40172 - javascript submission on .asp page crashes browser

Status: VERIFIED DUPLICATE of bug 37463

(Core :: JavaScript Engine, defect, P3)

Description

[Dave]

Overview Description: 

On the above URL (carpoint.msn.com), clicking the "Go" button after selecting a
make and model to view causes the browser to stop reponding.

Steps to Reproduce: 
1) go to carpoint.msn.com
2) select a make and model
3) click the "Go" button and the browser stops responding

Build Date & Platform Bug Found: 

05/22/00 Linux build

Additional Builds and Platforms Tested On: 

none

Comment 1

[Dave]

Note: this is a spinoff from bug 40127

Comment 2

[Andreas Franke (gone)]

This is a duplicate of bug 37463 (lockup/freeze upon
javascript:window.location="http://www.mozilla.org";)

Running PC/Linux build 2000052109 in gdb, the lock that used to be in
thread 2 this time is in thread 1:
#0  0x4026eb2e in __sigsuspend (set=0xbfffe264)
    at ../sysdeps/unix/sysv/linux/sigsuspend.c:48
#1  0x401b20c0 in __pthread_wait_for_restart_signal (self=0x401ba040)
    at pthread.c:785
#2  0x401b364e in __pthread_lock (lock=0x8b2d61c, self=0x401ba040)
    at restart.h:26
#3  0x401b0b4a in __pthread_mutex_lock (mutex=0x8b2d60c) at mutex.c:84
#4  0x40190e9a in PR_Lock ()
   from libnspr4.so
#5  0x401914ba in PR_EnterMonitor ()
   from libnspr4.so
#6  0x408f1104 in nsFileTransport::Cancel ()
   from components/libnecko.so
#7  0x408fc08c in nsStreamIOChannel::Cancel ()
   from components/libnecko.so
#8  0x408faf20 in nsLoadGroup::Cancel ()
   from components/libnecko.so
#9  0x409c5651 in nsDocLoaderImpl::Stop ()
   from components/liburiloader.so
#10 0x409c46e6 in nsURILoader::Stop ()
   from components/liburiloader.so
#11 0x409ab21e in nsDocShell::StopLoad ()
   from libdocshell.so
#12 0x409b1a8b in nsDocShell::StopCurrentLoads ()
   from libdocshell.so
#13 0x409b0b8b in nsDocShell::InternalLoad ()
   from libdocshell.so
#14 0x409ab0a0 in nsDocShell::LoadURI ()
   from libdocshell.so
#15 0x403febfa in LocationImpl::SetHrefWithBase ()
   from libjsdom.so
#16 0x403ffd76 in LocationImpl::SetProperty ()
   from libjsdom.so
#17 0x40400bae in nsJSUtils::nsCallJSScriptObjectSetProperty ()
   from libjsdom.so
#18 0x403ee7d9 in SetLocationProperty ()
   from libjsdom.so
#19 0x4012b410 in js_SetProperty ()
   from libmozjs.so
#20 0x4012004c in js_Interpret ()
   from libmozjs.so
#21 0x40119dd4 in js_Execute ()
   from libmozjs.so
#22 0x400ff128 in JS_EvaluateUCScriptForPrincipals ()

and the one waiting is thread 4 as usual:

#0  0x4026eb2e in __sigsuspend (set=0xbf5ff8f0)
    at ../sysdeps/unix/sysv/linux/sigsuspend.c:48
#1  0x401b20c0 in __pthread_wait_for_restart_signal (self=0xbf5ffe40)
    at pthread.c:785
#2  0x401aec40 in pthread_cond_wait (cond=0x8b2d294, mutex=0x89bb0bc)
    at restart.h:26
#3  0x4019121f in PR_WaitCondVar ()
   from libnspr4.so
#4  0x4019157d in PR_Wait ()
   from libnspr4.so
#5  0x400bb478 in PL_WaitForEvent ()
   from libxpcom.so
#6  0x400bc339 in nsEventQueueImpl::WaitForEvent ()
   from libxpcom.so
#7  0x400bf23f in nsProxyObject::PostAndWait ()
   from libxpcom.so
#8  0x400bf586 in nsProxyObject::Post ()
   from libxpcom.so
#9  0x400c0c94 in nsProxyEventObject::CallMethod ()
   from libxpcom.so
#10 0x400cdbed in PrepareAndDispatch ()
   from libxpcom.so
#11 0x400cdc82 in nsXPTCStubBase::Stub4 ()
   from libxpcom.so
#12 0x412a1203 in nsJSThunk::Open ()
   from components/libjsurl.so
#13 0x408f1cfa in nsFileTransport::Process ()
   from components/libnecko.so
#14 0x408f1bf6 in nsFileTransport::Run ()
   from components/libnecko.so
#15 0x400be93e in nsThreadPoolRunnable::Run ()


*** This bug has been marked as a duplicate of 37463 ***

Comment 3

[Andreas Franke (gone)]

Bug 37463 is fixed now. This bug's testcase works fine on PC/Linux 2000063020.

Comment 4

[Dave]

Confirmed on 2000070220/Linux

Comment 5

[John Unruh]

Verified. WFM on the commerical branch 10/5 Linux build.