29858 - File type of */* crashes Mozilla.

Status: VERIFIED FIXED

(Core :: Networking, defect, P3)

Description

[Joseph Elwell]

Using M14 load http://channel.web.aol.com/preview.cdf
This crashes the M14 release: winNT build 2000022820.
Loading in N4.61 gives a popup that says, "You have started to download a file 
of type */*" etc...

Expected result: no crash.
cbegle was kind enough to fetch my stack trace from my talkbalk report:
Sorry about the sucky formatting.  


 Trigger Type:  Program Crash 
 Trigger Reason:  Stack overflow 
 Thread ID:   

 Call Stack:    (Signature = Compare2To2 a3efe715)      
   Compare2To2               
[d:\builds\seamonkey\mozilla\xpcom\ds\bufferRoutines.h, line 508]
   nsStr::Compare 
            [d:\builds\seamonkey\mozilla\xpcom\ds\nsStr.cpp, line 612]  
   nsString::Equals 
[d:\builds\seamonkey\mozilla\xpcom\ds\nsString2.cpp, line 1889]
   nsString::operator==      
[d:\builds\seamonkey\mozilla\xpcom\ds\nsString2.cpp, line 1833]
   nsStringKey::Equals  
[d:\builds\seamonkey\mozilla\xpcom\ds\nsHashtable.cpp, line 278]
   _hashKeyCompare           
[d:\builds\seamonkey\mozilla\xpcom\ds\nsHashtable.cpp, line 38]
   PL_HashTableRawLookup 
     [plhash.c, line 190]     
   PL_HashTableLookup 
                              [plhash.c, line 345]
   nsHashtable::Get          
[d:\builds\seamonkey\mozilla\xpcom\ds\nsHashtable.cpp, line 170]
   nsStr::Append 
             [d:\builds\seamonkey\mozilla\xpcom\ds\nsStr.cpp, line 173]
   _pl_SetupNativeNotifier

Comment 1

[Warren Harris]

This seems bad, since there are sites out there that will return this content 
type (including aol.com!). Jud, can you investigate, although looking at the 
stack, maybe it's an nsString problem.

Comment 2

[Joseph Elwell]

I made a test case at my web site.
Here's what the perl script code is that crashes mozilla(Note: adding content
after the initial print still causes a crash):

#!/usr/bin/perl
print "Content-type: */*\n\n";

Comment 3

[Joseph Elwell]

I forgot to add the URL of the testcase: it's http://www.singleclick.com/test1.cgi

Also I have a Talkback incident report TB6461766Q, if anyone can't reproduce.

Comment 4

[Ryan Massie]

On the singleclick link:
BuildID: 2000030516 (Windows 98) - crash 
BuildID: 2000030709 (Linux) - crash

win98's dump:
MOZILLA caused a stack fault in module XPCOM.DLL at 0167:60c6090a.
Registers:
EAX=00000037 CS=0167 EIP=60c6090a EFLGS=00010246
EBX=ffffffff SS=016f ESP=00592000 EBP=0059200c
ECX=00000003 DS=016f ESI=005920cc FS=2347
EDX=00000001 ES=016f EDI=03345d58 GS=0000
Bytes at CS:EIP:
e8 61 11 00 00 83 c4 0c 5d c3 55 8b ec ff 75 10 
Stack dump:
03345d6c 005920e0 00000037 007b5c20 60c615c7 03345d6c 005920e0 00000037 00000000 
006b9358 03343080 006b9358 60c57789 03345d58 005920cc ffffffff 

Comment 5

[Joseph Elwell]

Marking OS to All as per ryanm's comment.

Comment 6

[Phil Peterson]

PDT- for channel definition files, but if there's a more widespread problem, 
please remove PDT- for reevaluation.

Comment 7

[Judson Valeski]

wicked bug. we're spinning the uri loader into oblivion for some reason.

Comment 8

[Judson Valeski]

fixed

Comment 9

[Joseph Elwell]

The test link and the URL both cause Linux build 2000040209 to freeze up.

Comment 10

[Judson Valeski]

this is a new bug, 34295

Comment 11

[Sean Richardson]

*** Bug 31068 has been marked as a duplicate of this bug. ***

Comment 12

[Tom Everingham]

verified on NT 2000042009