Closed Bug 317583 Opened 19 years ago Closed 19 years ago

FF15RC3 SM10B crash at www.blesk.cz for Flash ad [@ js_DeleteProperty ]

Categories

(Core :: DOM: Events, defect)

Product:
Core
Component:
DOM: Events
Version:
1.8 Branch
Platform:
x86
Windows XP
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED DUPLICATE of bug 315509

People

(Reporter: aha, Unassigned)

References

(
URL
)

Details

(Keywords: crash, regression)

Crash Data

Repro:
1. visit http://www.blesk.cz/
2. wait a moment - when T-Mobile advertisement appear ("Twist") and get expanded, after some seconds browser crash, TalkBack doesn't appear.

Ad URL:
http://imad1.impact.as/2638_967.swf

Some info in Czech language on CZilla support site:
http://forum.czilla.cz/viewtopic.php?t=10761
Oops: crash with Firefox 1.5 RC3
Summary: crash at www.blesk.cz for Flash ad → FF15RC3 crash at www.blesk.cz for Flash ad
Same in SeaMonkey/1.8-branch/2005112014/WXP
Moving to Core.
Assignee: nobody → events
Component: General → DOM: Events
Keywords: crash, stackwanted
Product: Firefox → Core
QA Contact: general → ian
Version: unspecified → 1.8 Branch
From MS "Talkback"
AppName: firefox.exe
AppVer: 1.8.20051.11116
ModName: js3250.dll
ModVer: 4.0.0.0
Offset: 0002ea4e
Summary: FF15RC3 crash at www.blesk.cz for Flash ad → FF15RC3 SM10B crash at www.blesk.cz for Flash ad
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8) Gecko/20051123 Firefox/1.5 ID:2005112303

Maybe coincidence, but I see it only in branch.

TB12178597W
Don't know if it is still useful to know:
Regression between 1.8b5_2005100212 and 1.8b5_2005100221.
Can't reproduce in trunk builds.

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8) Gecko/20051121 Firefox/1.5

I have crash TB12184036X once most of the page has loaded  - seems to take a while
Is something up with talkback?  I'm getting "DB error looking for Incident ID" looking for my TB trace and Ria's.
Brendan, can you take a look on this bug? Probably regression on 1.8 branch, for regression window see comment #5. Could you forward bug to right component?

Incident ID: 12178597
Stack Signature	js_DeleteProperty d40608ef
Product ID	Firefox15
Build ID	2005112303
Trigger Time	2005-11-23 10:11:46.0
Platform	Win32
Operating System	Windows NT 5.1 build 2600
Module	js3250.dll + (0002ea4e)
URL visited	
User Comments	
Since Last Crash	246 sec
Total Uptime	246 sec
Trigger Reason	Access violation
Source File, Line No.	c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/js/src/jsobj.c, line 3215
Stack Trace 	
js_DeleteProperty  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/js/src/jsobj.c, line 3215]
array_unshift  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/js/src/jsarray.c, line 1118]
js_Invoke  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/js/src/jsinterp.c, line 1177]
js_Interpret  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/js/src/jsinterp.c, line 3523]
js_Invoke  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/js/src/jsinterp.c, line 1197]
js_InternalInvoke  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/js/src/jsinterp.c, line 1274]
JS_CallFunctionValue  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/js/src/jsapi.c, line 4158]
nsJSContext::CallEventHandler  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/dom/src/base/nsJSEnvironment.cpp, line 1411]
nsJSEventListener::HandleEvent  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/dom/src/events/nsJSEventListener.cpp, line 195]
nsEventListenerManager::HandleEventSubType  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/content/events/src/nsEventListenerManager.cpp, line 1685]
nsEventListenerManager::HandleEvent  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/content/events/src/nsEventListenerManager.cpp, line 1786]
nsGlobalWindow::HandleDOMEvent  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/dom/src/base/nsGlobalWindow.cpp, line 1546]
DocumentViewerImpl::LoadComplete  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/base/nsDocumentViewer.cpp, line 1012]
nsDocShell::EndPageLoad  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/docshell/base/nsDocShell.cpp, line 4747]
nsWebShell::EndPageLoad  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/docshell/base/nsWebShell.cpp, line 664]
nsDocShell::OnStateChange  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/docshell/base/nsDocShell.cpp, line 4673]
nsDocLoader::FireOnStateChange  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/uriloader/base/nsDocLoader.cpp, line 1210]
nsDocLoader::doStopDocumentLoad  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/uriloader/base/nsDocLoader.cpp, line 844]
nsDocLoader::DocLoaderIsEmpty  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/uriloader/base/nsDocLoader.cpp, line 744]
nsDocLoader::OnStopRequest  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/uriloader/base/nsDocLoader.cpp, line 665]
nsLoadGroup::RemoveRequest  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/netwerk/base/src/nsLoadGroup.cpp, line 732]
nsDocument::UnblockOnload  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/content/base/src/nsDocument.cpp, line 4968]
DestroyImagePLEvent  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/content/base/src/nsImageLoadingContent.cpp, line 670]
0x778b0c24
0x00200064
0x068b0450
Keywords: stackwanted → regression
Summary: FF15RC3 SM10B crash at www.blesk.cz for Flash ad → FF15RC3 SM10B crash at www.blesk.cz for Flash ad [@ js_DeleteProperty ]

*** This bug has been marked as a duplicate of 315509 ***
Status: NEW → RESOLVED
Closed: 19 years ago
Resolution: --- → DUPLICATE
Crash Signature: [@ js_DeleteProperty ]
You need to log in before you can comment on or make changes to this bug.