152960 - crash when typing in textarea [@ nsTextFrame::GetChildFrameContainingOffset]

Status: RESOLVED DUPLICATE of bug 140256

(Core :: Layout, defect)

Description

[coatzin]

From Bugzilla Helper:
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.1a) Gecko/20020611
BuildID:    2002061104

I was typing in the textarea labeled "mensaje" and in some point, characters
typed in didn't show.. then I hit <backspace> several times and the browser
crashed (http://www.iusacell.com.mx/digienv.htm)

Reproducible: Always
Steps to Reproduce:
1.Load the page (http://www.iusacell.com.mx/digienv.htm)
2.Enter text in textarea until things get messed up
3.hit backslash until mozilla crashes

Comment 1

[Terri Preston]

WFM win XP branch build 2002061908

Comment 2

[Stephen P. Morse]

reassigning

Comment 3

[tironsi]

That textarea is really messed up, but backspacing did not cause a crash on
Win98SE with Build 2002061308

Comment 4

[Tim]

WFM 2002061708/trunk, Debian/sid.  Backspacing works as expected.

Comment 5

[Adam Hauner]

-> DOM Level 0
My Mozilla (2002061808/trunk/W2K) hang, when I fullfill textarea click elsewhere
and tryed to click back. When I turned off JS, no problem. Hang happen also,
when I fullfilled textarea (to exceed limit) without JS, enable JS, reload page
and click to textare.
Also not problem with backspace.

Reporter: Could you provide TalkBack incident ID?

Comment 6

[coatzin]

Well, I just send a talkback incident but I don't know where to look for its ID.
However, I saved its details and I'll attach the file.

Comment 7

[coatzin]

Attachment: Details of the crash as sent in talkback incident

Comment 8

[Adam Hauner]

To get the Talkback ID's go to your mozilla directory and go to components/,
there start talkback.exe, it'll give you a list with the IDs. Thank's a lot.

Comment 9

[coatzin]

TalkBack incident ID: TB7538151X

Comment 10

[Johnny Stenback (:jst)]

From talkback:

nsTextFrame::GetChildFrameContainingOffset [nsTextFrame.cpp, line 3882]
nsTextFrame::GetChildFrameContainingOffset [nsTextFrame.cpp, line 3857]
nsTextFrame::GetChildFrameContainingOffset [nsTextFrame.cpp, line 3889]
nsTextFrame::GetChildFrameContainingOffset [nsTextFrame.cpp, line 3857]
nsTextFrame::GetChildFrameContainingOffset [nsTextFrame.cpp, line 3889]
nsTextFrame::GetChildFrameContainingOffset [nsTextFrame.cpp, line 3857]
nsTextFrame::GetChildFrameContainingOffset [nsTextFrame.cpp, line 3889]
...

Over to Layout...

Comment 11

[Adam Hauner]

No dupes found, marking NEW.

Comment 12

[Kevin McCluskey (gone)]

-> Kin

Comment 13

[kinmoz]

*** This bug has been marked as a duplicate of 140256 ***