31552 - Assertion in nsURILoader::Stop()

Status: VERIFIED FIXED

(Core :: Networking, defect, P3)

Description

[Daniel Bratell]

The browser crashes sometimes when going to 
http://www.firingsquad.com/hardware/508part2/default.asp when using a build from 
cvs from 2000-03-11 (after the carpools and some other checkins).


Stack trace:

NTDLL! 77f9f9df()
nsDebug::Assertion(const char * 0x01b3e03c, const char * 0x01b3e014, const char 
* 0x01b3dfe0, int 604) line 189 + 13 bytes
nsDebug::WarnIfFalse(const char * 0x01b3e03c, const char * 0x01b3e014, const 
char * 0x01b3dfe0, int 604) line 247 + 21 bytes
nsURILoader::Stop(nsURILoader * const 0x00ec8038, nsISupports * 0x02c38e68) line 
604 + 58 bytes
nsDocShell::Stop(nsDocShell * const 0x02c386fc) line 991
nsWebShell::Stop(nsWebShell * const 0x02c386fc) line 1779
nsWebShell::Destroy(nsWebShell * const 0x02c38700) line 3074
nsHTMLFrameInnerFrame::~nsHTMLFrameInnerFrame() line 452
nsHTMLFrameInnerFrame::`scalar deleting destructor'(unsigned int 1) + 15 bytes
nsFrame::Destroy(nsFrame * const 0x02c0b29c, nsIPresContext * 0x02213980) line 
406 + 34 bytes
nsFrameList::DestroyFrames(nsIPresContext * 0x02213980) line 36
nsContainerFrame::Destroy(nsContainerFrame * const 0x02c001c0, nsIPresContext * 
0x02213980) line 98
nsLineBox::DeleteLineList(nsIPresContext * 0x02213980, nsLineBox * 0x02c00238) 
line 252
nsBlockFrame::Destroy(nsBlockFrame * const 0x02c00038, nsIPresContext * 
0x02213980) line 1147 + 16 bytes
nsFrameList::DestroyFrames(nsIPresContext * 0x02213980) line 36
nsContainerFrame::Destroy(nsContainerFrame * const 0x02bf183c, nsIPresContext * 
0x02213980) line 98
nsFrameList::DestroyFrames(nsIPresContext * 0x02213980) line 36
nsContainerFrame::Destroy(nsContainerFrame * const 0x02bf1540, nsIPresContext * 
0x02213980) line 98
nsFrameList::DestroyFrames(nsIPresContext * 0x02213980) line 36
nsContainerFrame::Destroy(nsContainerFrame * const 0x02bf1500, nsIPresContext * 
0x02213980) line 98
nsFrameList::DestroyFrames(nsIPresContext * 0x02213980) line 36
nsContainerFrame::Destroy(nsContainerFrame * const 0x02bf1494, nsIPresContext * 
0x02213980) line 98
nsTableFrame::Destroy(nsTableFrame * const 0x02bf1494, nsIPresContext * 
0x02213980) line 251
nsFrameList::DestroyFrames(nsIPresContext * 0x02213980) line 36
nsContainerFrame::Destroy(nsContainerFrame * const 0x02bf1440, nsIPresContext * 
0x02213980) line 98
nsTableOuterFrame::Destroy(nsTableOuterFrame * const 0x02bf1440, nsIPresContext 
* 0x02213980) line 63
nsBlockFrame::DoRemoveFrame(nsIPresContext * 0x02213980, nsIFrame * 0x02bf1440) 
line 5123
nsBlockFrame::RemoveFrame(nsBlockFrame * const 0x02a88550, nsIPresContext * 
0x02213980, nsIPresShell & {...}, nsIAtom * 0x00000000, nsIFrame * 0x02bf1440) 
line 5021 + 16 bytes
nsFormFrame::RemoveFrame(nsFormFrame * const 0x02a88550, nsIPresContext * 
0x02213980, nsIPresShell & {...}, nsIAtom * 0x00000000, nsIFrame * 0x02bf1440) 
line 358
FrameManager::RemoveFrame(FrameManager * const 0x02b5e868, nsIPresContext * 
0x02213980, nsIPresShell & {...}, nsIFrame * 0x02a88550, nsIAtom * 0x00000000, 
nsIFrame * 0x02bf1440) line 632
nsCSSFrameConstructor::ContentRemoved(nsCSSFrameConstructor * const 0x02b612e0, 
nsIPresContext * 0x02213980, nsIContent * 0x02af6d58, nsIContent * 0x02ade73c, 
int 0) line 7249 + 63 bytes
StyleSetImpl::ContentRemoved(StyleSetImpl * const 0x02b61230, nsIPresContext * 
0x02213980, nsIContent * 0x02af6d58, nsIContent * 0x02ade73c, int 0) line 985
PresShell::ContentRemoved(PresShell * const 0x02b61398, nsIDocument * 
0x02c01d30, nsIContent * 0x02af6d58, nsIContent * 0x02ade73c, int 0) line 2665 + 
50 bytes
nsDocument::ContentRemoved(nsDocument * const 0x02c01d30, nsIContent * 
0x02af6d58, nsIContent * 0x02ade73c, int 0) line 1653
nsHTMLDocument::ContentRemoved(nsHTMLDocument * const 0x02c01d30, nsIContent * 
0x02af6d58, nsIContent * 0x02ade73c, int 0) line 1186
nsGenericHTMLContainerElement::RemoveChildAt(int 0, int 1) line 3391
nsHTMLFormElement::RemoveChildAt(nsHTMLFormElement * const 0x02af6d58, int 0, 
int 1) line 112 + 22 bytes
SinkContext::DemoteContainer(const nsIParserNode & {...}) line 1563 + 18 bytes
HTMLContentSink::CloseForm(HTMLContentSink * const 0x02c05fd0, const 
nsIParserNode & {...}) line 2801 + 18 bytes
CNavDTD::CloseForm(const nsIParserNode * 0x0012f9f8) line 2724 + 31 bytes
CNavDTD::CloseContainer(const nsIParserNode * 0x0012f9f8, nsHTMLTag 
eHTMLTag_form, int 0) line 2992 + 12 bytes
CNavDTD::HandleEndToken(CToken * 0x02b2c308) line 1588 + 21 bytes
CNavDTD::HandleToken(CNavDTD * const 0x02b5eb68, CToken * 0x02b2c308, nsIParser 
* 0x02be6a18) line 770 + 12 bytes
CNavDTD::BuildModel(CNavDTD * const 0x02b5eb68, nsIParser * 0x02be6a18, 
nsITokenizer * 0x02c17b40, nsITokenObserver * 0x00000000, nsIContentSink * 
0x02c05fd0) line 504 + 20 bytes
nsParser::BuildModel() line 1265 + 34 bytes
nsParser::ResumeParse(int 1, int 0) line 1150 + 11 bytes
nsParser::OnDataAvailable(nsParser * const 0x02be6a1c, nsIChannel * 0x02be79b0, 
nsISupports * 0x00000000, nsIInputStream * 0x02be6164, unsigned int 0, unsigned 
int 1460) line 1560 + 19 bytes
nsDocumentOpenInfo::OnDataAvailable(nsDocumentOpenInfo * const 0x02be7740, 
nsIChannel * 0x02be79b0, nsISupports * 0x00000000, nsIInputStream * 0x02be6164, 
unsigned int 0, unsigned int 1460) line 267 + 46 bytes
InterceptStreamListener::OnDataAvailable(InterceptStreamListener * const 
0x02be6160, nsIChannel * 0x02be79b0, nsISupports * 0x00000000, nsIInputStream * 
0x02bffad4, unsigned int 0, unsigned int 1460) line 1127
nsHTTPServerListener::OnDataAvailable(nsHTTPServerListener * const 0x02c10c80, 
nsIChannel * 0x02a5df3c, nsISupports * 0x02be79b0, nsIInputStream * 0x02bffad4, 
unsigned int 18980, unsigned int 1460) line 343 + 58 bytes
nsOnDataAvailableEvent::HandleEvent(nsOnDataAvailableEvent * const 0x02c31e38) 
line 384 + 47 bytes
nsStreamListenerEvent::HandlePLEvent(PLEvent * 0x02c2c0c8) line 97 + 12 bytes
PL_HandleEvent(PLEvent * 0x02c2c0c8) line 563 + 10 bytes
PL_ProcessPendingEvents(PLEventQueue * 0x00e39370) line 508 + 9 bytes
_md_EventReceiverProc(HWND__ * 0x0061060c, unsigned int 49535, unsigned int 0, 
long 14914416) line 1018 + 9 bytes
USER32! 77e13eb0()
USER32! 77e1401a()
USER32! 77e192da()
nsAppShellService::Run(nsAppShellService * const 0x00e38dd8) line 392
main1(int 1, char * * 0x00b66e68, nsISplashScreen * 0x00000000) line 761 + 32 
bytes
main(int 1, char * * 0x00b66e68) line 881 + 17 bytes
mainCRTStartup() line 338 + 17 bytes
KERNEL32! 77e87903()


This looks like the same as bug 29489 but this is not at startup.

Comment 1

[Gagan]

uriloader->mscott

Comment 2

[Daniel Bratell]

I don't see this anymore, but that could be because the content on the page has 
changed.

Comment 3

[Scott MacGregor]

I don't see it either and some of this code changed a couple weeks ago. Marking
fixed.

Comment 4

[Stephen Walker]

no crash. marking verified using build 2000051220