113416 - Copying and pasting an URL causes other apps to crash

Status: VERIFIED WORKSFORME

(SeaMonkey :: Location Bar, defect)

Description

[Urban A. Haas]

Copying the URL bar location (Selecting the whole URL) and pasting in another
app crashes the other app.

Dr. Watson shows:
State Dump for Thread Id 0x7d0

eax=00000000 ebx=00000000 ecx=00defd24 edx=00000000 esi=00000000 edi=00000000
eip=77ad7cfc esp=00def3f8 ebp=00def420 iopl=0         nv up ei pl zr na po nc
cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00000246


function: CreateDataCache
        77ad7cd4 0f84c4000000     je      CreateDataCache+0x40d4 (77ad7d9e)
        77ad7cda 0fb70554bcb277   movzx   eax,word ptr [77b2bc54]   
ds:77b2bc54=c013
        77ad7ce1 50               push    eax
        77ad7ce2 ff151816a577     call    dword ptr [77a51618]  
ds:77a51618=77e2fb06
        77ad7ce8 3bc6             cmp     eax,esi
        77ad7cea 8945e8           mov     [ebp+0xe8],eax        
ss:018fc9f2=????????
        77ad7ced 0f84ab000000     je      CreateDataCache+0x40d4 (77ad7d9e)
        77ad7cf3 50               push    eax
        77ad7cf4 ff157412a577     call    dword ptr [77a51274]  
ds:77a51274=77e9ffb6
        77ad7cfa 8bd8             mov     ebx,eax
FAULT ->77ad7cfc 3933             cmp     [ebx],esi             
ds:00000000=????????
        77ad7cfe 0f859a000000     jne     CreateDataCache+0x40d4 (77ad7d9e)
        77ad7d04 8b4304           mov     eax,[ebx+0x4]         
ds:00b0d5d2=????????
        77ad7d07 3bc6             cmp     eax,esi
        77ad7d09 0f868f000000     jbe     CreateDataCache+0x40d4 (77ad7d9e)
        77ad7d0f 50               push    eax
        77ad7d10 56               push    esi
        77ad7d11 ff35c8cdb277     push    dword ptr [77b2cdc8]  
ds:77b2cdc8=00070000
        77ad7d17 ff15709fb277     call    dword ptr [77b29f70]  
ds:77b29f70=77fcb10f
        77ad7d1d 3bc6             cmp     eax,esi
        77ad7d1f 8945fc           mov     [ebp+0xfc],eax        
ss:018fc9f2=????????
        77ad7d22 7471             jz      OleRegEnumFormatEtc+0x1d2d (77ade795)

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1  Param#2  Param#3  Param#4  Function Name
00DEF420 77A7A76A 00DEF45C 00000000 000F90D8 00DEF460 ole32!CreateDataCache 
00DEF434 78360D31 00DEF45C 78340EE3 00DEF45C 002201B5 ole32!OleGetClipboard 
00DEF460 7832ACFB 000F90D8 00DEF520 00000002 00000000 shell32!Ordinal70 
00DEF524 7832A820 00000002 00000001 00000002 000F90D8 shell32!Ordinal701 
00DEF594 70C0988A 40400167 002201B5 00000000 00000001 shell32!Ordinal701 
00DEF5F4 711914BB 000A6A80 00020080 00000000 00000000 !Ordinal207 
00DEF828 71191431 00000000 00DEF88C 000914AC 00000111 !Ordinal102 
00DEF844 7119735C 00000003 00020080 00000111 00000000 !Ordinal102 
00DEF860 7116634C 000914AC 00020080 00000111 00000003 !DllGetClassObject 
00DEF894 7119723A 00020080 00000111 00000003 00020080 !Ordinal114 
00DEF8C0 00408070 00078FF0 00020124 00000000 00000003 !DllGetClassObject 
00DEF8F4 00408006 00020124 00000111 00000003 00020080 explorer!<nosymbols> 
00DEF910 00407303 0008F494 00020124 00000111 00000003 explorer!<nosymbols> 
00DEF9C8 77E12E98 00020124 00000111 00000003 00020080 explorer!<nosymbols> 
00DEF9E8 77E14876 00406E81 00020124 00000111 00000003 user32!ScrollDC 
00DEFA18 77E15B27 0049F270 00000111 00000003 00020080 user32!DefWindowProcW 
00DEFA38 71794CC4 00020124 00000111 00000003 00020080 user32!SendMessageW 
00DEFA98 77E12E98 00020082 00000111 00000003 00020080 COMCTL32!ImageList_SetBkColor 
00DEFAB8 77E16A72 717948AC 00020082 00000111 00000003 user32!ScrollDC 
00DEFADC 77E16AEE FFFF0169 00020082 00000111 00000003 user32!VkKeyScanW 
00DEFAFC 10003289 FFFF0169 00020082 00000111 00000003 user32!CallWindowProcA 
00DEFB58 77E14876 100031C0 00020082 00000111 00000003 !Ordinal111 
00DEFB88 77E15B27 0048A4D0 00000111 00000003 00020080 user32!DefWindowProcW 
00DEFBA8 717A82B8 00020082 00000111 00000003 00020080 user32!SendMessageW 
00DEFBEC 717834C8 00093300 00020080 00000202 00000003 COMCTL32!TrackMouseEvent 
00DEFC58 77E12E98 00020080 00000202 00000000 000A004D COMCTL32!ImageList_Draw 
00DEFC78 77E16A72 71782EF3 00020080 00000202 00000000 user32!ScrollDC 
00DEFC9C 77E16B0B 71782EF3 00020080 00000202 00000000 user32!VkKeyScanW 
00DEFCBC 71784803 71782EF3 00020080 00000202 00000000 user32!CallWindowProcW 
00DEFCD8 71784722 00020080 00000202 00000000 000A004D COMCTL32!Ordinal413 
00DEFD34 717847E1 000989A8 00020080 00000202 00000000
COMCTL32!ImageList_DrawIndirect 
00DEFD58 711970CB 00020080 00000202 00000000 000A004D COMCTL32!Ordinal413 
00DEFD7C 711970FB 00020080 00000202 00000000 000A004D !DllGetClassObject 
00DEFD98 7116BA1F 00020080 00000202 00000000 000A004D !DllGetClassObject 
00DEFDB4 71784722 00020080 00000202 00000000 000A004D !Ordinal114 
00DEFE10 71784642 000989A8 00020080 00000202 00000000
COMCTL32!ImageList_DrawIndirect 
00DEFE6C 77E12E98 00020080 00000202 00000000 000A004D
COMCTL32!ImageList_DrawIndirect 
00DEFE8C 77E130E0 717845BD 00020080 00000202 00000000 user32!ScrollDC 
00DEFF18 77E1320F 00DEFF30 00000000 00403E6D 00DEFF30 user32!ScrollDC 
00DEFF4C 0040386A 70C0B8FE 00400000 0031002D 0035002D user32!DispatchMessageW 
00DEFFB4 77E8758A 00000000 0031002D 0035002D 0006FEE0 explorer!<nosymbols> 
00DEFFEC 00000000 00000000 00000000 00000000 00000000 kernel32!SetFilePointer 



Selecting another object in a different program and copying the element works.

While the Moz object is on the clipboard, programs like explorer.exe will also
not be able to start.

This may be realted to the new URL icon code ???
Urban A. Haas

Comment 1

[Urban A. Haas]

Error is reported as 
Exception number: c0000005 (access violation)

Comment 2

[Urban A. Haas]

This can be seen with outlook.exe or explorer.exe

Comment 3

[Matthias Versen [:Matti]]

wfm with win2k build 20011203..

Reporter : which build do you use ? (always add the build ID in a bug report)

Comment 4

[Boris Zbarsky [:bzbarsky]]

Matti, read the summary.  The build in question is 2001-12-03-03

Comment 5

[Ashley Bischoff (blog at handcoding.com)]

Reporter: Please try a talkback-enabled build:
http://ftp.mozilla.org/pub/mozilla/nightly/latest/mozilla-win32-talkback.zip
(as always, be sure to delete your old Mozilla directory before installing the
new one)

Then, if you get a crash, please post the Talkback ID here. 
(You can get the talkback id by running <moz-dir>/bin/components/talkback.exe)

Comment 6

[Urban A. Haas]

I see my last comment never made it. The problem isn't with Mozilla crashing,
it's crashing other applications. I'm actually running a Talkback-enabled build.
The probelm is that Mozilla corrupts the Win Copy / OLE buffer with a bad
pointer so when you go to past in another app, the other app crashes. This can
also be repeated by copying the URL in the location into the copy buffer and
trying to start explorer.exe.

It is very reproducable on Win2K Pro.

Comment 7

[Ashley Bischoff (blog at handcoding.com)]

Hmm, ok. Marking NEW.

Old summary:
"Copying a URL in Mozilla Build 2001120303 and pasting to another app causes crash"

New summary:
"Copying and pasting an URL causes other apps to crash"

Comment 8

[Joe Hewitt (gone)]

works for me in 12/19 win2k build

Comment 9

[sairuh (rarely reading bugmail)]

mass-verifying WorksForMe bugs which haven't changed since 2001.12.31.

set your search string in mail to "EmperorLondoMollari" to filter out these
messages.