Closed Bug 421514 Opened 17 years ago Closed 16 years ago

Documents that crash Firefox

Categories

(Core Graveyard :: XForms, defect)

Product:
Core Graveyard
Component:
XForms
Platform:
PowerPC
macOS
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

(Not tracked)

Status:
RESOLVED DUPLICATE of bug 478105

People

(Reporter: elharo, Unassigned)

References

(
URL
)

Details

(Keywords: crash)

User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.1.12) Gecko/20080201 Firefox/2.0.0.12 Build Identifier: Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.1.12) Gecko/20080201 Firefox/2.0.0.12 Look at the demos linked from this page with the latest firefox and XForms 0.84 extension on a Mac. A crash occurs very quickly. It is likely that these forms are in various ways incorrect. Nonetheless, this should not cause Firefox to crash. Even loading one of these forms may crash Firefox. Reproducible: Always Steps to Reproduce: 1. 2. 3. Actual Results: application crash Expected Results: no crash
Confirming bug. I got FF 2.0.0.12 with XForms 0.8.4 to crash when clicking on the 3rd link in the URL. Here's the crash log: Process: firefox-bin [90870] Path: /Applications/Internet/Firefox 2.0.0.x.app/Contents/MacOS/firefox-bin Identifier: org.mozilla.firefox Version: 2.0.0.12 (2.0.0.12) Code Type: X86 (Native) Parent Process: launchd [1] Date/Time: 2008-03-07 11:00:45.690 -0600 OS Version: Mac OS X 10.5.2 (9C31) Report Version: 6 Exception Type: EXC_BAD_ACCESS (SIGBUS) Exception Codes: KERN_PROTECTION_FAILURE at 0x0000000000000000 Crashed Thread: 0 Thread 0 Crashed: 0 libschemavalidation.dylib 0x00fcc1dc NSGetModule + 34572 1 libschemavalidation.dylib 0x00fcd087 NSGetModule + 38327 2 libschemavalidation.dylib 0x00fcd9b0 NSGetModule + 40672 3 libschemavalidation.dylib 0x00fce205 NSGetModule + 42805 4 libschemavalidation.dylib 0x00fcb8ef NSGetModule + 32287 5 libschemavalidation.dylib 0x00fcc86f NSGetModule + 36255 6 libschemavalidation.dylib 0x00fccede NSGetModule + 37902 7 libschemavalidation.dylib 0x00fcc38d NSGetModule + 35005 8 libschemavalidation.dylib 0x00fcd087 NSGetModule + 38327 9 libschemavalidation.dylib 0x00fcd9b0 NSGetModule + 40672 10 libschemavalidation.dylib 0x00fce205 NSGetModule + 42805 11 libschemavalidation.dylib 0x00fcb8ef NSGetModule + 32287 12 libschemavalidation.dylib 0x00fcc86f NSGetModule + 36255 13 libschemavalidation.dylib 0x00fccede NSGetModule + 37902 14 libschemavalidation.dylib 0x00fcc38d NSGetModule + 35005 15 libschemavalidation.dylib 0x00fcd087 NSGetModule + 38327 16 libschemavalidation.dylib 0x00fcd9b0 NSGetModule + 40672 17 libschemavalidation.dylib 0x00fce205 NSGetModule + 42805 18 libschemavalidation.dylib 0x00fcb9f6 NSGetModule + 32550 19 libxforms.dylib 0x01236638 NSGetModule + 90170 20 libxforms.dylib 0x0120cffb 0x1200000 + 53243 21 libxforms.dylib 0x0120d162 0x1200000 + 53602 22 libxforms.dylib 0x0120e1ca 0x1200000 + 57802 23 libxforms.dylib 0x0120e4c6 0x1200000 + 58566 24 org.mozilla.firefox 0x00271305 nsBuiltinSchemaCollection::GetSOAPType(nsAString_internal const&, nsAString_internal const&, nsISchemaType**) + 2217 25 org.mozilla.firefox 0x001b89ba nsXMLHttpRequest::NotifyEventListeners(nsIDOMEventListener*, nsCOMArray<nsIDOMEventListener> const*, nsIDOMEvent*) + 178 26 org.mozilla.firefox 0x001bab2b nsXMLHttpRequest::RequestCompleted() + 339 27 org.mozilla.firefox 0x001bacca nsXMLHttpRequest::RequestCompleted() + 754 28 org.mozilla.firefox 0x005a5796 nsHttpChannel::DoAuthRetry(nsAHttpConnection*) + 752 29 org.mozilla.firefox 0x00333238 nsInputStreamPump::OnStateStop() + 88 30 org.mozilla.firefox 0x003337bd nsInputStreamPump::OnStateTransfer() + 597 31 libxpcom_core.dylib 0x00d36aa1 nsInputStreamReadyEvent::EventHandler(PLEvent*) + 45 32 libxpcom_core.dylib 0x00d0b551 PL_HandleEvent + 21 33 libxpcom_core.dylib 0x00d0b80a PL_ProcessPendingEvents + 103 34 com.apple.CoreFoundation 0x92e7662e CFRunLoopRunSpecific + 3166 35 com.apple.CoreFoundation 0x92e76d18 CFRunLoopRunInMode + 88 36 com.apple.HIToolbox 0x969346a0 RunCurrentEventLoopInMode + 283 37 com.apple.HIToolbox 0x969344b9 ReceiveNextEventCommon + 374 38 com.apple.HIToolbox 0x969931fe _AcquireNextEvent + 58 39 com.apple.HIToolbox 0x9699195b RunApplicationEventLoop + 207 40 org.mozilla.firefox 0x00235ccb nsAppShell::~nsAppShell() + 133 41 org.mozilla.firefox 0x002c18ea nsAppStartup::DestroyExitEvent(PLEvent*) + 148 42 org.mozilla.firefox 0x000058ae XRE_main + 5892 43 org.mozilla.firefox 0x000024b8 main + 32 44 org.mozilla.firefox 0x0000243e start + 270 45 org.mozilla.firefox 0x00002359 start + 41
Status: UNCONFIRMED → NEW
Ever confirmed: true
The initial crash is due to a simple lack of checking for aResult in ::IsValidSchemaFloat before we assign to it. But even after I fixed that there was another crash because a nsSchemaComplexType doesn't have its mModelGroup set when nsSchemaValidator tries to get it. I don't have time now to debug this further.
the crash is fixed with bug #478105, this should be marked as a duplicate of this bug (I'm not able to do that). It's still not able to load the schema (should it?).
Status: NEW → RESOLVED
Closed: 16 years ago
Resolution: --- → DUPLICATE
Product: Core → Core Graveyard
You need to log in before you can comment on or make changes to this bug.