Closed Bug 51402 Opened 24 years ago Closed 24 years ago

Crash with XHTML page which is valid

Categories

(Core :: DOM: HTML Parser, defect, P3)

x86
Linux
defect

Tracking

()

VERIFIED DUPLICATE of bug 50994

People

(Reporter: burnus, Assigned: rickg)

References

()

Details

Goto this page and try yourself (this is with 2000-09-05-08/Linux and the
console shows:
->>>>>>>>>>>>>> Read Clipboard from memory
xmlencoding detect- iso-8859-1
package/run-mozilla.sh: line 29:  5486 memory access error  $prog ${1+"$@"}
)
The reason seems to be the colgroups.
dup of bug 50994

nsCParserNode::GetNodeType() line 232 + 12 bytes
HTMLContentSink::CloseContainer(0x03486820, {...}) line 3013 + 11 bytes
CElement::CloseContainer(0x03594c70, eHTMLTag_colgroup, 0x03530680, 0x03486820) 
line 322
CElement::CloseContainerInContext(0x03594c70, eHTMLTag_colgroup, 0x03530680, 
0x03486820) line 350
CElement::HandleStartToken(0x03593e70, eHTMLTag_colgroup, 0x03530680, 
0x03486820) line 2773
COtherDTD::HandleStartToken(0x02d76360) line 784 + 33 bytes
COtherDTD::HandleToken(0x0352a1f0, 0x02d76360, 0x013570c0) line 584 + 12 bytes
COtherDTD::BuildModel(0x0352a1f0, 0x013570c0, 0x03535780, 0x00000000, 
0x03486820) line 479 + 20 bytes
nsParser::BuildModel() line 1978 + 34 bytes
nsParser::ResumeParse(1, 0) line 1859 + 11 bytes
nsParser::EnableParser(1) line 1496 + 15 bytes
CSSLoaderImpl::Cleanup({...}, 0x0359f6d0) line 710
CSSLoaderImpl::SheetComplete(0x00000000, 0x0359f6d0) line 833
CSSLoaderImpl::ParseSheet(0x03533dc0, 0x0359f6d0, 1, 0x03538490) line 868
CSSLoaderImpl::DidLoadStyle(0x0359bea0, 0x03533d10, 0x0359f6d0, 0) line 903 + 
24 bytes
SheetLoadData::OnStreamComplete(0x0359f6d0, 0x0359bea0, 0x00000000, 0, 5397, 
0x02cdbf74) line 644
nsStreamLoader::OnStopRequest(0x0359bea4, 0x0359bcd0, 0x00000000, 0, 0x100a35e8 
gCommonEmptyBuffer) line 121 + 78 bytes
nsHTTPFinalListener::OnStopRequest(0x0359bb10, 0x0359bcd0, 0x00000000, 0, 
0x100a35e8 gCommonEmptyBuffer) line 1155 + 42 bytes
InterceptStreamListener::OnStopRequest(0x035367d0, 0x0359bcd0, 0x00000000, 0, 
0x100a35e8 gCommonEmptyBuffer) line 1186
nsHTTPChannel::ResponseCompleted(0x035367d0, 0, 0x100a35e8 gCommonEmptyBuffer) 
line 1778 + 42 bytes
nsHTTPServerListener::OnStopRequest(0x035a60d0, 0x0359e374, 0x0359bcd0, 0, 
0x100a35e8 gCommonEmptyBuffer) line 726
nsOnStopRequestEvent::HandleEvent(0x03516f20) line 302
nsStreamListenerEvent::HandlePLEvent(0x03516ed0) line 97 + 12 bytes
PL_HandleEvent(0x03516ed0) line 587 + 10 bytes
PL_ProcessPendingEvents(0x010170f0) line 528 + 9 bytes
_md_EventReceiverProc(0x00000bf8, 58848, 0, 16871664) line 1043 + 9 bytes
KERNEL32! bff7363b()
KERNEL32! bff94407()
007989fe()


*** This bug has been marked as a duplicate of 50994 ***
Status: UNCONFIRMED → RESOLVED
Closed: 24 years ago
Resolution: --- → DUPLICATE
This is a duplicate of 50994:Crashing in nsCParserNode::GetNodeType, with strict
DOCTYPE and unclosed tags
Status: RESOLVED → VERIFIED
You need to log in before you can comment on or make changes to this bug.