5239 - SEGV in libraptor.html

Status: VERIFIED WORKSFORME

(Core :: DOM: HTML Parser, defect, P3)

Description

[jim_nance]

Using a Apr 17 cvs pull, I get a reproducable SIGSEGV in apprunner when
trying to view www.redhat.com.  I traced it in the debugger to a
stack underflow in the code shown below:

(gdb) w
#0  0x40518794 in SinkContext::CloseContainer (this=0x83ad070,
    aNode=@0xbfffe3b8)
    at
../../../../../mozilla/layout/html/document/src/nsHTMLContentSink.cpp:1043
1040
1041      --mStackPos;
1042      nsHTMLTag nodeType = mStack[mStackPos].mType;
1043      nsIHTMLContent* content = mStack[mStackPos].mContent;
1044 >    content->Compact();
1045
1046      // Add container to its parent if we haven't already done it
1047      if (0 == (mStack[mStackPos].mFlags & APPENDED)) {
(gdb) p content
$1 = (nsIHTMLContent *) 0x54002f
(gdb) p *content
Cannot access memory at address 0x54002f.
(gdb) p mStackPos
$2 = -1

Comment 1

[troy]

parser/content sink

Comment 2

[rickg]

Kipp -- this one actually looks like yours.

Comment 3

[harishd]

I don't see the crash in Apr 26th build!!!!!

Comment 4

[harishd]

I'm able to view the URL, in May03 build, wihout any problems.
Marking the bug WORKSFORME.

Comment 5

[Chris Petersen]

In the June 2 Build, redhat.com loads on Linux without crash problems as
described.