[GUSTY] firefox crashed [@nsTextFrame::GetPosition] [@nsTextFrame::GetContentAndOffsetsFromPoint] [@nsDOMUIEvent::GetRangeParent]

[Janek]

Binary package hint: firefox

... [Gutsy] Firefox crashs with Segmentation Fault on some websites

My firefox crashs with a a segmentation fault on many pages - but not on a specific webpage, everytime on different ones.
I attached by GDB output.

Extracted from symbolized stacktrace:
(file: http://launchpadlibrarian.net/9057691/gdb-firefox.log)
...
#0 nsTextFrame::GetPosition (this=0x96d30bc,
#1 nsTextFrame::GetContentAndOffsetsFromPoint (this=0x96d30bc,
#2 nsDOMUIEvent::GetRangeParent (this=0x9bc5a5c,
#3 XPTC_InvokeByIndex () at xptcinvoke_gcc_x86_unix.cpp:50
#4 XPCWrappedNative::CallMethod (ccx=@0xbfe13ccc,
#5 XPC_WN_GetterSetter (cx=0x8a79610, obj=0x96c3d58, argc=0,
#6 js_Invoke (cx=0x8a79610, argc=0, flags=2) at jsinterp.c:1375
#7 js_InternalInvoke (cx=0x8a79610, obj=0x96c3d58,
#8 js_InternalGetOrSet (cx=0x8a79610, obj=0x96c3d58,
#9 js_NativeGet (cx=0x8a79610, obj=0x96c3d58, pobj=0x833bd58,
...

[Janek (thefoxx)]

Sorry, I forgot to add the backtrace. Now again the output with the backtrace.
Additional info: I started firefox with the "resume session" function and marked some text to get the crash. But sometimes it's also when I start a new Firefox session and open the first webpage. You should also know that I tried it also without any extensions and a clear profile. Same problem.

[Hilario J. Montoliu (hjmf) (hmontoliu)]

Thank you Janek Thomaschewski for your report

In case you determine a test case (with detailed examples) please include it to this report.

Can you indicate which version of firefox are you using?

[Janek (thefoxx)]

Okay, here my results:

The crash is on very often on DirectoryListing-pages like from Apache or mod_svn. And: Firefox crashs when it opens a simple page with italic content (but it's not, that every page with italic text causes firefox to crash!).

Example 1 (Directory Listing): http://janek.php4you.de/files/bugs/firefox_gutsy_crash
Example 2 (Italic Text): http://janek.php4you.de/files/bugs/firefox_gutsy_crash/kill_gutsy_firefox.html

[Janek (thefoxx)]

Sorry I forgot my Firefox version:

$ apt-cache show firefox
Package: firefox
Priority: optional
Section: web
Installed-Size: 26000
Maintainer: Alexander Sack <email address hidden>
Architecture: i386
Version: 2.0.0.6+2-0ubuntu3
...
Conflicts: libnss3
Filename: pool/main/f/firefox/firefox_2.0.0.6+2-0ubuntu3_i386.deb
Size: 9175442
MD5sum: 51efcc672b6dcc7c39e534e071de680c
SHA1: 584b13f2240e8c1e2bb603ea7c5f2edebcc004e0
SHA256: 0cdb7bd8d05293f29ef59c5a98e91ad02fec51dd74ef914d0eb3da5c9f3b2ec0

Should be the latest version from gutsy repo. I added all universe, multiverse etc. repos.

[Alexander Sack (asac)]

On Thu, Aug 30, 2007 at 07:17:04PM -0000, Janek Thomaschewski wrote:
> Okay, here my results:
>
> The crash is on very often on DirectoryListing-pages like from Apache or
> mod_svn. And: Firefox crashs when it opens a simple page with italic
> content (but it's not, that every page with italic text causes firefox
> to crash!).
>
> Example 1 (Directory Listing): http://janek.php4you.de/files/bugs/firefox_gutsy_crash
> Example 2 (Italic Text): http://janek.php4you.de/files/bugs/firefox_gutsy_crash/kill_gutsy_firefox.html
>

Please attach n strace -f firefox 2>&1 | tee /tmp/firefox.strace.log
as well ...

Thanks,

 - Alexander

[Janek (thefoxx)]

Okay, here the strace for "$ strace -f firefox "/tmp/firefox_test.html" 2>&1 | tee /tmp/firefox.strace.log"
firefox_test.html contains "<i>hello world</i>".

Janek

[Janek (thefoxx)]

Do you work on it? But I must say that I don't have this bug anymore on Gutsy Stable. So I think it can be closed.

Janek

[Hilario J. Montoliu (hjmf) (hmontoliu)]

We have not received any duplicates for some time. Thus, this crash was likely due to some unique plugin extension combination or has been fixed in the meantime. Please, reopen it at any time if you have more related info.

Thanks for your contribution. Don't hesitate to submit new crashes,

H. Montoliu