166035 - Crash in gkcontent.dll when pressing ctrl-tab after zapping (deleting) IFRAME [@ nsEventStateManager::IsIFrameDoc]

Status: VERIFIED DUPLICATE of bug 146255

(Core :: DOM: Events, defect)

Description

[Lorenzo Colitti]

User-Agent:       Mozilla/5.0 (Windows; U; Win 9x 4.90; en-US; rv:1.1) Gecko/20020826
Build Identifier: Mozilla/5.0 (Windows; U; Win 9x 4.90; en-US; rv:1.1) Gecko/20020826

If you use Jesse Ruderman's "Zap Embeds" bookmarklet:

http://www.squarefree.com/bookmarklets/zap.html

on a page with IFRAMEs, and then press CTRL-TAB, Mozilla crashes.

Reproducible: Always

Steps to Reproduce:
1. Go to URL.
2. Use Zap embeds bookmarklet, which deletes IFRAMEs.
3. Press CTRL-TAB.
Actual Results:  
Crash in gkcontent.dll.

Expected Results:  
No crash, URL bar is highlighted.

Talkback ID 10194420Q

This may be related to bug 146255. I'm submitting it as a separate bug because
the stacks may be different.

The Zap Embeds bookmark, by the way, is this:

javascript:(function(){var d=document; function K(N,t) { var b =
d.createElement("div"); b.style.width=N.width; b.style.height=N.height;
b.innerHTML="<del>" + t + "</del>"; N.parentNode.replaceChild(b,N); } function
Z(t) { var T = d.getElementsByTagName(t), i; for (i=T.length-1;i+1;--i)
K(T[i],t); } Z("object"); Z("embed"); Z("applet"); Z("iframe");})();

Comment 1

[Lorenzo Colitti]

This does not happen in 1.0.1 RC2. Adding regression keyword.

Comment 2

[Lorenzo Colitti]

Attachment: HTML file for IFRAME content

Comment 3

[Lorenzo Colitti]

Attachment: testcase

testcase. Requires attachment 97450 [details]. Instructions included.

Comment 4

[Olivier Cahagne]

Attachment: Stack with Linux build 20020901 (trunk)

Comment 5

[Olivier Cahagne]

same stack as bug 146255.

*** This bug has been marked as a duplicate of 146255 ***

Comment 6

[Vladimir Ermakov]

verifying