71225 - When I click link on Slashdot.org Mozilla crashes

Status: VERIFIED DUPLICATE of bug 71181

(Core :: Layout, defect)

Description

[Jure Repinc (JLP)]

If I click a link on Slashdot.org Mozilla crashes in function
nsStyleChangeList::ChangeAt. This happens always.
Using Mozilla 2001030620 on Windows 2000 SP1 on PC.

Here is the stack dump from DrWatson:

Microsoft (R) Windows 2000 (TM) Version 5.00 DrWtsn32
Copyright (C) 1985-1999 Microsoft Corp. All rights reserved.



Application exception occurred:
        App: mozilla.exe (pid=1728)
        When: 7.3.2001 @ 22:56:45.131
        Exception number: c0000005 (access violation)

*----> System Information <----*
        Computer Name: NS
        User Name: Jure
        Number of Processors: 1
        Processor Type: x86 Family 6 Model 4 Stepping 2
        Windows 2000 Version: 5.0
        Current Build: 2195
        Service Pack: 1
        Current Type: Uniprocessor Free
        Registered Organization: Home
        Registered Owner: Jure Repinc

*----> Task List <----*
   0 Idle.exe
   8 System.exe
 160 SMSS.exe
 184 csrss.exe
 204 WINLOGON.exe
 232 services.exe
 244 LSASS.exe
 388 svchost.exe
 420 spoolsv.exe
 464 Apache.exe
 488 Apache.exe
 712 svchost.exe
 728 FireDaemon.exe
 748 Serv-U32.exe
 756 control.exe
 760 ssl32.dll.exe
 788 pop3.exe
 832 smtp.exe
 872 regsvc.exe
 892 mstask.exe
 908 FireDaemon.exe
 932 tcpsvcs.exe
 948 setiathome.exe
 968 stisvc.exe
1028 WinMgmt.exe
1032 mspmspsv.exe
1048 DNS.exe
1204 svchost.exe
1236 explorer.exe
1348 devldr32.exe
1276 3dfxMan.exe
1176 TCAUDIAG.exe
1172 EM_EXEC.exe
1160 Icq.exe
1112 SetiSpy.exe
1260 getright.exe
1128 msimn.exe
1584 iexplore.exe
 216 setiqueue.exe
1244 cutftp32.exe
1488 UEDIT32.exe
1728 mozilla.exe
1520 DRWTSN32.exe
   0 _Total.exe

(00400000 - 00455000) 
(77F80000 - 77FFA000) 
(60D50000 - 60DAC000) 
(60CB0000 - 60CD4000) 
(77DB0000 - 77E0A000) 
(77E80000 - 77F35000) 
(77D40000 - 77DB0000) 
(75050000 - 75058000) 
(75030000 - 75044000) 
(78000000 - 78046000) 
(75020000 - 75028000) 
(60D30000 - 60D36000) 
(60D20000 - 60D27000) 
(60C70000 - 60C79000) 
(69800000 - 69A42000) 
(77F40000 - 77F7C000) 
(77E10000 - 77E74000) 
(70BD0000 - 70C1C000) 
(71700000 - 7178A000) 
(77A50000 - 77B45000) 
(60B40000 - 60B8B000) 
(75E60000 - 75E7A000) 
(60A70000 - 60A92000) 
(60DC0000 - 60DCC000) 
(60080000 - 6009D000) 
(600C0000 - 600CD000) 
(60890000 - 6089E000) 
(60AF0000 - 60B0D000) 
(76B30000 - 76B6E000) 
(77570000 - 775A0000) 
(60AC0000 - 60AE5000) 
(60B10000 - 60B1C000) 
(607D0000 - 607E6000) 
(60190000 - 60198000) 
(60AA0000 - 60AA9000) 
(60A40000 - 60A5C000) 
(607A0000 - 607AC000) 
(779B0000 - 77A45000) 
(691D0000 - 69255000) 
(77840000 - 7787C000) 
(770C0000 - 770E3000) 
(606C0000 - 6070E000) 
(74FD0000 - 74FED000) 
(77340000 - 77353000) 
(77520000 - 77525000) 
(77320000 - 77337000) 
(75150000 - 7515F000) 
(75170000 - 751BF000) 
(77BE0000 - 77BEF000) 
(751C0000 - 751C6000) 
(77950000 - 77979000) 
(77980000 - 779A4000) 
(773B0000 - 773DE000) 
(77380000 - 773A2000) 
(77830000 - 7783E000) 
(77880000 - 7790D000) 
(77C10000 - 77C6D000) 
(774E0000 - 77512000) 
(774C0000 - 774D1000) 
(77530000 - 77552000) 
(77360000 - 77379000) 
(75010000 - 75017000) 
(60930000 - 6094A000) 
(60A00000 - 60A11000) 
(60B90000 - 60BFE000) 
(60110000 - 60123000) 
(609A0000 - 609AD000) 
(607B0000 - 607C6000) 
(601C0000 - 602D6000) 
(60740000 - 6074C000) 
(60840000 - 60848000) 
(600F0000 - 600FE000) 
(603C0000 - 603FE000) 
(60880000 - 60887000) 
(604A0000 - 604A9000) 
(60100000 - 6010B000) 
(60790000 - 6079A000) 
(60C00000 - 60C11000) 
(60400000 - 60415000) 
(77820000 - 77827000) 
(759B0000 - 759B6000) 
(50390000 - 50397000) 
(502E0000 - 502FD000) 
(50300000 - 50316000) 
(50420000 - 5052A000) 
(50220000 - 50227000) 
(503B0000 - 503BD000) 
(50250000 - 50267000) 
(503C0000 - 503CD000) 
(50020000 - 50128000) 
(77800000 - 7781D000) 
(501E0000 - 5021B000) 
(51000000 - 5104A000) 
(728A0000 - 728A6000) 
(10080000 - 10463000) 
(10470000 - 105CB000) 
(600A0000 - 600B4000) 
(60530000 - 60538000) 
(60050000 - 6007D000) 
(609C0000 - 609D1000) 
(602E0000 - 603B2000) 
(60420000 - 60430000) 
(60640000 - 60662000) 
(60C80000 - 60CA4000) 
(60670000 - 60695000) 
(60810000 - 60816000) 
(60720000 - 60726000) 
(60130000 - 60188000) 
(60860000 - 60866000) 
(60510000 - 6052A000) 
(10000000 - 10008000) 
(78280000 - 7828C000) 
(777E0000 - 777E8000) 
(777F0000 - 777F5000) 
(604D0000 - 604D6000) 

State Dump for Thread Id 0x6bc

eax=00000000 ebx=16321db8 ecx=0012f4f4 edx=16593a04 esi=16593a04 edi=16593a98
eip=602fd311 esp=0012f4d8 ebp=0012f4e8 iopl=0         nv up ei pl nz na pe nc
cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00200202


function: nsStyleChangeList::ChangeAt
        602fd2ff 85ff             test    edi,edi
        602fd301 743e             jz    nsStyleChangeList::ChangeAt+0xb329
(60302941)
        602fd303 56               push    esi
        602fd304 8b37             mov     esi,[edi]             
ds:16593a98=16593a04
        602fd306 85f6             test    esi,esi
        602fd308 7418             jz    nsStyleChangeList::ChangeAt+0xe80a
(60305e22)
        602fd30a 8b06             mov     eax,[esi]             
ds:16593a04=00000000
        602fd30c 8d4d0c           lea     ecx,[ebp+0xc]         
ss:00c7cabe=????????
        602fd30f 51               push    ecx
        602fd310 56               push    esi
FAULT ->602fd311 ff5074           call    dword ptr [eax+0x74]  
ds:00b4d5d6=????????
        602fd314 ff7508           push    dword ptr [ebp+0x8]   
ss:00c7cabe=????????
        602fd317 8b06             mov     eax,[esi]             
ds:16593a04=00000000
        602fd319 56               push    esi
        602fd31a ff5010           call    dword ptr [eax+0x10]  
ds:00b4d5d6=????????
        602fd31d 8b750c           mov     esi,[ebp+0xc]         
ss:00c7cabe=????????
        602fd320 ebe4             jmp   nsStyleChangeList::ChangeAt+0xe8ee
(60305f06)
        602fd322 8b7704           mov     esi,[edi+0x4]         
ds:170e106e=????????
        602fd325 85ff             test    edi,edi
        602fd327 7411             jz    nsStyleChangeList::ChangeAt+0xe822
(60305e3a)
        602fd329 8bcf             mov     ecx,edi
        602fd32b e8cfa1ffff     call nsStyleChangeList::AppendChange+0x9c3
(602f74ff)

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1  Param#2  Param#3  Param#4  Function Name
0012F4E8 602FD37C 151E45D0 16593A98 16597018 165938F4
gklayout!nsStyleChangeList::ChangeAt 
0012F4FC 602FD31D 165938F4 151E45D0 16593878 151E45D0
gklayout!nsStyleChangeList::ChangeAt  (FPO: [2,0,2])
0012F514 602FD37C 151E45D0 16593AC0 1659384C 16593878
gklayout!nsStyleChangeList::ChangeAt 
0012F528 602ECD9B 16593878 151E45D0 16593800 1659381C
gklayout!nsStyleChangeList::ChangeAt  (FPO: [2,0,2])
0012F544 602F1E09 151E45D0 1659381C 0012F570 602ECD9B gklayout!<nosymbols> 
0012F554 602ECD9B 00000000 151E45D0 16591470 165937D0
gklayout!nsStyleChangeList::Count 
0012F570 602F1E09 151E45D0 165937D0 0012F59C 602ECD9B gklayout!<nosymbols> 
0012F580 602ECD9B 00000000 151E45D0 1659140C 16591440
gklayout!nsStyleChangeList::Count 
0012F59C 602F1E09 151E45D0 16591440 0012F5C8 602ECD9B gklayout!<nosymbols> 
0012F5AC 602ECD9B 00000000 151E45D0 165913B8 165913DC
gklayout!nsStyleChangeList::Count 
0012F5C8 602F1E09 151E45D0 165913DC 0012F604 6031A6DC gklayout!<nosymbols> 
0012F5D8 6031A6DC 00000000 151E45D0 165913DC 602ECD9B
gklayout!nsStyleChangeList::Count 
0012F5E8 602ECD9B 165913DC 151E45D0 165B98FC 16591388
gklayout!NS_NewFrameImageLoader  (FPO: [2,0,1])
0012F604 602F1E09 151E45D0 16591388 0012F63C 6031A21C gklayout!<nosymbols> 
0012F614 6031A21C 00000000 151E45D0 16591388 602FD31D
gklayout!nsStyleChangeList::Count 
0012F624 602FD31D 16591388 151E45D0 16591340 151E45D0
gklayout!NS_NewFrameImageLoader  (FPO: [2,0,1])
0012F63C 602FD37C 151E45D0 16597404 16591314 16591340
gklayout!nsStyleChangeList::ChangeAt 
0012F650 602ECD9B 16591340 151E45D0 16538128 165912E4
gklayout!nsStyleChangeList::ChangeAt  (FPO: [2,0,2])
0012F66C 602F1E09 151E45D0 165912E4 0012F698 602ECD9B gklayout!<nosymbols> 
0012F67C 602ECD9B 00000000 151E45D0 165380E8 165380F8
gklayout!nsStyleChangeList::Count 
0012F698 602F1E09 151E45D0 165380F8 0012F6C4 602ECD9B gklayout!<nosymbols> 
0012F6A8 602ECD9B 00000000 151E45D0 16538084 165380B8
gklayout!nsStyleChangeList::Count 
0012F6C4 602F1E09 151E45D0 165380B8 0012F6F0 602ECD9B gklayout!<nosymbols> 
0012F6D4 602ECD9B 00000000 151E45D0 16538030 16538054
gklayout!nsStyleChangeList::Count 
0012F6F0 602F1E09 151E45D0 16538054 0012F72C 6031A6DC gklayout!<nosymbols> 
0012F700 6031A6DC 00000000 151E45D0 16538054 602ECD9B
gklayout!nsStyleChangeList::Count 
0012F710 602ECD9B 16538054 151E45D0 165B9BA8 16538000
gklayout!NS_NewFrameImageLoader  (FPO: [2,0,1])
0012F72C 602F1E09 151E45D0 16538000 0012F764 6031A21C gklayout!<nosymbols> 
0012F73C 6031A21C 00000000 151E45D0 16538000 602FD31D
gklayout!nsStyleChangeList::Count 
0012F74C 602FD31D 16538000 151E45D0 164D368C 151E45D0
gklayout!NS_NewFrameImageLoader  (FPO: [2,0,1])
0012F764 602FD37C 151E45D0 165B9C98 164D3554 164D368C
gklayout!nsStyleChangeList::ChangeAt 
0012F778 602FD31D 164D368C 151E45D0 1649C568 151E45D0
gklayout!nsStyleChangeList::ChangeAt  (FPO: [2,0,2])
0012F790 602FD37C 151E45D0 165C12AC 1649C5B0 1649C568
gklayout!nsStyleChangeList::ChangeAt 
0012F7A4 602FD31D 1649C568 151E45D0 1649C520 151E45D0
gklayout!nsStyleChangeList::ChangeAt  (FPO: [2,0,2])
0012F7BC 602FD37C 151E45D0 00000000 1649B738 1649C520
gklayout!nsStyleChangeList::ChangeAt 
0012F7D0 602ECD9B 1649C520 151E45D0 1649B80C 1649B708
gklayout!nsStyleChangeList::ChangeAt  (FPO: [2,0,2])
0012F7EC 602F1E09 151E45D0 1649B708 0012F818 602ECD9B gklayout!<nosymbols> 
0012F7FC 602ECD9B 16345810 151E45D0 151E45D0 1649B7DC
gklayout!nsStyleChangeList::Count 
0012F818 602F1E09 151E45D0 1649B7DC 0012F840 60304BE8 gklayout!<nosymbols> 
0012F828 60304BE8 1633DAC8 151E45D0 1649B76C 1649B7DC
gklayout!nsStyleChangeList::Count 
0012F840 602ECD9B 16321D58 151E45D0 151E45D0 1649B73C
gklayout!nsStyleChangeList::ChangeAt 
0012F85C 602F1E09 151E45D0 1649B73C 0012F884 60304BE8 gklayout!<nosymbols> 
0012F86C 60304BE8 00000000 151E45D0 1649B700 1649B73C
gklayout!nsStyleChangeList::Count 
0012F884 60327651 16321D58 151E45D0 602ECD9B 1649B73C
gklayout!nsStyleChangeList::ChangeAt 
0012F890 602ECD9B 1649B73C 151E45D0 00000000 1649B6D0
gklayout!NS_NewFrameImageLoader  (FPO: [2,0,0])
0012F8AC 602F1E09 151E45D0 1649B6D0 0012F8E8 60331E49 gklayout!<nosymbols> 
0012F8BC 60331E49 164A3AE0 151E45D0 16344078 6035AA85
gklayout!nsStyleChangeList::Count 
0012F8CC 6035AA85 1649B6D0 151E45D0 00000000 16321D6C
gklayout!NS_NewFrameManager  (FPO: [2,0,1])
0012F8E8 603315C8 16344078 60D5110E 16321D6C 01709A30
gklayout!nsIPresShell::SetVerifyReflowEnable 
0012F908 60355A77 01709A08 6037C4E9 00000001 60D5100C gklayout!NS_NewFrameManager 
0012F910 6037C4E9 00000001 60D5100C 16321D58 6020037A
gklayout!nsIPresShell::SetVerifyReflowEnable  (FPO: [1,0,1])
0012F918 60D5100C 16321D58 6020037A 00000000 01709A08
gklayout!nsCSSKeywords::GetStringValue  (FPO: [1,0,0])
0012F920 6020037A 00000000 01709A08 1525ABF8 60D89668
xpcom!nsCOMPtr_base::~nsCOMPtr_base  (FPO: [0,0,0])
0012F950 6021DEDB 80000000 601D89B2 00000001 60D5179D gkcontent!NS_NewCSSStyleSheet 
0012F958 601D89B2 00000001 60D5179D 01709A08 60115507 gkcontent!NSGetModule 
(FPO: [1,0,1])
0012F960 60D5179D 01709A08 60115507 00000000 80000000
gkcontent!NS_NewEventListenerManager  (FPO: [1,0,0])
0012F980 601128B0 163596E8 151E45D0 60D89668 1630CD70
xpcom!nsCOMPtr_base::assign_with_AddRef  (FPO: [1,0,2])
0012F9F0 60114B33 1525AC7C 16561CA0 1525ABF8 1525AC18
docshell!nsGetInterface::nsGetInterface 
0012FA14 601151A2 1525ABF8 16561CA0 1525ABF8 00000000
docshell!nsGetInterface::nsGetInterface 
0012FA30 60114A85 1525AC18 16561CA0 60121640 00000000
docshell!nsGetInterface::nsGetInterface 
0012FA44 6011BC28 1525AC18 16561CA0 60121640 00000000
docshell!nsGetInterface::nsGetInterface  (FPO: [4,0,0])
0012FA80 6011D2D8 16577D50 0012FAF8 16577D50 0012FB80 docshell!NSGetModule 
0012FAB0 609A6E0B 16304FC0 0012FAF8 00000007 60D8C7A0 docshell!NSGetModule 
0012FB90 609A6B3D 16577D50 00000000 606FF34C 80000000 urildr!NSGetModule 
0012FBBC 606F884E 1630E7D0 16577D50 00000000 606EC5EC urildr!NSGetModule 
0012FBCC 606EC5EC 1649AF68 16577D50 00000000 606CB947 necko!mktemp  (FPO: [3,0,0])
0012FBDC 606CB947 1651FED8 16577D50 00000000 16524AE8 necko!SchemeTypeFor  (FPO:
[3,0,0])
0012FBF0 606F7B44 16619230 16523FF8 60700070 1650D5C8 necko!<nosymbols>  (FPO:
[0,0,1])
0012FC88 606C5B5C 164E8734 165250E0 16577D50 164E8734 necko!mktemp 
0012FCBC 606C2737 16524AE8 60D81E25 16523FFC 00000002 necko!<nosymbols> 
0012FCC4 60D81E25 16523FFC 00000002 00B84DF0 60D81D93 necko!<nosymbols>  (FPO:
[1,0,0])
0012FCD4 60D81D93 16523FFC 0012FDCC 0012FCFC 00B84DF0 xpcom!PL_HandleEvent 
(FPO: [1,0,2])
0012FCEC 60D81FEF 00B84DF0 0012FDD4 0012FD1C 77E148DC
xpcom!PL_ProcessPendingEvents  (FPO: [EBP 0x0012FDCC] [1,0,4])
0012FE00 60087D5B 01619C28 0040167B 00B69140 00000000 xpcom!PL_IsQueueNative 
0012FE08 0040167B 00B69140 00000000 0013384B 00000000
appshell!nsQueryReferent::nsQueryReferent  (FPO: [1,0,0])
0012FEF0 004011B8 00000001 00343B60 00343BA0 0013384B
mozilla!nsGetInterface::operator= 
0012FF18 00402BA3 00000001 00343B60 00404A38 00400000
mozilla!nsGetInterface::operator= 
0012FF24 00404A38 00400000 00000000 0013384B 00000001
mozilla!nsGetInterface::operator=  (FPO: [4,0,0])
0012FFC0 77E992A6 00DFCF38 00007162 7FFDF000 C0000005
mozilla!nsGetInterface::operator= 
0012FFF0 00000000 00404904 00000000 000000C8 00000100 kernel32!GetCommandLineW 

*----> Raw Stack Dump <----*
0012f4d8  04 3a 59 16 f4 f4 12 00 - f4 38 59 16 d0 45 1e 15  .:Y......8Y..E..
0012f4e8  14 f5 12 00 7c d3 2f 60 - d0 45 1e 15 98 3a 59 16  ....|./`.E...:Y.
0012f4f8  18 70 59 16 f4 38 59 16 - 1d d3 2f 60 f4 38 59 16  .pY..8Y.../`.8Y.
0012f508  d0 45 1e 15 78 38 59 16 - d0 45 1e 15 44 f5 12 00  .E..x8Y..E..D...
0012f518  7c d3 2f 60 d0 45 1e 15 - c0 3a 59 16 4c 38 59 16  |./`.E...:Y.L8Y.
0012f528  78 38 59 16 9b cd 2e 60 - 78 38 59 16 d0 45 1e 15  x8Y....`x8Y..E..
0012f538  00 38 59 16 1c 38 59 16 - 00 00 00 00 54 f5 12 00  .8Y..8Y.....T...
0012f548  09 1e 2f 60 d0 45 1e 15 - 1c 38 59 16 70 f5 12 00  ../`.E...8Y.p...
0012f558  9b cd 2e 60 00 00 00 00 - d0 45 1e 15 70 14 59 16  ...`.....E..p.Y.
0012f568  d0 37 59 16 00 00 00 00 - 80 f5 12 00 09 1e 2f 60  .7Y.........../`
0012f578  d0 45 1e 15 d0 37 59 16 - 9c f5 12 00 9b cd 2e 60  .E...7Y........`
0012f588  00 00 00 00 d0 45 1e 15 - 0c 14 59 16 40 14 59 16  .....E....Y.@.Y.
0012f598  00 00 00 00 ac f5 12 00 - 09 1e 2f 60 d0 45 1e 15  ........../`.E..
0012f5a8  40 14 59 16 c8 f5 12 00 - 9b cd 2e 60 00 00 00 00  @.Y........`....
0012f5b8  d0 45 1e 15 b8 13 59 16 - dc 13 59 16 00 00 00 00  .E....Y...Y.....
0012f5c8  d8 f5 12 00 09 1e 2f 60 - d0 45 1e 15 dc 13 59 16  ....../`.E....Y.
0012f5d8  04 f6 12 00 dc a6 31 60 - 00 00 00 00 d0 45 1e 15  ......1`.....E..
0012f5e8  dc 13 59 16 9b cd 2e 60 - dc 13 59 16 d0 45 1e 15  ..Y....`..Y..E..
0012f5f8  fc 98 5b 16 88 13 59 16 - 00 00 00 00 14 f6 12 00  ..[...Y.........
0012f608  09 1e 2f 60 d0 45 1e 15 - 88 13 59 16 3c f6 12 00  ../`.E....Y.<...

Comment 1

[Jure Repinc (JLP)]

Adding keyword crash

Comment 2

[Kathleen :Brade]

same stack trace as 71181; dup

*** This bug has been marked as a duplicate of 71181 ***

Comment 3

[Stephen Walker]

vrfy dup