[Bug 19633] New: Repeatable gecko crash

http://bugs.winehq.org/show_bug.cgi?id=19633

Summary: Repeatable gecko crash
           Product: Wine
           Version: 1.1.27
          Platform: PC
        OS/Version: Linux
            Status: NEW
          Keywords: download, regression, source
          Severity: normal
          Priority: P2
         Component: mshtml
        AssignedTo: [e-mail]
        ReportedBy: [e-mail]

To reproduce:
  wine iexplore http://kegel.com
click on first link ("NT vs. Linux Server Benchmark Comparisons")
click on first content link ("updated article at itweek.co.uk")
wait ten seconds
Boom!

This worked in wine-1.1.26, probably it's the new gecko.

The log shows:

fixme:mshtml:HttpNegotiate_OnResponse (0x2765018)->(303 L"HTTP/1.1 303 Object
Moved\r\nConnection: close\r\nDate: Sat, 08 Aug 2009 22:44:59 GMT\r\nServer:
Microsoft-IIS/6.0\r\nLocation:
/dcsptou5of9xjy8pgpa4kos1s_1q6g/dcs.gif?dcsredirect=126&dcstlh=0&dcstlv=0&dcsdat=1249771540478&dcssip=www.computing.co.uk&dcsuri=/itweek/news/2085218/samba-extends-lead-win-"...
(null) 0x32f988)
wine: Unhandled page fault on read access to 0x00000000 at address (nil)
(thread 0009), starting debugger...
Unhandled exception: page fault on read access to 0x00000000 in 32-bit code
(0x00000000).
Backtrace:
=>0 0x00000000 (0x0032fbb8)
  1 0x7e189eed in mshtml (+0x59eed) (0x0032fbe8)
  2 0x7e38fa88 in urlmon (+0xfa88) (0x0032fc18)
  3 0x7e390ecd in urlmon (+0x10ecd) (0x0032fc38)
  4 0x7e39204f in urlmon (+0x1204f) (0x0032fc78)
  5 0x7e395aa1 in urlmon (+0x15aa1) (0x0032fc98)
  6 0x7e397605 in urlmon (+0x17605) (0x0032fcc8)
  7 0x7ebaf93a WINPROC_wrapper+0x1a() in user32 (0x0032fcf8)

[Bug 19633] Repeatable gecko crash

http://bugs.winehq.org/show_bug.cgi?id=19633

André H.  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[e-mail],
                   |                            |[e-mail]

--- Comment #1 from André H.   2009-08-09 06:20:14 ---
can confirm this in wine 1.1.27
for me its crashing with Unhandled exception: page fault on execute access to
0x00000022 in 32-bit code (0x00000022).

I think its line "return This->vtbl->stop_binding(This, hresult);" in
BindStatusCallback_OnStopBinding (mshtml/navigate.c)

[Bug 19633] Repeatable gecko crash

http://bugs.winehq.org/show_bug.cgi?id=19633

--- Comment #2 from Jacek Caban   2009-08-10 12:19:26 ---
This patch fixes the bug for me:
http://www.winehq.org/pipermail/wine-patches/2009-August/076834.html

[Bug 19633] Repeatable gecko crash

http://bugs.winehq.org/show_bug.cgi?id=19633

Jacek Caban  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |FIXED

--- Comment #3 from Jacek Caban   2009-08-11 11:02:24 ---
Patch is in Git.

[Bug 19633] Repeatable gecko crash

http://bugs.winehq.org/show_bug.cgi?id=19633

--- Comment #4 from André H.   2009-08-11 13:30:02 ---
yes its fixed, great work!

[Bug 19633] Repeatable gecko crash

http://bugs.winehq.org/show_bug.cgi?id=19633

Alexandre Julliard  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |CLOSED

--- Comment #5 from Alexandre Julliard   2009-08-21 12:56:48 ---
Closing bugs fixed in 1.1.28.