172916 - crash when trying to save an image [@ js_AllocStack]

Status: VERIFIED DUPLICATE of bug 172586

(Core :: XPConnect, defect)

Description

[Plasdom OnArs]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.2b) Gecko/20021005
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.2b) Gecko/20021005

browser crashes when I try to save an image from any website

Reproducible: Always

Steps to Reproduce:
1.goto website with an image (any website)
2.right click -> save image as
3.browser hangs 
4.click anywher and crash



Expected Results:  
presented a dialog box asking where to save image to and name

Comment 1

[Devoti Paolo]

may be dup of bug 172754

Comment 2

[Tomas Pihl]

Does not happen for me with 2002100608/WinXP.

Comment 3

[Adam Hauner]

Reporter: Could you provide TalkBack incident ID?
-> File Handling

Comment 4

[Plasdom OnArs]

How do I "provide TalkBack incident ID?"

Comment 5

[Adam Hauner]

If you are crashing in Mozilla the best thing you can do to help the developers
fix your bug is to attach a stacktrace. Mozilla releases nightly and milestone
builds with Netscape's Talkback (you can get latest build on:
http://ftp.mozilla.org/pub/mozilla/nightly/latest/) Talkback should catch most
crashes and offer to send in a crash report. Developers can retrieve that crash
report and attach it to your bug report if you provide either the Incident ID
(you can get it by running the talkback program from /components/talkback/).
Thanks for your help in testing Mozilla and reporting bugs.

Comment 6

[Plasdom OnArs]

I let Talkback send in a crash report during the first crash. Talkback crashed 
also the second time. Incident ID is TB12147430Y Captured at 10/6/2002 1:28pm

Comment 7

[Adam Hauner]

greer, should I ask you for TB12147430Y?

Comment 8

[greer]

Incident# 12147430
-----------------
Product ID  MozillaTrunk
Build ID 2002100508
Operating System Windows NT 5.0 build 2195
User Comments Right clicked to save and image from a website

Stack Trace
js_AllocStack [c:/builds/seamonkey/mozilla/js/src/jsinterp.c, line 377]
js_InternalInvoke [c:/builds/seamonkey/mozilla/js/src/jsinterp.c, line 921]
JS_CallFunctionValue [c:/builds/seamonkey/mozilla/js/src/jsapi.c, line 3433]
nsXPCWrappedJSClass::CallQueryInterfaceOnJSObject
[c:/builds/seamonkey/mozilla/js/src/xpconnect/src/xpcwrappedjsclass.cpp, line 265]
nsXPCWrappedJSClass::GetRootJSObject
[c:/builds/seamonkey/mozilla/js/src/xpconnect/src/xpcwrappedjsclass.cpp, line 597]
nsXPCWrappedJS::GetNewOrUsed
[c:/builds/seamonkey/mozilla/js/src/xpconnect/src/xpcwrappedjs.cpp, line 219]
XPCConvert::JSObject2NativeInterface
[c:/builds/seamonkey/mozilla/js/src/xpconnect/src/xpcconvert.cpp, line 1135]
nsXPConnect::WrapJS
[c:/builds/seamonkey/mozilla/js/src/xpconnect/src/nsXPConnect.cpp, line 587]
nsJSUtils::ConvertJSValToXPCObject
[c:/builds/seamonkey/mozilla/dom/src/base/nsJSUtils.cpp, line 125]
GlobalWindowImpl::GetObjectProperty
[c:/builds/seamonkey/mozilla/dom/src/base/nsGlobalWindow.cpp, line 3869]
nsContentTreeOwner::SetStatus
[c:/builds/seamonkey/mozilla/xpfe/appshell/src/nsContentTreeOwner.cpp, line 349]
nsWebShell::OnOverLink
[c:/builds/seamonkey/mozilla/docshell/base/nsWebShell.cpp, line 692]
nsGenericElement::TriggerLink
[c:/builds/seamonkey/mozilla/content/base/src/nsGenericElement.cpp, line 3103]
nsGenericHTMLElement::HandleDOMEventForAnchors
[c:/builds/seamonkey/mozilla/content/html/content/src/nsGenericHTMLElement.cpp,
line 1544]
nsHTMLAreaElement::HandleDOMEvent
[c:/builds/seamonkey/mozilla/content/html/content/src/nsHTMLAreaElement.cpp,
line 233]
nsGenericElement::HandleDOMEvent
[c:/builds/seamonkey/mozilla/content/base/src/nsGenericElement.cpp, line 2055]
nsHTMLImageElement::HandleDOMEvent
[c:/builds/seamonkey/mozilla/content/html/content/src/nsHTMLImageElement.cpp,
line 592]
nsEventStateManager::GenerateMouseEnterExit
[c:/builds/seamonkey/mozilla/content/events/src/nsEventStateManager.cpp, line 2487]
nsEventStateManager::PreHandleEvent
[c:/builds/seamonkey/mozilla/content/events/src/nsEventStateManager.cpp, line 396]
PresShell::HandleEventInternal
[c:/builds/seamonkey/mozilla/layout/html/base/src/nsPresShell.cpp, line 6215]
PresShell::HandleEvent
[c:/builds/seamonkey/mozilla/layout/html/base/src/nsPresShell.cpp, line 6143]
nsViewManager::HandleEvent
[c:/builds/seamonkey/mozilla/view/src/nsViewManager.cpp, line 2121]
nsView::HandleEvent [c:/builds/seamonkey/mozilla/view/src/nsView.cpp, line 301]
nsViewManager::DispatchEvent
[c:/builds/seamonkey/mozilla/view/src/nsViewManager.cpp, line 1932]
HandleEvent [c:/builds/seamonkey/mozilla/view/src/nsView.cpp, line 83]
nsWindow::DispatchEvent
[c:/builds/seamonkey/mozilla/widget/src/windows/nsWindow.cpp, line 1067]
nsWindow::DispatchWindowEvent
[c:/builds/seamonkey/mozilla/widget/src/windows/nsWindow.cpp, line 1084]
nsWindow::DispatchMouseEvent
[c:/builds/seamonkey/mozilla/widget/src/windows/nsWindow.cpp, line 5250]
ChildWindow::DispatchMouseEvent
[c:/builds/seamonkey/mozilla/widget/src/windows/nsWindow.cpp, line 5505]
nsWindow::ProcessMessage
[c:/builds/seamonkey/mozilla/widget/src/windows/nsWindow.cpp, line 3971]
nsWindow::WindowProc
[c:/builds/seamonkey/mozilla/widget/src/windows/nsWindow.cpp, line 1333]
USER32.DLL + 0x1d0a (0x77e11d0a)
USER32.DLL + 0x1bc8 (0x77e11bc8)
USER32.DLL + 0x72b4 (0x77e172b4)
nsAppShellService::Run
[c:/builds/seamonkey/mozilla/xpfe/appshell/src/nsAppShellService.cpp, line 472]
main1 [c:/builds/seamonkey/mozilla/xpfe/bootstrap/nsAppRunner.cpp, line 1538]
main [c:/builds/seamonkey/mozilla/xpfe/bootstrap/nsAppRunner.cpp, line 1886]
WinMain [c:/builds/seamonkey/mozilla/xpfe/bootstrap/nsAppRunner.cpp, line 1906]
WinMainCRTStartup()
KERNEL32.DLL + 0x1ca90 (0x77e9ca90) 

Comment 9

[timeless]

brendan   3.86 is interesting reading. I don't suppose ->script could have
similar problems to ->spbase

reporter: was this a fresh install? if not please try a fresh install, we've
finally tracked down the source of quite a few crashes to a build/xpconnect problem.

Comment 10

[Plasdom OnArs]

It was not a fresh unistall. I update almost everyday from the nightly builds. 
Will try a fresh install

Comment 11

[Phil Schwartau]

Reassigning to XPConnect for further analysis - is this really a
JS Engine issue, or is the problem occurring farther down the stack?

Comment 12

[Phil Schwartau]

Compare bug 172754
Crash when right clicking on "nbuser.gz" (http://81.91.66.90/lugdunum/nbuser.gz) 
and selecting "save link target as..."

and bug 172884 
crash with "save target as"

both marked as duplicates of 

bug 172158 
View Source -> File -> Save Page As.. Crashes browser
                                              [@ XPCWrappedNative::CallMethod]

which had this comment:

------- Additional Comment_ #15 From Nick Lott 2002-10-04 09:32 ------- 

Cool, that worked, and how! 
Deleting browser.xpt, mail.xpt, psm.xpt and compreg.dat fixes this bug,
plus bug 171441, bug 172339 AND bug 170465.

Someone might want to mark them as resolved or something as at least one
is a topcrash.


Could that be related to this report, too? I think that is the gist 
of timeless' Comment #9 above -

Comment 13

[Andrew Hagen]

Dupe of bug 172586, I think.

*** This bug has been marked as a duplicate of 172586 ***

Comment 14

[Phil Schwartau]

Looks right; marking Verified Duplicate -