347543 - crash [@ nsMenuFrame::Notify() a6fbfbc0 ] pasting into a form

Status: VERIFIED DUPLICATE of bug 241733

(Firefox :: General, defect)

Description

[Tony Mechelynck [:tonymec]]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.0.6) Gecko/20060805 Firefox/1.5.0.6
Build Identifier: "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.0.6) Gecko/20060805 Firefox/1.5.0.6" - Build ID: 2006080504

TB21807263Q


Reproducible: Didn't try

Actual Results:  
crash

Expected Results:  
no crash

Incident ID: 21807263
Stack Signature	nsMenuFrame::Notify() a6fbfbc0
Product ID	Firefox15
Build ID	2006080504
Trigger Time	2006-08-05 08:44:58.0
Platform	LinuxIntel
Operating System	Linux 2.6.11.4-21.13-default
Module	firefox-bin + (002ca558)
URL visited	http://www.spamcop.net/
User Comments	pasting into a form
Since Last Crash	0 sec
Total Uptime	0 sec
Trigger Reason	SIGSEGV: Segmentation Fault: (signal 11)
Source File, Line No.	/builds/tinderbox/Fx-Mozilla1.8.0/Linux_2.4.21-37.EL_Depend/mozilla/layout/xul/base/src/nsMenuFrame.cpp, line 1305
Stack Trace 	
nsMenuFrame::Notify()  [/builds/tinderbox/Fx-Mozilla1.8.0/Linux_2.4.21-37.EL_Depend/mozilla/layout/xul/base/src/nsMenuFrame.cpp, line 1305]
nsTimerImpl::Fire()  [/builds/tinderbox/Fx-Mozilla1.8.0/Linux_2.4.21-37.EL_Depend/mozilla/xpcom/threads/nsTimerImpl.cpp, line 398]
handleTimerEvent()  [/builds/tinderbox/Fx-Mozilla1.8.0/Linux_2.4.21-37.EL_Depend/mozilla/xpcom/threads/nsTimerImpl.cpp, line 462]
PL_HandleEvent()  [/builds/tinderbox/Fx-Mozilla1.8.0/Linux_2.4.21-37.EL_Depend/mozilla/xpcom/threads/plevent.c, line 689]
PL_ProcessPendingEvents()  [/builds/tinderbox/Fx-Mozilla1.8.0/Linux_2.4.21-37.EL_Depend/mozilla/xpcom/threads/plevent.c, line 623]
nsEventQueueImpl::ProcessPendingEvents()  [/builds/tinderbox/Fx-Mozilla1.8.0/Linux_2.4.21-37.EL_Depend/mozilla/xpcom/threads/nsEventQueue.cpp, line 421]
event_processor_callback()  [/builds/tinderbox/Fx-Mozilla1.8.0/Linux_2.4.21-37.EL_Depend/mozilla/widget/src/gtk2/nsAppShell.cpp, line 67]
libglib-2.0.so.0 + 0x4a69f (0x405fe69f)
libglib-2.0.so.0 + 0x23967 (0x405d7967)
libglib-2.0.so.0 + 0x25ce2 (0x405d9ce2)
libglib-2.0.so.0 + 0x26cf7 (0x405dacf7)
libgtk-x11-2.0.so.0 + 0x116be3 (0x402d7be3)
nsAppShell::Run()  [/builds/tinderbox/Fx-Mozilla1.8.0/Linux_2.4.21-37.EL_Depend/mozilla/widget/src/gtk2/nsAppShell.cpp, line 141]
nsAppStartup::Run()  [/builds/tinderbox/Fx-Mozilla1.8.0/Linux_2.4.21-37.EL_Depend/mozilla/toolkit/components/startup/src/nsAppStartup.cpp, line 151]
XRE_main()  [/builds/tinderbox/Fx-Mozilla1.8.0/Linux_2.4.21-37.EL_Depend/mozilla/toolkit/xre/nsAppRunner.cpp, line 2376]
main()  [/builds/tinderbox/Fx-Mozilla1.8.0/Linux_2.4.21-37.EL_Depend/mozilla/browser/app/nsBrowserApp.cpp, line 62]
libc.so.6 + 0x14e80 (0x40a1fe80)

Comment 1

[Steve England [:stevee]]

Sounds like bug 345969 which was duped to bug 241733 (Fixed for ff2.0)

*** This bug has been marked as a duplicate of 241733 ***

Comment 2

[Tony Mechelynck [:tonymec]]

also TB21817855W with identical stack AFAICT; clicking a tag; not the same URI.

Comment 3

[Adam Guthrie]

FYI, Tony: if a crash has the same stack, it doesn't matter how you trigger it unless the following are true:
* someone needs a reliable way to reproduce the crash or
* the crash is fixed when triggered by one behavior, yet it can still be triggered by some other behavior.

Comment 4

[Tony Mechelynck [:tonymec]]

(In reply to comment #3)
> FYI, Tony: if a crash has the same stack, it doesn't matter how you trigger it
> unless the following are true:
> * someone needs a reliable way to reproduce the crash or
> * the crash is fixed when triggered by one behavior, yet it can still be
> triggered by some other behavior.
> 

OK. It's just that Talkback asks me "what I was doing" (optional), and usually I fill it in. If I'm not mistaken I got the same stack doing "not identically" the same thing. I don't know why sometimes I get the crash (and most times I don't) other than (IIUC) there's a race condition somewhere that can cause it.

I'm waiting (with fingers crossed) for the time when I'll be using a version "fixed" for this bug, either by the fix being ported back to the branch I'm using, or by me moving to some later branch after the latter is declared "fit for public consumption" ;-)

Comment 5

[Tony Mechelynck [:tonymec]]

a few minutes ago: TB21952271G submitting a form

with "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.0.6) Gecko/20060809 Firefox/1.5.0.6" - Build ID: 2006080904