Intencive Javascript crashes Firefox [@nsTextFrame::GetChildFrameContainingOffset]

RESOLVED DUPLICATE of bug 275654

Status

()

--
critical
RESOLVED DUPLICATE of bug 275654
14 years ago
8 years ago

People

(Reporter: cardshark1985, Unassigned)

Tracking

({crash})

1.0 Branch
x86
All
crash
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

(crash signature, URL)

(Reporter)

Description

14 years ago
User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.8) Gecko/20050511 Firefox/1.0.4
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.8) Gecko/20050511 Firefox/1.0.4

Large amounts of reasource intencive javascript crashes fx.

Reproducible: Always

Steps to Reproduce:
1.go to http://armor4life.com/development/wip.htm?edit (popups must be allowed
on this site, not for the bug but to use my program)
2.Press Start Gui
3.Press Enter through the prompts
4.Click on a new created cell
5.Press plugin wiz
6.Type paint.js
7.Press Continue (or enter)
8.Type "paintme" for the key
9.Press the newly created button Create pallate here
10. Select 300 for each prompt or greater.
--At this point it ma crash-- but if not
11. Click on the new box and move the mouse around in it for a bit.

Actual Results:  
Firefox crashed
TB6369674M and TB6374473M

Expected Results:  
should have changed the BG color of each cell on mouseover.

Thanks guys for all the hard work!!
(Reporter)

Comment 1

14 years ago
oh sorry, after step 10 press ok in the confirm box

Comment 2

14 years ago
WFM: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8b2) Gecko/20050603
Firefox/1.0+
Confirmed with Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8b2) Gecko/20050604
Firefox/1.0+

Stack Signature	 nsTextFrame::GetChildFrameContainingOffset 1e971f88
Product ID	Firefox10
Build ID	2005051112
Trigger Time	2005-06-03 15:16:43.0
Platform	Win32
Operating System	Windows NT 5.1 build 2600
Module	firefox.exe + (0022e882)
URL visited	http://armor4life.com/development/wip?edit
User Comments	Well I was creating a paint type plugin that generates a set
number of cells (1000 in this Case) at 1 px a peice then on mouse over it calls
a function different for each. on mouse down changes a var alowing it to change
the color of the cell. Well as you
Since Last Crash	150618 sec
Total Uptime	584270 sec
Trigger Reason	Stack overflow
Source File, Line No.
d:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.0_Depend/mozilla/layout/html/base/src/nsTextFrame.cpp,
line 3822
Stack Trace 	
nsTextFrame::GetChildFrameContainingOffset 
[d:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.0_Depend/mozilla/layout/html/base/src/nsTextFrame.cpp,
line 3822]
nsTextFrame::GetChildFrameContainingOffset 
[d:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.0_Depend/mozilla/layout/html/base/src/nsTextFrame.cpp,
line 3825]
nsTextFrame::GetChildFrameContainingOffset 
[d:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.0_Depend/mozilla/layout/html/base/src/nsTextFrame.cpp,
line 3825]
nsTextFrame::GetChildFrameContainingOffset 
[d:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.0_Depend/mozilla/layout/html/base/src/nsTextFrame.cpp,
line 3825]
nsTextFrame::GetChildFrameContainingOffset 
[d:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.0_Depend/mozilla/layout/html/base/src/nsTextFrame.cpp,
line 3825]
...


Status: UNCONFIRMED → NEW
Ever confirmed: true
Keywords: crash
OS: Windows XP → All
Summary: Intencive Javascript Crashes Fx → Intencive Javascript crashes Firefox [@nsTextFrame::GetChildFrameContainingOffset]

Comment 4

14 years ago

*** This bug has been marked as a duplicate of 275654 ***
Status: NEW → RESOLVED
Last Resolved: 14 years ago
Resolution: --- → DUPLICATE
Version: unspecified → 1.0 Branch
(Assignee)

Updated

8 years ago
Crash Signature: [@nsTextFrame::GetChildFrameContainingOffset]
You need to log in before you can comment on or make changes to this bug.