358290 - loading a page and browser crashes [@ nsImageLoadingContent::DestroyImageLoadingContent]

Status: RESOLVED INCOMPLETE

(Core :: Layout: Images, Video, and HTML Frames, defect)

Description

[Dieter Lunn]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1) Gecko/20060601 Firefox/2.0 (Ubuntu-edgy)
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1) Gecko/20060601 Firefox/2.0 (Ubuntu-edgy)

using stumbleupon when loading a page with unknown items causes the browser window to disappear.

Reproducible: Couldn't Reproduce

Comment 1

[Adam Guthrie]

Can you get a stacktrace for the crash using the steps outlined here? http://kb.mozillazine.org/Getting_a_stacktrace_with_gdb

Also, does it still crash when you disable StumbleUpon?

Comment 2

[Dieter Lunn]

I don't think its stumbleupon causing the crash.  Its taking me to sites that are using plugins that cause the crash.  I am unsure but I think it may be java.  I'll see if I can get a stacktrace.

Comment 3

[Dieter Lunn]

Attachment: crash dump including stacktrace

It seems flash sometimes causes browser to crash.

Comment 4

[Adam Guthrie]

The top of the stack looks something like this:

#3  <signal handler called>
 No symbol table info available.
 #4  0xb5a5ffa7 in nsImageLoadingContent::DestroyImageLoadingContent (
     this=0x9e85e28) at nsImageLoadingContent.cpp:117
 No locals.
 #5  0xb5adb63f in ~nsHTMLImageElement (this=0x9e85e10)
     at nsHTMLImageElement.cpp:185
 No locals.
 #6  0xb5a53b0d in nsGenericElement::Release (this=0xa1107e9)
     at nsGenericElement.cpp:3686
 No locals.
 #7  0xb5ada471 in nsHTMLImageElement::Release (this=0x9e85e10)
     at nsHTMLImageElement.cpp:190
 No locals.
 #8  0xb7df7975 in ReleaseObjects (aElement=0xa1107e9) at nsCOMArray.cpp:152
 No locals.
 #9  0xb7df318c in nsVoidArray::EnumerateForwards (this=0x98a9698, 
     aFunc=0xb7df7960 <ReleaseObjects>, aData=0x0) at nsVoidArray.cpp:648
 	index = 3
 	running = <value optimized out>
 #10 0xb7df79b4 in nsCOMArray_base::Clear (this=0x98a9698)
     at nsCOMArray.cpp:159
 No locals.
 #11 0xb5a240e0 in nsBaseContentList::Reset (this=0x98a9690)
     at ../../../dist/include/xpcom/nsCOMArray.h:217
 No locals.
 #12 0xb5a24ab8 in nsContentList::PopulateSelf (this=0x98a9690, 
     aNeededLength=4294967295) at nsContentList.cpp:810
 	elementsToAppend = <value optimized out>
 #13 0xb5a255f1 in nsContentList::Length (this=0x98a9690, aDoFlush=1)
     at nsContentList.cpp:937
 No locals.
 #14 0xb5a25619 in nsContentList::GetLength (this=0x98a9690, 
     aLength=0xbf9f797c) at nsContentList.cpp:459
 No locals.
 #15 0xb7e3baf9 in XPTC_InvokeByIndex () at xptcinvoke_gcc_x86_unix.cpp:50

Not really sure what's going on here... JavaScript may be abusing something, though. Did you test with StumbleUpon disabled?

Comment 5

[Dieter Lunn]

No I haven't.  I'll try to find a site that does it and see if it happens when its enabled and disabled.

Comment 6

[Dieter Lunn]

For me going to eragonmovie.com causes this.

Comment 7

[Stephanie Daugherty [:sdaugherty]]

eragonmovie.com doesn't cause a crash for me on Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9a3pre) Gecko/20070306 Minefield/3.0a3pre with Shockwave Flash 9.0 r31
I strongly suspect some of these crashes are flash related, and a new version of flash has come out since this bug was filed. it would be nice to narrow down what plugin is causing this though, regardless.
Can you try this first with the latest flash plugin and see if you still experience a crash on these sites?

Comment 8

[Tanner M. Young [:tmyoung]]

Is this still an issue in Firefox 3.5?

Comment 9

[Mats Palmgren (inactive)]

Is this still an issue in Firefox 6 and the latest Flash version?