Closed Bug 586116 Opened 14 years ago Closed 14 years ago

Crash in nsHTMLDNSPrefetch::Prefetch gNeckoChild == 0x0

Categories

(Core :: Networking, defect)

x86
Linux
defect
Not set
normal

Tracking

()

RESOLVED FIXED
Tracking Status
fennec 2.0a1+ ---

People

(Reporter: romaxa, Assigned: romaxa)

References

Details

Attachments

(1 file, 1 obsolete file)

Program received signal SIGSEGV, Segmentation fault. mozilla::net::PNeckoChild::SendHTMLDNSPrefetch (this=0x0, hostname=..., flags=@0xbe8ce9c6) at PNeckoChild.cpp:216 216 PNeckoChild.cpp: No such file or directory. in PNeckoChild.cpp (gdb) bt #0 mozilla::net::PNeckoChild::SendHTMLDNSPrefetch (this=0x0, hostname=..., flags=@0xbe8ce9c6) at PNeckoChild.cpp:216 #1 0x40676778 in nsHTMLDNSPrefetch::Prefetch (hostname=<value optimized out>, flags=Cannot access memory at address 0xffffffea ) at content/html/content/src/nsHTMLDNSPrefetch.cpp:180 #2 0x40676918 in nsHTMLDNSPrefetch::Prefetch (aElement=0x4680be54, flags=8) at content/html/content/src/nsHTMLDNSPrefetch.cpp:147 #3 0x40687fdc in nsHTMLAnchorElement::BindToTree (this=0x4680be20, aDocument=0x45f5fc00, aParent=<value optimized out>, aBindingParent=0x0, aCompileEventHandlers=1) at content/html/content/src/nsHTMLAnchorElement.cpp:205 #4 0x405dc140 in nsINode::doInsertChildAt (this=0x4688d730, aKid=0x4680be20, aIndex=0, aNotify=0, aChildArray=...) ---Type <return> to continue, or q <return> to quit--- at content/base/src/nsGenericElement.cpp:3589 #5 0x405dc490 in nsGenericElement::InsertChildAt (this=0x1, aKid=0x4688b9e4, aIndex=4, aNotify=0) at content/base/src/nsGenericElement.cpp:3536 #6 0x406cbd08 in nsINode::AppendChildTo (this=0x4688d730, aKid=0x4680be20, aNotify=0) at ../../../../dist/include/nsINode.h:530 #7 0x40701730 in nsXMLContentSink::HandleStartElement (this=0x45fd5780, aName=<value optimized out>, aAtts=0x46805400, aAttsCount=2, aIndex=-1, aLineNumber=180, aInterruptable=1) at content/xml/document/src/nsXMLContentSink.cpp:1066 #8 0x40701d88 in nsXMLContentSink::HandleStartElement (this=0x1, aName=0x4688b9e4, aAtts=0x4, aAttsCount=0, aIndex=-1, aLineNumber=180) at content/xml/document/src/nsXMLContentSink.cpp:986 #9 0x4034d6d8 in nsExpatDriver::HandleStartElement (this=0x45fb1500, aValue=0x45fefa20, aAtts=0x46805400) ---Type <return> to continue, or q <return> to quit--- at parser/htmlparser/src/nsExpatDriver.cpp:410 #10 0x403704bc in doContent (parser=0x45ff4a00, startTagLevel=0, enc=0x413f9d08, s=0x4682c8f8 "<", end=0x4682cba2 "", nextPtr=0x45ff4a18, haveMore=1 '\001') at parser/expat/lib/xmlparse.c:2438 #11 0x40371114 in contentProcessor (parser=0x1, start=0x4682c000 "\n", end=<value optimized out>, endPtr=<value optimized out>) at parser/expat/lib/xmlparse.c:2095 #12 0x4036a5d4 in MOZ_XML_ResumeParser (parser=0x1) at parser/expat/lib/xmlparse.c:1765 #13 0x4034cae8 in nsExpatDriver::ParseBuffer (this=0x45fb1500, aBuffer=0x0, aLength=0, aIsFinal=0, aConsumed=0xbe8ceebc) at parser/htmlparser/src/nsExpatDriver.cpp:998 #14 0x4034e624 in nsExpatDriver::ConsumeToken (this=0x45fb1500, aScanner=..., aFlushTokens=<value optimized out>) at parser/htmlparser/src/nsExpatDriver.cpp:1101 ---Type <return> to continue, or q <return> to quit--- #15 0x4035c240 in nsParser::Tokenize (this=0x45f472c0, aIsFinalChunk=1) at parser/htmlparser/src/nsParser.cpp:3090 #16 0x4036038c in nsParser::ResumeParse (this=0x45f472c0, allowIteration=1, aIsFinalChunk=1, aCanInterrupt=1) at parser/htmlparser/src/nsParser.cpp:2322 #17 0x4035ff68 in nsParser::ContinueInterruptedParsing (this=0x45f472c0) at parser/htmlparser/src/nsParser.cpp:1797 #18 0x40584048 in nsContentSink::ContinueInterruptedParsingIfEnabled (this=0x45fd5780) at content/base/src/nsContentSink.cpp:1687 #19 0x40588714 in nsRunnableMethodImpl<void (nsContentSink::*)(), true>::Run (this=0x0) at ../../../dist/include/nsThreadUtils.h:347 #20 0x40f25550 in nsThread::ProcessNextEvent (this=0x4491fd80, mayWait=0, result=0xbe8cefbc) at xpcom/threads/nsThread.cpp:547 #21 0x40ee2598 in NS_ProcessNextEvent_P (thread=<value optimized out>, mayWait=0) at nsThreadUtils.cpp:250 #22 0x40de3c6c in mozilla::ipc::MessagePump::Run (this=0x44929280, aDelegate=0xbe8cf8c8) ---Type <return> to continue, or q <return> to quit--- at ipc/glue/MessagePump.cpp:118 #23 0x40f6c02c in MessageLoop::RunInternal (this=0xbe8cf8c8) at ipc/chromium/src/base/message_loop.cc:219 #24 0x40f6c0e8 in MessageLoop::RunHandler (this=0x1) at ipc/chromium/src/base/message_loop.cc:202 #25 MessageLoop::Run (this=0x1) at ipc/chromium/src/base/message_loop.cc:176 #26 0x40d74024 in nsBaseAppShell::Run (this=0x4586e388) at widget/src/xpwidgets/nsBaseAppShell.cpp:175 #27 0x40262fc8 in XRE_RunAppShell () at toolkit/xre/nsEmbedFunctions.cpp:553 #28 0x40f6c02c in MessageLoop::RunInternal (this=0xbe8cf8c8) at ipc/chromium/src/base/message_loop.cc:219 #29 0x40f6c0e8 in MessageLoop::RunHandler (this=0x1) ---Type <return> to continue, or q <return> to quit---
Attached patch First version (obsolete) (deleted) — Splinter Review
Assignee: nobody → romaxa
Status: NEW → ASSIGNED
Attachment #464631 - Flags: review?
Attachment #464631 - Flags: review? → review?(jduell.mcbugs)
Attached patch extra space removed (deleted) — Splinter Review
Attachment #464631 - Attachment is obsolete: true
Attachment #464647 - Flags: review?(jduell.mcbugs)
Attachment #464631 - Flags: review?(jduell.mcbugs)
Attachment #464647 - Flags: review?(jduell.mcbugs) → review+
tracking-fennec: --- → ?
tracking-fennec: ? → 2.0a1+
Status: ASSIGNED → RESOLVED
Closed: 14 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: