29874 - Link crashes browser; linked page does not

Status: VERIFIED WORKSFORME

(Core :: Security: CAPS, defect, P2)

Description

[Brad Behm]

At the above URL ( http://www.prs.net/midi.html#index ), clicking on the link
'Mozart' will crash my Linux build 2000022916 browser.

Going to either http://www.prs.net/mozart.html (the linked document), or saving
the link to a disk and opening the page does not cause the crash.

The link is a standard HTML link. The code is as follows : "<a
HREF="mozart.html">Mozart</a>;"

This bug is, for me, 100% reproducable.

Comment 1

[Doron Rosenberg (IBM)]

can see this, accepting bug

Comment 2

[Gervase Markham [:gerv]]

[e-mail] or [e-mail] - can either of you see this problem in 
a recent build of Mozilla?

Gerv

Comment 3

[Brad Behm]

I dunno. I can't get mozilla to do anything but segfault right now. I'll try
with one of the older nightlies.

Comment 4

[Doron Rosenberg (IBM)]

I am not seeing this with m16 2000041708.

reporter - can you confirm?
thanks

Comment 5

[Brad Behm]

I'm no longer seeing it either. I'm marking it FIXED.

Comment 6

[leger]

Adding crash keyword

Comment 7

[Chris Petersen]

I'm not able to reproduce this problem on either Win 32 or Linux builds 
(2000052508). However attempting to load this url on the Mac build (2000052508) 
will causes a user break in Macsbug.

User break at 1C3D2840 MRJContext::processAppletTag()+00814


For this reason, I 'm reopening this bug.

Comment 8

[Chris Petersen]

Attachment: Here is the stdlog file created by Macsbug

Comment 9

[rickg]

Waqar: Please take a look at this mac related issue. Andrei may be of help to 
you here. THanks.

Comment 10

[waqar]

This bug has been marked "future" because the original netscape engineer working
on this is over-burdened. If you feel this is an error, that you or another
known resource will be working on this bug,or if it blocks your work in some way
-- please attach your concern to the bug for reconsideration.

Comment 11

[waqar]

This bug has been marked "future" because the original netscape engineer
working on this is over-burdened. If you feel this is an error, that you or
another known resource will be working on this bug,or if it blocks your
work in some way -- please attach your concern to the bug for reconsideration.

Comment 12

[waqar]

###!!! ASSERTION: Setting window manager port font: '!CurrentPortIsWMPort()',
file nsGfxUtils.h, line 114
###!!! ASSERTION: Setting window manager port font: '!CurrentPortIsWMPort()',
file nsGfxUtils.h, line 114
###!!! ASSERTION: node in map twice: '(node->mContent != aNode->mContent) ||
((node->mContent == nsnull) && (node->mStyle != aNode->mStyle))', file
nsFrameManager.cpp, line 1907
###!!! ASSERTION: node in map twice: '(node->mContent != aNode->mContent) ||
((node->mContent == nsnull) && (node->mStyle != aNode->mStyle))', file
nsFrameManager.cpp, line 1907
###!!! ASSERTION: node in map twice: '(node->mContent != aNode->mContent) ||
((node->mContent == nsnull) && (node->mStyle != aNode->mStyle))', file
nsFrameManager.cpp, line 1907

Comment 13

[gerardok]

massive update for QA contact.

Comment 14

[Kevin McCluskey (gone)]

Works fine in current build.
Marking WORKSFORME.

Comment 15

[Kevin McCluskey (gone)]

Re-opening. Closed it too soon. It is still crashing.

Comment 16

[Chris Petersen]

This is still happening on the latest Mac build (Sept 12th)

1) Load URL.

2) Click on Mozart link below bookshelf image.

3) Url attempts to load then crashes.

Comment 17

[Kevin McCluskey (gone)]

Works fine on WINNT. On Linux, after it loads it is very unresponsive. Scrolling 
is extremely slow. Probably causes by timer event priority problem. 

Comment 18

[Syd Logan]

Attachment: StdLog from when i tested this.

Comment 19

[Syd Logan]

Crashing in nsScriptSecurityManager::CanGetProperty, which is being called at a 
high rate for a couple of properties while the page is visible.

Comment 20

[Kevin McCluskey (gone)]

Reassigning to security.

Comment 21

[Mitchell Stoltz (not reading bugmail)]

I'll take a look.

Comment 22

[gogden]

that link works for me 2000092716 mac g4 os9

Comment 23

[Doron Rosenberg (IBM)]

cc asa, who has mac access

Comment 24

[Asa Dotzler [:asa]]

not seeing this with 100208 mozilla trunk macInstaller build.

Comment 25

[Mitchell Stoltz (not reading bugmail)]

Works for me on Mac and Linux, marking WORKSFORME.

Comment 26

[John Unruh]

Verified. Worksforme on Mac, Linux and Win98 branch 10/3 builds.