Closed Bug 25434 Opened 25 years ago Closed 25 years ago

Crashes during logon

Categories

(Core :: Layout: Form Controls, defect, P3)

x86
Windows 98
defect

Tracking

()

VERIFIED FIXED

People

(Reporter: nbergmanjr, Assigned: saari)

References

()

Details

(Keywords: crash, Whiteboard: [PDT+] fix in hand)

When attempting to log on to Visto.com, when either tabbing to password field 
or mouse clicking to password field, the following error occurs:

MOZILLA caused a stack fault in module RDF.DLL at 017f:606a7e8d.
Registers:
EAX=01472540 CS=017f EIP=606a7e8d EFLGS=00010202
EBX=0054293c SS=0187 ESP=00542000 EBP=005420c8
ECX=606b3740 DS=0187 ESI=01545190 FS=4357
EDX=6026be70 ES=0187 EDI=00000001 GS=0000
Bytes at CS:EIP:
6a 04 ff 75 14 53 ff 75 0c 50 ff 91 18 01 00 00 
Stack dump:
00542968 00000001 0158ebf0 0054293c 00000000 00000000 00000000 00000000 
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
I don't see this behavior on my build. But my build is a few days old so that 
might explain it.

In any event, from the description this has nothing to do with single signon but 
rather with form filling.  Reassigning.
Assignee: morse → karnaze
Component: Single Signon → HTML Form Controls
Adding "crash" keyword to all known open crasher bugs.
Keywords: crash
Target Milestone: M14
reassign qa contact --ckritzer, correct me if your the wrong person...
QA Contact: sairuh → ckritzer
I went the url and entered "foo" in the member name and when I put the cursor in 
the password field I got a stack that is too long (and I cut it short).

Reassigning to Saari because I see focus stuff in the stack.

nsStr::Append(nsStr & {...}, const nsStr & {...}, unsigned int 0, int 42) line 
161 + 21 bytes
nsString::Append(const char * 0x01b98408, int 42) line 1157 + 43 bytes
nsString::Assign(const char * 0x01b98408, int -1) line 1031
nsStringKey::nsStringKey(const char * 0x01b98408) line 254
nsComponentManagerImpl::ProgIDToClassID(nsComponentManagerImpl * const 
0x00ff4590, const char * 0x01b98408, nsID * 0x00033174) line 1151
nsComponentManager::ProgIDToClassID(const char * 0x01b98408, nsID * 0x00033174) 
line 59
nsServiceManagerImpl::GetService(nsServiceManagerImpl * const 0x00ff4900, const 
char * 0x01b98408, const nsID & {...}, nsISupports * * 0x000331e4, 
nsIShutdownListener * 0x00000000) line 429 + 13 bytes
nsServiceManager::GetService(const char * 0x01b98408, const nsID & {...}, 
nsISupports * * 0x000331e4, nsIShutdownListener * 0x00000000) line 545
nsGetServiceByProgID::operator()(const nsID & {...}, void * * 0x000331e4) line 
63 + 22 bytes
nsCOMPtr<nsIScriptSecurityManager>::assign_from_helper(const nsCOMPtr_helper & 
{...}, const nsID & {...}) line 768 + 18 bytes
nsCOMPtr<nsIScriptSecurityManager>::nsCOMPtr<nsIScriptSecurityManager>(const 
nsCOMPtr_helper & {...}) line 497
GetWindowProperty(JSContext * 0x021fcdb0, JSObject * 0x01106340, long -5, long * 
0x00033d94) line 125 + 33 bytes
js_Interpret(JSContext * 0x021fcdb0, long * 0x00033f24) line 2308 + 170 bytes
js_Invoke(JSContext * 0x021fcdb0, unsigned int 0, unsigned int 0) line 682 + 13 
bytes
js_Interpret(JSContext * 0x021fcdb0, long * 0x0003475c) line 2262 + 15 bytes
js_Invoke(JSContext * 0x021fcdb0, unsigned int 1, unsigned int 2) line 682 + 13 
bytes
js_InternalInvoke(JSContext * 0x021fcdb0, JSObject * 0x01147c58, long 18160168, 
unsigned int 0, unsigned int 1, long * 0x000348e4, long * 0x00034890) line 759 + 
19 bytes
JS_CallFunctionValue(JSContext * 0x021fcdb0, JSObject * 0x01147c58, long 
18160168, unsigned int 1, long * 0x000348e4, long * 0x00034890) line 2771 + 31 
bytes
nsJSContext::CallEventHandler(nsJSContext * const 0x021fcf40, void * 0x01147c58, 
void * 0x01151a28, unsigned int 1, void * 0x000348e4, int * 0x000348e0) line 562 
+ 33 bytes
nsJSEventListener::HandleEvent(nsIDOMEvent * 0x02ac85a4) line 128 + 57 bytes
nsEventListenerManager::HandleEventSubType(nsListenerStruct * 0x022b3540, 
nsIDOMEvent * 0x02ac85a4, unsigned int 4) line 680 + 19 bytes
nsEventListenerManager::HandleEvent(nsIPresContext * 0x02281c20, nsEvent * 
0x00034d78, nsIDOMEvent * * 0x00034cd8, unsigned int 7, nsEventStatus * 
0x00034db0) line 1174 + 31 bytes
nsGenericElement::HandleDOMEvent(nsIPresContext * 0x02281c20, nsEvent * 
0x00034d78, nsIDOMEvent * * 0x00034cd8, unsigned int 1, nsEventStatus * 
0x00034db0) line 809
nsHTMLInputElement::HandleDOMEvent(nsHTMLInputElement * const 0x022b37f0, 
nsIPresContext * 0x02281c20, nsEvent * 0x00034d78, nsIDOMEvent * * 0x00000000, 
unsigned int 1, nsEventStatus * 0x00034db0) line 739 + 31 bytes
nsEnderEventListener::Blur(nsIDOMEvent * 0x02acc4f4) line 3876
nsEventListenerManager::HandleEvent(nsIPresContext * 0x0283d5a0, nsEvent * 
0x000350d4, nsIDOMEvent * * 0x00034f6c, unsigned int 7, nsEventStatus * 
0x000350f4) line 1061 + 17 bytes
nsDocument::HandleDOMEvent(nsDocument * const 0x0283dc20, nsIPresContext * 
0x0283d5a0, nsEvent * 0x000350d4, nsIDOMEvent * * 0x00034f6c, unsigned int 1, 
nsEventStatus * 0x000350f4) line 2423
nsEventStateManager::SendFocusBlur(nsEventStateManager * const 0x0229f2c0, 
nsIPresContext * 0x02281c20, nsIContent * 0x022b56e0) line 2177
nsEventStateManager::SetContentState(nsEventStateManager * const 0x0229f2c0, 
nsIContent * 0x022b56e0, int 2) line 2020
nsHTMLInputElement::SetFocus(nsHTMLInputElement * const 0x022b56e8, 
nsIPresContext * 0x02281c20) line 629
nsHTMLInputElement::Focus(nsHTMLInputElement * const 0x022b56d0) line 607 + 25 
bytes
HTMLInputElementFocus(JSContext * 0x021fcdb0, JSObject * 0x01151ee8, unsigned 
int 0, long * 0x011b7278, long * 0x0003539c) line 878 + 15 bytes
js_Invoke(JSContext * 0x021fcdb0, unsigned int 0, unsigned int 0) line 666 + 26 
bytes
js_Interpret(JSContext * 0x021fcdb0, long * 0x00035c18) line 2262 + 15 bytes
js_Invoke(JSContext * 0x021fcdb0, unsigned int 0, unsigned int 0) line 682 + 13 
bytes
js_Interpret(JSContext * 0x021fcdb0, long * 0x00036450) line 2262 + 15 bytes
js_Invoke(JSContext * 0x021fcdb0, unsigned int 1, unsigned int 2) line 682 + 13 
bytes
js_InternalInvoke(JSContext * 0x021fcdb0, JSObject * 0x01147c58, long 18160168, 
unsigned int 0, unsigned int 1, long * 0x000365d8, long * 0x00036584) line 759 + 
19 bytes
JS_CallFunctionValue(JSContext * 0x021fcdb0, JSObject * 0x01147c58, long 
18160168, unsigned int 1, long * 0x000365d8, long * 0x00036584) line 2771 + 31 
bytes
nsJSContext::CallEventHandler(nsJSContext * const 0x021fcf40, void * 0x01147c58, 
void * 0x01151a28, unsigned int 1, void * 0x000365d8, int * 0x000365d4) line 562 
+ 33 bytes
nsJSEventListener::HandleEvent(nsIDOMEvent * 0x02ac87e4) line 128 + 57 bytes
nsEventListenerManager::HandleEventSubType(nsListenerStruct * 0x022b3540, 
nsIDOMEvent * 0x02ac87e4, unsigned int 4) line 680 + 19 bytes
nsEventListenerManager::HandleEvent(nsIPresContext * 0x02281c20, nsEvent * 
0x00036a6c, nsIDOMEvent * * 0x000369cc, unsigned int 7, nsEventStatus * 
0x00036aa4) line 1174 + 31 bytes
nsGenericElement::HandleDOMEvent(nsIPresContext * 0x02281c20, nsEvent * 
0x00036a6c, nsIDOMEvent * * 0x000369cc, unsigned int 1, nsEventStatus * 
0x00036aa4) line 809
nsHTMLInputElement::HandleDOMEvent(nsHTMLInputElement * const 0x022b37f0, 
nsIPresContext * 0x02281c20, nsEvent * 0x00036a6c, nsIDOMEvent * * 0x00000000, 
unsigned int 1, nsEventStatus * 0x00036aa4) line 739 + 31 bytes
nsEnderEventListener::Blur(nsIDOMEvent * 0x02ac8314) line 3876
nsEventListenerManager::HandleEvent(nsIPresContext * 0x0283d5a0, nsEvent * 
0x00036dc8, nsIDOMEvent * * 0x00036c60, unsigned int 7, nsEventStatus * 
0x00036de8) line 1061 + 17 bytes
nsDocument::HandleDOMEvent(nsDocument * const 0x0283dc20, nsIPresContext * 
0x0283d5a0, nsEvent * 0x00036dc8, nsIDOMEvent * * 0x00036c60, unsigned int 1, 
nsEventStatus * 0x00036de8) line 2423
nsEventStateManager::SendFocusBlur(nsEventStateManager * const 0x0229f2c0, 
nsIPresContext * 0x02281c20, nsIContent * 0x022b56e0) line 2177
nsEventStateManager::SetContentState(nsEventStateManager * const 0x0229f2c0, 
nsIContent * 0x022b56e0, int 2) line 2020
nsHTMLInputElement::SetFocus(nsHTMLInputElement * const 0x022b56e8, 
nsIPresContext * 0x02281c20) line 629
nsHTMLInputElement::Focus(nsHTMLInputElement * const 0x022b56d0) line 607 + 25 
bytes
HTMLInputElementFocus(JSContext * 0x021fcdb0, JSObject * 0x01151ee8, unsigned 
int 0, long * 0x011b724c, long * 0x00037090) line 878 + 15 bytes
js_Invoke(JSContext * 0x021fcdb0, unsigned int 0, unsigned int 0) line 666 + 26 
bytes
js_Interpret(JSContext * 0x021fcdb0, long * 0x0003790c) line 2262 + 15 bytes
js_Invoke(JSContext * 0x021fcdb0, unsigned int 0, unsigned int 0) line 682 + 13 
bytes
js_Interpret(JSContext * 0x021fcdb0, long * 0x00038144) line 2262 + 15 bytes
js_Invoke(JSContext * 0x021fcdb0, unsigned int 1, unsigned int 2) line 682 + 13 
bytes
js_InternalInvoke(JSContext * 0x021fcdb0, JSObject * 0x01147c58, long 18160168, 
unsigned int 0, unsigned int 1, long * 0x000382cc, long * 0x00038278) line 759 + 
19 bytes
JS_CallFunctionValue(JSContext * 0x021fcdb0, JSObject * 0x01147c58, long 
18160168, unsigned int 1, long * 0x000382cc, long * 0x00038278) line 2771 + 31 
bytes
nsJSContext::CallEventHandler(nsJSContext * const 0x021fcf40, void * 0x01147c58, 
void * 0x01151a28, unsigned int 1, void * 0x000382cc, int * 0x000382c8) line 562 
+ 33 bytes
nsJSEventListener::HandleEvent(nsIDOMEvent * 0x02ac8034) line 128 + 57 bytes
nsEventListenerManager::HandleEventSubType(nsListenerStruct * 0x022b3540, 
nsIDOMEvent * 0x02ac8034, unsigned int 4) line 680 + 19 bytes
nsEventListenerManager::HandleEvent(nsIPresContext * 0x02281c20, nsEvent * 
0x00038760, nsIDOMEvent * * 0x000386c0, unsigned int 7, nsEventStatus * 
0x00038798) line 1174 + 31 bytes
nsGenericElement::HandleDOMEvent(nsIPresContext * 0x02281c20, nsEvent * 
0x00038760, nsIDOMEvent * * 0x000386c0, unsigned int 1, nsEventStatus * 
0x00038798) line 809
nsHTMLInputElement::HandleDOMEvent(nsHTMLInputElement * const 0x022b37f0, 
nsIPresContext * 0x02281c20, nsEvent * 0x00038760, nsIDOMEvent * * 0x00000000, 
unsigned int 1, nsEventStatus * 0x00038798) line 739 + 31 bytes
nsEnderEventListener::Blur(nsIDOMEvent * 0x02ac8094) line 3876
nsEventListenerManager::HandleEvent(nsIPresContext * 0x0283d5a0, nsEvent * 
0x00038abc, nsIDOMEvent * * 0x00038954, unsigned int 7, nsEventStatus * 
0x00038adc) line 1061 + 17 bytes
nsDocument::HandleDOMEvent(nsDocument * const 0x0283dc20, nsIPresContext * 
0x0283d5a0, nsEvent * 0x00038abc, nsIDOMEvent * * 0x00038954, unsigned int 1, 
nsEventStatus * 0x00038adc) line 2423
nsEventStateManager::SendFocusBlur(nsEventStateManager * const 0x0229f2c0, 
nsIPresContext * 0x02281c20, nsIContent * 0x022b56e0) line 2177
nsEventStateManager::SetContentState(nsEventStateManager * const 0x0229f2c0, 
nsIContent * 0x022b56e0, int 2) line 2020
nsHTMLInputElement::SetFocus(nsHTMLInputElement * const 0x022b56e8, 
nsIPresContext * 0x02281c20) line 629
nsHTMLInputElement::Focus(nsHTMLInputElement * const 0x022b56d0) line 607 + 25 
bytes
HTMLInputElementFocus(JSContext * 0x021fcdb0, JSObject * 0x01151ee8, unsigned 
int 0, long * 0x011b7220, long * 0x00038d84) line 878 + 15 bytes
js_Invoke(JSContext * 0x021fcdb0, unsigned int 0, unsigned int 0) line 666 + 26 
bytes
js_Interpret(JSContext * 0x021fcdb0, long * 0x00039600) line 2262 + 15 bytes
js_Invoke(JSContext * 0x021fcdb0, unsigned int 0, unsigned int 0) line 682 + 13 
bytes
js_Interpret(JSContext * 0x021fcdb0, long * 0x00039e38) line 2262 + 15 bytes
js_Invoke(JSContext * 0x021fcdb0, unsigned int 1, unsigned int 2) line 682 + 13 
bytes
js_InternalInvoke(JSContext * 0x021fcdb0, JSObject * 0x01147c58, long 18160168, 
unsigned int 0, unsigned int 1, long * 0x00039fc0, long * 0x00039f6c) line 759 + 
19 bytes
JS_CallFunctionValue(JSContext * 0x021fcdb0, JSObject * 0x01147c58, long 
18160168, unsigned int 1, long * 0x00039fc0, long * 0x00039f6c) line 2771 + 31 
bytes
nsJSContext::CallEventHandler(nsJSContext * const 0x021fcf40, void * 0x01147c58, 
void * 0x01151a28, unsigned int 1, void * 0x00039fc0, int * 0x00039fbc) line 562 
+ 33 bytes
nsJSEventListener::HandleEvent(nsIDOMEvent * 0x02ac9054) line 128 + 57 bytes
nsEventListenerManager::HandleEventSubType(nsListenerStruct * 0x022b3540, 
nsIDOMEvent * 0x02ac9054, unsigned int 4) line 680 + 19 bytes
nsEventListenerManager::HandleEvent(nsIPresContext * 0x02281c20, nsEvent * 
0x0003a454, nsIDOMEvent * * 0x0003a3b4, unsigned int 7, nsEventStatus * 
0x0003a48c) line 1174 + 31 bytes
nsGenericElement::HandleDOMEvent(nsIPresContext * 0x02281c20, nsEvent * 
0x0003a454, nsIDOMEvent * * 0x0003a3b4, unsigned int 1, nsEventStatus * 
0x0003a48c) line 809
nsHTMLInputElement::HandleDOMEvent(nsHTMLInputElement * const 0x022b37f0, 
nsIPresContext * 0x02281c20, nsEvent * 0x0003a454, nsIDOMEvent * * 0x00000000, 
unsigned int 1, nsEventStatus * 0x0003a48c) line 739 + 31 bytes
nsEnderEventListener::Blur(nsIDOMEvent * 0x02ac5aa4) line 3876
nsEventListenerManager::HandleEvent(nsIPresContext * 0x0283d5a0, nsEvent * 
0x0003a7b0, nsIDOMEvent * * 0x0003a648, unsigned int 7, nsEventStatus * 
0x0003a7d0) line 1061 + 17 bytes
nsDocument::HandleDOMEvent(nsDocument * const 0x0283dc20, nsIPresContext * 
0x0283d5a0, nsEvent * 0x0003a7b0, nsIDOMEvent * * 0x0003a648, unsigned int 1, 
nsEventStatus * 0x0003a7d0) line 2423
nsEventStateManager::SendFocusBlur(nsEventStateManager * const 0x0229f2c0, 
nsIPresContext * 0x02281c20, nsIContent * 0x022b56e0) line 2177
nsEventStateManager::SetContentState(nsEventStateManager * const 0x0229f2c0, 
nsIContent * 0x022b56e0, int 2) line 2020
nsHTMLInputElement::SetFocus(nsHTMLInputElement * const 0x022b56e8, 
nsIPresContext * 0x02281c20) line 629
nsHTMLInputElement::Focus(nsHTMLInputElement * const 0x022b56d0) line 607 + 25 
bytes
HTMLInputElementFocus(JSContext * 0x021fcdb0, JSObject * 0x01151ee8, unsigned 
int 0, long * 0x011b71f4, long * 0x0003aa78) line 878 + 15 bytes
js_Invoke(JSContext * 0x021fcdb0, unsigned int 0, unsigned int 0) line 666 + 26 
bytes
js_Interpret(JSContext * 0x021fcdb0, long * 0x0003b2f4) line 2262 + 15 bytes
js_Invoke(JSContext * 0x021fcdb0, unsigned int 0, unsigned int 0) line 682 + 13 
bytes
js_Interpret(JSContext * 0x021fcdb0, long * 0x0003bb2c) line 2262 + 15 bytes
js_Invoke(JSContext * 0x021fcdb0, unsigned int 1, unsigned int 2) line 682 + 13 
bytes
js_InternalInvoke(JSContext * 0x021fcdb0, JSObject * 0x01147c58, long 18160168, 
unsigned int 0, unsigned int 1, long * 0x0003bcb4, long * 0x0003bc60) line 759 + 
19 bytes
JS_CallFunctionValue(JSContext * 0x021fcdb0, JSObject * 0x01147c58, long 
18160168, unsigned int 1, long * 0x0003bcb4, long * 0x0003bc60) line 2771 + 31 
bytes
nsJSContext::CallEventHandler(nsJSContext * const 0x021fcf40, void * 0x01147c58, 
void * 0x01151a28, unsigned int 1, void * 0x0003bcb4, int * 0x0003bcb0) line 562 
+ 33 bytes
nsJSEventListener::HandleEvent(nsIDOMEvent * 0x02ac1cb4) line 128 + 57 bytes
nsEventListenerManager::HandleEventSubType(nsListenerStruct * 0x022b3540, 
nsIDOMEvent * 0x02ac1cb4, unsigned int 4) line 680 + 19 bytes
nsEventListenerManager::HandleEvent(nsIPresContext * 0x02281c20, nsEvent * 
0x0003c148, nsIDOMEvent * * 0x0003c0a8, unsigned int 7, nsEventStatus * 
0x0003c180) line 1174 + 31 bytes
nsGenericElement::HandleDOMEvent(nsIPresContext * 0x02281c20, nsEvent * 
0x0003c148, nsIDOMEvent * * 0x0003c0a8, unsigned int 1, nsEventStatus * 
0x0003c180) line 809
nsHTMLInputElement::HandleDOMEvent(nsHTMLInputElement * const 0x022b37f0, 
nsIPresContext * 0x02281c20, nsEvent * 0x0003c148, nsIDOMEvent * * 0x00000000, 
unsigned int 1, nsEventStatus * 0x0003c180) line 739 + 31 bytes
nsEnderEventListener::Blur(nsIDOMEvent * 0x02ac0e94) line 3876
nsEventListenerManager::HandleEvent(nsIPresContext * 0x0283d5a0, nsEvent * 
0x0003c4a4, nsIDOMEvent * * 0x0003c33c, unsigned int 7, nsEventStatus * 
0x0003c4c4) line 1061 + 17 bytes
nsDocument::HandleDOMEvent(nsDocument * const 0x0283dc20, nsIPresContext * 
0x0283d5a0, nsEvent * 0x0003c4a4, nsIDOMEvent * * 0x0003c33c, unsigned int 1, 
nsEventStatus * 0x0003c4c4) line 2423
nsEventStateManager::SendFocusBlur(nsEventStateManager * const 0x0229f2c0, 
nsIPresContext * 0x02281c20, nsIContent * 0x022b56e0) line 2177
nsEventStateManager::SetContentState(nsEventStateManager * const 0x0229f2c0, 
nsIContent * 0x022b56e0, int 2) line 2020
nsHTMLInputElement::SetFocus(nsHTMLInputElement * const 0x022b56e8, 
nsIPresContext * 0x02281c20) line 629
nsHTMLInputElement::Focus(nsHTMLInputElement * const 0x022b56d0) line 607 + 25 
bytes
HTMLInputElementFocus(JSContext * 0x021fcdb0, JSObject * 0x01151ee8, unsigned 
int 0, long * 0x011b71c8, long * 0x0003c76c) line 878 + 15 bytes
js_Invoke(JSContext * 0x021fcdb0, unsigned int 0, unsigned int 0) line 666 + 26 
bytes
js_Interpret(JSContext * 0x021fcdb0, long * 0x0003cfe8) line 2262 + 15 bytes
js_Invoke(JSContext * 0x021fcdb0, unsigned int 0, unsigned int 0) line 682 + 13 
bytes
js_Interpret(JSContext * 0x021fcdb0, long * 0x0003d820) line 2262 + 15 bytes
js_Invoke(JSContext * 0x021fcdb0, unsigned int 1, unsigned int 2) line 682 + 13 
bytes
js_InternalInvoke(JSContext * 0x021fcdb0, JSObject * 0x01147c58, long 18160168, 
unsigned int 0, unsigned int 1, long * 0x0003d9a8, long * 0x0003d954) line 759 + 
19 bytes
JS_CallFunctionValue(JSContext * 0x021fcdb0, JSObject * 0x01147c58, long 
18160168, unsigned int 1, long * 0x0003d9a8, long * 0x0003d954) line 2771 + 31 
bytes
nsJSContext::CallEventHandler(nsJSContext * const 0x021fcf40, void * 0x01147c58, 
void * 0x01151a28, unsigned int 1, void * 0x0003d9a8, int * 0x0003d9a4) line 562 
+ 33 bytes
nsJSEventListener::HandleEvent(nsIDOMEvent * 0x02ac66b4) line 128 + 57 bytes
nsEventListenerManager::HandleEventSubType(nsListenerStruct * 0x022b3540, 
nsIDOMEvent * 0x02ac66b4, unsigned int 4) line 680 + 19 bytes
nsEventListenerManager::HandleEvent(nsIPresContext * 0x02281c20, nsEvent * 
0x0003de3c, nsIDOMEvent * * 0x0003dd9c, unsigned int 7, nsEventStatus * 
0x0003de74) line 1174 + 31 bytes
nsGenericElement::HandleDOMEvent(nsIPresContext * 0x02281c20, nsEvent * 
0x0003de3c, nsIDOMEvent * * 0x0003dd9c, unsigned int 1, nsEventStatus * 
0x0003de74) line 809
nsHTMLInputElement::HandleDOMEvent(nsHTMLInputElement * const 0x022b37f0, 
nsIPresContext * 0x02281c20, nsEvent * 0x0003de3c, nsIDOMEvent * * 0x00000000, 
unsigned int 1, nsEventStatus * 0x0003de74) line 739 + 31 bytes
nsEnderEventListener::Blur(nsIDOMEvent * 0x02ac3794) line 3876
nsEventListenerManager::HandleEvent(nsIPresContext * 0x0283d5a0, nsEvent * 
0x0003e198, nsIDOMEvent * * 0x0003e030, unsigned int 7, nsEventStatus * 
0x0003e1b8) line 1061 + 17 bytes
nsDocument::HandleDOMEvent(nsDocument * const 0x0283dc20, nsIPresContext * 
0x0283d5a0, nsEvent * 0x0003e198, nsIDOMEvent * * 0x0003e030, unsigned int 1, 
nsEventStatus * 0x0003e1b8) line 2423
nsEventStateManager::SendFocusBlur(nsEventStateManager * const 0x0229f2c0, 
nsIPresContext * 0x02281c20, nsIContent * 0x022b56e0) line 2177
nsEventStateManager::SetContentState(nsEventStateManager * const 0x0229f2c0, 
nsIContent * 0x022b56e0, int 2) line 2020
nsHTMLInputElement::SetFocus(nsHTMLInputElement * const 0x022b56e8, 
nsIPresContext * 0x02281c20) line 629
nsHTMLInputElement::Focus(nsHTMLInputElement * const 0x022b56d0) line 607 + 25 
bytes
HTMLInputElementFocus(JSContext * 0x021fcdb0, JSObject * 0x01151ee8, unsigned 
int 0, long * 0x011b719c, long * 0x0003e460) line 878 + 15 bytes
js_Invoke(JSContext * 0x021fcdb0, unsigned int 0, unsigned int 0) line 666 + 26 
bytes
js_Interpret(JSContext * 0x021fcdb0, long * 0x0003ecdc) line 2262 + 15 bytes
js_Invoke(JSContext * 0x021fcdb0, unsigned int 0, unsigned int 0) line 682 + 13 
bytes
js_Interpret(JSContext * 0x021fcdb0, long * 0x0003f514) line 2262 + 15 bytes
js_Invoke(JSContext * 0x021fcdb0, unsigned int 1, unsigned int 2) line 682 + 13 
bytes
js_InternalInvoke(JSContext * 0x021fcdb0, JSObject * 0x01147c58, long 18160168, 
unsigned int 0, unsigned int 1, long * 0x0003f69c, long * 0x0003f648) line 759 + 
19 bytes
JS_CallFunctionValue(JSContext * 0x021fcdb0, JSObject * 0x01147c58, long 
18160168, unsigned int 1, long * 0x0003f69c, long * 0x0003f648) line 2771 + 31 
bytes
nsJSContext::CallEventHandler(nsJSContext * const 0x021fcf40, void * 0x01147c58, 
void * 0x01151a28, unsigned int 1, void * 0x0003f69c, int * 0x0003f698) line 562 
+ 33 bytes
nsJSEventListener::HandleEvent(nsIDOMEvent * 0x02ac5034) line 128 + 57 bytes
nsEventListenerManager::HandleEventSubType(nsListenerStruct * 0x022b3540, 
nsIDOMEvent * 0x02ac5034, unsigned int 4) line 680 + 19 bytes
nsEventListenerManager::HandleEvent(nsIPresContext * 0x02281c20, nsEvent * 
0x0003fb30, nsIDOMEvent * * 0x0003fa90, unsigned int 7, nsEventStatus * 
0x0003fb68) line 1174 + 31 bytes
nsGenericElement::HandleDOMEvent(nsIPresContext * 0x02281c20, nsEvent * 
0x0003fb30, nsIDOMEvent * * 0x0003fa90, unsigned int 1, nsEventStatus * 
0x0003fb68) line 809
nsHTMLInputElement::HandleDOMEvent(nsHTMLInputElement * const 0x022b37f0, 
nsIPresContext * 0x02281c20, nsEvent * 0x0003fb30, nsIDOMEvent * * 0x00000000, 
unsigned int 1, nsEventStatus * 0x0003fb68) line 739 + 31 bytes
nsEnderEventListener::Blur(nsIDOMEvent * 0x02ac2c04) line 3876
nsEventListenerManager::HandleEvent(nsIPresContext * 0x0283d5a0, nsEvent * 
0x0003fe8c, nsIDOMEvent * * 0x0003fd24, unsigned int 7, nsEventStatus * 
0x0003feac) line 1061 + 17 bytes
nsDocument::HandleDOMEvent(nsDocument * const 0x0283dc20, nsIPresContext * 
0x0283d5a0, nsEvent * 0x0003fe8c, nsIDOMEvent * * 0x0003fd24, unsigned int 1, 
nsEventStatus * 0x0003feac) line 2423
nsEventStateManager::SendFocusBlur(nsEventStateManager * const 0x0229f2c0, 
nsIPresContext * 0x02281c20, nsIContent * 0x022b56e0) line 2177
nsEventStateManager::SetContentState(nsEventStateManager * const 0x0229f2c0, 
nsIContent * 0x022b56e0, int 2) line 2020
nsHTMLInputElement::SetFocus(nsHTMLInputElement * const 0x022b56e8, 
nsIPresContext * 0x02281c20) line 629
nsHTMLInputElement::Focus(nsHTMLInputElement * const 0x022b56d0) line 607 + 25 
bytes
HTMLInputElementFocus(JSContext * 0x021fcdb0, JSObject * 0x01151ee8, unsigned 
int 0, long * 0x011b7170, long * 0x00040154) line 878 + 15 bytes
js_Invoke(JSContext * 0x021fcdb0, unsigned int 0, unsigned int 0) line 666 + 26 
bytes
js_Interpret(JSContext * 0x021fcdb0, long * 0x000409d0) line 2262 + 15 bytes
js_Invoke(JSContext * 0x021fcdb0, unsigned int 0, unsigned int 0) line 682 + 13 
bytes
js_Interpret(JSContext * 0x021fcdb0, long * 0x00041208) line 2262 + 15 bytes
js_Invoke(JSContext * 0x021fcdb0, unsigned int 1, unsigned int 2) line 682 + 13 
bytes
js_InternalInvoke(JSContext * 0x021fcdb0, JSObject * 0x01147c58, long 18160168, 
unsigned int 0, unsigned int 1, long * 0x00041390, long * 0x0004133c) line 759 + 
19 bytes
JS_CallFunctionValue(JSContext * 0x021fcdb0, JSObject * 0x01147c58, long 
18160168, unsigned int 1, long * 0x00041390, long * 0x0004133c) line 2771 + 31 
bytes
nsJSContext::CallEventHandler(nsJSContext * const 0x021fcf40, void * 0x01147c58, 
void * 0x01151a28, unsigned int 1, void * 0x00041390, int * 0x0004138c) line 562 
+ 33 bytes
nsJSEventListener::HandleEvent(nsIDOMEvent * 0x02ac09f4) line 128 + 57 bytes
nsEventListenerManager::HandleEventSubType(nsListenerStruct * 0x022b3540, 
nsIDOMEvent * 0x02ac09f4, unsigned int 4) line 680 + 19 bytes
nsEventListenerManager::HandleEvent(nsIPresContext * 0x02281c20, nsEvent * 
0x00041824, nsIDOMEvent * * 0x00041784, unsigned int 7, nsEventStatus * 
0x0004185c) line 1174 + 31 bytes
nsGenericElement::HandleDOMEvent(nsIPresContext * 0x02281c20, nsEvent * 
0x00041824, nsIDOMEvent * * 0x00041784, unsigned int 1, nsEventStatus * 
0x0004185c) line 809
nsHTMLInputElement::HandleDOMEvent(nsHTMLInputElement * const 0x022b37f0, 
nsIPresContext * 0x02281c20, nsEvent * 0x00041824, nsIDOMEvent * * 0x00000000, 
unsigned int 1, nsEventStatus * 0x0004185c) line 739 + 31 bytes
nsEnderEventListener::Blur(nsIDOMEvent * 0x02ac1864) line 3876
nsEventListenerManager::HandleEvent(nsIPresContext * 0x0283d5a0, nsEvent * 
0x00041b80, nsIDOMEvent * * 0x00041a18, unsigned int 7, nsEventStatus * 
0x00041ba0) line 1061 + 17 bytes
nsDocument::HandleDOMEvent(nsDocument * const 0x0283dc20, nsIPresContext * 
0x0283d5a0, nsEvent * 0x00041b80, nsIDOMEvent * * 0x00041a18, unsigned int 1, 
nsEventStatus * 0x00041ba0) line 2423
nsEventStateManager::SendFocusBlur(nsEventStateManager * const 0x0229f2c0, 
nsIPresContext * 0x02281c20, nsIContent * 0x022b56e0) line 2177
nsEventStateManager::SetContentState(nsEventStateManager * const 0x0229f2c0, 
nsIContent * 0x022b56e0, int 2) line 2020
nsHTMLInputElement::SetFocus(nsHTMLInputElement * const 0x022b56e8, 
nsIPresContext * 0x02281c20) line 629
nsHTMLInputElement::Focus(nsHTMLInputElement * const 0x022b56d0) line 607 + 25 
bytes
HTMLInputElementFocus(JSContext * 0x021fcdb0, JSObject * 0x01151ee8, unsigned 
int 0, long * 0x011b7144, long * 0x00041e48) line 878 + 15 bytes
js_Invoke(JSContext * 0x021fcdb0, unsigned int 0, unsigned int 0) line 666 + 26 
bytes
js_Interpret(JSContext * 0x021fcdb0, long * 0x000426c4) line 2262 + 15 bytes
js_Invoke(JSContext * 0x021fcdb0, unsigned int 0, unsigned int 0) line 682 + 13 
bytes
js_Interpret(JSContext * 0x021fcdb0, long * 0x00042efc) line 2262 + 15 bytes
js_Invoke(JSContext * 0x021fcdb0, unsigned int 1, unsigned int 2) line 682 + 13 
bytes
js_InternalInvoke(JSContext * 0x021fcdb0, JSObject * 0x01147c58, long 18160168, 
unsigned int 0, unsigned int 1, long * 0x00043084, long * 0x00043030) line 759 + 
19 bytes
JS_CallFunctionValue(JSContext * 0x021fcdb0, JSObject * 0x01147c58, long 
18160168, unsigned int 1, long * 0x00043084, long * 0x00043030) line 2771 + 31 
bytes
nsJSContext::CallEventHandler(nsJSContext * const 0x021fcf40, void * 0x01147c58, 
void * 0x01151a28, unsigned int 1, void * 0x00043084, int * 0x00043080) line 562 
+ 33 bytes
nsJSEventListener::HandleEvent(nsIDOMEvent * 0x02ac2064) line 128 + 57 bytes
nsEventListenerManager::HandleEventSubType(nsListenerStruct * 0x022b3540, 
nsIDOMEvent * 0x02ac2064, unsigned int 4) line 680 + 19 bytes
nsEventListenerManager::HandleEvent(nsIPresContext * 0x02281c20, nsEvent * 
0x00043518, nsIDOMEvent * * 0x00043478, unsigned int 7, nsEventStatus * 
0x00043550) line 1174 + 31 bytes
nsGenericElement::HandleDOMEvent(nsIPresContext * 0x02281c20, nsEvent * 
0x00043518, nsIDOMEvent * * 0x00043478, unsigned int 1, nsEventStatus * 
0x00043550) line 809
nsHTMLInputElement::HandleDOMEvent(nsHTMLInputElement * const 0x022b37f0, 
nsIPresContext * 0x02281c20, nsEvent * 0x00043518, nsIDOMEvent * * 0x00000000, 
unsigned int 1, nsEventStatus * 0x00043550) line 739 + 31 bytes
nsEnderEventListener::Blur(nsIDOMEvent * 0x02ac0524) line 3876
nsEventListenerManager::HandleEvent(nsIPresContext * 0x0283d5a0, nsEvent * 
0x00043874, nsIDOMEvent * * 0x0004370c, unsigned int 7, nsEventStatus * 
0x00043894) line 1061 + 17 bytes
nsDocument::HandleDOMEvent(nsDocument * const 0x0283dc20, nsIPresContext * 
0x0283d5a0, nsEvent * 0x00043874, nsIDOMEvent * * 0x0004370c, unsigned int 1, 
nsEventStatus * 0x00043894) line 2423
nsEventStateManager::SendFocusBlur(nsEventStateManager * const 0x0229f2c0, 
nsIPresContext * 0x02281c20, nsIContent * 0x022b56e0) line 2177
nsEventStateManager::SetContentState(nsEventStateManager * const 0x0229f2c0, 
nsIContent * 0x022b56e0, int 2) line 2020
nsHTMLInputElement::SetFocus(nsHTMLInputElement * const 0x022b56e8, 
nsIPresContext * 0x02281c20) line 629
nsHTMLInputElement::Focus(nsHTMLInputElement * const 0x022b56d0) line 607 + 25 
bytes
HTMLInputElementFocus(JSContext * 0x021fcdb0, JSObject * 0x01151ee8, unsigned 
int 0, long * 0x011b7118, long * 0x00043b3c) line 878 + 15 bytes
js_Invoke(JSContext * 0x021fcdb0, unsigned int 0, unsigned int 0) line 666 + 26 
bytes
js_Interpret(JSContext * 0x021fcdb0, long * 0x000443b8) line 2262 + 15 bytes
js_Invoke(JSContext * 0x021fcdb0, unsigned int 0, unsigned int 0) line 682 + 13 
bytes
js_Interpret(JSContext * 0x021fcdb0, long * 0x00044bf0) line 2262 + 15 bytes
js_Invoke(JSContext * 0x021fcdb0, unsigned int 1, unsigned int 2) line 682 + 13 
bytes
js_InternalInvoke(JSContext * 0x021fcdb0, JSObject * 0x01147c58, long 18160168, 
unsigned int 0, unsigned int 1, long * 0x00044d78, long * 0x00044d24) line 759 + 
19 bytes
JS_CallFunctionValue(JSContext * 0x021fcdb0, JSObject * 0x01147c58, long 
18160168, unsigned int 1, long * 0x00044d78, long * 0x00044d24) line 2771 + 31 
bytes
nsJSContext::CallEventHandler(nsJSContext * const 0x021fcf40, void * 0x01147c58, 
void * 0x01151a28, unsigned int 1, void * 0x00044d78, int * 0x00044d74) line 562 
+ 33 bytes
nsJSEventListener::HandleEvent(nsIDOMEvent * 0x02ac2674) line 128 + 57 bytes
nsEventListenerManager::HandleEventSubType(nsListenerStruct * 0x022b3540, 
nsIDOMEvent * 0x02ac2674, unsigned int 4) line 680 + 19 bytes
nsEventListenerManager::HandleEvent(nsIPresContext * 0x02281c20, nsEvent * 
0x0004520c, nsIDOMEvent * * 0x0004516c, unsigned int 7, nsEventStatus * 
0x00045244) line 1174 + 31 bytes
nsGenericElement::HandleDOMEvent(nsIPresContext * 0x02281c20, nsEvent * 
0x0004520c, nsIDOMEvent * * 0x0004516c, unsigned int 1, nsEventStatus * 
0x00045244) line 809
nsHTMLInputElement::HandleDOMEvent(nsHTMLInputElement * const 0x022b37f0, 
nsIPresContext * 0x02281c20, nsEvent * 0x0004520c, nsIDOMEvent * * 0x00000000, 
unsigned int 1, nsEventStatus * 0x00045244) line 739 + 31 bytes
nsEnderEventListener::Blur(nsIDOMEvent * 0x02ac0584) line 3876
nsEventListenerManager::HandleEvent(nsIPresContext * 0x0283d5a0, nsEvent * 
0x00045568, nsIDOMEvent * * 0x00045400, unsigned int 7, nsEventStatus * 
0x00045588) line 1061 + 17 bytes
nsDocument::HandleDOMEvent(nsDocument * const 0x0283dc20, nsIPresContext * 
0x0283d5a0, nsEvent * 0x00045568, nsIDOMEvent * * 0x00045400, unsigned int 1, 
nsEventStatus * 0x00045588) line 2423
nsEventStateManager::SendFocusBlur(nsEventStateManager * const 0x0229f2c0, 
nsIPresContext * 0x02281c20, nsIContent * 0x022b56e0) line 2177
nsEventStateManager::SetContentState(nsEventStateManager * const 0x0229f2c0, 
nsIContent * 0x022b56e0, int 2) line 2020
nsHTMLInputElement::SetFocus(nsHTMLInputElement * const 0x022b56e8, 
nsIPresContext * 0x02281c20) line 629

and on and on and on
Assignee: karnaze → saari
This is a fun bug where the onchange handler fired after the blur event hit the 
content model, but before we reset or state for what was in focus. The onchange 
handler then set focus to the password field, causing us to try to blur the user 
field again because our state still said it had focus. That blur fired the 
onchange handler again. Repeat until you run out of stack space.

Hyatt, I'm not sure what the right thing to do here is. I reset 
gLastFocusedDocument and gLastFocusedContent prior to the blur dispatch in 
SendFocusBlur, and that works, and doesn't seem to break anything on Mac or 
Windows (havn't tested linux yet). However, I'm having trouble convincing myself 
that just setting these to null is the right thing to do. Thoughts?
Status: NEW → ASSIGNED
Blocks: 25824
Release them before you set them to null.  I believe they're refcounted.

Whiteboard: fix in hand
*** Bug 25790 has been marked as a duplicate of this bug. ***
Adding PDT+ and beta1 from bug 25790, dupe of this one
Keywords: beta1
Whiteboard: fix in hand → [PDT+] fix in hand
Fixed.

Tabbing between fields seems to have issues, but it doesn't crash anymore.
Clicking works fine.
Status: ASSIGNED → RESOLVED
Closed: 25 years ago
Resolution: --- → FIXED
No longer blocks: 25824
Marking VERIFIED FIXED on:
- Linux6 2000-02-17-08 Commercial build
- MacOS9 2000-02-16-16 Mozilla build
- Win98 2000-02-16-16 Commercial build

Status: RESOLVED → VERIFIED
You need to log in before you can comment on or make changes to this bug.