357030 - Clicking an item causes Firefox to crash

Status: RESOLVED WORKSFORME

(Firefox :: General, defect)

Description

[Steve Grabauskas]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-GB; rv:1.8.1) Gecko/20060601 BonEcho/2.0 (Ubuntu-edgy)
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-GB; rv:1.8.1) Gecko/20060601 BonEcho/2.0 (Ubuntu-edgy)

Clicking on one of the programmes should pop up a window giving more details on the programme, but Firefox crashes.
I also get crashes (but no crash report) from http://news.bbc.co.uk/sport/default.stm when I select one of the items that should pop up a window (eg. "Audio and Video" in the top-right corner)


Reproducible: Always

Steps to Reproduce:
1. Browse to http://www.radiotimes.com/ and then click on "Now >"
, "Tonight >", "Tomorrow >" or the "Go" next to the date.
2. Click on one of the programmes displayed in the schedule.
3. Admire Firefox crashing ;-)

Actual Results:  
Firefox crashes.

Expected Results:  
Should pop up a window displaying details of the programme selected.

Have also tried uninstalling all themes and extensions, but the problem remains.

Comment 1

[Marcia Knous [:marcia]]

Steve: Can you please retry this using a more recent build from this directory: ftp://ftp.mozilla.org/pub/mozilla.org/firefox/releases/2.0rc3?

Comment 2

[Steve Grabauskas]

Downloaded firefox-2.0rc3.tar.gz, as suggested. Ran ./firefox from terminal. Went to the Radio Times website, "now >" section, clicked on a programme, and it crashed again. Output to terminal was;
./run-mozilla.sh: line 131:  9580 Segmentation fault      (core dumped) "$prog" ${1+"$@"}

I would send the crash report I had earlier, but it's 32.8 Mb!

Comment 3

[Adam Guthrie]

Talkback should be included with that build. Is it firing when you crash? http://kb.mozillazine.org/Talkback

Comment 4

[Steve Grabauskas]

Yes, it did. I filled in all the info it asked for. I then pressed the "Details" button, and it disappeared, so I'm not sure it actually sent anything :/

I'll give it another go.

Comment 5

[Steve Grabauskas]

Talkback feedback successfully sent this time. I've put this bug number in the info to help tie the report to this bug.

Comment 6

[timeless]

Incident ID: 24705790
Stack Signature	nsTextControlFrame::SetValue() 1acebdf2
Product ID	Firefox2
Build ID	2006101022
Trigger Time	2006-10-17 22:10:47.0
Platform	LinuxIntel
Operating System	Linux 2.6.17-10-386
Module	firefox-bin + (002a0b9a)
URL visited	http://www.radiotimes.com
User Comments	On the "Now" page of the above site. Clicked on a programme to get its' details, and Firefox crashed. Seems to be a Javascript problem. This crash came about while investigating bug #357030
Since Last Crash	0 sec
Total Uptime	0 sec
Trigger Reason	SIGSEGV: Segmentation Fault: (signal 11)
Source File, Line No.	/builds/tinderbox/Fx-Mozilla1.8-release/Linux_2.4.21-27.0.4.EL_Depend/mozilla/layout/forms/nsTextControlFrame.cpp, line 848
Stack Trace 	
nsTextControlFrame::SetValue()  [mozilla/layout/forms/nsTextControlFrame.cpp, line 848]
nsTextControlFrame::SetProperty()  [mozilla/layout/forms/nsTextControlFrame.cpp, line 2347]
nsHTMLInputElement::SetValueInternal()  [mozilla/content/html/content/src/nsHTMLInputElement.cpp, line 779]
nsHTMLInputElement::SetValue()  [mozilla/content/html/content/src/nsHTMLInputElement.cpp, line 740]
XPTC_InvokeByIndex()
XPCWrappedNative::CallMethod(XPCCallContext&, XPCWrappedNative::CallMode)()  [mozilla/js/src/xpconnect/src/xpcwrappednative.cpp, line 2168]
XPC_WN_GetterSetter()  [mozilla/js/src/xpconnect/src/xpcwrappednativejsops.cpp, line 1480]
js_Invoke()  [mozilla/js/src/jsinterp.c, line 1377]
js_InternalInvoke()  [mozilla/js/src/jsinterp.c, line 1472]
js_InternalGetOrSet()  [mozilla/js/src/jsinterp.c, line 1531]
js_SetProperty()  [mozilla/js/src/jsobj.c, line 3667]
js_Interpret()  [mozilla/js/src/jsinterp.c, line 3662]
js_Invoke()  [mozilla/js/src/jsinterp.c, line 1396]
js_InternalInvoke()  [mozilla/js/src/jsinterp.c, line 1472]
js_InternalGetOrSet()  [mozilla/js/src/jsinterp.c, line 1531]
js_SetProperty()  [mozilla/js/src/jsobj.c, line 3667]
js_Interpret()  [mozilla/js/src/jsinterp.c, line 3662]
js_Invoke()  [mozilla/js/src/jsinterp.c, line 1396]
js_InternalInvoke()  [mozilla/js/src/jsinterp.c, line 1472]
JS_CallFunctionValue()  [mozilla/js/src/jsapi.c, line 4420]
nsJSContext::CallEventHandler()  [mozilla/dom/src/base/nsJSEnvironment.cpp, line 1495]
nsGlobalWindow::RunTimeout()  [mozilla/dom/src/base/nsGlobalWindow.cpp, line 848]
nsGlobalWindow::TimerCallback()  [mozilla/dom/src/base/nsGlobalWindow.cpp, line 7086]
nsTimerImpl::Fire()  [mozilla/xpcom/threads/nsTimerImpl.cpp, line 395]
handleTimerEvent()  [mozilla/xpcom/threads/nsTimerImpl.cpp, line 462]
PL_HandleEvent()  [mozilla/xpcom/threads/plevent.c, line 689]
PL_ProcessPendingEvents()  [mozilla/xpcom/threads/plevent.c, line 623]
nsEventQueueImpl::ProcessPendingEvents()  [mozilla/xpcom/threads/nsEventQueue.cpp, line 421]
nsAppShell::Spindown()  [mozilla/widget/src/gtk2/nsAppShell.cpp, line 712]
nsXULWindow::CreateNewContentWindow()  [mozilla/xpfe/appshell/src/nsXULWindow.cpp, line 830]
nsXULWindow::CreateNewWindow()  [mozilla/xpfe/appshell/src/nsXULWindow.cpp, line 1740]
nsAppStartup::CreateChromeWindow2()  [mozilla/toolkit/components/startup/src/nsAppStartup.cpp, line 848]
nsWindowWatcher::OpenWindowJSInternal()  [mozilla/embedding/components/windowwatcher/src/nsWindowWatcher.cpp, line 734]
nsWindowWatcher::OpenWindowJS()  [mozilla/embedding/components/windowwatcher/src/nsWindowWatcher.cpp, line 540]
nsGlobalWindow::OpenInternal()  [mozilla/dom/src/base/nsGlobalWindow.cpp, line 848]
nsGlobalWindow::Open()  [mozilla/dom/src/base/nsGlobalWindow.cpp, line 4369]
XPTC_InvokeByIndex()
XPCWrappedNative::CallMethod(XPCCallContext&, XPCWrappedNative::CallMode)()  [mozilla/js/src/xpconnect/src/xpcwrappednative.cpp, line 2168]
XPC_WN_CallMethod()  [mozilla/js/src/xpconnect/src/xpcwrappednativejsops.cpp, line 1455]
js_Invoke()  [mozilla/js/src/jsinterp.c, line 1377]
js_Interpret()  [mozilla/js/src/jsinterp.c, line 4122]
js_Invoke()  [mozilla/js/src/jsinterp.c, line 1396]
js_InternalInvoke()  [mozilla/js/src/jsinterp.c, line 1472]
JS_CallFunctionValue()  [mozilla/js/src/jsapi.c, line 4420]
nsJSContext::CallEventHandler()  [mozilla/dom/src/base/nsJSEnvironment.cpp, line 1495]
nsJSEventListener::HandleEvent()  [mozilla/dom/src/events/nsJSEventListener.cpp, line 185]
nsEventListenerManager::HandleEventSubType()  [mozilla/content/events/src/nsEventListenerManager.cpp, line 1655]
nsEventListenerManager::HandleEvent()  [mozilla/content/events/src/nsEventListenerManager.cpp, line 1056]
nsGenericElement::HandleDOMEvent()  [mozilla/content/base/src/nsGenericElement.cpp, line 2232]
nsGenericHTMLElement::HandleDOMEventForAnchors()  [mozilla/content/html/content/src/nsGenericHTMLElement.cpp, line 1579]
PresShell::HandleEventInternal()  [mozilla/layout/base/nsPresShell.cpp, line 848]
PresShell::HandleEventWithTarget()  [mozilla/layout/base/nsPresShell.cpp, line 6323]
nsEventStateManager::CheckForAndDispatchClick()  [mozilla/content/events/src/nsEventStateManager.cpp, line 3207]
nsEventStateManager::PostHandleEvent()  [mozilla/content/events/src/nsEventStateManager.cpp, line 1056]
PresShell::HandleEventInternal()  [mozilla/layout/base/nsPresShell.cpp, line 848]
PresShell::HandleEvent()  [mozilla/layout/base/nsPresShell.cpp, line 6260]
nsViewManager::HandleEvent()  [mozilla/view/src/nsViewManager.cpp, line 848]
nsViewManager::DispatchEvent()  [mozilla/view/src/nsViewManager.cpp, line 2246]
HandleEvent()  [mozilla/view/src/nsView.cpp, line 251]
nsCommonWidget::DispatchEvent()  [mozilla/widget/src/gtk2/nsCommonWidget.cpp, line 219]
nsWindow::OnButtonReleaseEvent()  [mozilla/widget/src/gtk2/nsWindow.cpp, line 1692]
button_release_event_cb()  [mozilla/widget/src/gtk2/nsWindow.cpp, line 3843]
libgtk-x11-2.0.so.0 + 0x13cb00 (0xb7b80b00)
libgobject-2.0.so.0 + 0x979b (0xb791279b)
libgobject-2.0.so.0 + 0x19b93 (0xb7922b93)
libgobject-2.0.so.0 + 0x1ae7f (0xb7923e7f)
libgobject-2.0.so.0 + 0x1b279 (0xb7924279)
libgtk-x11-2.0.so.0 + 0x2505f8 (0xb7c945f8)
libgtk-x11-2.0.so.0 + 0x135ef3 (0xb7b79ef3)
libgtk-x11-2.0.so.0 + 0x1370f7 (0xb7b7b0f7)
libgdk-x11-2.0.so.0 + 0x447ea (0xb7a047ea)
libglib-2.0.so.0 + 0x2b802 (0xb789d802)
libglib-2.0.so.0 + 0x2e7df (0xb78a07df)
libglib-2.0.so.0 + 0x2eb89 (0xb78a0b89)
libgtk-x11-2.0.so.0 + 0x137574 (0xb7b7b574)
nsAppShell::Run()  [mozilla/widget/src/gtk2/nsAppShell.cpp, line 141]
nsAppStartup::Run()  [mozilla/toolkit/components/startup/src/nsAppStartup.cpp, line 152]
XRE_main()  [mozilla/toolkit/xre/nsAppRunner.cpp, line 2440]
main()  [mozilla/browser/app/nsBrowserApp.cpp, line 62]
libc.so.6 + 0x158cc (0xb738b8cc)

Comment 7

[Steve Grabauskas]

Attachment: useless bits for ubuntu

Just updated to Firefox 1.99+2.0rc3+dfsg-0ubuntu1 on Edgy Eft, so I thought I'd see if Firefox still crashes when it should open pop-up windows. It does. Went to http://news.bbc.co.uk/sport/default.stm and kicked on "Audio and Video" button at top-right of page - Firefox crashed straight away. Hope this crash report helps pinning this down ;-)

Comment 8

[Majken Connor [:Kensie]]

have you tried creating an additional clean profile for testing?

Comment 9

[Steve Grabauskas]

Aha! Created a test user on here, and logging in on that. No Firefox crashes, so it appears to be something screwy in my profile somewhere :/

Got any ideas of what I should look for?

Comment 10

[Steve Grabauskas]

Well, a combination of running from a clean profile and then renaming my localstore.rdf file seems to have cleared the problem. I'll do a bit more testing, and let you know if anything nasty happens.

Comment 11

[H. Montoliu]

We are still receiving crashes with this stack trace from time to time in ubuntu's bug tracker (last dup is from FF2.0.0.4):

MASTER Firefox Crashed [@nsTextControlFrame::SetValue] [@nsTextControlFrame::SetProperty] https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/89090