Closed Bug 310311 Opened 19 years ago Closed 19 years ago

FF crashes every time it tries to render this code.

Categories

(Firefox :: General, defect)

Product:
Firefox
Component:
General
Platform:
x86
Linux
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED WORKSFORME

People

(Reporter: djogopatrao, Unassigned)

References

(
URL
)

Details

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.10) Gecko/20050716 Firefox/1.0.6
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.10) Gecko/20050716 Firefox/1.0.6

The code refeered is a simple and valid html, but causes Firefox and Mozilla to
crash (IE doesn't).

Reproducible: Always

Steps to Reproduce:
1. type in your location bar http://www.vision.ime.usp.br/~djogo/bug_ff/index.html
2. press enter or click the (>) button
3. it crashes!

Actual Results:  
Crash.

Expected Results:  
Not crash.

One of the Incident ID is TB9821431 (9/27/05 3:43PM). The bug occurs both in
mozilla (tested under linux) and firefox (linux and windows XP SP2). Linux means
"Linux hansolo 2.4.22-1.2115.nptl #1 Wed Oct 29 15:31:21 EST 2003 i686 athlon
i386 GNU/Linux".
works fine with latest nighly build on windows
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8b5) Gecko/20050928
Firefox/1.4 ID:2005092805

Crashes in 1.0.7 but not in trunk and branch.
(In reply to comment #2)
> Crashes in 1.0.7 but not in trunk and branch.


djogo patrao <djogopatrao@gmail.com>, can you try again with Firefox 1.5 beta 1?
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8b5) Gecko/20050928
Firefox/1.4 ID:2005092813

WFM
Mozilla/5.0 (Windows; U; Win98; de-DE; rv:1.7.12) Gecko/20050919 Firefox/1.0.7

Site is loading correctly, but if i switch to the tab, Crash!
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9a1) Gecko/20050928
Firefox/1.6a1 ID:2005092815

There bugs with similar stacks that are all resolved for this issue. Resolving
as WFM based on personal experience and Ria's comment. Reporter, please reopen
this if you can still reproduce on trunk in Linux or Windows.
 
Incident ID: 9821431
Stack Signature	nsContainerFrame::PaintChild() 291ff8c8
Product ID	Firefox10
Build ID	2005071606
Trigger Time	2005-09-27 11:39:36.0
Platform	LinuxIntel
Operating System	Linux 2.4.22-1.2115.nptl
Module	firefox-bin + (003d66ee)
URL visited	
User Comments	
Since Last Crash	0 sec
Total Uptime	68 sec
Trigger Reason	SIGSEGV: Segmentation Fault: (signal 11)
Source File, Line No.
/builds/tinderbox/Fx-Aviary1.0.1/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsContainerFrame.cpp,
line 951
Stack Trace 	
nsContainerFrame::PaintChild() 
[/builds/tinderbox/Fx-Aviary1.0.1/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsContainerFrame.cpp,
line 951]
nsBlockFrame::PaintChildren() 
[/builds/tinderbox/Fx-Aviary1.0.1/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsBlockFrame.cpp,
line 5414]
nsHTMLContainerFrame::PaintDecorationsAndChildren() 
[/builds/tinderbox/Fx-Aviary1.0.1/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsHTMLContainerFrame.cpp,
line 141]
nsBlockFrame::Paint() 
[/builds/tinderbox/Fx-Aviary1.0.1/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsBlockFrame.cpp,
line 5309]
nsComboboxControlFrame::Paint() 
[/builds/tinderbox/Fx-Aviary1.0.1/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/forms/src/nsComboboxControlFrame.cpp,
line 2346]
nsContainerFrame::PaintChild() 
[/builds/tinderbox/Fx-Aviary1.0.1/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsContainerFrame.cpp,
line 132]
nsBlockFrame::PaintChildren() 
[/builds/tinderbox/Fx-Aviary1.0.1/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsBlockFrame.cpp,
line 5414]
nsHTMLContainerFrame::PaintDecorationsAndChildren() 
[/builds/tinderbox/Fx-Aviary1.0.1/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsHTMLContainerFrame.cpp,
line 141]
nsBlockFrame::Paint() 
[/builds/tinderbox/Fx-Aviary1.0.1/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsBlockFrame.cpp,
line 5309]
PresShell::Paint() 
[/builds/tinderbox/Fx-Aviary1.0.1/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsPresShell.cpp,
line 5563]
nsView::Paint() 
[/builds/tinderbox/Fx-Aviary1.0.1/Linux_2.4.20-28.8_Clobber/mozilla/view/src/nsView.cpp,
line 710]
nsViewManager::RenderDisplayListElement() 
[/builds/tinderbox/Fx-Aviary1.0.1/Linux_2.4.20-28.8_Clobber/mozilla/view/src/nsViewManager.cpp,
line 1452]
nsViewManager::RenderViews() 
[/builds/tinderbox/Fx-Aviary1.0.1/Linux_2.4.20-28.8_Clobber/mozilla/view/src/nsViewManager.cpp,
line 1370]
nsViewManager::Refresh() 
[/builds/tinderbox/Fx-Aviary1.0.1/Linux_2.4.20-28.8_Clobber/mozilla/view/src/nsViewManager.cpp,
line 929]
nsViewManager::DispatchEvent() 
[/builds/tinderbox/Fx-Aviary1.0.1/Linux_2.4.20-28.8_Clobber/mozilla/view/src/nsViewManager.cpp,
line 704]
HandleEvent() 
[/builds/tinderbox/Fx-Aviary1.0.1/Linux_2.4.20-28.8_Clobber/mozilla/view/src/nsView.cpp,
line 243]
nsCommonWidget::DispatchEvent() 
[/builds/tinderbox/Fx-Aviary1.0.1/Linux_2.4.20-28.8_Clobber/mozilla/widget/src/gtk2/nsCommonWidget.cpp,
line 215]
nsWindow::OnExposeEvent() 
[/builds/tinderbox/Fx-Aviary1.0.1/Linux_2.4.20-28.8_Clobber/mozilla/widget/src/gtk2/nsWindow.cpp,
line 1209]
expose_event_cb() 
[/builds/tinderbox/Fx-Aviary1.0.1/Linux_2.4.20-28.8_Clobber/mozilla/widget/src/gtk2/nsWindow.cpp,
line 3194]
libgtk-x11-2.0.so.0 + 0xd30f4 (0x04c390f4)
libgobject-2.0.so.0 + 0x8cb0 (0x009d3cb0)
libgobject-2.0.so.0 + 0x1abbf (0x009e5bbf)
libgobject-2.0.so.0 + 0x19a0d (0x009e4a0d)
libgobject-2.0.so.0 + 0x19e74 (0x009e4e74)
libgtk-x11-2.0.so.0 + 0x1b5b65 (0x04d1bb65)
libgtk-x11-2.0.so.0 + 0xd1bca (0x04c37bca)
libgdk-x11-2.0.so.0 + 0x2e163 (0x00a49163)
libgdk-x11-2.0.so.0 + 0x2e26a (0x00a4926a)
libgdk-x11-2.0.so.0 + 0x2e2d1 (0x00a492d1)
libglib-2.0.so.0 + 0x24b33 (0x0097ab33)
libglib-2.0.so.0 + 0x21fdd (0x00977fdd)
libglib-2.0.so.0 + 0x22fd8 (0x00978fd8)
libglib-2.0.so.0 + 0x232ef (0x009792ef)
libglib-2.0.so.0 + 0x239cf (0x009799cf)
libgtk-x11-2.0.so.0 + 0xd144f (0x04c3744f)
nsAppShell::Run() 
[/builds/tinderbox/Fx-Aviary1.0.1/Linux_2.4.20-28.8_Clobber/mozilla/widget/src/gtk2/nsAppShell.cpp,
line 144]
nsAppShellService::Run() 
[/builds/tinderbox/Fx-Aviary1.0.1/Linux_2.4.20-28.8_Clobber/mozilla/xpfe/appshell/src/nsAppShellService.cpp,
line 495]
xre_main() 
[/builds/tinderbox/Fx-Aviary1.0.1/Linux_2.4.20-28.8_Clobber/mozilla/toolkit/xre/nsAppRunner.cpp,
line 692]
main() 
[/builds/tinderbox/Fx-Aviary1.0.1/Linux_2.4.20-28.8_Clobber/mozilla/browser/app/nsBrowserApp.cpp,
line 59]
libc.so.6 + 0x15750 (0x00afc750)
Status: UNCONFIRMED → RESOLVED
Closed: 19 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.