336011 - XMLhttprequest crashes FF 1.5.0.2 CZ on parsing big result [@ js_Interpret]

Status: RESOLVED WORKSFORME

(Core :: JavaScript Engine, defect)

Description

[Aleš Janèo]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; cs; rv:1.8.0.2) Gecko/20060308 Firefox/1.5.0.2
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; cs; rv:1.8.0.2) Gecko/20060308 Firefox/1.5.0.2

I am codig an AJAX application within the use of Prototype and ActieWidgets libraries. The application is constructed as single page wich dynamicaly loads AW object to show forms. If the amout of parsed object used to update innerHTML of "parentDIV" is small (small form) everything works fine.

When parsing big result (complicated form) the browser crashes with following error:

0000: 41 70 70 6c 69 63 61 74   Applicat
0008: 69 6f 6e 20 46 61 69 6c   ion Fail
0010: 75 72 65 20 20 66 69 72   ure  fir
0018: 65 66 6f 78 2e 65 78 65   efox.exe
0020: 20 31 2e 38 2e 32 30 30    1.8.200
0028: 36 30 2e 33 30 38 30 34   60.30804
0030: 20 69 6e 20 6a 73 33 32    in js32
0038: 35 30 2e 64 6c 6c 20 34   50.dll 4
0040: 2e 30 2e 30 2e 30 20 61   .0.0.0 a
0048: 74 20 6f 66 66 73 65 74   t offset
0050: 20 30 30 30 32 35 39 37    0002597
0058: 63 0d 0a                  c..     

and:

0000: 42 75 63 6b 65 74 3a 20   Bucket: 
0008: 32 38 33 39 36 34 37 32   28396472
0010: 32 0d 0a                  2..     



The same app does that in FF and NS, but not in IE !

Reproducible: Always

Steps to Reproduce:
1. Setup Ajax aplication
2. Send large amount of object to be parsed into innerHTML
3. If it will make the same as here the FF will crash

PS: For testing my application contact me on [e-mail]

Comment 1

[:Mook]

Reporter (Aleš):

Please uninstall and reinstall Firefox, but this time make a custom install with the Quality Feedback Agent installed.  (Doing so will not affect your extensions, settings, etc. which are stored in your user profile which is not removed on uninstall.)

After that, please reproduce the crash with a talkback ID (see http://kb.mozillazine.org/Talkback for more information).  This will let the developers have a better chance of finding out why this is crashing.

Thanks!

Comment 2

[Aleš Janèo]

TalkBack Crash info sent:

TalkBack Crash ID: TB18134749K

Comment 3

[timeless]

Incident ID: 18134749 
Stack Signature js_Interpret 3633ddf3 
Product ID Firefox15 
Build ID 2006030804 
Trigger Time 2006-04-30 08:43:01.0 
Platform Win32 
Operating System Windows NT 5.1 build 2600 
Module js3250.dll + (0002597c) 
URL visited itc.ace-com.cz/PNC/index.php 
User Comments This page uses XMLhttpRequest to obtain its content. If loading small amount of data everything works ok, if large amount of data is pased into innerHTML method, the browser crashes 
Since Last Crash 3353 sec 
Total Uptime 476587 sec 
Trigger Reason Access violation 
Source File, Line No. c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/js/src/jsinterp.c, line 4261 
Stack Trace  

js_Interpret  [c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/js/src/jsinterp.c, line 4261]
js_Execute  [c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/js/src/jsinterp.c, line 1424]
obj_eval  [c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/js/src/jsobj.c, line 1266]
js_Invoke  [c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/js/src/jsinterp.c, line 1177]
js_Interpret  [c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/js/src/jsinterp.c, line 3562]
js_Invoke  [c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/js/src/jsinterp.c, line 1197]
js_Interpret  [c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/js/src/jsinterp.c, line 3562]
js_Invoke  [c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/js/src/jsinterp.c, line 1197]
js_Interpret  [c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/js/src/jsinterp.c, line 3562]
js_Invoke  [c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/js/src/jsinterp.c, line 1197]
js_InternalInvoke  [c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/js/src/jsinterp.c, line 1274]
JS_CallFunctionValue  [c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/js/src/jsapi.c, line 4171]
nsJSContext::CallEventHandler  [c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/dom/src/base/nsJSEnvironment.cpp, line 1411]
nsGlobalWindow::RunTimeout  [c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/dom/src/base/nsGlobalWindow.cpp, line 6360]
nsGlobalWindow::TimerCallback  [c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/dom/src/base/nsGlobalWindow.cpp, line 6723]
nsAppStartup::Run  [c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/toolkit/components/startup/src/nsAppStartup.cpp, line 151]
main  [c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/browser/app/nsBrowserApp.cpp, line 61]
kernel32.dll + 0x16d4f (0x7c816d4f)

Comment 4

[Bob Clary [:bc] (inactive)]

Aleš, can you reproduce this with a 1.5.0.4 or 1.5.0.5 nightly build?

Comment 5

[Aleš Janèo]

(In reply to comment #4)
> Aleš, can you reproduce this with a 1.5.0.4 or 1.5.0.5 nightly build?
> 

Well standard 1.5.0.4 CZ still crashes. The only nightly build I was able to get was MineField 3.0a1, witch I must say, woks perfect. The form (previously crashed FF) loaded by AJAX and parsed OK, no more crashes ;-)

I'll try to test it bit more (by using it with my development tools for a while).

If anything comes in sight, I'll report back.

Comment 6

[Bob Clary [:bc] (inactive)]

You can get a 1.5.0.5 nightly build from <http://ftp.mozilla.org/pub/mozilla.org/firefox/nightly/latest-mozilla1.8.0/> and a nightly Bon Echo (Firefox 2) build from <http://ftp.mozilla.org/pub/mozilla.org/firefox/nightly/latest-mozilla1.8/>. If it still crashes on those, then reopen this bug as it is filed against the 1.8 branch although it is good that it doesn't crash on the trunk.

Comment 7

[Aleš Janèo]

firefox-1.5.0.5.en-US.win32    -> Still CRASHES
firefox-2.0a3.en-US.win32      -> Still CRASHES

firefox-3.0a1.en-US.win32      -> Seems to work

Comment 8

[Thom]

20060308 is too old a 
build to report bugs against now. The problem you are reporting may well have 
been fixed already. 

Could you please download a recent nightly build from 
<http://www.mozilla.org/releases/nightly.html>, and then let us know if you 
still see this problem?

Comment 9

[Jonas Sicking (:sicking) No longer reading bugmail consistently]

Sounds like this is fixed in FF3. Closing per comment 7. Please reopen if you can still reproduce in the latest FF3 release.