340692 - crash [@ libqtengine.so + 0xa5f7 (0x414315f7) cc262afc] starting download by indirect URL

Status: RESOLVED DUPLICATE of bug 312455

(Core Graveyard :: GFX: Gtk, defect)

Description

[Tony Mechelynck [:tonymec]]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.0.4) Gecko/20060607 Firefox/1.5.0.4
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.0.4) Gecko/20060607 Firefox/1.5.0.4

clicking a link like the one mentioned above sub "URL" (which initiates a download of a zipfile) instantly crashes Firefox.

Reproducible: Always

Steps to Reproduce:
1. Browse to http://www.deviantart.com/deviation/30657082/
2. Click "Download to Desktop" under the main picture


Actual Results:  
Firefox crashes

Expected Results:  
A download (of a zipfile) should have started

Workaround:
1. Click right on "Download to Desktop" then "Copy Link Location"
2. Copy clipboard contents to Konqueror's URL bar
3. Hit Enter. (Konqueror downloads the zipfile with no problem.)

Comment 1

[Tony Mechelynck [:tonymec]]

Oops... Forgot to add Talkback ID: TB19606067X

Stack Signature	 libqtengine.so + 0xa5f7 (0x414315f7) cc262afc
Product ID	Firefox15
Build ID	2006060704
Trigger Time	2006-06-07 09:17:09.0
Platform	LinuxIntel
Operating System	Linux 2.6.11.4-21.12-default
Module	libqtengine.so + (0000a5f7)
URL visited	
User Comments	
Since Last Crash	1 sec
Total Uptime	1 sec
Trigger Reason	SIGSEGV: Segmentation Fault: (signal 11)
Source File, Line No.	N/A
Stack Trace 	
libqtengine.so + 0xa5f7 (0x414315f7)
libgtk-x11-2.0.so.0 + 0x16bbea (0x40326bea)
moz_gtk_dropdown_arrow_paint()  [/builds/tinderbox/Fx-Mozilla1.8.0/Linux_2.4.21-37.EL_Depend/mozilla/gfx/src/gtk/gtk2drawing.c, line 973]
nsNativeThemeGTK::DrawWidgetBackground()  [/builds/tinderbox/Fx-Mozilla1.8.0/Linux_2.4.21-37.EL_Depend/mozilla/gfx/src/gtk/nsNativeThemeGTK.cpp, line 458]
nsCSSRendering::PaintBackgroundWithSC()  [/builds/tinderbox/Fx-Mozilla1.8.0/Linux_2.4.21-37.EL_Depend/mozilla/layout/base/nsCSSRendering.cpp, line 2825]
nsCSSRendering::PaintBackground()  [/builds/tinderbox/Fx-Mozilla1.8.0/Linux_2.4.21-37.EL_Depend/mozilla/layout/base/nsCSSRendering.cpp, line 2749]
nsFrame::PaintSelf()  [/builds/tinderbox/Fx-Mozilla1.8.0/Linux_2.4.21-37.EL_Depend/mozilla/layout/generic/nsFrame.cpp, line 945]
nsBoxFrame::Paint()  [/builds/tinderbox/Fx-Mozilla1.8.0/Linux_2.4.21-37.EL_Depend/mozilla/layout/xul/base/src/nsBoxFrame.cpp, line 1423]
nsBoxFrame::PaintChild()  [/builds/tinderbox/Fx-Mozilla1.8.0/Linux_2.4.21-37.EL_Depend/mozilla/layout/xul/base/src/nsBoxFrame.cpp, line 329]
nsBoxFrame::PaintChildren()  [/builds/tinderbox/Fx-Mozilla1.8.0/Linux_2.4.21-37.EL_Depend/mozilla/layout/xul/base/src/nsBoxFrame.cpp, line 1429]
nsBoxFrame::Paint()  [/builds/tinderbox/Fx-Mozilla1.8.0/Linux_2.4.21-37.EL_Depend/mozilla/layout/xul/base/src/nsBoxFrame.cpp, line 1445]
nsBoxFrame::PaintChild()  [/builds/tinderbox/Fx-Mozilla1.8.0/Linux_2.4.21-37.EL_Depend/mozilla/layout/xul/base/src/nsBoxFrame.cpp, line 329]
nsBoxFrame::PaintChildren()  [/builds/tinderbox/Fx-Mozilla1.8.0/Linux_2.4.21-37.EL_Depend/mozilla/layout/xul/base/src/nsBoxFrame.cpp, line 1429]
nsBoxFrame::Paint()  [/builds/tinderbox/Fx-Mozilla1.8.0/Linux_2.4.21-37.EL_Depend/mozilla/layout/xul/base/src/nsBoxFrame.cpp, line 1445]
PresShell::Paint()  [/builds/tinderbox/Fx-Mozilla1.8.0/Linux_2.4.21-37.EL_Depend/mozilla/layout/base/nsPresShell.cpp, line 5817]
nsView::Paint()  [/builds/tinderbox/Fx-Mozilla1.8.0/Linux_2.4.21-37.EL_Depend/mozilla/view/src/nsView.cpp, line 848]
nsViewManager::RenderDisplayListElement()  [/builds/tinderbox/Fx-Mozilla1.8.0/Linux_2.4.21-37.EL_Depend/mozilla/view/src/nsViewManager.cpp, line 1460]
nsViewManager::RenderViews()  [/builds/tinderbox/Fx-Mozilla1.8.0/Linux_2.4.21-37.EL_Depend/mozilla/view/src/nsViewManager.cpp, line 1375]
nsViewManager::Refresh()  [/builds/tinderbox/Fx-Mozilla1.8.0/Linux_2.4.21-37.EL_Depend/mozilla/view/src/nsViewManager.cpp, line 930]
nsViewManager::DispatchEvent()  [/builds/tinderbox/Fx-Mozilla1.8.0/Linux_2.4.21-37.EL_Depend/mozilla/view/src/nsViewManager.cpp, line 842]
HandleEvent()  [/builds/tinderbox/Fx-Mozilla1.8.0/Linux_2.4.21-37.EL_Depend/mozilla/view/src/nsView.cpp, line 251]
nsCommonWidget::DispatchEvent()  [/builds/tinderbox/Fx-Mozilla1.8.0/Linux_2.4.21-37.EL_Depend/mozilla/widget/src/gtk2/nsCommonWidget.cpp, line 219]
nsWindow::OnExposeEvent()  [/builds/tinderbox/Fx-Mozilla1.8.0/Linux_2.4.21-37.EL_Depend/mozilla/widget/src/gtk2/nsWindow.cpp, line 842]
expose_event_cb()  [/builds/tinderbox/Fx-Mozilla1.8.0/Linux_2.4.21-37.EL_Depend/mozilla/widget/src/gtk2/nsWindow.cpp, line 3625]
libgtk-x11-2.0.so.0 + 0x11b81e (0x402d681e)
libgobject-2.0.so.0 + 0x78db (0x4057d8db)
libgobject-2.0.so.0 + 0x16d8b (0x4058cd8b)
libgobject-2.0.so.0 + 0x17ff2 (0x4058dff2)
libgobject-2.0.so.0 + 0x18626 (0x4058e626)
libgtk-x11-2.0.so.0 + 0x202f14 (0x403bdf14)
libgtk-x11-2.0.so.0 + 0x1166ee (0x402d16ee)
libgdk-x11-2.0.so.0 + 0x2936d (0x404ac36d)
libgdk-x11-2.0.so.0 + 0x294df (0x404ac4df)
libgtk-x11-2.0.so.0 + 0x8c66a (0x4024766a)
libglib-2.0.so.0 + 0x22051 (0x405d0051)
libglib-2.0.so.0 + 0x23967 (0x405d1967)
libglib-2.0.so.0 + 0x25ce2 (0x405d3ce2)
libglib-2.0.so.0 + 0x26cf7 (0x405d4cf7)
libgtk-x11-2.0.so.0 + 0x116be3 (0x402d1be3)
nsAppShell::Run()  [/builds/tinderbox/Fx-Mozilla1.8.0/Linux_2.4.21-37.EL_Depend/mozilla/widget/src/gtk2/nsAppShell.cpp, line 141]
nsAppStartup::Run()  [/builds/tinderbox/Fx-Mozilla1.8.0/Linux_2.4.21-37.EL_Depend/mozilla/toolkit/components/startup/src/nsAppStartup.cpp, line 151]
XRE_main()  [/builds/tinderbox/Fx-Mozilla1.8.0/Linux_2.4.21-37.EL_Depend/mozilla/toolkit/xre/nsAppRunner.cpp, line 2376]
main()  [/builds/tinderbox/Fx-Mozilla1.8.0/Linux_2.4.21-37.EL_Depend/mozilla/browser/app/nsBrowserApp.cpp, line 62]
libc.so.6 + 0x14e80 (0x40a19e80)

Comment 2

[Phil Ringnalda (:philor)]

Certainly looks like bug 312455 to me. See also the same stack in bug 340701.

Comment 3

[Adam Guthrie]

*** This bug has been marked as a duplicate of 312455 ***