304796 - crash on bluesecurity page

Status: RESOLVED DUPLICATE of bug 228557

(Firefox :: General, defect)

Description

[Patrick]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.10) Gecko/20050716 Firefox/1.0.6
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.10) Gecko/20050716 Firefox/1.0.6

Firefox crashes on http://www.bluesecurity.com/community/gallery.asp

Reproducible: Always

Steps to Reproduce:

Comment 1

[Patrick]

wfm, latest trunk nightly OSX 10.4.2.

Reporter, your firefox is in development terms quite old. Very likely this has
already been fixed in more recent builds. Can you try a recent nightly?

Comment 2

[u63580]

WFM, Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9a1) Gecko/20050813
Firefox/1.0+

Comment 3

[Patrick]

This bug doesn't occur with Flashblock uninstalled (but does occur with it just
disabled).

Now, I have my chrome setup corrupted as I didn't see the warning before trying
to upgrade Flashblock.

Philip, would you mind confirming this is the same issue?

TIA!

Patrick

---

From: http://bugzilla.mozdev.org/show_bug.cgi?id=10154
------- Additional Comment #1 From Philip Chee  2005-05-07 02:32  [reply] -------
This is the stack trace of the crash:
<http://talkback-public.mozilla.org/talkback/fastfind.jsp?search=2&type=iid&id=TB5639783Z>

This is the Mozilla/Firefox bug about the problem:
<https://bugzilla.mozilla.org/show_bug.cgi?id=228557>

This Gecko reflow bug is fixed on the trunk (upcoming Firefox 1.1).
I've just tested with a recent firefox trunk build and I can't get this page
to crash firefox.

Comment 4

[Philip Chee]

Talkback ID: TB8449206Q

Sure looks like a duplicate of bug 228557.
(by the way can somebody with the right privs reclose bug 228557?)

The stacktrace is here:
<http://talkback-public.mozilla.org/talkback/fastfind.jsp?search=2&type=iid&id=TB8449206Q>

Stack Signature	 nsHTMLReflowState::Init cadce0b1
Product ID	Firefox10
Build ID	2005071605
Trigger Time	2005-08-17 02:24:17.0
Platform	Win32
Operating System	Windows NT 5.1 build 2600
Module	firefox.exe + (0027bee7)
URL visited	http://www.bluesecurity.com/community/gallery.asp
User Comments	flashblock? https://bugzilla.mozilla.org/show_bug.cgi?id=304796
Since Last Crash	3040 sec
Total Uptime	44195 sec
Trigger Reason	Access violation
Source File, Line No.
c:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.2_Depend/mozilla/layout/html/base/src/nsHTMLReflowState.cpp,
line 326
Stack Trace 	
nsHTMLReflowState::Init 
[c:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.2_Depend/mozilla/layout/html/base/src/nsHTMLReflowState.cpp,
line 326]
nsHTMLReflowState::nsHTMLReflowState 
[c:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.2_Depend/mozilla/layout/html/base/src/nsHTMLReflowState.cpp,
line 221]
nsTableCellFrame::Reflow 
[c:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.2_Depend/mozilla/layout/html/table/src/nsTableCellFrame.cpp,
line 871]
nsContainerFrame::ReflowChild 
[c:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.2_Depend/mozilla/layout/html/base/src/nsContainerFrame.cpp,
line 982]
nsTableRowFrame::IR_TargetIsChild 
[c:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.2_Depend/mozilla/layout/html/table/src/nsTableRowFrame.cpp,
line 1229]
nsTableRowFrame::IncrementalReflow 
[c:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.2_Depend/mozilla/layout/html/table/src/nsTableRowFrame.cpp,
line 1113]
nsTableRowFrame::Reflow 
[c:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.2_Depend/mozilla/layout/html/table/src/nsTableRowFrame.cpp,
line 1401]
nsContainerFrame::ReflowChild 
[c:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.2_Depend/mozilla/layout/html/base/src/nsContainerFrame.cpp,
line 982]
nsTableRowGroupFrame::IR_TargetIsChild 
[c:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.2_Depend/mozilla/layout/html/table/src/nsTableRowGroupFrame.cpp,
line 1697]
nsTableRowGroupFrame::IncrementalReflow 
[c:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.2_Depend/mozilla/layout/html/table/src/nsTableRowGroupFrame.cpp,
line 1375]
nsTableRowGroupFrame::Reflow 
[c:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.2_Depend/mozilla/layout/html/table/src/nsTableRowGroupFrame.cpp,
line 1281]
nsContainerFrame::ReflowChild 
[c:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.2_Depend/mozilla/layout/html/base/src/nsContainerFrame.cpp,
line 982]
nsTableFrame::IR_TargetIsChild 
[c:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.2_Depend/mozilla/layout/html/table/src/nsTableFrame.cpp,
line 2978]
nsTableFrame::IncrementalReflow 
[c:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.2_Depend/mozilla/layout/html/table/src/nsTableFrame.cpp,
line 2687]
nsTableFrame::Reflow 
[c:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.2_Depend/mozilla/layout/html/table/src/nsTableFrame.cpp,
line 1953]
nsContainerFrame::ReflowChild 
[c:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.2_Depend/mozilla/layout/html/base/src/nsContainerFrame.cpp,
line 982]
nsTableOuterFrame::OuterReflowChild 
[c:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.2_Depend/mozilla/layout/html/table/src/nsTableOuterFrame.cpp,
line 1335]
nsTableOuterFrame::IR_InnerTableReflow 
[c:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.2_Depend/mozilla/layout/html/table/src/nsTableOuterFrame.cpp,
line 1695]
...etc...

Comment 5

[timeless]

*** This bug has been marked as a duplicate of 228557 ***