Bug 116256 – Crash on switching to a tab, whose contents were closed by a javascript.

After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.

Bug 116256 - Crash on switching to a tab, whose contents were closed by a javascript.


Summary:	Crash on switching to a tab, whose contents were closed by a javascript.


Status:	RESOLVED FIXED

Product:	galeon
Classification:	Deprecated
Component:	Mozilla interaction
Version:	1.3.5
Hardware:	Other other

Importance:	Normal normal
Target Milestone:	2.0
Assigned To:	Philip Langdale
QA Contact:	Yanko Kaneti

URL:
Whiteboard:

Duplicates:	100707 119504 119507 121071 (view as bug list)
Depends on:
Blocks:

Reported:	2003-06-29 13:24 UTC by Erich Schubert
Modified:	2004-12-22 21:47 UTC

See Also:
GNOME target:	---
GNOME version:	---

Attachments
Patch to fix the crash (2.35 KB, patch) 2003-08-09 22:41 UTC, Crispin Flowerday (not receiving bugmail)	none	Details \| Review

Description Erich Schubert 2003-06-29 13:26:21 UTC

Package: galeon
Severity: normal
Version: 1.3.5
Synopsis: Crash on switching to a tab, whose contents were closed by a javascript.
Bugzilla-Product: galeon
Bugzilla-Component: Mozilla interaction
BugBuddy-GnomeVersion: 2.0 (2.2.1)

Description:
Description of Problem:
When trying to switch to a tab whose mozilla component was probably
destroyed by javascript, galeon crashes.

Steps to reproduce the problem:
1. Enable "open new tabs behind current tab" and "popups in tabs"
2. Go to http://www.map24.com/ and search for any route (for example:
Perl (D) to Apach (F) ;) - keep the main tab in front.
3. Wait for the map to appear in the main window. The "please wait while
generating" tab should then have been closed, but will stay open.
4. switch to the other tab.

Actual Results:
Galeon segfaults with the attached backtrace.

Expected Results:
The tab should have disappeared when the window was closed by
javascript

How often does this happen?
Reproduceable using above procedure.

Additional Information:
Using current debian unstable. 1.3.5.20030615



Debugging Information:

Backtrace was generated from '/usr/lib/galeon-bin'

(no debugging symbols found)...(no debugging symbols found)...
[....]
(no debugging symbols found)...(no debugging symbols found)...[New
Thread 16384 (LWP 1910)]
[New Thread 32769 (LWP 4305)]
[New Thread 16386 (LWP 28676)]
[New Thread 32771 (LWP 9769)]
[New Thread 49156 (LWP 9040)]
[New Thread 65541 (LWP 6997)]

(no debugging symbols found)...(no debugging symbols found)...
[....]
(no debugging symbols found)...0x40ba3af9 in wait4 () from
/lib/libc.so.6

+ Trace 38270

Thread 1 (Thread 16384 (LWP 1910))

#0 wait4
from /lib/libc.so.6
#1 sys_sigabbrev
from /lib/libc.so.6
#2 ??
#3 waitpid
from /lib/libc.so.6
#4 waitpid
from /lib/libpthread.so.0
#5 libgnomeui_module_info_get
from /usr/lib/libgnomeui-2.so.0
#6 __pthread_sighandler
from /lib/libpthread.so.0
#7 <signal handler called>
#8 g_type_check_instance_is_a
from /usr/lib/libgobject-2.0.so.0
#9 gtk_widget_child_focus
from /usr/lib/libgtk-x11-2.0.so.0
#10 gtk_notebook_new
from /usr/lib/libgtk-x11-2.0.so.0
#11 _gtk_marshal_BOOLEAN__BOXED
from /usr/lib/libgtk-x11-2.0.so.0
#12 g_cclosure_new_swap
from /usr/lib/libgobject-2.0.so.0
#13 g_closure_invoke
from /usr/lib/libgobject-2.0.so.0
#14 g_signal_emit_by_name
from /usr/lib/libgobject-2.0.so.0
#15 g_signal_emit_valist
from /usr/lib/libgobject-2.0.so.0
#16 g_signal_emit
from /usr/lib/libgobject-2.0.so.0
#17 gtk_widget_send_expose
from /usr/lib/libgtk-x11-2.0.so.0
#18 gtk_propagate_event
from /usr/lib/libgtk-x11-2.0.so.0
#19 gtk_main_do_event
from /usr/lib/libgtk-x11-2.0.so.0
#20 _gdk_events_queue
from /usr/lib/libgdk-x11-2.0.so.0
#21 unblock_source
from /usr/lib/libglib-2.0.so.0
#22 g_main_context_dispatch
from /usr/lib/libglib-2.0.so.0
#23 g_main_context_dispatch
from /usr/lib/libglib-2.0.so.0
#24 g_main_loop_run
from /usr/lib/libglib-2.0.so.0
#25 bonobo_main
from /usr/lib/libbonobo-2.so.0
#26 main
#27 __libc_start_main
from /lib/libc.so.6
#28 _start
#0 wait4
from /lib/libc.so.6




------- Bug moved to this database by unknown@bugzilla.gnome.org 2003-06-29 09:26 -------

Unknown version 1.3.x in product galeon. Setting version to the default, "unspecified".
Reassigning to the default owner of the component, philipl@mail.utexas.edu.

Comment 1 Tommi Komulainen 2003-07-25 01:48:48 UTC

Is this still reproducable in 1.3.7 (and preferrably with Mozilla 1.4)?

Comment 2 Erich Schubert 2003-07-25 07:24:45 UTC

Hi, still reproduceable with
galeon Version: 1.3.5.20030714-3
mozilla Version: 2:1.4-2

will try with 1.3.7 when the debian package is updated.

Comment 3 Crispin Flowerday (not receiving bugmail) 2003-08-09 22:40:42 UTC

I am attaching a patch that fixes the crashing issue. The problem is
that mozilla doesn't seem to be emitting the destroy_browser signal
when the window isn't focused. It only emits it when it gets the focus
when selecting the tab, which then causes the tab label to get deleted
from underneath the gtk_notebook's feet causing the crash.

Comment 4 Crispin Flowerday (not receiving bugmail) 2003-08-09 22:41:41 UTC

Created attachment 19064 [details] [review]
Patch to fix the crash

Comment 5 Yanko Kaneti 2003-08-10 00:38:07 UTC

*** Bug 119504 has been marked as a duplicate of this bug. ***

Comment 6 Yanko Kaneti 2003-08-10 00:39:53 UTC

*** Bug 119507 has been marked as a duplicate of this bug. ***

Comment 7 Crispin Flowerday (not receiving bugmail) 2003-08-29 19:36:51 UTC

*** Bug 100707 has been marked as a duplicate of this bug. ***

Comment 8 Crispin Flowerday (not receiving bugmail) 2003-08-30 14:51:44 UTC

Fixed in CVS

Comment 9 Crispin Flowerday (not receiving bugmail) 2003-08-30 16:21:19 UTC

*** Bug 121071 has been marked as a duplicate of this bug. ***