Jae Gangemi Reporter
	Description • 25 years ago

From Bugzilla Helper:
User-Agent: Mozilla/4.72 [en] (X11; U; Linux 2.2.14 i686)
BuildID:    2000042009

mozilla crashes when returning search results from deja.com

Reproducible: Always
Steps to Reproduce:
1. go to above url
2. enter this in search : kernel keyboard timeout[2] or kernel: keyboard
timeout[2] (does it on both)
3. select english as language and hit submit

Actual Results:  browser segfaults

gShellCounter: 117
gShellCounter: 118
.//run-mozilla.sh: line 29:  4510 Segmentation fault      $prog ${1+"$@"}


Expected Results:  nice page of search results

	Kathleen :Brade
	Comment 1 • 25 years ago

confirming this bug; I see this on Mac with a debug build from today.  Changing 
to All platforms/os  Looks like I am crashing while removing a blockframe.  I see 
nsBlockFrame::Destroy followed by lots of other Delete/Destroy methods and 
finally died in nsBlockFrame::Destroy

	troy
	Comment 2 • 25 years ago

Rod, the crash is when deleting the lines in a combobox frame. Has anything 
changed that would cause the frame in line box to be getting deleted twice?

Cc'ing Nisheeth in case this is related to the form element changes he made to 
use the hash table?

	troy
	Comment 3 • 25 years ago

*** Bug 36608 has been marked as a duplicate of this bug. ***

	rods (gone) Assignee
	Comment 5 • 25 years ago

Adding troy and buster. I think deja news is generating some pretty bad content 
and I think I have distilled it down to this reduced testcase that crashes. The 
issue issue is that there is a table in a table and there are several things 
that if they were removed makes the test work.

Troy and Buster please review the testcase, if might help give Chris some 
insight or maybe he'll know what is wrong anyway. I am not sure why it is 
crashing in the select from, but my guess is that the content or frame model 
here is pretty screwed up. We might want Eric K. to taklk to deja to have them 
generate better html after we fix the bug.

	rods (gone) Assignee
	Comment 6 • 25 years ago

I found the problem, it is in combobox code that will soon be removed/fixed

	rods (gone) Assignee
	Comment 7 • 25 years ago

clearing cc'list
setting dependency, because the code that fixes 33515 fixes this

	karnaze (gone)
	Comment 8 • 25 years ago

Reassigning to Rod.

	rods (gone) Assignee
	Comment 9 • 25 years ago

*** Bug 36982 has been marked as a duplicate of this bug. ***

	rods (gone) Assignee
	Comment 10 • 25 years ago

*** Bug 37261 has been marked as a duplicate of this bug. ***

	rods (gone) Assignee
	Comment 11 • 25 years ago

*** Bug 37310 has been marked as a duplicate of this bug. ***

	Andreas Franke (gone)
	Comment 12 • 25 years ago

*** Bug 37493 has been marked as a duplicate of this bug. ***

	Andreas Franke (gone)
	Comment 13 • 25 years ago

Bug 37493 contains three testcases. Please verify that all of them do not
crash any more once this bug is fixed, otherwise please reopen it. Thanks.

By the way, bug 37310 (a dup of this one) is [dogfood+].

	rods (gone) Assignee
	Comment 14 • 25 years ago

I just checked out Bug 37310 and it only contains one testcase. Maybe you were 
thinking of a different bug?

	Andreas Franke (gone)
	Comment 15 • 25 years ago

*** Bug 37619 has been marked as a duplicate of this bug. ***

	Andreas Franke (gone)
	Comment 16 • 25 years ago

Bug 37619 is about http://www.city.vancouver.bc.ca crashing.
Please verify this also.

rod@netscape.com: The three testcases are in bug 37493. 
Bug 37310 only matters because of [dogfood+].

CC'ing myself.

	rods (gone) Assignee
	Comment 17 • 25 years ago

Yes, all the testcases work. Everything looks good, now if I could only check it 
in..... Waiting for all comboboxes to be removed from the UI.

	rods (gone) Assignee
	Comment 18 • 25 years ago

adding dependency

	Andreas Franke (gone)
	Comment 19 • 25 years ago

*** Bug 38003 has been marked as a duplicate of this bug. ***

	Andreas Franke (gone)
	Comment 20 • 25 years ago

*** Bug 38003 has been marked as a duplicate of this bug. ***

	Jae Gangemi Reporter
	Comment 21 • 25 years ago

i'm going to post this here since it's the first time i've been able to use 
deja successfully. 

the pages load, and i get results, but now the html that is being displayed is
incorrectly rendered. the "next message" link is completely missing, along with
the save this thread links

	rods (gone) Assignee
	Comment 22 • 25 years ago

*** Bug 37383 has been marked as a duplicate of this bug. ***

	rods (gone) Assignee
	Comment 23 • 25 years ago

*** Bug 38046 has been marked as a duplicate of this bug. ***

	rods (gone) Assignee
	Comment 24 • 25 years ago

*** Bug 38220 has been marked as a duplicate of this bug. ***

	Andreas Franke (gone)
	Comment 25 • 25 years ago

*** Bug 38263 has been marked as a duplicate of this bug. ***

	Jesse Ruderman
	Comment 26 • 25 years ago

*** Bug 38328 has been marked as a duplicate of this bug. ***

	Andreas Franke (gone)
	Comment 27 • 25 years ago

*** Bug 38391 has been marked as a duplicate of this bug. ***

	Andreas Franke (gone)
	Comment 28 • 25 years ago

*** Bug 38391 has been marked as a duplicate of this bug. ***

	Andreas Franke (gone)
	Comment 29 • 25 years ago

*** Bug 38385 has been marked as a duplicate of this bug. ***

	rods (gone) Assignee
	Comment 30 • 25 years ago

It occurred to us that we can check the document and see if it is a XUL document 
and turn on/off the "GoodToGo" flag appropriately. That is after making the flag 
a member variable. I will check this in when the tree opens.

	rods (gone) Assignee
	Comment 31 • 25 years ago

fixed

	Andreas Franke (gone)
	Comment 32 • 25 years ago

*** Bug 38649 has been marked as a duplicate of this bug. ***

	Chris Petersen
	Comment 33 • 25 years ago

With the May 22nd builds (Mac, Win 98 ,and Linux).

	Chris Petersen
	Comment 34 • 25 years ago

With the May 22nd builds (Mac, Win 98 ,and Linux) this problem is fixed.