357075 - SeaMonkey 1.0.5 segfaults when copying links to buffer [@ nsHTMLReflowState::CalculateBlockSideMargins]

Status: RESOLVED WORKSFORME

(Core :: Layout, defect)

Description

[Cronfy]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.0.7) Gecko/20061017 SeaMonkey/1.0.5
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.0.7) Gecko/20061017 SeaMonkey/1.0.5

Seamonkey 1.0.5, Gentoo.

When I try to copy a link from some pages to buffer, or to bookmark them, or to
open them in a tab SeaMonkey crashes with this:

cronfy@cronfy ~ $ seamonkey
No running windows found
/usr/libexec/mozilla-launcher: line 117: 23296 Segmentation fault     
"$mozbin" "$@"
seamonkey-bin exited with non-zero status (139)
cronfy@cronfy ~ $

As far as I cannot represent this bug on my coworkers'
computers (Gentoo, SeaMonkey 1.0.5 too, but everything is just fine),  let me
know how I can provide more info.



Reproducible: Always

Steps to Reproduce:

1. Open http://cl.uxp.ru/~cronfy/yandsearch.html
2. Try to copy several links to buffer or to bookmark them.
3. SeaMonkey crashes.
Actual Results:  
SeaMonkey crashes with this:

cronfy@cronfy ~ $ seamonkey
No running windows found
/usr/libexec/mozilla-launcher: line 117: 23296 Segmentation fault     
"$mozbin" "$@"
seamonkey-bin exited with non-zero status (139)
cronfy@cronfy ~ $

Expected Results:  
Links in a cut-buffer.

Something similar to this happened to Firefox, this was the reason for me to
try SeaMonkey. FF was crashing when I just was trying to open pages from
http://news.yandex.ru. Binary distribution of FF did not crash.

I use Gentoo, emerge --info goes with an attachment.

Comment 1

[Cronfy]

Attachment: Information about my Gentoo system.

Comment 2

[Cronfy]

Attachment: about:buildconfig

Comment 3

[Cronfy]

I built Seamonkey with USE="debug". I also updated my system with latest Gentoo portage tree. The bug is still here. Here is more info about this:

cronfy@cronfy ~ $ seamonkey
No running windows found
Type Manifest File: /usr/lib/seamonkey/components/xpti.dat
nsNativeComponentLoader: autoregistering begins.
nsNativeComponentLoader: autoregistering succeeded
nsNativeComponentLoader: registering deferred (0)
GFX: dpi=96 t2p=0.0666667 p2t=15 depth=16
++WEBSHELL == 1
++DOMWINDOW == 1
++WEBSHELL == 2
++DOMWINDOW == 2
++DOMWINDOW == 3
++DOMWINDOW == 4
Note: styleverifytree is disabled
Note: frameverifytree is disabled
Note: verifyreflow is disabled
++WEBSHELL == 3
++DOMWINDOW == 5
++DOMWINDOW == 6
++DOMWINDOW == 7
Charset windows-1251->  0
Charset KOI8-R->        0
Charset ISO-8859-5->    591006
Charset x-mac-cyrillic->        0
Charset IBM866->        0
Document http://www.google.com/ loaded successfully
--DOMWINDOW == 6
WARNING: NS_ENSURE_TRUE(aURI) failed, file nsDefaultURIFixup.cpp, line 75
++DOMWINDOW == 7
CSS Error (http://passport.yandex.ru/pass_style.css :52.43): Expected end of value for property but found 'eem'.  Error in parsing value for property 'line-height'.  Declaration dropped.
WARNING: NS_ENSURE_TRUE(mSaveLayoutState || !aState) failed, file nsSHEntry.cpp, line 290
Document http://lenta.yandex.ru/read.xml loaded successfully
++DOMWINDOW == 8
CSS Error (http://lenta.yandex.ru/global.css?1 :84.2): Expected declaration but found '/'.  Skipped to next declaration.
CSS Error (http://lenta.yandex.ru/global.css?1 :153.19): Expected declaration but found '/'.  Skipped to next declaration.
CSS Error (http://lenta.yandex.ru/global.css?1 :154.19): Expected declaration but found '/'.  Skipped to next declaration.
CSS Error (http://lenta.yandex.ru/global.css?1 :183.0): Selector expected.  Ruleset ignored due to bad selector.
CSS Error (http://lenta.yandex.ru/global.css?1 :244.2): Expected declaration but found '/'.  Skipped to next declaration.
CSS Error (http://lenta.yandex.ru/global.css?1 :291.0): Expected end of value for property but found ':'.  Error in parsing value for property 'float'.  Declaration dropped.
CSS Error (http://lenta.yandex.ru/local.css :72.19): Error in parsing value for property 'list-style-type'.  Declaration dropped.
CSS Error (http://lenta.yandex.ru/local.css :262.2): Expected declaration but found '/'.  Skipped to next declaration.
CSS Error (http://lenta.yandex.ru/local.css :377.61): Error in parsing value for property 'display'.  Declaration dropped.
CSS Error (http://lenta.yandex.ru/local.css :427.2): Expected declaration but found '/'.  Skipped to next declaration.
CSS Error (http://lenta.yandex.ru/local.css :508.19): Expected declaration but found '/'.  Skipped to next declaration.
CSS Error (http://lenta.yandex.ru/local.css :519.2): Expected declaration but found '/'.  Skipped to next declaration.
CSS Error (http://lenta.yandex.ru/local.css :520.2): Expected declaration but found '/'.  Skipped to next declaration.
CSS Error (http://lenta.yandex.ru/local.css :598.20): Expected declaration but found '/'.  Skipped to next declaration.
CSS Error (http://lenta.yandex.ru/gazeta.css :10.94): Expected declaration but found '/'.  Skipped to next declaration.
CSS Error (http://lenta.yandex.ru/gazeta.css :18.138): Expected declaration but found '/'.  Skipped to next declaration.
CSS Error (http://lenta.yandex.ru/gazeta.css :19.153): Expected declaration but found '/'.  Skipped to next declaration.
CSS Error (http://lenta.yandex.ru/gazeta.css :19.173): Expected declaration but found '/'.  Skipped to next declaration.
CSS Error (http://lenta.yandex.ru/gazeta.css :22.142): Expected declaration but found '/'.  Skipped to next declaration.
CSS Error (http://lenta.yandex.ru/gazeta.css :23.156): Expected declaration but found '/'.  Skipped to next declaration.
CSS Error (http://lenta.yandex.ru/gazeta.css :23.176): Expected declaration but found '/'.  Skipped to next declaration.
CSS Error (http://lenta.yandex.ru/gazeta.css :33.138): Expected declaration but found '/'.  Skipped to next declaration.
CSS Error (http://lenta.yandex.ru/gazeta.css :34.109): Expected declaration but found '/'.  Skipped to next declaration.
CSS Error (http://lenta.yandex.ru/gazeta.css :39.35): Expected declaration but found '/'.  Skipped to next declaration.
CSS Error (http://lenta.yandex.ru/gazeta.css :74.2): Expected declaration but found '/'.  Skipped to next declaration.
CSS Error (http://lenta.yandex.ru/gazeta.css :87.2): Expected declaration but found '/'.  Skipped to next declaration.
CSS Error (http://lenta.yandex.ru/gazeta.css :116.10): Unknown property 'behavior'.  Declaration dropped.
CSS Error (http://lenta.yandex.ru/gazeta.css :120.19): Expected declaration but found '/'.  Skipped to next declaration.
CSS Error (http://lenta.yandex.ru/gazeta.css :144.19): Expected declaration but found '/'.  Skipped to next declaration.
CSS Error (http://lenta.yandex.ru/gazeta.css :170.19): Expected declaration but found '/'.  Skipped to next declaration.
CSS Error (http://lenta.yandex.ru/gazeta.css :197.2): Expected declaration but found '/'.  Skipped to next declaration.
CSS Error (http://lenta.yandex.ru/gazeta.css :201.60): Expected declaration but found '/'.  Skipped to next declaration.
CSS Error (http://lenta.yandex.ru/gazeta.css :219.19): Expected declaration but found '/'.  Skipped to next declaration.
CSS Error (http://lenta.yandex.ru/gazeta.css :233.135): Expected declaration but found '/'.  Skipped to next declaration.
CSS Error (http://lenta.yandex.ru/gazeta.css :258.17): Error in parsing value for property 'margin-left'.  Declaration dropped.
CSS Error (http://lenta.yandex.ru/gazeta.css :292.2): Expected declaration but found '/'.  Skipped to next declaration.
CSS Error (http://lenta.yandex.ru/gazeta.css :313.87): Error in parsing value for property 'right'.  Declaration dropped.
CSS Error (http://lenta.yandex.ru/gazeta.css :314.103): Error in parsing value for property 'cursor'.  Declaration dropped.
CSS Error (http://lenta.yandex.ru/gazeta.css :350.104): Error in parsing value for property 'width'.  Declaration dropped.
CSS Error (http://lenta.yandex.ru/gazeta.css :359.53): Expected declaration but found '/'.  Skipped to next declaration.
CSS Error (http://lenta.yandex.ru/gazeta.css :403.123): Expected declaration but found '/'.  Skipped to next declaration.
CSS Error (http://lenta.yandex.ru/gazeta.css :406.84): Error in parsing value for property 'cursor'.  Declaration dropped.
CSS Error (http://lenta.yandex.ru/gazeta.css :407.89): Error in parsing value for property 'cursor'.  Declaration dropped.
CSS Error (http://lenta.yandex.ru/gazeta.css :429.38): Error in parsing value for property 'font-size'.  Declaration dropped.
CSS Error (http://lenta.yandex.ru/gazeta.css :433.70): Expected declaration but found '/'.  Skipped to next declaration.
CSS Error (http://lenta.yandex.ru/gazeta.css :434.40): Expected declaration but found '/'.  Skipped to next declaration.
CSS Error (http://lenta.yandex.ru/gazeta.css :460.23): Error in parsing value for property 'white-space'.  Declaration dropped.
CSS Error (http://lenta.yandex.ru/gazeta.css :461.25): Error in parsing value for property 'white-space'.  Declaration dropped.
CSS Error (http://lenta.yandex.ru/gazeta.css :462.22): Error in parsing value for property 'white-space'.  Declaration dropped.
CSS Error (http://lenta.yandex.ru/gazeta.css :463.11): Unknown property 'word-wrap'.  Declaration dropped.
CSS Error (http://lenta.yandex.ru/gazeta.css :471.82): Expected declaration but found '/'.  Skipped to next declaration.
CSS Error (http://lenta.yandex.ru/gazeta.css :486.58): Error in parsing value for property 'cursor'.  Declaration dropped.
CSS Error (http://lenta.yandex.ru/gazeta.css :491.2): Expected declaration but found '/'.  Skipped to next declaration.
CSS Error (http://lenta.yandex.ru/gazeta.css :494.15): Expected ',' in media list but found 'and'.  Unrecognized at-rule or error parsing at-rule 'and'.
CSS Error (http://lenta.yandex.ru/gazeta.css :512.21): Expected declaration but found '/'.  Skipped to next declaration.
CSS Error (http://lenta.yandex.ru/css/toolbar.css :6.97): Error in parsing value for property 'cursor'.  Declaration dropped.
CSS Error (http://lenta.yandex.ru/css/toolbar.css :29.144): Expected declaration but found '/'.  Skipped to next declaration.
Document https://passport.yandex.ru/passport?mode=auth loaded successfully
++WEBSHELL == 4
++DOMWINDOW == 9
++DOMWINDOW == 10
WARNING: NS_ENSURE_TRUE(aURI) failed, file nsDefaultURIFixup.cpp, line 75
++DOMWINDOW == 11
CSS Error (http://news.yandex.ru/yandsearch?cl4url=gzt.ru/incident/2006/10/27/144035.html&country=Russia :180.122): Expected end of value for property but found 'height'.  Error in parsing value for property 'width'.  Declaration dropped.
--DOMWINDOW == 10
--DOMWINDOW == 9
Document http://news.yandex.ru/yandsearch?cl4url=gzt.ru/incident/2006/10/27/144035.html&country=Russia loaded successfully
++WEBSHELL == 5
++DOMWINDOW == 10
++DOMWINDOW == 11
WARNING: NS_ENSURE_TRUE(aURI) failed, file nsDefaultURIFixup.cpp, line 75
++DOMWINDOW == 12
###!!! ASSERTION: font metrics should not be null - bug 136248: 'NS_SUCCEEDED(rv)', file nsDeviceContext.cpp, line 669
Break: at file nsDeviceContext.cpp, line 669

Program /usr/lib/seamonkey/seamonkey-bin (pid = 19405) received signal 11.
Stack:
Stacktrace disabled for now.
See https://bugzilla.mozilla.org/show_bug.cgi?id=323853
Sleeping for 300 seconds.
Type 'gdb /usr/lib/seamonkey/seamonkey-bin 19405' to attach your debugger to this thread.
Done sleeping...
seamonkey-bin exited with non-zero status (11)

Comment 4

[Andrew Schultz]

> Type 'gdb /usr/lib/seamonkey/seamonkey-bin 19405' to attach your debugger to
> this thread.

Please do this and then
(gdb) bt

copy/paste the bt output into a file and attach the file here (Create a New Attachment)

Comment 5

[Cronfy]

Attachment: Seamonkey crash log [2].

Comment 6

[Cronfy]

Attachment: Seamokney gdb output [2]

Here is second crash log with gdb output. I will be keeping this gdb session for today, let me know how to provide more info.

Comment 7

[Andrew Schultz]

OK, thanks.  Can you try a .mozilla.org binary build?
http://ftp.mozilla.org/pub/mozilla.org/seamonkey/nightly/latest-trunk/
http://ftp.mozilla.org/pub/mozilla.org/seamonkey/nightly/latest-mozilla1.8.0/

And/or can you try building without Gentoo patches?
And/or can you try invoking seamonkey from the build tree itself (mozilla/[objdir/]dist/bin/seamonkey)?  It will give gdb more symbol info.

Comment 8

[Cronfy]

Whew. Not so easy.

Binary build works fine. 

What about building without Gentoo patches - I commented out patches applying in ebuild and the build failed. Sorry, I lost the message, I will post it once I meet it.

I've just built Seamonkey 1.0.6 from source using my own .mozconfig, created with help of Mozilla Developer Center documentation. Seamonkey works fine, but cyrillic fonts are hard readable. 

There are message in my Seamonkey debug-log that says something about font metrics. I'll try to build Seamonkey with some more options, closer to Gentoo ebuild, and with some fonts-tuning options.

Please let me know if I can make my build tests wiser.

Comment 9

[Andrew Schultz]

What was your .mozconfig?

Comment 10

[Cronfy]

I have 2 .mozconfig files. cronfy.mozconfig was created by documentation on http://www.mozilla.org/build/. gentoo.mozconig is Gentoo's one, stolen from emerge's working directory.

cronfy.mozconfig builds Seamonkey 1.0.6 fine, it does not crash, but russian fonts look ugly.

gentoo.mozconfig fails to build Seamonkey:

gmake[2]: Entering directory `/home/cronfy/tmp/mozilla/security/manager'
/usr/bin/gmake -C ../../security/coreconf MAKE="/usr/bin/gmake -j1" -j1 CC="gcc" MOZILLA_INCLUDES="-I/home/cronfy/tmp/mozilla/dist/include/nspr -I/home/cronfy/tmp/mozilla/dist/include/dbm" SOURCE_MD_DIR=/home/cronfy/tmp/mozilla/dist DIST=/home/cronfy/tmp/mozilla/dist MOZILLA_CLIENT=1 NO_MDUPDATE=1 NS_USE_GCC=1 NS_USE_NATIVE=
gmake[3]: Entering directory `/home/cronfy/tmp/mozilla/security/coreconf'
syntax error at -e line 3, near "while"
syntax error at -e line 7, near "}"
Execution of -e aborted due to compilation errors.
cd nsinstall; /usr/bin/gmake -j1 export
gmake[4]: Entering directory `/home/cronfy/tmp/mozilla/security/coreconf/nsinstall'
syntax error at -e line 3, near "while"
syntax error at -e line 7, near "}"

... and so on.

emerge seamonkey build Seamonkey fine, but it craches very often.

Comment 11

[Cronfy]

Attachment: .mozconfig by documentation

Comment 12

[Cronfy]

Attachment: .mozconfig by Gentoo

Comment 13

[Andrew Schultz]

OK.  the build error you hit is bug 325148.  you'll need attachment 233858 [details] [diff] [review].  emerge probably includes the patch.

The russian fonts look better with gentoo.mozconfig because it enables pango.  pango is enabled by default on trunk but not the branch.  It doesn't seem to be causing the crash directly in the stack you attached but perhaps it changed the display of the page such that a layout bug was triggered.

The rest of the options shouldn't have caused the crash you hit (based on the stack).

Comment 14

[Tanner M. Young [:tmyoung]]

Is this still an issue in Firefox 3.5 or the latest Seamonkey version?

Comment 15

[Cronfy]

No, everything is fine. Thank you,