crashtest causes seg fault on fennec

NEW
Unassigned

Status

()

Core
Editor
9 years ago
9 years ago

People

(Reporter: jmaher, Unassigned)

Tracking

Trunk
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

(Reporter)

Description

9 years ago
I run the editor/composer/src/crashtests suite and I get a seg fault both on fennec desktop and fennec maemo.  Here is the backtrace from gdb on desktop linux:

(gdb) backtrace
#0  0xb7fc17f2 in ?? () from /lib/ld-linux.so.2
#1  0xb7cf3cb6 in nanosleep () from /lib/tls/i686/cmov/libc.so.6
#2  0xb7cf3ac7 in sleep () from /lib/tls/i686/cmov/libc.so.6
#3  0xb5cca7d3 in ah_crap_handler (signum=11)
    at /home/mozilla/mozilla/src-trunk/toolkit/xre/nsSigHandlers.cpp:149
#4  0xb5ccba9a in nsProfileLock::FatalSignalHandler (signo=11)
    at nsProfileLock.cpp:216
#5  <signal handler called>
#6  0xb5fe619b in nsCOMPtr (this=0xbffa26f8, aRawPtr=0x82d1940)
    at ../../../dist/include/xpcom/nsCOMPtr.h:554
#7  0xb608fb69 in mozAutoDocUpdate (this=0xbffa26f8, aDocument=0x82d1940, 
    aUpdateType=2, aNotify=1)
    at ../../../dist/include/content/mozAutoDocUpdate.h:50
#8  0xb6186326 in nsCSSStyleSheet::SetDisabled (this=0x8598228, aDisabled=0)
    at /home/mozilla/mozilla/src-trunk/layout/style/nsCSSStyleSheet.cpp:1665
#9  0xb6835856 in nsHTMLEditor::EnableExistingStyleSheet (this=0x8595080, 
    aURL=@0xbffa2840)
    at /home/mozilla/mozilla/src-trunk/editor/libeditor/html/nsHTMLEditor.cpp:3711
#10 0xb683bd7e in nsHTMLEditor::AddOverrideStyleSheet (this=0x8595080, 
    aURL=@0xbffa2840)
    at /home/mozilla/mozilla/src-trunk/editor/libeditor/html/nsHTMLEditor.cpp:3593
---Type <return> to continue, or q <return> to quit---
#11 0xb64356bc in nsHTMLDocument::EditingStateChanged (this=0x854d360)
    at /home/mozilla/mozilla/src-trunk/content/html/document/src/nsHTMLDocument.cpp:3382
#12 0xb6436ec6 in nsHTMLDocument::EndUpdate (this=0x854d360, aUpdateType=1)
    at /home/mozilla/mozilla/src-trunk/content/html/document/src/nsHTMLDocument.cpp:3086
#13 0xb608fc69 in ~mozAutoDocUpdate (this=0xbffa29b8)
    at ../../../dist/include/content/mozAutoDocUpdate.h:66
#14 0xb62f1223 in nsGenericElement::doInsertChildAt (aKid=0x8556770, aIndex=1, 
    aNotify=1, aParent=0x0, aDocument=0x854d360, aChildArray=@0x854d46c)
    at /home/mozilla/mozilla/src-trunk/content/base/src/nsGenericElement.cpp:3285
#15 0xb62b9846 in nsDocument::InsertChildAt (this=0x854d360, aKid=0x8556770, 
    aIndex=1, aNotify=1)
    at /home/mozilla/mozilla/src-trunk/content/base/src/nsDocument.cpp:3217
#16 0xb5fa92c7 in nsINode::AppendChildTo (this=0x854d360, aKid=0x8556770, 
    aNotify=1) at ../../../dist/include/content/nsINode.h:337
#17 0xb6453e2c in nsXMLContentSink::SetDocElement (this=0x8443010, 
    aNameSpaceID=3, aTagName=0x83a4a34, aContent=0x8556770)
    at /home/mozilla/mozilla/src-trunk/content/xml/document/src/nsXMLContentSink.cpp:991
#18 0xb6456757 in nsXMLContentSink::HandleStartElement (this=0x8443010, 
    aName=0x85566c8, aAtts=0x85b3ea8, aAttsCount=3, aIndex=-1, aLineNumber=2, 
---Type <return> to continue, or q <return> to quit---
    aInterruptable=1)
    at /home/mozilla/mozilla/src-trunk/content/xml/document/src/nsXMLContentSink.cpp:1085
#19 0xb6457266 in nsXMLContentSink::HandleStartElement (this=0x8443010, 
    aName=0x85566c8, aAtts=0x85b3ea8, aAttsCount=6, aIndex=-1, aLineNumber=2)
    at /home/mozilla/mozilla/src-trunk/content/xml/document/src/nsXMLContentSink.cpp:1008
#20 0xb5f2589d in nsExpatDriver::HandleStartElement (this=0x85b3c28, 
    aValue=0x85566c8, aAtts=0x85b3ea8)
    at /home/mozilla/mozilla/src-trunk/parser/htmlparser/src/nsExpatDriver.cpp:435
#21 0xb5f25929 in Driver_HandleStartElement (aUserData=0x85b3c28, 
    aName=0x85566c8, aAtts=0x85b3ea8)
    at /home/mozilla/mozilla/src-trunk/parser/htmlparser/src/nsExpatDriver.cpp:97
#22 0xb5f51880 in doContent (parser=0x85b3cb0, startTagLevel=0, 
    enc=0xb72ece40, s=0x8554072 "<", end=0x85541fc "H\025G\b", 
    nextPtr=0xbffa2ed8, haveMore=1 '\001')
    at /home/mozilla/mozilla/src-trunk/parser/expat/lib/xmlparse.c:2438
#23 0xb5f50c0c in contentProcessor (parser=0x85b3cb0, start=0x8554072 "<", 
    end=0x85541fc "H\025G\b", endPtr=0xbffa2ed8)
    at /home/mozilla/mozilla/src-trunk/parser/expat/lib/xmlparse.c:2095
#24 0xb5f556e9 in doProlog (parser=0x85b3cb0, enc=0xb72ece40, s=0x8554072 "<", 
---Type <return> to continue, or q <return> to quit---
    end=0x85541fc "H\025G\b", tok=29, next=0x8554072 "<", nextPtr=0xbffa2ed8, 
    haveMore=1 '\001')
    at /home/mozilla/mozilla/src-trunk/parser/expat/lib/xmlparse.c:4075
#25 0xb5f54d95 in prologProcessor (parser=0x85b3cb0, s=0x8554018 "<", 
    end=0x85541fc "H\025G\b", nextPtr=0xbffa2ed8)
    at /home/mozilla/mozilla/src-trunk/parser/expat/lib/xmlparse.c:3809
#26 0xb5f547fe in prologInitProcessor (parser=0x85b3cb0, s=0x8554018 "<", 
    end=0x85541fc "H\025G\b", nextPtr=0xbffa2ed8)
    at /home/mozilla/mozilla/src-trunk/parser/expat/lib/xmlparse.c:3626
#27 0xb5f4ff93 in MOZ_XML_Parse (parser=0x85b3cb0, s=0x8554018 "<", len=484, 
    isFinal=0)
    at /home/mozilla/mozilla/src-trunk/parser/expat/lib/xmlparse.c:1528
#28 0xb5f23b78 in nsExpatDriver::ParseBuffer (this=0x85b3c28, 
    aBuffer=0x8554018, aLength=242, aIsFinal=0, aConsumed=0xbffa2ff0)
    at /home/mozilla/mozilla/src-trunk/parser/htmlparser/src/nsExpatDriver.cpp:1025
#29 0xb5f24d76 in nsExpatDriver::ConsumeToken (this=0x85b3c28, 
    aScanner=@0x850cd78, aFlushTokens=@0xbffa31a0)
    at /home/mozilla/mozilla/src-trunk/parser/htmlparser/src/nsExpatDriver.cpp:1128
#30 0xb5f3965b in nsParser::Tokenize (this=0x81d61c8, aIsFinalChunk=0)
    at /home/mozilla/mozilla/src-trunk/parser/htmlparser/src/nsParser.cpp:3035
#31 0xb5f3ed5f in nsParser::ResumeParse (this=0x81d61c8, allowIteration=1, 
---Type <return> to continue, or q <return> to quit---
    aIsFinalChunk=0, aCanInterrupt=1)
    at /home/mozilla/mozilla/src-trunk/parser/htmlparser/src/nsParser.cpp:2243
#32 0xb5f400d4 in nsParser::OnDataAvailable (this=0x81d61c8, 
    request=0x85b7ec8, aContext=0x0, pIStream=0x85b8604, sourceOffset=0, 
    aLength=242)
    at /home/mozilla/mozilla/src-trunk/parser/htmlparser/src/nsParser.cpp:2897
#33 0xb68edc71 in nsDocumentOpenInfo::OnDataAvailable (this=0x85b7f70, 
    request=0x85b7ec8, aCtxt=0x0, inStr=0x85b8604, sourceOffset=0, count=242)
    at /home/mozilla/mozilla/src-trunk/uriloader/base/nsURILoader.cpp:306
#34 0xb5d8eed0 in nsBaseChannel::OnDataAvailable (this=0x85b7e98, 
    request=0x85b8368, ctxt=0x0, stream=0x85b8604, offset=0, count=242)
    at /home/mozilla/mozilla/src-trunk/netwerk/base/src/nsBaseChannel.cpp:707
#35 0xb5da06c2 in nsInputStreamPump::OnStateTransfer (this=0x85b8368)
    at /home/mozilla/mozilla/src-trunk/netwerk/base/src/nsInputStreamPump.cpp:508
#36 0xb5da0c23 in nsInputStreamPump::OnInputStreamReady (this=0x85b8368, 
    stream=0x85b8604)
    at /home/mozilla/mozilla/src-trunk/netwerk/base/src/nsInputStreamPump.cpp:398
#37 0xb6d7f2a8 in nsInputStreamReadyEvent::Run (this=0x85b8788)
    at /home/mozilla/mozilla/src-trunk/xpcom/io/nsStreamUtils.cpp:111
#38 0xb6da983d in nsThread::ProcessNextEvent (this=0x80c4aa8, mayWait=1, 
    result=0xbffa34d0)
---Type <return> to continue, or q <return> to quit---
    at /home/mozilla/mozilla/src-trunk/xpcom/threads/nsThread.cpp:510
#39 0xb6d4304d in NS_ProcessNextEvent_P (thread=0x80c4aa8, mayWait=1)
    at nsThreadUtils.cpp:227
#40 0xb6c076c2 in nsBaseAppShell::Run (this=0x818c6b8)
    at /home/mozilla/mozilla/src-trunk/widget/src/xpwidgets/nsBaseAppShell.cpp:170
#41 0xb69ae731 in nsAppStartup::Run (this=0x81d5a58)
    at /home/mozilla/mozilla/src-trunk/toolkit/components/startup/src/nsAppStartup.cpp:192
#42 0xb5cbb078 in XRE_main (argc=3, argv=0xbffa6ca4, aAppData=0x80574f8)
    at /home/mozilla/mozilla/src-trunk/toolkit/xre/nsAppRunner.cpp:3272
#43 0x080495ae in main (argc=3, argv=0xbffa6ca4)
    at /home/mozilla/mozilla/src-trunk/xulrunner/stub/nsXULStub.cpp:383
(Reporter)

Updated

9 years ago
Blocks: 473564
(Reporter)

Comment 1

9 years ago
moving to core editor as this is a failure for a specific test.

http://mxr.mozilla.org/mozilla-central/source/editor/composer/src/crashtests/428844-1.html?force=1
Component: General → Editor
Product: Fennec → Core
QA Contact: general → editor
You need to log in before you can comment on or make changes to this bug.