Closed Bug 135755 Opened 22 years ago Closed 22 years ago

crash viewing specific HTML message(link to anchor) [@nsDocShell::InternalLoad]

Categories

(SeaMonkey :: MailNews: Message Display, defect)

Product:
SeaMonkey
Component:
MailNews: Message Display
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

(Not tracked)

Status:
VERIFIED DUPLICATE of bug 135868

People

(Reporter: kryptolus, Assigned: sspitzer)

References

Details

(Keywords: crash)

Crash Data

linux trunk 2002040510
(this is a recent crasher and only seems to work for IMAP -- not sure)

1. Compose new HTML mail.
2. Type 'hello' and put an anchor before that called 'hello'
(I did this by having hello selected and selecting anchor)
3. enter two lines
4. type 'test' and make it a link to '#hello'
5. send the email.
6. view the email and click on the link -> crash

here's the source:
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
  <title></title>
</head>
<body>
<a name="hello"></a>hello<br>
<br>
<a href="#hello">click me</a><br>
<br>
<pre class="moz-signature" cols="$mailwrapcol">-- <br>WWW: <a
class="moz-txt-link-freetext"
href="http://www.kryptolus.com">http://www.kryptolus.com</a><br>AIM:
Kryptolus<br></pre>
</body>
</html>

I can't produce a stack trace for this since my debug build is still broken and
no-one knows how to fix it.
QA Contact: olgam → laurel
I can reproduce the problem on linux with apr5 trunk build... will try other
platforms
Keywords: crash, nsbeta1
Reproduced on win98, apr5 trunk build.

From talkback 4869766:
nsDocShell::InternalLoad
[d:\builds\seamonkey\mozilla\docshell\base\nsDocShell.cpp, line 4585]
nsWebShell::OnLinkClickSync
[d:\builds\seamonkey\mozilla\docshell\base\nsWebShell.cpp, line 629]
OnLinkClickEvent::HandleEvent
[d:\builds\seamonkey\mozilla\docshell\base\nsWebShell.cpp, line 462]
PL_HandleEvent [d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c, line 597]
PL_ProcessPendingEvents [d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c,
line 530]
_md_EventReceiverProc [d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c, line
1078]
KERNEL32.DLL + 0x24407 (0xbff94407)
0x00688c16
OS: Linux → All
Hardware: PC → All
#0  0x297a3ef1 in nsDocShell::InternalLoad (this=0x8583c00, aURI=0x8786c04, aReferrer=0x8783504, aOwner=0x0,
    aInheritOwner=1, aWindowTarget=0xbfbff24c, aPostData=0x0, aHeadersData=0x0, aLoadType=2097153, aSHEntry=0x0,
    firstParty=1, aDocShell=0x0, aRequest=0x0) at /home/timeless/mozilla/docshell/base/nsDocShell.cpp:4577
4577                mOSHE->SetScrollPosition(cx, cy);
(gdb)
Current language:  auto; currently c++
(gdb) p mOSHE
$1 = {mRawPtr = 0x0}
(gdb) l
4572                 * recorded in session and global history.
4573                 */
4574                OnNewURI(aURI, nsnull, mLoadType);
4575
4576                /* save current position of scroller(s) (bug 59774) */
4577                mOSHE->SetScrollPosition(cx, cy);

I finally solved my infinite loop and got around to crashing :-)
Summary: crash viewing specific HTML message(link to anchor) → crash viewing specific HTML message(link to anchor) [@nsDocShell::InternalLoad]
other interesting notes
###!!! ASSERTION: startIndex == nsMsgViewIndex_None: '0', file /home/timeless/mozilla/mailnews/base/src/nsMsgDBView.cpp, line 4371

###!!! ASSERTION: Overwriting an existing document channel!: '(loadFlags & nsIChannel::LOAD_REPLACE) || !(mDocumentRequest.get())', file /home/timeless/mozilla/uriloader/base/nsDocLoader.cpp, line 473

###!!! ASSERTION: nsImapMockChannel::SetContentCharset: 'Not Reached', file /home/timeless/mozilla/mailnews/imap/src/nsImapProtocol.cpp, line 7569

###!!! ASSERTION: You can't dereference a NULL nsCOMPtr with operator->().: 'mRawPtr != 0', file ../../dist/include/xpcom/nsCOMPtr.h, line 650
(we obviously get to die at this one)

i'm not certain all of these relate, but ...
Marking this a dupe of newer bug because the newer bug is blocking ADT1 bug.

*** This bug has been marked as a duplicate of 135868 ***
Status: NEW → RESOLVED
Closed: 22 years ago
Resolution: --- → DUPLICATE
yeah, crash there happens in the same place. vrfy
Status: RESOLVED → VERIFIED
*** Bug 136876 has been marked as a duplicate of this bug. ***
Product: Browser → Seamonkey
Crash Signature: [@nsDocShell::InternalLoad]
You need to log in before you can comment on or make changes to this bug.