Closed Bug 10703 Opened 25 years ago Closed 25 years ago

Crash loading XML File

Categories

(Core :: XML, defect, P1)

x86
Windows NT
defect

Tracking

()

VERIFIED DUPLICATE of bug 10456

People

(Reporter: harishd, Assigned: rpotts)

References

Details

Attachments

(1 file)

Test case: ---------------------- <?xml version="1.0"?> <?xml-stylesheet type="text/css" href="http://www.fas.harvard.edu/~dbaron/dom/test/one-core-xml/ProcessingInstruc tion_style" ?> <?xml-stylesheet type="text/css" href="http://www.fas.harvard.edu/~dbaron/dom/test/one-core-xml/ProcessingInstruc tion_style2" ?> <?xml-stylesheet type='text/css' href='http://www.fas.harvard.edu/~dbaron/dom/test/base.css' ?> <?xml-stylesheet type="text/css" href="http://www.fas.harvard.edu/~dbaron/dom/test/basexml.css" ?> <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/strict.dtd"> <!-- The contents of this file are subject to the Netscape Public License Version 1.1 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at http://www.mozilla.org/NPL/ Software distributed under the License is distributed on an "AS IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or implied. See the License for the specific language governing rights and limitations under the License. The Initial Developer of the Original Code is Netscape Communications Corporation. Portions created by Netscape are Copyright (C) 1998-1999 Netscape Communications Corporation. All Rights Reserved. Contributor(s): ______________________________________. --> <html xmlns="http://www.w3.org/TR/REC-html40" lang="en-US"> <head> <title>DOM Test Suite: Interface ProcessingInstruction</title> <script type="text/javascript"><![CDATA[ this_is_an_error(); ]]></script> </head> <body> Intentionally left nearly blank. </body></html> Stack Trace: --------------- nsDebug::Assertion(char * 0x01cfd7a4, char * 0x01cfd72c, char * 0x01cfd6f0, int 486) line 176 + 13 bytes nsGenericHTMLElement::SetAttribute(int 2, nsIAtom * 0x021ad570, const nsString & {"preserve"}, int 0) line 486 + 44 bytes nsHTMLScriptElement::SetAttribute(nsHTMLScriptElement * const 0x021ad3bc, int 2, nsIAtom * 0x021ad570, const nsString & {"preserve"}, int 0) line 76 + 30 bytes nsXMLContentSink::AddAttributes(const nsIParserNode & {...}, nsIContent * 0x021ad3bc, int 1) line 571 nsXMLContentSink::OpenContainer(nsXMLContentSink * const 0x02162f80, const nsIParserNode & {...}) line 719 + 20 bytes CWellFormedDTD::HandleToken(CWellFormedDTD * const 0x02154120, CToken * 0x011a6f50, nsIParser * 0x01482d80) line 530 + 22 bytes CWellFormedDTD::BuildModel(CWellFormedDTD * const 0x02154120, nsIParser * 0x01482d80, nsITokenizer * 0x0105d830, nsITokenObserver * 0x00000000, nsIContentSink * 0x02162f80) line 253 + 20 bytes nsParser::BuildModel() line 940 + 34 bytes nsParser::ResumeParse(nsIDTD * 0x00000000, int 0) line 885 + 11 bytes nsParser::EnableParser(int 1) line 619 + 15 bytes CSSLoaderImpl::Cleanup(URLKey & {...}, SheetLoadData * 0x0212b810) line 640 CSSLoaderImpl::SheetComplete(nsICSSStyleSheet * 0x00000000, SheetLoadData * 0x0212b810) line 716 CSSLoaderImpl::ParseSheet(nsIUnicharInputStream * 0x02163cf0, SheetLoadData * 0x0212b810, int & 1, nsICSSStyleSheet * & 0x021639c0) line 751 CSSLoaderImpl::DidLoadStyle(nsIUnicharStreamLoader * 0x0212b8b0, nsString & {"/* This entire file *may* be a hack */ div#output p { display: block; /* XXX Work around Mozilla XML ?Bug? */ } [class="pa"}, SheetLoadData * 0x0212b810, unsigned int 0) line 784 + 24 bytes DoneLoadingStyle(nsIUnicharStreamLoader * 0x0212b8b0, nsString & {"/* This entire file *may* be a hack */ div#output p { display: block; /* XXX Work around Mozilla XML ?Bug? */ } [class="pa"}, void * 0x0212b810, unsigned int 0) line 588 nsUnicharStreamLoader::OnStopRequest(nsUnicharStreamLoader * const 0x0212b8b4, nsIURI * 0x0212b120, unsigned int 0, unsigned short * 0x0211b4c0) line 156 + 31 bytes nsDocumentBindInfo::OnStopRequest(nsDocumentBindInfo * const 0x0212bb90, nsIURI * 0x0212b120, unsigned int 0, unsigned short * 0x0211b4c0) line 2149 + 30 bytes OnStopRequestProxyEvent::HandleEvent(OnStopRequestProxyEvent * const 0x0211b470) line 593 + 45 bytes StreamListenerProxyEvent::HandlePLEvent(PLEvent * 0x0211b474) line 473 + 12 bytes PL_HandleEvent(PLEvent * 0x0211b474) line 509 + 10 bytes PL_ProcessPendingEvents(PLEventQueue * 0x00f78470) line 470 + 9 bytes _md_EventReceiverProc(void * 0x014e09f4, unsigned int 49313, unsigned int 0, long 16221296) line 932 + 9 bytes USER32! 77e71250() -------------------------------------------------------------------------- FYI: Checked with jul 26th build
Status: NEW → ASSIGNED
Summary: Crash..on loading xml file.. → Crash on loading xml file...
Target Milestone: M9
Setting milestone to M9 and accepting bug...
Blocks: 10593
Attached file bug10703.xml (deleted) —
Assignee: nisheeth → warren
Severity: normal → critical
Status: ASSIGNED → NEW
Priority: P3 → P1
Summary: Crash on loading xml file... → Assert in nsHTTPChannel::OpenInputStream()
I've created an attachment for the test case that Harish copied to this bug report. I'm not making it to the crash site that Harish posted. Instead I end up with an error condition in Necko that asserts with the following call stack: NTDLL! 77f76148() nsDebug::Error(char * 0x0a510d28, char * 0x0a510cf0, int 168) line 204 + 13 bytes nsHTTPChannel::OpenInputStream(nsHTTPChannel * const 0x014e15c0, unsigned int 0, int -1, nsIInputStream * * 0x0012fbc4) line 168 + 21 bytes NS_OpenURI(nsIInputStream * * 0x0012fc60, nsIURI * 0x014e1e80) line 79 + 20 bytes nsExpatTokenizer::OpenInputStream(const nsString & {...}, const nsString & {...}, nsIInputStream * * 0x0012fc60, nsString * 0x0012fc88) line 558 + 13 bytes nsExpatTokenizer::HandleExternalEntityRef(void * 0x0a116b88, char * 0x00000000, char * 0x0a118f38, char * 0x0a118ff2, char * 0x0a118fb0) line 630 + 21 bytes doProlog(void * 0x0a116b88, const encoding * 0x004d3878, char * 0x0a11838c, char * 0x0a118bae, int 17, char * 0x0a11838e, char * * 0x0012fd88) line 2248 + 36 bytes prologProcessor(void * 0x0a116b88, char * 0x0a117ee8, char * 0x0a118bae, char * * 0x0012fd88) line 2132 + 36 bytes prologInitProcessor(void * 0x0a116b88, char * 0x0a117ee8, char * 0x0a118bae, char * * 0x0012fd88) line 2121 + 21 bytes XML_Parse(void * 0x0a116b88, char * 0x0a117ee8, int 3270, int 0) line 852 + 40 bytes nsExpatTokenizer::ParseXMLBuffer(char * 0x0a117ee8, unsigned int 3270, int 0) line 286 + 24 bytes nsExpatTokenizer::ConsumeToken(nsScanner & {...}) line 329 + 18 bytes nsParser::Tokenize(int 0) line 1264 + 21 bytes nsParser::ResumeParse(nsIDTD * 0x00000000, int 0) line 885 + 12 bytes nsParser::OnDataAvailable(nsParser * const 0x0a107d8c, nsIChannel * 0x013bec40, nsISupports * 0x00000000, nsIInputStream * 0x013c2ee0, unsigned int 0, unsigned int 1635) line 1168 + 19 bytes nsDocumentBindInfo::OnDataAvailable(nsDocumentBindInfo * const 0x013b9cd0, nsIChannel * 0x013bec40, nsISupports * 0x00000000, nsIInputStream * 0x013c2ee0, unsigned int 0, unsigned int 1635) line 2046 + 32 bytes nsOnDataAvailableEvent::HandleEvent(nsOnDataAvailableEvent * const 0x013b9520) line 350 nsStreamListenerEvent::HandlePLEvent(PLEvent * 0x013b9524) line 149 + 12 bytes PL_HandleEvent(PLEvent * 0x013b9524) line 509 + 10 bytes PL_ProcessPendingEvents(PLEventQueue * 0x0134ca70) line 470 + 9 bytes _md_EventReceiverProc(void * 0x01ee0450, unsigned int 49382, unsigned int 0, long 20236912) line 932 + 9 bytes USER32! 77e71250() nsHTTPChannel::OpenInputStream() is finding that m_pResponse is null and it doesn't like that. I'm assigning this bug to warren and ccing gagan, rpotts. I'll track this bug and work on fixing the original crash after this error is fixed.
Status: NEW → RESOLVED
Closed: 25 years ago
Resolution: --- → DUPLICATE
Known duplicate of 10790. Same problem- calling OnStopRequest without an OnStartRequest. Marking duplicate. *** This bug has been marked as a duplicate of 10790 ***
Status: RESOLVED → REOPENED
Resolution: DUPLICATE → ---
Assignee: warren → nisheeth
Status: REOPENED → NEW
I need to keep this bug open so that I can fix the original problem once bug 10790 is resolved. I'm reopening this bug, assigning it to myself, and marking it dependent on 10790.
Status: NEW → ASSIGNED
Depends on: 10790
Summary: Assert in nsHTTPChannel::OpenInputStream() → Crash loading XML File
Whiteboard: Blocked on 10790
Assignee: nisheeth → rpotts
Status: ASSIGNED → NEW
Whiteboard: Blocked on 10790
Rick, it seems that bug 10790's fix did not fix the crash in nsHTTPChannel::OpenInputStream(). I just ran a fresh build on NT, loaded up the attached XML file and crashed. I'm assigning this bug to you for further investigation. Once this crash is resolved, I'll work on fixing the earlier crash reported by Harish.
*** Bug 11832 has been marked as a duplicate of this bug. ***
Status: NEW → RESOLVED
Closed: 25 years ago25 years ago
Resolution: --- → DUPLICATE
It looks like the *real* problem is that HTTP channel does not implement OpenImputStream(...) yet. I'm marking this bug a dup of bug #10456... *** This bug has been marked as a duplicate of 10456 ***
Status: RESOLVED → VERIFIED
Cool, ain't fixing that til M10. Marking Verified/Dup
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: