115251 - crash if right clicking on a tab

Status: RESOLVED DUPLICATE of bug 114377

(SeaMonkey :: General, defect)

Description

[Pascal Berger]

From Bugzilla Helper:
User-Agent: Mozilla/5.0 (Windows; U; WinNT4.0; [object Window&; rv:0.9.6+)
Gecko/20011210
BuildID:    2001121003

if you right click on one of the tabs at http://www.postnuke.com (e.g. themes,
modules, etc) mozilla crashes.

Reproducible: Always
Steps to Reproduce:
1. Load http://www.postnuke.com
2. Right click on the themes tab


Actual Results:  Mozilla crashes

Comment 1

[Julien Cegarra]

Confirmed. BuilID: 2001 12 10 03/Win98.

The code that make mozilla crash is due to map area:
<img usemap="#map" WIDTH=100 HEIGHT=30>
<map name="map">
	<area shape="rect" coords="2,0,84,33">
</map>

right click on that area to crash.

Comment 2

[Julien Cegarra]

Attachment: testcase

Comment 3

[Matthias Versen [:Matti]]

win2k stack trace:
nsIFrame::GetStyleData(nsStyleStructID eStyleStruct_UserInterface, const 
nsStyleStruct * & 0x0012e004) line 561 + 3 bytes
XULPopupListenerImpl::FireFocusOnTargetContent(nsIDOMNode * 0x0470f23c) line 331
XULPopupListenerImpl::PreLaunchPopup(nsIDOMEvent * 0x0436b4d8) line 298
XULPopupListenerImpl::ContextMenu(XULPopupListenerImpl * const 0x04619608, 
nsIDOMEvent * 0x0436b4d8) line 204 + 15 bytes
nsEventListenerManager::HandleEvent(nsEventListenerManager * const 0x04619658, 
nsIPresContext * 0x046981e8, nsEvent * 0x0012f740, nsIDOMEvent * * 0x0012f008, 
nsIDOMEventTarget * 0x04618068, unsigned int 2, nsEventStatus * 0x0012f638) line 
1494 + 41 bytes
nsXULElement::HandleDOMEvent(nsXULElement * const 0x04618060, nsIPresContext * 
0x046981e8, nsEvent * 0x0012f740, nsIDOMEvent * * 0x0012f008, unsigned int 2, 
nsEventStatus * 0x0012f638) line 3403
nsXULElement::HandleChromeEvent(nsXULElement * const 0x04618070, nsIPresContext 
* 0x046981e8, nsEvent * 0x0012f740, nsIDOMEvent * * 0x0012f008, unsigned int 2, 
nsEventStatus * 0x0012f638) line 4609 + 36 bytes
GlobalWindowImpl::HandleDOMEvent(GlobalWindowImpl * const 0x045ee350, 
nsIPresContext * 0x046981e8, nsEvent * 0x0012f740, nsIDOMEvent * * 0x0012f008, 
unsigned int 2, nsEventStatus * 0x0012f638) line 659
nsDocument::HandleDOMEvent(nsDocument * const 0x046e1028, nsIPresContext * 
0x046981e8, nsEvent * 0x0012f740, nsIDOMEvent * * 0x0012f008, unsigned int 2, 
nsEventStatus * 0x0012f638) line 3069
nsGenericElement::HandleDOMEvent(nsGenericElement * const 0x046e43c0, 
nsIPresContext * 0x046981e8, nsEvent * 0x0012f740, nsIDOMEvent * * 0x0012f008, 
unsigned int 2, nsEventStatus * 0x0012f638) line 1906 + 39 bytes
nsGenericElement::HandleDOMEvent(nsGenericElement * const 0x046b7158, 
nsIPresContext * 0x046981e8, nsEvent * 0x0012f740, nsIDOMEvent * * 0x0012f008, 
unsigned int 2, nsEventStatus * 0x0012f638) line 1899 + 50 bytes
nsGenericElement::HandleDOMEvent(nsGenericElement * const 0x0470ef10, 
nsIPresContext * 0x046981e8, nsEvent * 0x0012f740, nsIDOMEvent * * 0x0012f008, 
unsigned int 2, nsEventStatus * 0x0012f638) line 1899 + 50 bytes
nsGenericElement::HandleDOMEvent(nsGenericElement * const 0x0470f218, 
nsIPresContext * 0x046981e8, nsEvent * 0x0012f740, nsIDOMEvent * * 0x0012f008, 
unsigned int 1, nsEventStatus * 0x0012f638) line 1899 + 50 bytes
nsGenericHTMLElement::HandleDOMEventForAnchors(nsIContent * 0x0470f218, 
nsIPresContext * 0x046981e8, nsEvent * 0x0012f740, nsIDOMEvent * * 0x00000000, 
unsigned int 1, nsEventStatus * 0x0012f638) line 1320 + 32 bytes
nsHTMLAreaElement::HandleDOMEvent(nsHTMLAreaElement * const 0x0470f218, 
nsIPresContext * 0x046981e8, nsEvent * 0x0012f740, nsIDOMEvent * * 0x00000000, 
unsigned int 1, nsEventStatus * 0x0012f638) line 223
PresShell::HandleEventInternal(nsEvent * 0x0012f740, nsIView * 0x0470d118, 
unsigned int 1, nsEventStatus * 0x0012f638) line 5855 + 38 bytes
PresShell::HandleEvent(PresShell * const 0x046e4fac, nsIView * 0x0470d118, 
nsGUIEvent * 0x0012f740, nsEventStatus * 0x0012f638, int 0, int & 1) line 5774 + 
25 bytes
nsView::HandleEvent(nsView * const 0x0470d118, nsGUIEvent * 0x0012f740, unsigned 
int 0, nsEventStatus * 0x0012f638, int 0, int & 1) line 387
nsView::HandleEvent(nsView * const 0x0470ce40, nsGUIEvent * 0x0012f740, unsigned 
int 0, nsEventStatus * 0x0012f638, int 0, int & 1) line 344
nsView::HandleEvent(nsView * const 0x046e9d20, nsGUIEvent * 0x0012f740, unsigned 
int 0, nsEventStatus * 0x0012f638, int 1, int & 1) line 344
nsViewManager::DispatchEvent(nsViewManager * const 0x046e9ba0, nsGUIEvent * 
0x0012f740, nsEventStatus * 0x0012f638) line 1920
HandleEvent(nsGUIEvent * 0x0012f740) line 83
nsWindow::DispatchEvent(nsWindow * const 0x0470ca94, nsGUIEvent * 0x0012f740, 
nsEventStatus & nsEventStatus_eIgnore) line 846 + 10 bytes
nsWindow::DispatchWindowEvent(nsGUIEvent * 0x0012f740) line 867
nsWindow::DispatchMouseEvent(unsigned int 500, nsPoint * 0x00000000) line 4434 + 
21 bytes
ChildWindow::DispatchMouseEvent(unsigned int 500, nsPoint * 0x00000000) line 
4686
nsWindow::ProcessMessage(unsigned int 123, unsigned int 7471546, long 9568349, 
long * 0x0012fb74) line 3369 + 26 bytes
nsWindow::WindowProc(HWND__ * 0x007201ba, unsigned int 123, unsigned int 
7471546, long 9568349) line 1114 + 27 bytes
USER32! 77e02e98()
USER32! 77e04876()
USER32! 77e0474c()
USER32! 77e04ef0()
USER32! 77e02e98()
USER32! 77e06a72()
USER32! 77e06aee()
nsWindow::WindowProc(HWND__ * 0x007201ba, unsigned int 517, unsigned int 0, long 
2162779) line 1121 + 31 bytes
USER32! 77e02e98()
USER32! 77e030e0()
USER32! 77e05824()
nsAppShellService::Run(nsAppShellService * const 0x00f60da8) line 303
main1(int 2, char * * 0x003c6ae8, nsISupports * 0x00000000) line 1269 + 32 bytes
main(int 2, char * * 0x003c6ae8) line 1599 + 37 bytes
mainCRTStartup() line 338 + 17 bytes
KERNEL32! 77e87d08()


*** This bug has been marked as a duplicate of 114377 ***