink::FlushPendingNotifications [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/content/html/document/src/nsHTMLContentSink.cpp, line 4450] nsHTMLDocument::ResolveName [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/content/html/document/src/nsHTMLDocument.cpp, line 3334] nsHTMLDocumentSH::ResolveImpl [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/dom/src/base/nsDOMClassInfo.cpp, line 5663] nsHTMLDocumentSH::NewResolve [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/dom/src/base/nsDOMClassInfo.cpp, line 6212] XPC_WN_Helper_NewResolve [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/js/src/xpconnect/src/xpcwrappednativejsops.cpp, line 1414] js_LookupPropertyWithFlags [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/js/src/jsobj.c, line 2500] js_LookupProperty [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/js/src/jsobj.c, line 2598] js_GetProperty [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/js/src/jsobj.c, line 2704] XPC_WN_JSOp_Safe_GetProperty [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/js/src/xpconnect/src/xpcwrappednativejsops.cpp, line 1297] js_Interpret [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/js/src/jsinterp.c, line 2823] js_Execute [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/js/src/jsinterp.c, line 1170] JS_EvaluateUCScriptForPrincipals [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/js/src/jsapi.c, line 3649] nsJSContext::EvaluateString [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/dom/src/base/nsJSEnvironment.cpp, line 946] nsScriptLoader::EvaluateScript [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/content/base/src/nsScriptLoader.cpp, line 668] nsScriptLoader::ProcessRequest [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/content/base/src/nsScriptLoader.cpp, line 581] nsScriptLoader::ProcessScriptElement [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/content/base/src/nsScriptLoader.cpp, line 527] nsHTMLScriptElement::MaybeProcessScript [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/content/html/content/src/nsHTMLScriptElement.cpp, line 656] nsHTMLScriptElement::SetDocument [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/content/html/content/src/nsHTMLScriptElement.cpp, line 469] HTMLContentSink::ProcessSCRIPTTag [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/content/html/document/src/nsHTMLContentSink.cpp, line 4341] HTMLContentSink::AddLeaf [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/content/html/document/src/nsHTMLContentSink.cpp, line 3195] CNavDTD::AddLeaf [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/htmlparser/src/CNavDTD.cpp, line 3787] CNavDTD::HandleDefaultStartToken [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/htmlparser/src/CNavDTD.cpp, line 1459] CNavDTD::HandleStartToken [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/htmlparser/src/CNavDTD.cpp, line 1835] CNavDTD::HandleToken [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/htmlparser/src/CNavDTD.cpp, line 1019] CNavDTD::BuildModel [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/htmlparser/src/CNavDTD.cpp, line 511] nsParser::BuildModel [c:/builds/tinderbox/Fx-Aviary1.0.1-l10n/WINNT_5.1_Depend/mozilla/htmlparser/src/nsParser.cpp, line 2004]
Could you please test this issue with a nightly build. http://ftp.mozilla.org/pub/mozilla.org/firefox/nightly/latest-trunk/
Keywords: helpwanted, qawanted
the first trace in comment 6 is bug 281984. the second is probably bug 257818
Version: unspecified → 1.0 Branch
confirming, crashed myself using 1.0.3 : 1.7.7: 2005041420 didn´t crash using a current trunk nightly: 1.8b2: 2005042806 Bug 281984 Comment #8 From Brendan Eich 2005-02-15 11:21 PDT Fixed everywhere. Bug 257818 Comment #12 From Boris Zbarsky 2004-09-12 22:12 PDT Fix checked in. Bug 257818 was filed against 1.8a3, didn´t crash on 1.7.3 URL and testcases of Bug 257818 don´t crash on: Mozilla/5.0 (Windows; U; Win98; de-DE; rv:1.7.7) Gecko/20050414 Firefox/1.0.3 duped Bug 285963 Comment #4 is showing the same stack signature, but i couldn´t crash it´s URL http://www.alltombilen.com/ using Firefox 1.0.3 35 talkbacks, branch only: http://talkback-public.mozilla.org/talkback/fastfind.jsp?search=1&searchby=url&match=contains&searchfor=http%3A%2F%2Fwww.adobe.com%2Fproducts%2Fphotoshop%2Fmain.html&vendor=All&product=All&platform=All&buildid=&sdate=&stime=&edate=&etime=&sortby=bbid youngest build: Firefox10 Build ID 2005042213 http://talkback-public.mozilla.org/talkback/fastfind.jsp?search=2&type=iid&id=5390900
Status: UNCONFIRMED → NEW
Ever confirmed: true
wfm Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.7.8) Gecko/20050430 Firefox/1.0.4
Status: NEW → RESOLVED
Closed: 20 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.