54752 - Close the "Page Source dialog", crash

Status: VERIFIED DUPLICATE of bug 53953

(SeaMonkey :: General, defect, P3)

Description

[Ninoschka Baca]

Branch build 2000-09-28-09MN6: NT4

Overview: With my start page I look at the Page Source (via the menu or Ctrl+U) 
then close the dialog by selecting the 'x' and a crash occurs.

There should be a talkback report but I can't see the incident information right 
now. Seth reproduced the problem and has a stack trace.

Comment 1

[(not reading, please use [e-mail] instead)]

I was able to reproduce this no problem.

the "view source" was done on a specific local html page.  (file://)

I'll attach that page next.

here's the stack trace:

nsBrowserInstance::ReinitializeContentVariables() line 475 + 39 bytes
nsBrowserInstance::GetContentAreaDocShell(nsIDocShell * * 0x0012f118) line 497
nsBrowserInstance::Close(nsBrowserInstance * const 0x03dba400) line 1496 + 32 
bytes
nsBrowserInstance::~nsBrowserInstance() line 460
nsBrowserInstance::`scalar deleting destructor'() + 15 bytes
nsBrowserInstance::Release(nsBrowserInstance * const 0x03dba400) line 563 + 158 
bytes
nsXPCWrappedNative::~nsXPCWrappedNative() line 398 + 27 bytes
nsXPCWrappedNative::`scalar deleting destructor'(unsigned int 1) + 15 bytes
nsXPCWrappedNative::Release(nsXPCWrappedNative * const 0x03dba3a0) line 71 + 31 
bytes
nsXPCWrappedNative::JSObjectFinalized(JSContext * 0x038fea70, JSObject * 
0x03092ac8) line 96
WrappedNative_Finalize(JSContext * 0x038fea70, JSObject * 0x03092ac8) line 783
js_FinalizeObject(JSContext * 0x038fea70, JSObject * 0x03092ac8) line 1600 + 114 
bytes
gc_finalize_phase(JSContext * 0x038fea70, unsigned int 113) line 907 + 11 bytes
js_GC(JSContext * 0x038fea70, unsigned int 0) line 1173 + 13 bytes
js_ForceGC(JSContext * 0x038fea70) line 871 + 11 bytes
js_DestroyContext(JSContext * 0x038fea70, int 2) line 219 + 9 bytes
JS_DestroyContext(JSContext * 0x038fea70) line 832 + 11 bytes
nsJSContext::~nsJSContext() line 366 + 13 bytes
nsJSContext::`scalar deleting destructor'(unsigned int 1) + 15 bytes
nsJSContext::Release(nsJSContext * const 0x038e7080) line 374 + 154 bytes
nsCOMPtr<nsIScriptContext>::assign_assuming_AddRef(nsIScriptContext * 
0x00000000) line 472
nsCOMPtr<nsIScriptContext>::assign_with_AddRef(nsISupports * 0x00000000) line 
849
nsCOMPtr<nsIScriptContext>::operator=(nsIScriptContext * 0x00000000) line 584
nsDocShell::Destroy(nsDocShell * const 0x03c981c4) line 1614
nsWebShell::Destroy(nsWebShell * const 0x03c981c4) line 1393
nsXULWindow::Destroy(nsXULWindow * const 0x03c79bd4) line 324
nsWebShellWindow::Destroy(nsWebShellWindow * const 0x03c79bd4) line 1779
nsWebShellWindow::Close(nsWebShellWindow * const 0x03c79c30) line 368
nsWebShellWindow::HandleEvent(nsGUIEvent * 0x0012f63c) line 447
nsWindow::DispatchEvent(nsWindow * const 0x03c78d74, nsGUIEvent * 0x0012f63c, 
nsEventStatus & nsEventStatus_eIgnore) line 681 + 10 bytes
nsWindow::DispatchWindowEvent(nsGUIEvent * 0x0012f63c) line 702
nsWindow::DispatchStandardEvent(unsigned int 101) line 722 + 15 bytes
nsWindow::ProcessMessage(unsigned int 16, unsigned int 0, long 0, long * 
0x0012f974) line 2795
nsWindow::WindowProc(HWND__ * 0x12de01d4, unsigned int 16, unsigned int 0, long 
0) line 950 + 27 bytes
USER32! 77e719d0()
USER32! 77e71982()
NTDLL! 77f763a3()
USER32! 77e718d2()
nsWindow::DefaultWindowProc(HWND__ * 0x12de01d4, unsigned int 274, unsigned int 
61536, long 1246032) line 977
USER32! 77e727fe()
USER32! 77e72889()
nsWindow::WindowProc(HWND__ * 0x12de01d4, unsigned int 274, unsigned int 61536, 
long 1246032) line 957 + 31 bytes
USER32! 77e719d0()
USER32! 77e71982()
NTDLL! 77f763a3()
USER32! 77e718d2()
nsWindow::DefaultWindowProc(HWND__ * 0x12de01d4, unsigned int 161, unsigned int 
20, long 1246032) line 977
USER32! 77e727fe()
USER32! 77e72889()
nsWindow::WindowProc(HWND__ * 0x12de01d4, unsigned int 161, unsigned int 20, 
long 1246032) line 957 + 31 bytes
USER32! 77e71820()
00130350()

Comment 2

[(not reading, please use [e-mail] instead)]

Attachment: the page that causes the crash

Comment 3

[Blake Ross]

dup of bug 53953, stack trace confirms...

*** This bug has been marked as a duplicate of 53953 ***

Comment 4

[Doron Rosenberg (IBM)]

verified