Closed Bug 62487 Opened 25 years ago Closed 25 years ago

strange crashes loading http://www.ibm.com/servers/

Categories

(Core :: Layout, defect, P3)

Product:
Core
Component:
Layout
Platform:
x86
Linux
Type:
defect

Tracking

()

Status:
RESOLVED WORKSFORME

People

(Reporter: dbaron, Assigned: harishd)

References

(
URL
)

Details

STEPS TO REPRODUCE: * load http://www.ibm.com/servers/ * if it's the first time you've loaded the page, choose US/Worldwide ACTUAL RESULTS: * crash, with different stack trace each time (probably something corrupted) OBSERVED IN: * debug build, 2000-12-09 tree Twice, I've seen the stack trace: #0 0x401be3c7 in js_InitDateClass (cx=0x42193130, obj=0x4216a918) at /builds/seamonkey/mozilla/js/src/jsdate.c:1996 #1 0x401abd33 in JS_ResolveStandardClass (cx=0x42193130, obj=0x4216a918, id=135430260, resolved=0xbfffdcf4) at /builds/seamonkey/mozilla/js/src/jsapi.c:1352 #2 0x4056a9ce in GlobalWindowImpl::Resolve () at ../../../dist/include/nsIPageSequenceFrame.h:112 #3 0x4057ebd4 in nsJSUtils::nsGenericResolve () at ../../../dist/include/nsIPageSequenceFrame.h:112 #4 0x4057eb11 in nsJSUtils::nsGlobalResolve () at ../../../dist/include/nsIPageSequenceFrame.h:112 #5 0x405513c4 in ResolveWindow () at ../../../dist/include/nsIPageSequenceFrame.h:112 #6 0x401f964b in _js_LookupProperty (cx=0x42193130, obj=0x4216a918, id=135439384, objp=0xbfffe06c, propp=0xbfffe064, file=0x40230ae0 "/builds/seamonkey/mozilla/js/src/jsobj.c", line=1982) at /builds/seamonkey/mozilla/js/src/jsobj.c:1923 #7 0x401f9bb2 in js_FindProperty (cx=0x42193130, id=135439384, objp=0xbfffe6a4, pobjp=0xbfffe6a0, propp=0xbfffe618) at /builds/seamonkey/mozilla/js/src/jsobj.c:1982 #8 0x401e8a9d in js_Interpret (cx=0x42193130, result=0xbfffe8d8) at /builds/seamonkey/mozilla/js/src/jsinterp.c:2670 #9 0x401db226 in js_Execute (cx=0x42193130, chain=0x4216a918, script=0x42578b40, fun=0x0, down=0x0, special=0, result=0xbfffe8d8) at /builds/seamonkey/mozilla/js/src/jsinterp.c:962 #10 0x401b0b5a in JS_EvaluateUCScriptForPrincipals (cx=0x42193130, obj=0x4216a918, principals=0x42984768, chars=0x4255a290, length=7293, filename=0x42504bf0 "http://a1944.g.akamai.net/f/1944/1482/8h/stats.klsoft.com/akamai/Site_77_ePulse.js", lineno=1, rval=0xbfffe8d8) at /builds/seamonkey/mozilla/js/src/jsapi.c:3203 #11 0x40548425 in nsJSContext::EvaluateString () at ../../../dist/include/nsIPageSequenceFrame.h:112 #12 0x414c9cf0 in HTMLContentSink::EvaluateScript (this=0x42e01c30, aScript=@0xbfffebd8, aScriptURI=0x42ed5f48, aLineNo=1, aVersion=0x4022a9d0 "default") at /builds/seamonkey/mozilla/layout/html/document/src/nsHTMLContentSink.cpp:4649 #13 0x414ca8c7 in HTMLContentSink::OnStreamComplete (this=0x42e01c30, aLoader=0x42ed6170, aContext=0x0, aStatus=0, stringLen=7293, string=0x82c2ef0 " // File: /Versions/Current/Source/Collection/Client/ePulse/IBM/ePulseIBM.js $\r\n// Revision: 8 $\r\nvar kl0=navigator.appName;var kl1=navigator.appVersion;var kl2=parseInt(kl1);var kl3=kl0.indexOf(\"Mi"...) at /builds/seamonkey/mozilla/layout/html/document/src/nsHTMLContentSink.cpp:4773 ... where (gdb) p cx->runtime->jsNaN $3 = (jsdouble *) 0x43500000 (gdb) p *(cx->runtime->jsNaN) Cannot access memory at address 0x43500000 But twice I saw a huge string of assertions in layout, followed by an abort: ###!!! ASSERTION: redo line on totally empty line: 'aState.IsImpactedByFloater()', file /builds/seamonkey/mozilla/layout/html/base/src/nsBlockFrame.cpp, line 4307 ###!!! Break: at file /builds/seamonkey/mozilla/layout/html/base/src/nsBlockFrame.cpp, line 4307 ###!!! ASSERTION: unconstrained height on totally empty line: 'NS_UNCONSTRAINEDSIZE != aState.mAvailSpaceRect.height', file /builds/seamonkey/mozilla/layout/html/base/src/nsBlockFrame.cpp, line 4309 ###!!! Break: at file /builds/seamonkey/mozilla/layout/html/base/src/nsBlockFrame.cpp, line 4309 ###!!! ASSERTION: Content has no document.: 'doc', file /builds/seamonkey/mozilla/layout/html/base/src/nsTextFrame.cpp, line 4203 ###!!! Break: at file /builds/seamonkey/mozilla/layout/html/base/src/nsTextFrame.cpp, line 4203 ###!!! ASSERTION: bad width: 'metrics.width>=0', file /builds/seamonkey/mozilla/layout/html/base/src/nsLineLayout.cpp, line 1025 ###!!! Break: at file /builds/seamonkey/mozilla/layout/html/base/src/nsLineLayout.cpp, line 1025 ###!!! ASSERTION: bad height: 'metrics.height>=0', file /builds/seamonkey/mozilla/layout/html/base/src/nsLineLayout.cpp, line 1026 ###!!! Break: at file /builds/seamonkey/mozilla/layout/html/base/src/nsLineLayout.cpp, line 1026 ###!!! ASSERTION: redo line on totally empty line: 'aState.IsImpactedByFloater()', file /builds/seamonkey/mozilla/layout/html/base/src/nsBlockFrame.cpp, line 4307 ###!!! Break: at file /builds/seamonkey/mozilla/layout/html/base/src/nsBlockFrame.cpp, line 4307 ###!!! ASSERTION: unconstrained height on totally empty line: 'NS_UNCONSTRAINEDSIZE != aState.mAvailSpaceRect.height', file /builds/seamonkey/mozilla/layout/html/base/src/nsBlockFrame.cpp, line 4309 ###!!! Break: at file /builds/seamonkey/mozilla/layout/html/base/src/nsBlockFrame.cpp, line 4309 Area(html)(-1)@0x41fd2d68: yikes! spinning on a line over 1000 times! ###!!! Abort: at file /builds/seamonkey/mozilla/layout/html/base/src/nsBlockFrame.cpp, line 4138 Program received signal SIGABRT, Aborted. with the stack at the abort: #0 0x40380951 in __kill () from /lib/libc.so.6 #1 0x402b5f82 in raise (sig=6) at signals.c:65 #2 0x40381d48 in abort () at ../sysdeps/generic/abort.c:88 #3 0x4027522e in PR_Abort () at /builds/seamonkey/mozilla/nsprpub/pr/src/io/prlog.c:442 #4 0x4012f9b7 in nsDebug::Abort ( aFile=0x4183c9a0 "/builds/seamonkey/mozilla/layout/html/base/src/nsBlockFrame.cpp", aLine=4138) at /builds/seamonkey/mozilla/xpcom/base/nsDebug.cpp:375 #5 0x413d5492 in nsBlockFrame::ReflowInlineFrames (this=0x41fd2d68, aState=@0xbfffdf28, aLine=0x41fd2e78, aKeepReflowGoing=0xbfffdca0, aDamageDirtyArea=1, aUpdateMaximumWidth=0) at /builds/seamonkey/mozilla/layout/html/base/src/nsBlockFrame.cpp:4138 #6 0x413d3871 in nsBlockFrame::ReflowLine (this=0x41fd2d68, aState=@0xbfffdf28, aLine=0x41fd2e78, aKeepReflowGoing=0xbfffdca0, aDamageDirtyArea=1) at /builds/seamonkey/mozilla/layout/html/base/src/nsBlockFrame.cpp:3262 #7 0x413d2b92 in nsBlockFrame::ReflowDirtyLines (this=0x41fd2d68, aState=@0xbfffdf28) at /builds/seamonkey/mozilla/layout/html/base/src/nsBlockFrame.cpp:2951 #8 0x413d027e in nsBlockFrame::Reflow (this=0x41fd2d68, aPresContext=0x42b4d930, aMetrics=@0xbfffe358, aReflowState=@0xbfffe2a8, aStatus=@0xbfffe6bc) at /builds/seamonkey/mozilla/layout/html/base/src/nsBlockFrame.cpp:1740 #9 0x413e0eae in nsContainerFrame::ReflowChild (this=0x41fd1ee4, aKidFrame=0x41fd2d68, aPresContext=0x42b4d930, aDesiredSize=@0xbfffe358, aReflowState=@0xbfffe2a8, aX=0, aY=0, aFlags=0, aStatus=@0xbfffe6bc) at /builds/seamonkey/mozilla/layout/html/base/src/nsContainerFrame.cpp:693 #10 0x413fde2b in CanvasFrame::Reflow (this=0x41fd1ee4, aPresContext=0x42b4d930, aDesiredSize=@0xbfffe658, aReflowState=@0xbfffe448, aStatus=@0xbfffe6bc) at /builds/seamonkey/mozilla/layout/html/base/src/nsHTMLFrame.cpp:301 #11 0x41621455 in nsBoxToBlockAdaptor::Reflow (this=0x41fd2cfc, aState=@0xbfffebb8, aPresContext=0x42b4d930, aDesiredSize=@0xbfffe658, aReflowState=@0xbfffed68, aStatus=@0xbfffe6bc, aX=0, aY=0, aWidth=9480, aHeight=11904, aMoveFrame=1) at /builds/seamonkey/mozilla/layout/xul/base/src/nsBoxToBlockAdaptor.cpp:866#12 0x41620bb4 in nsBoxToBlockAdaptor::DoLayout (this=0x41fd2cfc, aState=@0xbfffebb8) at /builds/seamonkey/mozilla/layout/xul/base/src/nsBoxToBlockAdaptor.cpp:525#13 0x4161d9f1 in nsBox::Layout (this=0x41fd2cfc, aState=@0xbfffebb8) at /builds/seamonkey/mozilla/layout/xul/base/src/nsBox.cpp:1000 #14 0x4160135f in nsScrollBoxFrame::DoLayout (this=0x41fd1fc4, aState=@0xbfffebb8) at /builds/seamonkey/mozilla/layout/xul/base/src/nsScrollBoxFrame.cpp:377 #15 0x4161d9f1 in nsBox::Layout (this=0x41fd1ffc, aState=@0xbfffebb8) at /builds/seamonkey/mozilla/layout/xul/base/src/nsBox.cpp:1000 #16 0x416237a5 in nsContainerBox::LayoutChildAt (aState=@0xbfffebb8, aBox=0x41fd1ffc, aRect=@0xbfffea48) at /builds/seamonkey/mozilla/layout/xul/base/src/nsContainerBox.cpp:593 #17 0x41448a9f in nsGfxScrollFrameInner::LayoutBox (this=0x41fe50e8, aState=@0xbfffebb8, aBox=0x41fd1ffc, aRect=@0xbfffea48) at /builds/seamonkey/mozilla/layout/html/base/src/nsGfxScrollFrame.cpp:1029 #18 0x41448d03 in nsGfxScrollFrameInner::Layout (this=0x41fe50e8, aState=@0xbfffebb8) at /builds/seamonkey/mozilla/layout/html/base/src/nsGfxScrollFrame.cpp:1109 #19 0x41448af9 in nsGfxScrollFrame::DoLayout (this=0x41fd1f1c, aState=@0xbfffebb8) at /builds/seamonkey/mozilla/layout/html/base/src/nsGfxScrollFrame.cpp:1037 #20 0x4161d9f1 in nsBox::Layout (this=0x41fd1f54, aState=@0xbfffebb8) at /builds/seamonkey/mozilla/layout/xul/base/src/nsBox.cpp:1000 #21 0x41632019 in nsBoxFrame::Reflow (this=0x41fd1f1c, aPresContext=0x42b4d930, aDesiredSize=@0xbfffee28, aReflowState=@0xbfffed68, aStatus=@0xbfffefc0) at /builds/seamonkey/mozilla/layout/xul/base/src/nsBoxFrame.cpp:786 #22 0x41447db7 in nsGfxScrollFrame::Reflow (this=0x41fd1f1c, aPresContext=0x42b4d930, aDesiredSize=@0xbfffee28, aReflowState=@0xbfffed68, aStatus=@0xbfffefc0) at /builds/seamonkey/mozilla/layout/html/base/src/nsGfxScrollFrame.cpp:741 #23 0x413e0eae in nsContainerFrame::ReflowChild (this=0x41fd1ea8, aKidFrame=0x41fd1f1c, aPresContext=0x42b4d930, aDesiredSize=@0xbfffee28, aReflowState=@0xbfffed68, aX=0, aY=0, aFlags=0, aStatus=@0xbfffefc0) at /builds/seamonkey/mozilla/layout/html/base/src/nsContainerFrame.cpp:693 #24 0x41445f12 in ViewportFrame::Reflow (this=0x41fd1ea8, aPresContext=0x42b4d930, aDesiredSize=@0xbffff0a8, aReflowState=@0xbfffef08, aStatus=@0xbfffefc0) at /builds/seamonkey/mozilla/layout/html/base/src/nsViewportFrame.cpp:545 #25 0x413ff9dd in nsHTMLReflowCommand::Dispatch (this=0x42bbd1a0, aPresContext=0x42b4d930, aDesiredSize=@0xbffff0a8, aMaxSize=@0xbffff078, aRendContext=@0x42b8b340) at /builds/seamonkey/mozilla/layout/html/base/src/nsHTMLReflowCommand.cpp:145 #26 0x4142e237 in PresShell::ProcessReflowCommands (this=0x4267cc28, aInterruptible=1) at /builds/seamonkey/mozilla/layout/html/base/src/nsPresShell.cpp:5105 #27 0x41755d37 in ReflowEvent::HandleEvent (this=0x42b683a8) at /builds/seamonkey/mozilla/layout/html/base/src/nsPresShell.cpp:4986 #28 0x4142dd3a in HandlePLEvent (aEvent=0x42b683a8) at /builds/seamonkey/mozilla/layout/html/base/src/nsPresShell.cpp:5002 #29 0x40122b14 in PL_HandleEvent (self=0x42b683a8) at /builds/seamonkey/mozilla/xpcom/threads/plevent.c:576 ...
Hmmm... I don't see this in the 2000-12-08-08-Mtrunk linux release build. Is it new or is it just me?
Please triage.
Assignee: clayton → harishd
I can't reproduce either. Tested with 12/2 Mtrunk build on Linux Redhat. Should we change status to worksforme ?
In a 12-2 build or a 12-12 build?
Sorry for the typo. I mean 12/12 Mtrunk build or newer.
I don't see the crash ( LINUX build 12/21/00 , WINNT build 12/22/00)
Status: NEW → RESOLVED
Closed: 25 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.