103547 - Changing URL after visiting digitalblasphemy.com crashes Mozilla

Status: RESOLVED DUPLICATE of bug 103477

(Core :: Graphics: ImageLib, defect)

Description

[Jeremy Tout]

After visiting www.digitalblasphemy.com, any change of the URL crashes Mozilla
completely.  Unknown reason for crashing -- perhaps the animated graphic has
something to do with it?

Comment 1

[Christian :Biesinger (don't email me, ping me on IRC)]

Seeing this as well. Build of yesterday (that's 20011006) on Linux Mandrake.
Stack Trace: 
#0  0x4018b349 in nsVoidArray::IndexOf (this=0x2c, aPossibleElement=0x8b06660)
    at nsVoidArray.cpp:376
#1  0x4018b951 in nsVoidArray::RemoveElement (this=0x2c, aElement=0x8b06660)
    at nsVoidArray.cpp:587
#2  0x4151255a in imgRequest::RemoveProxy (this=0x0, proxy=0x8b06660, 
    aStatus=2147500037) at imgRequest.cpp:163
#3  0x415157cc in imgRequestProxy::Cancel (this=0x8b06660, status=2147500037)
    at imgRequestProxy.cpp:166
#4  0x41d2380c in nsImageFrame::Destroy (this=0x8baa1fc, 
    aPresContext=0x8b41960) at nsImageFrame.cpp:231
#5  0x41d2f8fe in nsLineBox::DeleteLineList (aPresContext=0x8b41960, 
    aLine=0x8baa380) at nsLineBox.cpp:266
#6  0x41cee076 in nsBlockFrame::Destroy (this=0x8ba8b5c, 
    aPresContext=0x8b41960) at nsBlockFrame.cpp:326
#7  0x41e7b316 in nsFrameList::DestroyFrames (this=0x8ba8b34, 
    aPresContext=0x8b41960) at nsFrameList.cpp:130
#8  0x41d01f62 in nsContainerFrame::Destroy (this=0x8ba8b00, 
    aPresContext=0x8b41960) at nsContainerFrame.cpp:133
#9  0x41e7b316 in nsFrameList::DestroyFrames (this=0x8ba8934, 
    aPresContext=0x8b41960) at nsFrameList.cpp:130
#10 0x41d01f62 in nsContainerFrame::Destroy (this=0x8ba8900, 
    aPresContext=0x8b41960) at nsContainerFrame.cpp:133
#11 0x41e7b316 in nsFrameList::DestroyFrames (this=0x8ba87b4, 
---Type <return> to continue, or q <return> to quit---
    aPresContext=0x8b41960) at nsFrameList.cpp:130
#12 0x41d01f62 in nsContainerFrame::Destroy (this=0x8ba8780, 
    aPresContext=0x8b41960) at nsContainerFrame.cpp:133
#13 0x41e7b316 in nsFrameList::DestroyFrames (this=0x8ba8570, 
    aPresContext=0x8b41960) at nsFrameList.cpp:130
#14 0x41d01f62 in nsContainerFrame::Destroy (this=0x8ba853c, 
    aPresContext=0x8b41960) at nsContainerFrame.cpp:133
#15 0x41e01f72 in nsTableFrame::Destroy (this=0x8ba853c, 
    aPresContext=0x8b41960) at nsTableFrame.cpp:294
#16 0x41e7b316 in nsFrameList::DestroyFrames (this=0x8ba835c, 
    aPresContext=0x8b41960) at nsFrameList.cpp:130
#17 0x41d01f62 in nsContainerFrame::Destroy (this=0x8ba8328, 
    aPresContext=0x8b41960) at nsContainerFrame.cpp:133
#18 0x41e0d098 in nsTableOuterFrame::Destroy (this=0x8ba8328, 
    aPresContext=0x8b41960) at nsTableOuterFrame.cpp:84
#19 0x41d2f8fe in nsLineBox::DeleteLineList (aPresContext=0x8b41960, 
    aLine=0x8ba862c) at nsLineBox.cpp:266
#20 0x41cee076 in nsBlockFrame::Destroy (this=0x8ba800c, 
    aPresContext=0x8b41960) at nsBlockFrame.cpp:326
#21 0x41d2f8fe in nsLineBox::DeleteLineList (aPresContext=0x8b41960, 
    aLine=0x8ba71cc) at nsLineBox.cpp:266
#22 0x41cee076 in nsBlockFrame::Destroy (this=0x8ba6d3c, 
    aPresContext=0x8b41960) at nsBlockFrame.cpp:326
---Type <return> to continue, or q <return> to quit---
#23 0x41d2f8fe in nsLineBox::DeleteLineList (aPresContext=0x8b41960, 
    aLine=0x8ba6f00) at nsLineBox.cpp:266
#24 0x41cee076 in nsBlockFrame::Destroy (this=0x8b43be4, 
    aPresContext=0x8b41960) at nsBlockFrame.cpp:326
#25 0x41e7b316 in nsFrameList::DestroyFrames (this=0x8b43198, 
    aPresContext=0x8b41960) at nsFrameList.cpp:130
#26 0x41d01f62 in nsContainerFrame::Destroy (this=0x8b43164, 
    aPresContext=0x8b41960) at nsContainerFrame.cpp:133
#27 0x41e7b316 in nsFrameList::DestroyFrames (this=0x8b43520, 
    aPresContext=0x8b41960) at nsFrameList.cpp:130
#28 0x41d01f62 in nsContainerFrame::Destroy (this=0x8b434ec, 
    aPresContext=0x8b41960) at nsContainerFrame.cpp:133
#29 0x41e51b0d in nsBoxFrame::Destroy (this=0x8b434ec, aPresContext=0x8b41960)
    at nsBoxFrame.cpp:1147
#30 0x41e7b316 in nsFrameList::DestroyFrames (this=0x8b432b0, 
    aPresContext=0x8b41960) at nsFrameList.cpp:130
#31 0x41d01f62 in nsContainerFrame::Destroy (this=0x8b4327c, 
    aPresContext=0x8b41960) at nsContainerFrame.cpp:133
#32 0x41e51b0d in nsBoxFrame::Destroy (this=0x8b4327c, aPresContext=0x8b41960)
    at nsBoxFrame.cpp:1147
#33 0x41d75ec2 in nsGfxScrollFrame::Destroy (this=0x8b4327c, 
    aPresContext=0x8b41960) at nsGfxScrollFrame.cpp:459
#34 0x41e7b316 in nsFrameList::DestroyFrames (this=0x8b4315c, 
---Type <return> to continue, or q <return> to quit---
    aPresContext=0x8b41960) at nsFrameList.cpp:130
#35 0x41d01f62 in nsContainerFrame::Destroy (this=0x8b43128, 
    aPresContext=0x8b41960) at nsContainerFrame.cpp:133
#36 0x41d73d82 in ViewportFrame::Destroy (this=0x8b43128, 
    aPresContext=0x8b41960) at nsViewportFrame.cpp:156
#37 0x41d13754 in FrameManager::Destroy (this=0x89a7968)
    at nsFrameManager.cpp:456
#38 0x41d47e7e in PresShell::Destroy (this=0x8aeca20) at nsPresShell.cpp:1702
#39 0x412eec70 in DocumentViewerImpl::Destroy (this=0x8b2e680)
    at nsDocumentViewer.cpp:1223
#40 0x412efbad in DocumentViewerImpl::Show (this=0x8924b50)
    at nsDocumentViewer.cpp:1446
#41 0x41d540df in PresShell::UnsuppressAndInvalidate (this=0x8944cb8)
    at nsPresShell.cpp:4655
#42 0x41d57866 in PresShell::ProcessReflowCommands (this=0x8944cb8, 
    aInterruptible=1) at nsPresShell.cpp:6054
#43 0x41eff0cc in ReflowEvent::HandleEvent (this=0x8994240)
    at nsPresShell.cpp:5825
#44 0x41d56f8e in HandlePLEvent (aEvent=0x8994240) at nsPresShell.cpp:5841
#45 0x401ce58c in PL_HandleEvent (self=0x8994240) at plevent.c:590
#46 0x401ce379 in PL_ProcessPendingEvents (self=0x80aaff0) at plevent.c:520
#47 0x401d07f0 in nsEventQueueImpl::ProcessPendingEvents (this=0x80aafc8)
    at nsEventQueue.cpp:389
---Type <return> to continue, or q <return> to quit---
#48 0x40d397c4 in event_processor_callback (data=0x80aafc8, source=6, 
    condition=GDK_INPUT_READ) at nsAppShell.cpp:184
#49 0x40d39343 in our_gdk_io_invoke (source=0x8360e18, condition=G_IO_IN, 
    data=0x8360e08) at nsAppShell.cpp:77

Comment 2

[Christian :Biesinger (don't email me, ping me on IRC)]

Wow, that was a hard-to-find duplicate. I think the dup should have component
imagelib, but maybe I'm wrong.

Thanks to doron for pointing out that this is a duplicate.

*** This bug has been marked as a duplicate of 103477 ***