138835 - [WFM]Trunk printing crashes [@ DocumentViewerImpl::ReflowPrintObject]

Status: VERIFIED FIXED

(Core :: Printing: Output, defect)

Description

[greer]

The Trunk builds from 4/18 and later have a number of printing crashes in the
Talkback data at DocumentViewerImpl::ReflowPrintObject. I tried printing some of
the links with the windows build from 4/17 and did not crash. But with
2002041914 on a Win2000 machine I was able to crash with these steps:
1) go to http://www.nascar.com/races/wc/2002/data/standings_official.html
2) Select File | Print | OK
3) Crash

I will include my stack trace below. Here are the current comments:
Trunk (DocumentViewerImpl::ReflowPrintObject):       12
 Unique Users  7
(5360121) - [Windows NT  5.0 build 2195] (Build 2002041814): went to
http://www.techreview.com/ and once the page loaded selected the print icon from
the toolbar location to the right of the url textbox entry in the top of the
browser window. My printer is an epson c60 running via the USB port on my Win2K
sp2  
(5403668) - [Windows NT  5.0 build 2195] (Build 2002041914): trying to print the
home page for techreview.com.   URL: http://www.kwod.com/programs/morningwood
(5392539) - [Windows NT  5.0 build 2195] (Build 2002041909): printing URL:
http://www.ece.wpi.edu/courses/ee535/hwk11cd95/dks1/dks1.html
(5392639) - [Windows NT  5.0 build 2195] (Build 2002041909): Printing
http://www.nascar.com/races/wc/2002/data/standings_official.htmlSame a
s bug 138247? URL: http://www.nascar.com/races/wc/2002/data/standings_official.html
(5385236) - [Windows 98  4.10 build 67766446] (Build 2002041906): crash on print
bug 132216?? URL: 
(5342611) - [Windows 98  4.10 build 67766446] (Build 2002041806): crash printing
home.netscape.com URL: 
(5386312) - [Linux 2.4.17] (Build 2002041908): I chose File|Print to print the
URL mentioned above URL: http://home.netscape.com/index1.html
(5385236) Build: 2002041906 Plat: Windows 98  4.10 build 67766446 Time:
2002-04-19 [e-mail]  crash on print bug 132216??
(5385302) Build: 2002041906 Plat: Windows 98  4.10 build 67766446 Time:
2002-04-19 [e-mail]  
(5342611) Build: 2002041806 Plat: Windows 98  4.10 build 67766446 Time:
2002-04-18 [e-mail]  crash printing home.netscape.com

Comment 1

[greer]

DocumentViewerImpl::ReflowPrintObject 38140290
Email Address [e-mail]
Product ID    MozillaTrunk
Build ID      2002041914
Trigger Time  2002-04-20 10:58:14
Platform      Win32
Operating System Windows NT 5.0 build 2195
Module        gkcontent.dll
URL visited   http://www.nascar.com/races/wc/2002/data/standings_official.html
User Comments 1) Go to
http://www.nascar.com/races/wc/2002/data/standings_official.html 2) Select File
| Print | OK -> crash Bug 138835
Trigger Reason Access violation
Source File Name d:\builds\seamonkey\mozilla\content\base\src\nsDocumentViewer.cpp
Trigger Line No. 3643

Stack Trace
DocumentViewerImpl::ReflowPrintObject
[d:\builds\seamonkey\mozilla\content\base\src\nsDocumentViewer.cpp, line 3643]
DocumentViewerImpl::ReflowDocList
[d:\builds\seamonkey\mozilla\content\base\src\nsDocumentViewer.cpp, line 3601]
DocumentViewerImpl::ReflowDocList
[d:\builds\seamonkey\mozilla\content\base\src\nsDocumentViewer.cpp, line 3615]
DocumentViewerImpl::SetupToPrintContent
[d:\builds\seamonkey\mozilla\content\base\src\nsDocumentViewer.cpp, line 4424]
DocumentViewerImpl::DocumentReadyForPrinting
[d:\builds\seamonkey\mozilla\content\base\src\nsDocumentViewer.cpp, line 5189]
DocumentViewerImpl::Print
[d:\builds\seamonkey\mozilla\content\base\src\nsDocumentViewer.cpp, line 7001]
XPTC_InvokeByIndex
[d:\builds\seamonkey\mozilla\xpcom\reflect\xptcall\src\md\win32\xptcinvoke.cpp,
line 106]
XPCWrappedNative::CallMethod
[d:\builds\seamonkey\mozilla\js\src\xpconnect\src\xpcwrappednative.cpp, line 2027]
XPC_WN_CallMethod
[d:\builds\seamonkey\mozilla\js\src\xpconnect\src\xpcwrappednativejsops.cpp,
line 1267]
js_Invoke [d:\builds\seamonkey\mozilla\js\src\jsinterp.c, line 790]
js_Interpret [d:\builds\seamonkey\mozilla\js\src\jsinterp.c, line 2746]
js_Invoke [d:\builds\seamonkey\mozilla\js\src\jsinterp.c, line 806]
js_InternalInvoke [d:\builds\seamonkey\mozilla\js\src\jsinterp.c, line 881]
JS_CallFunctionValue [d:\builds\seamonkey\mozilla\js\src\jsapi.c, line 3414]
nsJSContext::CallEventHandler
[d:\builds\seamonkey\mozilla\dom\src\base\nsJSEnvironment.cpp, line 1019]
nsJSEventListener::HandleEvent
[d:\builds\seamonkey\mozilla\dom\src\events\nsJSEventListener.cpp, line 184]
nsEventListenerManager::HandleEventSubType
[d:\builds\seamonkey\mozilla\content\events\src\nsEventListenerManager.cpp, line
1251]
nsEventListenerManager::HandleEvent
[d:\builds\seamonkey\mozilla\content\events\src\nsEventListenerManager.cpp, line
2248]
nsXULElement::HandleDOMEvent
[d:\builds\seamonkey\mozilla\content\xul\content\src\nsXULElement.cpp, line 3391]
PresShell::HandleDOMEventWithTarget
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 6051]
nsMenuFrame::Execute
[d:\builds\seamonkey\mozilla\layout\xul\base\src\nsMenuFrame.cpp, line 1681]
nsMenuFrame::HandleEvent
[d:\builds\seamonkey\mozilla\layout\xul\base\src\nsMenuFrame.cpp, line 466]
PresShell::HandleEventInternal
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 6020]
PresShell::HandleEvent
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5912]
nsViewManager::HandleEvent
[d:\builds\seamonkey\mozilla\view\src\nsViewManager.cpp, line 2076]
nsView::HandleEvent [d:\builds\seamonkey\mozilla\view\src\nsView.cpp, line 306]
nsViewManager::DispatchEvent
[d:\builds\seamonkey\mozilla\view\src\nsViewManager.cpp, line 1887]
HandleEvent [d:\builds\seamonkey\mozilla\view\src\nsView.cpp, line 83]
nsWindow::DispatchEvent
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 869]
nsWindow::DispatchWindowEvent
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 886]
nsWindow::DispatchMouseEvent
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 4713]
ChildWindow::DispatchMouseEvent
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 4968]
nsWindow::ProcessMessage
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 3630]
nsWindow::WindowProc
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 1131]
USER32.DLL + 0x3eb0 (0x77e13eb0)
USER32.DLL + 0x401a (0x77e1401a)
USER32.DLL + 0x92da (0x77e192da)
nsAppShellService::Run
[d:\builds\seamonkey\mozilla\xpfe\appshell\src\nsAppShellService.cpp, line 309]
main1 [d:\builds\seamonkey\mozilla\xpfe\bootstrap\nsAppRunner.cpp, line 1430]
main [d:\builds\seamonkey\mozilla\xpfe\bootstrap\nsAppRunner.cpp, line 1765]
WinMain [d:\builds\seamonkey\mozilla\xpfe\bootstrap\nsAppRunner.cpp, line 1783]
WinMainCRTStartup()
KERNEL32.DLL + 0x7903 (0x77e87903) 

Comment 2

[greer]

Attachment: Variable values at the time of crash

Here are the values on the stack when I crashed (from Talkback). 
It seems fine for aDoCalcShrink = 0 (0x00000000) (aDoCalcShrink is Bool). But
other page values are suspicious:
pageHeight = 0 (0x00000000), overallMaxWidth = 0 (0x00000000), etc.
Looks like we are passing null somewhere without a check.

Comment 3

[rods (gone)]

The nascar site has an iframe, if any of these sites have iframes, they are dups
of bug 127891

Comment 4

[rods (gone)]

Please retest 127891 has been checked in

Comment 5

[Jay Patel [:jay]]

Adding dependency to bug 127891 for future reference.  If I don't see anymore of
these crashes in the next few days, the iframe printing fix in bug 127891
(checked in 4/22) will have also fixed these crashes and we can resolve this fixed.

Comment 6

[Jay Patel [:jay]]

No crashes after 4/22 MozillaTrunk builds.  Marking fixed.

Comment 7

[sujay]

verified per comments.