51162 - Browser crash at www.w3.org/StyleSheets/Core/preview

Status: VERIFIED DUPLICATE of bug 50994

(Core :: DOM: HTML Parser, defect, P3)

Description

[Tobias Burnus]

With 2000-09-01-21. If I go to this page, the browser crashes after having load
about 50% (according status bar,this file is rather tiny).
(This page worked a while ago)

Comment 1

[WD]

Confirmed on Win98 build.

Crash info:
MOZILLA caused an invalid page fault in
module GKPARSER.DLL at 017f:60376a42.
Registers:
EAX=6038fcd8 CS=017f EIP=60376a42 EFLGS=00010203
EBX=007561f8 SS=0187 ESP=0068f5e8 EBP=0068f618
ECX=00000000 DS=0187 ESI=020b2280 FS=61af
EDX=020b2280 ES=0187 EDI=0000004e GS=0000
Bytes at CS:EIP:
8b 01 ff 60 24 8b 49 0c 8b 01 ff 60 3c 33 c0 39 
Stack dump:
01052987 007561f8 6036c48b 020cd870 020b2280 6036c527 020b2280 0000004e 025ae0b0 
020cd870 007561f8 025ae0b0 0068f650 6036be4a 020b2280 0000004e 

Talkback Incident ID:   TB16743001W

Comment 2

[Mats Palmgren (inactive)]

Attachment: Testcase

Comment 3

[Mats Palmgren (inactive)]

Testcase is really simple: <p><form></form></p>
Crashes both with strict DOCTYPE and without DOCTYPE.

Comment 4

[David Baron :dbaron: (⌚️UTC-4, no longer working on Mozilla)]

From talkback incident 16743001
http://cyclone/reports/incidenttemplate.cfm?bbid=16743001

Trigger Reason:  Access violation 

 Call Stack:    (Signature = nsCParserNode::GetNodeType 64356357) 
     
   nsCParserNode::GetNodeType 
                                         
[d:\builds\seamonkey\mozilla\htmlparser\src\nsParserNode.cpp, line 244]
     
   HTMLContentSink::CloseContainer 
                                         
[d:\builds\seamonkey\mozilla\layout\html\document\src\nsHTMLContentSink.cpp, 
line 3016]
     
   CElement::CloseContainerInContext 
                                         
[d:\builds\seamonkey\mozilla\htmlparser\src\COtherElements.h, line 350]
     
   CElement::HandleStartToken 
                                         
[d:\builds\seamonkey\mozilla\htmlparser\src\COtherElements.h, line 2773]
     
   COtherDTD::HandleStartToken 
                                         
[d:\builds\seamonkey\mozilla\htmlparser\src\COtherDTD.cpp, line 787]
     
   COtherDTD::HandleToken 
                                         
[d:\builds\seamonkey\mozilla\htmlparser\src\COtherDTD.cpp, line 597]
     
   COtherDTD::BuildModel 
                                         
[d:\builds\seamonkey\mozilla\htmlparser\src\COtherDTD.cpp, line 484]
     
   nsParser::BuildModel 
                                         
[d:\builds\seamonkey\mozilla\htmlparser\src\nsParser.cpp, line 1982]
     
   nsParser::ResumeParse 
                                         
[d:\builds\seamonkey\mozilla\htmlparser\src\nsParser.cpp, line 1861]
     
   nsParser::EnableParser 
                                         
[d:\builds\seamonkey\mozilla\htmlparser\src\nsParser.cpp, line 1497]
     
   CSSLoaderImpl::Cleanup 
                                         
[d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSLoader.cpp, line 710]
     
   CSSLoaderImpl::SheetComplete 
                                         
[d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSLoader.cpp, line 833]
     
   CSSLoaderImpl::ParseSheet 
                                         
[d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSLoader.cpp, line 868]
     
   CSSLoaderImpl::DidLoadStyle 
                                         
[d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSLoader.cpp, line 904]
     
   SheetLoadData::OnStreamComplete 
                                         
[d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSLoader.cpp, line 648]
     
   nsStreamLoader::OnStopRequest 
                                         
[d:\builds\seamonkey\mozilla\netwerk\base\src\nsStreamLoader.cpp, line 123]
     
   nsHTTPFinalListener::OnStopRequest 
                                         
[d:\builds\seamonkey\mozilla\netwerk\protocol\http\src\nsHTTPResponseListener.cp
p, line 1157]
     
   InterceptStreamListener::OnStopRequest
                                         
[d:\builds\seamonkey\mozilla\netwerk\cache\mgr\nsCachedNetData.cpp, line 1186]
     
   nsHTTPChunkConv::OnStopRequest 
                                         
[d:\builds\seamonkey\mozilla\netwerk\streamconv\converters\nsHTTPChunkConv.cpp, 
line 109]
     
   nsHTTPChannel::ResponseCompleted 
                                         
[d:\builds\seamonkey\mozilla\netwerk\protocol\http\src\nsHTTPChannel.cpp, line 
1790]
     
   nsHTTPServerListener::OnStopRequest 
                                         
[d:\builds\seamonkey\mozilla\netwerk\protocol\http\src\nsHTTPResponseListener.cp
p, line 726]
     
   nsOnStopRequestEvent::HandleEvent 
                                         
[d:\builds\seamonkey\mozilla\netwerk\base\src\nsAsyncStreamListener.cpp, line 
302]
     
   nsStreamListenerEvent::HandlePLEvent 
                                         
[d:\builds\seamonkey\mozilla\netwerk\base\src\nsAsyncStreamListener.cpp, line 
106]
     
   PL_HandleEvent 
                                         
[d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c, line 590]
     
   PL_ProcessPendingEvents 
                                         
[d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c, line 545]
     
   _md_EventReceiverProc 
                                         
[d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c, line 1061]
     
   KERNEL32.DLL + 0x363b (0xbff7363b) 
                                          
     
   KERNEL32.DLL + 0x24407 (0xbff94407) 
                                          
     
   0x00688b3e 
                                          

Comment 5

[Jeffrey Baker]

Dupe

*** This bug has been marked as a duplicate of 50994 ***

Comment 6

[Peter "jag" Annema]

Was about to comment this might be a dupe of 50994. Stacktrace (thanks David)
confirms.

Just wondering, this one was said to also crash without a strict doctype, is
that also the case for 50994?