138247 - Printing this page crashes browser

Status: VERIFIED INVALID

(Core :: Printing: Output, defect, P1)

Description

[Roscoe Primrose]

From Bugzilla Helper:
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:0.9.9+)
Gecko/20020418
BuildID:    2002041803

Prinitng the page at http://www.ece.wpi.edu/courses/ee535/hwk11cd95/dks1/dks1.html

crashes the browser

Reproducible: Always
Steps to Reproduce:
1.Go to http://www.ece.wpi.edu/courses/ee535/hwk11cd95/dks1/dks1.html
2.Print
3.Get's to 14 of 25 pages, crashes.

Actual Results:  Prints 14 of 25 pages, then crashes

Expected Results:  Should have completed printing and not crashed

TB5349597M
TB5349751X
TB5349811Z
TB5349952G
TB5350114M

http://olo.office.altkom.com.pl/domowa/mozilla/iframe_print/ does not produce a
crash for me. (Bugs 100809/128501)

Comment 1

[sujay]

nsLineBox::CombinedAreaIntersects
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsLineBox.h, line 345] 
nsBlockFrame::Paint
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsBlockFrame.cpp, line 5370] 
nsBlockFrame::Paint
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsBlockFrame.cpp, line 5370] 
nsContainerFrame::PaintChild
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsContainerFrame.cpp, line
256] 
nsBlockFrame::PaintChildren
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsBlockFrame.cpp, line 5498] 
nsBlockFrame::Paint
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsBlockFrame.cpp, line 5370] 
nsContainerFrame::PaintChild
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsContainerFrame.cpp, line
256] 
nsBlockFrame::PaintChildren
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsBlockFrame.cpp, line 5498] 
nsBlockFrame::Paint
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsBlockFrame.cpp, line 5370] 
nsContainerFrame::PaintChild
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsContainerFrame.cpp, line
256] 
nsContainerFrame::PaintChildren
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsContainerFrame.cpp, line
197] 
nsContainerFrame::Paint
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsContainerFrame.cpp, line
178] 
nsPageContentFrame::Paint
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPageContentFrame.cpp, line
193] 
PresShell::Paint
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5791] 
nsView::Paint [d:\builds\seamonkey\mozilla\view\src\nsView.cpp, line 280] 
nsViewManager::RenderDisplayListElement
[d:\builds\seamonkey\mozilla\view\src\nsViewManager.cpp, line 1192] 
nsViewManager::RenderViews
[d:\builds\seamonkey\mozilla\view\src\nsViewManager.cpp, line 1141] 
nsViewManager::Display [d:\builds\seamonkey\mozilla\view\src\nsViewManager.cpp,
line 3054] 
nsSimplePageSequenceFrame::PrintNextPage
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsSimplePageSequence.cpp, line
960] 
DocumentViewerImpl::PrintPage
[d:\builds\seamonkey\mozilla\content\base\src\nsDocumentViewer.cpp, line 2824] 
nsPagePrintTimer::Notify
[d:\builds\seamonkey\mozilla\content\base\src\nsDocumentViewer.cpp, line 762] 
nsTimerImpl::Process [d:\builds\seamonkey\mozilla\xpcom\threads\nsTimerImpl.cpp,
line 342] 
handleMyEvent [d:\builds\seamonkey\mozilla\xpcom\threads\nsTimerImpl.cpp, line
381] 
PL_HandleEvent [d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c, line 597] 
PL_ProcessPendingEvents [d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c,
line 530] 
_md_EventReceiverProc [d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c, line
1078] 
KERNEL32.DLL + 0x24407 (0xbff94407) 
0x00688c16 

Comment 2

[rods (gone)]

Iframe printing has been fixed, this sometimes prints and sometimes crashes,
mostly crashes. 

The mData is bad/incvalid (and not null) in the nsLinBox object:

nsRect::YMost() line 146 + 10 bytes
nsLineBox::CombinedAreaIntersects(const nsRect & {...}) line 345 + 9 bytes
nsBlockFrame::PaintChildren(nsIPresContext * 0x03db0160, nsIRenderingContext &
{...}, const nsRect & {...}, nsFramePaintLayer eFramePaintLayer_Underlay,
unsigned int 0) line 5496 + 19 bytes
nsBlockFrame::Paint(nsBlockFrame * const 0x03e01e14, nsIPresContext *
0x03db0160, nsIRenderingContext & {...}, const nsRect & {...}, nsFramePaintLayer
eFramePaintLayer_Underlay, unsigned int 0) line 5391
nsContainerFrame::PaintChild(nsIPresContext * 0x03db0160, nsIRenderingContext &
{...}, const nsRect & {...}, nsIFrame * 0x03e01e14, nsFramePaintLayer
eFramePaintLayer_Underlay, unsigned int 0) line 256
nsBlockFrame::PaintChildren(nsIPresContext * 0x03db0160, nsIRenderingContext &
{...}, const nsRect & {...}, nsFramePaintLayer eFramePaintLayer_Underlay,
unsigned int 0) line 5519
nsBlockFrame::Paint(nsBlockFrame * const 0x03e349d0, nsIPresContext *
0x03db0160, nsIRenderingContext & {...}, const nsRect & {...}, nsFramePaintLayer
eFramePaintLayer_Underlay, unsigned int 0) line 5391
nsContainerFrame::PaintChild(nsIPresContext * 0x03db0160, nsIRenderingContext &
{...}, const nsRect & {...}, nsIFrame * 0x03e349d0, nsFramePaintLayer
eFramePaintLayer_Underlay, unsigned int 0) line 256
nsBlockFrame::PaintChildren(nsIPresContext * 0x03db0160, nsIRenderingContext &
{...}, const nsRect & {...}, nsFramePaintLayer eFramePaintLayer_Underlay,
unsigned int 0) line 5519
nsBlockFrame::Paint(nsBlockFrame * const 0x03e34b04, nsIPresContext *
0x03db0160, nsIRenderingContext & {...}, const nsRect & {...}, nsFramePaintLayer
eFramePaintLayer_Underlay, unsigned int 0) line 5391
nsContainerFrame::PaintChild(nsIPresContext * 0x03db0160, nsIRenderingContext &
{...}, const nsRect & {...}, nsIFrame * 0x03e34b04, nsFramePaintLayer
eFramePaintLayer_Underlay, unsigned int 0) line 256
nsContainerFrame::PaintChildren(nsIPresContext * 0x03db0160, nsIRenderingContext
& {...}, const nsRect & {...}, nsFramePaintLayer eFramePaintLayer_Underlay,
unsigned int 0) line 197
nsContainerFrame::Paint(nsContainerFrame * const 0x03e34abc, nsIPresContext *
0x03db0160, nsIRenderingContext & {...}, const nsRect & {...}, nsFramePaintLayer
eFramePaintLayer_Underlay, unsigned int 0) line 178
nsPageContentFrame::Paint(nsPageContentFrame * const 0x03e34abc, nsIPresContext
* 0x03db0160, nsIRenderingContext & {...}, const nsRect & {...},
nsFramePaintLayer eFramePaintLayer_Underlay, unsigned int 0) line 181 + 27 bytes
PresShell::Paint(PresShell * const 0x03db1fcc, nsIView * 0x03e35958,
nsIRenderingContext & {...}, const nsRect & {...}) line 5682 + 36 bytes
nsView::Paint(nsView * const 0x03e35958, nsIRenderingContext & {...}, const
nsRect & {...}, unsigned int 0, int & 1243912) line 280
nsViewManager::RenderDisplayListElement(DisplayListElement2 * 0x014a47a8,
nsIRenderingContext & {...}) line 1192
nsViewManager::RenderViews(nsView * 0x03e358c0, nsIRenderingContext & {...},
const nsRect & {...}, int & 0) line 1141
nsViewManager::Display(nsViewManager * const 0x03db1e48, nsIView * 0x03e358c0,
int 0, int 0, const nsRect & {...}) line 3054
nsSimplePageSequenceFrame::PrintNextPage(nsSimplePageSequenceFrame * const
0x03db45e8, nsIPresContext * 0x03db0160) line 973
DocumentViewerImpl::PrintPage(nsIPresContext * 0x03db0160, nsIPrintSettings *
0x03add2d8, PrintObject * 0x03a0b858, int & 1) line 3134 + 22 bytes

Comment 3

[Kevin McCluskey (gone)]

Reassigning to Chris.

Comment 4

[karnaze (gone)]

I couldn't get it to crash on Win2K after print previewing 3 times. We need a 
reproduceable test case.

Comment 5

[Roscoe Primrose]

Still crashes for me on 2002050705.

TB6068328G

Comment 6

[Kevin McCluskey (gone)]

WFM: Using 5/22 branch build on WinXP. I tried print previewing it 4 times as
well as printing it 3 times. It did not crash for me.

nsbeta1-. For now. If someone can construct a more reproducible test case please
remove the (-).

Comment 7

[Olivier Cahagne]

wfm using build 20020730 on Linux (trunk).

Comment 8

[Pete Zha]

Sorry, I can't access the URL now. Reporter: please upload a testcase. Thanks!
---------------
Forbidden
You don't have permission to access /courses/ee535/hwk11cd95/dks1/dks1.html on
this server.

Apache/1.3.26 Ben-SSL/1.48 Server at www.ece.wpi.edu Port 80
---------------

Comment 9

[karnaze (gone)]

Invalid. If a url or test case exists, please reopen.

Comment 10

[sujay]

verified.