116537 - Mozilla crashes when right-clicking on links in this page

Status: VERIFIED DUPLICATE of bug 114377

(Core :: Graphics: ImageLib, defect)

Description

[Dvir]

to reproduce:
1. go to http://www.yearinspace.com
2. right-click on the red "preview" link.
Mozilla crashes without displaying the context-menu.

Talkback reports: TB792162E, TB792113K.
Tested with 0.9.7 on win2k.

Comment 1

[jjkarppi]

Seems to WFM with 2001-12-21-08 (trunk) on Linux.

Comment 2

[Micheal]

This page is causeing 0.9.7 to crash on Win 98, i'm makeing a test case but the
HTML of this page is horendus, so it'll take abit.

Comment 3

[jjkarppi]

severity -> critical, adding "crash" keyword

Comment 4

[Micheal]

Attachment: Reproduces Imagemap problem

Ok, the cause of this bug is the dimensions in the coord atribute of the
imagemap being bigger then the image (I think, to tired and inexpirenced with
imagemaps to be sure, but it most defintley has to do with the coordinates of
the map.).

Comment 5

[jjkarppi]

Confirming this with 0.9.7 and trunk build 2001-12-21-03 on Windows 2000.

Comment 6

[Diego Biurrun]

wfm Linux 0.9.7

Stephend could you retrieve the talkback?

Comment 7

[Matthias Versen [:Matti]]

known bug, i`ll try to find it.
(removing Stephend from CC: We have already a stack)

nsIFrame::GetStyleData(nsStyleStructID eStyleStruct_UserInterface, const 
nsStyleStruct * & 0x0012d534) line 561 + 3 bytes
XULPopupListenerImpl::FireFocusOnTargetContent(nsIDOMNode * 0x045cb104) line 331
XULPopupListenerImpl::PreLaunchPopup(nsIDOMEvent * 0x04104218) line 298
XULPopupListenerImpl::ContextMenu(XULPopupListenerImpl * const 0x040d1e48, 
nsIDOMEvent * 0x04104218) line 204 + 15 bytes
nsEventListenerManager::HandleEvent(nsEventListenerManager * const 0x040d1e98, 
nsIPresContext * 0x045778a0, nsEvent * 0x0012f750, nsIDOMEvent * * 0x0012f018, 
nsIDOMEventTarget * 0x040d0898, unsigned int 2, nsEventStatus * 0x0012f648) line 
1494 + 41 bytes
nsXULElement::HandleDOMEvent(nsXULElement * const 0x040d0890, nsIPresContext * 
0x045778a0, nsEvent * 0x0012f750, nsIDOMEvent * * 0x0012f018, unsigned int 2, 
nsEventStatus * 0x0012f648) line 3427
nsXULElement::HandleChromeEvent(nsXULElement * const 0x040d08a0, nsIPresContext 
* 0x045778a0, nsEvent * 0x0012f750, nsIDOMEvent * * 0x0012f018, unsigned int 2, 
nsEventStatus * 0x0012f648) line 4633 + 36 bytes
GlobalWindowImpl::HandleDOMEvent(GlobalWindowImpl * const 0x040a6288, 
nsIPresContext * 0x045778a0, nsEvent * 0x0012f750, nsIDOMEvent * * 0x0012f018, 
unsigned int 2, nsEventStatus * 0x0012f648) line 659
nsDocument::HandleDOMEvent(nsDocument * const 0x045c3468, nsIPresContext * 
0x045778a0, nsEvent * 0x0012f750, nsIDOMEvent * * 0x0012f018, unsigned int 2, 
nsEventStatus * 0x0012f648) line 3069
nsGenericElement::HandleDOMEvent(nsGenericElement * const 0x045c5be0, 
nsIPresContext * 0x045778a0, nsEvent * 0x0012f750, nsIDOMEvent * * 0x0012f018, 
unsigned int 2, nsEventStatus * 0x0012f648) line 1896 + 39 bytes
nsGenericElement::HandleDOMEvent(nsGenericElement * const 0x045e8540, 
nsIPresContext * 0x045778a0, nsEvent * 0x0012f750, nsIDOMEvent * * 0x0012f018, 
unsigned int 2, nsEventStatus * 0x0012f648) line 1889 + 50 bytes
nsGenericElement::HandleDOMEvent(nsGenericElement * const 0x04615700, 
nsIPresContext * 0x045778a0, nsEvent * 0x0012f750, nsIDOMEvent * * 0x0012f018, 
unsigned int 2, nsEventStatus * 0x0012f648) line 1889 + 50 bytes
nsGenericElement::HandleDOMEvent(nsGenericElement * const 0x046158c8, 
nsIPresContext * 0x045778a0, nsEvent * 0x0012f750, nsIDOMEvent * * 0x0012f018, 
unsigned int 2, nsEventStatus * 0x0012f648) line 1889 + 50 bytes
nsGenericElement::HandleDOMEvent(nsGenericElement * const 0x04615a00, 
nsIPresContext * 0x045778a0, nsEvent * 0x0012f750, nsIDOMEvent * * 0x0012f018, 
unsigned int 2, nsEventStatus * 0x0012f648) line 1889 + 50 bytes
nsGenericElement::HandleDOMEvent(nsGenericElement * const 0x04615a68, 
nsIPresContext * 0x045778a0, nsEvent * 0x0012f750, nsIDOMEvent * * 0x0012f018, 
unsigned int 2, nsEventStatus * 0x0012f648) line 1889 + 50 bytes
nsGenericElement::HandleDOMEvent(nsGenericElement * const 0x04615ba0, 
nsIPresContext * 0x045778a0, nsEvent * 0x0012f750, nsIDOMEvent * * 0x0012f018, 
unsigned int 2, nsEventStatus * 0x0012f648) line 1889 + 50 bytes
nsGenericElement::HandleDOMEvent(nsGenericElement * const 0x04615f20, 
nsIPresContext * 0x045778a0, nsEvent * 0x0012f750, nsIDOMEvent * * 0x0012f018, 
unsigned int 2, nsEventStatus * 0x0012f648) line 1889 + 50 bytes
nsGenericElement::HandleDOMEvent(nsGenericElement * const 0x04618318, 
nsIPresContext * 0x045778a0, nsEvent * 0x0012f750, nsIDOMEvent * * 0x0012f018, 
unsigned int 2, nsEventStatus * 0x0012f648) line 1889 + 50 bytes
nsGenericElement::HandleDOMEvent(nsGenericElement * const 0x045cb0e0, 
nsIPresContext * 0x045778a0, nsEvent * 0x0012f750, nsIDOMEvent * * 0x0012f018, 
unsigned int 1, nsEventStatus * 0x0012f648) line 1889 + 50 bytes
nsGenericHTMLElement::HandleDOMEventForAnchors(nsIContent * 0x045cb0e0, 
nsIPresContext * 0x045778a0, nsEvent * 0x0012f750, nsIDOMEvent * * 0x00000000, 
unsigned int 1, nsEventStatus * 0x0012f648) line 1312 + 32 bytes
nsHTMLAreaElement::HandleDOMEvent(nsHTMLAreaElement * const 0x045cb0e0, 
nsIPresContext * 0x045778a0, nsEvent * 0x0012f750, nsIDOMEvent * * 0x00000000, 
unsigned int 1, nsEventStatus * 0x0012f648) line 223
PresShell::HandleEventInternal(nsEvent * 0x0012f750, nsIView * 0x04606a28, 
unsigned int 1, nsEventStatus * 0x0012f648) line 5857 + 38 bytes
PresShell::HandleEvent(PresShell * const 0x045c5ffc, nsIView * 0x04606a28, 
nsGUIEvent * 0x0012f750, nsEventStatus * 0x0012f648, int 0, int & 1) line 5776 + 
25 bytes
nsView::HandleEvent(nsView * const 0x04606a28, nsGUIEvent * 0x0012f750, unsigned 
int 0, nsEventStatus * 0x0012f648, int 0, int & 1) line 387
nsView::HandleEvent(nsView * const 0x04606750, nsGUIEvent * 0x0012f750, unsigned 
int 0, nsEventStatus * 0x0012f648, int 0, int & 1) line 344
nsView::HandleEvent(nsView * const 0x045ccab8, nsGUIEvent * 0x0012f750, unsigned 
int 0, nsEventStatus * 0x0012f648, int 1, int & 1) line 344
nsViewManager::DispatchEvent(nsViewManager * const 0x045cc8f0, nsGUIEvent * 
0x0012f750, nsEventStatus * 0x0012f648) line 1910
HandleEvent(nsGUIEvent * 0x0012f750) line 83
nsWindow::DispatchEvent(nsWindow * const 0x046063a4, nsGUIEvent * 0x0012f750, 
nsEventStatus & nsEventStatus_eIgnore) line 846 + 10 bytes
nsWindow::DispatchWindowEvent(nsGUIEvent * 0x0012f750) line 867
nsWindow::DispatchMouseEvent(unsigned int 500, nsPoint * 0x00000000) line 4431 + 
21 bytes
ChildWindow::DispatchMouseEvent(unsigned int 500, nsPoint * 0x00000000) line 
4683
nsWindow::ProcessMessage(unsigned int 123, unsigned int 263518, long 12779552, 
long * 0x0012fb84) line 3366 + 26 bytes
nsWindow::WindowProc(HWND__ * 0x0004055e, unsigned int 123, unsigned int 263518, 
long 12779552) line 1111 + 27 bytes
USER32! 77e02e98()
USER32! 77e04876()
USER32! 77e0474c()
USER32! 77e04ef0()
USER32! 77e02e98()
USER32! 77e06a72()
USER32! 77e06aee()
nsWindow::WindowProc(HWND__ * 0x0004055e, unsigned int 517, unsigned int 0, long 
5373982) line 1118 + 31 bytes
USER32! 77e02e98()
USER32! 77e030e0()
USER32! 77e05824()
nsAppShellService::Run(nsAppShellService * const 0x00e22d80) line 303
main1(int 2, char * * 0x003c6b20, nsISupports * 0x00000000) line 1264 + 32 bytes
main(int 2, char * * 0x003c6b20) line 1594 + 37 bytes
mainCRTStartup() line 338 + 17 bytes
KERNEL32! 77e87d08()

Comment 8

[Matthias Versen [:Matti]]

found it :


*** This bug has been marked as a duplicate of 114377 ***

Comment 9

[Terri Preston]

Verified Duplicate