178781 - printing from cnn causes crash in [@ nsBlockFrame::Destroy ] [@ nsGfxScrollFrame::Destroy]

Status: RESOLVED WORKSFORME

(Core :: Printing: Output, defect, P1)

Description

[Tom Everingham]

Overview Description:  Printing from cnn site causes crash in nsBlockFrame::Destroy

Steps to Reproduce:
1.)  Load url
2.)  Click File | Print

Build Date & Platform Bug Found:  Win NT4 trunk, 2002110610.  Also 11/02 build.

Additional Builds and Platforms Tested On:  crashes on mac osX   11/01/02 trunk

Additional Information:  I can easily reproduce this from other cnn pages but
have not been able to reproduce it on other news sites.  There is one other
report in talkback on this (win NT5).  

Stack Sig from talkback: 

nsBlockFrame::Destroy
[d:/builds/seamonkey/mozilla/layout/html/base/src/nsBlockFrame.cpp, line 419] 
nsFrameList::DestroyFrames
[d:/builds/seamonkey/mozilla/layout/base/src/nsFrameList.cpp, line 131] 
nsContainerFrame::Destroy
[d:/builds/seamonkey/mozilla/layout/html/base/src/nsContainerFrame.cpp, line 140] 
nsBoxFrame::SetDebug
[d:/builds/seamonkey/mozilla/layout/xul/base/src/nsBoxFrame.cpp, line 1122] 
nsFrameList::DestroyFrames
[d:/builds/seamonkey/mozilla/layout/base/src/nsFrameList.cpp, line 131] 
nsContainerFrame::Destroy
[d:/builds/seamonkey/mozilla/layout/html/base/src/nsContainerFrame.cpp, line 140] 
nsBoxFrame::SetDebug
[d:/builds/seamonkey/mozilla/layout/xul/base/src/nsBoxFrame.cpp, line 1122] 
nsGfxScrollFrame::Destroy
[d:/builds/seamonkey/mozilla/layout/html/base/src/nsGfxScrollFrame.cpp, line 468] 
nsFrameList::DestroyFrames
[d:/builds/seamonkey/mozilla/layout/base/src/nsFrameList.cpp, line 131] 
nsContainerFrame::Destroy
[d:/builds/seamonkey/mozilla/layout/html/base/src/nsContainerFrame.cpp, line 140] 
nsBoxFrame::SetDebug
[d:/builds/seamonkey/mozilla/layout/xul/base/src/nsBoxFrame.cpp, line 1122] 
nsTextControlFrame::Destroy
[d:/builds/seamonkey/mozilla/layout/html/forms/src/nsTextControlFrame.cpp, line
1438] 
nsLineBox::DeleteLineList
[d:/builds/seamonkey/mozilla/layout/html/base/src/nsLineBox.cpp, line 308] 
nsBlockFrame::Destroy
[d:/builds/seamonkey/mozilla/layout/html/base/src/nsBlockFrame.cpp, line 415] 
nsFrameList::DestroyFrames
[d:/builds/seamonkey/mozilla/layout/base/src/nsFrameList.cpp, line 131] 
nsContainerFrame::Destroy
[d:/builds/seamonkey/mozilla/layout/html/base/src/nsContainerFrame.cpp, line 140] 
nsFrameList::DestroyFrames
[d:/builds/seamonkey/mozilla/layout/base/src/nsFrameList.cpp, line 131] 
nsContainerFrame::Destroy
[d:/builds/seamonkey/mozilla/layout/html/base/src/nsContainerFrame.cpp, line 140] 
nsFrameList::DestroyFrames
[d:/builds/seamonkey/mozilla/layout/base/src/nsFrameList.cpp, line 131] 
nsContainerFrame::Destroy
[d:/builds/seamonkey/mozilla/layout/html/base/src/nsContainerFrame.cpp, line 140] 
nsFrameList::DestroyFrames
[d:/builds/seamonkey/mozilla/layout/base/src/nsFrameList.cpp, line 131] 
nsContainerFrame::Destroy
[d:/builds/seamonkey/mozilla/layout/html/base/src/nsContainerFrame.cpp, line 140] 
nsTableFrame::~nsTableFrame
[d:/builds/seamonkey/mozilla/layout/html/table/src/nsTableFrame.cpp, line 308] 
nsFrameList::DestroyFrames
[d:/builds/seamonkey/mozilla/layout/base/src/nsFrameList.cpp, line 131] 
nsContainerFrame::Destroy
[d:/builds/seamonkey/mozilla/layout/html/base/src/nsContainerFrame.cpp, line 140] 
nsTableCaptionFrame::~nsTableCaptionFrame
[d:/builds/seamonkey/mozilla/layout/html/table/src/nsTableOuterFrame.cpp, line 77] 
nsLineBox::DeleteLineList
[d:/builds/seamonkey/mozilla/layout/html/base/src/nsLineBox.cpp, line 308] 
nsBlockFrame::SetOverflowLines
[d:/builds/seamonkey/mozilla/layout/html/base/src/nsBlockFrame.cpp, line 4805] 
DestroyPropertyEnumerator
[d:/builds/seamonkey/mozilla/layout/html/base/src/nsFrameManager.cpp, line 2689] 
PL_DHashTableEnumerate [d:/builds/seamonkey/mozilla/xpcom/ds/pldhash.c, line 602] 
FrameManager::PropertyList::Destroy
[d:/builds/seamonkey/mozilla/layout/html/base/src/nsFrameManager.cpp, line 2699] 
FrameManager::DestroyPropertyList
[d:/builds/seamonkey/mozilla/layout/html/base/src/nsFrameManager.cpp, line 2394] 
FrameManager::Destroy
[d:/builds/seamonkey/mozilla/layout/html/base/src/nsFrameManager.cpp, line 522] 
PresShell::Destroy
[d:/builds/seamonkey/mozilla/layout/html/base/src/nsPresShell.cpp, line 1856] 
nsPrintObject::DestroyPresentation
[d:/builds/seamonkey/mozilla/content/base/src/nsPrintObject.cpp, line 110] 
nsPrintEngine::SetupToPrintContent
[d:/builds/seamonkey/mozilla/content/base/src/nsPrintEngine.cpp, line 2456] 
js_compare_atom_keys [d:/builds/seamonkey/mozilla/js/src/jsatom.c, line 146]

Comment 1

[rods (gone)]

stack trace looks like a chris bug

Comment 2

[Olivier Cahagne]

also crashing build 20021226 on Linux.

#0  0x087bda58 in ?? ()
#1  0x41ac06c7 in nsGfxScrollFrame::Destroy (this=0x8e762e4, 
    aPresContext=0x8ba7e50) at nsGfxScrollFrame.cpp:462
#2  0x41bf1699 in nsFrameList::DestroyFrames (this=0x8e7605c, 
    aPresContext=0x8ba7e50) at nsFrameList.cpp:130
#3  0x41aa833d in nsContainerFrame::Destroy (this=0x8e76028, 
    aPresContext=0x8ba7e50) at nsContainerFrame.cpp:142

dupe of bug 134481 ?

Comment 3

[Kevin McCluskey (gone)]

-> jkeiser

Comment 4

[Olivier Cahagne]

wfm using build 2003020204 on Win2k, can anyone still reproduce with a recent
nightly build ?

Comment 5

[Mats Palmgren (inactive)]

WFM, 2003-11-10-05 trunk Linux

Comment 6

[Mats Palmgren (inactive)]

WFM, Mozilla 1.6a and 2003-11-19-08 trunk on Windows 98 SE.
WFM, Mozilla 2003-11-10-05 trunk on Linux.

-> WORKSFORME