Repeatable Crash in TextArea Box

Eric Kratschmer's Avatar

Eric Kratschmer

15 Aug, 2016 08:07 PM

Good morning,

I have the following repeatable crash using 38.10 for G5: If I go to enter text into a form which uses the <TextArea> input tag the browser crashes immediately upon clicking in the box, or tabbing into the box and entering the first character. Upon restart and "reload the page" I can fill the form out. This is consistent at any website which has a form with a TextArea tag. Once crashed and reopened, I can revisit the form and entrer text successfully so long as I have not closed the browser session.

This goes back at least to 36.x (or before?) using both the G5 version on my desktop and the G4e version on my laptop.

I found references to crashes in FireFox when attempting to paste large blocks of text but nothing about crashing when selecting an entry point.

On a different note, thank you so much for maintaining TenFourFox -my PPC boxes are rock solid and I see no reason at all to scrap them.

  1. Support Staff 1 Posted by Cameron Kaiser on 15 Aug, 2016 11:27 PM

    Cameron Kaiser's Avatar

    <textarea> is a very, very, very common tag (the Tenderapp comment box I'm typing into on my quad G5 is a text area box). If this were a core bug, I would expect many more reports about it, since lots of forms would be affected. I can't reproduce this on 38.10 or 45.3b1.

    Here is a page with just a naked <textarea> container:

    http://www.floodgap.com/software/tenfourfox/bleh/textarea.html

    If the crash happens there, please provide me with a crash dump or log so I can see where your browser bombed out. I suspect you have an incompatible input method or some other similar system issue.

  2. 2 Posted by Eric on 16 Aug, 2016 01:33 AM

    Eric's Avatar

    Hi Cameron,

    Thanks for the rapid response.

    I went to the textarea.html and did not get a crash exactly -I got a
    spinning beachball (well, thats new!); I finally had to do a force
    quit. When I relaunched and clicked in the box again I was able to
    enter text... Sigh.

    Viewing your source the only difference I noted was in the textarea
    boxes which have caused my crashes the size of the boxes was called
    out in the format "cols='60' rows='8'" . That and the fact that the
    textarea is always inside a form and being used as an input.

    The freeze tonight was on my home laptop with OS X 10.4.11 running
    TenFourFox7450-38.10.0:

      Machine Name: PowerBook G4 15"
       Machine Model: PowerBook3,5
       CPU Type: PowerPC G4 (3.3)
       Number Of CPUs: 1
       CPU Speed: 1 GHz
       L2 Cache (per CPU): 256 KB
       L3 Cache (per CPU): 1 MB
       Memory: 1 GB
       Bus Speed: 133 MHz
       Boot ROM Version: 4.5.3f2

    What is interesting is that I can do this on my G5 desktop at work
    and my G4 laptop at home. They are not synched and the only thing in
    common is I exported my bookmarks from work and imported them into
    the laptop- 18 months ago, and at least 6 months before these crashes
    started. Both 10.4 installs were straight from disk and configured
    independently, no caches or preferences were transferred.

    I just went to a website I maintain- no java, strait HTML 4
    transitional with CSS 2:

       http://www.spindustries.com/contact/form_feedback.html and clicked
    in this box:

       <textarea name="comments" cols="50" rows="6"></textarea>

    and immediately crashed. Here is the crash report Apple's reporter
    generated. I hope this helps:

    Date/Time: 2016-08-15 21:18:35.927 -0400
    OS Version: 10.4.11 (Build 8S165)
    Report Version: 4

    Command: firefox
    Path: /Applications/TenFourFox7450.app/Contents/MacOS/firefox
    Parent: WindowServer [530]

    Version: 38.10.0 (3816.7.29)

    PID: 973
    Thread: 0

    Exception: EXC_BAD_ACCESS (0x0001)
    Codes: KERN_INVALID_ADDRESS (0x0001) at 0x830a2511

    Thread 0 Crashed:
    0 libobjc.A.dylib 0x90a415a8 class_initialize + 132
    1 libobjc.A.dylib 0x90a412fc
    _class_lookupMethodAndLoadCache + 132
    2 libobjc.A.dylib 0x90a411d4 objc_msgSend + 244
    3 com.apple.AppKit 0x937cdbb0 +[NSGraphicsContext
    setCurrentContext:] + 80
    4 XUL 0x063e1898
    _ZNSt8_Rb_treeIN7mozilla3dom6IdTypeINS1_9TabParentEEESt4pairIKS4_8nsRefPtrINS1_8TabChildEEESt10_Select1stISA_ESt4lessIS4_ESaISA_EE17_M_insert_unique_ISA_EESt17_Rb_tree_iteratorISA_ESt23_Rb_tree_const_iteratorISA_EOT_
    + 2632744
    5 XUL 0x0666b19c
    _ZNSt8_Rb_treeIN7mozilla3dom6IdTypeINS1_9TabParentEEESt4pairIKS4_8nsRefPtrINS1_8TabChildEEESt10_Select1stISA_ESt4lessIS4_ESaISA_EE17_M_insert_unique_ISA_EESt17_Rb_tree_iteratorISA_ESt23_Rb_tree_const_iteratorISA_EOT_
    + 5293356
    6 XUL 0x06603db0
    _ZNSt8_Rb_treeIN7mozilla3dom6IdTypeINS1_9TabParentEEESt4pairIKS4_8nsRefPtrINS1_8TabChildEEESt10_Select1stISA_ESt4lessIS4_ESaISA_EE17_M_insert_unique_ISA_EESt17_Rb_tree_iteratorISA_ESt23_Rb_tree_const_iteratorISA_EOT_
    + 4870464
    7 XUL 0x06604480
    _ZNSt8_Rb_treeIN7mozilla3dom6IdTypeINS1_9TabParentEEESt4pairIKS4_8nsRefPtrINS1_8TabChildEEESt10_Select1stISA_ESt4lessIS4_ESaISA_EE17_M_insert_unique_ISA_EESt17_Rb_tree_iteratorISA_ESt23_Rb_tree_const_iteratorISA_EOT_
    + 4872208
    8 XUL 0x04fbdea8 void
    std::__stable_sort_adaptive<__gnu_cxx::__normal_iterator<nsRefPtr<mozilla::layers::AsyncPanZoomController>*,
    std::vector<nsRefPtr<mozilla::layers::AsyncPanZoomController>,
    std::allocator<nsRefPtr<mozilla::layers::AsyncPanZoomController> > > >,
    nsRefPtr<mozilla::layers::AsyncPanZoomController>*, int,
    mozilla::layers::CompareByScrollPriority>(__gnu_cxx::__normal_iterator<nsRefPtr<mozilla::layers::AsyncPanZoomController>*,
    std::vector<nsRefPtr<mozilla::layers::AsyncPanZoomController>,
    std::allocator<nsRefPtr<mozilla::layers::AsyncPanZoomController> > > >,
    __gnu_cxx::__normal_iterator<nsRefPtr<mozilla::layers::AsyncPanZoomController>*,
    std::vector<nsRefPtr<mozilla::layers::AsyncPanZoomController>,
    std::allocator<nsRefPtr<mozilla::layers::AsyncPanZoomController> > > >,
    nsRefPtr<mozilla::layers::AsyncPanZoomController>*, int,
    mozilla::layers::CompareByScrollPriority) + 64408
    9 XUL 0x04fbb6b8 void
    std::__stable_sort_adaptive<__gnu_cxx::__normal_iterator<nsRefPtr<mozilla::layers::AsyncPanZoomController>*,
    std::vector<nsRefPtr<mozilla::layers::AsyncPanZoomController>,
    std::allocator<nsRefPtr<mozilla::layers::AsyncPanZoomController> > > >,
    nsRefPtr<mozilla::layers::AsyncPanZoomController>*, int,
    mozilla::layers::CompareByScrollPriority>(__gnu_cxx::__normal_iterator<nsRefPtr<mozilla::layers::AsyncPanZoomController>*,
    std::vector<nsRefPtr<mozilla::layers::AsyncPanZoomController>,
    std::allocator<nsRefPtr<mozilla::layers::AsyncPanZoomController> > > >,
    __gnu_cxx::__normal_iterator<nsRefPtr<mozilla::layers::AsyncPanZoomController>*,
    std::vector<nsRefPtr<mozilla::layers::AsyncPanZoomController>,
    std::allocator<nsRefPtr<mozilla::layers::AsyncPanZoomController> > > >,
    nsRefPtr<mozilla::layers::AsyncPanZoomController>*, int,
    mozilla::layers::CompareByScrollPriority) + 54184
    10 XUL 0x04faeab0 void
    std::__stable_sort_adaptive<__gnu_cxx::__normal_iterator<nsRefPtr<mozilla::layers::AsyncPanZoomController>*,
    std::vector<nsRefPtr<mozilla::layers::AsyncPanZoomController>,
    std::allocator<nsRefPtr<mozilla::layers::AsyncPanZoomController> > > >,
    nsRefPtr<mozilla::layers::AsyncPanZoomController>*, int,
    mozilla::layers::CompareByScrollPriority>(__gnu_cxx::__normal_iterator<nsRefPtr<mozilla::layers::AsyncPanZoomController>*,
    std::vector<nsRefPtr<mozilla::layers::AsyncPanZoomController>,
    std::allocator<nsRefPtr<mozilla::layers::AsyncPanZoomController> > > >,
    __gnu_cxx::__normal_iterator<nsRefPtr<mozilla::layers::AsyncPanZoomController>*,
    std::vector<nsRefPtr<mozilla::layers::AsyncPanZoomController>,
    std::allocator<nsRefPtr<mozilla::layers::AsyncPanZoomController> > > >,
    nsRefPtr<mozilla::layers::AsyncPanZoomController>*, int,
    mozilla::layers::CompareByScrollPriority) + 1952
    11 XUL 0x04faeab0 void
    std::__stable_sort_adaptive<__gnu_cxx::__normal_iterator<nsRefPtr<mozilla::layers::AsyncPanZoomController>*,
    std::vector<nsRefPtr<mozilla::layers::AsyncPanZoomController>,
    std::allocator<nsRefPtr<mozilla::layers::AsyncPanZoomController> > > >,
    nsRefPtr<mozilla::layers::AsyncPanZoomController>*, int,
    mozilla::layers::CompareByScrollPriority>(__gnu_cxx::__normal_iterator<nsRefPtr<mozilla::layers::AsyncPanZoomController>*,
    std::vector<nsRefPtr<mozilla::layers::AsyncPanZoomController>,
    std::allocator<nsRefPtr<mozilla::layers::AsyncPanZoomController> > > >,
    __gnu_cxx::__normal_iterator<nsRefPtr<mozilla::layers::AsyncPanZoomController>*,
    std::vector<nsRefPtr<mozilla::layers::AsyncPanZoomController>,
    std::allocator<nsRefPtr<mozilla::layers::AsyncPanZoomController> > > >,
    nsRefPtr<mozilla::layers::AsyncPanZoomController>*, int,
    mozilla::layers::CompareByScrollPriority) + 1952
    12 XUL 0x04fbaf04 void
    std::__stable_sort_adaptive<__gnu_cxx::__normal_iterator<nsRefPtr<mozilla::layers::AsyncPanZoomController>*,
    std::vector<nsRefPtr<mozilla::layers::AsyncPanZoomController>,
    std::allocator<nsRefPtr<mozilla::layers::AsyncPanZoomController> > > >,
    nsRefPtr<mozilla::layers::AsyncPanZoomController>*, int,
    mozilla::layers::CompareByScrollPriority>(__gnu_cxx::__normal_iterator<nsRefPtr<mozilla::layers::AsyncPanZoomController>*,
    std::vector<nsRefPtr<mozilla::layers::AsyncPanZoomController>,
    std::allocator<nsRefPtr<mozilla::layers::AsyncPanZoomController> > > >,
    __gnu_cxx::__normal_iterator<nsRefPtr<mozilla::layers::AsyncPanZoomController>*,
    std::vector<nsRefPtr<mozilla::layers::AsyncPanZoomController>,
    std::allocator<nsRefPtr<mozilla::layers::AsyncPanZoomController> > > >,
    nsRefPtr<mozilla::layers::AsyncPanZoomController>*, int,
    mozilla::layers::CompareByScrollPriority) + 52212
    13 XUL 0x066af3d4
    _ZNSt8_Rb_treeIN7mozilla3dom6IdTypeINS1_9TabParentEEESt4pairIKS4_8nsRefPtrINS1_8TabChildEEESt10_Select1stISA_ESt4lessIS4_ESaISA_EE17_M_insert_unique_ISA_EESt17_Rb_tree_iteratorISA_ESt23_Rb_tree_const_iteratorISA_EOT_
    + 5572452
    14 XUL 0x066aff8c
    _ZNSt8_Rb_treeIN7mozilla3dom6IdTypeINS1_9TabParentEEESt4pairIKS4_8nsRefPtrINS1_8TabChildEEESt10_Select1stISA_ESt4lessIS4_ESaISA_EE17_M_insert_unique_ISA_EESt17_Rb_tree_iteratorISA_ESt23_Rb_tree_const_iteratorISA_EOT_
    + 5575452
    15 XUL 0x066d5b54
    _ZNSt8_Rb_treeIN7mozilla3dom6IdTypeINS1_9TabParentEEESt4pairIKS4_8nsRefPtrINS1_8TabChildEEESt10_Select1stISA_ESt4lessIS4_ESaISA_EE17_M_insert_unique_ISA_EESt17_Rb_tree_iteratorISA_ESt23_Rb_tree_const_iteratorISA_EOT_
    + 5730020
    16 XUL 0x0634b354
    _ZNSt8_Rb_treeIN7mozilla3dom6IdTypeINS1_9TabParentEEESt4pairIKS4_8nsRefPtrINS1_8TabChildEEESt10_Select1stISA_ESt4lessIS4_ESaISA_EE17_M_insert_unique_ISA_EESt17_Rb_tree_iteratorISA_ESt23_Rb_tree_const_iteratorISA_EOT_
    + 2016996
    17 XUL 0x0634bf0c
    _ZNSt8_Rb_treeIN7mozilla3dom6IdTypeINS1_9TabParentEEESt4pairIKS4_8nsRefPtrINS1_8TabChildEEESt10_Select1stISA_ESt4lessIS4_ESaISA_EE17_M_insert_unique_ISA_EESt17_Rb_tree_iteratorISA_ESt23_Rb_tree_const_iteratorISA_EOT_
    + 2019996
    18 XUL 0x065dd368
    _ZNSt8_Rb_treeIN7mozilla3dom6IdTypeINS1_9TabParentEEESt4pairIKS4_8nsRefPtrINS1_8TabChildEEESt10_Select1stISA_ESt4lessIS4_ESaISA_EE17_M_insert_unique_ISA_EESt17_Rb_tree_iteratorISA_ESt23_Rb_tree_const_iteratorISA_EOT_
    + 4712184
    19 XUL 0x065e04f8
    _ZNSt8_Rb_treeIN7mozilla3dom6IdTypeINS1_9TabParentEEESt4pairIKS4_8nsRefPtrINS1_8TabChildEEESt10_Select1stISA_ESt4lessIS4_ESaISA_EE17_M_insert_unique_ISA_EESt17_Rb_tree_iteratorISA_ESt23_Rb_tree_const_iteratorISA_EOT_
    + 4724872
    20 XUL 0x065e05fc
    _ZNSt8_Rb_treeIN7mozilla3dom6IdTypeINS1_9TabParentEEESt4pairIKS4_8nsRefPtrINS1_8TabChildEEESt10_Select1stISA_ESt4lessIS4_ESaISA_EE17_M_insert_unique_ISA_EESt17_Rb_tree_iteratorISA_ESt23_Rb_tree_const_iteratorISA_EOT_
    + 4725132
    21 XUL 0x0463b1a0 XRE_AddJarManifestLocation + 74784
    22 XUL 0x0463b638 XRE_AddJarManifestLocation + 75960
    23 XUL 0x04635d88 XRE_AddJarManifestLocation + 53256
    24 XUL 0x0465c37c
    NS_UnregisterXPCOMExitRoutine + 20652
    25 XUL 0x0635cb10
    _ZNSt8_Rb_treeIN7mozilla3dom6IdTypeINS1_9TabParentEEESt4pairIKS4_8nsRefPtrINS1_8TabChildEEESt10_Select1stISA_ESt4lessIS4_ESaISA_EE17_M_insert_unique_ISA_EESt17_Rb_tree_iteratorISA_ESt23_Rb_tree_const_iteratorISA_EOT_
    + 2088608
    26 XUL 0x063af4e4
    _ZNSt8_Rb_treeIN7mozilla3dom6IdTypeINS1_9TabParentEEESt4pairIKS4_8nsRefPtrINS1_8TabChildEEESt10_Select1stISA_ESt4lessIS4_ESaISA_EE17_M_insert_unique_ISA_EESt17_Rb_tree_iteratorISA_ESt23_Rb_tree_const_iteratorISA_EOT_
    + 2426996
    27 com.apple.CoreFoundation 0x907df300 __CFRunLoopDoSources0 + 384
    28 com.apple.CoreFoundation 0x907de830 __CFRunLoopRun + 452
    29 com.apple.CoreFoundation 0x907de2b0 CFRunLoopRunSpecific + 268
    30 com.apple.HIToolbox 0x932adb20 RunCurrentEventLoopInMode + 264
    31 com.apple.HIToolbox 0x932ad1b4 ReceiveNextEventCommon + 380
    32 com.apple.HIToolbox 0x932ad020
    BlockUntilNextEventMatchingListInMode + 96
    33 com.apple.AppKit 0x93791734 _DPSNextEvent + 384
    34 com.apple.AppKit 0x937913f8 -[NSApplication
    nextEventMatchingMask:untilDate:inMode:dequeue:] + 116
    35 XUL 0x063a659c
    _ZNSt8_Rb_treeIN7mozilla3dom6IdTypeINS1_9TabParentEEESt4pairIKS4_8nsRefPtrINS1_8TabChildEEESt10_Select1stISA_ESt4lessIS4_ESaISA_EE17_M_insert_unique_ISA_EESt17_Rb_tree_iteratorISA_ESt23_Rb_tree_const_iteratorISA_EOT_
    + 2390316
    36 com.apple.AppKit 0x9378d93c -[NSApplication run] + 472
    37 XUL 0x063b1998
    _ZNSt8_Rb_treeIN7mozilla3dom6IdTypeINS1_9TabParentEEESt4pairIKS4_8nsRefPtrINS1_8TabChildEEESt10_Select1stISA_ESt4lessIS4_ESaISA_EE17_M_insert_unique_ISA_EESt17_Rb_tree_iteratorISA_ESt23_Rb_tree_const_iteratorISA_EOT_
    + 2436392
    38 XUL 0x06d523ec std::_Rb_tree<int,
    std::pair<int const,
    google::protobuf::internal::ExtensionSet::Extension>,
    std::_Select1st<std::pair<int const,
    google::protobuf::internal::ExtensionSet::Extension> >,
    std::less<int>, std::allocator<std::pair<int const,
    google::protobuf::internal::ExtensionSet::Extension> > >::swap(std::_Rb_tree<int,
    std::pair<int const,
    google::protobuf::internal::ExtensionSet::Extension>,
    std::_Select1st<std::pair<int const,
    google::protobuf::internal::ExtensionSet::Extension> >,
    std::less<int>, std::allocator<std::pair<int const,
    google::protobuf::internal::ExtensionSet::Extension> > >&) + 1580
    39 XUL 0x06db1294 XRE_IsParentProcess + 2532
    40 XUL 0x06db3b80 XRE_IsParentProcess + 13008
    41 XUL 0x06db3e4c XRE_main + 188
    42 com.floodgap.tenfourfox 0x00004ec4 dyld_stub_vfprintf$LDBL128 + 2836
    43 com.floodgap.tenfourfox 0x00001e1c start + 812
    44 com.floodgap.tenfourfox 0x00001b20 start + 48

    Thread 1:
    0 libSystem.B.dylib 0x9002ec8c kevent + 12
    1 XUL 0x04975fcc
    std::_Rb_tree<sigslot::_signal_base_interface*,
    sigslot::_signal_base_interface*,
    std::_Identity<sigslot::_signal_base_interface*>,
    std::less<sigslot::_signal_base_interface*>,
    std::allocator<sigslot::_signal_base_interface*> >::erase(sigslot::_signal_base_interface*
    const&) + 88236
    2 XUL 0x0496eb08
    std::_Rb_tree<sigslot::_signal_base_interface*,
    sigslot::_signal_base_interface*,
    std::_Identity<sigslot::_signal_base_interface*>,
    std::less<sigslot::_signal_base_interface*>,
    std::allocator<sigslot::_signal_base_interface*> >::erase(sigslot::_signal_base_interface*
    const&) + 58344
    3 XUL 0x04976cfc
    std::_Rb_tree<sigslot::_signal_base_interface*,
    sigslot::_signal_base_interface*,
    std::_Identity<sigslot::_signal_base_interface*>,
    std::less<sigslot::_signal_base_interface*>,
    std::allocator<sigslot::_signal_base_interface*> >::erase(sigslot::_signal_base_interface*
    const&) + 91612
    4 XUL 0x0498b018
    std::_Rb_tree<std::basic_string<char, std::char_traits<char>,
    std::allocator<char> >, std::pair<std::basic_string<char,
    std::char_traits<char>, std::allocator<char> > const, int>,
    std::_Select1st<std::pair<std::basic_string<char,
    std::char_traits<char>, std::allocator<char> > const, int> >,
    std::less<std::basic_string<char, std::char_traits<char>,
    std::allocator<char> > >,
    std::allocator<std::pair<std::basic_string<char,
    std::char_traits<char>, std::allocator<char> > const,
    int> > >::_M_erase(std::_Rb_tree_node<std::pair<std::basic_string<char,
    std::char_traits<char>, std::allocator<char> > const, int> >*) + 18680
    5 XUL 0x0499a8c0 void
    std::sort<__gnu_cxx::__normal_iterator<int*, std::vector<int,
    std::allocator<int> > > >(__gnu_cxx::__normal_iterator<int*,
    std::vector<int, std::allocator<int> > >,
    __gnu_cxx::__normal_iterator<int*, std::vector<int,
    std::allocator<int> > >) + 16096
    6 XUL 0x0497777c
    std::_Rb_tree<sigslot::_signal_base_interface*,
    sigslot::_signal_base_interface*,
    std::_Identity<sigslot::_signal_base_interface*>,
    std::less<sigslot::_signal_base_interface*>,
    std::allocator<sigslot::_signal_base_interface*> >::erase(sigslot::_signal_base_interface*
    const&) + 94300
    7 libSystem.B.dylib 0x9002b908 _pthread_body + 96

    Thread 2:
    0 libSystem.B.dylib 0x9001f48c select + 12
    1 libnss3.dylib 0x01240924 poll + 564
    2 libnss3.dylib 0x01253fa0 libVersionPointnspr + 1280
    3 XUL 0x047106c0
    JS::CompileOptions::introductionScript() const + 337536
    4 XUL 0x04710ae8
    JS::CompileOptions::introductionScript() const + 338600
    5 XUL 0x04710f30
    JS::CompileOptions::introductionScript() const + 339696
    6 XUL 0x04635d88 XRE_AddJarManifestLocation + 53256
    7 XUL 0x0465c75c
    NS_UnregisterXPCOMExitRoutine + 21644
    8 XUL 0x049ac914
    std::deque<IPC::SyncChannel::ReceivedSyncMsgQueue::QueuedMessage,
    std::allocator<IPC::SyncChannel::ReceivedSyncMsgQueue::QueuedMessage> >::_M_reallocate_map(unsigned
    long, bool) + 37236
    9 XUL 0x0498b018
    std::_Rb_tree<std::basic_string<char, std::char_traits<char>,
    std::allocator<char> >, std::pair<std::basic_string<char,
    std::char_traits<char>, std::allocator<char> > const, int>,
    std::_Select1st<std::pair<std::basic_string<char,
    std::char_traits<char>, std::allocator<char> > const, int> >,
    std::less<std::basic_string<char, std::char_traits<char>,
    std::allocator<char> > >,
    std::allocator<std::pair<std::basic_string<char,
    std::char_traits<char>, std::allocator<char> > const,
    int> > >::_M_erase(std::_Rb_tree_node<std::pair<std::basic_string<char,
    std::char_traits<char>, std::allocator<char> > const, int> >*) + 18680
    10 XUL 0x04637efc XRE_AddJarManifestLocation + 61820
    11 libnss3.dylib 0x0125af58 PRP_NakedBroadcast + 792
    12 libSystem.B.dylib 0x9002b908 _pthread_body + 96

    Thread 3:
    0 libSystem.B.dylib 0x9002bfc8 semaphore_wait_signal_trap + 8
    1 libSystem.B.d (truncated)

  3. Support Staff 3 Posted by Cameron Kaiser on 16 Aug, 2016 01:52 AM

    Cameron Kaiser's Avatar

    This is a null graphics context error. That shouldn't happen unless something changed under TenFourFox's nose. Are you running any haxies or unusual system extensions? Did you change any settings in about:config or install custom TenFourFox settings?

    It's difficult for me to tell exactly which call in the widget library is responsible on your system for the call which went bad. It could potentially do so in one of around seventeen potential places.

    You could see if the problem persists in the 45 beta, but I would look at the first two questions first before trying that.

  4. 4 Posted by Eric Kratschmer on 16 Aug, 2016 04:16 PM

    Eric Kratschmer's Avatar

    Hi Cameron,

    I just crashed TFF 38.10.0 on the G5 Dual 2-GHz, OS X 10.4.11, at work
    by going to your dummy textarea box. Relaunched and was able to type
    text into it. Like I said, a very repeatable crash.

    I have not made any "about:config" changes -I only use the TFF prefs panes.

    At work here I have these (3) extensions: "Download YouTube Videos as
    MP4 1.8.4", "OverbiteFF 3.1.1695", and QuickTime Enabler 120". I will
    have to look at home to see, but probably I have the same there as well.
    Maybe more as I am a little more experimental with my home system.

    No haxies. Both systems have growl, authoxy, macaroni, perian, and
    macfuse. There may be a few more at home in addition.

    Just restarted TFF in safe mode, went to your textarea, and crashed it
    as soon as I clicked within the box. Well, I guess its not an extension.

    Tonight I will try sacrificing a chicken at the crossroads at
    midnight... If it is a full moon and the wind is from the east ;-)

    Here is the G5 crash report for what its worth:

    Date/Time: 2016-08-16 12:10:55.678 -0400
    OS Version: 10.4.11 (Build 8S165)
    Report Version: 4

    Command: firefox
    Path: /Applications/TenFourFoxG5.app/Contents/MacOS/firefox
    Parent: launchd [1]

    Version: 38.10.0 (3816.7.28)

    PID: 20800
    Thread: 0

    Exception: EXC_BAD_ACCESS (0x0001)
    Codes: KERN_PROTECTION_FAILURE (0x0002) at 0x00000000

    Thread 0 Crashed:
    0 <<00000000>> 0xfffeff20 objc_msgSend_rtp + 32
    1 com.apple.AppKit 0x937ddbb0 +[NSGraphicsContext
    setCurrentContext:] + 80
    2 XUL 0x0638d7f8
    _ZNSt8_Rb_treeIN7mozilla3dom6IdTypeINS1_9TabParentEEESt4pairIKS4_8nsRefPtrINS1_8TabChildEEESt10_Select1stISA_ESt4lessIS4_ESaISA_EE17_M_insert_unique_ISA_EESt17_Rb_tree_iteratorISA_ESt23_Rb_tree_const_iteratorISA_EOT_
    + 2628904
    3 XUL 0x06615b6c
    _ZNSt8_Rb_treeIN7mozilla3dom6IdTypeINS1_9TabParentEEESt4pairIKS4_8nsRefPtrINS1_8TabChildEEESt10_Select1stISA_ESt4lessIS4_ESaISA_EE17_M_insert_unique_ISA_EESt17_Rb_tree_iteratorISA_ESt23_Rb_tree_const_iteratorISA_EOT_
    + 5283996
    4 XUL 0x065af170
    _ZNSt8_Rb_treeIN7mozilla3dom6IdTypeINS1_9TabParentEEESt4pairIKS4_8nsRefPtrINS1_8TabChildEEESt10_Select1stISA_ESt4lessIS4_ESaISA_EE17_M_insert_unique_ISA_EESt17_Rb_tree_iteratorISA_ESt23_Rb_tree_const_iteratorISA_EOT_
    + 4863648
    5 XUL 0x065af824
    _ZNSt8_Rb_treeIN7mozilla3dom6IdTypeINS1_9TabParentEEESt4pairIKS4_8nsRefPtrINS1_8TabChildEEESt10_Select1stISA_ESt4lessIS4_ESaISA_EE17_M_insert_unique_ISA_EESt17_Rb_tree_iteratorISA_ESt23_Rb_tree_const_iteratorISA_EOT_
    + 4865364
    6 XUL 0x04f6f1a8 void
    std::__stable_sort_adaptive<__gnu_cxx::__normal_iterator<nsRefPtr<mozilla::layers::AsyncPanZoomController>*,
    std::vector<nsRefPtr<mozilla::layers::AsyncPanZoomController>,
    std::allocator<nsRefPtr<mozilla::layers::AsyncPanZoomController> > > >,
    nsRefPtr<mozilla::layers::AsyncPanZoomController>*, int,
    mozilla::layers::CompareByScrollPriority>(__gnu_cxx::__normal_iterator<nsRefPtr<mozilla::layers::AsyncPanZoomController>*,
    std::vector<nsRefPtr<mozilla::layers::AsyncPanZoomController>,
    std::allocator<nsRefPtr<mozilla::layers::AsyncPanZoomController> > > >,
    __gnu_cxx::__normal_iterator<nsRefPtr<mozilla::layers::AsyncPanZoomController>*,
    std::vector<nsRefPtr<mozilla::layers::AsyncPanZoomController>,
    std::allocator<nsRefPtr<mozilla::layers::AsyncPanZoomController> > > >,
    nsRefPtr<mozilla::layers::AsyncPanZoomController>*, int,
    mozilla::layers::CompareByScrollPriority) + 64152
    7 XUL 0x04f6c9b8 void
    std::__stable_sort_adaptive<__gnu_cxx::__normal_iterator<nsRefPtr<mozilla::layers::AsyncPanZoomController>*,
    std::vector<nsRefPtr<mozilla::layers::AsyncPanZoomController>,
    std::allocator<nsRefPtr<mozilla::layers::AsyncPanZoomController> > > >,
    nsRefPtr<mozilla::layers::AsyncPanZoomController>*, int,
    mozilla::layers::CompareByScrollPriority>(__gnu_cxx::__normal_iterator<nsRefPtr<mozilla::layers::AsyncPanZoomController>*,
    std::vector<nsRefPtr<mozilla::layers::AsyncPanZoomController>,
    std::allocator<nsRefPtr<mozilla::layers::AsyncPanZoomController> > > >,
    __gnu_cxx::__normal_iterator<nsRefPtr<mozilla::layers::AsyncPanZoomController>*,
    std::vector<nsRefPtr<mozilla::layers::AsyncPanZoomController>,
    std::allocator<nsRefPtr<mozilla::layers::AsyncPanZoomController> > > >,
    nsRefPtr<mozilla::layers::AsyncPanZoomController>*, int,
    mozilla::layers::CompareByScrollPriority) + 53928
    8 XUL 0x04f5feb0 void
    std::__stable_sort_adaptive<__gnu_cxx::__normal_iterator<nsRefPtr<mozilla::layers::AsyncPanZoomController>*,
    std::vector<nsRefPtr<mozilla::layers::AsyncPanZoomController>,
    std::allocator<nsRefPtr<mozilla::layers::AsyncPanZoomController> > > >,
    nsRefPtr<mozilla::layers::AsyncPanZoomController>*, int,
    mozilla::layers::CompareByScrollPriority>(__gnu_cxx::__normal_iterator<nsRefPtr<mozilla::layers::AsyncPanZoomController>*,
    std::vector<nsRefPtr<mozilla::layers::AsyncPanZoomController>,
    std::allocator<nsRefPtr<mozilla::layers::AsyncPanZoomController> > > >,
    __gnu_cxx::__normal_iterator<nsRefPtr<mozilla::layers::AsyncPanZoomController>*,
    std::vector<nsRefPtr<mozilla::layers::AsyncPanZoomController>,
    std::allocator<nsRefPtr<mozilla::layers::AsyncPanZoomController> > > >,
    nsRefPtr<mozilla::layers::AsyncPanZoomController>*, int,
    mozilla::layers::CompareByScrollPriority) + 1952
    9 XUL 0x04f5feb0 void
    std::__stable_sort_adaptive<__gnu_cxx::__normal_iterator<nsRefPtr<mozilla::layers::AsyncPanZoomController>*,
    std::vector<nsRefPtr<mozilla::layers::AsyncPanZoomController>,
    std::allocator<nsRefPtr<mozilla::layers::AsyncPanZoomController> > > >,
    nsRefPtr<mozilla::layers::AsyncPanZoomController>*, int,
    mozilla::layers::CompareByScrollPriority>(__gnu_cxx::__normal_iterator<nsRefPtr<mozilla::layers::AsyncPanZoomController>*,
    std::vector<nsRefPtr<mozilla::layers::AsyncPanZoomController>,
    std::allocator<nsRefPtr<mozilla::layers::AsyncPanZoomController> > > >,
    __gnu_cxx::__normal_iterator<nsRefPtr<mozilla::layers::AsyncPanZoomController>*,
    std::vector<nsRefPtr<mozilla::layers::AsyncPanZoomController>,
    std::allocator<nsRefPtr<mozilla::layers::AsyncPanZoomController> > > >,
    nsRefPtr<mozilla::layers::AsyncPanZoomController>*, int,
    mozilla::layers::CompareByScrollPriority) + 1952
    10 XUL 0x04f6c214 void
    std::__stable_sort_adaptive<__gnu_cxx::__normal_iterator<nsRefPtr<mozilla::layers::AsyncPanZoomController>*,
    std::vector<nsRefPtr<mozilla::layers::AsyncPanZoomController>,
    std::allocator<nsRefPtr<mozilla::layers::AsyncPanZoomController> > > >,
    nsRefPtr<mozilla::layers::AsyncPanZoomController>*, int,
    mozilla::layers::CompareByScrollPriority>(__gnu_cxx::__normal_iterator<nsRefPtr<mozilla::layers::AsyncPanZoomController>*,
    std::vector<nsRefPtr<mozilla::layers::AsyncPanZoomController>,
    std::allocator<nsRefPtr<mozilla::layers::AsyncPanZoomController> > > >,
    __gnu_cxx::__normal_iterator<nsRefPtr<mozilla::layers::AsyncPanZoomController>*,
    std::vector<nsRefPtr<mozilla::layers::AsyncPanZoomController>,
    std::allocator<nsRefPtr<mozilla::layers::AsyncPanZoomController> > > >,
    nsRefPtr<mozilla::layers::AsyncPanZoomController>*, int,
    mozilla::layers::CompareByScrollPriority) + 51972
    11 XUL 0x066597f4
    _ZNSt8_Rb_treeIN7mozilla3dom6IdTypeINS1_9TabParentEEESt4pairIKS4_8nsRefPtrINS1_8TabChildEEESt10_Select1stISA_ESt4lessIS4_ESaISA_EE17_M_insert_unique_ISA_EESt17_Rb_tree_iteratorISA_ESt23_Rb_tree_const_iteratorISA_EOT_
    + 5561636
    12 XUL 0x0665a3ac
    _ZNSt8_Rb_treeIN7mozilla3dom6IdTypeINS1_9TabParentEEESt4pairIKS4_8nsRefPtrINS1_8TabChildEEESt10_Select1stISA_ESt4lessIS4_ESaISA_EE17_M_insert_unique_ISA_EESt17_Rb_tree_iteratorISA_ESt23_Rb_tree_const_iteratorISA_EOT_
    + 5564636
    13 XUL 0x0667fe04
    _ZNSt8_Rb_treeIN7mozilla3dom6IdTypeINS1_9TabParentEEESt4pairIKS4_8nsRefPtrINS1_8TabChildEEESt10_Select1stISA_ESt4lessIS4_ESaISA_EE17_M_insert_unique_ISA_EESt17_Rb_tree_iteratorISA_ESt23_Rb_tree_const_iteratorISA_EOT_
    + 5718836
    14 XUL 0x062f7ba4
    _ZNSt8_Rb_treeIN7mozilla3dom6IdTypeINS1_9TabParentEEESt4pairIKS4_8nsRefPtrINS1_8TabChildEEESt10_Select1stISA_ESt4lessIS4_ESaISA_EE17_M_insert_unique_ISA_EESt17_Rb_tree_iteratorISA_ESt23_Rb_tree_const_iteratorISA_EOT_
    + 2015444
    15 XUL 0x062f876c
    _ZNSt8_Rb_treeIN7mozilla3dom6IdTypeINS1_9TabParentEEESt4pairIKS4_8nsRefPtrINS1_8TabChildEEESt10_Select1stISA_ESt4lessIS4_ESaISA_EE17_M_insert_unique_ISA_EESt17_Rb_tree_iteratorISA_ESt23_Rb_tree_const_iteratorISA_EOT_
    + 2018460
    16 XUL 0x06588998
    _ZNSt8_Rb_treeIN7mozilla3dom6IdTypeINS1_9TabParentEEESt4pairIKS4_8nsRefPtrINS1_8TabChildEEESt10_Select1stISA_ESt4lessIS4_ESaISA_EE17_M_insert_unique_ISA_EESt17_Rb_tree_iteratorISA_ESt23_Rb_tree_const_iteratorISA_EOT_
    + 4705992
    17 XUL 0x0658b918
    _ZNSt8_Rb_treeIN7mozilla3dom6IdTypeINS1_9TabParentEEESt4pairIKS4_8nsRefPtrINS1_8TabChildEEESt10_Select1stISA_ESt4lessIS4_ESaISA_EE17_M_insert_unique_ISA_EESt17_Rb_tree_iteratorISA_ESt23_Rb_tree_const_iteratorISA_EOT_
    + 4718152
    18 XUL 0x0658ba1c
    _ZNSt8_Rb_treeIN7mozilla3dom6IdTypeINS1_9TabParentEEESt4pairIKS4_8nsRefPtrINS1_8TabChildEEESt10_Select1stISA_ESt4lessIS4_ESaISA_EE17_M_insert_unique_ISA_EESt17_Rb_tree_iteratorISA_ESt23_Rb_tree_const_iteratorISA_EOT_
    + 4718412
    19 XUL 0x045efc80 XRE_AddJarManifestLocation + 74496
    20 XUL 0x045f00f8 XRE_AddJarManifestLocation + 75640
    21 XUL 0x045ea8d8 XRE_AddJarManifestLocation + 53080
    22 XUL 0x04610c8c NS_UnregisterXPCOMExitRoutine +
    20492
    23 XUL 0x063092f0
    _ZNSt8_Rb_treeIN7mozilla3dom6IdTypeINS1_9TabParentEEESt4pairIKS4_8nsRefPtrINS1_8TabChildEEESt10_Select1stISA_ESt4lessIS4_ESaISA_EE17_M_insert_unique_ISA_EESt17_Rb_tree_iteratorISA_ESt23_Rb_tree_const_iteratorISA_EOT_
    + 2086944
    24 XUL 0x0635b584
    _ZNSt8_Rb_treeIN7mozilla3dom6IdTypeINS1_9TabParentEEESt4pairIKS4_8nsRefPtrINS1_8TabChildEEESt10_Select1stISA_ESt4lessIS4_ESaISA_EE17_M_insert_unique_ISA_EESt17_Rb_tree_iteratorISA_ESt23_Rb_tree_const_iteratorISA_EOT_
    + 2423476
    25 com.apple.CoreFoundation 0x907df300 __CFRunLoopDoSources0 + 384
    26 com.apple.CoreFoundation 0x907de830 __CFRunLoopRun + 452
    27 com.apple.CoreFoundation 0x907de2b0 CFRunLoopRunSpecific + 268
    28 com.apple.HIToolbox 0x932bcb20 RunCurrentEventLoopInMode + 264
    29 com.apple.HIToolbox 0x932bc1b4 ReceiveNextEventCommon + 380
    30 com.apple.HIToolbox 0x932bc020
    BlockUntilNextEventMatchingListInMode + 96
    31 com.apple.AppKit 0x937a1734 _DPSNextEvent + 384
    32 com.apple.AppKit 0x937a13f8 -[NSApplication
    nextEventMatchingMask:untilDate:inMode:dequeue:] + 116
    33 XUL 0x063525bc
    _ZNSt8_Rb_treeIN7mozilla3dom6IdTypeINS1_9TabParentEEESt4pairIKS4_8nsRefPtrINS1_8TabChildEEESt10_Select1stISA_ESt4lessIS4_ESaISA_EE17_M_insert_unique_ISA_EESt17_Rb_tree_iteratorISA_ESt23_Rb_tree_const_iteratorISA_EOT_
    + 2386668
    34 com.apple.AppKit 0x9379d93c -[NSApplication run] + 472
    35 XUL 0x0635da38
    _ZNSt8_Rb_treeIN7mozilla3dom6IdTypeINS1_9TabParentEEESt4pairIKS4_8nsRefPtrINS1_8TabChildEEESt10_Select1stISA_ESt4lessIS4_ESaISA_EE17_M_insert_unique_ISA_EESt17_Rb_tree_iteratorISA_ESt23_Rb_tree_const_iteratorISA_EOT_
    + 2432872
    36 XUL 0x06cf85e0 std::_Rb_tree<int,
    std::pair<int const,
    google::protobuf::internal::ExtensionSet::Extension>,
    std::_Select1st<std::pair<int const,
    google::protobuf::internal::ExtensionSet::Extension> >, std::less<int>,
    std::allocator<std::pair<int const,
    google::protobuf::internal::ExtensionSet::Extension> >
     >::swap(std::_Rb_tree<int, std::pair<int const,
    google::protobuf::internal::ExtensionSet::Extension>,
    std::_Select1st<std::pair<int const,
    google::protobuf::internal::ExtensionSet::Extension> >, std::less<int>,
    std::allocator<std::pair<int const,
    google::protobuf::internal::ExtensionSet::Extension> > >&) + 1600
    37 XUL 0x06d569d4 XRE_IsParentProcess + 2532
    38 XUL 0x06d592c0 XRE_IsParentProcess + 13008
    39 XUL 0x06d5958c XRE_main + 188
    40 com.floodgap.tenfourfox 0x00004ec4 dyld_stub_vfprintf$LDBL128 + 2836
    41 com.floodgap.tenfourfox 0x00001e2c start + 812
    42 com.floodgap.tenfourfox 0x00001b30 start + 48

    Thread 1:
    0 libSystem.B.dylib 0x9002ec8c kevent + 12
    1 XUL 0x0492a3dc
    std::_Rb_tree<sigslot::_signal_base_interface*,
    sigslot::_signal_base_interface*,
    std::_Identity<sigslot::_signal_base_interface*>,
    std::less<sigslot::_signal_base_interface*>,
    std::allocator<sigslot::_signal_base_interface*>
     >::erase(sigslot::_signal_base_interface* const&) + 88220
    2 XUL 0x04922f38
    std::_Rb_tree<sigslot::_signal_base_interface*,
    sigslot::_signal_base_interface*,
    std::_Identity<sigslot::_signal_base_interface*>,
    std::less<sigslot::_signal_base_interface*>,
    std::allocator<sigslot::_signal_base_interface*>
     >::erase(sigslot::_signal_base_interface* const&) + 58360
    3 XUL 0x0492b0fc
    std::_Rb_tree<sigslot::_signal_base_interface*,
    sigslot::_signal_base_interface*,
    std::_Identity<sigslot::_signal_base_interface*>,
    std::less<sigslot::_signal_base_interface*>,
    std::allocator<sigslot::_signal_base_interface*>
     >::erase(sigslot::_signal_base_interface* const&) + 91580
    4 XUL 0x0493f448
    std::_Rb_tree<std::basic_string<char, std::char_traits<char>,
    std::allocator<char> >, std::pair<std::basic_string<char,
    std::char_traits<char>, std::allocator<char> > const, int>,
    std::_Select1st<std::pair<std::basic_string<char,
    std::char_traits<char>, std::allocator<char> > const, int> >,
    std::less<std::basic_string<char, std::char_traits<char>,
    std::allocator<char> > >,
    std::allocator<std::pair<std::basic_string<char, std::char_traits<char>,
    std::allocator<char> > const, int> >
     >::_M_erase(std::_Rb_tree_node<std::pair<std::basic_string<char,
    std::char_traits<char>, std::allocator<char> > const, int> >*) + 18680
    5 XUL 0x0494ec20 void
    std::sort<__gnu_cxx::__normal_iterator<int*, std::vector<int,
    std::allocator<int> > > >(__gnu_cxx::__normal_iterator<int*,
    std::vector<int, std::allocator<int> > >,
    __gnu_cxx::__normal_iterator<int*, std::vector<int, std::allocator<int>
     > >) + 16000
    6 XUL 0x0492bb7c
    std::_Rb_tree<sigslot::_signal_base_interface*,
    sigslot::_signal_base_interface*,
    std::_Identity<sigslot::_signal_base_interface*>,
    std::less<sigslot::_signal_base_interface*>,
    std::allocator<sigslot::_signal_base_interface*>
     >::erase(sigslot::_signal_base_interface* const&) + 94268
    7 libSystem.B.dylib 0x9002b908 _pthread_body + 96

    Thread 2:
    0 libSystem.B.dylib 0x9001f48c select + 12
    1 libnss3.dylib 0x0123fbf4 poll + 564
    2 libnss3.dylib 0x01253040 libVersionPointnspr + 1280
    3 XUL 0x046c5220
    JS::CompileOptions::introductionScript() const + 337328
    4 XUL 0x046c5618
    JS::CompileOptions::introductionScript() const + 338344
    5 XUL 0x046c5a40
    JS::CompileOptions::introductionScript() const + 339408
    6 XUL 0x045ea8d8 XRE_AddJarManifestLocation + 53080
    7 XUL 0x0461106c NS_UnregisterXPCOMExitRoutine +
    21484
    8 XUL 0x04960b34
    std::deque<IPC::SyncChannel::ReceivedSyncMsgQueue::QueuedMessage,
    std::allocator<IPC::SyncChannel::ReceivedSyncMsgQueue::QueuedMessage>
     >::_M_reallocate_map(unsigned long, bool) + 36996
    9 XUL 0x0493f448
    std::_Rb_tree<std::basic_string<char, std::char_traits<char>,
    std::allocator<char> >, std::pair<std::basic_string<char,
    std::char_traits<char>, std::allocator<char> > const, int>,
    std::_Select1st<std::pair<std::basic_string<char,
    std::char_traits<char>, std::allocator<char> > const, int> >,
    std::less<std::basic_string<char, std::char_traits<char>,
    std::allocator<char> > >,
    std::allocator<std::pair<std::basic_string<char, std::char_traits<char>,
    std::allocator<char> > const, int> >
     >::_M_erase(std::_Rb_tree_node<std::pair<std::basic_string<char,
    std::char_traits<char>, std::allocator<char> > const, int> >*) + 18680
    10 XUL 0x045eca4c XRE_AddJarManifestLocation + 61644
    11 libnss3.dylib 0x0125a058 PRP_NakedBroadcast + 792
    12 libSystem.B.dylib 0x9002b908 _pthread_body + 96

    Thread 3:
    0 libSystem.B.dylib 0x9002bfc8 semaphore_wait_signal_trap + 8
    1 libSystem.B.dylib 0x90030aac pthread_cond_wait + 480
    2 libnss3.dylib 0x01258ec4 PR_WaitCondVar + 324
    3 XUL 0x07674d9c js::ProtoKeyToClass(JSProtoKey)
    + 15660
    4 libnss3.dylib 0x0125a058 PRP_NakedBroadcast + 792
    5 libSystem.B.dylib 0x9002b908 _pthread_body + 96

    Thread 4:
    0 libSystem.B.dylib 0x9002bfc8 semaphore_wait_signal_trap + 8
    1 libSystem.B.dylib 0x90030aac pthread_cond_wait + 480
    2 libnss3.dylib 0x01258ec4 PR_WaitCondVar + 324
    3 XUL 0x07674d9c js::ProtoKeyToClass(JSProtoKey)
    + 15660
    4 libnss3.dylib 0x0125a058 PRP_NakedB (truncated)

  5. Support Staff 5 Posted by Cameron Kaiser on 16 Aug, 2016 08:27 PM

    Cameron Kaiser's Avatar

    I don't doubt it's repeatable on your system, but to be candid, that doesn't help me much because I can't reproduce it on any of mine, which means I can't debug it further. I really do think this is something local about your machine because I'm not seeing the volume of reports that an issue apparently this pervasive would cause, but I'd like to understand what it is (and preferably demonstrate it under a controlled test) before making an attempt at working around it.

    There aren't going to be further releases in the 38 family unless there is a serious security hole that needs repair, so the next release will be 45.4. With that in mind,

    1) Does this occur under 45.3 beta 1? If it doesn't, yay, something else fixed it. You can download it from the development blog: http://tenfourfox.blogspot.com/2016/08/453-beta-1-available.html

    2) If it does, the only other report I can find that sounds like this is this one: http://tenfourfox.tenderapp.com/discussions/problems/7029-crashing-...

    Two things were actually fixed in this bug, but the text area one sounds a little like what John reported. Perhaps there is something in common between your two systems. I will also post a note to John to look at this thread in case he is still reading it.

    If nothing else can be figured out, I will post a symbols build that should enable a more useful backtrace/crash report, but it would be better if we could reproduce it on one of my debug systems and unfortunately none of what you've provided crashes for me so far. Inserting null checks into those seventeen-odd potential crash points without knowing why may well move the crash into some other less understood location, and will slow the browser down for everyone else, so I'm not willing to do that as a "shot in the dark."

  6. 6 Posted by Eric Kratschmer on 16 Aug, 2016 09:51 PM

    Eric Kratschmer's Avatar

    Cameron,

    I absolutely agree with you and I greatly appreciate you taking the time
    you have already spent on this. I will download the beta and play with
    it for a while on the home machine. In the meantime I may restart the
    work Mac in 'safe' mode as well as FFT 38 and see what happens.

    Regardless, I have a browser which gets me into my banking and business
    websites and runs on the PPC computer which I must, because of legacy
    issues, absolutely maintain. I hugely appreciate the time you have spent
    and continue to spend on forking FF to PPC and am very very grateful for
    that.

    Also, since this is so repeatable, all I have to do on a new site is
    click in the text box, relaunch the crashed browser, and get on with my
    form filling ... Thats not terrible, at most 15 seconds out of my life,
    and infinitely preferable to not being able to browse at all!

    Thank you again for your time. If I ever figure this out I will let you
    know.

    Gratefully,

    Eric Kratschmer

    772 Grove Ave
    Southampton, PA 18966

    res: 215-953-0209
    cel: 267-575-4891
    fax: 215-953-0374

    On 16.Aug.2016 16:27 EDT, Cameron Kaiser wrote:

  7. 7 Posted by John Boyd on 16 Aug, 2016 10:11 PM

    John Boyd's Avatar

    Thank you, again for being there, Cameron.

    And Eric, you are quite adept compared to my small potential.

    I'm surprised that I can type into this "Reply" area. But can attribute to the fact that I did type into your text area box and had the anticipated crash and re-open of TFF.

    I have no concept of what could be a "crash dump". Be glad to supply if you can spell out slightly more. Are these long reports and threads useful in understanding the problem?

    My earlier instances of crash when clicking into the text area of a "Reply" email or a "Compose" email have been dependably repeated. Also I found it when clicking into the area for a text response in the midst of a survey. And I mentioned the crash in using your text area box.

    Is the information about the computer of value to you?
    "Desktop" PowerPC G4
    800MHz
    OS 10.4.11
    TenFourFox 38.10

    Far as I know there are no add ons or extensions. Where would I look to check?

    "growl, authoxy, macaroni, perian, and macfuse" I love the names, but haven't a clue what any one might be !!

    I can confirm that the moon will be full on the 18th of August in PA. I hope you have enjoyed the planets in our skies these nights. I would be able to make landfall for us if needed, so am not totally useless in all areas.

    Thanks . . . John

    Sorry, not sure if the above was posted.

    Eric, I drive for BCT (7 years now) and have delivered a passenger to your street. A relative?

  8. Support Staff 8 Posted by Chris (chtrusch... on 17 Aug, 2016 04:15 AM

    Chris (chtrusch)'s Avatar

    Just a quick thought: Can you still repeat the crash when you disable the spellchecker? (Right-click into any text input box and uncheck "Check Spelling")

  9. 9 Posted by John Boyd on 17 Aug, 2016 01:49 PM

    John Boyd's Avatar

    Morning Chris . . .

    And thanks for the thought. For Mac I believe the "right click" is to hold
    Control and then click, a feature I often use to see what I can do with
    something without actually activating it.

    Tried that in the Reply text box for your email and it crashed as always,
    restarting (with apology) in the windows that were open.

    I can try turning off spellcheck in the preferences and restarting the
    email. Will get back with that possiblity.
    --
    Best to you, John . . .
    [email blocked]

  10. 10 Posted by John Boyd on 17 Aug, 2016 02:04 PM

    John Boyd's Avatar

    Well, well, well . . . (as Joe Kenda would say)
    Did that: unchecked spell check in preferences, advanced, general. And then I quit and relaunched TFF. Came back to Cameron's link to a textarea, clicked and it highlighted ready to receive !!

    Note: I just re-read the above and I had terribly mis-spelled "preferences". So I suppose I should really want the feature turned on, if there's a way.

  11. 11 Posted by John Boyd on 17 Aug, 2016 04:33 PM

    John Boyd's Avatar

    Turned off spellcheck and I thought it had done the trick. Very happy and posted a reply here which got lost.

    Now it seems that the earlier crash and re-open of TFF was the reason why the spellcheck fix seemed to work. It really did look like the answer, but sorry to say, no go.

  12. 12 Posted by Eric Kratschmer on 17 Aug, 2016 11:20 PM

    Eric Kratschmer's Avatar

    Hi Chris,

    I just checked my TFF 38.10 prefs on the G5 - Advanced > General > and I
    have "Check my spelling as I type" unchecked. I would bet spellcheck on
    the TFF 38.10 G4 Powerbook at home is unchecked as well. I disable
    automatic spellcheck on every application that will let me do so.

    I do note in the same preference pane that autoscrolling, smooth
    scrolling, and hardware acceleration are all checked. Any possibilities
    there?

    Thanks,

    Eric

    On 17.Aug.2016 00:15 EDT, Chris (chtrusch) wrote:

  13. Support Staff 13 Posted by Cameron Kaiser on 25 Aug, 2016 04:51 AM

    Cameron Kaiser's Avatar

    I've been pondering this while I've been working on the next 45 beta, since if it's happening to at least two of you (assuming it's actually the same underlying issue), it may be affecting others even though it does not appear to be widespread.

    Spellcheck is probably not the problem here since the crash is actually in CoreGraphics. The hardware acceleration isn't hooked up in this version (it is disabled at the library level) and the scrolling options are higher level than this. All the direct uses of the function that bombs out only occur through the widget library that I know of. The fact that clicking on the box makes it crash makes me wonder about the routine that draws focus rings around controls, though why it would only do this for text boxes isn't clear to me.

    Since you mentioned you had a G5, I just went ahead and inserted a debug statement before all 17 of those occurrences and rebuilt it. This version is purely for testing this issue and has not been verified for other functionality. Start the context debugging version of TenFourFox you'll download below (this is G5 only, since it's what I had handy) and open Console.app. Click Clear in Console.app and switch back to the browser. Open anything with a text box and make the browser crash. Does anything like NULL CONTEXT appear in the Console log? If it does, paste it here. It should give a file name and a number.

    You can download it from https://sourceforge.net/projects/tenfourfox/files/unstable/45.3.0b1/ and then select TenFourFoxG5-context-debug.app.zip (don't pick the regular G5 version).

  14. 14 Posted by Eric on 26 Aug, 2016 02:07 AM

    Eric's Avatar

    Hi Cameron,

    Sourceforge is in static offline mode just now; I will download the
    TFF 45 as soon as it comes back up. In the meantime here is another
    observation and thought:

    I think whatever is happening has something to do with rendering the
    input field in both the X and Y axis. A straight text box is defined
    strictly by column(s) -the X axis width- and is rendered as high as
    the font. A textarea box is two dimensional, it has both a column(s)
    width and a row(s) height which defines it. On the G5 I was looking
    at a text box and the lower rh corner had a "grab point" (for lack of
    a better term) -so instead of clicking inside the box I grabbed the
    corner and resized the box ... It resized, and then immediately the
    cursor went to a beachball and I had to force-quit the browser. This
    too is repeatable. So it is not just by clicking inside the rendered
    box, stretching the box will also result in a crash.

    I will play with the beta browser tomorrow and see what I find.

    Thanks again to all who are a part of this project for keeping the PPCs viable.

    Eric

  15. Support Staff 15 Posted by Cameron Kaiser on 26 Aug, 2016 05:04 AM

    Cameron Kaiser's Avatar

    I realize you're trying to find a theory here, but this is actually a very low-level issue. It's going to be more useful just to find what block of code is trying to set a null graphics context and deal with that instead of getting into the rafters of the layout system.

    I'm holding the next beta to see what you come up with. If you can give me a test of this tomorrow and we get something useful out of it I can patch, then I'll rerun the next beta with that and you can see if that fixes it. If we can't get anything useful or you're unable to test tomorrow, I'll release the next beta since there are other things in there that need testing while I think of something else (or you test later).

  16. Support Staff 16 Posted by Cameron Kaiser on 26 Aug, 2016 05:06 AM

    Cameron Kaiser's Avatar

    When you do test it, please verify the following:

    • That you get a NULL CONTEXT error in Console.app. If you don't, I'll have to think of something else to try.
    • Assuming you do, when you click on the box, verify the NULL CONTEXT error is always at the same filename and program line
    • See whether you get a different NULL CONTEXT error when you resize the box (and if you do, if that error itself is consistently at the same filename and program line)
  17. 17 Posted by John Boyd on 26 Aug, 2016 08:39 AM

    John Boyd's Avatar

    Good morning, Cameron . . .

    Had the crash again this AM in the usual situation of sending an email reply.

    Odd feature today was that the Console program was loaded and the System
    log window was open behind the TFF window. With the crash, the showing of
    many days of System log was completely erased and the following few lines
    written:

    Aug 26 04:14:18 Power-Mac-G4 cp: error processing extended attributes:
    Operation not permitted
    Aug 26 08:14:19 Power-Mac-G4 postfix/postqueue[11860]: warning: Mail
    system is down -- accessing queue directly
    Aug 26 04:14:19 Power-Mac-G4 cp: error processing extended attributes:
    Operation not permitted

    I've been following for several days in hope of understanding why my
    system 10.4.11 won't stay asleep properly. All that history was gone.
    Those few lines and nothing more is left.

    I had a look at the Console log and found the following:

    Aug 26 04:13:56 Power-Mac-G4 crashdump[11776]: firefox crashed
    Aug 26 04:13:58 Power-Mac-G4 crashdump[11776]: crash report written to:
    /Users/johnboyd/Library/Logs/CrashReporter/firefox.crash.log
    console.error:
      [CustomizableUI]
      Custom widget with id loop-button does not return a valid node
    console.error:
      [CustomizableUI]
      Custom widget with id loop-button does not return a valid node
    Warning: TenFourFox rejecting bitmap-only font VT100-Bold.
    Warning: TenFourFox rejecting bitmap-only font FoundrySansExpert-Bold.
    Warning: TenFourFox rejecting bitmap-only font ItcEras-Bold.
    Warning: TenFourFox rejecting bitmap-only font CentaurMT-Bold.
    Warning: TenFourFox rejecting bitmap-only font GB18030Bitmap.
    Warning: TenFourFox rejecting bitmap-only font WoodtypeOrnaments-Two.
    Warning: TenFourFox rejecting bitmap-only font ATUncial.
    Warning: TenFourFox rejecting bitmap-only font BellCentennial-BoldListingAlt.
    Warning: TenFourFox rejecting bitmap-only font FoundrySans-Bold.
    console.error:
      [CustomizableUI]
      Custom widget with id loop-button does not return a valid node

    Those lines of "Custom widget" and the "Warnings" about fonts are frequent
    and also I don't understand, but the most unusual are the dated lines. I
    don't see dates elsewhere in the Console log as I do in the System log.

    --
    Best to you, John . . .
    [email blocked]

  18. Support Staff 18 Posted by Cameron Kaiser on 26 Aug, 2016 03:57 PM

    Cameron Kaiser's Avatar

    The dated lines are generated by another system process unrelated to TenFourFox (in this case, the crashdump utility). The CustomizableUI and font warnings are not related to this bug.

    If you were looking for the NULL CONTEXT errors I mentioned above, they will only appear with the specially programmed context debug G5 version I mentioned above. If you have a G5 that manifests the same problem, I would appreciate you running it as well. If you only have a G4, and we don't make any traction this go around, I may generate a 7450 version later.

  19. 19 Posted by Eric Kratschmer on 26 Aug, 2016 05:57 PM

    Eric Kratschmer's Avatar

    Hi Cameron,

    I downloaded the TenFourFoxG5-context-debug.app and managed to crash it
    several times clicking in various textarea boxes. BUT- it was much
    harder to crash. Many times I was able to click within and drag-to-size
    the textareas with no problems at all. Sigh; I hate an intermittent. TFF
    38 is much more consistent in its crashes.

    I went to ~/Library/Logs/CrashReporter/firefox.crash.log but

    filter for "null" gave no lines.

    filter for "context" gave multiple lines but were similar in nature to:

    1 com.apple.AppKit 0x937ddbb0 +[NSGraphicsContext
    setCurrentContext:] + 80
    3 XUL 0x04d8fdd0
    mozilla::LoadInfo::GetRedirectChain(JSContext*,
    JS::MutableHandle<JS::Value>) + 409456

    Not, I think, what you are looking for.

    I did save each log as a text file before I cleared it so if there is
    something else you would like me to search for?

    Sorry I could not be more help.

    Eric

    On 26.Aug.2016 01:06 EDT, Cameron Kaiser wrote:

  20. Support Staff 20 Posted by Cameron Kaiser on 26 Aug, 2016 06:02 PM

    Cameron Kaiser's Avatar

    I don't want the crash log -- that won't contain this information. Start Console.app (if you're not sure which one, go to Spotlight and type Console and it should appear). Click Clear in that window that says console.log (there should only be a single window anyway). Start TenFourFox, make it crash. In the console.log window -- not the crash log -- look for a NULL CONTEXT error.

  21. 21 Posted by Eric Kratschmer on 26 Aug, 2016 07:43 PM

    Eric Kratschmer's Avatar

    Hi Cameron,

    Sorry, but no joy there either. Just cleared the console.log, crashed
    TFF 45.3, and this is all:

    ===== Friday, August 26, 2016 14:54:01 US/Eastern =====
    Aug 26 14:54:45 G5-PowerMac crashdump[24144]: firefox crashed
    Aug 26 14:54:47 G5-PowerMac crashdump[24144]: crash report written to:
    /Users/erick/Library/Logs/CrashReporter/firefox.crash.log

    I used the browser for a while and logged the following:

    deliver mode: 7
    2016-08-26 15:01:13.909 thunderbird-bin[24140] Looked for URLs on the
    pasteboard, but found none.
    2016-08-26 15:05:16.944 firefox[24146] *** _NSAutoreleaseNoPool():
    Object 0x40df10 of class NSCFNumber autoreleased with no pool in place -
    just leaking
    deliver mode: 7
    deliver mode: 7
    2016-08-26 15:19:04.229 firefox[24147] *** _NSAutoreleaseNoPool():
    Object 0x40df10 of class NSCFNumber autoreleased with no pool in place -
    just leaking
    deliver mode: 7
    2016-08-26 15:35:01.394 firefox[24159] *** _NSAutoreleaseNoPool():
    Object 0x40df10 of class NSCFNumber autoreleased with no pool in place -
    just leaking

    Also, I did a filter on the console.log for "null" and "context" with
    the log history from August 22 to now and came up with nothing.

    Which brings me up to now. I went back through the console.log and found
    the following for the timeframe when I was crashing 45.3 originally (the
    crash logs I cited in the previous email):

    NOTE: I have removed <snip> many multiple instances of
    "G5-PowerMac mDNSResponder: ERROR: getOptRdata - unknown opt 4"
    which has been an ongoing error forever.

    DEBUG: couldn't remove the directory /tmp/PSNormalizer.RqY6mj/ due to
    error: "No such file or directory"!
    2016-08-26 11:53:46.385 firefox[24063] *** _NSAutoreleaseNoPool():
    Object 0x40de30 of class NSCFNumber autoreleased with no pool in place -
    just leaking

    <snip>

    Warning: unrecognized command line flag -foreground
    2016-08-26 12:27:17.455 firefox[24063] Looked for URLs on the
    pasteboard, but found none.
    Aug 26 12:29:16 G5-PowerMac crashdump[24069]: firefox crashed
    Aug 26 12:29:18 G5-PowerMac crashdump[24069]: crash report written to:
    /Users/erick/Library/Logs/CrashReporter/firefox.crash.log

    <snip>

    2016-08-26 13:03:54.521 firefox[24093] *** _NSAutoreleaseNoPool():
    Object 0x40df10 of class NSCFNumber autoreleased with no pool in place -
    just leaking
    2016-08-26 13:04:59.128 firefox[24094] *** _NSAutoreleaseNoPool():
    Object 0x40df10 of class NSCFNumber autoreleased with no pool in place -
    just leaking
    2016-08-26 13:08:41.080 firefox[24096] *** _NSAutoreleaseNoPool():
    Object 0x40df10 of class NSCFNumber autoreleased with no pool in place -
    just leaking

    <snip>

    Aug 26 13:10:37 G5-PowerMac crashdump[24097]: firefox crashed
    Aug 26 13:10:38 G5-PowerMac crashdump[24097]: crash report written to:
    /Users/erick/Library/Logs/CrashReporter/firefox.crash.log
    2016-08-26 13:17:16.050 firefox[24100] *** _NSAutoreleaseNoPool():
    Object 0x40df10 of class NSCFNumber autoreleased with no pool in place -
    just leaking
    2016-08-26 13:17:59.011 firefox[24101] *** _NSAutoreleaseNoPool():
    Object 0x40df10 of class NSCFNumber autoreleased with no pool in place -
    just leaking
    Warning: unrecognized command line flag -foreground
    Aug 26 13:20:16 G5-PowerMac crashdump[24103]: firefox crashed
    Aug 26 13:20:17 G5-PowerMac crashdump[24103]: crash report written to:
    /Users/erick/Library/Logs/CrashReporter/firefox.crash.log
    2016-08-26 13:25:05.901 firefox[24105] *** _NSAutoreleaseNoPool():
    Object 0x40df10 of class NSCFNumber autoreleased with no pool in place -
    just leaking
    2016-08-26 13:25:26.058 firefox[24107] *** _NSAutoreleaseNoPool():
    Object 0x40df10 of class NSCFNumber autoreleased with no pool in place -
    just leaking
    Aug 26 13:28:44 G5-PowerMac crashdump[24108]: firefox crashed
    Aug 26 13:28:45 G5-PowerMac crashdump[24108]: crash report written to:
    /Users/erick/Library/Logs/CrashReporter/firefox.crash.log
    deliver mode: 7
    deliver mode: 7
    2016-08-26 13:43:35.257 firefox[24110] *** _NSAutoreleaseNoPool():
    Object 0x40df10 of class NSCFNumber autoreleased with no pool in place -
    just leaking
    2016-08-26 13:45:05.709 firefox[24111] *** _NSAutoreleaseNoPool():
    Object 0x40df10 of class NSCFNumber autoreleased with no pool in place -
    just leaking
    deliver mode: 7
    2016-08-26 13:48:14.726 firefox[24114] *** _NSAutoreleaseNoPool():
    Object 0x40df10 of class NSCFNumber autoreleased with no pool in place -
    just leaking

    Let me know if there is anything else I can do to help.

    Eric

    On 26.Aug.2016 14:02 EDT, Cameron Kaiser wrote:

  22. Support Staff 22 Posted by Cameron Kaiser on 26 Aug, 2016 08:07 PM

    Cameron Kaiser's Avatar

    Then I don't have any other ideas right now, but thanks for looking.

  23. 23 Posted by kennethy4 on 27 Aug, 2016 01:07 AM

    kennethy4's Avatar

    Hi Cameron,

    I'm having a reproducible crash problem also, on a G5 running 38.9 while trying to print from within the browser, and get the following in the crash log:

    Exception Type: EXC_BAD_ACCESS (SIGBUS)
    Exception Codes: KERN_PROTECTION_FAILURE at 0x0000000000000014
    Crashed Thread: 0

    This happened a few times several months ago, which I ignored, and within the last week or 2 it's constant. I click on print in the print dialog box, it closes, nothing happens for maybe 5 - 10 seconds, then the app quits. I started using TenFourFoxBox several months ago, and also occasionally use v.31.4 when I'm not too concerned about security - because it runs much faster. I've checked lots of things, and it only happens with TFF (either version above) or TFFB as described above.

    Ken

  24. Support Staff 24 Posted by Cameron Kaiser on 27 Aug, 2016 01:59 AM

    Cameron Kaiser's Avatar

    Please open up another ticket for that issue; yours almost certainly has a different cause.

Reply to this discussion

Internal reply

Formatting help / Preview (switch to plain text) No formatting (switch to Markdown)

Attaching KB article:

»

Attached Files

You can attach files up to 10MB

If you don't have an account yet, we need to confirm you're human and not a machine trying to post spam.

Keyboard shortcuts

Generic

? Show this help
ESC Blurs the current field

Comment Form

r Focus the comment reply box
^ + ↩ Submit the comment

You can use Command ⌘ instead of Control ^ on Mac