31551 - Crash in EntityNameComparitor::operator() during startup

Status: VERIFIED INVALID

(Core :: DOM: HTML Parser, defect, P3)

Description

[Daniel Bratell]

cvs build from 2000-03-12

I got a crash at startup in when comparing two strings in 
EntityNameComparitor::operator(). This was with a build built shortly after 
rickg's string updates but I don't know if that has anything to do with it. I 
tried to reproduce it but at next startup I got no crash.

In console:
<snip>
FOR DEBUG BUILDS ONLY:  we are forcing you to see the checkin guidelines when 
you open a browser window
Loading page specified via openDialog
Check if a view source window
Opening file cookperm.txt failed
in SetSecurityButton



Stack trace:

nsCRT::strncmp(const unsigned short * 0x02b53028, const char * 0x01f6b078, 
unsigned int 3) line 396 + 3 bytes
Compare2To1(const char * 0x02b53028, const char * 0x01f6b078, unsigned int 3, 
int 0) line 526 + 19 bytes
nsStr::Compare(const nsStr & {...}, const nsStr & {...}, int -1, int 0) line 610 
+ 44 bytes
nsCString::Compare(const nsStr & {...}, int 0, int -1) line 1540 + 45 bytes
EntityNameComparitor::operator()(void * 0x0012f548, void * 0x01f6b060) line 61
nsAVLTree::FindItem(void * 0x0012f548) line 497 + 27 bytes
nsHTMLEntities::EntityToUnicode(const nsCString & {...}) line 167 + 16 bytes
nsHTMLEntities::EntityToUnicode(const nsString & {...}) line 180 + 9 bytes
CNavDTD::ConvertEntityToUnicode(const CNavDTD * const 0x02acf6f0, const nsString 
& {...}, int * 0x0012f64c) line 2107 + 9 bytes
HTMLContentSink::ReduceEntities(nsString & {...}) line 584
HTMLContentSink::GetAttributeValueAt(const nsIParserNode & {...}, int 0, 
nsString & {...}) line 631
HTMLContentSink::AddAttributes(const nsIParserNode & {...}, nsIHTMLContent * 
0x02b44b04, int 0) line 657
SinkContext::OpenContainer(const nsIParserNode & {...}) line 1281 + 20 bytes
HTMLContentSink::OpenContainer(HTMLContentSink * const 0x02afccb8, const 
nsIParserNode & {...}) line 2899 + 18 bytes
CNavDTD::OpenContainer(const nsIParserNode * 0x02b4e670, nsHTMLTag eHTMLTag_a, 
int 1, nsEntryStack * 0x00000000) line 2938 + 31 bytes
CNavDTD::HandleDefaultStartToken(CToken * 0x0229c6f0, nsHTMLTag eHTMLTag_a, 
nsIParserNode * 0x02b4e670) line 1079 + 20 bytes
CNavDTD::HandleStartToken(CToken * 0x0229c6f0) line 1404 + 22 bytes
CNavDTD::HandleToken(CNavDTD * const 0x02acf6f0, CToken * 0x0229c6f0, nsIParser 
* 0x02afc978) line 767 + 12 bytes
CNavDTD::BuildModel(CNavDTD * const 0x02acf6f0, nsIParser * 0x02afc978, 
nsITokenizer * 0x02acfac0, nsITokenObserver * 0x00000000, nsIContentSink * 
0x02afccb8) line 504 + 20 bytes
nsParser::BuildModel() line 1265 + 34 bytes
nsParser::ResumeParse(int 1, int 0) line 1150 + 11 bytes
nsParser::OnDataAvailable(nsParser * const 0x02afc97c, nsIChannel * 0x02adda78, 
nsISupports * 0x00000000, nsIInputStream * 0x020adf3c, unsigned int 0, unsigned 
int 4380) line 1560 + 19 bytes
nsDocumentOpenInfo::OnDataAvailable(nsDocumentOpenInfo * const 0x02add7c0, 
nsIChannel * 0x02adda78, nsISupports * 0x00000000, nsIInputStream * 0x020adf3c, 
unsigned int 0, unsigned int 4380) line 267 + 46 bytes
InterceptStreamListener::OnDataAvailable(InterceptStreamListener * const 
0x020adf38, nsIChannel * 0x02adda78, nsISupports * 0x00000000, nsIInputStream * 
0x02ae53cc, unsigned int 0, unsigned int 4380) line 1127
nsHTTPServerListener::OnDataAvailable(nsHTTPServerListener * const 0x02ac41f0, 
nsIChannel * 0x02ae8a14, nsISupports * 0x02adda78, nsIInputStream * 0x02ae53cc, 
unsigned int 1460, unsigned int 4380) line 343 + 58 bytes
nsOnDataAvailableEvent::HandleEvent(nsOnDataAvailableEvent * const 0x02b51938) 
line 384 + 47 bytes
nsStreamListenerEvent::HandlePLEvent(PLEvent * 0x02b51990) line 97 + 12 bytes
PL_HandleEvent(PLEvent * 0x02b51990) line 563 + 10 bytes
PL_ProcessPendingEvents(PLEventQueue * 0x00e39370) line 508 + 9 bytes
_md_EventReceiverProc(HWND__ * 0x002b05c4, unsigned int 49535, unsigned int 0, 
long 14914416) line 1018 + 9 bytes
USER32! 77e13eb0()
USER32! 77e1401a()
USER32! 77e192da()
nsAppShellService::Run(nsAppShellService * const 0x00e38dd8) line 392
main1(int 1, char * * 0x00b66e68, nsISplashScreen * 0x00000000) line 761 + 32 
bytes
main(int 1, char * * 0x00b66e68) line 881 + 17 bytes
mainCRTStartup() line 338 + 17 bytes
KERNEL32! 77e87903()

Comment 1

[Daniel Bratell]

It happened again. Twice in four tries so it's kind of intermittent.

Comment 2

[rickg]

I can't reproduce this. I was checking in files yesterday in two phases: it's 
possible this bug was reported before I landed my second phase. In the interim, 
entities did have a bug (due to the way they used nsStr) which should be gone 
now. Petersen, do you see this?

Comment 3

[Daniel Bratell]

I noticed later that even though I checked out after the last part was up on 
Bonsai, cvs-mirror hadn't got them yet so it might very well be a mid-checkin 
thing.

I don't see this crash anymore so if you want to mark the bug INVALID or 
WORKSFORM, that's fine with me.

Comment 4

[Chris Petersen]

I can't reproduce this problem either. Tested with the March 20 th build.

Comment 5

[rickg]

I believe this is fixed. 

Comment 6

[leger]

Adding crash keyword

Comment 7

[Jan Carpenter]

verified