MASTER firefox crashed [@nsFormFillController::OnTextEntered] [@nsAutoCompleteController::EnterMatch] ... [@nsFormFillController::KeyPress at #7]

[Huw]

Binary package hint: firefox

... [edgy] firefox crash [@ nsFormFillController::OnTextEntered]

From the Attached Crash Report:
Distro Release: Ubuntu 6.10
System Arch: i686
Package (version): firefox (2.0.0.2+0dfsg-0ubuntu0.6.10)
Source Package: firefox

Original Description:

Absolutely standard phpbb (looks like it was on a Debian server in fact). No Flash etc anywhere on the page I was on. FX suddenly crashed as I was typing a post for no discernible reason.

I'm nowhere near technical enough to know what else to put in this report but will answer questions. Ubuntu asked me to attach a file, which I have done.

Extracted from the retraced stacktrace:
(http://launchpadlibrarian.net/6880820/%3Cfdopen%3E)
...
#3 <signal handler called>
#4 nsFormFillController::OnTextEntered (this=0x88c7170, _retval=0xbff53...
#5 nsAutoCompleteController::EnterMatch (this=0x88c71c8) at nsAutoCompl...
#6 nsAutoCompleteController::HandleEnter (this=0x88c71c8, _retval=0xbff...
#7 nsFormFillController::KeyPress (this=0x88c7170, aEvent=0xb342cec0)
#8 nsEventListenerManager::HandleEvent (this=0x86ea6b8, aPresContext=0x...
#9 nsXULElement::HandleDOMEvent (this=0x86ea308, aPresContext=0xb00331e...
#10 nsXULElement::HandleChromeEvent (this=0x86ea308, aPresContext=0xb003...
#11 nsGlobalWindow::HandleDOMEvent (this=0xb04987a8, aPresContext=0xb003...
#12 nsDocument::HandleDOMEvent (this=0xaffbc2a0, aPresContext=0xb00331e0...
...

[Huw (huw-synapticsilence)]

Attachment.

[Eddie M. (eddiemartinez)]

Core was generated by `/usr/lib/firefox/firefox-bin'.
 Program terminated with signal 11, Segmentation fault.
 #0 0xffffe410 in __kernel_vsyscall ()
 Dump of assembler code from 0xffffe410 to 0xffffe430:

Then some more stuff that doesn't make sense to me. Could that be where Fx crashed?

[Freddy Martinez (freddymartinez9)]

Eddie, please let one of us trace the crash report.

[Hilario J. Montoliu (hjmf) (hmontoliu)]

Taking for retrace

[Hilario J. Montoliu (hjmf) (hmontoliu)]

Retrace done:
...
 #4 nsFormFillController::OnTextEntered (this=0x88c7170, _retval=0xbff53fec) at nsFormFillController.cpp:480
  domDoc = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}
  doc = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}
  event = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}
  privateEvent = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}
  targ = {<nsCOMPtr_base> = {mRawPtr = 0xbff53ef8}, <No data fields>}
  defaultActionEnabled = 0
 #5 0xb67cea30 in nsAutoCompleteController::EnterMatch (this=0x88c71c8) at nsAutoCompleteController.cpp:1117
  popup = {<nsCOMPtr_base> = {mRawPtr = 0x8738748}, <No data fields>}
 #40 0xb6891940 in key_press_event_cb (widget=0x82b0278, event=0x8080230) at nsWindow.cpp:4053
 #41 0xb7bfdb00 in _gtk_marshal_BOOLEAN__BOXED (closure=0x83b30a8, return_value=0xbff55b70, n_param_values=2,
 #42 0xb768379b in IA__g_closure_invoke (closure=0x83b30a8, return_value=0xbff55b70, n_param_values=2,
 #43 0xb7693b93 in signal_emit_unlocked_R (node=0x812e7f0, detail=0, instance=0x82b0278,
 #44 0xb7694e7f in IA__g_signal_emit_valist (instance=0x82b0278, signal_id=36, detail=0,
 #45 0xb7695279 in IA__g_signal_emit (instance=0x82b0278, signal_id=36, detail=0) at gsignal.c:2243
 #46 0xb7d115f8 in gtk_widget_event_internal (widget=0x82b0278, event=0x8080230) at gtkwidget.c:3911
 #47 0xb7d21677 in IA__gtk_window_propagate_key_event (window=0x8150f38, event=0x8080230) at gtkwindow.c:4671
 #48 0xb7d246dc in gtk_window_key_press_event (widget=0x8150f38, event=0x8080230) at gtkwindow.c:4701
 #49 0xb7bfdb00 in _gtk_marshal_BOOLEAN__BOXED (closure=0x812e700, return_value=0xbff56090, n_param_values=2,
...

Tagging as mt-confirm for further processing

[Hilario J. Montoliu (hjmf) (hmontoliu)]

Seen before

[Hilario J. Montoliu (hjmf) (hmontoliu)]

Yes definitely is the same crash that the one on bug #93517 which happened on feisty. Marking that bug as master and this one as duplicate.

[Hilario J. Montoliu (hjmf) (hmontoliu)]

Probably bugs #93517 and #94184 are the same.

93517 - MASTER: Firefox Crash [@nsFormFillController::OnTextEntered] [@nsAutoCompleteController::EnterMatch] ... [@nsAutoCompleteController::HandleTab at #7]
94184 - MASTER firefox crashed [@nsFormFillController::OnTextEntered] [@nsAutoCompleteController::EnterMatch] ... [@nsFormFillController::KeyPress at #7]

[Alexander Sack (asac)]

no dupes for quite some time. appears to be fixed.