31235 - Crash at nsHTMLContentSink

Status: VERIFIED WORKSFORME

(Core :: Layout, defect, P3)

Description

[waqar]

Program received signal SIGSEGV, Segmentation fault.
0x41084563 in SinkContext::CloseContainer (this=0x86b61c8, aNode=@0x8697d70) at
nsHTMLContentSink.cpp:1358

#0  0x41084563 in SinkContext::CloseContainer (this=0x86b61c8, aNode=@0x8697d70)
at nsHTMLContentSink.cpp:1358
#1  0x41089038 in HTMLContentSink::CloseContainer (this=0x86403f8,
aNode=@0x8697d70) at nsHTMLContentSink.cpp:2914
#2  0x413d860a in CNavDTD::CloseContainer (this=0x8660f90, aNode=0x8697d70,
aTarget=eHTMLTag_body, aClosedByStartTag=1) at CNavDTD.cpp:2999
#3  0x413d870d in CNavDTD::CloseContainersTo (this=0x8660f90, anIndex=1,
aTarget=eHTMLTag_body, aClosedByStartTag=1) at CNavDTD.cpp:3035
#4  0x413d4e90 in CNavDTD::HandleDefaultStartToken (this=0x8660f90,
aToken=0x8407488, aChildTag=eHTMLTag_body, aNode=0x87350e0) at CNavDTD.cpp:1061
#5  0x413d58a2 in CNavDTD::HandleStartToken (this=0x8660f90, aToken=0x8407488)
at CNavDTD.cpp:1404
#6  0x413d465a in CNavDTD::HandleToken (this=0x8660f90, aToken=0x8407488,
aParser=0x86b4620) at CNavDTD.cpp:767
#7  0x413d3f38 in CNavDTD::BuildModel (this=0x8660f90, aParser=0x86b4620,
aTokenizer=0x8661538, anObserver=0x0, aSink=0x86403f8) at CNavDTD.cpp:504
#8  0x413e94ec in nsParser::BuildModel (this=0x86b4620) at nsParser.cpp:1233
#9  0x413e9356 in nsParser::ResumeParse (this=0x86b4620, aDefaultDTD=0x0,
aIsFinalChunk=0) at nsParser.cpp:1148
#10 0x413e87ea in nsParser::EnableParser (this=0x86b4620, aState=1) at
nsParser.cpp:818
#11 0x4108d03f in HTMLContentSink::ResumeParsing (this=0x86403f8) at
nsHTMLContentSink.cpp:4083
#12 0x4108d5e5 in HTMLContentSink::OnStreamComplete (this=0x86403f8,
aLoader=0x86a1d78, aContext=0x0, aStatus=0, stringLen=33737, string=0x86c90f0
"// CyberStudio Javascript Library\n\n\n// ", '\213' <repeats 30 times>, "\n//
Global Functions\n// ", '\213' <repeats 30 times>, "\nCSAg =
window.navigator.userAgent; CSBVers = parseInt(CSAg.charAt(CSAg.index"...) at
nsHTMLContentSink.cpp:4178
#13 0x40c3c064 in nsStreamLoader::OnStopRequest (this=0x86a1d78,
channel=0x8652ea0, ctxt=0x0, status=0, errorMsg=0x0) at nsStreamLoader.cpp:109
#14 0x418178a2 in InterceptStreamListener::OnStopRequest (this=0x85d3ee0,
channel=0x8652ea0, ctxt=0x0, status=0, errorMsg=0x0) at nsCachedNetData.cpp:1117
#15 0x417c7810 in nsHTTPChannel::ResponseCompleted (this=0x8652ea0,
aListener=0x85d3ee0, aStatus=0, aMsg=0x0) at nsHTTPChannel.cpp:1354
#16 0x417cc5be in nsHTTPServerListener::OnStopRequest (this=0x85d5c68,
channel=0x865371c, i_pContext=0x8652ea0, i_Status=0, i_pMsg=0x0) at
nsHTTPResponseListener.cpp:408
#17 0x40c21e8f in nsOnStopRequestEvent::HandleEvent (this=0x863d8a0) at
nsAsyncStreamListener.cpp:291
#18 0x40c21527 in nsStreamListenerEvent::HandlePLEvent (aEvent=0x863d8c0) at
nsAsyncStreamListener.cpp:97
#19 0x4018bfce in PL_HandleEvent (self=0x863d8c0) at plevent.c:556
#20 0x4018be7c in PL_ProcessPendingEvents (self=0x812c070) at plevent.c:501
#21 0x4018db10 in nsEventQueueImpl::ProcessPendingEvents (this=0x812c048) at
nsEventQueue.cpp:314
#22 0x406faa58 in event_processor_callback (data=0x812c048, source=9,
condition=GDK_INPUT_READ) at nsAppShell.cpp:141
#23 0x406fa6af in our_gdk_io_invoke (source=0x824d2c8, condition=G_IO_IN,
data=0x81e81a8) at nsAppShell.cpp:54
#24 0x408be52a in g_io_unix_dispatch () from /usr/lib/libglib-1.2.so.0
#25 0x408bfbe6 in g_main_dispatch () from /usr/lib/libglib-1.2.so.0
#26 0x408c01a1 in g_main_iterate () from /usr/lib/libglib-1.2.so.0
#27 0x408c0341 in g_main_run () from /usr/lib/libglib-1.2.so.0
#28 0x407e5859 in gtk_main () from /usr/lib/libgtk-1.2.so.0
#29 0x406fb057 in nsAppShell::Run (this=0x812ef20) at nsAppShell.cpp:304
#30 0x40653e6d in nsAppShellService::Run (this=0x812be38) at
nsAppShellService.cpp:392
#31 0x804e934 in main1 (argc=1, argv=0xbffff924, splashScreen=0x0) at
nsAppRunner.cpp:740
#32 0x804eec0 in main (argc=1, argv=0xbffff924) at nsAppRunner.cpp:860

Comment 1

[harishd]

The above URL has changed I suppose.  The problem, caused by a userdefined tag, 
however, should have been fixed.  Waqar, do you have a copy of the problem URL 
to verify this bug.  If you don't have please mark this bug INVALID or 
FIXED...as you please :&)   Thanx

Comment 2

[harishd]

Marking bug WORKSFORME.

Comment 3

[leger]

Adding crash keyword

Comment 4

[Chris Petersen]

No crash is reproduced at the specified url. Marking verified works for me with 
the July 11th build.