296863 - FF11a1 crash testing xforms [@ libxforms.so][@ xforms.dll]

Status: RESOLVED INVALID

(Core Graveyard :: XForms, defect)

Description

[Jay Patel [:jay]]

The stack signatures aren't very helpful, but there are enough of these crashes
with Deer Park Alpha 1 to make this a topcrasher.  Most people are crashing
testing xforms samples.

libxforms.so crashes (Linux) can be found here:
http://talkback-public.mozilla.org/talkback/fastfind.jsp?search=1&searchby=stacksig&match=contains&searchfor=libxforms.so&vendor=MozillaOrg&product=FirefoxTrunk&platform=All&buildid=&sdate=&stime=&edate=&etime=&sortby=bbid

xforms.dll crashes (Win32) can be found here:
http://talkback-public.mozilla.org/talkback/fastfind.jsp?search=1&searchby=stacksig&match=contains&searchfor=xforms.dll&vendor=MozillaOrg&product=FirefoxTrunk&platform=All&buildid=&sdate=&stime=&edate=&etime=&sortby=bbid

Here are a couple of recent incidents:

Incident ID: 6336666
Stack Signature	libxforms.so + 0x9c47 (0x56377c47) 3cf79480
Product ID	FirefoxTrunk
Build ID	2005053112
Trigger Time	2005-06-02 12:19:43.0
Platform	LinuxIntel
Operating System	Linux 2.6.10-3.2mdk
Module	libxforms.so + (00009c47)
URL visited	
User Comments	Crash after install Xforms xpi and try to open web page
(caluculator example) form mozilla xforms project website
Since Last Crash	0 sec
Total Uptime	0 sec
Trigger Reason	SIGSEGV: Segmentation Fault: (signal 11)
Source File, Line No.	N/A
Stack Trace 	
libxforms.so + 0x9c47 (0x56377c47)
libxforms.so + 0xa036 (0x56378036)
libxforms.so + 0xa0e5 (0x563780e5)
nsXTFElementWrapper::BindToTree() 
[/builds/tinderbox/Fx-Trunk/Linux_2.4.21-27.0.4.ELsmp_Depend/mozilla/content/xtf/src/nsXTFElementWrapper.cpp,
line 164]
nsGenericElement::AppendChildTo() 
[/builds/tinderbox/Fx-Trunk/Linux_2.4.21-27.0.4.ELsmp_Depend/mozilla/content/base/src/nsGenericElement.cpp,
line 2735]
nsXMLContentSink::HandleStartElement() 
[/builds/tinderbox/Fx-Trunk/Linux_2.4.21-27.0.4.ELsmp_Depend/mozilla/content/xml/document/src/nsXMLContentSink.cpp,
line 255]
nsExpatDriver::HandleStartElement() 
[/builds/tinderbox/Fx-Trunk/Linux_2.4.21-27.0.4.ELsmp_Depend/mozilla/parser/htmlparser/src/nsExpatDriver.cpp,
line 848]
doContent() 
[/builds/tinderbox/Fx-Trunk/Linux_2.4.21-27.0.4.ELsmp_Depend/mozilla/parser/expat/lib/xmlparse.c,
line 2276]
contentProcessor() 
[/builds/tinderbox/Fx-Trunk/Linux_2.4.21-27.0.4.ELsmp_Depend/mozilla/parser/expat/lib/xmlparse.c,
line 1940]
doProlog() 
[/builds/tinderbox/Fx-Trunk/Linux_2.4.21-27.0.4.ELsmp_Depend/mozilla/parser/expat/lib/xmlparse.c,
line 4243]
prologProcessor() 
[/builds/tinderbox/Fx-Trunk/Linux_2.4.21-27.0.4.ELsmp_Depend/mozilla/parser/expat/lib/xmlparse.c,
line 3611]
MOZ_XML_Parse() 
[/builds/tinderbox/Fx-Trunk/Linux_2.4.21-27.0.4.ELsmp_Depend/mozilla/parser/expat/lib/xmlparse.c,
line 1498]
nsExpatDriver::ParseBuffer() 
[/builds/tinderbox/Fx-Trunk/Linux_2.4.21-27.0.4.ELsmp_Depend/mozilla/parser/htmlparser/src/nsExpatDriver.cpp,
line 822]
nsExpatDriver::ConsumeToken() 
[/builds/tinderbox/Fx-Trunk/Linux_2.4.21-27.0.4.ELsmp_Depend/mozilla/parser/htmlparser/src/nsExpatDriver.cpp,
line 945]
nsParser::Tokenize() 
[/builds/tinderbox/Fx-Trunk/Linux_2.4.21-27.0.4.ELsmp_Depend/mozilla/parser/htmlparser/src/nsParser.cpp,
line 2776]
nsParser::ResumeParse() 
[/builds/tinderbox/Fx-Trunk/Linux_2.4.21-27.0.4.ELsmp_Depend/mozilla/parser/htmlparser/src/nsParser.cpp,
line 1949]
nsParser::OnDataAvailable() 
[/builds/tinderbox/Fx-Trunk/Linux_2.4.21-27.0.4.ELsmp_Depend/mozilla/parser/htmlparser/src/nsParser.cpp,
line 2625]
nsDocumentOpenInfo::OnDataAvailable() 
[/builds/tinderbox/Fx-Trunk/Linux_2.4.21-27.0.4.ELsmp_Depend/mozilla/uriloader/base/nsURILoader.cpp,
line 848]
nsHttpChannel::OnDataAvailable() 
[/builds/tinderbox/Fx-Trunk/Linux_2.4.21-27.0.4.ELsmp_Depend/mozilla/netwerk/protocol/http/src/nsHttpChannel.cpp,
line 4015]
nsInputStreamPump::OnStateTransfer() 
[/builds/tinderbox/Fx-Trunk/Linux_2.4.21-27.0.4.ELsmp_Depend/mozilla/netwerk/base/src/nsInputStreamPump.cpp,
line 440]
nsInputStreamPump::OnInputStreamReady() 
[/builds/tinderbox/Fx-Trunk/Linux_2.4.21-27.0.4.ELsmp_Depend/mozilla/netwerk/base/src/nsInputStreamPump.cpp,
line 341]
nsInputStreamReadyEvent::EventHandler()
PL_HandleEvent() 
[/builds/tinderbox/Fx-Trunk/Linux_2.4.21-27.0.4.ELsmp_Depend/mozilla/xpcom/threads/plevent.c,
line 699]
PL_ProcessPendingEvents() 
[/builds/tinderbox/Fx-Trunk/Linux_2.4.21-27.0.4.ELsmp_Depend/mozilla/xpcom/threads/plevent.c,
line 633]
nsEventQueueImpl::ProcessPendingEvents() 
[/builds/tinderbox/Fx-Trunk/Linux_2.4.21-27.0.4.ELsmp_Depend/mozilla/xpcom/threads/nsEventQueue.cpp,
line 421]
event_processor_callback() 
[/builds/tinderbox/Fx-Trunk/Linux_2.4.21-27.0.4.ELsmp_Depend/mozilla/widget/src/gtk2/nsAppShell.cpp,
line 67]

-----------------------------------

Incident ID: 6356444
Stack Signature	xforms.dll + 0x2d01 (0x03662d01) ddd736aa
Product ID	FirefoxTrunk
Build ID	2005053112
Trigger Time	2005-06-03 06:19:02.0
Platform	Win32
Operating System	Windows NT 5.0 build 2195
Module	xforms.dll + (00002d01)
URL visited	Calculate.xhtml from XForms project paje on mozilla.org
User Comments	trying to test XForms
Since Last Crash	17030 sec
Total Uptime	17030 sec
Trigger Reason	Access violation
Source File, Line No.	N/A
Stack Trace 	
xforms.dll + 0x2d01 (0x03662d01)
xforms.dll + 0x2c81 (0x03662c81)
xforms.dll + 0x2d49 (0x03662d49)
nsGenericElement::AppendChildTo 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/content/base/src/nsGenericElement.cpp,
line 2735]
nsXMLContentSink::HandleStartElement 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/content/xml/document/src/nsXMLContentSink.cpp,
line 942]
nsExpatDriver::HandleStartElement 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/parser/htmlparser/src/nsExpatDriver.cpp,
line 374]
Driver_HandleStartElement 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/parser/htmlparser/src/nsExpatDriver.cpp,
line 86]
contentProcessor 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/parser/expat/lib/xmlparse.c,
line 1939]
prologProcessor 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/parser/expat/lib/xmlparse.c,
line 3610]
prologInitProcessor 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/parser/expat/lib/xmlparse.c,
line 3441]
nsExpatDriver::ParseBuffer 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/parser/htmlparser/src/nsExpatDriver.cpp,
line 822]
nsExpatDriver::ConsumeToken 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/parser/htmlparser/src/nsExpatDriver.cpp,
line 945]
nsParser::Tokenize 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/parser/htmlparser/src/nsParser.cpp,
line 2775]

Comment 1

[aaronr]

I tried to recreate on XP and Windows 2000 by downloading the 1.1 alpha and then
the xforms preview .xpi.  I didn't get a crash but I did get a hang trying to
load the calculator sample.  I then uninstalled the xforms extension and
installed the latest nightly and got the same problem.  However, if I build the
debug firefox 1.1 alpha complete with the xforms code and run it from
mozilla/objdbg/dist/bin, then XForms loads the calculator just fine.  Looks like
it might be an extensions problem again?

I'll look at it tomorrow more.

Comment 2

[Allan Beaufour]

(In reply to comment #0)
> The stack signatures aren't very helpful, but there are enough of these crashes
> with Deer Park Alpha 1 to make this a topcrasher.  Most people are crashing
> testing xforms samples.

Good news is that people is using it :-)

> libxforms.so crashes (Linux) can be found here:

And that's the bad news... I cannot recreate it myself with the official DPa1
using Linux :-(

I wish the stack signatures were better.

Comment 3

[aaronr]

I think what probably happened is that people are using a version of the XForms
processor that isn't meant to run with the alpha.  Core changes like in XTF,
layout, etc. over time cause incompatibilities.  The .xpi that was produced with
the alpha works with the alpha and the latest nightly .xpi works with the latest
nightly browser.  The proper version of the XForms .xpi to use with the Deer
Park alpha is from:
ftp://ftp.mozilla.org/pub/mozilla.org/firefox/nightly/2005-05-31-13-trunk.  It
works fine with my Deer Park Alpha install, at least.