Closed Bug 195099 Opened 21 years ago Closed 21 years ago

clicking close window link in pop-up crashes browser

Categories

(Core :: JavaScript Engine, defect)

x86
Windows XP
defect
Not set
critical

Tracking

()

VERIFIED DUPLICATE of bug 174579

People

(Reporter: panemec, Assigned: rogerl)

References

()

Details

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.3b) Gecko/20030210
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.3b) Gecko/20030210

I suspect the culprit is:

<a href="javascript: self.close();"OnClick="self.close();">Close Window</a>


Reproducible: Always

Steps to Reproduce:
1.  Open URL above
2.  click "Show Larger Photo" link
3.  click "Close Window" link

Actual Results:  
browser crashes

Expected Results:  
window closes

manually closing the window (not using the link) works fine

This isn't limited to that URL - I've gotten it to crash on many different
places at that site...
very difficult to trigger the crash (for me):

stack from an optimized with symbols :
00000000()
OnLinkClickEvent::OnLinkClickEvent(OnLinkClickEvent * const 0x00000001,
nsWebShell * 0x03a3c380, nsIContent * 0x03b06398, nsLinkVerb eLinkVerb_Replace,
nsIURI * 0x039eab18, const unsigned short * 0x0012f634, nsIInputStream *
0x00000000, nsIInputStream * 0x00000000) line 507
nsWebShell::OnLinkClick(nsWebShell * const 0x03a3c4c4, nsIContent * 0x03b06398,
nsLinkVerb eLinkVerb_Replace, nsIURI * 0x039eab18, const unsigned short *
0x0012f634, nsIInputStream * 0x00000000, nsIInputStream * 0x00000000) line 544 +
49 bytes
nsGenericElement::TriggerLink(nsGenericElement * const 0x00000001,
nsIPresContext * 0x03afa020, nsLinkVerb eLinkVerb_Replace, nsIURI * 0x01bb13cc
const  nsWebShell::`vftable'{for `nsILinkHandler'}, const nsAString & {...},
const nsAFlatString & {...}, int 1) line 3010
nsGenericHTMLElement::HandleDOMEventForAnchors(nsGenericHTMLElement * const
0x00000001, nsIContent * 0x03b06398, nsIPresContext * 0x03afa020, nsEvent *
0x035910a0, nsIDOMEvent * * 0x00000000, unsigned int 61891520, nsEventStatus *
0x0012f988) line 1528 + 30 bytes
nsHTMLAnchorElement::HandleDOMEvent(nsHTMLAnchorElement * const 0x03b06398,
nsIPresContext * 0x03afa020, nsEvent * 0x0012f7c0, nsIDOMEvent * * 0x00000000,
unsigned int 1, nsEventStatus * 0x0012f988) line 355
PresShell::HandleEventInternal(PresShell * const 0x00000001, nsEvent *
0x00000000, nsIView * 0x00000000, unsigned int 1, nsEventStatus * 0x0012f988)
line 6226 + 19 bytes
PresShell::HandleEventWithTarget(PresShell * const 0x0397c550, nsEvent *
0x0012f7c0, nsIFrame * 0x03acc0a4, nsIContent * 0x03b06398, unsigned int 1,
nsEventStatus * 0x0012f988) line 6196
nsEventStateManager::CheckForAndDispatchClick(nsEventStateManager * const
0x00000001, nsIPresContext * 0x03afa020, nsMouseEvent * 0x0397c550,
nsEventStatus * 0x0012f988) line 2851
nsEventStateManager::PostHandleEvent(nsEventStateManager * const 0x03af69e0,
nsIPresContext * 0x03afa020, nsEvent * 0x0012fa58, nsIFrame * 0x03acc0a4,
nsEventStatus * 0x0012f988, nsIView * 0x03ab28a0) line 1847 + 15 bytes
PresShell::HandleEventInternal(PresShell * const 0x00000001, nsEvent *
0x00000000, nsIView * 0x03ab28a0, unsigned int 1, nsEventStatus * 0x0012f988)
line 6262 + 23 bytes
PresShell::HandleEvent(PresShell * const 0x0397c550, nsIView * 0x03ab28a0,
nsGUIEvent * 0x0012fa58, nsEventStatus * 0x0012f988, int 0, int & 22760144) line
6150 + 19 bytes
nsViewManager::HandleEvent(nsViewManager * const 0x00000001, nsView *
0x00000000, nsGUIEvent * 0x0012fa58, int 0) line 2208
nsView::HandleEvent(nsView * const 0x00000001, nsViewManager * 0x039cf2d8,
nsGUIEvent * 0x0012fa58, int 0) line 309
nsViewManager::DispatchEvent(nsViewManager * const 0x039cf2d8, nsGUIEvent *
0x038bb868, nsEventStatus * 0x0012fa04) line 1938 + 30 bytes
HandleEvent(nsGUIEvent * 0x0012fa58) line 83
nsWindow::DispatchEvent(nsWindow * const 0x03a6415c, nsGUIEvent * 0x0012fa58,
nsEventStatus & nsEventStatus_eIgnore) line 1147 + 3 bytes
nsWindow::DispatchWindowEvent(nsWindow * const 0x00000001, nsGUIEvent *
0x00000000) line 1168
nsWindow::DispatchMouseEvent(nsWindow * const 0x00000001, unsigned int 301,
unsigned int 0, nsPoint * 0x00000000) line 5408
ChildWindow::DispatchMouseEvent(ChildWindow * const 0x00000001, unsigned int
301, unsigned int 0, nsPoint * 0x00000000) line 5662 + 19 bytes
nsWindow::ProcessMessage(nsWindow * const 0x00000001, unsigned int 514, unsigned
int 0, long 28508294, long * 0x0012fd10) line 4163 + 17 bytes
nsWindow::WindowProc(HWND__ * 0x0012041a, unsigned int 0, unsigned int 0, long
61227356) line 1434 + 16 bytes
USER32! 77e2a290()
USER32! 77e045b1()
USER32! 77e0a752()
nsAppShellService::Run(nsAppShellService * const 0x00e586b0) line 480
main1(int 0, char * * 0x00243da8, nsISupports * 0x00000000) line 1273 + 9 bytes
main(int 3, char * * 0x00243da8) line 1636 + 22 bytes
WinMain(HINSTANCE__ * 0x00400000, HINSTANCE__ * 0x00400000, char * 0x001337f6,
HINSTANCE__ * 0x00400000) line 1659 + 23 bytes
MOZILLA! WinMainCRTStartup + 308 bytes
KERNEL32! 77e8ca90()

*** This bug has been marked as a duplicate of 174579 ***
Status: UNCONFIRMED → RESOLVED
Closed: 21 years ago
Resolution: --- → DUPLICATE
Verified dupe: same stack trace. Matti: thanks!

Philip: thank you for this report. You have been cc'ed on the
duplicate bug so you can follow progress on this issue -
Status: RESOLVED → VERIFIED
You need to log in before you can comment on or make changes to this bug.