Closed Bug 490233 Opened 11 years ago Closed 11 years ago

crash while displaying this url

Categories

(Firefox :: General, defect, critical)

defect
Not set
critical

Tracking

()

RESOLVED DUPLICATE of bug 489647

People

(Reporter: mozilla-bugzilla, Unassigned)

References

()

Details

User-Agent:       Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.0.9) Gecko/2009042113 Ubuntu/8.10 (intrepid) Firefox/3.0.9
Build Identifier: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.0.9) Gecko/2009042113 Ubuntu/8.10 (intrepid) Firefox/3.0.9

when displaying this url, the browser crashes after about 3 seconds on my athlon 64 2.6 GHz dual core / 4GB ram / debian-{stable,testing} + ubuntu-{hardy,intrepid} mix

Reproducible: Always

Steps to Reproduce:
1. open the mentioned url
2. wait ~ 3 seconds
3.
Actual Results:  
crash - "Program received signal SIGSEGV, Segmentation fault."


It only crashes with "?highlight=file"
doesn't crash with Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2a1pre) Gecko/20090426 Minefield/3.6a1pre ID:20090426031309 for me..
Reproducable on Mac:
http://crash-stats.mozilla.com/report/pending/9600eea9-c99e-4a04-9fdb-41faf2090426

0  	 	@0x30c  	
1 	XUL 	UnhookTextRunFromFrames 	mozilla/layout/generic/nsTextFrameThebes.cpp:338
2 	XUL 	nsTextFrame::ClearTextRun 	mozilla/layout/generic/nsTextFrameThebes.cpp:3503
3 	XUL 	BuildTextRunsScanner::AssignTextRun 	mozilla/layout/generic/nsTextFrameThebes.cpp:1835
4 	XUL 	BuildTextRunsScanner::BuildTextRunForFrames 	mozilla/layout/generic/nsTextFrameThebes.cpp:1716
5 	XUL 	BuildTextRunsScanner::FlushFrames 	mozilla/layout/generic/nsTextFrameThebes.cpp:1119
6 	XUL 	nsTextFrame::EnsureTextRun 	mozilla/layout/generic/nsTextFrameThebes.cpp:1058

Firefox 3.0.10 is due out Monday with a fix for this.
Status: UNCONFIRMED → RESOLVED
Closed: 11 years ago
OS: Linux → All
Hardware: x86_64 → All
Resolution: --- → DUPLICATE
Duplicate of bug: CVE-2009-1313
No crash with
Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.4; en-US; rv:1.9.0.10) Gecko/2009042315 Firefox/3.0.10
from candidates directory.
:-) Yea, works again in 3.0.10 - thank's everybody for the feedback
You need to log in before you can comment on or make changes to this bug.