30725 - Following specific link crashes browser.

Status: VERIFIED WORKSFORME

(SeaMonkey :: General, defect, P3)

Description

[Adam D. Moss]

From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; N; Linux 2.2.14 i686; en-US; m14)
BuildID:    2000022708

Following a specific sequence of
links causes Mozilla to exit.


Reproducible: Always
Steps to Reproduce:
1.Go to http://freshmeat.net
2.Enter 'sniff' in the search box, hit return
3.Click 'dsniff' at top of search results

Browser crashes.


Actual Results:



The browser crashes.


Expected Results:



Mozilla should have successfully loaded the
new page.

Comment 1

[Asa Dotzler [:asa]]

could not reproduce in 030608 win32 build under NT.  [e-mail] could you
grab a current nightly and try this agin.  Thanks.  If it does repeat can you
provide a stack trace or any more information about the crash.

Comment 2

[Adam D. Moss]

Can still reproduce consistantly on Linux with current
CVS version.

Could you try reproducing on Linux?

Here's a basic backtrace; I'll try recompiling with
debugging enabled also for a better backtrace, but
on my machine that'll take about a day and I'll 
probably run out of diskspace, so no promises! :)

Program received signal SIGSEGV, Segmentation fault.
0x1 in ?? ()
(gdb) bt
#0  0x1 in ?? ()
#1  0x40e1d963 in CNavDTD::Release ()
   from /var/tmp/mozilla/dist/bin/components/libraptorhtmlpars.so
#2  0x40e2fb81 in CParserContext::~CParserContext ()
   from /var/tmp/mozilla/dist/bin/components/libraptorhtmlpars.so
#3  0x40e2d723 in nsParser::~nsParser ()
   from /var/tmp/mozilla/dist/bin/components/libraptorhtmlpars.so
#4  0x40e2d7c3 in nsParser::Release ()
   from /var/tmp/mozilla/dist/bin/components/libraptorhtmlpars.so
#5  0x40111074 in nsCOMPtr_base::assign_with_AddRef () from /lib/libxpcom.so
#6  0x40916556 in nsDocumentOpenInfo::OnStopRequest ()
   from /var/tmp/mozilla/dist/bin/components/liburiloader.so
#7  0x40fee930 in InterceptStreamListener::OnStopRequest ()
   from /var/tmp/mozilla/dist/bin/components/libnecko_cache.so
#8  0x40fbf259 in nsHTTPChannel::ResponseCompleted ()
   from /var/tmp/mozilla/dist/bin/components/libnecko_http.so
#9  0x40fc24d9 in nsHTTPServerListener::OnStopRequest ()
   from /var/tmp/mozilla/dist/bin/components/libnecko_http.so
#10 0x4088dc08 in nsOnStopRequestEvent::HandleEvent ()
   from /var/tmp/mozilla/dist/bin/components/libnecko.so
#11 0x4088d5f5 in nsStreamListenerEvent::HandlePLEvent ()
   from /var/tmp/mozilla/dist/bin/components/libnecko.so
#12 0x40109d79 in PL_HandleEvent () from /lib/libxpcom.so
#13 0x40109cac in PL_ProcessPendingEvents () from /lib/libxpcom.so
#14 0x4010aabf in nsEventQueueImpl::ProcessPendingEvents ()
   from /lib/libxpcom.so
#15 0x40481f29 in event_processor_callback () from /lib/libwidget_gtk.so
#16 0x40481cd6 in our_gdk_io_invoke () from /lib/libwidget_gtk.so
#17 0x4065496c in g_io_unix_dispatch () from /usr/local/lib/libglib-1.2.so.0

Comment 3

[Brian Hunt]

I concur, Linux nightly build 2000.03.07.09 crashes consistently (at most 2
links deep) on Freshmeat.net.  This is likely a duplicate of another bug but
does provide a way to reproduce it at will.

It should probably have the following fields:
Keyword: crash
Severity: critical

Comment 4

[Gagan]

*** Bug 30735 has been marked as a duplicate of this bug. ***

Comment 5

[Adam D. Moss]

I can't clear enough diskspace to recompile with
full debugging.

If it's any help, I'm no longer seeing the crash with
today's (2000-03-09) CVS.

Comment 6

[Brian Hunt]

I concur, this bug seems to have resolved in 2000.03.08.09.  It seemed to be a
side-effect of a larger problem that is now resolved.

Comment 7

[Asa Dotzler [:asa]]

Calling this Worksforme.  [e-mail], if you see this again please reopen
this bug.  Thanks for your help.

Comment 8

[Joseph Elwell]

verified worksforme on linux build 2000032208.