158202 - crash opening venkman and closing navigator - Trunk [@ nsXULElement::GetOwnerDocument]

Status: VERIFIED FIXED

(Core :: XUL, defect)

Description

[timeless]

Incident ID 8454510
 Stack Signature    nsXULElement::GetOwnerDocument 4c8cb4bc
 Product ID         MozillaTrunk
 Build ID           2002071813
 Trigger Time       2002-07-18 15:32:39
 Platform           Win32
 Operating System   Windows NT 5.0 build 2195
 Module             gkcontent.dll
 URL visited        opening venkman and closing navigator
 Trigger Reason     Access violation
 Source File Name
c:/builds/seamonkey/mozilla/content/xul/content/src/nsXULElement.cpp
 Trigger Line No.   931
 Stack Trace
nsXULElement::GetOwnerDocument 
[c:/builds/seamonkey/mozilla/content/xul/content/src/nsXULElement.cpp, line 931] 
nsContentUtils::CheckSameOrigin 
[c:/builds/seamonkey/mozilla/content/base/src/nsContentUtils.cpp, line 426] 
nsXULElement::InsertBefore 
[c:/builds/seamonkey/mozilla/content/xul/content/src/nsXULElement.cpp, line 992] 
XPTC_InvokeByIndex 
[c:/builds/seamonkey/mozilla/xpcom/reflect/xptcall/src/md/win32/xptcinvoke.cpp, 
line 106] 
XPCWrappedNative::CallMethod 
[c:/builds/seamonkey/mozilla/js/src/xpconnect/src/xpcwrappednative.cpp, line 
1996] 
XPC_WN_CallMethod 
[c:/builds/seamonkey/mozilla/js/src/xpconnect/src/xpcwrappednativejsops.cpp, 
line 1267] 
js_Invoke [c:/builds/seamonkey/mozilla/js/src/jsinterp.c, line 790] 
js_Interpret [c:/builds/seamonkey/mozilla/js/src/jsinterp.c, line 2744] 
js_Invoke [c:/builds/seamonkey/mozilla/js/src/jsinterp.c, line 806] 
js_Interpret [c:/builds/seamonkey/mozilla/js/src/jsinterp.c, line 2744] 
js_Invoke [c:/builds/seamonkey/mozilla/js/src/jsinterp.c, line 806] 
js_Interpret [c:/builds/seamonkey/mozilla/js/src/jsinterp.c, line 2744] 
js_Invoke [c:/builds/seamonkey/mozilla/js/src/jsinterp.c, line 806] 
js_Interpret [c:/builds/seamonkey/mozilla/js/src/jsinterp.c, line 2744] 
js_Invoke [c:/builds/seamonkey/mozilla/js/src/jsinterp.c, line 806] 
js_Interpret [c:/builds/seamonkey/mozilla/js/src/jsinterp.c, line 2744] 
js_Invoke [c:/builds/seamonkey/mozilla/js/src/jsinterp.c, line 806] 
js_Interpret [c:/builds/seamonkey/mozilla/js/src/jsinterp.c, line 2744] 
js_Invoke [c:/builds/seamonkey/mozilla/js/src/jsinterp.c, line 806] 
js_Interpret [c:/builds/seamonkey/mozilla/js/src/jsinterp.c, line 2744] 
js_Invoke [c:/builds/seamonkey/mozilla/js/src/jsinterp.c, line 806] 
js_InternalInvoke [c:/builds/seamonkey/mozilla/js/src/jsinterp.c, line 881] 
JS_CallFunctionValue [c:/builds/seamonkey/mozilla/js/src/jsapi.c, line 3430] 
nsJSContext::CallEventHandler 
[c:/builds/seamonkey/mozilla/dom/src/base/nsJSEnvironment.cpp, line 1045] 
nsJSEventListener::HandleEvent 
[c:/builds/seamonkey/mozilla/dom/src/events/nsJSEventListener.cpp, line 184] 
nsEventListenerManager::HandleEventSubType 
[c:/builds/seamonkey/mozilla/content/events/src/nsEventListenerManager.cpp, line
1222] 
nsEventListenerManager::HandleEvent 
[c:/builds/seamonkey/mozilla/content/events/src/nsEventListenerManager.cpp, line 
1904] 
GlobalWindowImpl::HandleDOMEvent 
[c:/builds/seamonkey/mozilla/dom/src/base/nsGlobalWindow.cpp, line 763] 
DocumentViewerImpl::LoadComplete 
[c:/builds/seamonkey/mozilla/content/base/src/nsDocumentViewer.cpp, line 1561] 
nsDocShell::EndPageLoad 
[c:/builds/seamonkey/mozilla/docshell/base/nsDocShell.cpp, line 4123] 
nsWebShell::EndPageLoad 
[c:/builds/seamonkey/mozilla/docshell/base/nsWebShell.cpp, line 723] 
nsDocShell::OnStateChange 
[c:/builds/seamonkey/mozilla/docshell/base/nsDocShell.cpp, line 4037] 
nsDocLoaderImpl::FireOnStateChange 
[c:/builds/seamonkey/mozilla/uriloader/base/nsDocLoader.cpp, line 1218] 
nsDocLoaderImpl::doStopDocumentLoad 
[c:/builds/seamonkey/mozilla/uriloader/base/nsDocLoader.cpp, line 870] 
nsDocLoaderImpl::DocLoaderIsEmpty 
[c:/builds/seamonkey/mozilla/uriloader/base/nsDocLoader.cpp, line 768] 
nsDocLoaderImpl::OnStopRequest 
[c:/builds/seamonkey/mozilla/uriloader/base/nsDocLoader.cpp, line 699] 
nsLoadGroup::RemoveRequest 
[c:/builds/seamonkey/mozilla/netwerk/base/src/nsLoadGroup.cpp, line 703] 
nsCachedChromeChannel::HandleStopLoadEvent 
[c:/builds/seamonkey/mozilla/rdf/chrome/src/nsChromeProtocolHandler.cpp, line
481] 
PL_HandleEvent [c:/builds/seamonkey/mozilla/xpcom/threads/plevent.c, line 597] 
PL_ProcessPendingEvents [c:/builds/seamonkey/mozilla/xpcom/threads/plevent.c, 
line 530] 
_md_EventReceiverProc [c:/builds/seamonkey/mozilla/xpcom/threads/plevent.c, line 
1078] 
nsAppShellService::Run 
[c:/builds/seamonkey/mozilla/xpfe/appshell/src/nsAppShellService.cpp, line 452] 
main1 [c:/builds/seamonkey/mozilla/xpfe/bootstrap/nsAppRunner.cpp, line 1527] 
main [c:/builds/seamonkey/mozilla/xpfe/bootstrap/nsAppRunner.cpp, line 1874] 
WinMain [c:/builds/seamonkey/mozilla/xpfe/bootstrap/nsAppRunner.cpp, line 1892] 
WinMainCRTStartup() 
KERNEL32.DLL + 0x7903 (0x77e87903) 

reproducable, yes: TB8454556Q
steps:
tools>web..>...debugger
click [x] on navigator

Comment 1

[timeless]

sicking appears to own those lines :)

Comment 2

[Jonas Sicking (:sicking) No longer reading bugmail consistently]

yes, i'm on it

Comment 3

[Jonas Sicking (:sicking) No longer reading bugmail consistently]

Attachment: patch to fix

Comment 4

[Johnny Stenback (:jst)]

Comment on attachment 91894 [details] [diff] [review]
patch to fix

sr=jst

Comment 5

[Boris Zbarsky [:bzbarsky]]

Comment on attachment 91894 [details] [diff] [review]
patch to fix

r=bzbarsky

Comment 6

[timeless]

*** Bug 158204 has been marked as a duplicate of this bug. ***

Comment 7

[Scott Collins]

Comment on attachment 91894 [details] [diff] [review]
patch to fix

a=scc for checkin to the mozilla trunk

Comment 8

[timeless]

note that this bug results in dom inspector crashing if you try to inspect a
window, i also crashed trying to use the xbl test suite and doing a few other
things. I'd like this fix to be checked in and generate a respin before the tree
opens.

Comment 9

[timeless]

checked in w/ approval for closed tree checkin from scc,jj and jesup

Comment 10

[Matthias Versen [:Matti]]

*** Bug 158340 has been marked as a duplicate of this bug. ***

Comment 11

[ly nguyen]

just fixed the stack sig (white space) so talkback can register bug number.

Comment 12

[Jay Patel [:jay]]

Adding topcrash info for future reference.

Comment 13

[Tracy Walker [:tracy]]

no longer seeing the crash reported in 158167, same stack right?
as seen on respins:

windows 2002-07-19-11-trunk
linux 2002-07-19-11-trunk
max osx 2002-07-19-11-trunk

marking verified

Comment 14

[Boris Zbarsky [:bzbarsky]]

*** Bug 158360 has been marked as a duplicate of this bug. ***

Comment 15

[Jonas Sicking (:sicking) No longer reading bugmail consistently]

*** Bug 158432 has been marked as a duplicate of this bug. ***

Comment 16

[laurel]

*** Bug 158685 has been marked as a duplicate of this bug. ***