135087 - ONBLUR applied to INPUT TYPE=IMAGE hangs browser

Status: RESOLVED DUPLICATE of bug 101834

(Core :: DOM: UI Events & Focus Handling, defect)

Description

[Brian Wilson]

I was running a suite of tests with ONBLUR and various form elements and it 
kept crashing or hanging. 

I believe I have narrowed it down to the INPUT TYPE=IMAGE widget.

Here is the HTML code snippet that should hang/crash things:
<form>
<input type=image name=ou4 src="http://www.blooberry.com/pics/left.gif"
onblur="alert('image blur');"><br>
</form>

This happens on PC versions at least up til 0.9.9, and someone on #mozillazine 
reproed this for me on a latest Linux build ~mar.29th. Marked platform as "PC" 
just because I did not repro the linux/latest case myself.

Expect: 
no crash please. =) According to HTML 4.x and the relaxe-edness of DTDs, ONBLUR 
can apply to any INPUT type, including IMAGE. How common this would be out in 
the wild is not known to this author. Cranked severity just in case

Comment 1

[Brian Wilson]

Woops, forgot to add address of the original bigger test, in case that may be 
helpful too: http://www.blooberry.com/test/onblurtest1.htm

Comment 2

[Sander van Rijnswou]

Yup, crashes my system to:
Windows NT, build 2002040103

To reproduce, 
1.Go to the link above,
2. Click Link, Back, tree times
3. Alert pops up, press ok, Crash

Comment 3

[Adam Hauner]

Stephen, should I ask you for TB4767223K?

Comment 4

[Valerio Capello]

Confirmed on build 2002032803 win98

TalkBack ID: TB4767418Z

Comment 5

[[e-mail] (gone - use [e-mail] instead)]

nsEventStateManager::PreHandleEvent
[d:\builds\seamonkey\mozilla\content\events\src\nsEventStateManager.cpp, line 455]
PresShell::HandleEventInternal
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 6084]
PresShell::HandleEvent
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 6012]
nsViewManager::HandleEvent
[d:\builds\seamonkey\mozilla\view\src\nsViewManager.cpp, line 2064]
nsView::HandleEvent [d:\builds\seamonkey\mozilla\view\src\nsView.cpp, line 306]
nsViewManager::DispatchEvent
[d:\builds\seamonkey\mozilla\view\src\nsViewManager.cpp, line 1875]
HandleEvent [d:\builds\seamonkey\mozilla\view\src\nsView.cpp, line 83]
nsWindow::DispatchEvent
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 869]
nsWindow::DispatchWindowEvent
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 886]
nsWindow::DispatchFocus
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 4903]
nsWindow::ProcessMessage
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 3734]
nsWindow::WindowProc
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 1131]
KERNEL32.DLL + 0x363b (0xbff7363b)
KERNEL32.DLL + 0x242e7 (0xbff942e7) 

Comment 6

[Adam Hauner]

Marking as dupe of bug 101834 regarding stack signature. Reporter: If you
disagree, please reopen this bug.

*** This bug has been marked as a duplicate of 101834 ***