21918 - CNN Story Causes Crash

Status: VERIFIED FIXED

(Core :: Layout: Tables, defect, P3)

Description

[Michael Collette]

Running build 1999121320.  Of all the stories to crash on, this one is about
the release of W2K on CNN's site.  Tried going back there a number of times, and
the evil Doctor Watson came out to say hi each and every time.  Hopefully this
isn't being caused by some random ad banner.
  Page loads up just peachy on NS 4.7.

  Well, before committing this report I went back to see if other stories on
CNN's site were doing the same thing... eeyup, they sure are.

Comment 1

[David Baron :dbaron: (⌚️UTC-4, no longer working on Mozilla)]

I'm also seeing this in a Linux debug build from a few weeks ago.  Changing from
PC/WinNT to All/All.  The stack trace seems to indicate CAPS (see below).  This
may be a duplicate of a similar bug I saw recently.  Changing component and
reassigning.

#0  0x4134792f in nsCodebasePrincipal::Equals (this=0x82eb9f8, other=0x0,
    result=0xbfffe094) at nsCodebasePrincipal.cpp:77
#1  0x4134b0ee in nsScriptSecurityManager::CheckPermissions (this=0x82d6210,
    aCx=0x8246fc0, aObj=0x82e5f38,
    aCapability=0x4135038d "UniversalBrowserRead", aResult=0xbfffe154)
    at nsScriptSecurityManager.cpp:915
#2  0x41349205 in nsScriptSecurityManager::CheckScriptAccess (this=0x82d6210,
    aContext=0x8246f90, aObj=0x82e5f38, domPropInt=656, isWrite=0,
    aResult=0xbfffe154) at nsScriptSecurityManager.cpp:371
#3  0x407fcfeb in NSHTMLDocumentWrite (cx=0x8246fc0, obj=0x82e5f38, argc=1,
    argv=0x82efddc, rval=0xbfffe210) at nsJSHTMLDocument.cpp:1155
#4  0x4008e32e in js_Invoke (cx=0x8246fc0, argc=1, flags=0) at jsinterp.c:665
#5  0x4009caa1 in js_Interpret (cx=0x8246fc0, result=0xbfffeccc)
    at jsinterp.c:2226
#6  0x4008e8ae in js_Execute (cx=0x8246fc0, chain=0x815dec8, script=0x8418f70,
    fun=0x0, down=0x0, flags=0, result=0xbfffeccc) at jsinterp.c:838
#7  0x40063441 in JS_EvaluateUCScriptForPrincipals (cx=0x8246fc0,
    obj=0x815dec8, principals=0x82eb9fc, chars=0x8415fe8, length=169,
    filename=0x8418f18
"http://www.cnn.com/1999/TECH/computing/12/15/microsoft.windows.2k.ap/index.html",
lineno=205, rval=0xbfffeccc) at jsapi.c:2705
#8  0x4079d187 in nsJSContext::EvaluateString (this=0x8246f90,
    aScript=@0xbfffef94, aScopeObject=0x815dec8, aPrincipal=0x82eb9f8,
    aURL=0x8418f18 "http://www.cnn.com/1999/TECH/computing/12/15/microsoft.windo
    ws.2k.ap/index.html", aLineNo=205, aVersion=0x0, aRetValue=@0xbfffed88,
    aIsUndefined=0xbfffed7c) at nsJSEnvironment.cpp:284

Comment 2

[Norris Boyd]

I ran the test case and crashed in the following place. Reassigning to layout.

nsTableColFrame::GetMinWidth() line 181 + 6 bytes
BasicTableLayoutStrategy::ColumnsAreValidFor(const nsTableCellFrame & {...}, int
75, int 75) line 1785 + 8 bytes nsTableFrame::ColumnsAreValidFor(const
nsTableCellFrame & {...}, int 75, int 75) line 3525 + 29 bytes
nsTableRowFrame::IR_TargetIsChild(nsTableRowFrame * const 0x011a5fd8,
nsIPresContext * 0x03a1dad0, nsHTMLReflowMetrics & {...}, RowReflowState &
{...}, unsigned int & 0, nsIFrame * 0x011a6020) line 1312 + 23 bytes
nsTableRowFrame::IncrementalReflow(nsTableRowFrame * const 0x011a5fd8,
nsIPresContext * 0x03a1dad0, nsHTMLReflowMetrics & {...}, RowReflowState &
{...}, unsigned int & 0) line 1139 + 35 bytes
nsTableRowFrame::Reflow(nsTableRowFrame * const 0x011a5fd8, nsIPresContext *
0x03a1dad0, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...},
unsigned int & 0) line 1414 + 31 bytes nsContainerFrame::ReflowChild(nsIFrame *
0x011a5fd8, nsIPresContext * 0x03a1dad0, nsHTMLReflowMetrics & {...}, const
nsHTMLReflowState & {...}, int 0, int 4035, unsigned int 0, unsigned int & 0)
line 621 + 31 bytes nsTableRowGroupFrame::IR_TargetIsChild(nsTableRowGroupFrame
* const 0x011a4c30, nsIPresContext * 0x03a1dad0, nsHTMLReflowMetrics & {...},
RowGroupReflowState & {...}, unsigned int & 0, nsIFrame * 0x011a5fd8) line 1481
+ 45 bytes nsTableRowGroupFrame::IncrementalReflow(nsTableRowGroupFrame * const
0x011a4c30, nsIPresContext * 0x03a1dad0, nsHTMLReflowMetrics & {...},
RowGroupReflowState & {...}, unsigned int & 0) line 1139 + 35 bytes
nsTableRowGroupFrame::Reflow(nsTableRowGroupFrame * const 0x011a4c30,
nsIPresContext * 0x03a1dad0, nsHTMLReflowMetrics & {...}, const
nsHTMLReflowState & {...}, unsigned int & 0) line 1048 + 31 bytes
nsContainerFrame::ReflowChild(nsIFrame * 0x011a4c30, nsIPresContext *
0x03a1dad0, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, int 0,
int 0, unsigned int 0, unsigned int & 0) line 621 + 31 bytes
nsTableFrame::IR_TargetIsChild(nsTableFrame * const 0x011a4a68, nsIPresContext *
0x03a1dad0, nsHTMLReflowMetrics & {...}, InnerTableReflowState & {...}, unsigned
int & 0, nsIFrame * 0x011a4c30) line 2584 + 44 bytes
nsTableFrame::IncrementalReflow(nsTableFrame * const 0x011a4a68, nsIPresContext
* 0x03a1dad0, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...},
unsigned int & 0) line 2379 + 41 bytes nsTableFrame::Reflow(nsTableFrame * const
0x011a4a68, nsIPresContext * 0x03a1dad0, nsHTMLReflowMetrics & {...}, const
nsHTMLReflowState & {...}, unsigned int & 0) line 1495 + 31 bytes
nsContainerFrame::ReflowChild(nsIFrame * 0x011a4a68, nsIPresContext *
0x03a1dad0, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, int 0,
int 0, unsigned int 3, unsigned int & 0) line 621 + 31 bytes
nsTableOuterFrame::IR_InnerTableReflow(nsTableOuterFrame * const 0x011a4a18,
nsIPresContext * 0x03a1dad0, nsHTMLReflowMetrics & {...}, OuterTableReflowState
& {...}, unsigned int & 0) line 588 + 40 bytes
nsTableOuterFrame::IR_TargetIsInnerTableFrame(nsTableOuterFrame * const
0x011a4a18, nsIPresContext * 0x03a1dad0, nsHTMLReflowMetrics & {...},
OuterTableReflowState & {...}, unsigned int & 0) line 377 + 31 bytes
nsTableOuterFrame::IR_TargetIsChild(nsTableOuterFrame * const 0x011a4a18,
nsIPresContext * 0x03a1dad0, nsHTMLReflowMetrics & {...}, OuterTableReflowState
& {...}, unsigned int & 0, nsIFrame * 0x011a4a68) line 350 + 31 bytes
nsTableOuterFrame::IncrementalReflow(nsTableOuterFrame * const 0x011a4a18,
nsIPresContext * 0x03a1dad0, nsHTMLReflowMetrics & {...}, OuterTableReflowState
& {...}, unsigned int & 0) line 333 + 35 bytes
nsTableOuterFrame::Reflow(nsTableOuterFrame * const 0x011a4a18, nsIPresContext *
0x03a1dad0, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...},
unsigned int & 0) line 864 + 31 bytes nsBlockReflowContext::ReflowBlock(nsIFrame
* 0x011a4a18, const nsRect & {...}, int 1, int 0, int 0, nsMargin & {...},
unsigned int & 0) line 259 + 45 bytes
nsBlockFrame::ReflowBlockFrame(nsBlockReflowState & {...}, nsLineBox *
0x0324e310, int * 0x0012b4b4) line 3250 + 59 bytes
nsBlockFrame::ReflowLine(nsBlockReflowState & {...}, nsLineBox * 0x0324e310, int
* 0x0012b4b4, int 1) line 2616 + 20 bytes
nsBlockFrame::ReflowDirtyLines(nsBlockReflowState & {...}) line 2427 + 27 bytes
nsBlockFrame::Reflow(nsBlockFrame * const 0x0118ef70, nsIPresContext *
0x03a1dad0, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...},
unsigned int & 0) line 1491 + 15 bytes nsContainerFrame::ReflowChild(nsIFrame *
0x0118ef70, nsIPresContext * 0x03a1dad0, nsHTMLReflowMetrics & {...}, const
nsHTMLReflowState & {...}, int 0, int 0, unsigned int 0, unsigned int & 0) line
621 + 31 bytes nsTableCellFrame::Reflow(nsTableCellFrame * const 0x01189d44,
nsIPresContext * 0x03a1dad0, nsHTMLReflowMetrics & {...}, const
nsHTMLReflowState & {...}, unsigned int & 0) line 664
nsContainerFrame::ReflowChild(nsIFrame * 0x01189d44, nsIPresContext *
0x03a1dad0, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, int 0,
int 0, unsigned int 0, unsigned int & 0) line 621 + 31 bytes
nsTableRowFrame::IR_TargetIsChild(nsTableRowFrame * const 0x01189cfc,
nsIPresContext * 0x03a1dad0, nsHTMLReflowMetrics & {...}, RowReflowState &
{...}, unsigned int & 0, nsIFrame * 0x01189d44) line 1252 + 52 bytes
nsTableRowFrame::IncrementalReflow(nsTableRowFrame * const 0x01189cfc,
nsIPresContext * 0x03a1dad0, nsHTMLReflowMetrics & {...}, RowReflowState &
{...}, unsigned int & 0) line 1139 + 35 bytes
nsTableRowFrame::Reflow(nsTableRowFrame * const 0x01189cfc, nsIPresContext *
0x03a1dad0, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...},
unsigned int & 0) line 1414 + 31 bytes nsContainerFrame::ReflowChild(nsIFrame *
0x01189cfc, nsIPresContext * 0x03a1dad0, nsHTMLReflowMetrics & {...}, const
nsHTMLReflowState & {...}, int 0, int 1500, unsigned int 0, unsigned int & 0)
line 621 + 31 bytes nsTableRowGroupFrame::IR_TargetIsChild(nsTableRowGroupFrame
* const 0x022277a8, nsIPresContext * 0x03a1dad0, nsHTMLReflowMetrics & {...},
RowGroupReflowState & {...}, unsigned int & 0, nsIFrame * 0x01189cfc) line 1481
+ 45 bytes nsTableRowGroupFrame::IncrementalReflow(nsTableRowGroupFrame * const
0x022277a8, nsIPresContext * 0x03a1dad0, nsHTMLReflowMetrics & {...},
RowGroupReflowState & {...}, unsigned int & 0) line 1139 + 35 bytes
nsTableRowGroupFrame::Reflow(nsTableRowGroupFrame * const 0x022277a8,
nsIPresContext * 0x03a1dad0, nsHTMLReflowMetrics & {...}, const
nsHTMLReflowState & {...}, unsigned int & 0) line 1048 + 31 bytes
nsContainerFrame::ReflowChild(nsIFrame * 0x022277a8, nsIPresContext *
0x03a1dad0, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, int 0,
int 0, unsigned int 0, unsigned int & 0) line 621 + 31 bytes
nsTableFrame::IR_TargetIsChild(nsTableFrame * const 0x0222773c, nsIPresContext *
0x03a1dad0, nsHTMLReflowMetrics & {...}, InnerTableReflowState & {...}, unsigned
int & 0, nsIFrame * 0x022277a8) line 2584 + 44 bytes
nsTableFrame::IncrementalReflow(nsTableFrame * const 0x0222773c, nsIPresContext
* 0x03a1dad0, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...},
unsigned int & 0) line 2379 + 41 bytes nsTableFrame::Reflow(nsTableFrame * const
0x0222773c, nsIPresContext * 0x03a1dad0, nsHTMLReflowMetrics & {...}, const
nsHTMLReflowState & {...}, unsigned int & 0) line 1495 + 31 bytes
nsContainerFrame::ReflowChild(nsIFrame * 0x0222773c, nsIPresContext *
0x03a1dad0, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, int 0,
int 0, unsigned int 3, unsigned int & 0) line 621 + 31 bytes
nsTableOuterFrame::IR_InnerTableReflow(nsTableOuterFrame * const 0x022276ec,
nsIPresContext * 0x03a1dad0, nsHTMLReflowMetrics & {...}, OuterTableReflowState
& {...}, unsigned int & 0) line 588 + 40 bytes
nsTableOuterFrame::IR_TargetIsInnerTableFrame(nsTableOuterFrame * const
0x022276ec, nsIPresContext * 0x03a1dad0, nsHTMLReflowMetrics & {...},
OuterTableReflowState & {...}, unsigned int & 0) line 377 + 31 bytes
nsTableOuterFrame::IR_TargetIsChild(nsTableOuterFrame * const 0x022276ec,
nsIPresContext * 0x03a1dad0, nsHTMLReflowMetrics & {...}, OuterTableReflowState
& {...}, unsigned int & 0, nsIFrame * 0x0222773c) line 350 + 31 bytes
nsTableOuterFrame::IncrementalReflow(nsTableOuterFrame * const 0x022276ec,
nsIPresContext * 0x03a1dad0, nsHTMLReflowMetrics & {...}, OuterTableReflowState
& {...}, unsigned int & 0) line 333 + 35 bytes
nsTableOuterFrame::Reflow(nsTableOuterFrame * const 0x022276ec, nsIPresContext *
0x03a1dad0, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...},
unsigned int & 0) line 864 + 31 bytes nsBlockReflowContext::ReflowBlock(nsIFrame
* 0x022276ec, const nsRect & {...}, int 0, int 0, int 1, nsMargin & {...},
unsigned int & 0) line 259 + 45 bytes
nsBlockFrame::ReflowBlockFrame(nsBlockReflowState & {...}, nsLineBox *
0x030a01f0, int * 0x0012cd8c) line 3250 + 59 bytes
nsBlockFrame::ReflowLine(nsBlockReflowState & {...}, nsLineBox * 0x030a01f0, int
* 0x0012cd8c, int 1) line 2616 + 20 bytes
nsBlockFrame::ReflowDirtyLines(nsBlockReflowState & {...}) line 2427 + 27 bytes
nsBlockFrame::Reflow(nsBlockFrame * const 0x022275f4, nsIPresContext *
0x03a1dad0, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...},
unsigned int & 0) line 1491 + 15 bytes
nsBlockReflowContext::ReflowBlock(nsIFrame * 0x022275f4, const nsRect & {...},
int 1, int 0, int 1, nsMargin & {...}, unsigned int & 0) line 259 + 45 bytes
nsBlockFrame::ReflowBlockFrame(nsBlockReflowState & {...}, nsLineBox *
0x0307cf80, int * 0x0012d634) line 3250 + 59 bytes
nsBlockFrame::ReflowLine(nsBlockReflowState & {...}, nsLineBox * 0x0307cf80, int
* 0x0012d634, int 1) line 2616 + 20 bytes
nsBlockFrame::ReflowDirtyLines(nsBlockReflowState & {...}) line 2427 + 27 bytes
nsBlockFrame::Reflow(nsBlockFrame * const 0x0222756c, nsIPresContext *
0x03a1dad0, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...},
unsigned int & 0) line 1491 + 15 bytes nsAreaFrame::Reflow(nsAreaFrame * const
0x0222756c, nsIPresContext * 0x03a1dad0, nsHTMLReflowMetrics & {...}, const
nsHTMLReflowState & {...}, unsigned int & 0) line 270 + 25 bytes
nsContainerFrame::ReflowChild(nsIFrame * 0x0222756c, nsIPresContext *
0x03a1dad0, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, int 0,
int 0, unsigned int 0, unsigned int & 0) line 621 + 31 bytes
RootFrame::Reflow(RootFrame * const 0x0228a7dc, nsIPresContext * 0x03a1dad0,
nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, unsigned int & 0)
line 331 nsContainerFrame::ReflowChild(nsIFrame * 0x0228a7dc, nsIPresContext *
0x03a1dad0, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, int 0,
int 0, unsigned int 1, unsigned int & 0) line 621 + 31 bytes
nsScrollPortFrame::Reflow(nsScrollPortFrame * const 0x0228a864, nsIPresContext *
0x03a1dad0, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...},
unsigned int & 0) line 404 nsContainerFrame::ReflowChild(nsIFrame * 0x0228a864,
nsIPresContext * 0x03a1dad0, nsHTMLReflowMetrics & {...}, const
nsHTMLReflowState & {...}, int 0, int 0, unsigned int 3, unsigned int & 0) line
621 + 31 bytes nsGfxScrollFrameInner::ReflowFrame(nsIPresContext * 0x03a1dad0,
nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, unsigned int & 0,
nsIFrame * 0x0228a864, const nsSize & {...}, const nsSize & {...}, int & 0,
nsIFrame * & 0x00000000) line 1251
nsGfxScrollFrameInner::ReflowScrollArea(nsIPresContext * 0x03a1dad0,
nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, unsigned int & 0,
int & 0, int & 0, int & 1, nsIFrame * & 0x00000000) line 1319
nsGfxScrollFrame::Reflow(nsGfxScrollFrame * const 0x0228a818, nsIPresContext *
0x03a1dad0, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...},
unsigned int & 0) line 521 nsContainerFrame::ReflowChild(nsIFrame * 0x0228a818,
nsIPresContext * 0x03a1dad0, nsHTMLReflowMetrics & {...}, const
nsHTMLReflowState & {...}, int 0, int 0, unsigned int 0, unsigned int & 0) line
621 + 31 bytes ViewportFrame::Reflow(ViewportFrame * const 0x0228a7a0,
nsIPresContext * 0x03a1dad0, nsHTMLReflowMetrics & {...}, const
nsHTMLReflowState & {...}, unsigned int & 0) line 527
nsHTMLReflowCommand::Dispatch(nsHTMLReflowCommand * const 0x03375b50,
nsIPresContext * 0x03a1dad0, nsHTMLReflowMetrics & {...}, const nsSize & {...},
nsIRenderingContext & {...}) line 145 PresShell::ProcessReflowCommands(PresShell
* const 0x02a5e0b0) line 1842 PresShell::ExitReflowLock(PresShell * const
0x02a5e0b0, int 1, int 1) line 825 PresShell::ContentAppended(PresShell * const
0x02a5e0b8, nsIDocument * 0x03a260a0, nsIContent * 0x03388e80, int 1) line 2296
nsDocument::ContentAppended(nsDocument * const 0x03a260a0, nsIContent *
0x03388e80, int 1) line 1544 nsHTMLDocument::ContentAppended(nsHTMLDocument *
const 0x03a260a0, nsIContent * 0x03388e80, int 1) line 1110
nsGenericHTMLContainerElement::AppendChildTo(nsIContent * 0x0336ef50, int 1)
line 2963 nsHTMLTableCellElement::AppendChildTo(nsHTMLTableCellElement * const
0x03388e80, nsIContent * 0x0336ef50, int 1) line 112 + 22 bytes
SinkContext::CloseContainer(const nsIParserNode & {...}) line 1264 + 30 bytes
HTMLContentSink::CloseForm(HTMLContentSink * const 0x03a27680, const
nsIParserNode & {...}) line 2658 + 15 bytes CNavDTD::CloseForm(const
nsIParserNode * 0x0012e780) line 2641 + 31 bytes CNavDTD::CloseContainer(const
nsIParserNode * 0x0012e780, nsHTMLTag eHTMLTag_form, int 0) line 2891 + 12 bytes
CNavDTD::HandleEndToken(CToken * 0x0219d490) line 1534 + 24 bytes
CNavDTD::HandleToken(CNavDTD * const 0x02a58310, CToken * 0x0219d490, nsIParser
* 0x03a27960) line 754 + 12 bytes CNavDTD::BuildModel(CNavDTD * const
0x02a58310, nsIParser * 0x03a27960, nsITokenizer * 0x0336e710, nsITokenObserver
* 0x00000000, nsIContentSink * 0x03a27680) line 523 + 20 bytes
nsParser::BuildModel() line 1040 + 34 bytes nsParser::ResumeParse(nsIDTD *
0x00000000, int 0) line 966 + 11 bytes nsParser::Parse(const nsString & {...},
void * 0x00000001, const nsString & {...}, int 0, int 1, eParseMode
eParseMode_autodetect) line 844 + 15 bytes
nsHTMLDocument::ScriptWriteCommon(JSContext * 0x025f7a40, long * 0x0227000c,
unsigned int 1, int 0) line 1914 + 186 bytes
nsHTMLDocument::Write(nsHTMLDocument * const 0x03a26180, JSContext * 0x025f7a40,
long * 0x0227000c, unsigned int 1) line 1928 NSHTMLDocumentWrite(JSContext *
0x025f7a40, JSObject * 0x011876c0, unsigned int 1, long * 0x0227000c, long *
0x0012eb40) line 1168 + 24 bytes js_Invoke(JSContext * 0x025f7a40, unsigned int
1, unsigned int 0) line 665 + 26 bytes js_Interpret(JSContext * 0x025f7a40, long
* 0x0012f418) line 2226 + 15 bytes js_Execute(JSContext * 0x025f7a40, JSObject *
0x011a9468, JSScript * 0x0335fc10, JSFunction * 0x00000000, JSStackFrame *
0x00000000, unsigned int 0, long * 0x0012f418) line 838 + 13 bytes
JS_EvaluateUCScriptForPrincipals(JSContext * 0x025f7a40, JSObject * 0x011a9468,
JSPrincipals * 0x02a689f4, const unsigned short * 0x03388980, unsigned int 169,
const char * 0x0335aca0, unsigned int 206, long * 0x0012f418) line 2705 + 27
bytes nsJSContext::EvaluateString(nsJSContext * const 0x025f7bd0, const nsString
& {...}, void * 0x011a9468, nsIPrincipal * 0x02a689f0, const char * 0x0335aca0,
unsigned int 206, const char * 0x00000000, nsString & {...}, int * 0x0012f470)
line 285 + 53 bytes HTMLContentSink::EvaluateScript(nsString & {...}, int 206,
const char * 0x00000000) line 3845 HTMLContentSink::ProcessSCRIPTTag(const
nsIParserNode & {...}) line 4036 HTMLContentSink::AddLeaf(HTMLContentSink *
const 0x03a27680, const nsIParserNode & {...}) line 2818 + 12 bytes
CNavDTD::AddLeaf(const nsIParserNode * 0x03085b90) line 3110 + 28 bytes
CNavDTD::HandleScriptToken(const nsIParserNode * 0x03085b90) line 1792 + 12
bytes CNavDTD::OpenContainer(const nsIParserNode * 0x03085b90, nsHTMLTag
eHTMLTag_script, int 1, nsEntryStack * 0x00000000) line 2824 + 12 bytes
CNavDTD::HandleDefaultStartToken(CToken * 0x0276ec40, nsHTMLTag eHTMLTag_script,
nsIParserNode * 0x03085b90) line 1048 + 20 bytes
CNavDTD::HandleStartToken(CToken * 0x0276ec40) line 1352 + 22 bytes
CNavDTD::HandleToken(CNavDTD * const 0x02a58310, CToken * 0x0219d490, nsIParser
* 0x03a27960) line 751 + 12 bytes CNavDTD::BuildModel(CNavDTD * const
0x02a58310, nsIParser * 0x03a27960, nsITokenizer * 0x02a5a870, nsITokenObserver
* 0x00000000, nsIContentSink * 0x03a27680) line 523 + 20 bytes
nsParser::BuildModel() line 1040 + 34 bytes nsParser::ResumeParse(nsIDTD *
0x00000000, int 0) line 966 + 11 bytes nsParser::EnableParser(int 1) line 683 +
15 bytes HTMLContentSink::ResumeParsing() line 3779 + 19 bytes
HTMLContentSink::OnUnicharStreamComplete(HTMLContentSink * const 0x03a27684,
nsIUnicharStreamLoader * 0x02a5d5f0, unsigned int 0, unsigned int 5293, const
unsigned short * 0x022dfc18) line 3872 + 11 bytes
nsUnicharStreamLoader::OnStopRequest(nsUnicharStreamLoader * const 0x02a5d5f4,
nsIChannel * 0x02a58bc0, nsISupports * 0x00000000, unsigned int 0, const
unsigned short * 0x00000000) line 130 + 63 bytes
nsChannelListener::OnStopRequest(nsChannelListener * const 0x02a6a750,
nsIChannel * 0x02a58bc0, nsISupports * 0x00000000, unsigned int 0, const
unsigned short * 0x00000000) line 1595
nsHTTPChannel::ResponseCompleted(nsIChannel * 0x02a69210, nsIStreamListener *
0x02a6a750, unsigned int 0, const unsigned short * 0x00000000) line 1258 + 36
bytes nsHTTPResponseListener::OnStopRequest(nsHTTPResponseListener * const
0x02a68b50, nsIChannel * 0x02a69210, nsISupports * 0x02a58bc0, unsigned int 0,
const unsigned short * 0x00000000) line 253
nsOnStopRequestEvent::HandleEvent(nsOnStopRequestEvent * const 0x02a6a470) line
279 nsStreamListenerEvent::HandlePLEvent(PLEvent * 0x02a6a420) line 93 + 12
bytes PL_HandleEvent(PLEvent * 0x02a6a420) line 522 + 10 bytes
PL_ProcessPendingEvents(PLEventQueue * 0x01079730) line 483 + 9 bytes
_md_EventReceiverProc(HWND__ * 0x00320258, unsigned int 49353, unsigned int 0,
long 17274672) line 947 + 9 bytes USER32! 77e71820() 01079730()

Comment 3

[troy]

Stack trace shows table code

Comment 4

[karnaze (gone)]

Attachment: simple test case

Comment 5

[karnaze (gone)]

Fixed with latest checkin.

Comment 6

[karnaze (gone)]

*** Bug 22015 has been marked as a duplicate of this bug. ***

Comment 7

[karnaze (gone)]

*** Bug 21878 has been marked as a duplicate of this bug. ***

Comment 8

[leger]

Adding verifyme keyword.

Comment 9

[Joseph Elwell]

working good for me. both URL and testcase winNT build 2000021708.

Comment 10

[kit]

Fixed for me with Linux build 2000021715.