Closed
Bug 586116
Opened 14 years ago
Closed 14 years ago
Crash in nsHTMLDNSPrefetch::Prefetch gNeckoChild == 0x0
Categories
(Core :: Networking, defect)
Tracking
()
RESOLVED
FIXED
Tracking | Status | |
---|---|---|
fennec | 2.0a1+ | --- |
People
(Reporter: romaxa, Assigned: romaxa)
References
Details
Attachments
(1 file, 1 obsolete file)
(deleted),
patch
|
jduell.mcbugs
:
review+
|
Details | Diff | Splinter Review |
Program received signal SIGSEGV, Segmentation fault.
mozilla::net::PNeckoChild::SendHTMLDNSPrefetch (this=0x0, hostname=..., flags=@0xbe8ce9c6) at PNeckoChild.cpp:216
216 PNeckoChild.cpp: No such file or directory.
in PNeckoChild.cpp
(gdb) bt
#0 mozilla::net::PNeckoChild::SendHTMLDNSPrefetch (this=0x0, hostname=..., flags=@0xbe8ce9c6)
at PNeckoChild.cpp:216
#1 0x40676778 in nsHTMLDNSPrefetch::Prefetch (hostname=<value optimized out>, flags=Cannot access memory at address 0xffffffea
)
at content/html/content/src/nsHTMLDNSPrefetch.cpp:180
#2 0x40676918 in nsHTMLDNSPrefetch::Prefetch (aElement=0x4680be54, flags=8)
at content/html/content/src/nsHTMLDNSPrefetch.cpp:147
#3 0x40687fdc in nsHTMLAnchorElement::BindToTree (this=0x4680be20, aDocument=0x45f5fc00,
aParent=<value optimized out>, aBindingParent=0x0, aCompileEventHandlers=1)
at content/html/content/src/nsHTMLAnchorElement.cpp:205
#4 0x405dc140 in nsINode::doInsertChildAt (this=0x4688d730, aKid=0x4680be20, aIndex=0, aNotify=0,
aChildArray=...)
---Type <return> to continue, or q <return> to quit---
at content/base/src/nsGenericElement.cpp:3589
#5 0x405dc490 in nsGenericElement::InsertChildAt (this=0x1, aKid=0x4688b9e4, aIndex=4, aNotify=0)
at content/base/src/nsGenericElement.cpp:3536
#6 0x406cbd08 in nsINode::AppendChildTo (this=0x4688d730, aKid=0x4680be20, aNotify=0)
at ../../../../dist/include/nsINode.h:530
#7 0x40701730 in nsXMLContentSink::HandleStartElement (this=0x45fd5780, aName=<value optimized out>,
aAtts=0x46805400, aAttsCount=2, aIndex=-1, aLineNumber=180, aInterruptable=1)
at content/xml/document/src/nsXMLContentSink.cpp:1066
#8 0x40701d88 in nsXMLContentSink::HandleStartElement (this=0x1, aName=0x4688b9e4, aAtts=0x4, aAttsCount=0,
aIndex=-1, aLineNumber=180)
at content/xml/document/src/nsXMLContentSink.cpp:986
#9 0x4034d6d8 in nsExpatDriver::HandleStartElement (this=0x45fb1500, aValue=0x45fefa20, aAtts=0x46805400)
---Type <return> to continue, or q <return> to quit---
at parser/htmlparser/src/nsExpatDriver.cpp:410
#10 0x403704bc in doContent (parser=0x45ff4a00, startTagLevel=0, enc=0x413f9d08, s=0x4682c8f8 "<",
end=0x4682cba2 "", nextPtr=0x45ff4a18, haveMore=1 '\001')
at parser/expat/lib/xmlparse.c:2438
#11 0x40371114 in contentProcessor (parser=0x1, start=0x4682c000 "\n", end=<value optimized out>,
endPtr=<value optimized out>)
at parser/expat/lib/xmlparse.c:2095
#12 0x4036a5d4 in MOZ_XML_ResumeParser (parser=0x1)
at parser/expat/lib/xmlparse.c:1765
#13 0x4034cae8 in nsExpatDriver::ParseBuffer (this=0x45fb1500, aBuffer=0x0, aLength=0, aIsFinal=0,
aConsumed=0xbe8ceebc)
at parser/htmlparser/src/nsExpatDriver.cpp:998
#14 0x4034e624 in nsExpatDriver::ConsumeToken (this=0x45fb1500, aScanner=..., aFlushTokens=<value optimized out>)
at parser/htmlparser/src/nsExpatDriver.cpp:1101
---Type <return> to continue, or q <return> to quit---
#15 0x4035c240 in nsParser::Tokenize (this=0x45f472c0, aIsFinalChunk=1)
at parser/htmlparser/src/nsParser.cpp:3090
#16 0x4036038c in nsParser::ResumeParse (this=0x45f472c0, allowIteration=1, aIsFinalChunk=1, aCanInterrupt=1)
at parser/htmlparser/src/nsParser.cpp:2322
#17 0x4035ff68 in nsParser::ContinueInterruptedParsing (this=0x45f472c0)
at parser/htmlparser/src/nsParser.cpp:1797
#18 0x40584048 in nsContentSink::ContinueInterruptedParsingIfEnabled (this=0x45fd5780)
at content/base/src/nsContentSink.cpp:1687
#19 0x40588714 in nsRunnableMethodImpl<void (nsContentSink::*)(), true>::Run (this=0x0)
at ../../../dist/include/nsThreadUtils.h:347
#20 0x40f25550 in nsThread::ProcessNextEvent (this=0x4491fd80, mayWait=0, result=0xbe8cefbc)
at xpcom/threads/nsThread.cpp:547
#21 0x40ee2598 in NS_ProcessNextEvent_P (thread=<value optimized out>, mayWait=0) at nsThreadUtils.cpp:250
#22 0x40de3c6c in mozilla::ipc::MessagePump::Run (this=0x44929280, aDelegate=0xbe8cf8c8)
---Type <return> to continue, or q <return> to quit---
at ipc/glue/MessagePump.cpp:118
#23 0x40f6c02c in MessageLoop::RunInternal (this=0xbe8cf8c8)
at ipc/chromium/src/base/message_loop.cc:219
#24 0x40f6c0e8 in MessageLoop::RunHandler (this=0x1)
at ipc/chromium/src/base/message_loop.cc:202
#25 MessageLoop::Run (this=0x1)
at ipc/chromium/src/base/message_loop.cc:176
#26 0x40d74024 in nsBaseAppShell::Run (this=0x4586e388)
at widget/src/xpwidgets/nsBaseAppShell.cpp:175
#27 0x40262fc8 in XRE_RunAppShell ()
at toolkit/xre/nsEmbedFunctions.cpp:553
#28 0x40f6c02c in MessageLoop::RunInternal (this=0xbe8cf8c8)
at ipc/chromium/src/base/message_loop.cc:219
#29 0x40f6c0e8 in MessageLoop::RunHandler (this=0x1)
---Type <return> to continue, or q <return> to quit---
Assignee | ||
Comment 1•14 years ago
|
||
Assignee | ||
Updated•14 years ago
|
Attachment #464631 -
Flags: review? → review?(jduell.mcbugs)
Assignee | ||
Comment 2•14 years ago
|
||
Attachment #464631 -
Attachment is obsolete: true
Attachment #464647 -
Flags: review?(jduell.mcbugs)
Attachment #464631 -
Flags: review?(jduell.mcbugs)
Updated•14 years ago
|
Attachment #464647 -
Flags: review?(jduell.mcbugs) → review+
Assignee | ||
Updated•14 years ago
|
tracking-fennec: --- → ?
Updated•14 years ago
|
tracking-fennec: ? → 2.0a1+
Assignee | ||
Comment 3•14 years ago
|
||
Status: ASSIGNED → RESOLVED
Closed: 14 years ago
Resolution: --- → FIXED
You need to log in
before you can comment on or make changes to this bug.
Description
•