101740 - M095 crash with paste [@ CSSFirstLineRule::GetStyleSheet]

Status: VERIFIED FIXED

(Core :: XBL, defect)

Description

[greer]

Cutting and pasting seem to be the predominant characteristics to this crash 
happening primarily on NT 5.0 (Win 2K):

   3 Windows 98  4.10 build 67766446
   2 Windows 98  4.90 build 73010104
   1 Windows NT  4.0 build 1381
  11 Windows NT  5.0 build 2195
   1 Windows NT  5.1 build 2600

Stack Trace: 

         CSSFirstLineRule::GetStyleSheet
[d:\builds\seamonkey\mozilla\content\html\style\src\nsHTMLCSSStyleSheet.cpp 
line 100]
         nsXBLPrototypeHandler::ExecuteHandler
[d:\builds\seamonkey\mozilla\content\xbl\src\nsXBLPrototypeHandler.cpp  line
220]
         DoKey  
[d:\builds\seamonkey\mozilla\content\xbl\src\nsXBLKeyHandler.cpp  line
92]
         nsXBLKeyHandler::KeyPress
[d:\builds\seamonkey\mozilla\content\xbl\src\nsXBLKeyHandler.cpp  line 108]
         nsEventListenerManager::HandleEvent
[d:\builds\seamonkey\mozilla\content\events\src\nsEventListenerManager.cpp  line
1633]
         nsGenericElement::HandleDOMEvent
[d:\builds\seamonkey\mozilla\content\base\src\nsGenericElement.cpp  line 1687]
         nsHTMLInputElement::HandleDOMEvent
[d:\builds\seamonkey\mozilla\content\html\content\src\nsHTMLInputElement.cpp 
line 1099]
         PresShell::HandleEventInternal
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp  line 5660]
         PresShell::HandleEvent
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp  line 5585]
         nsView::HandleEvent    
[d:\builds\seamonkey\mozilla\view\src\nsView.cpp  line
377]
         nsViewManager::DispatchEvent
[d:\builds\seamonkey\mozilla\view\src\nsViewManager.cpp  line 2058]
         HandleEvent    [d:\builds\seamonkey\mozilla\view\src\nsView.cpp  line 
68]
         nsWindow::DispatchEvent
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp  line 732]
         nsWindow::DispatchWindowEvent
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp  line 749]
         nsWindow::DispatchKeyEvent
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp  line 2405]
         nsWindow::OnKeyDown
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp  line 2473]
         nsWindow::ProcessMessage
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp  line 3170]
         0x19390445
 
        Source File :
http://bonsai.mozilla.org/cvsblame.cgi?
file=mozilla/content/html/style/src/nsHTMLCSSStyleSheet.cpp
line : 100
     (35643803) Comments: Tried to paste an url in the location bar
     (35625156) Comments: "cancelled" out of preferences box  was about to type
in url.  MS Visual studio debugger gives crashpoint as: 6024577C   call       
dword ptr [ecx+4]
     (35603698) Comments: Just copied some text off a web page and selected the
current URL in the address bar  hit Ctrl-V to paste then it crashed
     (35556932) URL: www.winamp.com
     (35556932) Comments: trying to download winamp
     (35488126) Comments: hitting ctrl-z to undo cut and paste in the address
bar
     (35461411) URL: http://www.planetquake.com/tdc/news.htm
     (35438904) Comments: I was using <CTRL> <V> to paste an URL from the
clipboard into the location entry area
     (35430394) Comments: trying to type about:authors
     (35414662) URL: http://www.robocode.net
     (35414662) Comments: I clicked on the link to the download page of Robocode
(at IBM) -- annoying!!!!!!!
     (35413060) URL: x.themes.org
     (35413060) Comments: trying to view picture for littlemozilla theme
(rightclicked on imageand select view in new window).

Comment 1

[Marc Attinasi]

Crash in style system, over to style for first look.

Comment 2

[greer]

Updating the summary to M095. Here are the current talkback user comments for
this signature:

M095 :        7
(37137154) Windows NT  5.0 build 2195 - Starting a Java Applet. It just
hanged.Also the installtion on demand did work  but the Applet activa
tion did not. www.cinderella.de
(37211955) Windows 98  4.90 build 73010104 - the flash plugin download (Ie  a
site with a flash banner  dialog->open window->crash ) 
(37566324) Windows 98  4.10 build 67766222 - Pasting text into the Location
window using Ctrl+V 
(37280298) Windows 98  4.10 build 67766446 - I was trying to change URL in the
location bar. www.cnn.com
(37356989) Windows NT  5.0 build 2195 - one tab loading gartner.comtyped
www.ibm.org  then tried to correct to www.ibm.com before the tab loa
ded the site - it crashed when I hit enter www.ibm.org

Comment 3

[David Baron :dbaron: (⌚️UTC-4, no longer working on Mozilla)]

Actually, nsXBLPrototypeHandler::ExecuteHandler never calls any GetStyleSheet,
so there's probably a bogus object.  Comparing the stack trace to the code at
the time (and remembering the line-after bias of Windows stack traces) will
probably show which object that is.  ->XBL.

Comment 4

[Shiva Thirumazhusai]

nominating topcrash bugs for nsbeta1. 

Comment 5

[Jan Carpenter]

there are no incident reports with this stack signature in the talkback
database.  I'm marking this one fixed.

Comment 6

[Jan Carpenter]

... and verified