304090 - Crash going back on thottbot.com

Status: VERIFIED DUPLICATE of bug 304003

(Core :: DOM: Navigation, defect)

Description

[Darin Fisher]

Navigate to:  http://thottbot.com/?iclass=2.0
Hover over one of the images that cause a floating DIV to appear, and then
click, which should cause the browser to navigate to the corresponding link. 
Then, press the back button, and then bad things happen.  The page does not get
restored.  This assertion is hit:

###!!! ASSERTION: RestoreFromHistory failed: 'NS_SUCCEEDED(rv)', file
/builds/moz-trunk/mozilla/docshell/base/nsDocShell.cpp,
line 4935

Then, sometimes there is a crash... perhaps when JS GC runs.

I just noticed this with today's build: 8/9/2005 on Linux.

Comment 1

[Darin Fisher]

Attachment: valgrind trace

Comment 2

[Christian :Biesinger (don't email me, ping me on IRC)]

does that build have bug 304003's patch?

Comment 3

[Darin Fisher]

It's possible that it does not.  I'm updating my tree now to see if this bug is
still reproducible.

Comment 4

[Darin Fisher]

Yup, I believe this is a duplicate.

*** This bug has been marked as a duplicate of 304003 ***

Comment 5

[Stephen Donner [:stephend] Not actively reading bugmail]

verified dup