18589 - [CRASH] Mozilla crashes loading this page

Status: VERIFIED DUPLICATE of bug 17798

(Core :: Layout, defect, P3)

Description

[Teruko Kobayashi]

At loading this URL page, Mozilla.exe will crash.

Steps of reproduce
1. Lanuch Mozilla.exe
2. Go to above URL

After for while, "Transfering from http://cnnenespanol.com" is displayed in
the status bar.  Then, it changed to "Document Done".  At that momment, Mozilla
crahes.

Stack trace Incident ID 634640

 Trigger Type:  Program Crash
 Trigger Reason:  Access violation
 Call Stack:    (Signature = ApplyRenderingChangeToTree d4dbefb6)
   ApplyRenderingChangeToTree
[d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp,
line 6559]
   nsCSSFrameConstructor::ProcessRestyledFrames
[d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp,
line 6700]
   nsCSSFrameConstructor::ContentStatesChanged
[d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp,
line 6835]
   StyleSetImpl::ContentStatesChanged
[d:\builds\seamonkey\mozilla\layout\base\src\nsStyleSet.cpp, line 982]
   PresShell::ContentStatesChanged
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 2020]
   nsDocument::ContentStatesChanged
[d:\builds\seamonkey\mozilla\layout\base\src\nsDocument.cpp, line 1495]
   nsEventStateManager::SetContentState
[d:\builds\seamonkey\mozilla\layout\events\src\nsEventStateManager.cpp, line
1522]
   nsHTMLAnchorElement::HandleDOMEvent
[d:\builds\seamonkey\mozilla\layout\html\content\src\nsHTMLAnchorElement.cpp,
line 357]
   nsGenericElement::HandleDOMEvent
[d:\builds\seamonkey\mozilla\layout\base\src\nsGenericElement.cpp, line 778]
   nsHTMLMapElement::HandleDOMEvent
[d:\builds\seamonkey\mozilla\layout\html\content\src\nsHTMLMapElement.cpp, line
362]
   nsGenericElement::HandleDOMEvent
[d:\builds\seamonkey\mozilla\layout\base\src\nsGenericElement.cpp, line 778]
   nsHTMLMapElement::HandleDOMEvent
[d:\builds\seamonkey\mozilla\layout\html\content\src\nsHTMLMapElement.cpp, line
362]
   nsGenericElement::HandleDOMEvent
[d:\builds\seamonkey\mozilla\layout\base\src\nsGenericElement.cpp, line 778]
   nsHTMLMapElement::HandleDOMEvent
[d:\builds\seamonkey\mozilla\layout\html\content\src\nsHTMLMapElement.cpp, line
362]
   nsGenericElement::HandleDOMEvent
[d:\builds\seamonkey\mozilla\layout\base\src\nsGenericElement.cpp, line 778]
   nsHTMLMapElement::HandleDOMEvent
[d:\builds\seamonkey\mozilla\layout\html\content\src\nsHTMLMapElement.cpp, line
362]
   nsGenericElement::HandleDOMEvent
[d:\builds\seamonkey\mozilla\layout\base\src\nsGenericElement.cpp, line 778]
   nsHTMLMapElement::HandleDOMEvent
[d:\builds\seamonkey\mozilla\layout\html\content\src\nsHTMLMapElement.cpp, line
362]
   nsGenericElement::HandleDOMEvent
[d:\builds\seamonkey\mozilla\layout\base\src\nsGenericElement.cpp, line 778]
   nsHTMLMapElement::HandleDOMEvent
[d:\builds\seamonkey\mozilla\layout\html\content\src\nsHTMLMapElement.cpp, line
362]
   nsGenericElement::HandleDOMEvent
[d:\builds\seamonkey\mozilla\layout\base\src\nsGenericElement.cpp, line 778]
   nsHTMLMapElement::HandleDOMEvent
[d:\builds\seamonkey\mozilla\layout\html\content\src\nsHTMLMapElement.cpp, line
362]
   nsGenericElement::HandleDOMEvent
[d:\builds\seamonkey\mozilla\layout\base\src\nsGenericElement.cpp, line 778]
   nsHTMLMapElement::HandleDOMEvent
[d:\builds\seamonkey\mozilla\layout\html\content\src\nsHTMLMapElement.cpp, line
362]
   PresShell::HandleEvent
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 2409]
   nsView::HandleEvent
[d:\builds\seamonkey\mozilla\view\src\nsView.cpp, line 838]
   nsView::HandleEvent
[d:\builds\seamonkey\mozilla\view\src\nsView.cpp, line 823]
   nsView::HandleEvent
[d:\builds\seamonkey\mozilla\view\src\nsView.cpp, line 823]
   nsView::HandleEvent
[d:\builds\seamonkey\mozilla\view\src\nsView.cpp, line 823]
   nsViewManager::DispatchEvent
[d:\builds\seamonkey\mozilla\view\src\nsViewManager.cpp, line 1743]
   HandleEvent
[d:\builds\seamonkey\mozilla\view\src\nsView.cpp, line 67]
   nsWindow::DispatchEvent
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 411]
   nsWindow::DispatchWindowEvent
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 428]
   nsWindow::DispatchMouseEvent
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 3426]
   ChildWindow::DispatchMouseEvent
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 3642]
   nsWindow::ProcessMessage
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 2624]
   nsWindow::WindowProc
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 586]
   USER32.dll + 0x1186 (0x77e41186)
   0x01d60132

I got this stack trace info by using 110909M11 Win32 build.  I tested 111017
M11 build.  It also crashes. I could not get the stack trace.

I tested 110916 M11 Mac Commercial build. Mozilla will crash.
I tested 111017 M11 Linux Commercial build.  Mozilla does not crash. However the
status bar says "Document Done", but it keep loading.

Comment 1

[troy]

*** This bug has been marked as a duplicate of 17798 ***

Comment 2

[Chris Petersen]

Agreed. Marking as verfied dup of 17798.