81595 - Stack overflow in JS3250.DLL when clicking on "gallery"

Status: VERIFIED DUPLICATE of bug 81273

(Core :: Networking, defect)

Description

[Junk_HbJ]

From Bugzilla Helper:
User-Agent: Mozilla/5.0 (Windows; U; Win98; en-US; rv:0.9+) Gecko/20010517
BuildID:    2001051704

Just follow the steps to reproduce.

I could attach the full Dr. Watson crashlog, if that helps (for my last crasher
reports, this was concluded as unnecessary, and I don't want to spam Bugzilla ;-) ).

Reproducible: Always
Steps to Reproduce:
1. Go to http://www.xellex.de
2. Choose "Gallery"
3. Right-click onto the link "ProGra" under the picture of "Weinleiche"
4. Choose "Open link in new window" from the context menu
5. Mozilla becomes unresponding
6. Wait and choose between some instances (all hang)
7. Mozilla crashes after some time 

Three talkback-IDs:
1. TB30601995G (latest)
2. TB30601564Q
3. TB30601555K

For No.1, I've got this Dr. Watson Stacktrace:

Trap 0c 0000 - Stack fault
eax=015b4e30 ebx=00592174 ecx=00865920 edx=015b4e30 esi=01cd1bf0 edi=00865920
eip=60c92a52 esp=00592000 ebp=0059201c         -- -- -- nv up EI pl nz na PE nc
cs=016f ss=0177 ds=0177 es=0177 fs=0f3f gs=0000
JS3250.DLL:.text+0x1a52:
>016f:60c92a52 56                  push    esi

   sel  type base     lim/bot
   ---- ---- -------- --------
cs 016f r-x- 00000000 ffffffff
ss 0177 rw-e 00000000 0000c7e0
ds 0177 rw-e 00000000 0000c7e0
es 0177 rw-e 00000000 0000c7e0
fs 0f3f rw-- 816c2b40 00000037
gs 0000 ----

stack base:   00590000
TIB limits:   00590000 - 00690000

-- exception record --

   Exception Code: c00000fd (stack overflow)
Exception Address: 60c92a52 (JS3250.DLL:.text+0x1a52)
   Exception Info: 00000001
                   00591ffc

JS3250.DLL:.text+0x1a52:
>016f:60c92a52 56                  push    esi

 
-- stack summary --

0177:0059201c 016f:60c92a52 JS3250.DLL:.text+0x1a52
                            (01cd1bf0,015b4e30,00592174,00000000,
                             60c9c689,00592074,600c4999,01cd1bf0)
0177:00592038 016f:600c495a CAPS.DLL:.text+0x395a
                            (01cd1bf0,00592374,00592174,00000000,
                             005922d8,00865920,00000800,006b7ed8)
0177:00592074 016f:600c4999 CAPS.DLL:.text+0x3999
                            (01cd1bf0,00592174,00592094,00592178,
                             600c3100,01cd1bf0,00592174,01d54bd0)
0177:00592088 016f:600c4ac6 CAPS.DLL:.text+0x3ac6
                            (01cd1bf0,00592174,01d54bd0,005922d8,
                             600c8828,60de30a2,008272dc,60ca699c)
0177:00592178 016f:600c3100 CAPS.DLL:.text+0x2100
                            (00000001,005922d8,01cd1bf0,015b3360,
                             01d54bd0,01564e74,0157c0dc,00000000)
0177:005921a8 016f:600c58fd CAPS.DLL:.text+0x48fd
                            (00865920,00000001,005922d8,01cd1bf0,
                             015b3360,01d54bd0,01564e74,0157c0dc)
0177:005922bc 016f:60b9f845 XPC3250.DLL:.text+0xe845
                            (00000001,015b3360,00000000,01cd1bf0,
                             0189e068,60ba5988,00000000,00000006)
0177:00592348 016f:60ba2f09 XPC3250.DLL:.text+0x11f09
                            (01cd1bf0,01cfccc0,00000000,01cfcf00,
                             00592394,00000000,00592644,01cd1bf0)
0177:005923f4 016f:60ca81e7 JS3250.DLL:.text+0x171e7
                            (00000001,00000000,00000002,01cd1bf0,
                             0059261c,015b3360,60ca7617,015531b0)
0177:00592474 016f:60ca84ac JS3250.DLL:.text+0x174ac
                            (01cd1bf0,015b3360,015b4e30,00000000,
                             00000000,00000000,0059261c,01cd1bf0)
0177:005924b8 016f:60cb4581 JS3250.DLL:.text+0x23581
                            (ffffffff,023002e0,015531b0,0059261c,
                             00000000,01cd1bf0,0189e040,006b7eb8)
0177:00592624 016f:60cac41e JS3250.DLL:.text+0x1b41e
                            (01cd1bf0,005926b0,00000000,00592914,
                             01cd1bf0,0157d1a4,00000000,00000000)

Comment 1

[Karl Johan Kleist]

Works for me (Build ID 2001051604, Win2000).

This text is rendered:

    error 500: Interner Serverfehler

    Das angegebene Skript konnte nicht fehlerfrei ausgeführt werden!

Comment 2

[James Lariviere]

I do not get mozilla crash.  WFM in todays 5-18-04 build win98.
This was one of the blocker bugs yesterday.

Marking dupe of bug 81273.

Reporter if after downloading a current build you still get this message please
reopen.

*** This bug has been marked as a duplicate of 81273 ***

Comment 3

[benc]

qa to me
-> networking

Don't know if the duped bug includes HTTP STATUS "500" as a bad URL, so waiting
for confirmation this works w/ fixed builds.

Comment 4

[Junk_HbJ]

Wfm for me now with 2001051804 / Win98SE.

Comment 5

[benc]

VERIFIED:
per reporter comments.