73337 - Browser crashes

Status: VERIFIED DUPLICATE of bug 73407

(Core :: Layout, defect)

Description

[Mike Kowalski]

The browser crashes when viewing this page.

Build ID: 2001032304

MOZILLA caused an invalid page fault in
module GKLAYOUT.DLL at 0177:6031440c.
Registers:
EAX=014ffa38 CS=0177 EIP=6031440c EFLGS=00010246
EBX=00000001 SS=017f ESP=0068fb64 EBP=0068fb88
ECX=00000000 DS=017f ESI=01f3ff40 FS=4c57
EDX=32dd8a5f ES=017f EDI=00000000 GS=0000
Bytes at CS:EIP:
ff 91 78 01 00 00 8d 4d 08 8b f0 e8 7e 33 06 00 
Stack dump:
014ffa38 01f391b0 020fe9f0 01eda1d0 0068fbf0 01f392c0 60df9458 020fe9f0 
00000000 0068fbc8 604634c8 020fe9f0 01f391b0 020fe9f0 01eda1d0 0068fbf0

Comment 1

[Ferdinand]

crashes seen (cvs20010324 winMe)
looks much like #73311 to me, similar behaviour and reproducability

Comment 2

[timeless]

layout crash

Comment 3

[Keyser Sose]

Need a stacktrace or talkback ID here.

Comment 4

[Marcus Pallinger]

I used the installer build, so no talk back. I have also switched to 0.8.1 as the nightlies were too unstable. I'll switch back to the nightly builds next week. If it's still unstable, I'll get a talkback build going. Teh crash was epeatable though.

Comment 5

[Marcus Pallinger]

Talkback ID:
TB28521964Y

Build: 2001032804 (It also occures in 10020401?? (10?) but there isn't a
talkback build avialable.)

It happens on leaving the page now. (either back button or goign to a new page
in the URL bar (In this case slashdot.org)

Comment 6

[Chris Petersen]

Confirming crash with the April 03 rd build under Windows ME.

stack trace


   0x00000023             IMGLIB2.DLL + 0x3814 (0x60483814)            
IMGLIB2.DLL + 0x2bc2 (0x60482bc2)             IMGLIB2.DLL + 0x1f61 (0x60481f61)
            GKWIDGET.DLL + 0xfedc (0x60b9fedc)             GKWIDGET.DLL + 0xf9f6
(0x60b9f9f6)             GKWIDGET.DLL + 0xbe40 (0x60b9be40)            
APPSHELL.DLL + 0x61dc (0x010161dc)             NETSCP6.EXE + 0x16ec (0x004016ec)
            NETSCP6.EXE + 0x11b8 (0x004011b8)             NETSCP6.EXE + 0x2c28
(0x00402c28)             KERNEL32.DLL + 0x1b9e4 (0xbff7b9e4)            
KERNEL32.DLL + 0x1b896 (0xbff7b896)             KERNEL32.DLL + 0x1a24f
(0xbff7a24f)             0x02800b0a    

Comment 7

[karnaze (gone)]

Petersen, can you get a talkback report that has symbols. We can't do much with 
the stacks listed.

Comment 8

[Bernd]

Attachment: stack trace

Comment 9

[Bernd]

It tries to apend a a frame to HTMLOuterFrame and then assserts as desscribed in
the stack trace

Comment 10

[Bernd]

Attachment: testcase to produce the assert

Comment 11

[Bernd]

Attachment: stack trace crash on page leave

Comment 12

[karnaze (gone)]

Reassigning to attinasi.

Comment 13

[karnaze (gone)]

Reassigning to attinasi.

Comment 14

[Marc Attinasi]

Looks like a dup of 73407 - same assertion, same result.
 The testcase here is very useful though, so I'll add it to 73407

*** This bug has been marked as a duplicate of 73407 ***

Comment 15

[Chad Austin]

Verifications.  Tests (if necessary) were done with 2001052504 on Windows 2000.

Please forgive the spam.