116322 - Trunk N621 Crash saving images [@ XPCWrappedNative::CallMethod]

Status: VERIFIED DUPLICATE of bug 86783

(Core :: XPConnect, defect)

Description

[greer]

The crashed show a build ID range: 2001121008 to 2001121709. I haven't seen any 
of these crashes in the data for 12-18 through 12-20. I didn't find a bug to 
match this signature. If I missed it pleae dupe this one.

Stack Trace: 

         XPCWrappedNative::CallMethod
[d:\builds\seamonkey\mozilla\js\src\xpconnect\src\xpcwrappednative.cpp  line
2184]
         XPC_WN_CallMethod
[d:\builds\seamonkey\mozilla\js\src\xpconnect\src\xpcwrappednativejsops.cpp 
line 1267]
         js_Invoke      [d:\builds\seamonkey\mozilla\js\src\jsinterp.c  line 
834]
         js_Interpret   [d:\builds\seamonkey\mozilla\js\src\jsinterp.c  line 
2799]
         js_Invoke      [d:\builds\seamonkey\mozilla\js\src\jsinterp.c  line 
850]
         js_Interpret   [d:\builds\seamonkey\mozilla\js\src\jsinterp.c  line 
2413]
         js_Invoke      [d:\builds\seamonkey\mozilla\js\src\jsinterp.c  line 
850]
         js_Interpret   [d:\builds\seamonkey\mozilla\js\src\jsinterp.c  line 
2799]
         js_Invoke      [d:\builds\seamonkey\mozilla\js\src\jsinterp.c  line 
850]
         js_InternalInvoke      [d:\builds\seamonkey\mozilla\js\src\jsinterp.c  
line 925]
         JS_CallFunctionValue   [d:\builds\seamonkey\mozilla\js\src\jsapi.c  
line 3407]
         nsJSContext::CallEventHandler
[d:\builds\seamonkey\mozilla\dom\src\base\nsJSEnvironment.cpp  line 1012]
         nsJSEventListener::HandleEvent
[d:\builds\seamonkey\mozilla\dom\src\events\nsJSEventListener.cpp  line 182]
         nsEventListenerManager::HandleEventSubType
[d:\builds\seamonkey\mozilla\content\events\src\nsEventListenerManager.cpp  line
1215]
         nsEventListenerManager::HandleEvent
[d:\builds\seamonkey\mozilla\content\events\src\nsEventListenerManager.cpp  line
2207]
         nsXULElement::HandleDOMEvent
[d:\builds\seamonkey\mozilla\content\xul\content\src\nsXULElement.cpp  line
3427]
         PresShell::HandleDOMEventWithTarget
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp  line 5899]
         nsMenuFrame::Execute
[d:\builds\seamonkey\mozilla\layout\xul\base\src\nsMenuFrame.cpp  line 1605]
         nsMenuFrame::HandleEvent
[d:\builds\seamonkey\mozilla\layout\xul\base\src\nsMenuFrame.cpp  line 454]
         PresShell::HandleEventInternal
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp  line 5868]
         PresShell::HandleEvent
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp  line 5776]
         nsView::HandleEvent    
[d:\builds\seamonkey\mozilla\view\src\nsView.cpp  line
387]
         nsView::HandleEvent    
[d:\builds\seamonkey\mozilla\view\src\nsView.cpp  line
344]
         nsView::HandleEvent    
[d:\builds\seamonkey\mozilla\view\src\nsView.cpp  line
344]
         nsView::HandleEvent    
[d:\builds\seamonkey\mozilla\view\src\nsView.cpp  line
344]
         nsViewManager::DispatchEvent
[d:\builds\seamonkey\mozilla\view\src\nsViewManager.cpp  line 1910]
         HandleEvent    [d:\builds\seamonkey\mozilla\view\src\nsView.cpp  line 
83]
         nsWindow::DispatchEvent
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp  line 850]
         nsWindow::DispatchWindowEvent
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp  line 867]
         nsWindow::DispatchMouseEvent
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp  line 4433]
         ChildWindow::DispatchMouseEvent
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp  line 4683]
         nsWindow::ProcessMessage
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp  line 3388]
         nsWindow::WindowProc
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp  line 1112]
         KERNEL32.DLL + 0x3613 (0xbff63613)
         KERNEL32.DLL + 0x248f7 (0xbff848f7)
         0x00688c02
         0x00058f64
 
        Source File :
http://bonsai.mozilla.org/cvsblame.cgi?
file=mozilla/js/src/xpconnect/src/xpcwrappednative.cpp
line : 2184
     (677753)   URL: fantasysports.yahoo.com
     (647573)   URL: fantasysports.yahoo.com
     (585035)   Comments: Attempted a download of a zip file.  I had noticed 
thatOpen In New Windows wasn't working and that the Manage Bookmarks dialog 
wouldn't open.
     (570842)   URL: www.mapquest.com
     (516787)   URL: http://www.nationalcity.com/onlinebanking/
     (510561)   URL: http://www.memoireracines.qc.ca/festival.htm
     (496491)   URL: http://www.desvelados.net/content.htm
     (496491)   Comments: Saving image (animated GIF)
     (465613)   Comments: saving entire page
     (460714)   URL: www.mapquest.com
     (460714)   Comments: I was saving an image off of a web page.
     (446402)   URL: http://www.memoireracines.qc.ca/festival.htm
     (352899)   Comments: I started the latest release after copying it into the
directory created by the previous installer.

Comment 1

[David Bradley]

This looks like a duplicate of bug 86783. The last comment is telling, it talks
about copying the files into an existing directory. The crash appears to occur
because it has  a pointer with the address of 2. I suspect the interface
information is out of date and its treating an integer value as a pointer or
otherwise getting confused about the parameter list.

*** This bug has been marked as a duplicate of 86783 ***

Comment 2

[Phil Schwartau]

Marking Verified. See in particular Comment #18  by jband in the 
duplicate bug.