309960 - Program Exception - causing Firefox (Linux release) to crash [@ nsInlineFrame::ReflowDirtyChild]

Status: RESOLVED WORKSFORME

(Core :: Layout: Block and Inline, defect)

Description

[Edward]

User-Agent:       Mozilla/5.0 (X11; U; Linux i586; en-US; rv:1.7.12) Gecko/20050920
Build Identifier: Mozilla/5.0 (X11; U; Linux i586; en-US; rv:1.7.12) Gecko/20050920 Firefox/1.0.7

Firefox (Linux) release repeatedly crashes on above page.  Per suggestion from
Comment #2 in bug 309928, am opening a new bug report referencing the stated
Talkback ID as it is not related to bug 309928.

Reproducible: Always

Steps to Reproduce:
1.Go to web site.
2.Clicked on a link.
3.Browser crashed.

Actual Results:  
Browser crashed and opened Talkback.

Expected Results:  
Browser should have opened the web page selected.


Talkback ID:

TB9700011G

Comment 1

[Edward]

User-Agent for bug:  Mozilla/5.0 (X11; U; Linux i586; en-US; rv:1.7.12)
Gecko/20050920 Firefox/1.0.7

Comment 2

[Mats Palmgren (inactive)]

Does the crash also occur in the latest trunk build?
http://ftp.mozilla.org/pub/mozilla.org/firefox/nightly/latest-trunk/

Comment 3

[timeless]

Incident ID: 9700011
Stack Signature	nsInlineFrame::ReflowDirtyChild() 08f81c34
Product ID	Firefox10
Build ID	2005092015
Trigger Time	2005-09-24 18:48:57.0
Platform	LinuxIntel
Operating System	Linux 2.4.21-297-default
Module	firefox-bin + (003df8c0)
URL visited	http://forums.wirelessadvisor.com/
User Comments	Page loaded, clicked link, browser crashed.
Since Last Crash	0 sec
Total Uptime	0 sec
Trigger Reason	SIGSEGV: Segmentation Fault: (signal 11)
Source File, Line No.
/builds/tinderbox/Fx-Aviary1.0.1/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsInlineFrame.cpp,
line 469
Stack Trace 	
nsInlineFrame::ReflowDirtyChild() 
[/builds/tinderbox/Fx-Aviary1.0.1/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsInlineFrame.cpp,
line 469]
nsImageFrame::OnStartContainer() 
[/builds/tinderbox/Fx-Aviary1.0.1/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsImageFrame.cpp,
line 572]
nsImageLoadingContent::OnStartContainer() 
[/builds/tinderbox/Fx-Aviary1.0.1/Linux_2.4.20-28.8_Clobber/mozilla/content/base/src/nsImageLoadingContent.cpp,
line 710]
imgRequestProxy::OnStartContainer() 
[/builds/tinderbox/Fx-Aviary1.0.1/Linux_2.4.20-28.8_Clobber/mozilla/modules/libpr0n/src/imgRequestProxy.cpp,
line 549]
imgRequest::OnStartContainer() 
[/builds/tinderbox/Fx-Aviary1.0.1/Linux_2.4.20-28.8_Clobber/mozilla/modules/libpr0n/src/imgRequest.cpp,
line 396]
nsJPEGDecoder::WriteFrom() 
[/builds/tinderbox/Fx-Aviary1.0.1/Linux_2.4.20-28.8_Clobber/mozilla/modules/libpr0n/decoders/jpeg/nsJPEGDecoder.cpp,
line 1210]
imgRequest::OnDataAvailable() 
[/builds/tinderbox/Fx-Aviary1.0.1/Linux_2.4.20-28.8_Clobber/mozilla/modules/libpr0n/src/imgRequest.cpp,
line 798]
ProxyListener::OnDataAvailable() 
[/builds/tinderbox/Fx-Aviary1.0.1/Linux_2.4.20-28.8_Clobber/mozilla/modules/libpr0n/src/imgLoader.cpp,
line 863]
nsStreamListenerTee::OnDataAvailable() 
[/builds/tinderbox/Fx-Aviary1.0.1/Linux_2.4.20-28.8_Clobber/mozilla/netwerk/base/src/nsStreamListenerTee.cpp,
line 704]
nsHttpChannel::OnDataAvailable() 
[/builds/tinderbox/Fx-Aviary1.0.1/Linux_2.4.20-28.8_Clobber/mozilla/netwerk/protocol/http/src/nsHttpChannel.cpp,
line 3827]
nsInputStreamPump::OnStateTransfer() 
[/builds/tinderbox/Fx-Aviary1.0.1/Linux_2.4.20-28.8_Clobber/mozilla/netwerk/base/src/nsInputStreamPump.cpp,
line 436]
nsInputStreamPump::OnInputStreamReady() 
[/builds/tinderbox/Fx-Aviary1.0.1/Linux_2.4.20-28.8_Clobber/mozilla/netwerk/base/src/nsInputStreamPump.cpp,
line 337]
nsInputStreamReadyEvent::EventHandler()
PL_HandleEvent() 
[/builds/tinderbox/Fx-Aviary1.0.1/Linux_2.4.20-28.8_Clobber/mozilla/xpcom/threads/plevent.c,
line 674]
PL_ProcessPendingEvents() 
[/builds/tinderbox/Fx-Aviary1.0.1/Linux_2.4.20-28.8_Clobber/mozilla/xpcom/threads/plevent.c,
line 608]
nsEventQueueImpl::ProcessPendingEvents() 
[/builds/tinderbox/Fx-Aviary1.0.1/Linux_2.4.20-28.8_Clobber/mozilla/xpcom/threads/nsEventQueue.cpp,
line 402]
event_processor_callback() 
[/builds/tinderbox/Fx-Aviary1.0.1/Linux_2.4.20-28.8_Clobber/mozilla/widget/src/gtk2/nsAppShell.cpp,
line 67]
libglib-2.0.so.0 + 0x45def (0x4058cdef)
libglib-2.0.so.0 + 0x23148 (0x4056a148)
libglib-2.0.so.0 + 0x241a8 (0x4056b1a8)
libglib-2.0.so.0 + 0x245a8 (0x4056b5a8)
libglib-2.0.so.0 + 0x24bf7 (0x4056bbf7)
libgtk-x11-2.0.so.0 + 0xd36ff (0x4028f6ff)
nsAppShell::Run() 
[/builds/tinderbox/Fx-Aviary1.0.1/Linux_2.4.20-28.8_Clobber/mozilla/widget/src/gtk2/nsAppShell.cpp,
line 144]
nsAppShellService::Run() 
[/builds/tinderbox/Fx-Aviary1.0.1/Linux_2.4.20-28.8_Clobber/mozilla/xpfe/appshell/src/nsAppShellService.cpp,
line 495]
xre_main() 
[/builds/tinderbox/Fx-Aviary1.0.1/Linux_2.4.20-28.8_Clobber/mozilla/toolkit/xre/nsAppRunner.cpp,
line 692]
main() 
[/builds/tinderbox/Fx-Aviary1.0.1/Linux_2.4.20-28.8_Clobber/mozilla/browser/app/nsBrowserApp.cpp,
line 59]
libc.so.6 + 0x15d3e (0x4093bd3e)

Comment 4

[Mats Palmgren (inactive)]

Does the crash also occur in the latest trunk build?
http://ftp.mozilla.org/pub/mozilla.org/firefox/nightly/latest-trunk/

Comment 5

[Martijn Wargers (dead)]

Maybe this bug should just be closed?
The reporter hasn't responded and he was using a 1.7 build.