Closed Bug 90185 Opened 23 years ago Closed 23 years ago

Crash in pipnss.dll

Categories

(Core Graveyard :: Security: UI, defect, P1)

Product:
Core Graveyard
Component:
Security: UI
Version:
1.0 Branch
Type:
defect

Tracking

(Not tracked)

Status:
VERIFIED WORKSFORME
Milestone:
psm2.1

People

(Reporter: jmkobayashi, Assigned: ddrinan0264)

References

(
URL
)

Details

1. install application (used trunk build 2001-07-10-05) 2. created new profile 3. navigate to jrgm.mcom.com/page-loader/loader.pl 4. select submit 5. App crashes, unable to get talkback data - macsbug log below PowerPC access exception at 15EC6A60 10-Jul-2001 11:05:35 AM (since boot = 11 hours, 39 minutes) Current application is “Netscape 6” Machine = #510 (PowerMacG3), System $0900, sysu = $01008000 ROM version $077D, $45F2, $0001 (ROMBase $FFC00000) VM is on; paging is currently safe (and it probably isn't VM's fault) NIL^ = $FFC10000 Stack space used = +127452610 Address 15EC6A60 is in VM file-mapped logical memory space It is in the CFM fragment “PIPNSS_DLL” at 15DF0000 It is 000D6A60 bytes from the start of the fragment and 000D2B10 bytes into a non-writeable code section at 15DF3F50 PowerPC 740/750 Registers CR0 CR1 CR2 CR3 CR4 CR5 CR6 CR7 PC = 15EC6A60 CR 0100 1010 0000 0000 0000 1000 1000 1000 LR = 15E1D220 <>=O XEVO CTR = 15DF5D10 MSR = 00000000 SOC Compare Count Int = 0 XER 000 00 00 MQ = 00000000 R0 = FFFFFFFF R8 = 00000001 R16 = 059AA810 R24 = 00000000 SP = 0759A140 R9 = 00000001 R17 = 06907ED0 R25 = 00000000 TOC = 068344F0 R10 = 00000001 R18 = 00000000 R26 = 06836874 R3 = 00000000 R11 = AB7C3A84 R19 = 00000000 R27 = 15EC8DAA R4 = 15EC8DAA R12 = F600F700 R20 = 062CEA00 R28 = 06834674 R5 = 0759A1E8 R13 = 059AA834 R21 = 159F6E87 R29 = 059B36A0 R6 = 00000244 R14 = 06905E64 R22 = 00000000 R30 = 059B350C R7 = 067CBFCC R15 = 059AA8A0 R23 = 059B38B0 R31 = 059B38D4 Disassembling PowerPC code from 15EC6A38 No procedure name 15EC6A38 lwz RTOC,0x0004(r12) | 804C0004 15EC6A3C mtctr r0 ; CTR = 0x0009 | 7C0903A6 15EC6A40 bctr | 4E800420 15EC6A44 lwz r12,-0x7DC8(RTOC) | 81828238 15EC6A48 stw RTOC,0x0014(SP) | 90410014 15EC6A4C lwz r0,0x0000(r12) | 800C0000 15EC6A50 lwz RTOC,0x0004(r12) | 804C0004 15EC6A54 mtctr r0 ; CTR = 0x0009 | 7C0903A6 15EC6A58 bctr | 4E800420 15EC6A5C lwz r0,0x0000(r12) | 800C0000 15EC6A60 *stw RTOC,0x0014(SP) | 90410014 15EC6A64 mtctr r0 ; CTR = 0x0009 | 7C0903A6 15EC6A68 lwz RTOC,0x0004(r12) | 804C0004 15EC6A6C bctr | 4E800420 15EC6A70 blr | 4E800020 15EC6A74 xoris r19,r19,0x434F | 6E73434F 15EC6A78 dc.l 0x4D507472 | 4D507472 15EC6A7C rlwnm r8,r27,r12,0x15,0x16 | 5F68656C 15EC6A80 andi. r5,r3,0x7200 | 70657200 15EC6A84 xoris r19,r19,0x4465 | 6E734465 Heap zones #1 Mod 13546K 00002800 to 00D3D0EF SysZone^ #2 Mod 6K 000145C0 to 000160DF ROM read-only zone #3 Mod 112640K 00D3D0F0 to 07B3D29F Process Manager zone #4 Mod 28485K 0597EEB0 to 075505AF “Netscape 6” ApplZone^ TheZone^ TargetZone #5 Mod 9K 07623E10 to 0762632F “Talkback” #6 Mod 18K 0777B860 to 0778010F #7 Mod 954K 07798960 to 0788745F “Finder” #8 Mod 1092K 0789BDC0 to 079ACF3F “Web Sharing Extension” #9 Mod 145K 079DFE20 to 07A0451F “Virex Scheduler” #10 Mod 99K 07A0EE80 to 07A27D7F “Time Synchronizer” #11 Mod 361K 07A326E0 to 07A8CDDF “Folder Actions” #12 Mod 53K 07AA3740 to 07AB0E3F “FBC Indexing Scheduler” #13 Mod 89K 07ADDC00 to 07AF42FF “Control Strip Extension” #14 Mod 5119K 08100000 to 085FFFCF #15 Mod 144K 082413D0 to 082653CF #16 Mod 94K 082C74A0 to 082DF07F Checking all heaps The System heap at 00002800 is ok The ROM read-only heap at 000145C0 is ok The Process Manager heap at 00D3D0F0 is ok The “Netscape 6” heap at 0597EEB0 is ok The “Talkback” heap at 07623E10 is ok The heap at 0777B860 is ok The “Finder” heap at 07798960 is ok The “Web Sharing Extension” heap at 0789BDC0 is ok The “Virex Scheduler” heap at 079DFE20 is ok The “Time Synchronizer” heap at 07A0EE80 is ok The “Folder Actions” heap at 07A326E0 is ok The “FBC Indexing Scheduler” heap at 07AA3740 is ok The “Control Strip Extension” heap at 07ADDC00 is ok System heap high free space + TempMem low free space = #79994640 (#76M) The target heap is the System heap at 00002800 Totaling the System heap at 00002800 Total Blocks Total of Block Sizes Free 007C #124 00014C40 #85056 (#83K) Nonrelocatable 0EB4 #3764 007AE32C #8053548 (#7864K) Relocatable 0B05 #2821 00577940 #5732672 (#5598K) Locked 03BC #956 00403D60 #4210016 (#4111K) Purgeable and not locked 005E #94 00046900 #289024 (#282K) Heap size 1A35 #6709 00D3A8AC #13871276 (#13M) The target heap is the Process Manager heap at 00D3D0F0 Totaling the Process Manager heap at 00D3D0F0 Total Blocks Total of Block Sizes Free 0012 #18 04D8FF00 #81329920 (#77M) Nonrelocatable 0003 #3 0000DEEC #57068 (#55K) Relocatable 0096 #150 02062380 #33956736 (#32M) Locked 003A #58 0205F810 #33945616 (#32M) Purgeable and not locked 0000 #0 00000000 #0 Heap size 00AB #171 06E0016C #115343724 (#110M) The target heap is the “Netscape 6” heap at 0597EEB0 Totaling the “Netscape 6” heap at 0597EEB0 Total Blocks Total of Block Sizes Free 0064 #100 0097D990 #9951632 (#9718K) Nonrelocatable 013B #315 00FFE8DC #16771292 (#15M) Relocatable 038A #906 00255450 #2446416 (#2389K) Locked 001D #29 000DAF40 #896832 (#875K) Purgeable and not locked 0004 #4 00029D80 #171392 (#167K) Heap size 0529 #1321 01BD16BC #29169340 (#27M) Displaying File Control Blocks FRef Name VRef Type Fl ForkID LogEOF 0002 System FFFF zsys mW rsrc 007A6D6F 0006 **** EXTENTS B-TREE FFFF •••• mw data 00400000 000A **** CATALOG B-TREE FFFF •••• mw data 01000000 000E **** VOLUME BITMAP FFFF •••• mw data 0000B000 0012 AppleScript FFFF thng mw data 00010560 0016 Time Synchronizer FFFF appe mw data 00009D04 001A Control Strip Extension FFFF appe mW rsrc 00012052 001E Desktop DB FFFF BTFL mW data 00048000 0022 QuickTime™ PowerPlug FFFF INIT mw data 0003703E 0026 Sound Manager FFFF INIT mw data 00004C42 002A Desktop DF FFFF DTFL mW data 001DE3D2 002E Language Kit Preferences FFFF pref mW rsrc 00000228 0032 widget.shlb FFFF shlb mw rsrc 0000098F 003A Serial (Built-in) FFFF libr mw rsrc 0000F716 003E Open Transport ASLM Modules FFFF libr mw rsrc 0008EDF6 0042 Network Setup Extension FFFF shlb mw rsrc 00006C27 004A Color Picker FFFF INIT mw data 00001900 004E Security Policy Module FFFF shlb mw data 0002EBDE 0052 File Sharing Library FFFF shlb mw data 0000E421 0056 OpenTpt Serial Arbitrator FFFF libr mw rsrc 00001F24 005A OpenTpt Serial Arbitrator FFFF libr mw rsrc 00001F24 005E Japanese Encodings FFFF ecpg mw data 00003EE8 0062 FBC Indexing Scheduler FFFF appe mW rsrc 00000EB5 006E Standard Additions FFFF osax mw data 000228C4 0072 File Sharing Library FFFF shlb mw rsrc 000011A8 007A SLPPlugin FFFF shlb mw data 0003504A 007E Folder Actions FFFF appe mW rsrc 00001453 0082 Apple Guide FFFF INIT mw data 0008E2D8 0086 Network Setup Extension FFFF shlb mw rsrc 00006C27 008A QuickTime™ FFFF INIT mw data 0006E786 008E libpref.shlb FFFF shlb mw data 0001C324 0092 Type 1 Scaler FFFF sclr mw data 00087577 0096 Security Library FFFF shlb mw data 000FABF2 009A Korean Encodings FFFF ecpg mw data 000028F8 009E Users & Groups Data File FFFF BTFL mW data 00012000 00A2 Finder Preferences FFFF pref mW rsrc 00000366 00A6 ATI Resource Manager FFFF shlb mw data 00023C27 00AA Users & Groups Data File FFFF BTFL mW data 00012000 00AE view.shlb FFFF shlb mw data 0002204F 00B2 mozBrowser.shlb FFFF shlb mw data 00007427 00B6 Web Sharing Extension FFFF appe mw data 000501E9 00BA Text Encoding Converter FFFF shlb mw data 00025890 00BE System FFFF zsys mw data 005FE594 00C2 Time Synchronizer FFFF appe mW rsrc 00001DF9 00C6 PrintingLib FFFF shlb mw data 000AE87A 00CA Security Cert Module FFFF shlb mw data 0004AA34 00CE Unicode Encodings FFFF ecpg mw data 00004178 00D2 Open Transport ASLM Modules FFFF libr mw rsrc 0008EDF6 00D6 Open Transport FFFF otsl mw data 000EC882 00DA HID Library FFFF shlb mw data 000041CC 00DE Internet Config Extension FFFF thng mw data 00006C3C 00E2 Folder Actions FFFF appe mw data 00005134 00E6 Virex Scheduler FFFF appe mW rsrc 000053A9 00EA Virex Scheduler FFFF appe mw data 0000540B Displaying Drive Queue Drive Volume Flags dRef Driver Name FSID Size QElem at 0001 <none> lEiS FFFB .Sony 0000 00000000 000975E8 0008 First HD OS 9 leiS FFCA .ATADisk 0000 002AD112 000B33F6 0009 Second HD OS 8.6 leiS FFCA .ATADisk 0000 002AD112 000B3446 000A Third HD OS 8.5.1 leiS FFCA .ATADisk 0000 002AD112 000B3496 #4 drives Displaying Driver Control Entries dRef dNum Driver Flg Ver qHead Stor/Ver Dely Drvr at DCE at FFFC 0003 .Sound bPO #0 00000000 00000000 0000 FFD22730 00057070 FFFB 0004 .Sony bPO #3 00000000 00000000 0000 FFCF1910 000974E0 FFFA 0005 .AIn bPC #9 00000000 00000000 0000 0042F470 003F38A0 FFF9 0006 .AOut bPC #9 00000000 00000000 0000 0042F530 003F38F0 FFF8 0007 .BIn bPC #9 00000000 00000000 0000 0042F5F0 003F3940 FFF7 0008 .BOut bPC #9 00000000 00000000 0000 0042F6B0 00422C00 FFF6 0009 .MPP bPO #60 00000000 00000001 0000 004E4200 004E6B50 FFF5 000A .ATP bPO #58 00000000 0060EDA0 0000 004744E0 0060ED50 FFD7 0028 .XPP bPO #58 00000000 00476DD0 0000 005A52F0 006AD920 FFD6 0029 .AFPTranslator bPO #0 00000000 006A46B0 003C 006FD280 00500430 FFCF 0030 .EDisk bPC #0 00000000 00000000 003C FFCDBD10 00057020 FFCE 0031 .Display_ATImach64_3DR3 bPO #0 00000000 01.01f08 0000 000697E8 000697B0 FFCD 0032 .ATALoad bPO #0 00000000 000A36D0 0001 003794F0 000A3680 FFCC 0033 .DAVAudio bPO #0 00000000 01.21f00 0000 00433AE8 00433AB0 FFCB 0034 .AppleSoundInput bPO #50 00000000 01.32f00 0000 0043D3A8 0043D370 FFCA 0035 .ATADisk bPO #0 00000000 000B3C2C 0065 000B76CE 000B3260 FFC9 0036 .ASLM bPO #2 00000000 00000000 0000 0005D9C0 0004CF80 FFC8 0037 .SLM bPO #2 00000000 00000000 0000 00060420 000605B0 FFC7 0038 .DSP bPO #58 00000000 0086EF40 0000 005EB490 0095C020 FFC6 0039 .ipp bPO #0 00000000 00000000 0000 004EE100 00C74EA0 FFC5 003A .ENET bPC #0 00000000 00000000 0000 004F27F0 00059040 FFC4 003B .ENET0 bPC #0 00000000 00000000 0000 004F9E80 00059090 FFC3 003C .Infra bPO #21 00000000 00058460 0000 004FD9D0 00058FA0 FFC2 003D .AppleCD bPO #0 00000000 005461A4 0078 005FB7FE 0071B020 FFC1 003E .AppleSoundInput bPO #50 00000000 01.32f00 0000 00439F58 00439F20 FFC0 003F .swmdrvr bHO #0 00000000 003C85BC 001E 003C86D0 00171CD0 FFBF 0040 .HDI bPO #0 00000000 006E92A0 001E 0088E4B0 006D5350 FFA1 005E .PrinterShare bHO #0 00000000 005D1810 0000 0084B480 0060EC50 FFA0 005F .DisplayBezelMgr bHO #0 00000000 0050093C 0001 005461E0 00547790 #96 Unit Table entries, #29 in use, #67 free Displaying resource information: > Map $059BD988, flags $FF80, file $0032 = widget.shlb Map $059BD9BC, flags $FF80, file $03FA = gfx.shlb Map $0597F038, flags $FF80, file $02F6 = Netscape 6 + Map $0000340C, flags $801A, file $0003 = •ROM resources that override System• S Map $00003410, flags $200D, file $0002 = System Map $000F6870, flags $001C, file $0072 = File Sharing Library Map $003C8534, flags $001C, file $002E = Language Kit Preferences Map $000030DC, flags $0014, file $0106 = System Resources [Skipped $0020 maps belonging to font files] Calling chain using A6/R1 links Back chain ISA Caller 00000000 PPC 1753BE48 0759C400 PPC 17527380 main+00130 0759C3A0 PPC 175265FC main1(int, char**, nsISupports*)+00C1C 0759C070 PPC 17370200 nsAppShellService::Run()+00018 0759C030 PPC 1602FA90 nsAppShell::Run()+00048 0759BFE0 PPC 160304E0 nsMacMessagePump::DoMessagePump()+0003C 0759BF90 PPC 16030AE0 nsMacMessagePump::DispatchEvent(int, EventRecord*)+00070 0759BF40 PPC 16031524 nsMacMessagePump::DoMouseUp(EventRecord&)+0004C 0759BEF0 PPC 16031AA8 nsMacMessagePump::DispatchOSEventToRaptor(EventRecord&, GrafPort *)+00040 0759BEA0 PPC 1602D0B4 nsMacMessageSink::DispatchOSEvent(EventRecord&, GrafPort*)+00038 0759BE60 PPC 16027DA8 nsMacWindow::HandleOSEvent(EventRecord&)+00020 0759BE20 PPC 16028E38 nsMacEventHandler::HandleOSEvent(EventRecord&)+000CC 0759BDD0 PPC 1602A924 nsMacEventHandler::HandleMouseUpEvent(EventRecord&)+00048 0759BD40 PPC 1601A8BC nsWindow::DispatchMouseEvent(nsMouseEvent&)+00054 0759BCE0 PPC 1601A778 nsWindow::DispatchWindowEvent(nsGUIEvent&)+00018 0759BCA0 PPC 1601A6A4 nsWindow::DispatchEvent(nsGUIEvent*, nsEventStatus&)+00094 0759BC50 PPC 15811EF8 HandleEvent(nsGUIEvent*)+00058 0759BC00 PPC 15823AFC nsViewManager::DispatchEvent(nsGUIEvent*, nsEventStatus*)+00670 0759BAD0 PPC 15812A70 nsView::HandleEvent(nsGUIEvent*, unsigned int, nsEventStatus*, i nt, int&)+001B8 0759BA30 PPC 15812A70 nsView::HandleEvent(nsGUIEvent*, unsigned int, nsEventStatus*, i nt, int&)+001B8 0759B990 PPC 15812B00 nsView::HandleEvent(nsGUIEvent*, unsigned int, nsEventStatus*, i nt, int&)+00248 0759B8F0 PPC 1585AF18 PresShell::HandleEvent(nsIView*, nsGUIEvent*, nsEventStatus*, in t, int&)+0027C 0759B880 PPC 1585B2AC PresShell::HandleEventInternal(nsEvent*, nsIView*, unsigned int, nsEventStatus*)+00218 0759B820 PPC 15AED248 nsEventStateManager::PostHandleEvent(nsIPresContext*, nsEvent*, nsIFrame*, nsEventStatus*, nsIView*)+00540 0759B630 PPC 15AEF24C nsEventStateManager::CheckForAndDispatchClick(nsIPresContext*, n sMouseEvent*, nsEventStatus*)+0015C 0759B500 PPC 1585B004 PresShell::HandleEventWithTarget(nsEvent*, nsIFrame*, nsIContent *, unsigned int, nsEventStatus*)+00040 0759B4B0 PPC 1585B1A0 PresShell::HandleEventInternal(nsEvent*, nsIView*, unsigned int, nsEventStatus*)+0010C 0759B450 PPC 15B597CC nsHTMLInputElement::HandleDOMEvent(nsIPresContext*, nsEvent*, ns IDOMEvent**, unsigned int, nsEventStatus*)+00A6C 0759B160 PPC 158E53E4 nsHTMLButtonControlFrame::MouseClicked(nsIPresContext*)+000D4 0759B110 PPC 1590B408 nsFormControlHelper::DoManualSubmitOrReset(nsIPresContext*, nsIP resShell*, nsIFrame*, nsIFrame*, int, int)+001DC 0759AFF0 PPC 1585B004 PresShell::HandleEventWithTarget(nsEvent*, nsIFrame*, nsIContent *, unsigned int, nsEventStatus*)+00040 0759AFA0 PPC 1585B1A0 PresShell::HandleEventInternal(nsEvent*, nsIView*, unsigned int, nsEventStatus*)+0010C 0759AF40 PPC 15B39C30 nsHTMLFormElement::HandleDOMEvent(nsIPresContext*, nsEvent*, nsI DOMEvent**, unsigned int, nsEventStatus*)+000F4 0759AEF0 PPC 15B39F2C nsHTMLFormElement::DoSubmitOrReset(nsIPresContext*, nsEvent*, in t)+00244 0759AE40 PPC 158D66DC nsFormFrame::OnSubmit(nsIPresContext*, nsIFrame*)+000BC 0759A570 PPC 163A99BC nsCOMPtr_base::assign_from_helper(const nsCOMPtr_helper&, const nsID&)+00028 0759A520 PPC 163A5190 nsGetServiceByCID::operator()(const nsID&, void**) const+0005C 0759A4E0 PPC 163A7140 nsServiceManager::GetService(const nsID&, const nsID&, nsISuppor ts**, nsIShutdownListener*)+00050 0759A490 PPC 163A64D0 nsServiceManagerImpl::GetService(const nsID&, const nsID&, nsISu pports**, nsIShutdownListener*)+00170 0759A400 PPC 1639E0CC nsComponentManager::CreateInstance(const nsID&, nsISupports*, co nst nsID&, void**)+00054 0759A3B0 PPC 163B52F8 nsComponentManagerImpl::CreateInstance(const nsID&, nsISupports* , const nsID&, void**)+0009C 0759A350 PPC 163AC36C nsGenericFactory::CreateInstance(nsISupports*, const nsID&, void **)+00020 0759A310 PPC 15E1D0A0 nsKeygenFormProcessor::Create(nsISupports*, const nsID&, void**) +000A0 Return addresses on the stack Stack Addr Frame Addr ISA Caller 0759A530 68K 0759A58E 0759A528 68K 163A99BE nsCOMPtr_base::assign_from_helper(const nsCOMPtr_he lper&, const nsID&)+0002A 0759A4E8 0759A4E0 PPC 163A5190 nsGetServiceByCID::operator()(const nsID&, void**) const+0005C 0759A4E0 68K 0759A51E 0759A4D8 68K 0759A9B2 0759A4C0 68K 0759A50E 0759A4B0 0759A4AC 68K 0759BC3A 0759A4A8 68K 0759A4E2 0759A4A0 68K 0759A4DE 0759A498 0759A490 PPC 163A7140 nsServiceManager::GetService(const nsID&, const nsI D&, nsISupports**, nsIShutdownListener*)+00050 0759A490 68K 0759A4DE 0759A468 PPC 15BA0518 nsHTMLTableElement::Release()+0000C 0759A450 68K 059AA782 0759A430 68K 0759A51E 0759A410 68K 0759A4DE 0759A408 0759A400 PPC 163A64D0 nsServiceManagerImpl::GetService(const nsID&, const nsID&, nsISupports**, nsIShutdownListener*)+00170 0759A3FC 68K 059AA782 0759A3D8 0759A3D0 PPC 15D049E4 nsXULElement::HandleChromeEvent(nsIPresContext*, ns Event*, nsIDOMEvent**, unsigned int, nsEventStatus*)+0008C 0759A3C8 0759A3C0 PPC 163FB35C nsAutoMonitor::Exit()+00010 0759A3C0 68K 0759A3FE 0759A3BC 68K 059AA782 0759A3B8 0759A3B0 PPC 1639E0CC nsComponentManager::CreateInstance(const nsID&, nsI Supports*, const nsID&, void**)+00054 0759A3B0 0759A3AC 68K 0759A3FE 0759A386 68K 0000064A 0759A380 68K 0759A3BE 0759A370 68K 0759A3AE 0759A358 68K 163B52FA nsComponentManagerImpl::CreateInstance(const nsID&, nsISupports*, const nsID&, void**)+0009E 0759A350 68K 0759A3AE 0759A340 68K 068AC3C2 0759A32C 68K 059AA89E 0759A328 0759A320 PPC 15D005BC nsXULElement::HandleDOMEvent(nsIPresContext*, nsEve nt*, nsIDOMEvent**, unsigned int, nsEventStatus*)+00FF0 0759A318 0759A310 PPC 163AC36C nsGenericFactory::CreateInstance(nsISupports*, cons t nsID&, void**)+00020 0759A2D8 0759A2D0 PPC 163B4D2C nsComponentManagerImpl::FindFactory(const nsID&, ns IFactory**)+000FC 0759A2B8 0759A2B0 PPC 15E1D0A0 nsKeygenFormProcessor::Create(nsISupports*, const n sID&, void**)+000A0 0759A288 68K 163A99BE nsCOMPtr_base::assign_from_helper(const nsCOMPtr_he lper&, const nsID&)+0002A 0759A278 0759A270 PPC 164D0EEC operator new(unsigned long)+00010 0759A268 0759A260 PPC 15E1CF10 nsKeygenFormProcessor::nsKeygenFormProcessor()+0006 8 0759A248 0759A240 PPC 163A97E8 nsQueryInterface::operator()(const nsID&, void**) c onst+00028 0759A238 0759A230 PPC 164D0E94 operator new(unsigned long, const std::nothrow_t&)+ 0000C 0759A228 0759A220 PPC 164D0EEC operator new(unsigned long)+00010 0759A218 0759A210 PPC 1639F54C nsHashtable::Get(nsHashKey*)+00070 0759A1FC 68K 0759A1FE 0759A1E0 0759A1DC 68K 0759A21E 0759A1D0 68K 059AA832 0759A1A8 0759A1A4 68K 0759A1E2 0759A1A4 68K 0759A1C2 0759A198 0759A190 PPC 164D1D04 malloc+000D0 0759A190 68K 0759A1DE 0759A188 0759A180 PPC 163A9888 nsCOMPtr_base::~nsCOMPtr_base()+00030 0759A178 0759A170 PPC 15B39BE8 nsHTMLFormElement::HandleDOMEvent(nsIPresContext*, nsEvent*, nsIDOMEvent**, unsigned int, nsEventStatus*)+000AC 0759A168 0759A160 PPC 16470864 PL_HashTableRawLookup+0005C 0759A160 68K 0759A1DE 0759A14C 68K 059AA89E 0759A148 0759A140 PPC 15E1D200 nsKeygenFormProcessor::Init()+000B8 Displaying memory from sp 0759A140 0759 A2B0 0685 B9B0 15E1 D204 059A A8A0 •Y¢*•Ö**•·“••ö®Ý 0759A150 068A D8FC 0683 44F0 0759 A1E8 0608 3608 •äÿ¸•ÉD*•Y°Ë••6• 0759A160 0759 A1E0 0000 0002 1647 0868 0625 ED2C •Y°ý•••••G•h•%Ì, 0759A170 0759 A1C0 0599 8230 15B3 9BEC 0000 0000 •Y°¿•ôÇ0•*õÏ•••• 0759A180 0759 A1C0 059A 52B0 163A 988C 0000 0008 •Y°¿•öR*•:òå•••• 0759A190 0759 A1E0 059A 52B0 164D 1D08 0000 0000 •Y°ý•öR*•M•••••• 0759A1A0 05B2 C7BC 0759 A1C4 0759 A1E4 059F C1EC •*«º•Y°ƒ•Y°‰•ü¡Ï 0759A1B0 0759 A210 0690 C554 059F C1E8 7E4B B410 •Y¢••ê=T•ü¡Ë~K¥• Displaying memory from 0 00000000 FFC1 0000 FFC1 0000 0028 F306 0028 F308 *¡••*¡•••(Û••(Û• 00000010 0028 F30A 0028 F30C FFC0 3058 FFC0 305A •(Û••(Û•*¿0X*¿0Z Closing log
URL: http://jrgm.mcom.com/page-loader/load... → http://jrgm.mcom.com/page-loader/load...
Summary: Crash in → Crash in pipnss.dll
-> ddrinan Related to bug 77837 fix checked in yesterday?
Assignee: ssaux → ddrinan
t->2.1 This problem probably is not on the branch.
Status: UNCONFIRMED → NEW
Ever confirmed: true
Priority: -- → P2
Target Milestone: --- → 2.1
Version: unspecified → 2.0
Is this crash in the mozilla or commercail build?
reporter used today's trunk build. Don't know if it happens on the branch.
YES, this happens on the branch. I just updated to the 07-13-06-branch build on Win98. I first hit this problem when clicking "Map It" on mapquest.com. Crash also happens for me with the page-loader page listed in this report. And, when I tried submitting these comments the first time, a crash occurred when I clicked "Commit" in Bugzilla. I am using the same branch build on WinMe-Ja, but the crash hasn't happened on this machine, so I should be able to "Commit" successfully this time. I just sent several Talkbacks related to this crash.
OS: Mac System 9.x → All
Priority: P2 → P1
Hardware: Macintosh → All
Just updated to 07-16-13-branch. Crash no longer occurs in the pages I listed before.
worksforme as per junruh's comments. Reopen if necessary
Status: NEW → RESOLVED
Closed: 23 years ago
Resolution: --- → WORKSFORME
Verified per johrubin's comment.
Status: RESOLVED → VERIFIED
Product: PSM → Core
Version: psm2.0 → 1.0 Branch
Product: Core → Core Graveyard
You need to log in before you can comment on or make changes to this bug.