GTK 1.2.0, Solaris 2.6, build/pull from Sunday. Obtained from going to demo/sample 8 and submitting it (I think). Might be GTK or might be Mozilla code. **** Purify instrumented ./viewer.pure (pid 27448) **** UMR: Uninitialized memory read (2 times): * This is occurring while in: gtk_text_get_chars [gtktext.c:1185] gtk_editable_get_chars [gtkeditable.c:485] nsTextHelper::GetText(nsString&,unsigned int,unsigned int&) [nsTextHelper.cpp:86] nsTextControlFrame::GetNamesValues(int,int&,nsString*,nsString*) [nsTextControlFrame.cpp:580] nsFormFrame::ProcessAsURLEncoded(int,nsString&,nsIFormControlFrame*) [nsFormFrame.cpp:798] nsFormFrame::OnSubmit(nsIPresContext*,nsIFrame*) [nsFormFrame.cpp:555] nsButtonControlFrame::MouseClicked(nsIPresContext*) [nsButtonControlFrame.cpp:335] nsButtonControlFrame::HandleEvent(nsIPresContext&,nsGUIEvent*,nsEventStatus&) [nsButtonControlFrame.cpp:514] PresShell::HandleEvent(nsIView*,nsGUIEvent*,nsEventStatus&) [nsPresShell.cpp:1930] nsView::HandleEvent(nsGUIEvent*,unsigned int,nsEventStatus&) [nsView.cpp:824] nsViewManager::DispatchEvent(nsGUIEvent*,nsEventStatus&) [nsViewManager.cpp:1707] HandleEvent(nsGUIEvent*) [nsView.cpp:63] nsWidget::DispatchEvent(nsGUIEvent*,nsEventStatus&) [nsWidget.cpp:817] nsWidget::DispatchWindowEvent(nsGUIEvent*) [nsWidget.cpp:777] nsWidget::DispatchMouseEvent(nsMouseEvent&) [nsWidget.cpp:843] handle_button_release_event(_GtkWidget*,_GdkEventButton*,void*) [nsGtkEventHandler.cpp:590] gtk_marshal_BOOL__POINTER [gtkmarshal.c:32] gtk_handlers_run [gtksignal.c:1909] gtk_signal_real_emit [gtksignal.c:1469] gtk_signal_emit [gtksignal.c:552] gtk_widget_event [gtkwidget.c:2784] gtk_propagate_event [gtkmain.c:1295] gtk_main_do_event [gtkmain.c:752] gdk_event_dispatch [gdkevents.c:2086] g_main_dispatch [gmain.c:647] g_main_iterate [gmain.c:854] g_main_run [gmain.c:912] gtk_main [gtkmain.c:475] nsAppShell::Run() [nsAppShell.cpp:152] nsNativeViewerApp::Run() [nsGTKMain.cpp:42] * Reading 1 byte from 0x5c96e2 in the heap. * Address 0x5c96e2 is 10 bytes into a malloc'd block at 0x5c96d8 of 1024 bytes. * This block was allocated from: malloc [rtlib.o] g_malloc [gmem.c:177] gtk_text_init [gtktext.c:686] gtk_type_new [gtktypeutils.c:403] gtk_widget_new [gtkwidget.c:1056] gtk_text_new [gtktext.c:735] nsTextAreaWidget::CreateNative(_GtkWidget*) [nsTextAreaWidget.cpp:60] nsWidget::CreateWidget(nsIWidget*,const nsRect&,nsEventStatus(*)(nsGUIEvent*),nsIDeviceContext*,nsIAppShell*,nsIToolkit* ,nsWidgetInitData*,void*) [nsWidget.cpp:610] nsWidget::Create(nsIWidget*,const nsRect&,nsEventStatus(*)(nsGUIEvent*),nsIDeviceContext*,nsIAppShell*,nsIToolkit* ,nsWidgetInitData*) [nsWidget.cpp:642] nsView::CreateWidget(const nsID&,nsWidgetInitData*,void*) [nsView.cpp:1207] nsFormControlFrame::Reflow(nsIPresContext&,nsHTMLReflowMetrics&,const nsHTMLReflowState&,unsigned int&) [nsFormControlFrame.cpp:290] nsInlineReflow::ReflowFrame(nsIFrame*,int,unsigned int&) [nsInlineReflow.cpp:316] nsBlockFrame::ReflowInlineFrame(nsBlockReflowState&,nsLineBox*,nsIFrame*,int*) [nsBlockFrame.cpp:2650] nsBlockFrame::ReflowLine(nsBlockReflowState&,nsLineBox*,int*) [nsBlockFrame.cpp:1816] nsBlockFrame::ReflowDirtyLines(nsBlockReflowState&) [nsBlockFrame.cpp:1564] nsBlockFrame::Reflow(nsIPresContext&,nsHTMLReflowMetrics&,const nsHTMLReflowState&,unsigned int&) [nsBlockFrame.cpp:984] nsBlockReflowContext::ReflowBlock(nsIFrame*,const nsRect&,int,nsMargin&,unsigned int&) [nsBlockReflowContext.cpp:153] nsBlockFrame::ReflowBlockFrame(nsBlockReflowState&,nsLineBox*,int*) [nsBlockFrame.cpp:2461] nsBlockFrame::ReflowLine(nsBlockReflowState&,nsLineBox*,int*) [nsBlockFrame.cpp:1781] nsBlockFrame::ReflowDirtyLines(nsBlockReflowState&) [nsBlockFrame.cpp:1564] nsBlockFrame::Reflow(nsIPresContext&,nsHTMLReflowMetrics&,const nsHTMLReflowState&,unsigned int&) [nsBlockFrame.cpp:984] nsAreaFrame::Reflow(nsIPresContext&,nsHTMLReflowMetrics&,const nsHTMLReflowState&,unsigned int&) [nsAreaFrame.cpp:509] nsContainerFrame::ReflowChild(nsIFrame*,nsIPresContext&,nsHTMLReflowMetrics&,con st nsHTMLReflowState&,unsigned int&) [nsContainerFrame.cpp:371] RootFrame::Reflow(nsIPresContext&,nsHTMLReflowMetrics&,const nsHTMLReflowState&,unsigned int&) [nsHTMLFrame.cpp:247] nsContainerFrame::ReflowChild(nsIFrame*,nsIPresContext&,nsHTMLReflowMetrics&,con st nsHTMLReflowState&,unsigned int&) [nsContainerFrame.cpp:371] nsScrollFrame::Reflow(nsIPresContext&,nsHTMLReflowMetrics&,const nsHTMLReflowState&,unsigned int&) [nsScrollFrame.cpp:392] nsContainerFrame::ReflowChild(nsIFrame*,nsIPresContext&,nsHTMLReflowMetrics&,con st nsHTMLReflowState&,unsigned int&) [nsContainerFrame.cpp:371] ViewportFrame::Reflow(nsIPresContext&,nsHTMLReflowMetrics&,const nsHTMLReflowState&,unsigned int&) [nsViewportFrame.cpp:432] nsHTMLReflowCommand::Dispatch(nsIPresContext&,nsHTMLReflowMetrics&,const nsSize&,nsIRenderingContext&) [nsHTMLReflowCommand.cpp:165] PresShell::ProcessReflowCommands() [nsPresShell.cpp:1177]

Taking this forms bug...

Pollmann - one of these is yours. Do you think we can get most of these UMR, etc bugs fixed for M6?

Moving to M7, since we don't have a purify build ready.

I'm arbitrarily declaring M8 my UMR/MLK milestone. :)

I still haven't got Purify working on Solaris, and won't receive Purify for NT for a few weeks. Marking these M10

After careful consideration, I've decided that I probably won't get this bug in for M12. Currently I have nearly 50 bugs scheduled for M13, so there is a possibility that this bug may need to be moved out farther still.

QA Contact update.

Triaged to M14

Moving off to M16 - please speak up of you need this for M14, thanks!

Rescheduling (*sigh*) Some of these are from M4. I wonder if they are all still valid?

I believe nsTextHelper is also a native widget thing and no longer used as part of Gecko. Marking WONTFIX.

Updating QA contact.

Verifying WONTFIX