716268 - Firefox crashes when clicking on a jQuery link, very strange vars in Firebug

Status: RESOLVED WONTFIX

(Core :: JavaScript Engine, defect)

Description

[Vincent Pottier]

User Agent: Mozilla/5.0 (Ubuntu; X11; Linux i686; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
Build ID: 20111228084953

Steps to reproduce:

Testing Javascript code.
A click on a bind object trigger a function andf this function crashes Firefox.

I have reproduced it several times.

the code of the method PoiManager.centerPoi is 
centerPoi: function(that){
var id =/([0-9]+)/.exec(that.id)[1];
var geometry = this.pois[id].vector.geometry;
this.map.setCenter(
new OpenLayers.LonLat(geometry.x,geometry.y),
14
)
},

Following the process in Firebug shows stranges local variables. as on the screenshot here :
http://frvipofm.net/firefox/FirefoxBug.png

a variable is call ["-9.493914202091548e-151"]
and the variable 'that' does not appear.

It seems the problem apend when I changed 'class' values in carte/static/javascript/data.js
when putting values with spaces : 'monasteries' -> 'apostolique hommes'

I know I was able to write bad code. But I didn't know I could crash Firefox...


You can have a look on a similar application here :
http://frvipofm.net/aep/carte/carte.html

On the right part of the screen, when clicking on categories (such as amenities) you get some localizations. When the mouse is over one of them, you get two icons to :
* center the map
* display information o the spot
On this map, Firefox does not crashes.

I have put all the files (I hope) in an archive here :
http://frvipofm.net/firefox/carte.tar.bz2

Firefox version :
Mozilla/5.0 (Ubuntu; X11; Linux i686; rv:9.0.1) Gecko/20100101 Firefox/9.0.1

Comment 1

[Josh Matthews [:jdm]]

Does about:crashes contain any links to crash reports?

Comment 2

[Vincent Pottier]

Yes. I didn't know about:crashes

62e81c2b-e032-1775-75fe0242-0220c61a 08/01/2012 14:03

for today

Comment 3

[Vincent Pottier]

https://crash-stats.mozilla.com/report/index/bp-f7c49d66-395c-4559-ab01-f35de2120108

It look strange, the page just run well without Firebug open and crashes with firebug running step by step.

Comment 4

[Scoobidiver (away)]

If you have reliable STR, please post them in the dupe.

Comment 5

[Vincent Pottier]

"reliable STR" ?
What is it ?

Comment 6

[Scoobidiver (away)]

(In reply to Vincent Pottier from comment #5)
> "reliable STR" ?
> What is it ?
STR: Steps To Reproduce

Comment 7

[Vincent Pottier]

STR :
* go to http://frvipofm.net/sg/carte.html,
* activate firebug,
* reload the page to get script panel activated,
* put break points to init.js lines 73, 76, 79,
* put a break point at xregexp.js line 200
* click on 'amenity' class to expand it. There is only one item,
* put the mouse over "l'Escale-Jeunes" to make appear the 2 icons,
* click on the 'info' icon and follow step by step,

* when enterring 'poim.pagePoi(this);' (frame pagePoi < (?) < trigger < f )
** the Spys pannel shows the variables this, arguments
** and strange named variables -5.25[...]e-125, 3.27034e--317 with strange values
** a variable "undefined" with its value "id"
** and does not display the local variable names  (that, id, poi)
but on the left pannel, on the overfly of the vars, the tooltips (id, poi) get right values.

* when following the main steps, Firefox doesn't crashes.

* when reloading the page, javascrip will stop at xregexp line 200
* follow ( |> ) several times (~ 16-18 times)
* somewhere, firefox crashes
** ~2-3 'details step by step' after a frame isRegExp < match < (?) OpenLayers.js

they are 2 crash reports for today :
https://crash-stats.mozilla.com/report/index/bp-8143ebe1-32f8-4867-9ce4-7a4842120109
https://crash-stats.mozilla.com/report/index/bp-d5329e0d-a669-4b8c-b5b1-12e8d2120109

Comment 8

[Scoobidiver (away)]

(In reply to Vincent Pottier from comment #7)
> they are 2 crash reports for today
Reopening as it's a different crash signature from the one in comment 3.

Comment 9

[Boris Zbarsky [:bzbarsky]]

The strange vars part is almost certainly bug 712289.

If the crash only happens with Firebug (as the stacks in comment 7 suggest), then it's due to the same problem.

Comment 10

[Boris Zbarsky [:bzbarsky]]

And in particular, two things worth checking:

1)  Do you run into the problem if you use a 64-bit build?
2)  Once the fix for bug 712289 lands, in the next day or two, do you see the problem with nightlies before and after the landing?

Comment 11

[David Mandelin [:dmandelin]]

Vincent, have you had a chance to recheck this?

Comment 12

[Sylvestre Ledru [:Sylvestre]]

Closing because no crash reported since 12 weeks.