308890 - crash when going to this URL

Status: VERIFIED FIXED

(Core :: CSS Parsing and Computation, defect)

Description

[[e-mail]]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8b) Gecko/20050217
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8b) Gecko/20050217

Going to this URL crashes Mozilla for me.  This also happens on Seamonkey 1.0a.

Reproducible: Always

Steps to Reproduce:
1. Go to the URL above

Actual Results:  
It crashed.

Expected Results:  
It should not have crashed.

I am using the gtk version.  I actually had this happen to me in Seamonkey 1.0a
(which is a recent build, being only a few days old), and when I tried Mozilla I
found that it crashed in there too.  No proxies are being used, I have no
plugins (aside from null and unix print), Javascript is turned off, and images
are turned off.  www.nature.com is blocked from setting cookies.

The page works if I wget the html file and use Mozilla to open the file.

Operating system is Mandrake Linux 10.1, fvwm2, no Gnome or KDE.

Comment 1

[Mats Palmgren (inactive)]

Attachment: stack

Comment 2

[Mats Palmgren (inactive)]

Regression range: 2004-07-07-06 -- 2004-07-20-06

Comment 3

[Mats Palmgren (inactive)]

Attachment: Like so?

Comment 4

[David Baron :dbaron: (⌚️UTC-4, no longer working on Mozilla)]

mType == eStyleContentType_Image should imply a non-null pointer.  Is there
something that's not enforcing that?

Comment 5

[David Baron :dbaron: (⌚️UTC-4, no longer working on Mozilla)]

Hrm, I guess, actually, it doesn't work that way.  Must have been thinking of
something else.

Comment 6

[David Baron :dbaron: (⌚️UTC-4, no longer working on Mozilla)]

*** Bug 308999 has been marked as a duplicate of this bug. ***

Comment 7

[Boris Zbarsky [:bzbarsky]]

Comment on attachment 196425 [details] [diff] [review]
Like so?

We should get this crash fix onto the branch...  It's very very safe.

Mats, have you already checked this in on trunk?

Comment 8

[Mike Schroepfer]

Comment on attachment 196425 [details] [diff] [review]
Like so?

Approved for 1.8b5 per bug meeting.

Please also land on trunk.

Comment 9

[Mats Palmgren (inactive)]

Boris just landed this on trunk and branch, sorry for being late..

-> FIXED