From Bugzilla Helper: User-Agent: Mozilla/4.72 [en] (X11; U; Linux 2.2.14 i686) BuildID: 2000042009 mozilla crashes when returning search results from deja.com Reproducible: Always Steps to Reproduce: 1. go to above url 2. enter this in search : kernel keyboard timeout[2] or kernel: keyboard timeout[2] (does it on both) 3. select english as language and hit submit Actual Results: browser segfaults gShellCounter: 117 gShellCounter: 118 .//run-mozilla.sh: line 29: 4510 Segmentation fault $prog ${1+"$@"} Expected Results: nice page of search results

confirming this bug; I see this on Mac with a debug build from today. Changing to All platforms/os Looks like I am crashing while removing a blockframe. I see nsBlockFrame::Destroy followed by lots of other Delete/Destroy methods and finally died in nsBlockFrame::Destroy

Rod, the crash is when deleting the lines in a combobox frame. Has anything changed that would cause the frame in line box to be getting deleted twice? Cc'ing Nisheeth in case this is related to the form element changes he made to use the hash table?

*** Bug 36608 has been marked as a duplicate of this bug. ***

Adding troy and buster. I think deja news is generating some pretty bad content and I think I have distilled it down to this reduced testcase that crashes. The issue issue is that there is a table in a table and there are several things that if they were removed makes the test work. Troy and Buster please review the testcase, if might help give Chris some insight or maybe he'll know what is wrong anyway. I am not sure why it is crashing in the select from, but my guess is that the content or frame model here is pretty screwed up. We might want Eric K. to taklk to deja to have them generate better html after we fix the bug.

I found the problem, it is in combobox code that will soon be removed/fixed

clearing cc'list setting dependency, because the code that fixes 33515 fixes this

Reassigning to Rod.

*** Bug 36982 has been marked as a duplicate of this bug. ***

*** Bug 37261 has been marked as a duplicate of this bug. ***

*** Bug 37310 has been marked as a duplicate of this bug. ***

*** Bug 37493 has been marked as a duplicate of this bug. ***

Bug 37493 contains three testcases. Please verify that all of them do not crash any more once this bug is fixed, otherwise please reopen it. Thanks. By the way, bug 37310 (a dup of this one) is [dogfood+].

I just checked out Bug 37310 and it only contains one testcase. Maybe you were thinking of a different bug?

*** Bug 37619 has been marked as a duplicate of this bug. ***

Bug 37619 is about http://www.city.vancouver.bc.ca crashing. Please verify this also. rod@netscape.com: The three testcases are in bug 37493. Bug 37310 only matters because of [dogfood+]. CC'ing myself.

Yes, all the testcases work. Everything looks good, now if I could only check it in..... Waiting for all comboboxes to be removed from the UI.

adding dependency

*** Bug 38003 has been marked as a duplicate of this bug. ***

*** Bug 38003 has been marked as a duplicate of this bug. ***

i'm going to post this here since it's the first time i've been able to use deja successfully. the pages load, and i get results, but now the html that is being displayed is incorrectly rendered. the "next message" link is completely missing, along with the save this thread links

*** Bug 37383 has been marked as a duplicate of this bug. ***

*** Bug 38046 has been marked as a duplicate of this bug. ***

*** Bug 38220 has been marked as a duplicate of this bug. ***

*** Bug 38263 has been marked as a duplicate of this bug. ***

*** Bug 38328 has been marked as a duplicate of this bug. ***

*** Bug 38391 has been marked as a duplicate of this bug. ***

*** Bug 38391 has been marked as a duplicate of this bug. ***

*** Bug 38385 has been marked as a duplicate of this bug. ***

It occurred to us that we can check the document and see if it is a XUL document and turn on/off the "GoodToGo" flag appropriately. That is after making the flag a member variable. I will check this in when the tree opens.

fixed

*** Bug 38649 has been marked as a duplicate of this bug. ***

With the May 22nd builds (Mac, Win 98 ,and Linux).

With the May 22nd builds (Mac, Win 98 ,and Linux) this problem is fixed.