155259 - crash

Status: RESOLVED FIXED

(Core :: Layout, defect)

Description

[harishd]

Every time I try to view p3p privacy policy ( PageInfo->Privacy->Summary ), 
with my debug commercial build, I get the following crash:

nsContentList::IsDescendantOfRoot(nsIContent * 0x00000000) line 914 + 27 bytes
nsContentList::ContentRemoved(nsContentList * const 0x046d2d90, nsIDocument * 
0x046ec028, nsIContent * 0x00000000, nsIContent * 0x046d4090, int 0) line 706 + 
15 bytes
nsDocument::ContentRemoved(nsDocument * const 0x046ec028, nsIContent * 
0x00000000, nsIContent * 0x046d4090, int 0) line 2152
nsHTMLDocument::ContentRemoved(nsHTMLDocument * const 0x046ec028, nsIContent * 
0x00000000, nsIContent * 0x046d4090, int 0) line 1442
nsDocument::ResetToURI(nsDocument * const 0x046ec028, nsIURI * 0x043256a8, 
nsILoadGroup * 0x0473ad00) line 746
nsHTMLDocument::ResetToURI(nsHTMLDocument * const 0x046ec028, nsIURI * 
0x043256a8, nsILoadGroup * 0x0473ad00) line 424 + 17 bytes
nsDocument::Reset(nsDocument * const 0x046ec028, nsIChannel * 0x046d1308, 
nsILoadGroup * 0x0473ad00) line 706 + 28 bytes
XSLTProcessor::TransformDocument(XSLTProcessor * const 0x046c5008, nsIDOMNode * 
0x043ecac4, nsIDOMNode * 0x043efae4, nsIDOMDocument * 0x046ec02c, 
nsITransformObserver * 0x00000000) line 2366 + 62 bytes
XPTC_InvokeByIndex(nsISupports * 0x046c5008, unsigned int 3, unsigned int 4, 
nsXPTCVariant * 0x0012d528) line 106
XPCWrappedNative::CallMethod(XPCCallContext & {...}, XPCWrappedNative::CallMode 
CALL_METHOD) line 1994 + 42 bytes
XPC_WN_CallMethod(JSContext * 0x046c76d8, JSObject * 0x0422ed60, unsigned int 
4, long * 0x0474bf70, long * 0x0012d804) line 1266 + 14 bytes
js_Invoke(JSContext * 0x046c76d8, unsigned int 4, unsigned int 0) line 788 + 23 
bytes
js_Interpret(JSContext * 0x046c76d8, long * 0x0012e644) line 2743 + 15 bytes
js_Invoke(JSContext * 0x046c76d8, unsigned int 1, unsigned int 2) line 805 + 13 
bytes
js_InternalInvoke(JSContext * 0x046c76d8, JSObject * 0x0422f408, long 69400936, 
unsigned int 0, unsigned int 1, long * 0x0012e89c, long * 0x0012e76c) line 880 
+ 20 bytes
JS_CallFunctionValue(JSContext * 0x046c76d8, JSObject * 0x0422f408, long 
69400936, unsigned int 1, long * 0x0012e89c, long * 0x0012e76c) line 3428 + 31 
bytes
nsJSContext::CallEventHandler(nsJSContext * const 0x046c7588, void * 
0x0422f408, void * 0x0422f968, unsigned int 1, void * 0x0012e89c, int * 
0x0012e8a0, int 0) line 1042 + 33 bytes
nsJSEventListener::HandleEvent(nsJSEventListener * const 0x046ec938, 
nsIDOMEvent * 0x0474bc40) line 182 + 77 bytes
nsEventListenerManager::HandleEventSubType(nsListenerStruct * 0x046ec9f8, 
nsIDOMEvent * 0x0474bc40, nsIDOMEventTarget * 0x046c6f18, unsigned int 1, 
unsigned int 7) line 1221 + 20 bytes
nsEventListenerManager::HandleEvent(nsEventListenerManager * const 0x046edd08, 
nsIPresContext * 0x046b7028, nsEvent * 0x0012f03c, nsIDOMEvent * * 0x0012eff8, 
nsIDOMEventTarget * 0x046c6f18, unsigned int 7, nsEventStatus * 0x0012f064) 
line 1901 + 36 bytes
GlobalWindowImpl::HandleDOMEvent(GlobalWindowImpl * const 0x046c6f08, 
nsIPresContext * 0x046b7028, nsEvent * 0x0012f03c, nsIDOMEvent * * 0x0012eff8, 
unsigned int 1, nsEventStatus * 0x0012f064) line 745
DocumentViewerImpl::LoadComplete(DocumentVie

Comment 1

[Boris Zbarsky [:bzbarsky]]

Attachment: This should fix it

Comment 2

[Boris Zbarsky [:bzbarsky]]

Attachment: More like this, actually.

Comment 3

[harishd]

Comment on attachment 89842 [details] [diff] [review]
More like this, actually.

r=harishd

Comment 4

[jag (Peter Annema)]

Comment on attachment 89842 [details] [diff] [review]
More like this, actually.

Could you change "Passing the document ... a little pointless..." to "We could
pass the document into this method instead of trying to get it from aContainer,
but that seems a little pointless just to run this debug-only integrity check"

sr=jag

Comment 5

[Boris Zbarsky [:bzbarsky]]

fixed.