After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 97544 - Crashes in css_matcher_apply_rule()
Crashes in css_matcher_apply_rule()
Status: VERIFIED INCOMPLETE
Product: gtkhtml2
Classification: Deprecated
Component: CSS Parser
2.0.x
Other other
: Normal normal
: ---
Assigned To: Pawel Salek
Pawel Salek
Depends on:
Blocks:
 
 
Reported: 2002-11-03 07:32 UTC by James Pole
Modified: 2009-08-15 18:40 UTC
See Also:
GNOME target: ---
GNOME version: ---


Attachments
The html file gtkhtml2 crashes on. (554 bytes, text/html)
2002-12-31 19:15 UTC, Pawel Salek
Details

Description James Pole 2002-11-03 08:00:37 UTC
Package: balsa
Severity: major
Version: 2.0.3
Synopsis: Crashes when trying to read a specific email message
Bugzilla-Product: balsa
Bugzilla-Component: general
BugBuddy-GnomeVersion: 2.0 (2.0.5)

Description:
Description of Problem:
When I try to read the email titled "Competitive quotes (8W)" from
Maccormack Diffenderfer (mbox extract of the email aviliable at bottom
of bug reportt) Balsa crashses. The backtrace looks like an
muti-threading error (which is somewhat common under FreeBSD) but the
fact it *always* happens with this particular email and not any other
email at all strikes me as odd -- so I've submitted this report.

Steps to reproduce the problem:
1. Open up the email box with the offending email in it.
2. Click on the "Competitive quotes (8W)" email.

Actual Results:
The program crashes.

Expected Results:
The email should be displayed.

How often does this happen?
Every time the above steps are repeated.



Mbox extract of the offending email:-
======================================================================
From owner-nzfug@nz.freebsd.org Fri Oct 18 07:32:16 2002
Return-Path: <owner-nzfug-nz-freebsd-org@lists.unixathome.org>
Delivered-To: james.pole@paradise.net.nz
X-Envelope-To: james.pole@paradise.net.nz
Received: (qmail 45254 invoked from network); 18 Oct 2002 07:32:16
-0000
Received: from lists.unixathome.org (210.48.103.158) by
	pop3-1.paradise.net.nz with SMTP; 18 Oct 2002 07:32:16 -0000
Received: from lists.unixathome.org (majordom@localhost [127.0.0.1]) by
	lists.unixathome.org (8.12.5/8.12.5) with ESMTP id g9I7UW6R007425 for
	<nzfug-nz-freebsd-org-outgoing@lists.unixathome.org>; Fri, 18 Oct 2002
	20:30:33 +1300 (NZDT) (envelope-from owner-nzfug@nz.freebsd.org)
Received: (from majordom@localhost) by lists.unixathome.org
	(8.12.5/8.12.5/Submit) id g9I7UWIS007424 for
nzfug-nz-freebsd-org-outgoing;
	Fri, 18 Oct 2002 20:30:32 +1300 (NZDT)
X-Authentication-Warning: lists.unixathome.org: majordom set sender to
	owner-nzfug@nz.freebsd.org using -f
Received: from fep02-svc.flexmail.it (fep02.tuttopmi.it
[212.131.248.101])
	by lists.unixathome.org (8.12.5/8.12.5) with ESMTP id g9I7UN6R007419
for
	<nzfug@nz.freebsd.org>; Fri, 18 Oct 2002 20:30:24 +1300 (NZDT)
	(envelope-from HardnetteBrar@alloymail.com)
Received: from [217.57.226.78] by fep02-svc.flexmail.it (InterMail
	vM.5.01.05.09 201-253-122-126-109-20020611) with SMTP id
	<20021018073020.NJLZ21529.fep02-svc.flexmail.it@[217.57.226.78]>; Fri,
18
	Oct 2002 09:30:20 +0200
Date: Fri, 11 Oct 2002 00:17:55 -0400
To: "Liptow Galang" <Tenen@hotmail.com>
Reply-To: brennerburkholderkwvjidkgn@yahoo.com
From: "Maccormack Diffenderfer" <MaccormackDiffenderfer@alloymail.com>
Subject: Competitive quotes (8W)
Importance: Normal
Organization: U0J8SgqOQMXK4L
X-MSMail-Priority: Normal
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="3WWRy7cXNR0LV2YSKeey8U1---MinemindfxxyfcV3cBkAa26vxmflVsM0TRbQq83="
Content-Transfer-Encoding: 7bit
Message-Id:
<20021018073020.NJLZ21529.fep02-svc.flexmail.it@[217.57.226.78]>
Sender: owner-nzfug@nz.freebsd.org
Precedence: bulk
X-Evolution-Source: pop://james.pole@pop3.paradise.net.nz/inbox
X-Evolution: 0000000c-0012
Status: O
Content-Length: 2486
Lines: 33


--3WWRy7cXNR0LV2YSKeey8U1---MinemindfxxyfcV3cBkAa26vxmflVsM0TRbQq83=
Content-Transfer-Encoding: 7bit
Content-Type: text/html; charset="ISO-8859-1"

<CENTER>
<table border=1 cellspacing=0 cellpadding=5 width=500
bordercolor=#202F51 bgcolor=#F7F7F7>
<TR><TD ALIGN=CENTER VALIGN=middle>
<A HREF="http://secure-mall.net/smort/5/" style="FONT-SIZE: 16px;
TEXT-DECORATION: none; COLOR: BLACK; FONT-FAMILY: Helvetica, Arial,
Verdana;">
<B>:::&nbsp;&nbsp;&nbsp;<FONT COLOR=RED>Free</FONT> <FONT
COLOR=5555BF>Mortgage Loan Quote!</FONT>&nbsp;&nbsp;&nbsp;:::</A></B>
</TD></TR><TR><TD ALIGN=LEFT VALIGN=middle><CENTER>
<FONT style="FONT-SIZE: 14px; TEXT-DECORATION: none; COLOR: BLACK;
FONT-FAMILY: Helvetica, Arial, Verdana;">
Already found a home or just need to get pre-qualified to buy one? You
may be able to qualify for more than you ever thought possible! Here is
the best part its completely <FONT COLOR=RED><B>FREE</B></FONT><BR><BR>
<A HREF="http://secure-mall.n%65t/smort/5/" style="FONT-SIZE: 15px;
TEXT-DECORATION: underline; COLOR: 5555BF; FONT-FAMILY: Helvetica,
Arial, Verdana;"><B> &#62&#62 Click Here to Get Started! &#60&#60
</B></A><BR><BR>
We offer you <B>great rates and flexible options</B> that meet your
needs, no matter who you are!<BR><BR>
Whether you are purchasing your first home, moving your mortgage,
re-financing, or just looking for a pre-approval, <B>we can help you
save your money</B><BR><BR>
<FONT style="FONT-SIZE: 16px; TEXT-DECORATION: none; COLOR: RED;
FONT-FAMILY: Helvetica, Arial, Verdana;">
<B>Getting Approved Has Never Been Easier!</B><BR><BR>
<A HREF="http://secure-mall.net/smort/5/" style="FONT-SIZE: 15px;
TEXT-DECORATION: underline; COLOR: 5555BF; FONT-FAMILY: Helvetica,
Arial, Verdana;"><B> &#62&#62 Click Here to Get Your Free Quote!
&#60&#60 </B></A><BR><BR>
<FONT style="FONT-SIZE: 14px; TEXT-DECORATION: none; COLOR: BLACK;
FONT-FAMILY: Helvetica, Arial, Verdana;">
This i&#115 your chance to receive the cash you need simplyby filling
out our short questionnaire! It worked for thousands and now it can work
for you!<BR><BR>
</TD></TR></TABLE>
<FONT style="FONT-SIZE: 10px; TEXT-DECORATION: none; COLOR: GRAY;
FONT-FAMILY: Arial, Verdana, Helvetica;">
***To unsubscribe please reply to this email***
</CENTER>
48PJ0vuq5L6wfj6dTYxkJ776QtU823a17h833WWR

--3WWRy7cXNR0LV2YSKeey8U1---MinemindfxxyfcV3cBkAa26vxmflVsM0TRbQq83=--

 
To unsubscribe: send mail to majordomo@nz.freebsd.org 
with "unsubscribe nzfug" in the body of the message 
======================================================================



Debugging Information:

Backtrace was generated from '/usr/X11R6/bin/balsa'

(no debugging symbols found)...(no debugging symbols found)...
(no debugging symbols found)...(no debugging symbols found)...
(no debugging symbols found)...0x29076df0 in _thread_sys_poll ()
   from /usr/lib/libc_r.so.4

Thread 1 (process 81810, thread 1)

  • #0 _thread_sys_poll
    from /usr/lib/libc_r.so.4
  • #1 _thread_kern_sched_state_unlock
    from /usr/lib/libc_r.so.4
  • #2 _thread_kern_scheduler
    from /usr/lib/libc_r.so.4
#3  0x0 in ?? ()
No symbol table info available.




------- Bug moved to this database by unknown@bugzilla.gnome.org 2002-11-03 03:00 -------

Reassigning to the default owner of the component, pawsa@theochem.kth.se.

Comment 1 Pawel Salek 2002-11-03 09:15:18 UTC
This looks like a gtkhtml2 problem to me. Can you please report its
version?
Comment 2 Pawel Salek 2002-11-03 09:46:20 UTC
More useful backtrace is:

Program received signal SIGSEGV, Segmentation fault.

Thread 8192 (LWP 6834)

  • #0 css_matcher_apply_rule
    from /usr/lib/libgtkhtml-2.so.0
  • #1 css_matcher_get_style
    from /usr/lib/libgtkhtml-2.so.0
  • #2 html_document_node_inserted_traverser
    from /usr/lib/libgtkhtml-2.so.0
  • #3 html_document_new_node
    from /usr/lib/libgtkhtml-2.so.0
  • #4 g_cclosure_marshal_VOID__OBJECT
    from /usr/lib/libgobject-2.0.so.0
  • #5 g_closure_invoke
    from /usr/lib/libgobject-2.0.so.0
  • #6 signal_emit_unlocked_R
    from /usr/lib/libgobject-2.0.so.0
  • #7 g_signal_emit_valist
    from /usr/lib/libgobject-2.0.so.0
  • #8 g_signal_emit
    from /usr/lib/libgobject-2.0.so.0
  • #9 html_parser_emit_new_node
    from /usr/lib/libgtkhtml-2.so.0
  • #10 htmlParseStartTag
    from /usr/lib/libxml2.so.2
  • #11 htmlParseTryOrFinish
    from /usr/lib/libxml2.so.2
  • #12 htmlParseChunk
    from /usr/lib/libxml2.so.2
  • #13 html_parser_stream_write
    from /usr/lib/libgtkhtml-2.so.0
  • #14 html_stream_write
    from /usr/lib/libgtkhtml-2.so.0
  • #15 html_document_write_stream
    from /usr/lib/libgtkhtml-2.so.0
  • #16 part_info_init_html
    at balsa-message.c line 1676

Unfortunately, bug-buddy becomes useless when reporting gtkhtml2 bugs.
(is this a feature?)

I could reproduce the crash with gtkhtml2-2.0.1-2 as distributed with
RH8.0. Is there a fix available for this crash?
Comment 3 James Pole 2002-11-04 03:18:35 UTC
FYI, I use libgtkhtml-2.0.2 from the FreeBSD ports collection. 
  
- James 
Comment 4 James Pole 2002-11-08 21:14:42 UTC
Have there been any more progress toward fixing this bug? 
 
- James 
Comment 5 Pawel Salek 2002-12-31 19:12:12 UTC
Yet another crash in this routine:
(gdb) bt
  • #0 css_matcher_apply_rule
    from /usr/lib/libgtkhtml-2.so.0
  • #1 css_matcher_get_style
    from /usr/lib/libgtkhtml-2.so.0
  • #2 html_document_node_inserted_traverser
    from /usr/lib/libgtkhtml-2.so.0
  • #3 html_document_new_node
    from /usr/lib/libgtkhtml-2.so.0
  • #4 g_cclosure_marshal_VOID__OBJECT
    from /usr/lib/libgobject-2.0.so.0
  • #5 g_closure_invoke
    from /usr/lib/libgobject-2.0.so.0
  • #6 signal_emit_unlocked_R
    from /usr/lib/libgobject-2.0.so.0
  • #7 g_signal_emit_valist
    from /usr/lib/libgobject-2.0.so.0
  • #8 g_signal_emit
    from /usr/lib/libgobject-2.0.so.0
  • #9 html_parser_emit_new_node
    from /usr/lib/libgtkhtml-2.so.0
  • #10 htmlParseStartTag
    from /usr/lib/libxml2.so.2
  • #11 htmlParseTryOrFinish
    from /usr/lib/libxml2.so.2
  • #12 htmlParseChunk
    from /usr/lib/libxml2.so.2
  • #13 html_parser_stream_write
    from /usr/lib/libgtkhtml-2.so.0
  • #14 html_stream_write
    from /usr/lib/libgtkhtml-2.so.0
  • #15 html_document_write_stream
    from /usr/lib/libgtkhtml-2.so.0

Comment 6 Pawel Salek 2002-12-31 19:15:47 UTC
Created attachment 13297 [details]
The html file gtkhtml2 crashes on.
Comment 7 Pawel Salek 2003-01-06 13:52:41 UTC
This problem is apparently fixed in gtkhtml2-2.1.3.
Comment 8 Elijah Newren 2003-03-04 22:54:12 UTC
I apologize for the spam, but in talking to David Kennedy on #bugs we decided
that it might be useful for me to add a comment to a lot of bugs that have
nearly identical stack traces that aren't very useful.  (It took me a while
because I gave up on several bugzilla queries that simply hung).  Anyway, I may
have caught some bugs with this query that aren't relevant, so I apologize again
if this bug is one of those.  If not:

The following comment from 100709 may be relevant: "It turns out this was an
accidental FreeBSD ABI change during the import of gcc-3.2.1. div(), a structure
returning function, was the culprit."