302982 - Firefox crashes whilst browsing sportsline [@ js_map_atom]

Status: RESOLVED WORKSFORME

(Core :: JavaScript Engine, defect)

Description

[jeff]

User-Agent:       Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322)
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7.10) Gecko/20050716 Firefox/1.0.6

POP UP:
The instruction at "0x6008b08d" referenced memory at "0x0005000d". The memory 
could not be "read"
Bla Bla click OK or Cancel (totally crashes firefox)



Reproducible: Always

Steps to Reproduce:
1. Go here http://www.sportsline.com/mlb or 
http://www.sportsline.com/mlb/scoreboard
2. Browse around not alway the same link but always the same site.

3. POP up with: The instruction at "0x6008b08d" referenced memory 
at "0x0005000d". The memory could not be "read"

Actual Results:  
kills browser and everything open.

Comment 1

[jeff]

Attachment: DR.Watson info

Event Type:	Information
Event Source:	Application Popup
Event Category: None
Event ID:	26
Date:		8-1-2005
Time:		12:52:27 PM
User:		N/A
Computer:	AMD_3200
Description:
Application popup: firefox.exe - Application Error : The instruction at
"0x6008b08d" referenced memory at "0x0005000d". The memory could not be "read".


Click on OK to terminate the program
Click on CANCEL to debug the program

Comment 2

[Jaime Mitchell (use [e-mail] for email)]

Can you use the instructions at http://kb.mozillazine.org/Talkback to install
the talkback client then copy the incident ID from a crash to this bug (get this
from the /components/talkback.exe program in the firefox directory)

For future reference the Dr Watson info isn't of any use when trying to fix
crashes so theres no need to attach it.

Comment 3

[J.D. Myers]

I can confirm this. I've had Firefox crash on sportsline.com four times today.
Not always at the mlb area reported, but also in the nhl area so my guess is it
is universal to sportsline.com. It's not specifice to Windows either. I am
running Mac 0S 10.4.2 and am seeing this. I've sent in a talkback each time, see
Incident ID's: TB8252265X, TB8252609X, TB8256197Y, and TB8256324Y

Comment 4

[timeless]

Incident ID: 8252265 
Stack Signature js_map_atom() b6da0791 
Product ID Firefox10 
Build ID 2005071604 
Trigger Time 2005-08-10 09:14:41.0 
Platform MacOSX 
Operating System Darwin 8.2.0 
Module libmozjs.dylib.1.0.0 + (0000c7d4) 
URL visited cbs.sportsline.com 
User Comments clicked nhl link 
Since Last Crash 41330 sec 
Total Uptime 41330 sec 
Trigger Reason SIGSEGV: Segmentation Violation: (signal 11) 
Source File, Line No. /builds/tinderbox/Fx-
Aviary1.0.1/Darwin_7.9.0_Depend/mozilla/js/src/jsatom.c, line 866 
Stack Trace  

js_map_atom()  [/builds/tinderbox/Fx-
Aviary1.0.1/Darwin_7.9.0_Depend/mozilla/js/src/jsatom.c, line 866]
JS_HashTableEnumerateEntries()  [/builds/tinderbox/Fx-
Aviary1.0.1/Darwin_7.9.0_Depend/mozilla/js/src/jshash.c, line 372]
js_NewScriptFromCG()  [/builds/tinderbox/Fx-
Aviary1.0.1/Darwin_7.9.0_Depend/mozilla/js/src/jsscript.c, line 1101]
CompileTokenStream()  [/builds/tinderbox/Fx-
Aviary1.0.1/Darwin_7.9.0_Depend/mozilla/js/src/jsapi.c, line 3115]
JS_CompileUCScriptForPrincipals()  [/builds/tinderbox/Fx-
Aviary1.0.1/Darwin_7.9.0_Depend/mozilla/js/src/jsapi.c, line 3194]
JS_EvaluateUCScriptForPrincipals()  [/builds/tinderbox/Fx-
Aviary1.0.1/Darwin_7.9.0_Depend/mozilla/js/src/jsapi.c, line 3646]
nsJSContext::EvaluateString()  [/builds/tinderbox/Fx-
Aviary1.0.1/Darwin_7.9.0_Depend/mozilla/dom/src/base/nsJSEnvironment.cpp, line 
141]
nsScriptLoader::EvaluateScript()  [/builds/tinderbox/Fx-
Aviary1.0.1/Darwin_7.9.0_Depend/mozilla/content/base/src/nsScriptLoader.cpp, 
line 692]
nsScriptLoader::ProcessRequest()  [/builds/tinderbox/Fx-
Aviary1.0.1/Darwin_7.9.0_Depend/mozilla/content/base/src/nsScriptLoader.cpp, 
line 582]
nsScriptLoader::OnStreamComplete()  [/builds/tinderbox/Fx-
Aviary1.0.1/Darwin_7.9.0_Depend/mozilla/content/base/src/nsScriptLoader.cpp, 
line 905]
nsStreamLoader::OnStopRequest()  [/builds/tinderbox/Fx-
Aviary1.0.1/Darwin_7.9.0_Depend/mozilla/netwerk/base/src/nsStreamLoader.cpp, 
line 607]
nsHttpChannel::OnStopRequest()  [/builds/tinderbox/Fx-
Aviary1.0.1/Darwin_7.9.0_Depend/mozilla/netwerk/protocol/http/src/nsHttpChannel.
cpp, line 607]
nsInputStreamPump::OnStateStop()  [/builds/tinderbox/Fx-
Aviary1.0.1/Darwin_7.9.0_Depend/mozilla/netwerk/base/src/nsInputStreamPump.cpp, 
line 607]
nsInputStreamPump::OnInputStreamReady()  [/builds/tinderbox/Fx-
Aviary1.0.1/Darwin_7.9.0_Depend/mozilla/netwerk/base/src/nsInputStreamPump.cpp, 
line 339]
nsInputStreamReadyEvent::EventHandler()
PL_HandleEvent()  [/builds/tinderbox/Fx-
Aviary1.0.1/Darwin_7.9.0_Depend/mozilla/xpcom/threads/plevent.c, line 674]
PL_ProcessPendingEvents()  [/builds/tinderbox/Fx-
Aviary1.0.1/Darwin_7.9.0_Depend/mozilla/xpcom/threads/plevent.c, line 608]
_md_EventReceiverProc()  [/builds/tinderbox/Fx-
Aviary1.0.1/Darwin_7.9.0_Depend/mozilla/xpcom/threads/plevent.c, line 1578]
HIToolbox.220.0.0 + 0x79f4 (0x931229f4)
HIToolbox.220.0.0 + 0x714c (0x9312214c)
HIToolbox.220.0.0 + 0x6fc8 (0x93121fc8)
HIToolbox.220.0.0 + 0xe30c (0x9312930c)
HIToolbox.220.0.0 + 0x7c44 (0x93122c44)
HIToolbox.220.0.0 + 0x714c (0x9312214c)
HIToolbox.220.0.0 + 0xded0 (0x93128ed0)
HIToolbox.220.0.0 + 0x4ee00 (0x93169e00)
HIToolbox.220.0.0 + 0xede04 (0x93208e04)
HIToolbox.220.0.0 + 0xeda58 (0x93208a58)
HIToolbox.220.0.0 + 0xed8b0 (0x932088b0)
HIToolbox.220.0.0 + 0xed63c (0x9320863c)
HIToolbox.220.0.0 + 0xed59c (0x9320859c)
nsMacMessagePump::GetEvent()  [/builds/tinderbox/Fx-
Aviary1.0.1/Darwin_7.9.0_Depend/mozilla/widget/src/mac/nsMacMessagePump.cpp, 
line 407]
nsMacMessagePump::DoMessagePump()  [/builds/tinderbox/Fx-
Aviary1.0.1/Darwin_7.9.0_Depend/mozilla/widget/src/mac/nsMacMessagePump.cpp, 
line 312]
nsAppShell::Run()  [/builds/tinderbox/Fx-
Aviary1.0.1/Darwin_7.9.0_Depend/mozilla/widget/src/mac/nsAppShell.cpp, line 114]
xre_main()  [/builds/tinderbox/Fx-
Aviary1.0.1/Darwin_7.9.0_Depend/mozilla/toolkit/xre/nsAppRunner.cpp, line 710]
_start()   start()

TB8252609X is java

Comment 5

[Adam Guthrie]

*** Bug 311713 has been marked as a duplicate of this bug. ***

Comment 6

[guanxi]

Confirming, though someone should test it on a nightly.

Here's some sportsline generated talkback IDs of my own (using FF 1.0.7 on WinXP)
TB10468052Q
TB10292428Z
TB9754572X

OS -> All
Severity -> Critical (crashes)

Comment 7

[Adam Guthrie]

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9a1) Gecko/20051011
Firefox/1.6a1 ID:2005101104

This works for me, and there are no crashes in 1.5 b1, 1.5 b2, or trunk on
talkback, so I'm resolving this as WFM.