Closed Bug 81901 Opened 23 years ago Closed 23 years ago

A crash occurs after reloading page from select menu.

Categories

(Core :: Layout, defect, P1)

Product:
Core
Component:
Layout
Platform:
PowerPC
macOS
Type:
defect

Tracking

()

Status:
VERIFIED DUPLICATE of bug 91726
Milestone:
mozilla0.9.4

People

(Reporter: chrispetersen, Assigned: paulkchen)

References

(
URL
)

Details

(Keywords: crash, Whiteboard: OSX+) 

Build: 2001051409
Platforms: Mac OS X
Expected Results: Selecting menu item should reload current page
What I got:
Application crashes

Steps to reproduce:

1) Go to http://custom1.vw.com/cgi-bin/dealer/locator.pl?
2) After page loads, select Find Dealer menu item from the select menu called
"Cars".
3) This causes a crash.
Here is the stack trace from crash reporter:


Date/Time: 2001-05-20 21:51:28 -0700

PID:       228
Command:   Mozilla

Exception: EXC_BAD_ACCESS (0x0001)
Codes:     KERN_PROTECTION_FAILURE (0x0002) at 0x00000000

Thread 0:
 #0   0x73d879f0 in _MovePortTo ()
 #1   0x73d879d4 in _MovePortTo ()
 #2   0x73809efc in _MoveResizeWindowRgns__FP10WindowDatasn3G5PointUc ()
 #3   0x73840b94 in __SyncWindowWithCGAfterMove ()
 #4   0x73840a3c in _HandleWindowMoved__FPC15_CGSEventRecord ()
 #5   0x737ddc38 in _NotifyClientsOfKitEvents ()
 #6   0x737dda90 in _MessageHandler ()
 #7   0x7018d8b8 in ___CFMachPortPerform ()
 #8   0x7018d7c4 in ___CFRunLoopDoSource1 ()
 #9   0x7017ac34 in ___CFRunLoopRun ()
 #10  0x7017a56c in _CFRunLoopRunInMode ()
 #11  0x737dc4e0 in _RunEventLoopInModeUntilEventArrives ()
 #12  0x7383b044 in _RunEventLoopUntilEventArrives ()
 #13  0x7383ae4c in _GetNextEventMatchingMask ()
 #14  0x7393b3f0 in _EventAvail ()
 #15  0x01481988 in GetEvent__16nsMacMessagePumpFR11EventRecord ()
 #16  0x01481558 in DoMessagePump__16nsMacMessagePumpFv ()
 #17  0x01480e64 in Run__10nsAppShellFv ()
 #18  0x01439868 in Run__17nsAppShellServiceFv ()
 #19  0x00091218 in main1__FiPPcP11nsISupports ()
 #20  0x00091ff0 in main ()

Thread 1:
 #0   0x7000427c in _syscall ()
 #1   0x70658478 in _ProcessReadyEvent ()
 #2   0x70658270 in _CarbonSelectThreadFunc ()
 #3   0x70014f34 in __pthread_body ()

Thread 2:
 #0   0x70059b98 in _semaphore_wait_signal_trap ()
 #1   0x70016140 in _semaphore_wait_signal ()
 #2   0x70015fa8 in __pthread_cond_wait ()
 #3   0x70015d48 in _pthread_cond_wait ()
 #4   0x70653b80 in _BSD_pthread_cond_wait ()
 #5   0x70653b60 in _CarbonConditionWait ()
 #6   0x7065552c in _CarbonOperationThreadFunc ()
 #7   0x70014f34 in __pthread_body ()

Thread 3:
 #0   0x70059b78 in _semaphore_timedwait_signal_trap ()
 #1   0x7003f828 in _semaphore_timedwait_signal ()
 #2   0x70015f98 in __pthread_cond_wait ()
 #3   0x7003f7f4 in _pthread_cond_timedwait_relative_np ()
 #4   0x7029b590 in _TSWaitOnConditionTimedRelative ()
 #5   0x7029cdac in _TSWaitOnSemaphoreCommon ()
 #6   0x702e5f98 in _TSWaitOnSemaphoreRelative ()
 #7   0x702e7208 in _TimerThread ()
 #8   0x70014f34 in __pthread_body ()

Thread 4:
 #0   0x70059b98 in _semaphore_wait_signal_trap ()
 #1   0x70016140 in _semaphore_wait_signal ()
 #2   0x70015fa8 in __pthread_cond_wait ()
 #3   0x70015d48 in _pthread_cond_wait ()
 #4   0x7029b550 in _TSWaitOnCondition ()
 #5   0x7029cd94 in _TSWaitOnSemaphoreCommon ()
 #6   0x7029cce4 in _TSWaitOnSemaphore ()
 #7   0x7029cba8 in _AsyncFileThread ()
 #8   0x70014f34 in __pthread_body ()

Thread 5:
 #0   0x70059b98 in _semaphore_wait_signal_trap ()
 #1   0x70016140 in _semaphore_wait_signal ()
 #2   0x70015fa8 in __pthread_cond_wait ()
 #3   0x70015d48 in _pthread_cond_wait ()
 #4   0x70653b80 in _BSD_pthread_cond_wait ()
 #5   0x70653b60 in _CarbonConditionWait ()
 #6   0x70653a54 in _CarbonInetOperThreadFunc ()
 #7   0x70014f34 in __pthread_body ()

Thread 6:
 #0   0x700007e8 in _mach_msg_overwrite_trap ()
 #1   0x70005714 in _mach_msg_overwrite ()
 #2   0x700277e0 in _thread_suspend ()
 #3   0x70027774 in __pthread_become_available ()
 #4   0x70027498 in _pthread_exit ()
 #5   0x70014f38 in __pthread_body ()

PPC Thread State:
  srr0: 0x73d879f0 srr1: 0x0000f030                vrsave: 0x00000000
   xer: 0x2000000c   lr: 0x73d879e4  ctr: 0x70281b50   mq: 0x00000000
    r0: 0x00000000   r1: 0xbfffecb0   r2: 0x73892a30   r3: 0x02fb7752
    r4: 0x00000000   r5: 0x00000000   r6: 0x00000000   r7: 0x00000000
    r8: 0x00000000   r9: 0x00000000  r10: 0x00000000  r11: 0x83d812f4
   r12: 0x70281b50  r13: 0x00000000  r14: 0x00000000  r15: 0x00000000
   r16: 0x00000000  r17: 0x00000000  r18: 0x00000000  r19: 0x00000000
   r20: 0x00000001  r21: 0x00000000  r22: 0x00000000  r23: 0x00000001
   r24: 0xbffff0ac  r25: 0x00006fb0  r26: 0x00000000  r27: 0x00000000
   r28: 0x02fb7750  r29: 0x00006107  r30: 0x02fb7752  r31: 0x73d879b4

**********
Severity: normal → critical
Whiteboard: OSX+
Marc, see if you can get a debug stack and then reassign. Thanks.
Assignee: karnaze → attinasi
Selecting the menu item did not crash for me, but then it didn;t cause the page 
to change either. Clicking in the 'Find Dealer' button after entering my zip 
code did make it crash though. I do not know how to get a stack trace, and the 
one already in the bug make this look like we are dying in platform-specific 
code.

Reassigning to pink only because I do not know who else. If somebody tells me 
how to debug Fizilla I'll be happy to look into this myself, but I have no clue 
about how to build or debug it.

Oh, I tested this with the 05-14 build of Fizilla posted to Mozilla.org
Assignee: attinasi → pinkerton
taking for the short term.
Target Milestone: --- → mozilla0.9.2
OK, Petersen showed me about hostconfig and CRASHREPORTER, so I have a stack trace:

Exception: EXC_BAD_ACCESS (0x0001)
Codes:     KERN_PROTECTION_FAILURE (0x0002) at 0x00000000

Thread 0:
 #0   0x0015b1dc in HashCode__5nsCRTFPCcPUi ()
 #1   0x0013d39c in HashCode__12nsCStringKeyCFv ()
 #2   0x0013cb6c in Put__11nsHashtableFP9nsHashKeyPv ()
 #3   0x018db44c in
AddMimeInfoToCache__26nsExternalHelperAppServiceFP11nsIMIMEInf ()
 #4   0x018dc780 in GetFromMIMEType__20nsOSHelperAppServiceFPCcPP11nsIMIMEInfo ()
 #5   0x018d5804 in
DoContent__26nsExternalHelperAppServiceFPCcP6nsIURIP11nsISuppo ()
 #6   0x018cdd60 in
DispatchContent__18nsDocumentOpenInfoFP10nsIRequestP11nsISuppo ()
 #7   0x018cd404 in
OnStartRequest__18nsDocumentOpenInfoFP10nsIRequestP11nsISuppor ()
 #8   0x01732ea4 in
OnStartRequest__19nsStreamListenerTeeFP10nsIRequestP11nsISuppo ()
 #9   0x0173cf08 in ProcessNormal__13nsHttpChannelFv ()
 #10  0x0173cd54 in ProcessResponse__13nsHttpChannelFv ()
 #11  0x01742bb4 in OnStartRequest__13nsHttpChannelFP10nsIRequestP11nsISupports ()
 #12  0x01738e88 in HandleEvent__21nsOnStartRequestEventFv ()
 #13  0x017381a8 in HandlePLEvent__23nsARequestObserverEventFP7PLEvent ()
 #14  0x001aa254 in PL_HandleEvent ()
 #15  0x001aa0d0 in PL_ProcessPendingEvents ()
 #16  0x00157570 in ProcessPendingEvents__16nsEventQueueImplFv ()
 #17  0x0015761c in ProcessPendingEvents__16nsEventQueueImplFv ()
 #18  0x0156ffc4 in ProcessPLEventQueue__26nsMacNSPREventQueueHandlerFv ()
 #19  0x0156fd88 in RepeatAction__26nsMacNSPREventQueueHandlerFRC11EventRecord ()
 #20  0x01597400 in DoRepeaters__8RepeaterFRC11EventRecord ()
 #21  0x01583c4c in DispatchEvent__16nsMacMessagePumpFiP11EventRecord ()
 #22  0x0158356c in DoMessagePump__16nsMacMessagePumpFv ()
 #23  0x01582e64 in Run__10nsAppShellFv ()
 #24  0x0153b868 in Run__17nsAppShellServiceFv ()
 #25  0x00093218 in main1__FiPPcP11nsISupports ()
 #26  0x00093ff0 in main ()


I also found the FizillaCFM page on mozilla.org so I can setup to build Fizilla
and debug this, but I have to decide if I really want to at this time :)

BTW: does it really make sense to target OS-X bugs for 0.9.2? Do we have a
target date for releasing OS-X builds?
Whiteboard: OSX+ → OSX+ (potential showstopper, pending platform decision)
--> pchen. paul, it's the 2nd stacktrack in the bug that deals with external
mime handlers.
Assignee: pinkerton → pchen
Whiteboard: OSX+ (potential showstopper, pending platform decision) → OSX+
Moving out to mozilla1.0 to get off the triage radar and marking p1.

Looking at the last stack trace,
AddMimeInfoToCache__26nsExternalHelperAppServiceFP11nsIMIMEInf() says to me that
we're trying to add this mime type into the mime info cache. It looks like
plhash tables are blowing up somehow?

Pink also mentioned that this happens under OS9 carbon, so maybe I'll debug it
there. Still, very odd.
Priority: -- → P1
Target Milestone: mozilla0.9.2 → mozilla1.0
Moving to mozilla0.9.4 as a crash.
Keywords: crash
Target Milestone: mozilla1.0 → mozilla0.9.4
Hmm.. In the latest Mac OS X trunk build (2001080405) , I can't reproduce this
crash.
stack looks the same as bug 91726, marking as dup

*** This bug has been marked as a duplicate of 91726 ***
Status: NEW → RESOLVED
Closed: 23 years ago
Resolution: --- → DUPLICATE
Marking verified dup of 91726.
Status: RESOLVED → VERIFIED
You need to log in before you can comment on or make changes to this bug.