66046 - browser crashes from javascript error

Status: VERIFIED WORKSFORME

(SeaMonkey :: General, defect)

Description

[anthonyc]

From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux 2.2.14 i686; en-US; m18) Gecko/20010118
BuildID:    2001011815

Opening the indicated URL, with javascript enabled, the browser crashes
at the end of loading the page. If the javascript console is open when
I do this I see an error reported in the console, then the browser
and console both crash. I also see the following in the x-term where
I have run-mozilla.sh :
got a request
JavaScript error: 
 line 0: go is not defined

Document http://www.bomis.com/rings/katieholmes/6 loaded successfully
./run-mozilla.sh: line 72:   736 Segmentation fault      $prog ${1+"$@"}

If I disable javascript I can load the page without crashing.

Reproducible: Always
Steps to Reproduce:
Enable Javascript.
Open indicated URL.

Actual Results:  Page loads, at the end of which, the browser crashes.

Expected Results:  A more graceful handling of the javascript error.

Netscape 4.72 seems to handle this page OK. Although I don't like
scripts that open new windows when I am trying to exit the browser.

Comment 1

[Phil Schwartau]

Searchable WinNT stack trace. Will attach full trace below. 
Changing OS from "Linux" to "All".


nsDocLoaderImpl::FireOnEndURLLoad()
nsDocLoaderImpl::FireOnEndURLLoad()
nsDocLoaderImpl::FireOnEndURLLoad()
nsDocLoaderImpl::OnStopRequest()
nsLoadGroup::RemoveChannel()
nsLoadGroup::Cancel()
nsDocLoaderImpl::Stop()
nsDocLoaderImpl::Stop()
nsDocLoaderImpl::Stop()
nsDocLoaderImpl::Destroy()
nsDocLoaderImpl::~nsDocLoaderImpl() 
nsDocLoaderImpl::`scalar deleting destructor'() 
nsDocLoaderImpl::Release()
DeleteEntry()
_hashEnumerateRemove()
PL_HashTableEnumerateEntries()
nsHashtable::Reset()
nsObjectHashtable::Reset()
nsObjectHashtable::~nsObjectHashtable()
nsObjectHashtable::`vector deleting destructor'(unsigned int 1)
nsServiceManagerImpl::~nsServiceManagerImpl()
nsServiceManagerImpl::`scalar deleting destructor'(unsigned int 1)
nsServiceManagerImpl::Release()
nsServiceManager::ShutdownGlobalServiceManager()
NS_ShutdownXPCOM() 
main(int 1, char * * 0x00a25fc0) line 1280 + 8 bytes
mainCRTStartup() line 338 + 17 bytes
KERNEL32! 77f1ba06()



No JS Engine issues apparent in stack trace. Not sure which component 
gets this. Reassigning to Browser-General for advice on this. It may be 
a dupe of another bug, but I couldn't find which one...  


cc'ing jband since the stack begins with NS_ShutdownXPCOM(), 
in case it might be of interest.

Comment 2

[Phil Schwartau]

Attachment: WinNT stack trace + some detail

Comment 3

[Guy Rixon]

I had a similar crash in build 2001012321 on solaris, but for a different
Javascript error:

Document http://www.userfriendly.org/community/iambe/daily.html loaded
successfully
JavaScript error: 
http://www.roadwaffles.com/banners/bert.js line 143: missing ; before statement

Error loading URL http://www.roadwaffles.com/: 804b0002 
Segmentation Fault - core dumped

Comment 4

[anthonyc]

I don't know if the katieholmes site cleaned up their
javascript, but I don't see this problem in build
2001030108 on Linux.

Comment 5

[Francois Cartegnie]

Does not seems to still crashing.
I got zero JS error/warning on this page.
Seems fixed ?
2001031204 Win98

Comment 6

[Asa Dotzler [:asa]]

worksforme per above comments.

Comment 7

[Phil Schwartau]

Verified WORKSFORME with Linux, WinNT debug builds 2001-03-22.