59831 - Repeated back/forward from this URL causes segfault

Status: VERIFIED DUPLICATE of bug 56086

(Core :: DOM: Navigation, defect, P1)

Description

[Ian Webb]

Steps to reproduce:
This bug does seem to have something to do with the exact URL here. I've tried
it with other Bugzilla bugs and this is the only one I've been able to reproduce
this bug with. It also doesn't reproduce with other pages. But it does reliably
reproduce for me with this exact URL.

1) Load some page. I've reproduced this starting from several pages, it doesn't
seem to matter, but I know it occurs from the advanced bug reporting page.

2) Go to the attached URL.

3) Click Back, then click Forward.

4) Repeat Step 3 until browser crashes. Sometimes this only takes a few
iterations, sometimes it takes 20-30. But it does reliably segfault build
2000111021.

Actual results: Mozilla crashes.

Expected results: Both pages continue to load normally.

Comment 1

[Stephan Jaensch]

I can reproduce this on latest Linux nightly. I have seen this rarely with other
sites, but was never able to name a testcase. Here is a backtrace:

#0  0x412cd402 in NSGetModule () from /new/package/components/libeditor.so
#1  0x412cd3c0 in NSGetModule () from /new/package/components/libeditor.so
#2  0x40c45bd9 in NSGetModule () from /new/package/components/libwidget_gtk.so
#3  0x406b02da in g_timeout_add () from /usr/lib/libglib-1.2.so.0
#4  0x406af2b9 in g_get_current_time () from /usr/lib/libglib-1.2.so.0
#5  0x406af8c3 in g_get_current_time () from /usr/lib/libglib-1.2.so.0
#6  0x406afa5c in g_main_run () from /usr/lib/libglib-1.2.so.0
#7  0x405d4457 in gtk_main () from /usr/lib/libgtk-1.2.so.0
#8  0x40c355fc in NSGetModule () from /new/package/components/libwidget_gtk.so
#9  0x413ab8da in NSGetModule () from /new/package/components/libnsappshell.so
#10 0x804e185 in JS_PushArguments ()
#11 0x804e5a6 in JS_PushArguments ()
#12 0x4026dbdc in __libc_start_main () from /lib/libc.so.6

Comment 2

[timeless]

Sounds like Ender Lite.
reporter: this is used in the location bar.

I'd suspect you've managed to cause something to access a deleted widget or 
something.

Comment 3

[rubydoo123]

why would this be an editor issue? Back/forward would be session history,
reassigning

Comment 4

[Viswanath Ramachandran]

nav triage team: we always take crashers very seriously. P1 nsbeta1. 

Comment 5

[Keyser Sose]

I am pretty sure this is a duplicate of bug 56086 marking as such.

*** This bug has been marked as a duplicate of 56086 ***

Comment 6

[Claudius Gayle]

VERIFIED Dupe