10742 - Crash when moving past end of document with arrow keys

Status: VERIFIED WORKSFORME

(Core :: Layout, defect, P3)

Description

[Daniel Bratell]

Overview Description:
I got a crash when reading the above page and moving the page with the arrow
keys to the last lines.

The stack trace was:
nsGenericElement::GetListenerManager(nsIEventListenerManager * * 0x0012f840)
line 964 + 15 bytes
nsGenericElement::AddEventListener(const nsString & {...}, nsIDOMEventListener *
0x0012f890, int 1244704) line 1013 + 12 bytes
nsHTMLSpanElement::AddEventListener(nsHTMLSpanElement * const 0x0a73b18c, const
nsString & {...}, nsIDOMEventListener * 0x0012f890, int 1244704) line 55 + 26
bytes
PresShell::ScrollFrameIntoView(const PresShell * const 0x0a28ebe0, nsIFrame *
0x0a73b18c, int -1, int -1) line 1654
PresShell::ScrollFrameIntoView(PresShell * const 0x0a28ebec, nsIFrame *
0x0a73b18c) line 1063 + 27 bytes
nsDOMSelection::ScrollIntoView(nsDOMSelection * const 0x0a28eb10) line 2547 + 30
bytes
nsRangeList::HandleKeyEvent(nsRangeList * const 0x0a28eb70, nsGUIEvent *
0x0012fb9c) line 820 + 18 bytes
PresShell::HandleEvent(PresShell * const 0x0a28ebe4, nsIView * 0x0a297c40,
nsGUIEvent * 0x0012fb9c, nsEventStatus & nsEventStatus_eIgnore) line 2218
nsView::HandleEvent(nsView * const 0x0a297c40, nsGUIEvent * 0x0012fb9c, unsigned
int 8, nsEventStatus & nsEventStatus_eIgnore, int & 0) line 834
nsView::HandleEvent(nsView * const 0x0a291bd0, nsGUIEvent * 0x0012fb9c, unsigned
int 8, nsEventStatus & nsEventStatus_eIgnore, int & 0) line 819
nsView::HandleEvent(nsView * const 0x0a291c60, nsGUIEvent * 0x0012fb9c, unsigned
int 8, nsEventStatus & nsEventStatus_eIgnore, int & 0) line 819
nsView::HandleEvent(nsView * const 0x0a28ef90, nsGUIEvent * 0x0012fb9c, unsigned
int 28, nsEventStatus & nsEventStatus_eIgnore, int & 0) line 819
nsViewManager::DispatchEvent(nsViewManager * const 0x0a288270, nsGUIEvent *
0x0012fb9c, nsEventStatus & nsEventStatus_eIgnore) line 1736
HandleEvent(nsGUIEvent * 0x0012fb9c) line 67
nsWindow::DispatchEvent(nsWindow * const 0x0a291a94, nsGUIEvent * 0x0012fb9c,
nsEventStatus & nsEventStatus_eIgnore) line 490 + 10 bytes
nsWindow::DispatchWindowEvent(nsGUIEvent * 0x0012fb9c) line 515
nsWindow::DispatchKeyEvent(unsigned int 133, unsigned short 0, unsigned int 40)
line 1959 + 15 bytes
nsWindow::OnKeyDown(unsigned int 40, unsigned int 80) line 2154
nsWindow::ProcessMessage(unsigned int 256, unsigned int 40, long 22020097, long
* 0x0012fdd0) line 2497 + 37 bytes
nsWindow::WindowProc(HWND__ * 0x00180cc6, unsigned int 256, unsigned int 40,
long 22020097) line 563 + 27 bytes
USER32! 77e71820()

Steps to Reproduce:
Well I failed to reproduce it but maybe this is helpful anyway.
1) run apprunner.exe
2) open http://www.mozilla.org/update.html
3) Step down the page and only use down arrow to do it. Do it one step at a time
for most certain crash.

Actual Results:
Crash

Expected Results:
Display of the last couple of lines.

Build Date & Platform Bug Found:
1999-07-29 Windows NT4 SP5

Additional Builds and Platforms Tested On:
None

Comment 1

[troy]

Tom, seems to be event listener related so I'm assigning to you

Comment 2

[joki (gone)]

Not reproducing for me, possibly its been fixed by now.  Marking worksforme

Comment 3

[Chris Petersen]

This crash is not occuring with the Sept 23rd build.

Comment 4

[Chris Petersen]

This crash is not occuring with the Sept 23rd build.