334641 - Crash On ImageShack after series of events [@ memcpy - nsBufferedInputStream::Read]

Status: RESOLVED DUPLICATE of bug 336501

(Core :: Networking, defect)

Description

[Eric Foley]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.2) Gecko/20060308 Firefox/1.5.0.2
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.2) Gecko/20060308 Firefox/1.5.0.2

I went to upload an image on imageshack.  It worked fine and i got to the page with the list of links.  I then clicked show image to friends, so that I could view the actual iamge.  I went to hit back and it gave me a message about the postdata.  I clicked OK and the browser crashed.  This has been tested 3 times, and it does it every time.

Reproducible: Always

Steps to Reproduce:
1.Go to http://imageshack.us
2.Upload an image
3.Click Show Image to Friends
4.View the image, then hit back
5.Hit OK when message comes up asking about postdata

Actual Results:  
The browser crashes and comes up with the Feedback Agent.

Expected Results:  
The browser should retrieve the postdata and load the page normally.

Comment 1

[Martijn Wargers (dead)]

What is the Talkback ID of the Feedback Agent?
http://kb.mozillazine.org/Talkback

Comment 2

[Eric Foley]

TB17734126E

Comment 3

[Martijn Wargers (dead)]

http://talkback-public.mozilla.org/search/start.jsp?search=2&type=iid&id=TB17734126E

Stack Signature	 msvcrt.dll + 0x3700e (0x77c4700e) 10dd8652
Product ID	Firefox15
Build ID	2006030804
Trigger Time	2006-04-19 06:25:36.0
Platform	Win32
Operating System	Windows NT 5.1 build 2600
Module	msvcrt.dll + (0003700e)
URL visited	imageshack.us
User Comments	I went to host something on imageshack. I then went to look directly at an image, i then hit back and it gave me some info about the postdata. I hit OK and it crashed
Since Last Crash	6763 sec
Total Uptime	6763 sec
Trigger Reason	Access violation
Source File, Line No.	N/A
Stack Trace 	
msvcrt.dll + 0x3700e (0x77c4700e)
nsBufferedInputStream::Read  [c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/netwerk/base/src/nsBufferedStreams.cpp, line 316]
nsMultiplexInputStream::Read  [c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/xpcom/io/nsMultiplexInputStream.cpp, line 200]
nsMultiplexInputStream::Read  [c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/xpcom/io/nsMultiplexInputStream.cpp, line 200]
nsMIMEInputStream::Read  [c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/netwerk/base/src/nsMIMEInputStream.cpp, line 262]
nsBufferedInputStream::Fill  [c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/netwerk/base/src/nsBufferedStreams.cpp, line 388]
nsBufferedInputStream::ReadSegments  [c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/netwerk/base/src/nsBufferedStreams.cpp, line 351]
nsHttpTransaction::ReadSegments  [c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/netwerk/protocol/http/src/nsHttpTransaction.cpp, line 392]
nsHttpConnection::OnSocketWritable  [c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/netwerk/protocol/http/src/nsHttpConnection.cpp, line 559]
nsHttpConnection::OnOutputStreamReady  [c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/netwerk/protocol/http/src/nsHttpConnection.cpp, line 771]
nsSocketTransport::OnSocketReady  [c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/netwerk/base/src/nsSocketTransport2.cpp, line 1469]
nsThread::Main  [c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/xpcom/threads/nsThread.cpp, line 134]
kernel32.dll + 0xb50b (0x7c80b50b)

Duplicate of bug 290003, perhaps.

Reporter, do you have Session Saver or Crash Recovery installed?

Comment 4

[Eric Foley]

No I do not have a crash recovery or anything like that..also the problem is not actually in the uploading(or it wouldn't appear so)as the actual file uploaded fine, so I dont think it would be a duplicate of that bug

Comment 5

[Adam Guthrie]

Eric, could you please list what extensions are shown in Tools > Extensions?

Comment 6

[Eric Foley]

(In reply to comment #5)
> Eric, could you please list what extensions are shown in Tools > Extensions?
> 

Sure no problem:
Talkback, IE View, User Agent Switcher, Fasterfox, Live HTTP Headers, Remove it Permanently, Google Send to Phone, Google Toolbar for Firefox, Blogger Web Comments, Ad Block

I have also added toady: Reveal and Fission

Comment 7

[Martijn Wargers (dead)]

Try disabling Live HTTP Headers and see if that helps?

Comment 8

[Eric Foley]

(In reply to comment #7)
> Try disabling Live HTTP Headers and see if that helps?
> 

No that didn't fix it, heres the talkback: TB17745462W

Comment 9

[Adam Guthrie]

Duping to bug 336501 since bz cced the pros.

*** This bug has been marked as a duplicate of 336501 ***

Comment 10

[timeless]

bz didn't like it when i picked one of the others as a duplicate of that bug. that said, this stack in my opinion is definitely that bug.

reporter: would it be possible for you to try disabling all extensions, seeing if the problem occurs, and then slowly enable extensions one at a time until it does?

and of course, after that, try the latest 1.8.1 nightly and see if it crashes :)

Incident ID: 17745462
Stack Signature	memcpy + 0x9e [msvcrt.dll + 0x3700e (0x77c4700e) 10dd8652]
Product ID	Firefox15
Build ID	2006030804
Trigger Time	2006-04-19 11:43:06.0
Platform	Win32
Operating System	Windows NT 5.1 build 2600
Module	msvcrt.dll + (0003700e)
URL visited	imageshack.us
User Comments	Again same crash with ImageShack as earlier..this is with http headers disabled as suggested
Since Last Crash	10377 sec
Total Uptime	17660 sec
Trigger Reason	Access violation
Source File, Line No.	N/A
Stack Trace 	
memcpy + 0x9e (0x77c4700e)
nsBufferedInputStream::Read  [c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/netwerk/base/src/nsBufferedStreams.cpp, line 316]
nsMultiplexInputStream::Read  [c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/xpcom/io/nsMultiplexInputStream.cpp, line 200]
nsMultiplexInputStream::Read  [c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/xpcom/io/nsMultiplexInputStream.cpp, line 200]
nsMIMEInputStream::Read  [c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/netwerk/base/src/nsMIMEInputStream.cpp, line 262]
nsBufferedInputStream::Fill  [c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/netwerk/base/src/nsBufferedStreams.cpp, line 388]
nsBufferedInputStream::ReadSegments  [c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/netwerk/base/src/nsBufferedStreams.cpp, line 351]
nsHttpTransaction::ReadSegments  [c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/netwerk/protocol/http/src/nsHttpTransaction.cpp, line 392]
nsHttpConnection::OnSocketWritable  [c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/netwerk/protocol/http/src/nsHttpConnection.cpp, line 559]
nsHttpConnection::OnOutputStreamReady  [c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/netwerk/protocol/http/src/nsHttpConnection.cpp, line 771]
nsSocketTransport::OnSocketReady  [c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/netwerk/base/src/nsSocketTransport2.cpp, line 1469]
nsThread::Main  [c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/xpcom/threads/nsThread.cpp, line 134]
kernel32.dll + 0xb50b (0x7c80b50b)