143907 - Crash: legend inside an absolute position fieldset will crash mozilla

Status: RESOLVED DUPLICATE of bug 130251

(SeaMonkey :: General, defect)

Description

[Phil Housley]

Win 98SE, build 2002051006

Placing a legend element inside a fieldset with a position:absolute style will
cause mozilla to crash.  This has happened every time, and I can see no way
around it.  See attachment for example (careful!).

Data from the illegal operation window:

MOZILLA caused an invalid page fault in
module GKLAYOUT.DLL at 0167:603ef159.
Registers:
EAX=00000000 CS=0167 EIP=603ef159 EFLGS=00010206
EBX=00000000 SS=016f ESP=0064e840 EBP=0064e858
ECX=0064e9b8 DS=016f ESI=0064e930 FS=1397
EDX=40000000 ES=016f EDI=0064ebcc GS=0000
Bytes at CS:EIP:
8b 50 04 89 51 10 8b 40 08 89 41 14 8b 44 24 08 
Stack dump:
603ece57 00000000 0064e950 0064eb8c 0073666c 00000000 0064eb08 603e683d 0064eb8c
01d709b0 0073666c 0064ec3c 00000000 01d709b0 0073666c 0064eb8c

Comment 1

[Phil Housley]

Attachment: Test case: positioned fieldset and legend

Important line is "<fieldset
style="position:absolute"><legend>A</legend></fieldset>".

Comment 2

[Matthias Versen [:Matti]]

wfm with win2k build 20020511..

Do you have a talkback ID for that crash ?

Comment 3

[Phil Housley]

Sorry, I turn off anything that doesn't have a cancel button.

Comment 4

[Matthias Versen [:Matti]]

i got a crash with RC2 -> TB 6201816K

Comment 5

[Doron Rosenberg (IBM)]

Stack Signature  nsBlockBandData::Init cc66d6b5
Email Address [e-mail]
Product ID Gecko1.0
Build ID 2002051008
Trigger Time 2002-05-12 10:40:40
Platform Win32
Operating System Windows NT 5.0 build 2195
Module gklayout.dll
URL visited http://bugzilla.mozilla.org/show_bug.cgi?id=143907
User Comments
Trigger Reason Access violation
Source File Name
d:\builds\seamonkey\mozilla\layout\html\base\src\nsBlockBandData.cpp
Trigger Line No. 72
Stack Trace
nsBlockBandData::Init
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsBlockBandData.cpp, line 72]
nsBlockReflowState::nsBlockReflowState
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsBlockReflowState.cpp, line 152]
nsBlockFrame::Reflow
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsBlockFrame.cpp, line 741]
nsLegendFrame::Reflow
[d:\builds\seamonkey\mozilla\layout\html\forms\src\nsLegendFrame.cpp, line 120]
nsContainerFrame::ReflowChild
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsContainerFrame.cpp, line 807]
nsFieldSetFrame::Reflow
[d:\builds\seamonkey\mozilla\layout\html\forms\src\nsFieldSetFrame.cpp, line 406]
nsAbsoluteContainingBlock::ReflowAbsoluteFrame
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsAbsoluteContainingBlock.cpp,
line 442]
nsAbsoluteContainingBlock::Reflow
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsAbsoluteContainingBlock.cpp,
line 227]
nsBlockFrame::Reflow
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsBlockFrame.cpp, line 1021]
nsContainerFrame::ReflowChild
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsContainerFrame.cpp, line 807]
CanvasFrame::Reflow
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsHTMLFrame.cpp, line 565]
nsBoxToBlockAdaptor::Reflow
[d:\builds\seamonkey\mozilla\layout\xul\base\src\nsBoxToBlockAdaptor.cpp, line 837]
nsBoxToBlockAdaptor::DoLayout
[d:\builds\seamonkey\mozilla\layout\xul\base\src\nsBoxToBlockAdaptor.cpp, line 619]
nsBox::Layout [d:\builds\seamonkey\mozilla\layout\xul\base\src\nsBox.cpp, line 1052]
nsScrollBoxFrame::DoLayout
[d:\builds\seamonkey\mozilla\layout\xul\base\src\nsScrollBoxFrame.cpp, line 395]
nsBox::Layout [d:\builds\seamonkey\mozilla\layout\xul\base\src\nsBox.cpp, line 1052]
nsContainerBox::LayoutChildAt
[d:\builds\seamonkey\mozilla\layout\xul\base\src\nsContainerBox.cpp, line 650]
nsGfxScrollFrameInner::LayoutBox
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsGfxScrollFrame.cpp, line 1063]
nsGfxScrollFrameInner::Layout
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsGfxScrollFrame.cpp, line 1222]
nsGfxScrollFrame::DoLayout
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsGfxScrollFrame.cpp, line 1071]
nsBox::Layout [d:\builds\seamonkey\mozilla\layout\xul\base\src\nsBox.cpp, line 1052]
nsBoxFrame::Reflow
[d:\builds\seamonkey\mozilla\layout\xul\base\src\nsBoxFrame.cpp, line 1001]
nsGfxScrollFrame::Reflow
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsGfxScrollFrame.cpp, line 780]
nsContainerFrame::ReflowChild
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsContainerFrame.cpp, line 807]
ViewportFrame::Reflow
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsViewportFrame.cpp, line 588]
nsHTMLReflowCommand::Dispatch
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsHTMLReflowCommand.cpp, line 218]
PresShell::ProcessReflowCommand
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 6305]
PresShell::ProcessReflowCommands
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 6360]
ReflowEvent::HandleEvent
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 6216]
PL_HandleEvent [d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c, line 597]
PL_ProcessPendingEvents [d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c,
line 530]
_md_EventReceiverProc [d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c, line
1078]
nsAppShellService::Run
[d:\builds\seamonkey\mozilla\xpfe\appshell\src\nsAppShellService.cpp, line 451]
main1 [d:\builds\seamonkey\mozilla\xpfe\bootstrap\nsAppRunner.cpp, line 1473]
main [d:\builds\seamonkey\mozilla\xpfe\bootstrap\nsAppRunner.cpp, line 1809]
WinMain [d:\builds\seamonkey\mozilla\xpfe\bootstrap\nsAppRunner.cpp, line 1827]
WinMainCRTStartup()
KERNEL32.DLL + 0x17d08 (0x77e87d08) 

Comment 6

[Matthias Versen [:Matti]]

*** This bug has been marked as a duplicate of 130251 ***