320321 - page loads, but Firefox crashes on any link

Status: RESOLVED DUPLICATE of bug 319299

(Firefox :: General, defect)

Description

[Jim Van Zandt]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.12) Gecko/20050922 Firefox/1.0.7 (Debian package 1.0.7-1)
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.12) Gecko/20050922 Firefox/1.0.7 (Debian package 1.0.7-1)

Problem: The page is displayed.  However, Firefox crashes if I click on any link on the page.

Other info: I can work around the problem by commenting out this part of the HTML file:

      <object data="multi-loop.svg" type="image/svg+xml"
	width="693" height="293">
	<param name="scale" value="exactfit">
	<embed src="multi-loop.svg" type="image/svg+xml"
	  width="693" height="293"
	  pluginspage="http://www.adobe.com/svg/viewer/install/" />
      </object>

I have installed Adobe's SVG plugin, which identifies itself as follows:

/usr/lib/mozilla-firefox/plugins$ strings libNPSVG3.so |grep version
__get_eh_table_version
Adobe SVG Viewer plug-in version 3.01x88
libSVGCore.so (%s) loaded doesn't match expected version: %s

Another computer with the same versions of Firefox and the shared libraries it uses, but without the SVG plugin, works fine.

The first two images should be the same, but the second one (SVG) is displaced for some reason - I assume invalid SVG.  

I assume something is getting overwritten when the page is displayed, and the crash happens as Firefox tries to free the memory it used.

Reproducible: Always

Steps to Reproduce:
1. visit http://jrv.oddones.org/crash.html
2. install Adobe's SVG plugin if not already installed
3. click on any link

Actual Results:  
Firefox crashes.  

Expected Results:  
Followed the link.

Default theme.
One extension installed: "SessionSaver .2 dl * nightly 28"

Comment 1

[Jim Van Zandt]

Attachment: debug session with backtrace

finishes with "corrupt stack?"

Comment 2

[Adam Guthrie]

*** This bug has been marked as a duplicate of 319299 ***