261207 - Downloading ffdshow-20040828[www.free-codecs.com].rar from the url above causes Mozilla to crash [@ ntdll.dll - nsTextNode::`scalar deleting destructor' ]

Reporter

Description

•

20 years ago

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.3) Gecko/20040910
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.3) Gecko/20040910

The browser starts to show the rar archive as text while it's using >90% CPU.


Reproducible: Always
Steps to Reproduce:
Open the URL http://www.free-codecs.com/download_soft.php?d=45&s=50


Expected Results:  
The file should be passed to the Download Manager

Nathan Strom

Comment 1

•

20 years ago

This is a tech evangelism issue; specifically, the web server at
www.free-codecs.com is serving the RAR file with a MIME Content-Type of
text/plain instead of a binary type like application/x-rar-compressed or
application/octet-stream.

$ telnet www.free-codecs.com 80 | more

Trying 67.19.235.68...
Connected to www.free-codecs.com.
Escape character is '^]'.
GET /files/ffdshow-20040828[www.free-codecs.com].rar HTTP/1.1
Host: www.free-codecs.com
Referer: http://www.free-codecs.com/download_soft.php?d=45&s=50

HTTP/1.1 200 OK
Date: Thu, 23 Sep 2004 15:50:52 GMT
Server: Apache/1.3.31 (Unix) mod_gzip/1.3.26.1a mod_auth_passthrough/1.8
mod_log_bytes/1.2 mod_bwlimited/1.4 PHP/4.3.8 FrontPage/5.0.2.2634a
mod_ssl/2.8.19 OpenSSL/0.9.7a
Last-Modified: Thu, 02 Sep 2004 14:07:17 GMT
ETag: "20012-1f82ef-41372915"
Accept-Ranges: bytes
Content-Length: 2065135
Content-Type: text/plain

Christian :Biesinger (don't email me, ping me on IRC)

Comment 2

•

20 years ago

err, crashes and hangs are NEVER evangelism bugs

Keywords: hang

Darin Fisher

Comment 3

•

20 years ago

Looks like our maybe-text/plain sniffer is not catching this one.

I can repro the bug.

Over to File Handling even though the patch will likely involve unknown content
decoder changes.

Assignee: darin → file-handling

Status: UNCONFIRMED → NEW

Component: Networking: HTTP → File Handling

Ever confirmed: true

QA Contact: core.networking.http → ian

Boris Zbarsky [:bzbarsky]

Comment 4

•

20 years ago

It's not catching it on purpose.  The server sends:

  Content-Type: text/plain; charset=UTF-8

not the default Content-Type header.  So this server has been explicitly
configured, not just left in the default misconfigured state...

Darin Fisher

Comment 5

•

20 years ago

so, the question then is: should we attempt to validate the charset?  if not,
then this can only be an evang bug, right?

timeless

Updated

•

20 years ago

Keywords: crash, talkbackid

Whiteboard: tb951804m

timeless

Comment 6

•

20 years ago

nope. question is, when can we get access to the talkback database to find out
why we crash :)

Christian :Biesinger (don't email me, ping me on IRC)

Comment 7

•

20 years ago

darin: this is a crash! this can not be evangelism. (although comment 0 sounds
like it's really a hang)

Boris Zbarsky [:bzbarsky]

Comment 8

•

20 years ago

I don't even get a hang per se, on Linux, (just very slow rendering -- 5 mins in
a debug build).  Given that we have to scan all the hundreds of fonts I have for
each hundreds of thousands of invalid chars on that page, that's not completely
surprising.

Darin, the validation thing may not be a bad idea...  File a bug on that, I guess?

Darin Fisher

Comment 9

•

20 years ago

(In reply to comment #7)
> darin: this is a crash! this can not be evangelism. (although comment 0 sounds
> like it's really a hang)

oh, i didn't realize this was a crash.  the original report and my own
experience doesn't confirm any crash, but if someone has a talkback id, then i'm
not going to argue with that.  note: the talkback id was added to the bug report
after my comment.

timeless: can you provide more info about the crash that you apparently
observed?  or how did you get the talkback id for this?

Darin Fisher

Comment 10

•

20 years ago

bz: ok, i filed bug 261263.

timeless

Comment 11

•

20 years ago

darin: i stuck it in the status whiteboard. i can't offer anything else, my
debug build doesn't crash (nor does neil's), and talkback is about 5 days
behind. if we're lucky we'll be able to get the stack when i get back from la on
monday.

Adam Hauner

Comment 12

•

20 years ago

TB951804M:
ntdll.dll + 0x11e58 (0x7c911e58)
ntdll.dll + 0x10d5c (0x7c910d5c)
msvcrt.dll + 0x1c2de (0x77c2c2de)
??3@YAXPAX@Z
nsTextNode::`scalar deleting destructor'
nsGenericDOMDataNode::Release 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/content/base/src/nsGenericDOMDataNode.cpp,
line 82]
nsAttrAndChildArray::Clear 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/content/base/src/nsAttrAndChildArray.cpp,
line 519]
nsAttrAndChildArray::~nsAttrAndChildArray 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/content/base/src/nsAttrAndChildArray.cpp,
line 77]
nsGenericElement::~nsGenericElement 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/content/base/src/nsGenericElement.cpp]
nsHTMLSpanElement::`scalar deleting destructor'
nsHTMLIFrameElement::Release 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/content/html/content/src/nsHTMLIFrameElement.cpp,
line 100]
nsAttrAndChildArray::Clear 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/content/base/src/nsAttrAndChildArray.cpp,
line 519]
nsAttrAndChildArray::~nsAttrAndChildArray 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/content/base/src/nsAttrAndChildArray.cpp,
line 77]
nsGenericElement::~nsGenericElement 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/content/base/src/nsGenericElement.cpp]
nsHTMLTableCellElement::`scalar deleting destructor'
nsHTMLIFrameElement::Release 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/content/html/content/src/nsHTMLIFrameElement.cpp,
line 100]
nsAttrAndChildArray::Clear 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/content/base/src/nsAttrAndChildArray.cpp,
line 519]
nsAttrAndChildArray::~nsAttrAndChildArray 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/content/base/src/nsAttrAndChildArray.cpp,
line 77]
nsGenericElement::~nsGenericElement 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/content/base/src/nsGenericElement.cpp]
nsHTMLTableRowElement::`scalar deleting destructor'
nsHTMLIFrameElement::Release 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/content/html/content/src/nsHTMLIFrameElement.cpp,
line 100]
nsAttrAndChildArray::Clear 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/content/base/src/nsAttrAndChildArray.cpp,
line 519]
nsAttrAndChildArray::~nsAttrAndChildArray 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/content/base/src/nsAttrAndChildArray.cpp,
line 77]
nsGenericElement::~nsGenericElement 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/content/base/src/nsGenericElement.cpp]
nsHTMLTableSectionElement::`scalar deleting destructor'
nsHTMLIFrameElement::Release 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/content/html/content/src/nsHTMLIFrameElement.cpp,
line 100]
nsAttrAndChildArray::Clear 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/content/base/src/nsAttrAndChildArray.cpp,
line 519]
nsAttrAndChildArray::~nsAttrAndChildArray 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/content/base/src/nsAttrAndChildArray.cpp,
line 77]
nsGenericElement::~nsGenericElement 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/content/base/src/nsGenericElement.cpp]
nsHTMLTableElement::`scalar deleting destructor'
nsHTMLIFrameElement::Release 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/content/html/content/src/nsHTMLIFrameElement.cpp,
line 100]
nsAttrAndChildArray::Clear 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/content/base/src/nsAttrAndChildArray.cpp,
line 519]
nsAttrAndChildArray::~nsAttrAndChildArray 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/content/base/src/nsAttrAndChildArray.cpp,
line 77]
nsGenericElement::~nsGenericElement 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/content/base/src/nsGenericElement.cpp]
nsHTMLFormElement::`scalar deleting destructor'
nsHTMLIFrameElement::Release 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/content/html/content/src/nsHTMLIFrameElement.cpp,
line 100]
nsAttrAndChildArray::Clear 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/content/base/src/nsAttrAndChildArray.cpp,
line 519]
nsAttrAndChildArray::~nsAttrAndChildArray 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/content/base/src/nsAttrAndChildArray.cpp,
line 77]
nsGenericElement::~nsGenericElement 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/content/base/src/nsGenericElement.cpp]
nsHTMLBodyElement::`scalar deleting destructor'
nsHTMLIFrameElement::Release 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/content/html/content/src/nsHTMLIFrameElement.cpp,
line 100]
nsAttrAndChildArray::Clear 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/content/base/src/nsAttrAndChildArray.cpp,
line 519]
nsAttrAndChildArray::~nsAttrAndChildArray 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/content/base/src/nsAttrAndChildArray.cpp,
line 77]
nsGenericElement::~nsGenericElement 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/content/base/src/nsGenericElement.cpp]
nsHTMLHtmlElement::`scalar deleting destructor'
nsHTMLIFrameElement::Release 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/content/html/content/src/nsHTMLIFrameElement.cpp,
line 100]
ReleaseObjects 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/xpcom/ds/nsCOMArray.cpp,
line 153]
nsVoidArray::EnumerateForwards 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/xpcom/ds/nsVoidArray.cpp,
line 880]
nsCOMArray_base::Clear 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/xpcom/ds/nsCOMArray.cpp,
line 160]
nsDocument::~nsDocument 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/content/base/src/nsDocument.cpp,
line 573]
nsHTMLDocument::`scalar deleting destructor'
nsDocument::Release 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/content/base/src/nsDocument.cpp,
line 678]
nsCOMPtr_base::~nsCOMPtr_base 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/xpcom/glue/nsCOMPtr.cpp,
line 82]
nsEventStateManager::~nsEventStateManager 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/content/events/src/nsEventStateManager.cpp,
line 305]
nsEventStateManager::`scalar deleting destructor'
nsEventStateManager::Release 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/content/events/src/nsEventStateManager.cpp,
line 390]
nsPresContext::~nsPresContext 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/base/src/nsPresContext.cpp,
line 220]
nsPresContext::Release 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/base/src/nsPresContext.cpp,
line 253]
nsCOMPtr_base::~nsCOMPtr_base 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/xpcom/glue/nsCOMPtr.cpp,
line 82]
nsDOMEvent::~nsDOMEvent 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/content/events/src/nsDOMEvent.cpp,
line 138]
mozSanitizingHTMLSerializer::Release 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/content/base/src/mozSanitizingSerializer.cpp,
line 120]
nsDOMUIEvent::Release 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/content/events/src/nsDOMUIEvent.cpp,
line 105]
nsDOMKeyboardEvent::Release 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/content/events/src/nsDOMKeyboardEvent.cpp,
line 62]
XPCJSRuntime::GCCallback 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/js/src/xpconnect/src/

Keywords: talkbackid

Summary: Downloading ffdshow-20040828[www.free-codecs.com].rar from the url above causes Mozilla to crash → Downloading ffdshow-20040828[www.free-codecs.com].rar from the url above causes Mozilla to crash [@ ntdll.dll - nsTextNode::`scalar deleting destructor' ]

Whiteboard: tb951804m

timeless

Updated

•

20 years ago

Assignee: file-handling → general

Component: File Handling → DOM

Wayne Mery (:wsmwk)

Comment 13

•

18 years ago

no longer valid - http://www.free-codecs.com/download_soft.php?d=45&s=50

Phil Ringnalda (:philor)

Updated

•

15 years ago

Assignee: general → nobody

QA Contact: ian → general

Jesse Ruderman on Windows

Comment 14

•

15 years ago

WFM.  I doubt that stack is meaningful today, given how much better tested layout code is now.

Status: NEW → RESOLVED

Closed: 15 years ago

Resolution: --- → WORKSFORME

Nobody; OK to take it and work on it

Assignee

Updated

•

14 years ago

Crash Signature: [@ ntdll.dll - nsTextNode::`scalar deleting destructor' ]

Nobody; OK to take it and work on it

Assignee

Updated

•

6 years ago

Component: DOM → DOM: Core & HTML

Bugzilla

Quick Search

Downloading ffdshow-20040828[www.free-codecs.com].rar from the url above causes Mozilla to crash [@ ntdll.dll - nsTextNode::`scalar deleting destructor' ]

Categories

(Core :: DOM: Core & HTML, defect)

Tracking

()

People

(Reporter: pallosp, Unassigned)

References

(
URL
)

Details

(Keywords: crash, hang)

Crash Data

Security

(public)

User Story

Description

Comment 1

Comment 2

Comment 3

Comment 4

Comment 5

Updated

Comment 6

Comment 7

Comment 8

Comment 9

Comment 10

Comment 11

Comment 12

Updated

Comment 13

Updated

Comment 14

Updated

Updated