531471 - Firefox 3.6b4 Crash [@ nsHtml5HtmlAttributes::contains(nsHtml5AttributeName*) ]

Status: RESOLVED DUPLICATE of bug 514447

(Core :: DOM: HTML Parser, defect)

Description

[chris hofmann]

new crash seen yesterday in 3.6b4; not seen before in previous releases

stack looks like

http://crash-stats.mozilla.com/report/index/6c8e48b1-7d1d-442c-8b0a-484a72091126

Frame  	Module  	Signature [Expand]  	Source
0 	xul.dll 	nsHtml5HtmlAttributes::contains 	parser/html/nsHtml5HtmlAttributes.cpp:205
1 	xul.dll 	nsHtml5Tokenizer::attributeNameComplete 	parser/html/nsHtml5Tokenizer.cpp:374
2 	xul.dll 	nsHtml5Tokenizer::stateLoop 	parser/html/nsHtml5Tokenizer.cpp:699
3 	xul.dll 	nsHtml5Tokenizer::tokenizeBuffer 	parser/html/nsHtml5Tokenizer.cpp:459
4 	xul.dll 	nsHtml5Parser::Parse 	parser/html/nsHtml5Parser.cpp:342
5 	xul.dll 	nsHTMLDocument::WriteCommon 	content/html/document/src/nsHTMLDocument.cpp:2181
6 	xul.dll 	nsHTMLDocument::ScriptWriteCommon 	content/html/document/src/nsHTMLDocument.cpp:2237
7 	xul.dll 	nsHTMLDocument::Write 	content/html/document/src/nsHTMLDocument.cpp:2265
8 	xul.dll 	NS_InvokeByIndex_P 	xpcom/reflect/xptcall/src/md/win32/xptcinvoke.cpp:102
9 	xul.dll 	XPCWrappedNative::CallMethod 	js/src/xpconnect/src/xpcwrappednative.cpp:2721
10 	xul.dll 	XPC_WN_CallMethod 	js/src/xpconnect/src/xpcwrappednativejsops.cpp:1740
11 	js3250.dll 	js_Invoke 	js/src/jsinterp.cpp:1360
12 	js3250.dll 	js_Interpret 	js/src/jsops.cpp:2240
13 	js3250.dll 	js_Execute 	js/src/jsinterp.cpp:1601
14 	js3250.dll 	JS_EvaluateUCScriptForPrincipals 	js/src/jsapi.cpp:5056
15 	xul.dll 	nsJSContext::EvaluateString 	dom/base/nsJSEnvironment.cpp:1713
16 	xul.dll 	nsScriptLoader::EvaluateScript 	content/base/src/nsScriptLoader.cpp:711
17 	xul.dll 	nsScriptLoader::ProcessRequest 	content/base/src/nsScriptLoader.cpp:625
18 	xul.dll 	nsCOMArray_base::RemoveObject 	obj-firefox/xpcom/build/nsCOMArray.cpp:129
19 	xul.dll 	nsScriptLoader::OnStreamComplete 	content/base/src/nsScriptLoader.cpp:972

only this one report, but more might appear at

http://crash-stats.mozilla.com/report/list?product=Firefox&version=Firefox%3A3.6b4&query_search=signature&query_type=exact&date=&range_value=1&range_unit=weeks&do_query=1&signature=nsHtml5HtmlAttributes%3A%3Acontains%28nsHtml5AttributeName*%29

is the is this code even turned on?  did some one flip a pref to get at the crash?