Closed Bug 26933 Opened 25 years ago Closed 25 years ago

segfault while navigating

Categories

(Core :: DOM: UI Events & Focus Handling, defect, P3)

x86
Linux
defect

Tracking

()

VERIFIED WORKSFORME

People

(Reporter: dmosedale, Assigned: joki)

References

()

Details

(Keywords: crash)

Build from the tip completed Sunday Feb 6th at 10:10 PM. --enable-optimize --disable-debug --enable-x11-shm CFLAGS="-g" CXXFLAGS="-g" While I was jumping to an anchor in the M13 release notes (URL of the main page above). gdb sez: (gdb) where full #0 0x4038c9a4 in NS_NewScriptHTMLAnchorElement (aContext=0x82b4bf8, aSupports=0x88edc64, aParent=0x86ef438, aReturn=0x8cda4e0) at /home/dmose/s/mozilla/dom/src/html/nsJSHTMLAnchorElement.cpp:738 aContext = (nsIScriptContext *) 0x82b4bf8 aParent = (nsISupports *) 0x86ef438 proto = (struct JSObject *) 0x8cda4e0 parent = (struct JSObject *) 0x86ef438 owner = (nsIScriptObjectOwner *) 0xbfffd978 jscontext = (struct JSContext *) 0x82b4c28 result = 1077734276 aHTMLAnchorElement = (nsIDOMHTMLAnchorElement *) 0x4013fa64 #1 0x4034fadf in nsDOMScriptObjectFactory::NewScriptElement (this=0x846f2a8, aTagName=@0xbfffda0c, aContext=0x82b4bf8, aElement=0x88edc64, aParent=0x86ef438, aReturn=0x8cda4e0) at /home/dmose/s/mozilla/dom/src/build/nsDOMFactory.cpp:392 aParent = (nsISupports *) 0x86ef438 aReturn = (void **) 0x8cda4e0 str = 0x8cda500 "H`/@H`/@p" tag = DOMHTMLTag_a #2 0x40d00ade in nsGenericElement::GetScriptObject (this=0x88edc70, aContext=0x82b4bf8, aScriptObject=0xbfffdadc) at /home/dmose/s/mozilla/layout/base/src/nsGenericElement.cpp:983 factory = (nsIDOMScriptObjectFactory *) 0x846f2a8 tag = {<nsString> = {<nsStr> = {mLength = 1, mCapacity = 63, mCharSize = eTwoByte, mOwnsBuffer = 0, {mStr = 0xbfffda24 "a", mUStr = 0xbfffda24}}, _vptr. = 0x40118780}, mBuffer = "a\000\000\000<Úÿ¿=±\006@(L+\b\230M+\bd]\t@`Úÿ¿v©\006@(L+\bp÷%\b(L+\bp÷%\b]\203<@tÚÿ¿Äß5@hK+\b\b\202>@Àh=@pK+\b\001\000\000\000\224Úÿ¿\003³6@\205Ü5@\034Ø\021@\230Úÿ¿\017S\020@hK+\b\b\202>@\000\000\000\000¼Úÿ¿\235³6@¸Úÿ¿"} tagBuf = "qK+\b\004\031\005\b\001\000\000\000\2329\027@$x\026@\235I\027@àM+\b\004Úÿ¿_;\027@$x\026@ÐM+\b\030Úÿ¿Û\237" aScriptObject = (void **) 0x403ceb84 res = 0 slots = (nsDOMSlots *) 0x8cda4e0 #3 0x40badd12 in nsHTMLAnchorElement::GetScriptObject (this=0x88edc58, aContext=0x82b4bf8, aScriptObject=0xbfffdadc) at /home/dmose/s/mozilla/layout/html/content/src/nsHTMLAnchorElement.cpp:105No locals. #4 0x4036a934 in nsJSUtils::nsConvertObjectToJSVal (aSupports=0x88edc58, aContext=0x82b4c28, aObj=0x8561630, aReturn=0xbfffdf14) at /home/dmose/s/mozilla/dom/src/base/nsJSUtils.cpp:264 object = (struct JSObject *) 0x0 scriptCX = {<nsCOMPtr_base> = {mRawPtr = 0x82b4bf8}, <No data fields>} owner = {<nsCOMPtr_base> = {mRawPtr = 0x88edc5c}, <No data fields>} #5 0x408223da in GetXULCommandDispatcherProperty (cx=0x82b4c28, obj=0x8561630, id=-1, vp=0xbfffdf14) at /home/dmose/s/mozilla/rdf/content/src/nsJSXULCommandDispatcher.cpp:112 prop = (nsIDOMWindow *) 0x40159fdb result = 1077734276 rv = 0 secMan = {<nsCOMPtr_base> = {mRawPtr = 0x8149688}, <No data fields>} a = (nsIDOMXULCommandDispatcher *) 0x8296688 #6 0x40071450 in js_GetProperty (cx=0x82b4c28, obj=0x8561630, id=139978920, vp=0xbfffdf14) at /home/dmose/s/mozilla/js/src/jsobj.c:1837 obj2 = (JSObject *) 0x85615c8 sprop = (JSScopeProperty *) 0x857e8f0 slot = 5 #7 0x400684fa in js_Interpret (cx=0x82b4c28, result=0xbfffdfa0) at /home/dmose/s/mozilla/js/src/jsinterp.c:2251 rt = (JSRuntime *) 0x8100660 fp = (JSStackFrame *) 0xbfffdfa4 script = (JSScript *) 0x8cda1e8 newvers = JSVERSION_DEFAULT oldvers = JSVERSION_DEFAULT obj = (JSObject *) 0x8561630 obj2 = (JSObject *) 0x825f770 proto = (JSObject *) 0x4007297c parent = (JSObject *) 0x82b4eb0 onbranch = 0 ok = 1 cond = -1073750236 depth = 3 len = 3 sp = (jsval *) 0x82cd924 newsp = (jsval *) 0x82cd924 mark = (void *) 0x82cd918 pc = (jsbytecode *) 0x8cda222 "5" pc2 = (jsbytecode *) 0xbfffdf84 "" endpc = (jsbytecode *) 0x8cda26e "t" op = JSOP_GETPROP op2 = 1074350240 cs = (JSCodeSpec *) 0x40094e50 atom = (JSAtom *) 0x4007297c argc = 1074911260 slot = 1074211196 attrs = 0 vp = (jsval *) 0x16 lval = 139859504 rval = 0 ltmp = 1074211196 rtmp = 137055920 id = 139978920 withobj = (JSObject *) 0x4007297c origobj = (JSObject *) 0x82b4eb0 propobj = (JSObject *) 0x4007297c ida = (JSIdArray *) 0x4007297c iter_state = -1073750256 prop = (JSProperty *) 0x0 sprop = (JSScopeProperty *) 0x82b4eb0 str = (JSString *) 0x82b4eb0 str2 = (JSString *) 0x4007297c str3 = (JSString *) 0x4007297c length = 134904116 length2 = 147694624 length3 = 147694628 chars = (jschar *) 0xbfffdf6c i = 1074355556 j = 144181832 d = 5.6173257841281545 d2 = -1.9919243186834663 clasp = (JSClass *) 0x8cda410 funclasp = (JSClass *) 0x8100808 fun = (JSFunction *) 0x8cda410 type = 1074211196 low = 135268360 high = 1076847617 off = 1074211196 npairs = 1075309180 match = 1075273985 getter = 0x4007297c <js_DropProperty> setter = 0x400948a0 <js_ObjectOps> tn = (JSTryNote *) 0x400948a0 offset = 1074211196 #8 0x40062415 in js_Invoke (cx=0x82b4c28, argc=1, flags=2) at /home/dmose/s/mozilla/js/src/jsinterp.c:681 fp = (JSStackFrame *) 0xbfffe02c frame = {callobj = 0x0, argsobj = 0x0, varobj = 0x0, script = 0x8cda1e8, fun = 0x8ce0d50, thisp = 0x8980a48, argc = 1, argv = 0x82cd90c, rval = -2147483647, nvars = 2, vars = 0x82cd910, down = 0xbfffe02c, annotation = 0x0, scopeChain = 0x8980a48, pc = 0x8cda222 "5", sp = 0x82cd924, sharpDepth = 0, sharpArray = 0x0, constructing = 0 '\000', overrides = 0 '\000', special = 0 '\000', reserved = 0 '\000', dormantNext = 0x0} sp = (jsval *) 0x82cd918 newsp = (jsval *) 0x82cd910 vp = (jsval *) 0x82cd904 v = -2147483647 funobj = (JSObject *) 0x82cd910 parent = (JSObject *) 0x8980a48 thisp = (JSObject *) 0x8980a48 clasp = (JSClass *) 0x2 ops = (JSObjectOps *) 0xffffffff ok = 134551812 native = 0 fun = (JSFunction *) 0x8ce0d50 script = (JSScript *) 0x8cda1e8 minargs = 137156880 nvars = 2 mark = (void *) 0x82cd910 nslots = -1 nalloc = 137156880 surplus = 1077734276 hook = 0 hookData = (void *) 0x0 #9 0x400625fc in js_InternalInvoke (cx=0x82b4c28, obj=0x8980a48, fval=144181840, flags=0, argc=1, argv=0xbfffe14c, rval=0xbfffe0e4) at /home/dmose/s/mozilla/js/src/jsinterp.c:754 argc = 1 fp = (JSStackFrame *) 0xbfffe02c oldfp = (JSStackFrame *) 0x0 frame = {callobj = 0x0, argsobj = 0x0, varobj = 0x0, script = 0x0, fun = 0x0, thisp = 0x0, argc = 0, argv = 0x0, rval = 0, nvars = 0, vars = 0x0, down = 0x0, annotation = 0x0, scopeChain = 0x0, pc = 0x0, sp = 0x82cd910, sharpDepth = 0, sharpArray = 0x0, constructing = 0 '\000', overrides = 0 '\000', special = 0 '\000', reserved = 0 '\000', dormantNext = 0x0} oldsp = (jsval *) 0x0 sp = (jsval *) 0x82cd910 mark = (void *) 0x82cd904 i = 2 ok = 1 #10 0x4004a64f in JS_CallFunctionValue (cx=0x82b4c28, obj=0x8980a48, fval=144181840, argc=1, argv=0xbfffe14c, rval=0xbfffe0e4) at /home/dmose/s/mozilla/js/src/jsapi.c:2772 cx = (JSContext *) 0x82b4c28 #11 0x40353d0e in nsJSContext::CallEventHandler (this=0x82b4bf8, aTarget=0x8980a48, aHandler=0x8980a50, argc=1, argv=0xbfffe14c, aBoolResult=0xbfffe150) at /home/dmose/s/mozilla/dom/src/base/nsJSEnvironment.cpp:562 aBoolResult = (PRBool *) 0x403ceb84 rv = 0 securityManager = {<nsCOMPtr_base> = { mRawPtr = 0x8149688}, <No data fields>} funval = 144181840 fun = (struct JSFunction *) 0xbfffe10c ok = 1 stack = {<nsCOMPtr_base> = {mRawPtr = 0x82226c8}, <No data fields>} kungFuDeathGrip = {<nsCOMPtr_base> = { mRawPtr = 0x82b4bf8}, <No data fields>} val = 1077838344 #12 0x4038017f in nsJSEventListener::HandleEvent (this=0x8cda4b0, aEvent=0x887aad0) at /home/dmose/s/mozilla/dom/src/events/nsJSEventListener.cpp:128 funval = 144181840 argv = {144181848} eventObj = (struct JSObject *) 0x8980a58 eventChars = 0x8cda4c8 "(\030=\bp÷%\b\001Ã=@Ѫ\207\b\001" eventString = {<nsString> = {<nsStr> = {mLength = 10, mCapacity = 63, mCharSize = eTwoByte, mOwnsBuffer = 0, {mStr = 0xbfffe178 "o", mUStr = 0xbfffe178}}, _vptr. = 0x40118780}, mBuffer = "o\000n\000k\000e\000y\000p\000r\000e\000s\000s\000\000\000/@ áÿ¿_;\027@\214t/@@`/@Àáÿ¿\"\024&@Pd/@Ì¡\036@\024\000\000\000\034ãÿ¿¨¤Í\bÜáÿ¿\223ÿ7@°¤Í\b\b\202>@`âÿ¿\034ãÿ¿\bÜ<@\001\000\000\000ôáÿ¿M\0028@°¤Í\b\bÜ<@`âÿ¿\230I\207@Èéÿ¿"} cx = (struct JSContext *) 0x82b4c28 obj = (struct JSObject *) 0x8980a48 result = 0 jsBoolResult = 482 #13 0x408559d7 in nsXULKeyListenerImpl::HandleEventUsingKeyset ( this=0x8308098, aKeysetElement=0x85513d4, aKeyEvent=0x887aad0, aEventType=eKeyPress, aDocument=0x832a6c4, aHandledFlag=@0xbfffeaf0) at /home/dmose/s/mozilla/rdf/content/src/nsXULKeyListener.cpp:1554 rootElement = {<nsCOMPtr_base> = { mRawPtr = 0x83af74c}, <No data fields>} owner = {<nsCOMPtr_base> = {mRawPtr = 0x83af754}, <No data fields>} scriptObject = (void *) 0x8980a48 eventListener = {<nsCOMPtr_base> = { mRawPtr = 0x8cda4b0}, <No data fields>} eventStr = {<nsString> = {<nsStr> = {mLength = 10, mCapacity = 63, mCharSize = eTwoByte, mOwnsBuffer = 0, {mStr = 0xbfffe344 "o", mUStr = 0xbfffe344}}, _vptr. = 0x40118780}, mBuffer = "o\000n\000k\000e\000y\000p\000r\000e\000s\000s\000\000\000L\bHI+\bð£·\bÌãÿ¿\002\000\000\000ØõÙ@\004¼L\b\båÿ¿ÀåÙ@\000\000\000\000ö\201·@ȾL\b\båÿ¿Ð\000\000\000l\001\000\000÷\000\000\000\000\000\000\000\016\000\000\000ìãÿ¿¶F·@Ìãÿ¿\båÿ¿Üãÿ¿ØõÙ@ȾL\bð£·\b@M\212@"} eventName = {<nsCOMPtr_base> = {mRawPtr = 0x81ceee0}, <No data fields>} handler = (void *) 0x8980a20 masterGlobalObject = {<nsCOMPtr_base> = { mRawPtr = 0x82b4b6c}, <No data fields>} masterDoc = {<nsCOMPtr_base> = {mRawPtr = 0x827e768}, <No data fields>} masterContext = {<nsCOMPtr_base> = { mRawPtr = 0x82b4bf8}, <No data fields>} handlerOwner = {<nsCOMPtr_base> = { mRawPtr = 0x8551618}, <No data fields>} keyName = {<nsString> = {<nsStr> = {mLength = 1, mCapacity = 63, mCharSize = eTwoByte, mOwnsBuffer = 0, {mStr = 0xbfffe76c " ", mUStr = 0xbfffe76c}}, _vptr. = 0x40118780}, mBuffer = " \000\000\000s\000a\000b\000l\000e\000d\000\000\000/@\220çÿ¿_;\027@\214t/@\b±\207\b\001a\027@|ê\027@P±\207\bPd/@\230±\207\bdd/@`d/@dd/@`d/@\034Ø\021@Èçÿ¿XG\020@\020±\207\b\034Ø\021@àçÿ¿TH\020@(+\005\b\020±\207\b\034Ø\021@Tèÿ¿ôçÿ¿°s\r@\020±\207\b"} theChar = 32 code = {<nsString> = {<nsStr> = {mLength = 0, mCapacity = 63, mCharSize = eTwoByte, mOwnsBuffer = 0, {mStr = 0xbfffe6d4 "", mUStr = 0xbfffe6d4}}, _vptr. = 0x40118780}, mBuffer = "\000\000e\000y\000\000\000A\000G\000E\000_\000D\000O\000W\000N\000\000\000/@@\000\000\000dd/@`d/@ ±\207\b\030çÿ¿°e\r@@çÿ¿+\000\000\000\034Ø\021@@çÿ¿\222s\r@\034Ø\021@@çÿ¿Tçÿ¿\034\206\021@\034èÿ¿Hçÿ¿ú[\r@ ±\207\b\020±\207\b+\000\000\000\034Ø\021@xçÿ¿fg\r@ ±\207\b"} gotCharCode = 0 gotKeyCode = 0 tempChar = " " tempChar2 = {<nsString> = {<nsStr> = {mLength = 1, mCapacity = 63, mCharSize = eTwoByte, mOwnsBuffer = 0, {mStr = 0xbfffe63c " ", mUStr = 0xbfffe63c}}, _vptr. = 0x40118780}, mBuffer = " \000\000\000y\000c\000o\000d\000e\000\000\000\000\000\r@`d/@dæÿ¿_;\027@\214t/@@`/@\204æÿ¿\"\024&@Pd/@$x\026@\001\000\000\000\000çÿ¿\230±\207\bH\000\000\000\224æÿ¿À\024\025@A\000\000\000\034Ø\021@¤æÿ¿\030G\020@A\000\000\000\034Ø\021@¼æÿ¿¬G\020@(+\005\bA\000\000\000\034Ø\021@ìæÿ¿"} isMatching = 1 xproperty = {<nsString> = {<nsStr> = {mLength = 0, mCapacity = 63, mCharSize = eTwoByte, mOwnsBuffer = 0, {mStr = 0xbfffe5a4 "", mUStr = 0xbfffe5a4}}, _vptr. = 0x40118780}, mBuffer = "\000\000L\b\236\024&@\214t/@@`/@@`/@:b\027@|ê\027@Pd/@@`/@\001a\027@\001\000\000\0008¦·\bPd/@\001a\027@`d/@ðåÿ¿_;\027@\214t/@@`/@\020æÿ¿\"\024&@Pd/@$x\026@\001\000\000\000\214æÿ¿à±\207\bH\000\000\000 æÿ¿À\024\025@A\000\000\000\236\024&@\214t/@"} isModKey = 0 cancelValue = {<nsString> = {<nsStr> = {mLength = 0, mCapacity = 63, mCharSize = eTwoByte, mOwnsBuffer = 0, {mStr = 0xbfffe50c "", mUStr = 0xbfffe50c}}, _vptr. = 0x40118780}, mBuffer = "\000\000e\000t\000a\000\000\000o\000l\000\000\0000åÿ¿n¿\035@\000u\215\b8åÿ¿ð\216e@\200¦·\b\004R\212@Håÿ¿ßÐ\211@¨¦·\b\004R\212@dåÿ¿\200ß\211@@¦·\bØõÙ@lXL\bð£·\b\000u\215\b\234åÿ¿îE·@ð£·\b\210åÿ¿ØõÙ@lXL\blXL\b\224\237L\b\000\000\000\000\000\000\000"} cmdToExecute = {<nsString> = {<nsStr> = {mLength = 332, mCapacity = 512, mCharSize = eTwoByte, mOwnsBuffer = 1, { mStr = 0x887afd8 " ", mUStr = 0x887afd8}}, _vptr. = 0x40118780}, mBuffer = "\000\000a\000n\000c\000e\000l\000\000\000/@`d/@\001\000\000\000\001\000\000\000:b\027@:b\027@|ê\027@Pd/@Èäÿ¿:b\027@:b\027@|ê\027@Pd/@@`/@\001\000\000\000:b\027@|ê\027@Pd/@@`/@:b\027@|ê\027@Pd/@@`/@@`/@\001\000\000\000\214t/@øt\215\b@`/@`d/@"} oncommand = {<nsString> = {<nsStr> = {mLength = 0, mCapacity = 63, mCharSize = eTwoByte, mOwnsBuffer = 0, {mStr = 0xbfffe3dc "", mUStr = 0xbfffe3dc}}, _vptr. = 0x40118780}, mBuffer = "\000\000\000\000'\000\000\000\036\001\000\000©\000\000\000\030äÿ¿fiÌ@$½L\bHI+\bð£·\b\båÿ¿È¾L\b\002\000\000\000ØõÙ@`äÿ¿ÐE·@ȾL\bHäÿ¿$½L\bHI+\bð£·\b\001a\027@\001a\027@|ê\027@(§·\bPd/@dd/@\001a\027@|ê\027@ ä\211\bPd/@\001a\027@|ê\027@"} document = {<nsCOMPtr_base> = {mRawPtr = 0x832a6b8}, <No data fields>} content = {<nsCOMPtr_base> = {mRawPtr = 0x85515f8}, <No data fields>} count = 1077734276 keyElement = {<nsCOMPtr_base> = { mRawPtr = 0x855160c}, <No data fields>} property = {<nsString> = {<nsStr> = {mLength = 0, mCapacity = 63, mCharSize = eTwoByte, mOwnsBuffer = 0, {mStr = 0xbfffe804 "", mUStr = 0xbfffe804}}, _vptr. = 0x40118780}, mBuffer = "\000\000a\000l\000s\000e\000\000\000Pd/@@`/@Pd/@\001\000\000\000\214t/@P±\207\b@`/@`d/@@èÿ¿_;\027@\214t/@P±\207\bXèÿ¿\212\035&@Pd/@$x\026@\001\000\000\000Ôèÿ¿hèÿ¿ \025\025@X±\207\b\034Ø\021@xèÿ¿XG\020@X±\207\b\034Ø\021@\220èÿ¿TH\020@(+\005\b"} oldkeyNode = {<nsCOMPtr_base> = { mRawPtr = 0x832a6b8}, <No data fields>} trueString = {<nsString> = {<nsStr> = {mLength = 4, mCapacity = 63, mCharSize = eTwoByte, mOwnsBuffer = 0, {mStr = 0xbfffe948 "t", mUStr = 0xbfffe948}}, _vptr. = 0x40118780}, mBuffer = "t\000r\000u\000e\000\000\000\206@\006\000\000\000\000\000\000\000\034Ø\021@u\214\206@|\214\206@\006\000\000\000<\206\021@¬éÿ¿\034¾\r@\fêÿ¿\230éÿ¿ÿÿÿÿ\000\000\000\000\034Ø\021@\fêÿ¿\bêÿ¿\001\000\000\000\006", '\000' <repeats 15 times>, "u\214\206@Èéÿ¿5Ä\r@\fêÿ¿u\214\206@\000\000\000\000ÿÿÿÿ\230I\207@"} falseString = {<nsString> = {<nsStr> = {mLength = 5, mCapacity = 63, mCharSize = eTwoByte, mOwnsBuffer = 0, {mStr = 0xbfffe8b0 "f", mUStr = 0xbfffe8b0}}, _vptr. = 0x40118780}, mBuffer = "f\000a\000l\000s\000e\000\000\000\230I\207@ÀlG@¤v0\bléÿ¿\004\000\000\000\fêÿ¿ðèÿ¿Ñ\\\r@$êÿ¿p³\034\b\b\000\000\000\034Ø\021@\034\206\021@ éÿ¿fg\r@$êÿ¿\000\000\000\000p³\034\b\000\000\000\000\004\000\000\000\034Ø\021@\004\000\000\000\006\000\000\000\fêÿ¿\027÷\f@\034Ø\021@\fêÿ¿\230éÿ¿Déÿ¿"} keyNode = {<nsCOMPtr_base> = {mRawPtr = 0x855160c}, <No data fields>} #14 0x408538b7 in nsXULKeyListenerImpl::LocateAndExecuteKeyBinding ( this=0x8308098, aEvent=0x887aad0, aEventType=eKeyPress, aDocument=0x832a6c4, aHandledFlag=@0xbfffeaf0) at /home/dmose/s/mozilla/rdf/content/src/nsXULKeyListener.cpp:1250 rootElement = {<nsCOMPtr_base> = { mRawPtr = 0x8550c6c}, <No data fields>} currNode = {<nsCOMPtr_base> = {mRawPtr = 0x85513d4}, <No data fields>} #15 0x40852da1 in nsXULKeyListenerImpl::DoKey (this=0x8308098, aKeyEvent=0x887aad4, aEventType=eKeyPress) at /home/dmose/s/mozilla/rdf/content/src/nsXULKeyListener.cpp:578 webShell = {<nsCOMPtr_base> = {mRawPtr = 0x851c5e0}, <No data fields>} presShell = {<nsCOMPtr_base> = {mRawPtr = 0x8bed770}, <No data fields>} cv = {<nsCOMPtr_base> = {mRawPtr = 0x8b7b2c0}, <No data fields>} editorHasBindings = 0 platformDoc = {<nsCOMPtr_base> = { mRawPtr = 0x85244a4}, <No data fields>} domWindow = {<nsCOMPtr_base> = {mRawPtr = 0x8516bd0}, <No data fields>} windowDoc = {<nsCOMPtr_base> = {mRawPtr = 0x89232bc}, <No data fields>} xulWindowDoc = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>} piParent = {<nsCOMPtr_base> = {mRawPtr = 0x851c5e0}, <No data fields>} aKeyEvent = (nsIDOMEvent *) 0x0 executingKeyBind = 1 ret = 0 target = {<nsCOMPtr_base> = {mRawPtr = 0x88701a4}, <No data fields>} piWindow = {<nsCOMPtr_base> = {mRawPtr = 0x8516be0}, <No data fields>} keyEvent = {<nsCOMPtr_base> = {mRawPtr = 0x887aad0}, <No data fields>} commandDispatcher = {<nsCOMPtr_base> = { mRawPtr = 0x8296688}, <No data fields>} focusedElement = {<nsCOMPtr_base> = { mRawPtr = 0x88edc58}, <No data fields>} domWindow = {<nsCOMPtr_base> = {mRawPtr = 0x8516bd0}, <No data fields>} keyFile = {<nsCString> = {<nsStr> = {mLength = 0, mCapacity = 63, mCharSize = eOneByte, mOwnsBuffer = 0, {mStr = 0xbfffecdc "", mUStr = 0xbfffecdc}}, _vptr. = 0x401186d4}, mBuffer = "\000Ø\021@Híÿ¿Ôª\207\b\004íÿ¿ËR\020@Ъ\207\b@¿Õ@ íÿ¿\034Ø\021@Tíÿ¿$íÿ¿\221S\020@És¶@\034Ø\021@(íÿ¿\017S\020@"} platformKeyFile = {<nsCString> = {<nsStr> = {mLength = 0, mCapacity = 63, mCharSize = eOneByte, mOwnsBuffer = 0, { mStr = 0xbfffec84 "", mUStr = 0xbfffec84}}, _vptr. = 0x401186d4}, mBuffer = "\000Ø\021@\234ìÿ¿\017S\020@è4;\bØõÙ@8\031K\b,íÿ¿Å'¶@(íÿ¿\002\000\000\000\b\202>@\236\024&@\214t/@@`/@@`/@:b\027@"} document = {<nsCOMPtr_base> = {mRawPtr = 0x832a6c4}, <No data fields>} handled = 1 browserFile = {<nsCString> = {<nsStr> = {mLength = 43, mCapacity = 63, mCharSize = eOneByte, mOwnsBuffer = 0, { mStr = 0xbfffec2c "chrome://global/content/browserBindings.xul", mUStr = 0xbfffec2c}}, _vptr. = 0x401186d4}, mBuffer = "chrome://global/content/browserBindings.xul\000\200ôÿ¿\034ôÿ¿", '\000' <repeats 11 times>} editorFile = {<nsCString> = {<nsStr> = {mLength = 42, mCapacity = 63, mCharSize = eOneByte, mOwnsBuffer = 0, { mStr = 0xbfffebd4 "chrome://global/content/editorBindings.xul", mUStr = 0xbfffebd4}}, _vptr. = 0x401186d4}, mBuffer = "chrome://global/content/editorBindings.xul\000¿\220ìÿ¿Å'¶@\214ìÿ¿\002\000\000\000\b\202>@"} browserPlatformFile = {<nsCString> = {<nsStr> = {mLength = 51, mCapacity = 63, mCharSize = eOneByte, mOwnsBuffer = 0, { mStr = 0xbfffeb7c "chrome://global/content/platformBrowserBindings.xul", mUStr = 0xbfffeb7c}}, _vptr. = 0x401186d4}, mBuffer = "chrome://global/content/platformBrowserBindings.xul\000\002\000\000\000\b\202>@\034ôÿ¿"} editorPlatformFile = {<nsCString> = {<nsStr> = {mLength = 50, mCapacity = 63, mCharSize = eOneByte, mOwnsBuffer = 0, { mStr = 0xbfffeb24 "chrome://global/content/platformEditorBindings.xul", mUStr = 0xbfffeb24}}, _vptr. = 0x401186d4}, mBuffer = "chrome://global/content/platformEditorBindings.xul\000\000hëÿ¿\202e\r@Ðëÿ¿"} #16 0x4085276d in nsXULKeyListenerImpl::KeyPress (this=0x8308098, aKeyEvent=0x887aad4) at /home/dmose/s/mozilla/rdf/content/src/nsXULKeyListener.cpp:462 No locals. #17 0x40b61d66 in nsEventListenerManager::HandleEvent (this=0x82ad210, aPresContext=0x84b1938, aEvent=0xbffff7b8, aDOMEvent=0xbffff534, aFlags=2, aEventStatus=0xbffff738) at /home/dmose/s/mozilla/layout/events/src/nsEventListenerManager.cpp:996 ls = (nsListenerStruct *) 0x8308178 mKeyListener = (nsIDOMKeyListener *) 0x830809c i = 0 aPresContext = (nsIPresContext *) 0x8308178 ret = 0 kungFuDeathGrip = {<nsCOMPtr_base> = { mRawPtr = 0x82ad210}, <No data fields>} #18 0x40842298 in nsXULDocument::HandleDOMEvent (this=0x827e768, aPresContext=0x84b1938, aEvent=0xbffff7b8, aDOMEvent=0xbffff534, aFlags=2, aEventStatus=0xbffff738) at /home/dmose/s/mozilla/rdf/content/src/nsXULDocument.cpp:1912 aDOMEvent = (nsIDOMEvent **) 0xbffff534 ret = 0 domEvent = (nsIDOMEvent *) 0x0 #19 0x4082d439 in nsXULElement::HandleDOMEvent (this=0x83af738, aPresContext=0x84b1938, aEvent=0xbffff7b8, aDOMEvent=0xbffff534, aFlags=2, aEventStatus=0xbffff738) at /home/dmose/s/mozilla/rdf/content/src/nsXULElement.cpp:2956 ret = 0 domEvent = (nsIDOMEvent *) 0x0 #20 0x4082d439 in nsXULElement::HandleDOMEvent (this=0x83db7f8, aPresContext=0x84b1938, aEvent=0xbffff7b8, aDOMEvent=0xbffff534, aFlags=2, aEventStatus=0xbffff738) at /home/dmose/s/mozilla/rdf/content/src/nsXULElement.cpp:2956 ret = 0 domEvent = (nsIDOMEvent *) 0x0 #21 0x4082d439 in nsXULElement::HandleDOMEvent (this=0x83db9a0, aPresContext=0x84b1938, aEvent=0xbffff7b8, aDOMEvent=0xbffff534, aFlags=2, aEventStatus=0xbffff738) at /home/dmose/s/mozilla/rdf/content/src/nsXULElement.cpp:2956 ret = 0 domEvent = (nsIDOMEvent *) 0x0 #22 0x4082d439 in nsXULElement::HandleDOMEvent (this=0x83dbb70, aPresContext=0x84b1938, aEvent=0xbffff7b8, aDOMEvent=0xbffff534, aFlags=2, aEventStatus=0xbffff738) at /home/dmose/s/mozilla/rdf/content/src/nsXULElement.cpp:2956 ret = 0 domEvent = (nsIDOMEvent *) 0x0 #23 0x4082d439 in nsXULElement::HandleDOMEvent (this=0x83dbd60, aPresContext=0x84b1938, aEvent=0xbffff7b8, aDOMEvent=0xbffff534, aFlags=2, aEventStatus=0xbffff738) at /home/dmose/s/mozilla/rdf/content/src/nsXULElement.cpp:2956 ret = 0 domEvent = (nsIDOMEvent *) 0x0 #24 0x4082f91d in nsXULElement::HandleChromeEvent (this=0x83dbd60, aPresContext=0x84b1938, aEvent=0xbffff7b8, aDOMEvent=0xbffff534, aFlags=2, aEventStatus=0xbffff738) at /home/dmose/s/mozilla/rdf/content/src/nsXULElement.cpp:3916 this = (nsXULElement *) 0x403ceb84 #25 0x4036529f in GlobalWindowImpl::HandleDOMEvent (this=0x8516bc8, aPresContext=0x84b1938, aEvent=0xbffff7b8, aDOMEvent=0xbffff534, aFlags=2, aEventStatus=0xbffff738) at /home/dmose/s/mozilla/dom/src/base/nsGlobalWindow.cpp:3333 aEvent = (nsEvent *) 0xbffff7b8 aDOMEvent = (nsIDOMEvent **) 0xbffff534 ret = 0 domEvent = (nsIDOMEvent *) 0x0 kungFuDeathGrip1 = {<nsCOMPtr_base> = { mRawPtr = 0x83dbd8c}, <No data fields>} kungFuDeathGrip2 = {<nsCOMPtr_base> = { mRawPtr = 0x84b5a40}, <No data fields>} #26 0x40cf3680 in nsDocument::HandleDOMEvent (this=0x89232b8, aPresContext=0x84b1938, aEvent=0xbffff7b8, aDOMEvent=0xbffff534, aFlags=2, aEventStatus=0xbffff738) at /home/dmose/s/mozilla/layout/base/src/nsDocument.cpp:2473 aEvent = (nsEvent *) 0xbffff7b8 aDOMEvent = (nsIDOMEvent **) 0xbffff534 mRet = 0 mDOMEvent = (nsIDOMEvent *) 0x0 #27 0x40bce630 in nsHTMLHtmlElement::HandleDOMEvent (this=0x876d9f8, aPresContext=0x84b1938, aEvent=0xbffff7b8, aDOMEvent=0xbffff534, aFlags=2, aEventStatus=0xbffff738) at /home/dmose/s/mozilla/layout/html/content/src/nsHTMLHtmlElement.cpp:192 this = (nsHTMLHtmlElement *) 0x403ceb84 aEventStatus = (nsEventStatus *) 0x402f6401 #28 0x40d006f5 in nsGenericElement::HandleDOMEvent (this=0x88e5f94, aPresContext=0x84b1938, aEvent=0xbffff7b8, aDOMEvent=0xbffff534, aFlags=2, aEventStatus=0xbffff738) at /home/dmose/s/mozilla/layout/base/src/nsGenericElement.cpp:811 aDOMEvent = (nsIDOMEvent **) 0xbffff534 ret = 0 domEvent = (nsIDOMEvent *) 0x0 #29 0x40bb6adf in nsHTMLBodyElement::HandleDOMEvent (this=0x88e5f80, aPresContext=0x84b1938, aEvent=0xbffff7b8, aDOMEvent=0xbffff534, aFlags=2, aEventStatus=0xbffff738) at /home/dmose/s/mozilla/layout/html/content/src/nsHTMLBodyElement.cpp:714 No locals. #30 0x40d006f5 in nsGenericElement::HandleDOMEvent (this=0x8975ae4, aPresContext=0x84b1938, aEvent=0xbffff7b8, aDOMEvent=0xbffff534, aFlags=2, aEventStatus=0xbffff738) at /home/dmose/s/mozilla/layout/base/src/nsGenericElement.cpp:811 aDOMEvent = (nsIDOMEvent **) 0xbffff534 ret = 0 domEvent = (nsIDOMEvent *) 0x0 #31 0x40bfe5a3 in nsHTMLTableElement::HandleDOMEvent (this=0x8975ad0, aPresContext=0x84b1938, aEvent=0xbffff7b8, aDOMEvent=0xbffff534, aFlags=2, aEventStatus=0xbffff738) at /home/dmose/s/mozilla/layout/html/content/src/nsHTMLTableElement.cpp:1301No locals. #32 0x40d006f5 in nsGenericElement::HandleDOMEvent (this=0x86df314, aPresContext=0x84b1938, aEvent=0xbffff7b8, aDOMEvent=0xbffff534, aFlags=2, aEventStatus=0xbffff738) at /home/dmose/s/mozilla/layout/base/src/nsGenericElement.cpp:811 aDOMEvent = (nsIDOMEvent **) 0xbffff534 ret = 0 domEvent = (nsIDOMEvent *) 0x0 #33 0x40c09873 in nsHTMLTableSectionElement::HandleDOMEvent (this=0x86df300, aPresContext=0x84b1938, aEvent=0xbffff7b8, aDOMEvent=0xbffff534, aFlags=2, aEventStatus=0xbffff738) at /home/dmose/s/mozilla/layout/html/content/src/nsHTMLTableSectionElement.cpp:373 No locals. #34 0x40d006f5 in nsGenericElement::HandleDOMEvent (this=0x8acf714, aPresContext=0x84b1938, aEvent=0xbffff7b8, aDOMEvent=0xbffff534, aFlags=2, aEventStatus=0xbffff738) at /home/dmose/s/mozilla/layout/base/src/nsGenericElement.cpp:811 aDOMEvent = (nsIDOMEvent **) 0xbffff534 ret = 0 domEvent = (nsIDOMEvent *) 0x0 #35 0x40c07d03 in nsHTMLTableRowElement::HandleDOMEvent (this=0x8acf700, aPresContext=0x84b1938, aEvent=0xbffff7b8, aDOMEvent=0xbffff534, aFlags=2, aEventStatus=0xbffff738) at /home/dmose/s/mozilla/layout/html/content/src/nsHTMLTableRowElement.cpp:738 No locals. #36 0x40d006f5 in nsGenericElement::HandleDOMEvent (this=0x88701b8, aPresContext=0x84b1938, aEvent=0xbffff7b8, aDOMEvent=0x0, aFlags=1, aEventStatus=0xbffff738) at /home/dmose/s/mozilla/layout/base/src/nsGenericElement.cpp:811 aDOMEvent = (nsIDOMEvent **) 0xbffff534 ret = 0 domEvent = (nsIDOMEvent *) 0x887aad4 #37 0x40c020a3 in nsHTMLTableCellElement::HandleDOMEvent (this=0x88701a0, aPresContext=0x84b1938, aEvent=0xbffff7b8, aDOMEvent=0x0, aFlags=1, aEventStatus=0xbffff738) at /home/dmose/s/mozilla/layout/html/content/src/nsHTMLTableCellElement.cpp:558 No locals. #38 0x40b9633b in PresShell::HandleEvent (this=0x8bed770, aView=0x8545de8, aEvent=0xbffff7b8, aEventStatus=0xbffff738) at /home/dmose/s/mozilla/layout/html/base/src/nsPresShell.cpp:2850 targetContent = (nsIContent *) 0x88701b0 manager = (nsIEventStateManager *) 0x8742d60 focusContent = (nsIContent *) 0x0 this = (PresShell *) 0x8bed770 clientData = (void *) 0x870c490 frame = (nsIFrame *) 0x870c490 rv = 0 #39 0x40e4d964 in nsView::HandleEvent (this=0x8545de8, event=0xbffff7b8, aEventFlags=8, aStatus=0xbffff738, aHandled=@0xbffff6cc) at /home/dmose/s/mozilla/view/src/nsView.cpp:798 event = (nsGUIEvent *) 0xbffff7b8 obs = (nsIViewObserver *) 0x8bed774 #40 0x40e4d910 in nsView::HandleEvent (this=0x8827160, event=0xbffff7b8, aEventFlags=8, aStatus=0xbffff738, aHandled=@0xbffff6cc) at /home/dmose/s/mozilla/view/src/nsView.cpp:782 pKid = (nsIView *) 0x8545de8 cnt = 0 numkids = 1 trect = {x = 0, y = -89843, width = 12090, height = 353113} x = 0 y = 0 event = (nsGUIEvent *) 0xbffff7b8 obs = (nsIViewObserver *) 0x8bed774 #41 0x40e4d910 in nsView::HandleEvent (this=0x879a978, event=0xbffff7b8, aEventFlags=28, aStatus=0xbffff738, aHandled=@0xbffff6cc) at /home/dmose/s/mozilla/view/src/nsView.cpp:782 pKid = (nsIView *) 0x8827160 cnt = 0 numkids = 3 trect = {x = 0, y = 0, width = 12090, height = 11141} x = 0 y = 0 event = (nsGUIEvent *) 0xbffff7b8 obs = (nsIViewObserver *) 0x8bed774 #42 0x40e56afa in nsViewManager::DispatchEvent (this=0x8398208, aEvent=0xbffff7b8, aStatus=0xbffff738) at /home/dmose/s/mozilla/view/src/nsViewManager.cpp:1703 p2t = 13 t2p = 0.0769230798 handled = 0 baseView = (nsIView *) 0x8827160 view = (nsIView *) 0x879a978 offset = {x = 0, y = 0} sb = (nsIScrollbar *) 0x0 aEvent = (nsGUIEvent *) 0xbffff7b8 #43 0x40e4c4bd in HandleEvent (aEvent=0xbffff7b8) at /home/dmose/s/mozilla/view/src/nsView.cpp:68 vm = (nsIViewManager *) 0x8398208 aEvent = (nsGUIEvent *) 0xbffff7b8 result = nsEventStatus_eIgnore view = (nsIView *) 0x402f6401 #44 0x404ef95a in nsWidget::DispatchEvent (this=0x8a8f4d0, aEvent=0xbffff7b8, aStatus=@0xbffff774) at /home/dmose/s/mozilla/widget/src/gtk/nsWidget.cpp:1363 this = (nsWidget *) 0x8a8f4d0 aEvent = (nsGUIEvent *) 0xbffff7b8 #45 0x404ef885 in nsWidget::DispatchWindowEvent (this=0x8a8f4d0, event=0xbffff7b8) at /home/dmose/s/mozilla/widget/src/gtk/nsWidget.cpp:1254 this = (nsWidget *) 0x8a8f4d0 status = nsEventStatus_eIgnore #46 0x404edfc1 in nsWidget::OnInput (this=0x8a8f4d0, aEvent=@0xbffff7b8) at /home/dmose/s/mozilla/widget/src/gtk/nsWidget.cpp:92 ret = 0 releaseWidget = 1 widget = (nsWidget *) 0x8a8f4d0 #47 0x404e5f8b in handle_key_press_event (w=0x0, event=0x8253af8, p=0x8a8f4d0) at /home/dmose/s/mozilla/widget/src/gtk/nsWidget.h:188 this = (nsWidget *) 0x8a8f4d0 p = 0x8a8f4d0 kevent = {<nsInputEvent> = {<nsGUIEvent> = {<nsEvent> = { eventStructType = 7 '\a', message = 131, point = {x = 0, y = 89843}, refPoint = {x = 0, y = 0}, time = 801578168, flags = 2}, widget = 0x8a8f4d0, nativeMsg = 0x40673769}, isShift = 0, isControl = 0, isAlt = 0, isMeta = 0}, keyCode = 0, charCode = 32, isChar = 1079030028} win = (nsWindow *) 0x8a8f4d0 #48 0x404e618d in handle_gdk_event (event=0x8253af8, data=0x0) at /home/dmose/s/mozilla/widget/src/gtk/nsGtkEventHandler.cpp:890 window = (nsWindow *) 0x8a8f4d0 current_grab = (GtkWidget *) 0x0 object = (GtkObject *) 0x882bcc8 #49 0x4064d00b in gdk_event_dispatch () from /usr/lib/libgdk-1.2.so.0 No symbol table info available. #50 0x4067abe6 in g_main_dispatch () from /usr/lib/libglib-1.2.so.0 No symbol table info available. #51 0x4067b1a1 in g_main_iterate () from /usr/lib/libglib-1.2.so.0 No symbol table info available. #52 0x4067b341 in g_main_run () from /usr/lib/libglib-1.2.so.0 No symbol table info available. #53 0x405a2209 in gtk_main () from /usr/lib/libgtk-1.2.so.0 No symbol table info available. #54 0x404de25a in nsAppShell::Run (this=0x80a38e8) at /home/dmose/s/mozilla/widget/src/gtk/nsAppShell.cpp:304 this = (nsAppShell *) 0x80a38e8 #55 0x40415e22 in nsAppShellService::Run (this=0x80b9310) at /home/dmose/s/mozilla/xpfe/appshell/src/nsAppShellService.cpp:403 this = (nsAppShellService *) 0x403ceb84 #56 0x804ad20 in main1 (argc=1, argv=0xbffffa74, splashScreen=0x0) at /home/dmose/s/mozilla/xpfe/bootstrap/nsAppRunner.cpp:689 rv = 0 cmdLineArgs = {<nsCOMPtr_base> = { mRawPtr = 0x80b91b0}, <No data fields>} appShell = {<nsCOMPtr_base> = {mRawPtr = 0x80b9310}, <No data fields>} profileMgr = {<nsCOMPtr_base> = { mRawPtr = 0x811cd58}, <No data fields>} currentProfileStr = 0x0 cookieService = {<nsCOMPtr_base> = { mRawPtr = 0x8164798}, <No data fields>} walletService = {<nsCOMPtr_base> = { mRawPtr = 0x824a310}, <No data fields>} #57 0x804b0cf in main (argc=1, argv=0xbffffa74) at /home/dmose/s/mozilla/xpfe/bootstrap/nsAppRunner.cpp:789 rv = 0 splash = (nsISplashScreen *) 0x0 result = 1075264351 clipService = {<nsCOMPtr_base> = { mRawPtr = 0x804fde0}, <No data fields>} (gdb)
Marking crash and M17. Dan, which anchor were you trying to navigate to? I couldn't figure out what steps I should do to reproduce in current builds. The read_this anchor (first in the doc) worked fine.
Keywords: crash
Unfortunately, I no longer recall, and it doesn't seem readily reproducible to me. However, perhaps the stack trace may still provide insight for someone who knows the code...
Moving to m16 due to severity
Target Milestone: --- → M16
I have seen stacks similar to this before though I can't find one right now. Either fixed or still floating in another bug. Going to mark this one worksforme
Status: NEW → RESOLVED
Closed: 25 years ago
Resolution: --- → WORKSFORME
Mass update: changing qacontact to ckritzer@netscape.com
QA Contact: janc → ckritzer
Marking VERIFIED WORKSFORME on: - LinuxRH62 2000-09-08-08-M18 Commercial - Win98 2000-09-08-08-M18 Mozilla - MacOS86 2000-09-07-04-M18 Commercial
Status: RESOLVED → VERIFIED
Component: Event Handling → User events and focus handling
You need to log in before you can comment on or make changes to this bug.