[Bug 30739] New: crashe in async_stop_request (dlls/mshtml/navigate.c:1352)

http://bugs.winehq.org/show_bug.cgi?id=30739

Bug #: 30739
           Summary: crashe in async_stop_request
                    (dlls/mshtml/navigate.c:1352)
           Product: Wine
           Version: 1.5.4
          Platform: x86
        OS/Version: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: mshtml
        AssignedTo: [e-mail]
        ReportedBy: [e-mail]
    Classification: Unclassified

Created attachment 40245
  --> http://bugs.winehq.org/attachment.cgi?id=40245
backtrace (64bit)

Wine eat all the cpu and then crash in mshtml, async_stop_request, when
visiting http://www.wondershare.com/android-manager/guide.html&back_url=

Wine works it works, when I remove the "&back_url=" part
 http://www.wondershare.com/android-manager/guide.html

page fault on read access to 0x00000148 in 64-bit code
()
location in async_stop_request is dlls/mshtml/navigate.c:1352,
called from nsChannelBSC_stop_binding at dlls/mshtml/navigate.c:1454

[Bug 30739] crash in async_stop_request (dlls/mshtml/navigate.c:1352)

http://bugs.winehq.org/show_bug.cgi?id=30739

Detlef Riekenberg  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[e-mail]
            Summary|crashe in                   |crash in async_stop_request
                   |async_stop_request          |(dlls/mshtml/navigate.c:135
                   |(dlls/mshtml/navigate.c:135 |2)
                   |2)                          |

[Bug 30739] crash in async_stop_request (dlls/mshtml/navigate.c:1352)

http://bugs.winehq.org/show_bug.cgi?id=30739

--- Comment #1 from Detlef Riekenberg  2012-05-21 04:09:04 CDT ---
Created attachment 40246
  --> http://bugs.winehq.org/attachment.cgi?id=40246
backtrace (32bit)

backtrace for 32bit wine

[Bug 30739] crash in async_stop_request (dlls/mshtml/navigate.c:1352)

http://bugs.winehq.org/show_bug.cgi?id=30739

--- Comment #2 from Detlef Riekenberg  2012-05-21 04:26:28 CDT ---
Created attachment 40247
  --> http://bugs.winehq.org/attachment.cgi?id=40247
+mshtml,+urlmon,+ieframe console log (32bit)

When creating the previous backtracees, there was an url with a .png and
Wine eat all the cpu power for some seconds before crashing.

I can`t reproduce the cpu eating now. (the web cache might make the
difference).

[Bug 30739] crash in async_stop_request (dlls/mshtml/navigate.c:1352)

http://bugs.winehq.org/show_bug.cgi?id=30739

--- Comment #3 from Jacek Caban  2012-07-20 06:00:12 CDT ---
This is probably fixed by bbaa307fdf9904aa90ff870079d508f0ebb1c564, please
retest.

[Bug 30739] crash in async_stop_request (dlls/mshtml/navigate.c:1352)

http://bugs.winehq.org/show_bug.cgi?id=30739

Jacek Caban  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
      Fixed by SHA1|                            |bbaa307fdf9904aa90ff870079d
                   |                            |508f0ebb1c564
             Status|NEW                         |RESOLVED
         Resolution|                            |FIXED

--- Comment #4 from Jacek Caban  2012-09-26 02:46:26 CDT ---
Assuming fixed, please reopen if it's not.

[Bug 30739] crash in async_stop_request (dlls/mshtml/navigate.c:1352)

http://bugs.winehq.org/show_bug.cgi?id=30739

Alexandre Julliard  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |CLOSED

--- Comment #5 from Alexandre Julliard  2012-09-28 13:43:08 CDT ---
Closing bugs fixed in 1.5.14.