91997 - Crash when try to open Yahoo-Japan homepage that saved in locally [@ ntdll.dll - ???]

Status: VERIFIED FIXED

(Core :: Internationalization, defect)

Description

[Yuying Long]

Build: 07-23 branch on Windows and Mac.
Not reproduce on: 07-20 branch, 07-23 Linux branch build.

Steps to reproduce:
1. Launch the browser and go http://www.yahoo.co.jp
2. File | Save As, save the file to locally.
   - Crash on WinME-Ja
3. Re-open the file from File | Open File - Crash on Mac9.0-Ja and Windows 2k-CN.

This problem may cause by the fixed of bug 90733, and it may not i18n problem,
please change the component if so.

I have Talkback ID: 
WinME-Ja: 33249079, 33248757, 33248190
Win2k-CN: 33249389
Mac9.0-Ja: 33249248, 33248516
Seems depends on OS, it will crash different place?

Comment 1

[Yuying Long]

Crash on Win2k-CN:
-------------------------------
Incident ID 33249389 
Stack Signature ntdll.dll + 0x49e82 (0x77fc9e82) 7bfe6d32  
Bug ID  
Trigger Time  2001-07-23 15:35:03  
User Comments  crash on Win2k when open locally yahoo-japan  
Build ID 2001072306  
Product ID Netscape6.10  
Platform ID Win32  
Stack Trace  
ntdll.dll + 0x49e82 (0x77fc9e82) 
ntdll.dll + 0x49d41 (0x77fc9d41) 
MSVCRT.DLL + 0x113d (0x7800113d) 
PR_Free [../../../../pr/src/malloc/prmem.c, line 68] 
FreeArenaList [../../../lib/ds/plarena.c, line 200] 
PL_FinishArenaPool [../../../lib/ds/plarena.c, line 253] 
FrameArena::~FrameArena
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 554] 
nsDST::NodeArena::Release
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsDST.cpp, line 98] 
nsDST::~nsDST [d:\builds\seamonkey\mozilla\layout\html\base\src\nsDST.cpp, line
222] 
FrameManager::PropertyList::~PropertyList
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrameManager.cpp, line 2870] 
FrameManager::DestroyPropertyList
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrameManager.cpp, line 2512] 
FrameManager::Destroy
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrameManager.cpp, line 467] 
PresShell::~PresShell
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 1494] 
PresShell::`scalar deleting destructor' 
nsTextInputListener::Release
[d:\builds\seamonkey\mozilla\layout\html\forms\src\nsGfxTextControlFrame2.cpp,
line 235] 
nsCOMPtr_base::~nsCOMPtr_base
[d:\builds\seamonkey\mozilla\xpcom\base\nsCOMPtr.cpp, line 50] 
DocumentViewerImpl::~DocumentViewerImpl
[d:\builds\seamonkey\mozilla\content\base\src\nsDocumentViewer.cpp, line 886] 
DocumentViewerImpl::Release
[d:\builds\seamonkey\mozilla\content\base\src\nsDocumentViewer.cpp, line 841] 
nsCOMPtr_base::assign_with_AddRef
[d:\builds\seamonkey\mozilla\xpcom\base\nsCOMPtr.cpp, line 59] 
PresShell::UnsuppressAndInvalidate
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 4533] 
PresShell::UnsuppressAndInvalidate
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 4533] 
PresShell::UnsuppressPainting
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 4567] 
DocumentViewerImpl::LoadComplete
[d:\builds\seamonkey\mozilla\content\base\src\nsDocumentViewer.cpp, line 1129] 
nsDocShell::EndPageLoad
[d:\builds\seamonkey\mozilla\docshell\base\nsDocShell.cpp, line 3731] 
nsWebShell::EndPageLoad
[d:\builds\seamonkey\mozilla\docshell\base\nsWebShell.cpp, line 912] 
nsDocShell::OnStateChange
[d:\builds\seamonkey\mozilla\docshell\base\nsDocShell.cpp, line 3652] 
nsDocLoaderImpl::FireOnStateChange
[d:\builds\seamonkey\mozilla\uriloader\base\nsDocLoader.cpp, line 1095] 
nsDocLoaderImpl::doStopDocumentLoad
[d:\builds\seamonkey\mozilla\uriloader\base\nsDocLoader.cpp, line 734] 
nsDocLoaderImpl::DocLoaderIsEmpty
[d:\builds\seamonkey\mozilla\uriloader\base\nsDocLoader.cpp, line 632] 
nsDocLoaderImpl::OnStopRequest
[d:\builds\seamonkey\mozilla\uriloader\base\nsDocLoader.cpp, line 563] 
nsLoadGroup::RemoveRequest
[d:\builds\seamonkey\mozilla\netwerk\base\src\nsLoadGroup.cpp, line 517] 
imgRequestProxy::OnStopRequest
[d:\builds\seamonkey\mozilla\modules\libpr0n\src\imgRequestProxy.cpp, line 387] 
imgRequest::OnStopRequest
[d:\builds\seamonkey\mozilla\modules\libpr0n\src\imgRequest.cpp, line 639] 
ProxyListener::OnStopRequest
[d:\builds\seamonkey\mozilla\modules\libpr0n\src\imgLoader.cpp, line 376] 
nsHttpChannel::OnStopRequest
[d:\builds\seamonkey\mozilla\netwerk\protocol\http\src\nsHttpChannel.cpp, line
2114] 
nsOnStopRequestEvent::HandleEvent
[d:\builds\seamonkey\mozilla\netwerk\base\src\nsRequestObserverProxy.cpp, line 161] 
PL_HandleEvent [d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c, line 591] 
PL_ProcessPendingEvents [d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c,
line 524] 
_md_EventReceiverProc [d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c, line
1072] 
nsAppShellService::Run
[d:\builds\seamonkey\mozilla\xpfe\appshell\src\nsAppShellService.cpp, line 426] 
netscp6.exe + 0x16f0 (0x004016f0) 
netscp6.exe + 0x11b8 (0x004011b8) 
netscp6.exe + 0x3366 (0x00403366) 
KERNEL32.DLL + 0x7903 (0x77e67903) 

Comment 2

[nhottanscp]

I can reproduce this using today's branch on my Windows 2000 US.

1) goto http://www.yahoo.co.jp
2) save it locally by saveas
3) open it by browser
4) hit reload

I will attach callstacks of my crash.

Reassign to [e-mail], could this be related to bug 90733?

Comment 3

[nhottanscp]

Attachment: Call stacks of the crashes.

Comment 4

[Yuying Long]

I don't know if there is some other check-in than fixed of bug 90733, but I 
couldn't reproduce it on 07-24 branch build. (all platforms) 

Comment 5

[Jay Patel [:jay]]

Adding topcrash keyword.  The N610 branch Talkback topcrash report is showing
this crash at #1 today.  Although the stack signatures are all ntdll.dll, the
stacks for most of them are all different, but I think they are all related. 
Here are a few entries:

ntdll.dll   72
			 71909 	 RESO 	 WORK 	 [e-mail] ---
			 82595 	 VERI 	 FIXE 	 [e-mail] mozilla0.9.1
     First BBID : http://climate/reports/stackcommentemail.cfm?dynamicBBID=32959758
Last BBID  : http://climate/reports/stackcommentemail.cfm?dynamicBBID=33264504
Min Runtime :115
     Max Runtime :205009
     Min seconds since last crash :11
     Max seconds since last crash :46183
     First Appearance Date : 2001-07-16
     Last Appearance Date : 2001-07-23
     First Build ID : 2001070712
     Latest Build ID : 2001072306

Stack Trace: 

	 ntdll.dll + 0x49e82 (0x77fc9e82)
	 ntdll.dll + 0x49d41 (0x77fc9d41)
	 MSVCRT.DLL + 0x113d (0x7800113d)
	 MSVCRT.DLL + 0x1f5f (0x78001f5f)
    ntdll.dll + 0x49e82 (0x77fc9e82) a005906b
	 line 
	Build: 2001072306 CrashDate: 2001-07-23 UptimeMinutes: 8  Total: 559 
	OS: Windows NT  5.0 build 2195
	 Detailed : http://climate/reports/incidenttemplate.cfm?bbid=33264504
StackTrace: http://climate/reports/stackcommentemail.cfm?dynamicBBID=33264504
(33264504)
Comments: We are hosed if you use the browser to do any mp3/wma/etc.stuff. (a)
the helper apps never seem to be right

    ntdll.dll + 0x4b03d (0x77fcb03d) dd022f37
	 line 
	Build: 2001072306 CrashDate: 2001-07-23 UptimeMinutes: 349  Total: 349 
	OS: Windows NT  5.0 build 2195
	 Detailed : http://climate/reports/incidenttemplate.cfm?bbid=33264241
StackTrace: http://climate/reports/stackcommentemail.cfm?dynamicBBID=33264241
(33264241)
Comments: 7/23/2001 Win32 branch build.i tried to open with a Browser NS
JapanHome saved on a local disk. That is when it crashed.

ntdll.dll + 0x49e82 (0x77fc9e82) 7bfe6d32
	 line 
	Build: 2001072306 CrashDate: 2001-07-23 UptimeMinutes: 1  Total: 80 
	OS: Windows NT  5.0 build 2195
	 Detailed : http://climate/reports/incidenttemplate.cfm?bbid=33249389
StackTrace: http://climate/reports/stackcommentemail.cfm?dynamicBBID=33249389
(33249389)
Comments: crash on Win2k when open locally yahoo-japan

ntdll.dll + 0x4b892 (0x77fcb892) e72268f6
	 line 
	Build: 2001072306 CrashDate: 2001-07-23 UptimeMinutes: 11  Total: 327 
	OS: Windows NT  5.0 build 2195
	 Detailed : http://climate/reports/incidenttemplate.cfm?bbid=33251366
StackTrace: http://climate/reports/stackcommentemail.cfm?dynamicBBID=33251366
(33251366)
Comments: now..I see. I downloaded a file couple (or thrice) and went to mail
and selected a folder...booom.....

ntdll.dll + 0x4b892 (0x77fcb892) a3c8e1b4
	 line 
	Build: 2001072306 CrashDate: 2001-07-23 UptimeMinutes: 268  Total: 268 
	OS: Windows NT  5.0 build 2195
	 Detailed : http://climate/reports/incidenttemplate.cfm?bbid=33252910
StackTrace: http://climate/reports/stackcommentemail.cfm?dynamicBBID=33252910
(33252910)
URL: www.tucows.com
(33252910)
Comments: Clicked on Windows 2000.

    ntdll.dll + 0x4a776 (0x77fca776) 147cd61f
	 line 
	Build: 2001072306 CrashDate: 2001-07-23 UptimeMinutes: 1  Total: 382 
	OS: Windows NT  5.0 build 2195
	 Detailed : http://climate/reports/incidenttemplate.cfm?bbid=33252519
StackTrace: http://climate/reports/stackcommentemail.cfm?dynamicBBID=33252519
(33252519)
Comments: bug 91997 

    ntdll.dll + 0x4b007 (0x77fcb007) 7d2de874
	 line 
	Build: 2001072306 CrashDate: 2001-07-23 UptimeMinutes: 56  Total: 181 
	OS: Windows NT  5.0 build 2195
	 Detailed : http://climate/reports/incidenttemplate.cfm?bbid=33252455
StackTrace: http://climate/reports/stackcommentemail.cfm?dynamicBBID=33252455
(33252455)
Comments: Typed first part of a URL in urlbar

    ntdll.dll + 0x4a8ac (0x77fca8ac) cc53857d
	 line 
	Build: 2001072306 CrashDate: 2001-07-23 UptimeMinutes: 1  Total: 380 
	OS: Windows NT  5.0 build 2195
	 Detailed : http://climate/reports/incidenttemplate.cfm?bbid=33252415
StackTrace: http://climate/reports/stackcommentemail.cfm?dynamicBBID=33252415
(33252415)
Comments: bug 91997 

Comment 6

[nhottanscp]

I cannot reproduce this with 7/24 branch build.

Comment 7

[Jay Patel [:jay]]

Today's Talkback data doesn't show any crashes with the 20010724xx N610 branch
builds.  Does anyone know about any checkin that would have fixed this problem?
 Better to find that out soon so this doesn't pop up again in the future.

Comment 8

[Marc Attinasi]

I think this was fixed by the fix for bug 90733, or by Hyatt's backout of the
crashy fix for bug 90081 - no direct evidence to back it up, but a strong hunch.

Comment 9

[Marc Attinasi]

I cannot repro on the 7-24 or 7-25 branch builds, or the 7-24 trunk. Marking FIXED

Comment 10

[Yuying Long]

No crash on 07-24 and 07-25 branch build, mark it as verified.