120631 - File | Edit Page crashes

Status: VERIFIED DUPLICATE of bug 117141

(SeaMonkey :: Composer, defect)

Description

[sujay]

using 1/17 build of netscape

1) launch netscape
2) jump to any page cnn.com for example
3) File | Edit Page

crash.

Talkback data coming....

Comment 1

[sujay]

Incident ID 1787609
 Stack Signature
                  0x01c6893f 8018b1ff
 Trigger Time
                  2002-01-17 13:06:04
 Email Address
                  [e-mail]
 URL visited
 User Comments
 Build ID
                  2002011706
 Product ID
                  MozillaTrunk
 Platform
 Operating System
                  Win32
 Module
 Trigger Reason
                  Access violation
 Stack Trace

0x01c6893f 
PresShell::GetPrimaryFrameFor
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5455] 
nsCSSFrameConstructor::RecreateFramesForContent
[d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp,
line 11742] 
nsCSSFrameConstructor::ProcessRestyledFrames
[d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp,
line 9959] 
PresShell::ReconstructStyleData
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5346] 
PresShell::StyleSheetDisabledStateChanged
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5387] 
nsDocument::SetStyleSheetDisabledState
[d:\builds\seamonkey\mozilla\content\base\src\nsDocument.cpp, line 1457] 
nsHTMLEditor::ApplyDocumentOrOverrideStyleSheet
[d:\builds\seamonkey\mozilla\editor\libeditor\html\nsHTMLEditor.cpp, line 3480] 
nsHTMLEditor::ApplyOverrideStyleSheet
[d:\builds\seamonkey\mozilla\editor\libeditor\html\nsHTMLEditor.cpp, line 3414] 
nsEditorShell::PrepareDocumentForEditing
[d:\builds\seamonkey\mozilla\editor\composer\src\nsEditorShell.cpp, line 582] 
nsEditorShell::EndPageLoad
[d:\builds\seamonkey\mozilla\editor\composer\src\nsEditorShell.cpp, line 4823] 
nsEditorShell::OnStateChange
[d:\builds\seamonkey\mozilla\editor\composer\src\nsEditorShell.cpp, line 4587] 
nsDocLoaderImpl::FireOnStateChange
[d:\builds\seamonkey\mozilla\uriloader\base\nsDocLoader.cpp, line 1110] 
nsDocLoaderImpl::doStopDocumentLoad
[d:\builds\seamonkey\mozilla\uriloader\base\nsDocLoader.cpp, line 750] 
nsDocLoaderImpl::DocLoaderIsEmpty
[d:\builds\seamonkey\mozilla\uriloader\base\nsDocLoader.cpp, line 647] 
nsDocLoaderImpl::OnStopRequest
[d:\builds\seamonkey\mozilla\uriloader\base\nsDocLoader.cpp, line 578] 
nsLoadGroup::RemoveRequest
[d:\builds\seamonkey\mozilla\netwerk\base\src\nsLoadGroup.cpp, line 531] 
PresShell::RemoveDummyLayoutRequest
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 6537] 
PresShell::ProcessReflowCommands
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 6315] 
ReflowEvent::HandleEvent
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 6099] 
PL_HandleEvent [d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c, line 591] 
PL_ProcessPendingEvents [d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c,
line 524] 
_md_EventReceiverProc [d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c, line
1072] 
KERNEL32.DLL + 0x24407 (0xbff94407) 
0x00688c16 

Comment 2

[Kathleen :Brade]

Did this crash in yesterday's build or did this just show up today?

Comment 3

[sujay]

headsup Tucson/Michael

Comment 4

[Charles Manske]

It doesn't seem to crash all the time. 
I tried www.cnn.com and it didn't crash, but it didn't load the page contents
(looked like an empty page). I backed out my recent change to handle frames,
and then I got the crash with same stack as Sujay showed. I don't think it has
anything to do with my change (or Composer code at all.)
www.mozilla.org loads fine.
Please test other URLs.

Comment 5

[Tracy Walker [:tracy]]

this doesn't happen at every page,  but I have been seing a crash on 
home.netscape.com/ja for some time now (bug 116052)

Comment 6

[Tracy Walker [:tracy]]

this may be completely unrelated, but yesterday on windows I attempted to Edit 
Page the home.netscape.com/ja page and what appeared in the composer was the 
TombRaider page (which I had hit in a previous smoketest).  I attempted to edit 
several other pages and kept getting the TombRaider page.  I quit the app and 
restrated and everythign worked fine.  So I thought it was just some sort of 
glitch.  But then today I had the same behaior happen on mac os9. It went to the 
TombRaider page when I tried to Edit another page.  Unfortunately  I can't offer 
steps to reproduce.  But I thought this might be of interest.

Comment 7

[Charles Manske]

Note that in the call to: nsEditorShell::IsSupportedTextType(const char*
aMIMEType, PRBool *aResult), aMIMEType is null, causing an assertion. 
In this code:
nsEditorShell::IsSupportedTextType(const char* aMIMEType, PRBool *aResult)
{
  NS_ENSURE_ARG_POINTER(aResult);
  NS_ENSURE_ARG_POINTER(aMIMEType);
  *aResult = PR_FALSE;
we should do this:
  NS_ENSURE_ARG_POINTER(aResult);
  *aResult = PR_FALSE;
  NS_ENSURE_ARG_POINTER(aMIMEType);
so the return value is set false when aMIMEType is null
(that change doesn't prevent us from editing the page or the crash, but it seems
the right thing to do.)
I'm also getting 2 assertions when loading this cnn.com in the browser.
On another try editing cnn.com, I did see the proper contents loaded into
Composer (at least the amount visible in the Composerwindow) before it crashed. 
Seems like the problem is during layout of the page in Composer.
Handing off to kin, who understands layout code much better than me.

Comment 8

[Charles Manske]

cc'ing Pierre, since it seems to be related to applying a style sheet.

Comment 9

[sujay]

it does work on some URLS...for example I went to http://www.oracle.com

and File | Edit Page did not crash..came in fine...

Comment 10

[kinmoz]

This is a dup of bug 117141. It has to do with <select> in a table. See 117141
for a minimal test case.

*** This bug has been marked as a duplicate of 117141 ***

Comment 11

[michael wendell]

Verified.