[CVS build from 2001-07-27-05 on linux] Talkback ID: TB33404247E Steps to reproduce: 1) Go to http://www.datorbutiken.se 2) Reload the page. Result: Mozilla crashes. Expected result: Mozilla reloads the page.

WFM on Mac OS X.

I forgot to add this to my bugreport: Reproducable: always

over to layout for analysis...

Reproducing in the Linux July 26th build: Stack trace from Talkback: DeleteValue() _hashEnumerate__FP11PLHashEntryiPv() libplds4.so + 0x13f0 (0x401933f0) nsHashtable::Enumerate() RuleHash::~RuleHash() DeleteRuleCascade() _hashEnumerate__FP11PLHashEntryiPv() libplds4.so + 0x13f0 (0x401933f0) nsHashtable::Enumerate() CSSRuleProcessor::ClearRuleCascades() CSSRuleProcessor::~CSSRuleProcessor() CSSRuleProcessor::Release() nsSupportsArray::Clear() StyleSetImpl::RecycleArray() StyleSetImpl::ClearBackstopRuleProcessors() StyleSetImpl::RemoveBackstopStyleSheet() PresShell::ClearPreferenceStyleRules() PresShell::~PresShell() PresShell::Release() nsCOMPtr_base::~nsCOMPtr_base() DocumentViewerImpl::~DocumentViewerImpl() DocumentViewerImpl::Release() nsCOMPtr_base::assign_with_AddRef() nsDocShell::Destroy() nsWebShell::Destroy() nsHTMLFrameInnerFrame::~nsHTMLFrameInnerFrame() nsFrame::Destroy() nsFrameList::DestroyFrames() nsContainerFrame::Destroy() nsFrameList::DestroyFrames() nsContainerFrame::Destroy() nsFrameList::DestroyFrames() nsContainerFrame::Destroy() nsFrameList::DestroyFrames() nsContainerFrame::Destroy() nsFrameList::DestroyFrames() nsContainerFrame::Destroy() nsLineBox::DeleteLineList() nsBlockFrame::Destroy() nsFrameList::DestroyFrames() nsContainerFrame::Destroy() nsFrameList::DestroyFrames() nsContainerFrame::Destroy() nsBoxFrame::Destroy() nsFrameList::DestroyFrames() nsContainerFrame::Destroy() ViewportFrame::Destroy() FrameManager::Destroy() PresShell::~PresShell() PresShell::Release() nsCOMPtr_base::~nsCOMPtr_base() DocumentViewerImpl::~DocumentViewerImpl() DocumentViewerImpl::Release() nsCOMPtr_base::assign_with_AddRef() DocumentViewerImpl::SetPreviousViewer() PresShell::UnsuppressAndInvalidate() PresShell::UnsuppressPainting() PresShell::sPaintSuppressionCallback() nsTimerGtk::FireTimeout() process_timers() TimerCallbackFunc() libglib-1.2.so.0 + 0x1104d (0x4034904d) libglib-1.2.so.0 + 0x10186 (0x40348186) libglib-1.2.so.0 + 0x10751 (0x40348751) libglib-1.2.so.0 + 0x108f1 (0x403488f1) libgtk-1.2.so.0 + 0x8c5b9 (0x4026c5b9) nsAppShell::Run() nsAppShellService::Run() main1() main() libc.so.6 + 0x189cb (0x404419cb)

Appears to be a Linux only issue. I can't reproduce problem with Mac or Windows builds (July 26th).

hyatt, do you want to take a crack at this. If not please reassign to waterson.

Despite all the questionmarks in this gdb backtrace I thought it might be of some help: #0 0x421dec99 in ?? () #1 0x415d952f in ?? () #2 0x415d8eab in ?? () #3 0x421ccc3a in ?? () #4 0x421cce85 in ?? () #5 0x421ccf6b in ?? () #6 0x4048a22a in g_main_set_poll_func () from /usr/lib/libglib-1.2.so.0 #7 0x40489308 in g_get_current_time () from /usr/lib/libglib-1.2.so.0 #8 0x40489913 in g_get_current_time () from /usr/lib/libglib-1.2.so.0 #9 0x40489aac in g_main_run () from /usr/lib/libglib-1.2.so.0 #10 0x403aa667 in gtk_main () from /usr/lib/libgtk-1.2.so.0 #11 0x40d52685 in ?? () #12 0x4098eb1e in ?? () #13 0x0805c711 in NS_CreateNativeAppSupport () #14 0x0805d541 in main () #15 0x405cd38b in __libc_start_main () from /lib/libc.so.6 [Btw, what's up with those questionmarks? This is a debug build, non-stripped, non-optimized and I'm running today's CVS snapshot of GDB]

Might you need to |share| the .so's in which the symbols appear?

Here's a hopefully much more useful gdb backtrace:#0 0x00d5048d in ?? () #1 0x415d7b48 in imgContainer::GetFrameAt () from /usr/local/mozilla-debug/components/libimglib2.so #2 0x415d8c51 in imgContainer::Notify () from /usr/local/mozilla-debug/components/libimglib2.so #3 0x42250c3a in nsTimerGtk::FireTimeout () from /usr/local/mozilla-debug/components/libtimer_gtk.so #4 0x42250e85 in process_timers () from /usr/local/mozilla-debug/components/libtimer_gtk.so #5 0x42250f6b in TimerCallbackFunc () from /usr/local/mozilla-debug/components/libtimer_gtk.so #6 0x4048a22a in g_main_set_poll_func () from /usr/lib/libglib-1.2.so.0 #7 0x40489308 in g_get_current_time () from /usr/lib/libglib-1.2.so.0 #8 0x40489913 in g_get_current_time () from /usr/lib/libglib-1.2.so.0 #9 0x40489aac in g_main_run () from /usr/lib/libglib-1.2.so.0 #10 0x403aa667 in gtk_main () from /usr/lib/libgtk-1.2.so.0 #11 0x40d52685 in nsAppShell::Run () from /usr/local/mozilla-debug/components/libwidget_gtk.so #12 0x4098eb1e in nsAppShellService::Run () from /usr/local/mozilla-debug/components/libnsappshell.so #13 0x0805c711 in NS_CreateNativeAppSupport () #14 0x0805d541 in main () #15 0x405cd38b in __libc_start_main () from /lib/libc.so.6

I still crash with CVS as of 2001-08-09-12 on Linux.

I nailed it down to the banner image on this page. Below I will attach this image. Load it in mozilla and hit reload a few times.

Below is a backtrace on the testcase using a CVS build from 2001-08-21-03. Program received signal SIGSEGV, Segmentation fault. [Switching to Thread 1024 (LWP 27620)] 0x406039ad in free () at ../../../dist/include/nsCOMPtr.h:409 409 NS_EXPORT ~nsCOMPtr_base() { } (gdb) bt #0 0x406039ad in free () at ../../../dist/include/nsCOMPtr.h:409 #1 0x40603873 in free () at ../../../dist/include/nsCOMPtr.h:409 #2 0x406d8ae4 in __builtin_vec_delete () at ../../../dist/include/nsCOMPtr.h:409 #3 0x415dfc4f in nsImageGTK::~nsImageGTK (this=0x88046d8, __in_chrg=3) at /home/andre/devel/cvs/mozilla/gfx/src/gtk/nsImageGTK.cpp:93 #4 0x415dfa3d in nsImageGTK::Release (this=0x88046d8) at /home/andre/devel/cvs/mozilla/gfx/src/gtk/nsImageGTK.cpp:53 #5 0x4003939b in nsCOMPtr<nsIImage>::~nsCOMPtr (this=0x88046a8, __in_chrg=2) at ../../dist/include/nsCOMPtr.h:489 #6 0x4221f936 in gfxImageFrame::~gfxImageFrame (this=0x8804690, __in_chrg=3) at /home/andre/devel/cvs/mozilla/gfx2/src/gfxImageFrame.cpp:44 #7 0x4221f70d in gfxImageFrame::Release (this=0x8804690) at /home/andre/devel/cvs/mozilla/gfx2/src/gfxImageFrame.cpp:28 #8 0x400391ab in nsCOMPtr<gfxIImageFrame>::~nsCOMPtr (this=0x87159e8, __in_chrg=2) at ../../dist/include/nsCOMPtr.h:489 #9 0x4159b8a3 in imgContainer::~imgContainer (this=0x8715970, __in_chrg=3) at /home/andre/devel/cvs/mozilla/modules/libpr0n/src/imgContainer.cpp:59 #10 0x4159b5ab in imgContainer::Release (this=0x8715970) at /home/andre/devel/cvs/mozilla/modules/libpr0n/src/imgContainer.cpp:34 #11 0x415ac10b in nsCOMPtr<imgIContainer>::~nsCOMPtr (this=0x8898b84, __in_chrg=2) at ../../../dist/include/nsCOMPtr.h:489 #12 0x415a0730 in imgRequest::~imgRequest (this=0x8898b60, __in_chrg=3) at /home/andre/devel/cvs/mozilla/modules/libpr0n/src/imgRequest.cpp:66 #13 0x415a035e in imgRequest::Release (this=0x8898b60) at /home/andre/devel/cvs/mozilla/modules/libpr0n/src/imgRequest.cpp:51 #14 0x41fcc279 in EventHandler (self=0x889e4e8) at /home/andre/devel/cvs/mozilla/netwerk/cache/src/nsCacheService.cpp:1018 #15 0x401c5ca4 in PL_HandleEvent (self=0x889e4e8) at /home/andre/devel/cvs/mozilla/xpcom/threads/plevent.c:590 #16 0x401c649d in PL_ProcessEventsBeforeID (aSelf=0x80b1dd0, aID=28811) at /home/andre/devel/cvs/mozilla/xpcom/threads/plevent.c:1256 #17 0x40d4b9f7 in processQueue (aElement=0x80b1dd0, aData=0x708b) at /home/andre/devel/cvs/mozilla/widget/src/gtk/nsAppShell.cpp:464 #18 0x40183908 in nsVoidArray::EnumerateForwards (this=0x8101268, aFunc=0x40d4b9c8 <processQueue(void *, void *)>, aData=0x708b) at /home/andre/devel/cvs/mozilla/xpcom/ds/nsVoidArray.cpp:635 #19 0x40d4ba40 in nsAppShell::ProcessBeforeID (aID=28811) at /home/andre/devel/cvs/mozilla/widget/src/gtk/nsAppShell.cpp:472 #20 0x40d57877 in handle_gdk_event (event=0x8304d20, data=0x0) at /home/andre/devel/cvs/mozilla/widget/src/gtk/nsGtkEventHandler.cpp:990 #21 0x4043a4b7 in gdk_wm_protocols_filter () at ../../../dist/include/nsCOMPtr.h:409 #22 0x4046a308 in g_get_current_time () at ../../../dist/include/nsCOMPtr.h:409 #23 0x4046a913 in g_get_current_time () at ../../../dist/include/nsCOMPtr.h:409 #24 0x4046aaac in g_main_run () at ../../../dist/include/nsCOMPtr.h:409 #25 0x4038b667 in gtk_main () at ../../../dist/include/nsCOMPtr.h:409 #26 0x40d4b675 in nsAppShell::Run (this=0x810d098) at /home/andre/devel/cvs/mozilla/widget/src/gtk/nsAppShell.cpp:349 #27 0x4097fb2e in nsAppShellService::Run (this=0x812b7c0) at /home/andre/devel/cvs/mozilla/xpfe/appshell/src/nsAppShellService.cpp:427 #28 0x0805b9d6 in main1 (argc=1, argv=0xbffff714, nativeApp=0x0) at /home/andre/devel/cvs/mozilla/xpfe/bootstrap/nsAppRunner.cpp:1346 #29 0x0805c821 in main (argc=1, argv=0xbffff714) at /home/andre/devel/cvs/mozilla/xpfe/bootstrap/nsAppRunner.cpp:1668 #30 0x405ae64f in __libc_start_main () at ../../../dist/include/nsCOM

Seeing the same backtrace as the last reported by André on the http://www.isdn.cz/ Please try to fix for Mozilla 0.9.5

Below I will attach a backtrace of a crash that I could produce on http://www.isdn.cz/. Tom suggested it might be the same crash. It didn't crash immediately on load, but instead I had to move around on it a little and then reload it to make it crash. If that doesn't crash it, try leaving the site and it should crash. The below backtrace is with 2001-09-21-06 on linux.

t8m@centrum.cz, under no circumstances do you target my bugs at milestones. That is a huge violation of ettiquette that could result in your bugzilla account being suspended. Don't do that again. You do not manage my bugs, nor do you decide which of my bugs is most important.

It's a huge violation of etiquette too. (I can spell, really.) ;)

Image stuff.

Hyatt: I'm very sorry about that.

I no longer see a crash on the testcase nor the website itself. Could someone else who saw this crasher before please verify that it is indeed fixed?

This, in particular, the stacktrace posted at 2001-08-21 03:38, is the #2 linux topcrash right now, but is hiding under the "libc.so.6" signature. Any progress on this bug?

Still crashing on www.isdn.cz with simmilar backtrace as of 2001-08-21 03:38. Nominating for 0.9.6. If www.datorbutiken.se somehow changed to not crash maybe we should change the URL/summary.

I see this crash on linux build 2001110808, seems that www.datorbutiken.se no longer crashes but I do see it at www.isdn.cz

Here is the stack trace I'm getting. This looks like heap corruption.

I took a look at recent MozillaTrunk crash data and found the following incidents crashing at http://www.isdn.cz : Crashes being reported under the "libc.so.6" stack signature: Incident ID 2176439 Stack Signature libc.so.6 + 0x5298e (0x4051798e) 94077f95 Trigger Time 2002-01-27 10:43:23 Email Address URL visited www.isdn.cz User Comments Browsing www.isdn.cz for a while, opened article in new window, browsed in both Build ID 2002012621 Product ID MozillaTrunk Platform Operating System LinuxIntel Module Trigger Reason SIGSEGV: Segmentation Fault: (signal 11) Stack Trace libc.so.6 + 0x5298e (0x4051798e) libc.so.6 + 0x526e8 (0x405176e8) PR_Free() nsVoidArray::~nsVoidArray() nsCStringArray::~nsCStringArray() nsFontMetricsGTK::~nsFontMetricsGTK() nsFontMetricsGTK::Release() nsFontCache::Flush() DeviceContextImpl::FlushFontCache() DocumentViewerImpl::Destroy() nsDocShell::Destroy() nsWebShell::Destroy() nsHTMLFrameInnerFrame::~nsHTMLFrameInnerFrame() nsFrame::Destroy() nsFrameList::DestroyFrames() nsContainerFrame::Destroy() nsLineBox::DeleteLineList() nsBlockFrame::Destroy() nsLineBox::DeleteLineList() nsBlockFrame::Destroy() nsFrameList::DestroyFrames() nsContainerFrame::Destroy() nsFrameList::DestroyFrames() nsContainerFrame::Destroy() nsFrameList::DestroyFrames() nsContainerFrame::Destroy() nsFrameList::DestroyFrames() nsContainerFrame::Destroy() nsTableFrame::Destroy() nsFrameList::DestroyFrames() nsContainerFrame::Destroy() nsTableOuterFrame::Destroy() nsLineBox::DeleteLineList() nsBlockFrame::Destroy() nsLineBox::DeleteLineList() nsBlockFrame::Destroy() nsFrameList::DestroyFrames() nsContainerFrame::Destroy() nsFrameList::DestroyFrames() nsContainerFrame::Destroy() nsBoxFrame::Destroy() nsFrameList::DestroyFrames() nsContainerFrame::Destroy() nsBoxFrame::Destroy() nsGfxScrollFrame::Destroy() nsFrameList::DestroyFrames() nsContainerFrame::Destroy() ViewportFrame::Destroy() FrameManager::Destroy() PresShell::Destroy() DocumentViewerImpl::Destroy() DocumentViewerImpl::Show() PresShell::UnsuppressAndInvalidate() PresShell::UnsuppressPainting() PresShell::sPaintSuppressionCallback() nsTimerImpl::Process() handleMyEvent() PL_HandleEvent() PL_ProcessPendingEvents() nsEventQueueImpl::ProcessPendingEvents() event_processor_callback() our_gdk_io_invoke() libglib-1.2.so.0 + 0xf943 (0x4039a943) ----------------------------- Incident ID 2177289 Stack Signature libc.so.6 + 0x52859 (0x40517859) 87f389c6 Trigger Time 2002-01-27 10:59:09 Email Address jv@pilsedu.cz URL visited www.isdn.cz User Comments Build ID 2002012621 Product ID MozillaTrunk Platform Operating System LinuxIntel Module Trigger Reason SIGSEGV: Segmentation Fault: (signal 11) Stack Trace libc.so.6 + 0x52859 (0x40517859) libc.so.6 + 0x526e8 (0x405176e8) PR_Free() FreeArenaList() PL_FinishArenaPool() FrameArena::~FrameArena() PresShell::~PresShell() PresShell::Release() nsCOMPtr_base::assign_with_AddRef() DocumentViewerImpl::Destroy() DocumentViewerImpl::Show() PresShell::UnsuppressAndInvalidate() PresShell::UnsuppressPainting() PresShell::sPaintSuppressionCallback() nsTimerImpl::Process() handleMyEvent() PL_HandleEvent() PL_ProcessPendingEvents() nsEventQueueImpl::ProcessPendingEvents() event_processor_callback() our_gdk_io_invoke() libglib-1.2.so.0 + 0xf943 (0x4039a943) --------------------------------------- Incident ID 2117657 Stack Signature libc.so.6 + 0x72c3b (0x4050ec3b) 89d90282 Trigger Time 2002-01-25 12:30:15 Email Address kgardas@iol.cz URL visited http://www.isdn.cz User Comments I have to kill mozilla because it locks and doesn't redraw any more after opening url above Build ID 2002012508 Product ID MozillaTrunk Platform Operating System LinuxIntel Module Trigger Reason SIGSEGV: Segmentation Fault: (signal 11) Stack Trace libc.so.6 + 0x72c3b (0x4050ec3b) libc.so.6 + 0x72ac3 (0x4050eac3) libstdc++-libc6.1-1.so.2 + 0x26434 (0x405e5434) nsFileStream::~nsFileStream() nsFileOutputStream::~nsFileOutputStream() nsFileStream::Release() nsFileOutputStream::Release() nsBufferedOutputStream::Close() nsBufferedOutputStream::~nsBufferedOutputStream() nsBufferedStream::Release() nsBufferedOutputStream::Release() nsCOMPtr_base::~nsCOMPtr_base() _._Q222nsCacheEntryDescriptor21nsOutputStreamWrapper Release() nsCOMPtr_base::assign_with_AddRef() nsStreamListenerTee::OnStopRequest() nsHttpChannel::OnStopRequest() nsOnStopRequestEvent::HandleEvent() nsARequestObserverEvent::HandlePLEvent() PL_HandleEvent() PL_ProcessPendingEvents() nsEventQueueImpl::ProcessPendingEvents() event_processor_callback() our_gdk_io_invoke() libglib-1.2.so.0 + 0xeeb0 (0x40373eb0) libglib-1.2.so.0 + 0x10578 (0x40375578) libglib-1.2.so.0 + 0x10b83 (0x40375b83) libglib-1.2.so.0 + 0x10d1c (0x40375d1c) libgtk-1.2.so.0 + 0x8d7f7 (0x402967f7) nsAppShell::Run() nsAppShellService::Run() main1() main() libc.so.6 + 0x1d65f (0x404b965f) Crashes being reported under different stack signatures: Incident ID 1637790 Stack Signature 0x00000001 53f1dd65 Trigger Time 2002-01-14 08:56:20 Email Address URL visited http://www.isdn.cz User Comments Just reading a web page. Mozilla always crashes, when browsing www.isdn.cz. It crashes when running on Windows and also crashes when running om Linux (RedHat7.2) Build ID 2002011106 Product ID MozillaTrunk Platform Operating System Win32 Module Trigger Reason Breakpoint hit Stack Trace 0x00000001 nsCacheEntryHashTable::GetEntry [d:\builds\seamonkey\mozilla\netwerk\cache\src\nsCacheEntry.cpp, line 505] nsMemoryCacheDevice::DeactivateEntry [d:\builds\seamonkey\mozilla\netwerk\cache\src\nsMemoryCacheDevice.cpp, line 161] nsCacheService::DeactivateEntry [d:\builds\seamonkey\mozilla\netwerk\cache\src\nsCacheService.cpp, line 1290] nsCacheService::CloseDescriptor [d:\builds\seamonkey\mozilla\netwerk\cache\src\nsCacheService.cpp, line 1244] nsCacheEntryDescriptor::Close [d:\builds\seamonkey\mozilla\netwerk\cache\src\nsCacheEntryDescriptor.cpp, line 340] nsCacheEntryDescriptor::~nsCacheEntryDescriptor [d:\builds\seamonkey\mozilla\netwerk\cache\src\nsCacheEntryDescriptor.cpp, line 49] nsCacheEntryDescriptor::`scalar deleting destructor' nsCacheEntryDescriptor::Release [d:\builds\seamonkey\mozilla\netwerk\cache\src\nsCacheEntryDescriptor.cpp, line 32] nsCOMPtr_base::assign_with_AddRef [d:\builds\seamonkey\mozilla\xpcom\glue\nsCOMPtr.cpp, line 74] nsHttpChannel::ProcessResponse [d:\builds\seamonkey\mozilla\netwerk\protocol\http\src\nsHttpChannel.cpp, line 515] nsHttpChannel::OnStartRequest [d:\builds\seamonkey\mozilla\netwerk\protocol\http\src\nsHttpChannel.cpp, line 2360] nsOnStartRequestEvent::HandleEvent [d:\builds\seamonkey\mozilla\netwerk\base\src\nsRequestObserverProxy.cpp, line 162] PL_HandleEvent [d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c, line 591] PL_ProcessPendingEvents [d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c, line 524] _md_EventReceiverProc [d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c, line 1072] KERNEL32.DLL + 0x248f7 (0xbff848f7) 0x00648c1a 0x00058f64 ------------------------------------------ Incident ID 1355892 Stack Signature nsCOMPtr_base::~nsCOMPtr_base() 1445e765 Trigger Time 2002-01-07 14:53:48 Email Address greer@netscape.com URL visited www.isdn.cz User Comments Went to www.isdn.cz. Clicked the upper right hand close button (Gnome desktop) Got QFA. Looking into bug 109340. Build ID 2002010708 Product ID MozillaTrunk Platform Operating System LinuxIntel Module Trigger Reason SIGSEGV: Segmentation Fault: (signal 11) Stack Trace nsCOMPtr_base::~nsCOMPtr_base() imgContainer::DoComposite() imgContainer::Notify() nsTimerImpl::Process() handleMyEvent() PL_HandleEvent() PL_ProcessPendingEvents() nsEventQueueImpl::ProcessPendingEvents() event_processor_callback() our_gdk_io_invoke() libglib-1.2.so.0 + 0xdd6a (0x40352d6a) libglib-1.2.so.0 + 0xf2c6 (0x403542c6) libglib-1.2.so.0 + 0xf801 (0x40354801) libglib-1.2.so.0 + 0xf979 (0x40354979) libgtk-1.2.so.0 + 0x85f3a (0x40283f3a) nsAppShell::Run() nsAppShellService::Run() main1() main() libc.so.6 + 0x17cb3 (0x40449cb3) The stacks are all different, so it's difficult to look for other similar crashes...since we only have the url to go by. But hopefully these stacks can help.

Isn't a Future a little bit too far for a topcrash? Another talkback TB2617242Z from Mozilla 0.9.8. I've just reloaded the site once.

Tom's most recent crash also shows another stack trace, but once again the same site is the cause: Incident ID 2617242 Stack Signature libc.so.6 + 0x80f26 (0x40533f26) 240fae71 Trigger Time 2002-02-07 01:02:44 Email Address t8m@centrum.cz URL visited http://www.isdn.cz/ Build ID 2002020415 Product ID MozillaBranch Platform Operating System LinuxIntel Module Trigger Reason SIGSEGV: Segmentation Fault: (signal 11) User Comments Reloaded the page Stack Trace libc.so.6 + 0x80f26 (0x40533f26) libc.so.6 + 0x80cd4 (0x40533cd4) libstdc++-libc6.1-1.so.2 + 0x3132e (0x4062132e) nsImageGTK::~nsImageGTK() nsImageGTK::Release() nsCOMPtr_base::~nsCOMPtr_base() gfxImageFrame::~gfxImageFrame() gfxImageFrame::Release() nsSupportsArray::Clear() imgContainer::~imgContainer() imgContainer::Release() nsCOMPtr_base::~nsCOMPtr_base() imgRequest::~imgRequest() imgRequest::Release() imgRequestProxy::~imgRequestProxy() imgRequestProxy::Release() XPCJSRuntime::GCCallback() DOMGCCallback() js_GC() js_ForceGC() JS_GC() nsJSContext::Notify() nsTimerImpl::Process() handleMyEvent() PL_HandleEvent() PL_ProcessPendingEvents() nsEventQueueImpl::ProcessPendingEvents() event_processor_callback() our_gdk_io_invoke() libglib-1.2.so.0 + 0xff9e (0x40385f9e) libglib-1.2.so.0 + 0x11773 (0x40387773) libglib-1.2.so.0 + 0x11d39 (0x40387d39) libglib-1.2.so.0 + 0x11eec (0x40387eec) libgtk-1.2.so.0 + 0x94333 (0x402a2333) nsAppShell::Run() nsAppShellService::Run() main1() main() libc.so.6 + 0x1c627 (0x404cf627) Adding testcase keyword, since it's clear that http://www.isdn.cz is crashing the browser.

*** Bug 117693 has been marked as a duplicate of this bug. ***

This seems to be a dupe of bug#94336. I tested by applying the patch having changes nsImageGTK.cpp, and I longer experience the crash.

I don't see any crashes like this anymore in the Talkback data...and with Comment #31 From Nivedita we can either mark this one worksforme or a dup of bug 94336. Pav, what do you think?

Not crashing anymore in 2002030414 m0.9.9 build. I was crashing before the checkin.

v.wfm per Comment #33 From Tom Mraz