From Bugzilla Helper: User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:0.9.7+) Gecko/20011231 BuildID: 2001123113 Long standing bug. On the www.isdn.cz site clicking any link (ie. news article) causes Mozilla to crash. Even exiting the site often causes a crash. This bug exists for very long time -- I tried many builds and it affects all of them. Reproducible: Always Steps to Reproduce: 1.Just go to the link indicated; alternatively go to www.isdn.cz and click any link to "article" (in the main area of the site) Actual Results: Mozilla crashes immediately Expected Results: Render the page correctly and without crashing

Crash on Linux 2001121921, talkback TB1135117Y.

wfm using build 2002010103 on Win2k. Stephen, can you retreive Talkback data please (TB1135117Y) ?

WFM 2002010103/WinNT4

This site either freezes or crahes me: Mozilla 0.9.7 (2001122108) Linux

Sorry, I'm not sure why there's no data attached to that Talkback report. Please cc me if you get another crash/ID. Thanks.

WFM 2002010203/Win98 SR2

Yet another talkback: TB1159266M, Linux 2002010121. I went from the article cid=3475 back to the main page and to another article before the crash occurred.

rendering. ->compositor. (talkback database is a bit behind. here's the 2 stack traces) libX11.so.6 + 0x2c876 (0x403b7876) libgdk-1.2.so.0 + 0x24574 (0x40342574) nsGCCache::GetGC() nsRenderingContextGTK::UpdateGC() nsRenderingContextGTK::FillRect() nsRenderingContextGTK::FillRect() nsCSSRendering::PaintBackground() nsHTMLContainerFrame::Paint() CanvasFrame::Paint() PresShell::Paint() nsView::Paint() nsViewManager::RenderDisplayListElement() nsViewManager::RenderViews() nsViewManager::Refresh() nsViewManager::DispatchEvent() HandleEvent() nsWidget::DispatchEvent() nsWidget::DispatchWindowEvent() nsWindow::DoPaint() nsWindow::Update() nsWindow::UpdateIdle() libglib-1.2.so.0 + 0x112f2 (0x403652f2) libglib-1.2.so.0 + 0x102d9 (0x403642d9) libglib-1.2.so.0 + 0x108e3 (0x403648e3) libglib-1.2.so.0 + 0x10a7c (0x40364a7c) libgtk-1.2.so.0 + 0x8dd97 (0x40287d97) nsAppShell::Run() nsAppShellService::Run() main1() main() libc.so.6 + 0x18a42 (0x40461a42) and nsCOMPtr_base::~nsCOMPtr_base() imgContainer::DoComposite() imgContainer::Notify() nsTimerImpl::Process() handleMyEvent() PL_HandleEvent() PL_ProcessPendingEvents() nsEventQueueImpl::ProcessPendingEvents() event_processor_callback() our_gdk_io_invoke() libglib-1.2.so.0 + 0xec10 (0x40367c10) libglib-1.2.so.0 + 0x102d9 (0x403692d9) libglib-1.2.so.0 + 0x108e3 (0x403698e3) libglib-1.2.so.0 + 0x10a7c (0x40369a7c) libgtk-1.2.so.0 + 0x8dd97 (0x4028cd97) nsAppShell::Run() nsAppShellService::Run() main1() main() libc.so.6 + 0x18a42 (0x40466a42)

*** Bug 118767 has been marked as a duplicate of this bug. ***

I was reproducing the same crash in bug 118767. Attaching my stacks.

This warning comes out on the console most of the time when browsing http://www.isdn.cz: WARNING: NS_ENSURE_TRUE(NS_SUCCEEDED(rv)) failed, file nsHTMLDocument.cpp, line 395 rv contains the value 3253927938 (dec). Generally the browser crashes after that in a random place it seems like. The attached file contains a (small) subset of the code from www.isdn.cz which triggers the NS_ENSURE_TRUE(NS_SUCCEEDED(rv)) warning. I can't get the browser to crash on this attachment though. Could it be a pointer overwritten somewhere considering the crashes in very different places?

Marking nsbeta1+

Kevin: There's another bug on "random" crashes experience at www.isdn.cs - bug 92577 . All the crashes show the libc.so.6 stack signature, but the stack traces are all different. Is this bug perhaps a dup of that one?

*** This bug has been marked as a duplicate of 92577 ***