302300 - browser crashes with memory fault when javascript enabled

Status: RESOLVED DUPLICATE of bug 301841

(Firefox :: General, defect)

Description

[jamie]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.8) Gecko/20050517 Firefox/1.0.4 (Debian package 1.0.4-2)
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.8) Gecko/20050517 Firefox/1.0.4 (Debian package 1.0.4-2)

Go to the above link with javascript enabled, and the browser disappears.  Works
with safe-mode and with javascript disabled.  No plugins or extensions installed.

Reproducible: Always

Steps to Reproduce:




getting a backtrace with 'firefox -debug'

#0  0x40033bdf in js_GetAtom () from /usr/lib/mozilla-firefox/libmozjs.so
#1  0x40051344 in JS_HashTableEnumerateEntries ()
   from /usr/lib/mozilla-firefox/libmozjs.so
#2  0x40033cce in js_InitAtomMap () from /usr/lib/mozilla-firefox/libmozjs.so
#3  0x400852bd in js_NewScriptFromCG ()
   from /usr/lib/mozilla-firefox/libmozjs.so
#4  0x4002cdaf in JS_DefineUCFunction ()
   from /usr/lib/mozilla-firefox/libmozjs.so
#5  0x4002cfa1 in JS_CompileUCScriptForPrincipals ()
   from /usr/lib/mozilla-firefox/libmozjs.so
#6  0x4002dcdd in JS_EvaluateUCScriptForPrincipals ()
   from /usr/lib/mozilla-firefox/libmozjs.so
#7  0x088bdee2 in nsJSContext::EvaluateString ()
#8  0x08693ffa in nsScriptLoader::EvaluateScript ()
#9  0x08693c72 in nsScriptLoader::ProcessRequest ()
#10 0x08694385 in nsScriptLoader::ProcessPendingReqests ()
#11 0x083d9c95 in nsStreamLoader::Create ()
#12 0x083d95c2 in nsServerSocketEvent::EventCleanup ()
#13 0x0842961b in nsHttpChannel::GetCurrentPath ()
#14 0x083c7c6d in nsInputStreamPump::OnStateStop ()
#15 0x083c79f5 in nsInputStreamPump::EnsureWaiting ()
#16 0x40102c11 in nsInputStreamReadyEvent::EventHandler ()
   from /usr/lib/mozilla-firefox/libxpcom.so
#17 0x40119237 in PL_HandleEvent () from /usr/lib/mozilla-firefox/libxpcom.so
#18 0x40119164 in PL_ProcessPendingEvents ()
   from /usr/lib/mozilla-firefox/libxpcom.so
#19 0x4011adf9 in nsEventQueueImpl::NotifyObservers ()
   from /usr/lib/mozilla-firefox/libxpcom.so
#20 0x085693b5 in nsBaseWidget::FreeNativeData ()
#21 0x40612dbf in g_vasprintf () from /usr/lib/libglib-2.0.so.0
#22 0x405ed582 in g_main_depth () from /usr/lib/libglib-2.0.so.0
#23 0x405ee5f8 in g_main_context_dispatch () from /usr/lib/libglib-2.0.so.0
#24 0x405ee930 in g_main_context_dispatch () from /usr/lib/libglib-2.0.so.0
#25 0x405eeed3 in g_main_loop_run () from /usr/lib/libglib-2.0.so.0
#26 0x402d3bb3 in gtk_main () from /usr/lib/libgtk-x11-2.0.so.0
#27 0x085696f8 in nsAppShell::ReleaseGlobals ()
#28 0x08a0f844 in nsAppShellService::AttemptingQuit ()
#29 0x08c148a0 in xre_main ()
#30 0x0834b1d4 in main ()

Comment 1

[timeless]

*** This bug has been marked as a duplicate of 301841 ***

Comment 2

[jamie]

Attachment: problem page using 'Save Page as'

Because the site may change the page, I did a 'Save Page as' (from another
browser-- galeon) and verfied it still crashes firefox.

Comment 3

[jamie]

Site works on 1.5.0.12 on Ubuntu Dapper.  I don't know when it started working, but it doesn't crash firefox anymore here.