51200 - Instant crash.

Status: VERIFIED DUPLICATE of bug 50994

(SeaMonkey :: General, defect, P3)

Description

[Christopher Sawtell]

Click on link, and then see the background and a few rectangles, then CRASH.
The talkback thing has done it's job.

Comment 1

[cheng]

Confirmed on Linux 2000090208.

Comment 2

[Paul McGarry]

This is due to an unclosed tag. I spent half an hour creating a testcase for
this (which I will attach) but it is probably a dupe of bug 50994.

Comment 3

[Paul McGarry]

Attachment: Hugely cut down version of original page

Comment 4

[Paul McGarry]

I've learnt how to do a stack backtrace  :)
This is what I get for the original reported url.

#0  0x40617496 in NSGetModule ()
#1  0x40e72934 in NSGetModule ()
#2  0x4060b4d2 in NSGetModule ()
#3  0x4060b434 in NSGetModule ()
#4  0x4060b434 in NSGetModule ()
#5  0x40608f66 in NSGetModule ()
#6  0x4060a86c in NSGetModule ()
#7  0x40613e24 in NSGetModule ()
#8  0x406149f5 in NSGetModule ()
#9  0x40615340 in NSGetModule ()
#10 0x40a76701 in NSGetModule ()
#11 0x405b05c9 in NSGetModule ()
#12 0x4059229f in NSGetModule ()
#13 0x4058cbfa in NSGetModule ()
#14 0x405a9b94 in NSGetModule ()
#15 0x405afbcd in NSGetModule ()
#16 0x4056ec8e in NSGetModule ()
#17 0x4056e6b0 in NSGetModule ()
#18 0x400bc603 in PL_HandleEvent ()
#19 0x400bc516 in PL_ProcessPendingEvents ()
#20 0x400bd29d in nsEventQueueImpl::ProcessPendingEvents ()
#21 0x406d1ebf in NSGetModule ()
#22 0x406d1c7d in NSGetModule ()
#23 0x4086621a in g_io_unix_dispatch (source_data=0x82256a0,
current_time=0xbffff8dc, user_data=0x8209b48) at giounix.c:135
#24 0x40867756 in g_main_dispatch (dispatch_time=0xbffff8dc) at gmain.c:656
#25 0x40867d11 in g_main_iterate (block=1, dispatch=1) at gmain.c:877
#26 0x40867e89 in g_main_run (loop=0x8209b58) at gmain.c:935
#27 0x40797efa in gtk_main () at gtkmain.c:476
#28 0x406d23ac in NSGetModule ()
#29 0x4045315a in inflate_mask ()
#30 0x804dac7 in JS_PushArguments ()
#31 0x804df26 in JS_PushArguments ()
#32 0x402570aa in __libc_start_main ()

Comment 5

[Doron Rosenberg (IBM)]

paul - still think this isbug 50994?

Comment 6

[Paul McGarry]

From the stack trace, no. But I'm no expert..

Comment 7

[Paul McGarry]

And when I first created the testcase I had someone on IRC test it, it also
crashed for them on Win2k 2000090208. 

Comment 8

[Stephen Koren]

Crash on 090308 Win98. Still probably a dupe of 50994

Comment 9

[Andreas Franke (gone)]

The crash happens in nsCParserNode::GetNodeType. Dupe.


*** This bug has been marked as a duplicate of 50994 ***

Comment 10

[Doron Rosenberg (IBM)]

this will be verified once 50994 is really fixed

Comment 11

[Diego]

50994 now is fixed. Tested with linux 2000090708. It works (no crash).
Verified dupe of bug 50994: "Crashing in nsCParserNode::GetNodeType, with strict
DOCTYPE and unclosed tags"