319596 - CRASH: Clicking on the link bar at the top of http://www.homedepot.com/ crashes the browser [@ libSystem.B.dylib.88.1.2 + 0x3008]

Status: VERIFIED DUPLICATE of bug 319384

(Core :: JavaScript Engine, defect)

Description

[David Barr]

User-Agent:       Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.9a1) Gecko/20051205 SeaMonkey/1.5a
Build Identifier: Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.9a1) Gecko/20051205 SeaMonkey/1.5a

Something about the top set of links on the Home Depot main page the crashing the browser.

Reproducible: Always

Steps to Reproduce:
1. Load http://www.homedepot.com/
2. Wait for the page to finish loading (to ensure it's clicking on the link that's being tested.)
3. Watch the spinning beach ball of doom...

Actual Results:  
The browser crashes.

Expected Results:  
The browser should have followed the link.

Talkback IDs:

TB12748309X
TB12749414M
TB12749542H

(If someone wanted to talk the TalkBack developers into giving me a way to look at the crashes after they've been sent, I'd paste in the common parts of the stack traces for you...)

Comment 1

[David Barr]

Another one:

TB12749852Q

This was a result of just mousing over the "Gift Center" (text confirmed) link.

Comment 2

[David Barr]

TB12750007H

The product categories links on the left side of the main part of the page are ruled out. The "Services" link on top is ruled in.

I'll quit now. :-)

(Oh, and the stack trace is left in hex, so never mind. I'm used to stack traces being translated... ;-)

Comment 3

[timeless]

mrbkap was going to look at this, we believe it's strlen(0)

Incident ID: 12748309
Stack Signature	libSystem.B.dylib.88.1.2 + 0x3008 (0x90003008) d0d3ccd3
Product ID	MozillaTrunk
Build ID	2005120509
Trigger Time	2005-12-08 11:38:10.0
Platform	MacOSX
Operating System	Darwin 8.3.0
Module	libSystem.B.dylib.88.1.2 + (00003008)
URL visited	http://www.homedepot.com
User Comments	I had just clicked on the tools link on the HD page.
Since Last Crash	26923 sec
Total Uptime	26923 sec
Trigger Reason	SIGBUS: Bus Error: (signal 10)
Source File, Line No.	N/A
Stack Trace 	
libSystem.B.dylib.88.1.2 + 0x3008 (0x90003008)
js_FindConstructor()  [/builds/tinderbox/Mozilla-Trunk/Darwin_6.8_Depend/mozilla/js/src/jsobj.c, line 2062]
js_ErrorToException()  [/builds/tinderbox/Mozilla-Trunk/Darwin_6.8_Depend/mozilla/js/src/jsexn.c, line 993]
ReportError()  [/builds/tinderbox/Mozilla-Trunk/Darwin_6.8_Depend/mozilla/js/src/jscntxt.c, line 694]
js_ReportErrorNumberVA()  [/builds/tinderbox/Mozilla-Trunk/Darwin_6.8_Depend/mozilla/js/src/jscntxt.c, line 1006]
JS_ReportErrorNumber()  [/builds/tinderbox/Mozilla-Trunk/Darwin_6.8_Depend/mozilla/js/src/jsapi.c, line 4450]
js_ValueToInt32()  [/builds/tinderbox/Mozilla-Trunk/Darwin_6.8_Depend/mozilla/js/src/jsnum.c, line 847]
nsGlobalWindow::ClearTimeoutOrInterval()  [/builds/tinderbox/Mozilla-Trunk/Darwin_6.8_Depend/mozilla/dom/src/base/nsGlobalWindow.cpp, line 6492]
nsGlobalWindow::ClearTimeoutOrInterval()  [/builds/tinderbox/Mozilla-Trunk/Darwin_6.8_Depend/mozilla/dom/src/base/nsGlobalWindow.h, line 265]
_XPTC_InvokeByIndex()
XPCWrappedNative::CallMethod(XPCCallContext&, XPCWrappedNative::CallMode)()  [/builds/tinderbox/Mozilla-Trunk/Darwin_6.8_Depend/mozilla/js/src/xpconnect/src/xpcwrappednative.cpp, line 2138]
XPC_WN_CallMethod()  [/builds/tinderbox/Mozilla-Trunk/Darwin_6.8_Depend/mozilla/js/src/xpconnect/src/xpcwrappednativejsops.cpp, line 1444]
js_Invoke()  [/builds/tinderbox/Mozilla-Trunk/Darwin_6.8_Depend/mozilla/js/src/jsinterp.c, line 1211]
js_Interpret()  [/builds/tinderbox/Mozilla-Trunk/Darwin_6.8_Depend/mozilla/js/src/jsinterp.c, line 3756]
js_Invoke()  [/builds/tinderbox/Mozilla-Trunk/Darwin_6.8_Depend/mozilla/js/src/jsinterp.c, line 1231]
js_InternalInvoke()  [/builds/tinderbox/Mozilla-Trunk/Darwin_6.8_Depend/mozilla/js/src/jsinterp.c, line 1309]
JS_CallFunctionValue()  [/builds/tinderbox/Mozilla-Trunk/Darwin_6.8_Depend/mozilla/js/src/jsapi.c, line 4158]
nsJSContext::CallEventHandler()  [/builds/tinderbox/Mozilla-Trunk/Darwin_6.8_Depend/mozilla/dom/src/base/nsJSEnvironment.cpp, line 1426]
nsJSEventListener::HandleEvent()  [/builds/tinderbox/Mozilla-Trunk/Darwin_6.8_Depend/mozilla/dom/src/events/nsJSEventListener.cpp, line 188]
nsEventListenerManager::HandleEventSubType()  [/builds/tinderbox/Mozilla-Trunk/Darwin_6.8_Depend/mozilla/content/events/src/../../../dist/include/xpcom/nsCOMPtr.h, line 848]
nsEventListenerManager::HandleEvent()  [/builds/tinderbox/Mozilla-Trunk/Darwin_6.8_Depend/mozilla/content/events/src/../../../dist/include/xpcom/nsAutoPtr.h, line 933]
nsGenericElement::HandleDOMEvent()  [/builds/tinderbox/Mozilla-Trunk/Darwin_6.8_Depend/mozilla/content/base/src/nsGenericElement.cpp, line 2187]
nsGenericHTMLElement::HandleDOMEventForAnchors()  [/builds/tinderbox/Mozilla-Trunk/Darwin_6.8_Depend/mozilla/content/html/content/src/nsGenericHTMLElement.cpp, line 1461]
nsGenericElement::HandleDOMEvent()  [/builds/tinderbox/Mozilla-Trunk/Darwin_6.8_Depend/mozilla/content/base/src/nsGenericElement.cpp, line 2218]
nsHTMLImageElement::HandleDOMEvent()  [/builds/tinderbox/Mozilla-Trunk/Darwin_6.8_Depend/mozilla/content/html/content/src/nsHTMLImageElement.cpp, line 511]
nsEventStateManager::DispatchMouseEvent()  [/builds/tinderbox/Mozilla-Trunk/Darwin_6.8_Depend/mozilla/content/events/src/../../../dist/include/layout/nsPresContext.h, line 158]
nsEventStateManager::NotifyMouseOver()  [/builds/tinderbox/Mozilla-Trunk/Darwin_6.8_Depend/mozilla/content/events/src/../../../dist/include/xpcom/nsCOMPtr.h, line 713]
nsEventStateManager::GenerateMouseEnterExit()  [/builds/tinderbox/Mozilla-Trunk/Darwin_6.8_Depend/mozilla/content/events/src/nsEventStateManager.cpp, line 213]
nsEventStateManager::PreHandleEvent()  [/builds/tinderbox/Mozilla-Trunk/Darwin_6.8_Depend/mozilla/content/events/src/nsEventStateManager.cpp, line 511]
PresShell::HandleEventInternal()  [/builds/tinderbox/Mozilla-Trunk/Darwin_6.8_Depend/mozilla/layout/base/../../dist/include/xpcom/nsCOMPtr.h, line 848]
PresShell::HandleEvent()  [/builds/tinderbox/Mozilla-Trunk/Darwin_6.8_Depend/mozilla/layout/base/nsPresShell.cpp, line 5855]
nsViewManager::HandleEvent()  [/builds/tinderbox/Mozilla-Trunk/Darwin_6.8_Depend/mozilla/view/src/../../dist/include/xpcom/nsVoidArray.h, line 61]
nsViewManager::DispatchEvent()  [/builds/tinderbox/Mozilla-Trunk/Darwin_6.8_Depend/mozilla/view/src/../../dist/include/gfx/nsPoint.h, line 48]
HandleEvent()  [/builds/tinderbox/Mozilla-Trunk/Darwin_6.8_Depend/mozilla/view/src/nsView.cpp, line 177]
nsWindow::DispatchEvent()  [/builds/tinderbox/Mozilla-Trunk/Darwin_6.8_Depend/mozilla/widget/src/mac/nsWindow.cpp, line 1809]
nsWindow::DispatchWindowEvent()  [/builds/tinderbox/Mozilla-Trunk/Darwin_6.8_Depend/mozilla/widget/src/mac/nsWindow.cpp, line 1825]
nsWindow::DispatchMouseEvent()  [/builds/tinderbox/Mozilla-Trunk/Darwin_6.8_Depend/mozilla/widget/src/mac/nsWindow.cpp, line 1851]
nsMacEventHandler::HandleMouseMoveEvent()  [/builds/tinderbox/Mozilla-Trunk/Darwin_6.8_Depend/mozilla/widget/src/mac/../../../dist/include/widget/nsIWidget.h, line 268]
nsMacEventHandler::HandleOSEvent()  [/builds/tinderbox/Mozilla-Trunk/Darwin_6.8_Depend/mozilla/widget/src/mac/nsMacEventHandler.cpp, line 456]
nsMacWindow::DispatchEvent()  [/builds/tinderbox/Mozilla-Trunk/Darwin_6.8_Depend/mozilla/widget/src/mac/nsMacWindow.cpp, line 1730]
nsMacMessagePump::DispatchOSEventToRaptor()  [/builds/tinderbox/Mozilla-Trunk/Darwin_6.8_Depend/mozilla/widget/src/mac/nsMacMessagePump.cpp, line 993]
nsMacMessagePump::DoMouseMove()  [/builds/tinderbox/Mozilla-Trunk/Darwin_6.8_Depend/mozilla/widget/src/mac/nsMacMessagePump.cpp, line 820]
nsMacMessagePump::DispatchEvent()  [/builds/tinderbox/Mozilla-Trunk/Darwin_6.8_Depend/mozilla/widget/src/mac/nsMacMessagePump.cpp, line 451]
nsMacMessagePump::DoMessagePump()  [/builds/tinderbox/Mozilla-Trunk/Darwin_6.8_Depend/mozilla/widget/src/mac/nsMacMessagePump.cpp, line 289]
nsAppShell::Run()  [/builds/tinderbox/Mozilla-Trunk/Darwin_6.8_Depend/mozilla/widget/src/mac/nsAppShell.cpp, line 108]
main1()  [/builds/tinderbox/Mozilla-Trunk/Darwin_6.8_Depend/mozilla/xpfe/bootstrap/../../dist/include/xpcom/nsCOMPtr.h, line 848]
main()  [/builds/tinderbox/Mozilla-Trunk/Darwin_6.8_Depend/mozilla/xpfe/bootstrap/nsAppRunner.cpp, line 1740]
_start()   start()

Comment 4

[Blake Kaplan (:mrbkap) (inactive)]

Actually, this is a dupe of bug 319384.

*** This bug has been marked as a duplicate of 319384 ***