82155 - crash in nsDocShell::SetFocus when loading url in bugzilla email

Status: RESOLVED DUPLICATE of bug 82073

(Core :: DOM: Navigation, defect)

Description

[Christopher Blizzard (:blizzard)]

Build is from the morning of May 22, 2001.

I got this crash when I was clicked on a bugzilla link in some bugzilla email. 
Note the list and variable after the stack trace.  rootFrame is 0.

(gdb) where
#0  0x4054a8e1 in __libc_nanosleep () from /lib/i686/libc.so.6
#1  0x4054a761 in __sleep (seconds=300)
    at ../sysdeps/unix/sysv/linux/sleep.c:85
#2  0x080507fb in ah_crap_handler (signum=11) at nsSigHandlers.cpp:114
#3  0x401d2935 in pthread_sighandler (signo=11, ctx=
      {gs = 7, __gsh = 0, fs = 0, __fsh = 0, es = 43, __esh = 0, ds = 43, __dsh
= 0, edi = 3221218400, esi = 3221218384, ebp = 3221218472, esp = 3221218264, ebx
= 1088569588, edx = 3221218284, ecx = 1099828128, eax = 0, trapno = 14, err = 4,
eip = 1088484391, cs = 35, __csh = 0, eflags = 66182, esp_at_signal =
3221218264, ss = 43, __ssh = 0, fpstate = 0xbfffe158, oldmask = 2147483648, cr2
= 0})
    at signals.c:97
#4  <signal handler called>
#5  0x40e0f427 in nsDocShell::SetFocus (this=0x42e03f48) at nsDocShell.cpp:2502
#6  0x40e1d46d in nsDSURIContentListener::DoContent (this=0x42e04318, 
    aContentType=0x42a9b308 "text/html", aCommand=7, request=0x40f509c0, 
    aContentHandler=0xbfffe6d8, aAbortProcess=0xbfffe6e8)
    at nsDSURIContentListener.cpp:123
#7  0x400d905a in XPTC_InvokeByIndex (that=0x42e04318, methodIndex=5, 
    paramCount=5, params=0xbfffe6a8) at xptcinvoke_unixish_x86.cpp:138
#8  0x40723f50 in XPCWrappedNative::CallMethod (ccx=@0xbfffe768, 
    mode=CALL_METHOD) at xpcwrappednative.cpp:1835
#9  0x40728ffd in XPC_WN_CallMethod (cx=0x828aa50, obj=0x85185c8, argc=4, 
    argv=0x4373e478, vp=0xbfffe888) at xpcwrappednativejsops.cpp:1241
#10 0x4013896f in js_Invoke (cx=0x828aa50, argc=4, flags=0) at jsinterp.c:807
#11 0x40140187 in js_Interpret (cx=0x828aa50, result=0xbfffeac4)
    at jsinterp.c:2702
#12 0x401389c7 in js_Invoke (cx=0x828aa50, argc=4, flags=2) at jsinterp.c:824
#13 0x4071fb73 in nsXPCWrappedJSClass::CallMethod (this=0x42e54048, 
    wrapper=0x42e54ac8, methodIndex=5, info=0x8523248, nativeParams=0xbffff028)
    at xpcwrappedjsclass.cpp:968
#14 0x4071debb in nsXPCWrappedJS::CallMethod (this=0x42e54ac8, methodIndex=5, 
    info=0x8523248, params=0xbffff028) at xpcwrappedjs.cpp:426
#15 0x400d91fb in PrepareAndDispatch (self=0x42e54ac8, methodIndex=5, 
    args=0xbffff0e4) at xptcstubs_unixish_x86.cpp:80
#16 0x400d92b6 in nsXPTCStubBase::Stub5 (this=0x42e54ac8)
    at ../../../../../../dist/include/xptcstubsdef.inc:7
#17 0x40d9761f in nsDocumentOpenInfo::DispatchContent (this=0x42123148, 
    request=0x40f509c0, aCtxt=0x0) at ../../dist/include/nsCOMPtr.h:649
#18 0x40d97035 in nsDocumentOpenInfo::OnStartRequest (this=0x42123148, 
    request=0x40f509c0, aCtxt=0x0) at nsURILoader.cpp:219
#19 0x408a000e in nsStreamListenerTee::OnStartRequest (this=0x42a6c750, 
    request=0x40f509c0, context=0x0) at ../../../dist/include/nsCOMPtr.h:649
#20 0x408bd32e in nsHttpChannel::ProcessNormal (this=0x40f509c0)
    at ../../../../dist/include/nsCOMPtr.h:649
#21 0x408bd2c6 in nsHttpChannel::ProcessResponse (this=0x40f509c0)
    at nsHttpChannel.cpp:407
#22 0x408c16b0 in nsHttpChannel::OnStartRequest (this=0x40f509c0, 
    request=0x42a80ef0, ctxt=0x0) at nsHttpChannel.cpp:2000
#23 0x408d322b in nsOnStartRequestEvent::HandleEvent (this=0x42ba7b60)
    at nsRequestObserverProxy.cpp:108
#24 0x408904af in nsARequestObserverEvent::HandlePLEvent (plev=0x42ba7b60)
    at nsRequestObserverProxy.cpp:63
#25 0x400c4aab in PL_HandleEvent (self=0x42ba7b60) at plevent.c:590
#26 0x400c49b9 in PL_ProcessPendingEvents (self=0x80ba418) at plevent.c:520
#27 0x400c5b1b in nsEventQueueImpl::ProcessPendingEvents (this=0x80ba5f0)
    at nsEventQueue.cpp:374
#28 0x40772af6 in event_processor_callback (data=0x80ba5f0, source=5, 
    condition=GDK_INPUT_READ) at nsAppShell.cpp:168
#29 0x40772845 in our_gdk_io_invoke (source=0x8160088, condition=G_IO_IN, 
    data=0x815f020) at nsAppShell.cpp:61
#30 0x4035ffae in g_io_unix_dispatch () from /usr/lib/libglib-1.2.so.0
#31 0x40361783 in g_main_dispatch () from /usr/lib/libglib-1.2.so.0
#32 0x40361d49 in g_main_iterate () from /usr/lib/libglib-1.2.so.0
#33 0x40361efc in g_main_run () from /usr/lib/libglib-1.2.so.0
#34 0x402768f3 in gtk_main () from /usr/lib/libgtk-1.2.so.0
#35 0x40773026 in nsAppShell::Run (this=0x80f10d0) at nsAppShell.cpp:360
#36 0x4074afee in nsAppShellService::Run (this=0x80e4ac8)
    at ../../../dist/include/nsCOMPtr.h:649
#37 0x0804fa43 in main1 (argc=1, argv=0xbffff82c, nativeApp=0x0)
    at ../../dist/include/nsCOMPtr.h:649
#38 0x080502df in main (argc=1, argv=0xbffff82c) at nsAppRunner.cpp:1391
#39 0x404ac177 in __libc_start_main (main=0x8050194 <main>, argc=1, 
    ubp_av=0xbffff82c, init=0x804be8c <_init>, fini=0x805212c <_fini>, 
    rtld_fini=0x4000e184 <_dl_fini>, stack_end=0xbffff81c)
    at ../sysdeps/generic/libc-start.c:129
(gdb) up
#1  0x4054a761 in __sleep (seconds=300)
    at ../sysdeps/unix/sysv/linux/sleep.c:85
85
../sysdeps/unix/sysv/linux/sleep.c: No such file or directory.
	in ../sysdeps/unix/sysv/linux/sleep.c
Current language:  auto; currently c
(gdb) 
#2  0x080507fb in ah_crap_handler (signum=11) at nsSigHandlers.cpp:114
Current language:  auto; currently c++
(gdb) 
#3  0x401d2935 in pthread_sighandler (signo=11, ctx=
      {gs = 7, __gsh = 0, fs = 0, __fsh = 0, es = 43, __esh = 0, ds = 43, __dsh
= 0, edi = 3221218400, esi = 3221218384, ebp = 3221218472, esp = 3221218264, ebx
= 1088569588, edx = 3221218284, ecx = 1099828128, eax = 0, trapno = 14, err = 4,
eip = 1088484391, cs = 35, __csh = 0, eflags = 66182, esp_at_signal =
3221218264, ss = 43, __ssh = 0, fpstate = 0xbfffe158, oldmask = 2147483648, cr2
= 0})
    at signals.c:97
97
signals.c: No such file or directory.
	in signals.c
Current language:  auto; currently c
(gdb) 
#4  <signal handler called>
(gdb) 
#5  0x40e0f427 in nsDocShell::SetFocus (this=0x42e03f48) at nsDocShell.cpp:2502
Current language:  auto; currently c++
(gdb) list
2497
    /* Check to make sure the root frame for this document
2498
       is not collapsed. */
2499
    nsIFrame* rootFrame;
2500
    presShell->GetRootFrame(&rootFrame);
2501
    nsRect frameRect;
2502
    rootFrame->GetRect(frameRect);
2503
    if (frameRect.IsEmpty()) {
2504
#ifdef DEBUG_bryner
2505
        printf("SetFocus: empty frame rect, not accepting focus\n");
2506
#endif
(gdb) print rootFrame
$2 = (nsIFrame *) 0x0
(gdb) k
Kill the program being debugged? (y or n) y
(gdb) quit

Comment 1

[Kathleen :Brade]

duplicate of 82073


*** This bug has been marked as a duplicate of 82073 ***