300585 - crash when trying to load garbage.com

Status: RESOLVED DUPLICATE of bug 268157

(Firefox :: General, defect)

Description

[Panu Artimo]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8b3) Gecko/20050711 Firefox/1.0+
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8b3) Gecko/20050711 Firefox/1.0+

garbage.com crashes Deerpark 20050711 instantly.

The site sets/modifies couple of cookies and then browser is gone.

The site uses flash heavily, I try with safemode to check it's not extension
related.

Reproducible: Always

Steps to Reproduce:
1. type www.garbage.com in location bar, hit enter
2. accept couple of cookies if your settings require
3. watch browser crash without a trace

Actual Results:  
Hard (and very quick) crash

Expected Results:  
Load the flash ridden site

Comment 1

[Panu Artimo]

Ok, it works with safemode.

Sorry about the spam, I should have tested safemode before filing the bug.

What should I do to find out more what's causing the crash?

Comment 2

[José Jeria]

Try disabling one extension at the time and see which one is causing the crash

Comment 3

[Jaime Mitchell (use [e-mail] for email)]

Please provide a talkback ID for the crash.

Comment 4

[Will Hardy]

I think it is this sequence that causes the crash (try it by itself):

<OBJECT>
<EMBED TYPE="application/x-shockwave-flash">
</EMBED>
</OBJECT>

Disabling javascript makes the site work because this code is dynamically added
using javascript. The same thing happens on http://melbourneairport.com.au.

Comment 5

[Will Hardy]

This might be a duplicate of bug 265866 and 258497.

Comment 6

[Michael Stolovitzsky]

WFM Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.9a1) Gecko/20050826
Firefox/1.6a1

This seems unrelated to #265866 and #258497 as #265866 seems to be Linux
specific (flash plugin crashing the RENDER extension apparently)

Comment 7

[Michael Stolovitzsky]

WFM Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.8) Gecko/20050511
Firefox/1.0.4

Comment 8

[Tracy Walker [:tracy]]

WFM Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8b4) Gecko/20050909
Firefox/1.4

probably a dupe of another flash crasher

reporter, do you have up to date flash installed

Comment 9

[Panu Artimo]

My flash version according to about:plugins is Shockwave Flash 7.0 r19

And yes I'm still seeing it with Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US;
rv:1.8b4) Gecko/20050904 Firefox/1.0+ ID:2005090406

Talkback id: TB9265378G

Difference to earlier crash is that now I get a talkback report (it wasn't
working earlier for some reason)

I'll try disabling extensions later today.

Comment 10

[timeless]

doesn't look like flash

Incident ID: 9265378 
Stack Signature nsHTMLReflowState::ComputePadding 9f19c670 
Product ID Firefox15 
Build ID 2005090406 
Trigger Time 2005-09-12 00:47:02.0 
Platform Win32 
Operating System Windows NT 5.1 build 2600 
Module firefox.exe + (002112ac) 
URL visited  
User Comments tried to load garbage.com bug 300585 
Since Last Crash 254 sec 
Total Uptime 254 sec 
Trigger Reason Access violation 
Source File, Line No. c:/builds/tinderbox/Fx-
Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/generic/nsHTMLReflowState.cpp, line 
2439 
Stack Trace  

nsHTMLReflowState::ComputePadding  [c:/builds/tinderbox/Fx-
Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/generic/nsHTMLReflowState.cpp, line 
2439]
nsHTMLReflowState::InitConstraints  [c:/builds/tinderbox/Fx-
Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/generic/nsHTMLReflowState.cpp, line 
1758]
nsHTMLReflowState::Init  [c:/builds/tinderbox/Fx-
Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/generic/nsHTMLReflowState.cpp, line 
337]
nsHTMLReflowState::nsHTMLReflowState  [c:/builds/tinderbox/Fx-
Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/generic/nsHTMLReflowState.cpp, line 
214]
nsBlockFrame::ReflowFloat  [c:/builds/tinderbox/Fx-
Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/generic/nsBlockFrame.cpp, line 5873]
nsBlockReflowState::FlowAndPlaceFloat  [c:/builds/tinderbox/Fx-
Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/generic/nsBlockReflowState.cpp, line 
851]
nsBlockReflowState::AddFloat  [c:/builds/tinderbox/Fx-
Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/generic/nsBlockReflowState.cpp, line 
629]
nsLineLayout::ReflowFrame  [c:/builds/tinderbox/Fx-
Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/generic/nsLineLayout.cpp, line 1018]
nsBlockFrame::ReflowInlineFrame  [c:/builds/tinderbox/Fx-
Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/generic/nsBlockFrame.cpp, line 4187]
nsBlockFrame::DoReflowInlineFrames  [c:/builds/tinderbox/Fx-
Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/generic/nsBlockFrame.cpp, line 3840]
nsBlockFrame::ReflowInlineFrames  [c:/builds/tinderbox/Fx-
Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/generic/nsBlockFrame.cpp, line 3713]
nsBlockFrame::ReflowLine  [c:/builds/tinderbox/Fx-
Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/generic/nsBlockFrame.cpp, line 2707]
nsBlockFrame::ReflowDirtyLines  [c:/builds/tinderbox/Fx-
Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/generic/nsBlockFrame.cpp, line 2241]
nsBlockFrame::Reflow  [c:/builds/tinderbox/Fx-
Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/generic/nsBlockFrame.cpp, line 879]
nsBlockReflowContext::ReflowBlock  [c:/builds/tinderbox/Fx-
Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/generic/nsBlockReflowContext.cpp, 
line 606]
nsBlockFrame::ReflowBlockFrame  [c:/builds/tinderbox/Fx-
Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/generic/nsBlockFrame.cpp, line 3427]
nsBlockFrame::ReflowLine  [c:/builds/tinderbox/Fx-
Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/generic/nsBlockFrame.cpp, line 2588]
nsBlockFrame::ReflowDirtyLines  [c:/builds/tinderbox/Fx-
Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/generic/nsBlockFrame.cpp, line 2241]
nsBlockFrame::Reflow  [c:/builds/tinderbox/Fx-
Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/generic/nsBlockFrame.cpp, line 879]
nsContainerFrame::ReflowChild  [c:/builds/tinderbox/Fx-
Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/generic/nsContainerFrame.cpp, line 
904]
CanvasFrame::Reflow  [c:/builds/tinderbox/Fx-
Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/generic/nsHTMLFrame.cpp, line 522]
nsContainerFrame::ReflowChild  [c:/builds/tinderbox/Fx-
Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/generic/nsContainerFrame.cpp, line 
904]
nsHTMLScrollFrame::ReflowScrolledFrame  [c:/builds/tinderbox/Fx-
Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/generic/nsGfxScrollFrame.cpp, line 
520]
nsHTMLScrollFrame::ReflowContents  [c:/builds/tinderbox/Fx-
Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/generic/nsGfxScrollFrame.cpp, line 
568]
nsHTMLScrollFrame::Reflow  [c:/builds/tinderbox/Fx-
Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/generic/nsGfxScrollFrame.cpp, line 
760]
nsContainerFrame::ReflowChild  [c:/builds/tinderbox/Fx-
Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/generic/nsContainerFrame.cpp, line 
904]
ViewportFrame::Reflow  [c:/builds/tinderbox/Fx-
Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/generic/nsViewportFrame.cpp, line 
240]
IncrementalReflow::Dispatch  [c:/builds/tinderbox/Fx-
Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/base/nsPresShell.cpp, line 914]
PresShell::ProcessReflowCommands  [c:/builds/tinderbox/Fx-
Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/base/nsPresShell.cpp, line 6875]
ReflowEvent::HandleEvent  [c:/builds/tinderbox/Fx-
Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/base/nsPresShell.cpp, line 6701]
PL_HandleEvent  [c:/builds/tinderbox/Fx-
Mozilla1.8/WINNT_5.2_Depend/mozilla/xpcom/threads/plevent.c, line 689]
0x778b0c24
nsListBoxLayout::LayoutInternal  [c:/builds/tinderbox/Fx-
Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/xul/base/src/nsListBoxLayout.cpp, 
line 202]
0xffff5485

Comment 11

[timeless]

*** This bug has been marked as a duplicate of 268157 ***