Closed Bug 65074 Opened 24 years ago Closed 23 years ago

XHTML page crashes browser.

Categories

(Core Graveyard :: Plug-ins, defect)

x86
Windows 98
defect
Not set
critical

Tracking

(Not tracked)

RESOLVED WORKSFORME

People

(Reporter: ronbu, Assigned: serhunt)

References

()

Details

(Keywords: crash, xhtml)

Attachments

(1 file)

The browser crashes (receives a general protection fault) when it reaches the
above URL.  The above URL has a doctype of
XHTML 1.0 Transitional, and the version of it without the Truepath
advertisement, has been validated with the World Wide Web consortium's validator
to have correct XHTML.  This page works fine in Netscape 6.0 .
*** Bug 65075 has been marked as a duplicate of this bug. ***
unable to duplicate this with 2001010904 on winNT.

ron@truthmail.com, do you see this with the nightlies?
can't seem to be able to connect to that site in any browser.

not a blocker though. btw, what browser are you seeing this reporter?
Severity: blocker → critical
Keywords: crash
Crashes on my machine as well. Here are 2 talkback incident IDs: TB24444040E &
TB24443965Z

OS: Win2k SP1
Moz Build: 2001011104 Win32 Talkback
User Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; m18) Gecko/20010111
Status: UNCONFIRMED → NEW
Ever confirmed: true
I can confirm this bug on my system with build 20001010620 / win2k
Okay, I can confirm this too. What we now need is a simplified testcase to track
down the bug.

One would have to use IE to download the source, and then cut then trim the
source down.
not seeing 2001011504 win98..why is this in xml, back to browser general
Assignee: heikki → asa
Component: XML → Browser-General
QA Contact: petersen → doronr
Doron, XHTML is XML. Although I doubt this is actually an XHTML bug. Previously
they have turned out to be bugs in our normal HTML code (XHTML documents can
take two routes to process depending on mime type etc.) I am adding the xhtml
keyword just in case.

For the person creating a reduced testcase: try also stripping out the XHTML
specific (like processing instructions and namespace declarations) stuff in the
file. If it stops crashing then, send this bug back to XML component.

Since this is a crasher it would be nice to have the reduced testcase ASAP so we
can attack this sooner rather than later.
Keywords: qawanted, xhtml
nsPluginStreamListenerPeer::OnStartRequest  
[d:\builds\seamonkey\mozilla\modules\plugin\nglsrc\nsPluginHostImpl.cpp, line 1183]
     nsHTTPFinalListener::OnStartRequest
[d:\builds\seamonkey\mozilla\netwerk\protocol\http\src\nsHTTPResponseListener.cpp,
line 1127]
     InterceptStreamListener::OnStartRequest
[d:\builds\seamonkey\mozilla\netwerk\cache\mgr\nsCachedNetData.cpp, line 1191]
     nsHTTPServerListener::FinishedResponseHeaders
[d:\builds\seamonkey\mozilla\netwerk\protocol\http\src\nsHTTPResponseListener.cpp,
line 1065]
     nsHTTPServerListener::OnDataAvailable
[d:\builds\seamonkey\mozilla\netwerk\protocol\http\src\nsHTTPResponseListener.cpp,
line 428]
     nsOnDataAvailableEvent::HandleEvent
[d:\builds\seamonkey\mozilla\netwerk\base\src\nsAsyncStreamListener.cpp, line 413]
     nsStreamListenerEvent::HandlePLEvent
[d:\builds\seamonkey\mozilla\netwerk\base\src\nsAsyncStreamListener.cpp, line 101]
     PL_HandleEvent [d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c, line 577]
     _md_EventReceiverProc [d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c,
line 1055]
     SETUPAPI.DLL + 0x30c24 (0x778b0c24)
Assignee: asa → av
Component: Browser-General → Plug-ins
QA Contact: doronr → shrir
I am not seeing this bug at all. I do not crash on the win trunk 20010116 and 
win branch . Is anyone stil lseeing this ? Else pls close this bug.Thanks!
hmm, I see the stack trace posted by Asa....what build? 
2001011704 win98, still not seeing this. Is anyone still seeing this? 
1.) This page is not XHTML: it's not well-formed (there are unclosed empty
elements, wrong cases on elements [DTD specifies lower case and XML is case
sensitive].
2.) This page is certainly not XHTML strict, as defined in DOCTYPE.
3.) Bug has nothing to do with DOCTYPE: remove all mention of XHTML, and it's
still bad.

Bug is in handling of this object:

<object name="addulrform">
<form class="addPengs"
action="http://www.pengs.com/cgi-bin/search/add_url.cgi" method="post">
Add your site: <input name="url" value="http://" size="20" />
<input type="hidden" name="category" value="" />
<input type="hidden" name="action" value="Spider it" />
<input type="hidden" name="account" value="" />
<input type="submit" value="Spider it" />
<form>
</object>


I found this out by selectively removing code until page loaded correctly.

Feel free to verify. I used 2001010901.

I can´t reproduce it now with build 2001012304 / win2k
Marc,
Is this a dup of your bug? I can't make heads or tails out of it. The testcase 
has <object><form>.

I'm confused what's wrong, where's the crash? This bug needs QA.
No crash for me on WinNT using a build from 02/13 - URL or testcase.

Can anyone else check Win98 with a recent build? If a crash, please attach a
stack trace, that would help me find the culprit.
no crash for me URL or testcase from 2001012321 on solaris 2.6
or 2001021304 on win NT.
Ok, since it looks like almost half a dozen people no longer see this and I know 
there were some plugin problems with 0.7 that are fixed now, I'm going to mark 
this WFM. 

Please REOPEN if there is still a problem.
Status: NEW → RESOLVED
Closed: 23 years ago
Resolution: --- → WORKSFORME
Keywords: qawanted
Product: Core → Core Graveyard
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: