[Bug 212345] [NEW] firefox crash in nsROCSSPrimitiveValue::GetCssText

[AnnanH]

Public bug reported:

Binary package hint: firefox

Hi,

  This is entirely reproducible.  The workflow is looking the Boost
Serialization documentation, expanding the Tutorial link, clicking on
the "A simple case" link, and then clicking into the frame on the right.

  I installed firefox-dgb, here's the stack trace:

(gdb) where
#0  0xb6c371e0 in nsROCSSPrimitiveValue::GetCssText (this=0x8f7a778, 
    aCssText=@0x8d9f480) at nsROCSSPrimitiveValue.cpp:254
#1  0xb6c2f998 in ?? () at nsCSSPropList.h:422
   from /usr/lib/firefox/components/libgklayout.so
#2  0x08f7a778 in ?? ()
#3  0x08d9f480 in ?? ()
#4  0xbfd53d18 in ?? ()
#5  0xbfd53dc0 in ?? ()
#6  0xbfd53dbc in ?? ()
#7  0xbfd53db8 in ?? ()
#8  0xbfd53d28 in ?? ()
#9  0xb7e976ac in nsCString::CompressWhitespace (this=0x8f7a778, 
    aTrimLeading=148501632, aTrimTrailing=-1076543104) at nsStringObsolete.cpp:442
#10 0xb6bebf3f in nsListControlFrame::UpdateSelection (this=0xb6c2f910)
    at ../../dist/include/xpcom/nsCOMPtr.h:542
#11 0xb6be6792 in ~nsImageControlFrame (this=0x8f7a778) at nsImageControlFrame.cpp:141
#12 0xb6bc4c5b in nsTextFrame::PeekOffset (this=0x8f0b1d8, aPresContext=0xbfd53a4c, 
    aPos=0xb704b53c) at nsTextFrame.cpp:4729
#13 0xb6bc5653 in nsTextFrame::SetSelected (this=0x0, aPresContext=0x8f5fb00, 
    aRange=0xbfd54178, aSelected=-1076543588, aSpread=eSpreadNone)
    at nsTextFrame.cpp:4201
#14 0xb6e9a80e in nsTreeRows::iterator::operator= (this=0x8e85568, 
    aIterator=@0x8d9f0d0) at nsTreeRows.cpp:342
#15 0xb6e9ce3c in nsRDFConMemberTestNode::FilterInstantiations (this=0x8e85568, 
    aInstantiations=@0xbfd54178, aClosure=0xbfd540e0)
    at ../../../../dist/include/xpcom/nsCOMPtr.h:731
#16 0xb6e917a6 in nsGridLayout2::GetPrefSize (this=0xbfd54178, aBox=0x0, 
    aState=@0xb68bc45d, aSize=@0xb68db874) at nsGridLayout2.cpp:148
#17 0xb68c4e5e in ?? () from /usr/lib/libnss3.so.0d
#18 0xbfd54178 in ?? ()
#19 0x00000000 in ?? ()
(gdb) frame 0

ProblemType: Bug
Architecture: i386
Date: Sat Apr  5 08:37:49 2008
DistroRelease: Ubuntu 7.10
NonfreeKernelModules: fglrx
Package: firefox 2.0.0.13+1nobinonly-0ubuntu0.7.10
PackageArchitecture: i386
SourcePackage: firefox
Uname: Linux aharley-laptop 2.6.22-14-generic #1 SMP Tue Feb 12 07:42:25 UTC 2008 i686 GNU/Linux

** Affects: firefox (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: apport-bug

-- 
firefox crash in nsROCSSPrimitiveValue::GetCssText
https://bugs.launchpad.net/bugs/212345
You received this bug notification because you are a member of Mozilla
Bugs, which is subscribed to firefox in ubuntu.