April 22 1999 build: I am getting a similar crash with viewer (on Linux), when I load the "Toolbar Test 1" or any xul. Steve Clark is having no problems on WinNT. #0 0x40c1b6a1 in __kill () #1 0x40c1b4cf in raise (sig=6) at ../sysdeps/posix/raise.c:27 #2 0x40c1c6df in abort () at ../sysdeps/generic/abort.c:83 #3 0x40900292 in PR_Abort () at prlog.c:461 #4 0x408cfa86 in nsDebug::Abort (aFile=0x40556bc4 "nsExpatTokenizer.cpp", aLine=446) at nsDebug.cpp:93 #5 0x408cfaea in nsDebug::Break (aFile=0x40556bc4 "nsExpatTokenizer.cpp", aLine=446) at nsDebug.cpp:108 #6 0x408cfc95 in nsDebug::NotYetImplemented (aMessage=0x40556d65 "Error: nsExpatTokenizer::HandleUnknownEncoding() not yet implemented.", aFile=0x40556bc4 "nsExpatTokenizer.cpp", aLine=446) at nsDebug.cpp:150 #7 0x4053850b in nsExpatTokenizer::HandleUnknownEncoding (encodingHandlerData=0x0, name=0x8125ed0, info=0xbfffeea8) at nsExpatTokenizer.cpp:446 #8 0x40568ede in handleUnknownEncoding (parser=0x817f9d8, encodingName=0x8125ed0) at xmlparse.c:1887 #9 0x40568c9b in initializeEncoding (parser=0x817f9d8) at xmlparse.c:1822 #10 0x40568fcc in prologInitProcessor (parser=0x817f9d8, s=0x813a448 "<", end=0x813b30e "", nextPtr=0xbffff398) at xmlparse.c:1920 #11 0x405660c2 in XML_Parse (parser=0x817f9d8, s=0x813a448 "<", len=3782, isFinal=0) at xmlparse.c:751 #12 0x40537cbd in nsExpatTokenizer::ParseXMLBuffer (this=0x817f9a0, aBuffer=0x813a448 "<", aLength=3782) at nsExpatTokenizer.cpp:239 #13 0x40537d9a in nsExpatTokenizer::ConsumeToken (this=0x817f9a0, aScanner=@0x8101380) at nsExpatTokenizer.cpp:280 #14 0x405488ed in nsParser::Tokenize (this=0x815f6d8) at nsParser.cpp:1109 #15 0x40548226 in nsParser::ResumeParse (this=0x815f6d8, aDefaultDTD=0x0) at nsParser.cpp:816 #16 0x405487c6 in nsParser::OnDataAvailable (this=0x815f6d8, aURL=0x815e3b8, pIStream=0x815e6e8, aLength=1891) at nsParser.cpp:1033 #17 0x4001e487 in ?? () from /builds/sspitzer/MOZILLA/04.22.1999/04.30/mozilla/dist/bin/libraptorwebwidget.so #18 0x406bbcb3 in stub_put_block (stream=0x811d230, buffer=0x8096d88 "<?xml version=\"1.0\"?> \n<?xml-stylesheet href=\"xul.css\" type=\"text/css\"?> \n\n<!DOCTYPE window> \n\n<window style=\"width: 100%; height: 100%\" xmlns:html=\"http://www.w3.org/TR/REC-html40\"\n xmlns=\"htt"..., length=1891) at nsStubContext.cpp:827 #19 0x40647bae in net_read_file_chunk (cur_entry=0x815e4d0) at mkfile.c:956 #20 0x40648549 in net_ProcessFile (cur_entry=0x815e4d0) at mkfile.c:1327 #21 0x406dd46f in NET_ProcessNet (ready_fd=0x0, fd_type=1) at mkgeturl.c:3355 #22 0x406e5351 in NET_PollSockets () at mkselect.c:298 #23 0x406b52a2 in nsNetlibService::NetPollSocketsCallback (aTimer=0x81397a8, aClosure=0x80d4b40) at nsNetService.cpp:1263 #24 0x40518de9 in TimerImpl::FireTimeout (this=0x81397a8) at nsTimer.cpp:73 #25 0x405192d2 in nsTimerExpired (aCallData=0x81397a8) at nsTimer.cpp:189 #26 0x40aa2c11 in ?? () from /usr/lib/libglib-1.2.so.0 #27 0x40aa1dd2 in ?? () from /usr/lib/libglib-1.2.so.0 #28 0x40aa23bb in ?? () from /usr/lib/libglib-1.2.so.0 #29 0x40aa2571 in ?? () from /usr/lib/libglib-1.2.so.0 #30 0x409c815b in ?? () from /usr/lib/libgtk-1.2.so.0 #31 0x4004d46c in ?? () from /builds/sspitzer/MOZILLA/04.22.1999/04.30/mozilla/dist/bin/libwidgetgtk.so #32 0x8053ed2 in nsNativeViewerApp::Run (this=0x80708e8) at nsGTKMain.cpp:42 #33 0x80540e6 in main (argc=1, argv=0xbffffa24) at nsGTKMain.cpp:97 Also a crash when I start up apprunner: > #0 0x40c166a1 in __kill () > #1 0x40c164cf in raise (sig=6) at ../sysdeps/posix/raise.c:27 > #2 0x40c176df in abort () at ../sysdeps/generic/abort.c:83 > #3 0x408f8292 in PR_Abort () at prlog.c:461 > #4 0x40033a86 in nsDebug::Abort (aFile=0x406efbc4 > "nsExpatTokenizer.cpp", aLine=446) at nsDebug.cpp:93 > #5 0x40033aea in nsDebug::Break (aFile=0x406efbc4 > "nsExpatTokenizer.cpp", aLine=446) at nsDebug.cpp:108 > #6 0x40033c95 in nsDebug::NotYetImplemented (aMessage=0x406efd65 > "Error: nsExpatTokenizer::HandleUnknownEncoding() not yet implemented.", > aFile=0x406efbc4 "nsExpatTokenizer.cpp", aLine=446) at nsDebug.cpp:150 > #7 0x406d150b in nsExpatTokenizer::HandleUnknownEncoding > (encodingHandlerData=0x0, name=0x80cb478, info=0xbfffea44) at > nsExpatTokenizer.cpp:446 > #8 0x40701ede in handleUnknownEncoding (parser=0x80ca190, > encodingName=0x80cb478) at xmlparse.c:1887 > #9 0x40701c9b in initializeEncoding (parser=0x80ca190) at > xmlparse.c:1822 > #10 0x40701fcc in prologInitProcessor (parser=0x80ca190, s=0x80c9870 > "<", end=0x80ca070 "", nextPtr=0xbfffef34) at xmlparse.c:1920 > #11 0x406ff0c2 in XML_Parse (parser=0x80ca190, s=0x80c9870 "<", > len=2048, isFinal=0) at xmlparse.c:751 > #12 0x406d0cbd in nsExpatTokenizer::ParseXMLBuffer (this=0x8125400, > aBuffer=0x80c9870 "<", aLength=2048) at nsExpatTokenizer.cpp:239 > #13 0x406d0d9a in nsExpatTokenizer::ConsumeToken (this=0x8125400, > aScanner=@0x812bea0) at nsExpatTokenizer.cpp:280 > #14 0x406e18ed in nsParser::Tokenize (this=0x8123390) at > nsParser.cpp:1109 > #15 0x406e1226 in nsParser::ResumeParse (this=0x8123390, > aDefaultDTD=0x0) at nsParser.cpp:816 > #16 0x406e17c6 in nsParser::OnDataAvailable (this=0x8123390, > aURL=0x811f4e0, pIStream=0x80c7f48, aLength=1024) at nsParser.cpp:1033 > #17 0x40de770d in rdf_BlockingParse (aURL=0x811f4e0, > aConsumer=0x8123394) at nsRDFXMLDataSource.cpp:511 > #18 0x40de7b5f in RDFXMLDataSourceImpl::Init (this=0x811c3a0, > uri=0x40e71e94 "resource:/res/samples/directory.rdf") at > nsRDFXMLDataSource.cpp:619 > #19 0x40de68ec in ServiceImpl::GetDataSource (this=0x80ade38, > uri=0x40e71e94 "resource:/res/samples/directory.rdf", > aDataSource=0x40e73194) at nsRDFService.cpp:881 > #20 0x40e6f6fc in nsBrowsingProfile::Init (this=0x80b0498, > userProfileName=0x0) at nsBrowsingProfile.cpp:163 > #21 0x40e3b436 in nsHistoryDataSource::Init (this=0x81250b8, > uri=0x40026788 "rdf:history") at nsHistoryDataSource.cpp:464 > #22 0x40de68ec in ServiceImpl::GetDataSource (this=0x80ade38, > uri=0x40026788 "rdf:history", aDataSource=0xbffff928) at > nsRDFService.cpp:881 > #23 0x40021969 in nsGlobalHistory::Init (this=0x80adbf8) at > nsGlobalHistory.cpp:101 > #24 0x40019ce8 in nsAppShellService::Initialize (this=0x8132990) at > nsAppShellService.cpp:167 > #25 0x804b018 in main (argc=1, argv=0xbffffa24) at nsAppRunner.cpp:335

donm and I spoke to rickg for help since we couldn't get a hold of nisheeth we are trying a fix now. if it works, into the tree it goes.

okay, the crash is fixed. update mozilla/htmlparser/src/nsExpatTokenizer.cpp. However, now we're dead in Expat with errors.

Closing the bug. I've updated the code since after rickg's checkin to take care of a couple more edge cases and tested it on all platforms. Thanks a lot to everybody who jumped in to fix this.

Using 4/30 Apprunner, verified bug fixed - no crashes.