185799 - Mozilla suddenly quits when it calculates the rendering of the Print Preview [@ nsSplittableFrame::Destroy ][@ nsSplittableFrame::RemoveFromFlow ]

Status: VERIFIED DUPLICATE of bug 140948

(Core :: Print Preview, defect)

Description

[lcdn]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; it-IT; rv:1.2.1) Gecko/20021130
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; it-IT; rv:1.2.1) Gecko/20021130

At this URL:
http://hal9000.cisi.unito.it/wf/FACOLTA/Scuola-Uni1/TELECOMUNI/BIOTEC-I-LIVELLO.doc_cvt.htm
you ask the Print Preview, Mozilla shows an alert saying it's rendering the page,
then it suddenly quits without any warning/error message.

Reproducible: Always

Steps to Reproduce:
1.Go to the URL:
http://hal9000.cisi.unito.it/wf/FACOLTA/Scuola-Uni1/TELECOMUNI/BIOTEC-I-LIVELLO.doc_cvt.htm
2.Select Print Preview from File Menu
3.

Actual Results:  
Mozilla quits.

Expected Results:  
It should have displayed the Print Preview of the Page at
http://hal9000.cisi.unito.it/wf/FACOLTA/Scuola-Uni1/TELECOMUNI/BIOTEC-I-LIVELLO.doc_cvt.htm

The theme used was Modern. I couldn't verify if happens with the normal theme,s
sorry. I used Red Hat 7.3.

Comment 1

[Olivier Cahagne]

confirming using build 20021206 on Win2k: TB15199439Z.

Comment 2

[Matthias Versen [:Matti]]

Attachment: stack trace win2k debug

I get many assertions first :
###!!! ASSERTION: bad height: 'Not Reached', file
d:/moz_source/gmake/mozilla/la
yout/html/base/src/nsLineLayout.cpp, line 250

and switching to landscape (i get also many assertions) results in a crash

Comment 3

[Olivier Cahagne]

similar stack on Linux 20021203

#0  0xdddddddd in ?? ()
#1  0x41afc02a in nsSplittableFrame::Destroy (this=0x8aef898, 
    aPresContext=0x8853f48) at nsSplittableFrame.cpp:68
#2  0x41a9a056 in nsContainerFrame::Destroy (this=0x8aef898, 
    aPresContext=0x8853f48) at nsContainerFrame.cpp:145
#3  0x41a84e3b in nsBlockFrame::Destroy (this=0x8aef898, 
    aPresContext=0x8853f48) at nsBlockFrame.cpp:425
#4  0x41be2a59 in nsFrameList::DestroyFrames (this=0x8aef86c, 
    aPresContext=0x8853f48) at nsFrameList.cpp:130
[...]

Comment 4

[Olivier Cahagne]

*** This bug has been marked as a duplicate of 140948 ***

Comment 5

[sujay]

verified.