29757 - Crash when clicking in any text-entry area

Status: VERIFIED FIXED

(Core :: DOM: Editor, defect, P3)

Description

[handel]

Using LinuxPPC, kernel 2.2.14, glibc-2.1.3-4b, gcc-2.95.2-1i

If you click in any text-entry area, Mozilla quits completely.  Does not happen
with Macintosh version.

Comment 1

[handel]

strace output here:
Document file:///home/httpd/html/cache/pete.html loaded successfully
Document: Done (2.932 secs)
Mouse down
WEBSHELL+ = 4
.//run-mozilla.sh: line 29:   615 Segmentation fault      $prog ${1+"$@"}
[WIFEXITED(s) && WEXITSTATUS(s) == 0], 0, NULL) = 611
SYS_174(0, 0x7ffff658, 0x7ffff6d8, 0x8, 0x20) = 0
SYS_174(0x2, 0x7ffff6d8, 0, 0x8, 0x1)   = 0
SYS_174(0, 0x7ffff678, 0x7ffff6f8, 0x8, 0x20) = 0
SYS_174(0x2, 0x7ffff6f8, 0, 0x8, 0xc)   = 0
SYS_174(0x2, 0x7ffff828, 0, 0x8, 0xc)   = 0
--- SIGCHLD (Child exited) ---
wait4(-1, 0x7ffff3e8, WNOHANG, NULL)    = -1 ECHILD (No child processes)
SYS_173(0x2, 0x7ffff508, 0x7ffff598, 0x8, 0x20) = 0
SYS_174(0, 0, 0x18cc6d8, 0x8, 0xc)      = 0
SYS_174(0, 0x7fffef98, 0x7ffff018, 0x8, 0x20) = 0
SYS_174(0x2, 0x7ffff018, 0, 0x8, 0x20)  = 0
SYS_174(0, 0x7fffefb8, 0x7ffff038, 0x8, 0x20) = 0
SYS_174(0x2, 0x7ffff038, 0, 0x8, 0x20)  = 0
read(3, "", 2093)                       = 0
munmap(0x30015000, 4096)                = 0
_exit(0)                                = ?

Comment 2

[handel]

This does not happen with M14.

Comment 3

[Asa Dotzler [:asa]]

[e-mail], which build did it _not_ work on.  Is this something that is
fixed since you tested it or something that has regressed since M14?

Comment 4

[handel]

The crash started happening about a week ago, and is still happening on Today's

6am CVS-updated build.

Comment 5

[Christine Begle]

since you';re building it, would you provide a stack trace?  thanks

Comment 6

[handel]

Program received signal SIGSEGV, Segmentation fault.
0x0 in ?? ()
(gdb) bt
#0  0x0 in ?? ()
#1  0xfebea7c in nsCOMPtr_base::~nsCOMPtr_base ()
   from /mnt/moz/moz-mecompiled/mozilla/dist/lib/libxpcom.so
#2  0xe3153e4 in _SDA_BASE_ ()
   from /mnt/moz/moz-mecompiled/mozilla/dist/bin/components/libender.so
#3  0xe315358 in _SDA_BASE_ ()
   from /mnt/moz/moz-mecompiled/mozilla/dist/bin/components/libender.so
#4  0xe314f2c in _SDA_BASE_ ()
   from /mnt/moz/moz-mecompiled/mozilla/dist/bin/components/libender.so
#5  0xe32536c in NSGetModule ()
   from /mnt/moz/moz-mecompiled/mozilla/dist/bin/components/libender.so
#6  0xe32047c in NSGetModule ()
   from /mnt/moz/moz-mecompiled/mozilla/dist/bin/components/libender.so
#7  0xe325010 in NSGetModule ()
   from /mnt/moz/moz-mecompiled/mozilla/dist/bin/components/libender.so
#8  0xe321180 in NSGetModule ()
   from /mnt/moz/moz-mecompiled/mozilla/dist/bin/components/libender.so
#9  0xe32004c in NSGetModule ()
   from /mnt/moz/moz-mecompiled/mozilla/dist/bin/components/libender.so
#10 0xe33e04c in NSGetModule ()
   from /mnt/moz/moz-mecompiled/mozilla/dist/bin/components/libender.so
#11 0xe3738dc in NSGetModule ()
   from /mnt/moz/moz-mecompiled/mozilla/dist/bin/components/libender.so
---Type <return> to continue, or q <return> to quit---
#12 0xea24100 in NSGetModule ()
   from /mnt/moz/moz-mecompiled/mozilla/dist/bin/components/libraptorhtml.so
#13 0xea22cdc in NSGetModule ()
   from /mnt/moz/moz-mecompiled/mozilla/dist/bin/components/libraptorhtml.so
#14 0xea28c58 in NSGetModule ()
   from /mnt/moz/moz-mecompiled/mozilla/dist/bin/components/libraptorhtml.so
#15 0xee8a638 in nsWebShell::OnEndDocumentLoad ()
   from /mnt/moz/moz-mecompiled/mozilla/dist/lib/libraptorwebwidget.so
#16 0xee8c6b0 in nsWebShell::SetDocument ()
   from /mnt/moz/moz-mecompiled/mozilla/dist/lib/libraptorwebwidget.so
#17 0xea1f3e8 in NSGetModule ()
   from /mnt/moz/moz-mecompiled/mozilla/dist/bin/components/libraptorhtml.so
#18 0xea1d964 in NSGetModule ()
   from /mnt/moz/moz-mecompiled/mozilla/dist/bin/components/libraptorhtml.so
#19 0xe9775b4 in NSGetModule ()
   from /mnt/moz/moz-mecompiled/mozilla/dist/bin/components/libraptorhtml.so
#20 0xe632eb0 in _SDA_BASE_ ()
   from /mnt/moz/moz-mecompiled/mozilla/dist/bin/components/libraptorview.so
#21 0xe63f38c in _SDA_BASE_ ()
   from /mnt/moz/moz-mecompiled/mozilla/dist/bin/components/libraptorview.so
#22 0xe634078 in _SDA_BASE_ ()
   from /mnt/moz/moz-mecompiled/mozilla/dist/bin/components/libraptorview.so
#23 0xf64b114 in nsWidget::DispatchEvent ()
---Type <return> to continue, or q <return> to quit---
   from /mnt/moz/moz-mecompiled/mozilla/dist/lib/libwidget_gtk.so
#24 0xf64881c in nsWidget::DispatchMouseEvent ()
   from /mnt/moz/moz-mecompiled/mozilla/dist/lib/libwidget_gtk.so
#25 0xf648dec in nsWidget::OnButtonPressSignal ()
   from /mnt/moz/moz-mecompiled/mozilla/dist/lib/libwidget_gtk.so
#26 0xf64ed6c in nsWindow::HandleGDKEvent ()
   from /mnt/moz/moz-mecompiled/mozilla/dist/lib/libwidget_gtk.so
#27 0xf63caa4 in handle_gdk_event ()
   from /mnt/moz/moz-mecompiled/mozilla/dist/lib/libwidget_gtk.so
#28 0xf359334 in gdk_event_dispatch () from /usr/local/lib/libgdk-1.2.so.0
#29 0xf27f6bc in g_main_dispatch () from /usr/local/lib/libglib-1.2.so.0
#30 0xf27fd44 in g_main_iterate () from /usr/local/lib/libglib-1.2.so.0
#31 0xf280ae0 in g_main_run () from /usr/local/lib/libglib-1.2.so.0
#32 0xf4bbc18 in gtk_main () from /usr/local/lib/libgtk-1.2.so.0
#33 0xf6322a4 in nsAppShell::Run ()
   from /mnt/moz/moz-mecompiled/mozilla/dist/lib/libwidget_gtk.so
#34 0xf84d060 in _SDA_BASE_ ()
   from /mnt/moz/moz-mecompiled/mozilla/dist/bin/components/libnsappshell.so
#35 0x10002f50 in _SDA_BASE_ ()
#36 0x10003344 in _SDA_BASE_ ()
#37 0xfab667c in __libc_start_main (argc=0, argv=0x10016970, envp=0x7ffff830, 
    auxvec=0x0, rtld_fini=0x10533f70, stinfo=0x7ffff7c8, stack_on_entry=0x40)
    at ../sysdeps/powerpc/elf/libc-start.c:106
(gdb) 

Comment 7

[Christine Begle]

updating component.  i could not reproduce this, but maybe someone in the editor 
group knows more about this.

Comment 8

[Kevin Puetz]

could be a distribution/library/compiler issue?  I built the M14 binary and I
built it on Debian/PowerPC. To avoid some library problems I had with M13, I
statically linked libelf (at least, if mozilla still uses it it ended up
statically linked, I dumped the .so). I also built with gcc-2.95.2, though.

Comment 9

[handel]

This bug has been fixed as of CVS this morning!!  (3/23/00)

Comment 10

[Kathleen :Brade]

resolving as fixed per comments by bug author

Comment 11

[rubydoo123]

setting milestone, this needs to be verified

Comment 12

[sujay]

verified in 4/6 build.