68313 - Crash in NS_NewFrameManager

Status: VERIFIED WORKSFORME

(Core :: Layout: Images, Video, and HTML Frames, defect)

Description

[Jure Repinc (JLP)]

When I visit the http://www.inmatrix.com/ Mozilla crashes.
It happens always here.
Using Mozilla 2001020820 on Windows 2000 SP1 on PC

This is the DrWatson 32 log:

Microsoft (R) Windows 2000 (TM) Version 5.00 DrWtsn32
Copyright (C) 1985-1999 Microsoft Corp. All rights reserved.



Application exception occurred:
        App: mozilla.exe (pid=1504)
        When: 9.2.2001 @ 17:59:28.117
        Exception number: c0000005 (access violation)

*----> System Information <----*
        Computer Name: NS
        User Name: Jure
        Number of Processors: 1
        Processor Type: x86 Family 6 Model 4 Stepping 2
        Windows 2000 Version: 5.0
        Current Build: 2195
        Service Pack: 1
        Current Type: Uniprocessor Free
        Registered Organization: Home
        Registered Owner: Jure Repinc

*----> Task List <----*
   0 Idle.exe
   8 System.exe
 160 SMSS.exe
 184 csrss.exe
 204 WINLOGON.exe
 232 services.exe
 244 LSASS.exe
 396 svchost.exe
 420 spoolsv.exe
 464 Apache.exe
 484 Apache.exe
 704 svchost.exe
 720 FireDaemon.exe
 736 Serv-U32.exe
 748 control.exe
 752 ssl32.dll.exe
 780 pop3.exe
 824 smtp.exe
 872 regsvc.exe
 892 mstask.exe
 908 FireDaemon.exe
 936 setiathome.exe
 948 stisvc.exe
1000 WinMgmt.exe
1020 mspmspsv.exe
1036 DNS.exe
1192 svchost.exe
1948 explorer.exe
1384 devldr32.exe
1628 3dfxMan.exe
1456 TCAUDIAG.exe
 448 EM_EXEC.exe
1176 Icq.exe
1704 getright.exe
 728 SetiSpy.exe
1112 setiqueue.exe
1868 naviscope.exe
1744 msimn.exe
1004 wmplayer.exe
1504 mozilla.exe
1728 DRWTSN32.exe
   0 _Total.exe

(00400000 - 00455000) 
(77F80000 - 77FFA000) 
(60D00000 - 60D5C000) 
(60C60000 - 60C84000) 
(77DB0000 - 77E0A000) 
(77E80000 - 77F35000) 
(77D40000 - 77DB0000) 
(75050000 - 75058000) 
(75030000 - 75044000) 
(78000000 - 78046000) 
(75020000 - 75028000) 
(60CE0000 - 60CE6000) 
(60CD0000 - 60CD7000) 
(60C20000 - 60C29000) 
(69800000 - 69A42000) 
(77F40000 - 77F7C000) 
(77E10000 - 77E74000) 
(70BD0000 - 70C1C000) 
(71700000 - 7178A000) 
(77A50000 - 77B45000) 
(60B00000 - 60B4B000) 
(75E60000 - 75E7A000) 
(60A30000 - 60A5A000) 
(60D70000 - 60D7C000) 
(60080000 - 6009D000) 
(600C0000 - 600CC000) 
(60860000 - 6086E000) 
(60AB0000 - 60ACD000) 
(76B30000 - 76B6E000) 
(77570000 - 775A0000) 
(60A80000 - 60AA5000) 
(60AD0000 - 60ADC000) 
(60760000 - 607AA000) 
(60B50000 - 60BBC000) 
(60A60000 - 60A69000) 
(60A00000 - 60A1B000) 
(60730000 - 6073C000) 
(779B0000 - 77A45000) 
(691D0000 - 69255000) 
(77840000 - 7787C000) 
(770C0000 - 770E3000) 
(60650000 - 6069C000) 
(74FD0000 - 74FED000) 
(77340000 - 77353000) 
(77520000 - 77525000) 
(77320000 - 77337000) 
(75150000 - 7515F000) 
(75170000 - 751BF000) 
(77BE0000 - 77BEF000) 
(751C0000 - 751C6000) 
(77950000 - 77979000) 
(77980000 - 779A4000) 
(773B0000 - 773DE000) 
(77380000 - 773A2000) 
(77830000 - 7783E000) 
(77880000 - 7790D000) 
(77C10000 - 77C6D000) 
(774E0000 - 77512000) 
(774C0000 - 774D1000) 
(77530000 - 77552000) 
(77360000 - 77379000) 
(75010000 - 75017000) 
(60900000 - 6091A000) 
(609D0000 - 609E0000) 
(60110000 - 60123000) 
(60970000 - 6097D000) 
(60740000 - 60756000) 
(601C0000 - 6035A000) 
(60810000 - 60818000) 
(600F0000 - 600FE000) 
(60360000 - 6039D000) 
(60850000 - 60857000) 
(60440000 - 60449000) 
(606D0000 - 606DD000) 
(60100000 - 6010B000) 
(60720000 - 6072A000) 
(60BC0000 - 60BD1000) 
(603A0000 - 603B5000) 
(77820000 - 77827000) 
(759B0000 - 759B6000) 
(50390000 - 50397000) 
(502E0000 - 502FD000) 
(50300000 - 50316000) 
(50420000 - 5052A000) 
(50220000 - 50227000) 
(503B0000 - 503BD000) 
(50250000 - 50267000) 
(503C0000 - 503CD000) 
(50020000 - 50128000) 
(77800000 - 7781D000) 
(501E0000 - 5021B000) 
(51000000 - 5104A000) 
(728A0000 - 728A6000) 
(10080000 - 10463000) 
(10470000 - 105CB000) 
(600A0000 - 600B4000) 
(604D0000 - 604D8000) 
(60050000 - 6007D000) 
(60990000 - 609A1000) 
(603C0000 - 603D0000) 
(605D0000 - 605F3000) 
(60C30000 - 60C55000) 
(60600000 - 60625000) 
(607E0000 - 607E6000) 
(606B0000 - 606B6000) 
(60130000 - 60187000) 
(60830000 - 60836000) 
(604B0000 - 604CA000) 
(10000000 - 10008000) 
(60470000 - 60476000) 

State Dump for Thread Id 0x45c

eax=00000000 ebx=60d09f12 ecx=0012f79c edx=0012f824 esi=1533ce30 edi=60d0a47a
eip=6022d97f esp=0012f6e0 ebp=0012f828 iopl=0         nv up ei pl zr na po nc
cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00200246


function: <nosymbols>
        6022d957 8b855cffffff     mov     eax,[ebp+0xffffff5c]  
ss:0012f784=60d3a280
        6022d95d ff503c           call    dword ptr [eax+0x3c]  
ds:00b4d5d6=????????
        6022d960 eb05             jmp     NS_NewHTMLDocument+0x496d (6023c167)
        6022d962 e86f44faff       call    NS_NewDOMImplementation+0x7e87 (601d1dd6)
        6022d967 8d8d5cffffff     lea     ecx,[ebp+0xffffff5c]  
ss:0012f784=60d3a280
        6022d96d ff156c743060                                   
ds:6030746c=60d0a9dc
                call dword ptr [nsIPresShell::GetVerifyReflowFlags+0x9d64
(6030746c)]
        6022d973 eb5c             jmp     NS_CreateHTMLElement+0x8a2e (602364d1)
        6022d975 8b4638           mov     eax,[esi+0x38]        
ds:15e8a406=????????
        6022d978 8365fc00         and   dword ptr [ebp+0xfc],0x0
ss:00c7cdfe=????????
        6022d97c 8d55fc           lea     edx,[ebp+0xfc]        
ss:00c7cdfe=????????
FAULT ->6022d97f 8b08             mov     ecx,[eax]             
ds:00000000=????????
        6022d981 52               push    edx
        6022d982 50               push    eax
        6022d983 ff5134           call    dword ptr [ecx+0x34]  
ds:00c7cd72=????????
        6022d986 a900000080       test    eax,0x80000000
        6022d98b 8945f8           mov     [ebp+0xf8],eax        
ss:00c7cdfe=????????
        6022d98e 7539             jnz     NS_CreateHTMLElement+0x8c26 (602366c9)
        6022d990 8d8dc4feffff     lea     ecx,[ebp+0xfffffec4]  
ss:0012f6ec=1603e1a8
        6022d996 ffd3             call    ebx
        6022d998 8b45fc           mov     eax,[ebp+0xfc]        
ss:00c7cdfe=????????
        6022d99b 8d95c4feffff     lea     edx,[ebp+0xfffffec4]  
ss:0012f6ec=1603e1a8
        6022d9a1 52               push    edx

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1  Param#2  Param#3  Param#4  Function Name
0012F828 6022E6C9 16144338 00000049 00000000 00000000 gkhtml!NS_NewFrameManager 
0012F86C 602307C1 16144338 00000049 15367858 60D39A48 gkhtml!NS_CreateHTMLElement 
0012F89C 6036AC6E 1533CE30 16144338 15367858 6036AE5C gkhtml!NS_CreateHTMLElement 
0012F8AC 6036AE5C 16144338 00000000 00001488 15367858
gkparser!CNavDTD::OpenNoscript  (FPO: [2,0,2])
0012F8C8 60368F02 16144338 00000049 00000001 00000000
gkparser!CNavDTD::OpenContainer 
0012F8FC 603697E3 161D1D68 00000001 16144338 161D1D68
gkparser!CNavDTD::HandleDefaultStartToken 
0012F930 603689E0 00000000 16220438 15367858 804E03E8
gkparser!CNavDTD::HandleStartToken 
0012FA28 603684CF 15367858 00000001 16220438 15367858 gkparser!CNavDTD::HandleToken 
0012FADC 60375DCE 15367858 16220438 16199908 00000000 gkparser!CNavDTD::BuildModel 
0012FB04 60375C69 16220438 162176B8 16220440 804E03E8
gkparser!nsHTMLTokenizer::GetTokenAllocator 
0012FB20 60375FC0 00000001 00000000 00000000 162114C8
gkparser!nsHTMLTokenizer::GetTokenAllocator 
0012FB60 60975059 00001174 161B7240 00000000 1602CE6C
gkparser!nsHTMLTokenizer::GetTokenAllocator 
0012FB88 60682B3B 162114C8 161B7240 00000000 1602CE6C urildr!NSGetModule 
0012FBB4 6066E33B 00000000 161B7240 00000000 1602CE6C necko!mktemp 
0012FBD8 60682094 1602CE68 161B7240 00000000 161FF1CC
necko!nsProxyObjectCallInfo::GetMethodIndex 
0012FC88 6065CFCF 161FF1CC 1532C844 161B7240 161FF1CC necko!mktemp 
0012FCBC 6065CB71 161FB8E8 60D2F83E 153E2404 00000002
necko!nsProxyObjectCallInfo::operator= 
0012FCC4 60D2F83E 153E2404 00000002 00B84EC8 60D2F7AC
necko!nsProxyObjectCallInfo::operator=  (FPO: [1,0,0])
0012FCD4 60D2F7AC 153E2404 0012FDCC 0012FCFC 00B84EC8 xpcom!PL_HandleEvent 
(FPO: [1,0,2])
0012FCEC 60D2FA08 00B84EC8 0012FDD4 0012FD1C 77E148DC
xpcom!PL_ProcessPendingEvents  (FPO: [EBP 0x0012FDCC] [1,0,4])
0012FE00 6008643E 015FEF58 00401670 00B69208 00000000 xpcom!PL_IsQueueNative 
0012FE08 00401670 00B69208 00000000 001337BB 00000000
appshell!nsQueryReferent::operator=  (FPO: [1,0,0])
0012FEF0 004011B8 00000001 00343B20 00343B60 001337BB
mozilla!nsGetInterface::operator= 
0012FF18 00402AE2 00000001 00343B20 004047A0 00400000
mozilla!nsGetInterface::operator= 
0012FF24 004047A0 00400000 00000000 001337BB 00000001
mozilla!nsGetInterface::operator=  (FPO: [4,0,0])
0012FFC0 77E992A6 00DECF38 00000A92 7FFDF000 C0000005
mozilla!nsGetInterface::operator= 
0012FFF0 00000000 0040466C 00000000 000000C8 00000100 kernel32!GetCommandLineW 

*----> Raw Stack Dump <----*
0012f6e0  00 00 00 00 70 4c 2c 15 - 49 00 00 00 a8 e1 03 16  ....pL,.I.......
0012f6f0  bc c2 22 60 38 58 13 16 - a8 e1 03 16 00 00 00 00  .."`8X..........
0012f700  70 4c 2c 15 00 00 00 00 - 89 10 00 78 00 00 34 00  pL,........x..4.
0012f710  00 00 00 00 38 00 00 00 - 01 00 00 00 44 f7 12 00  ....8.......D...
0012f720  42 f0 22 60 00 00 00 00 - 01 00 00 00 00 00 00 00  B."`............
0012f730  70 4c 2c 15 01 00 00 00 - be 02 c4 ff 00 00 00 00  pL,.............
0012f740  4d 2f 23 60 5c f7 12 00 - 67 e6 22 60 01 00 00 00  M/#`\...g."`....
0012f750  00 00 00 00 70 4c 2c 15 - 70 4c 2c 15 34 f8 12 00  ....pL,.pL,.4...
0012f760  2e f3 22 60 4c f3 22 60 - 30 58 13 16 00 00 00 00  .."`L."`0X......
0012f770  70 4c 2c 15 00 00 00 00 - d4 f7 12 00 b8 30 bd 00  pL,..........0..
0012f780  f0 62 34 00 80 a2 d3 60 - 00 00 00 00 3f 00 00 00  .b4....`....?...
0012f790  01 00 00 00 00 00 00 00 - 9c f7 12 00 00 00 a6 60  ...............`
0012f7a0  f0 68 c7 60 04 68 34 00 - a2 30 c7 60 04 68 34 00  .h.`.h4..0.`.h4.
0012f7b0  3c 27 c7 60 e8 67 34 00 - 00 32 bd 00 00 00 00 80  <'.`.g4..2......
0012f7c0  1c 89 d2 60 d0 67 34 00 - 00 00 00 00 80 f8 12 00  ...`.g4.........
0012f7d0  00 00 00 00 d8 98 d3 60 - e0 e0 26 dc 94 ca d1 11  .......`..&.....
0012f7e0  a9 a4 00 80 5f 8a 7a c4 - d0 67 34 00 18 f8 12 00  ...._.z..g4.....
0012f7f0  2e 8c d2 60 d0 62 34 00 - 30 d0 b6 00 50 86 30 60  ...`.b4.0...P.0`
0012f800  70 f8 12 00 00 00 00 00 - 88 6a c2 00 b0 e1 b6 00  p........j......
0012f810  3d 15 ce 60 28 42 33 60 - 68 6a c2 00 08 d3 b6 00  =..`(B3`hj......

Comment 1

[Jure Repinc (JLP)]

Adding keywords regression and crash.

Comment 2

[Chris Petersen]

Reporter, Is this happening for you in the latest build ? I used the Feb 13
build on Windows 2000 and Mac OS 9 and didn't reproduce the crash. Page loads
for me.

Comment 3

[Jure Repinc (JLP)]

It looks like it was fixed. It doesn't happen in the recent builds.

Comment 4

[Chris Petersen]

Marking verified worksforme per last comments.

Comment 5

[Chris Petersen]

Marking verified