644591 - Crash when open Yandex search results page

Status: NEW

(Core :: General, defect)

Description

[Danil Ivanov]

User-Agent:       Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:2.0) Gecko/20100101 Firefox/4.0
Build Identifier: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:2.0) Gecko/20100101 Firefox/4.0

Crash when open http://yandex.ru/yandsearch?text=%D0%BC%D0%BE%D1%81%D0%BA%D0%B2%D0%B0

Reproducible: Sometimes

Steps to Reproduce:
1. Open http://yandex.ru/yandsearch?text=%D0%BC%D0%BE%D1%81%D0%BA%D0%B2%D0%B0
1a. (Refresh, if not crashed)



Talkback crash ID: ef544b45-5fe5-4ad5-9fe4-16f172110323

Comment 1

[Danil Ivanov]

Attachment: crash info

Comment 2

[Danil Ivanov]

Attachment: plugins list

Comment 3

[Matthias Versen [:Matti]]

Please post a crash ID from about:crashes
https://developer.mozilla.org/en/How_to_get_a_stacktrace_for_a_bug_report

Comment 4

[Danil Ivanov]

https://crash-stats.mozilla.com/report/index/bp-ef544b45-5fe5-4ad5-9fe4-16f172110323

Comment 5

[Carsten Book [:Tomcat]]

Attachment: apple crash report

confirmed Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:2.0) Gecko/20100101 Firefox/4.0

Comment 6

[Carsten Book [:Tomcat]]

Boris, does this belong to layout or gfx ?

Comment 7

[Carsten Book [:Tomcat]]

Attachment: saved source of the site

zipped page source - should crash when you load the yandsearch?text=мо%D1%81ква&lr=99 file in firefox

Comment 8

[Boris Zbarsky [:bzbarsky]]

Probably start with layout:text

That said, the data in comment 5 is from a build with no symbols and I don't understand how we can get a null-deref crash when tearing down an nsCOMArray (per comment 4) unless one of the entries is dead....

Comment 9

[Danil Ivanov]

Sorry, I'm not sure that "crash info" and crash report is for the same problem. :( I can't repoduce this crash.