196008 - crash when dynamically creating iframe using js+DOM (except when debugging step-by-step)

Status: RESOLVED FIXED

(Core :: Layout: Images, Video, and HTML Frames, defect)

Description

[sguazt]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.3b) Gecko/20030211
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.3b) Gecko/20030211

I have a page that when pressed a specified button create an IFrame using
Javascript+DOM; with Mozilla 1.3a all worked; instead with Mozilla 1.3b when
I press that button Mozilla crashes and exits.
I've tried to debug with the JS Debugger and I've noticed that running in
step-by-step mode all works; instead running in "Continue" mode Mozilla
crashes too.
In the attachment I have include an example.

Reproducible: Always

Steps to Reproduce:
1.
2.
3.

Comment 1

[sguazt]

Attachment: Test Case

Uncompressing the attachment ("gzip -dc iframe.tgz | tar xvf -")
the directory "iframe" will be created.
Load "main.html" and then click on "Show Details" button.
An IFrame at the bottom of the page should appear; however with
Mozilla 1.3b, the browser crashes and exits.

Comment 2

[José Jeria]

WFM 2003030208, Windows 2000.

Comment 3

[Andrew Schultz]

Attachment: stacktrace (gtk2)

(gdb) frame 7
#7  0x415db69d in nsWindow::SetCursor(nsCursor) (this=0xbfffab38,
aCursor=3221203644) at nsWindow.cpp:749
749		    gdk_window_set_cursor(GTK_WIDGET(mContainer)->window,
newCursor);
(gdb) p newCursor
$1 = (_GdkCursor *) 0xfffffffc
(gdb) p mContainer
$2 = (_MozContainer *) 0x0
(gdb) p mDrawingarea
$3 = (_MozDrawingarea *) 0x0

Comment 4

[Andrew Schultz]

I don't crash with a default build (20030304 and 1.3b), but got the attached
stack with a trunk CVS/gtk2 build.

sguazt: are you using a gtk2 build?

Comment 5

[sguazt]

I'm using a GTK2 binary version downloaded from:
http://ftp.mozilla.org/pub/mozilla/releases/mozilla1.3b/Red_Hat_8x_RPMS/gtk2/i3
86/

Comment 6

[Olivier Cahagne]

wfm using build 2003030408 (trunk) on Win2k.

Comment 7

[Christopher Blizzard (:blizzard)]

Yep, crash confirmed.

Comment 8

[Andrew Schultz]

==> blizzard

Comment 9

[Christopher Blizzard (:blizzard)]

Attachment: patch

Simple crash fix.

Comment 10

[Christopher Blizzard (:blizzard)]

Checked in.

Comment 11

[sguazt]

Thanks to all!
I hope there will be a new binary release soon. :)