215445 - Closing a window with onBlur event gives crash

Status: RESOLVED WORKSFORME

(Core :: DOM: Events, defect)

Description

[Travis Emslander]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.5a) Gecko/20030803 Mozilla Firebird/0.6.1
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.5a) Gecko/20030803 Mozilla Firebird/0.6.1

The link I referenced has let's you click the "Zoom" button to get a popup
window showing a larger image.  Closing this window leads to a crash if you have
javascript enabled and let it raise/lower windows.

The reason seems to be the onBlur="window.focus();" on the body tag.

The crash is a segmentation fault leading me to believe the window is trying to
be raised even though it, or a part, has been freed from memory.

This was reproducabe in epiphany (mozilla 1.4), mozilla browser 1.4, and
mozilla-firebird 0.6.1.

Reproducible: Always

Steps to Reproduce:
1. Turn on javascript and let javascript raise/lower windows (firebird lets you
do this)
2. Go to http://www.karmaloop.com/products.asp?ProductID=3807&VendorCode=BET
3. Click on the zoom button
4. Close the newly opened popup window

Actual Results:  
Segmentation Fault (mozilla crashed)

Expected Results:  
window should have closed

Comment 1

[Phil Schwartau]

Not JavaScript Engine. Reassigning to DOM Events -

Comment 2

[Jason Barnabe (np)]

WFM on WinXP Moz 2003080304.

Comment 3

[Andrew Schultz]

worksforme with linux Mozilla trunk 20030806 and 1.5a

Comment 4

[Jeremy M. Dolan]

*** Bug 215969 has been marked as a duplicate of this bug. ***

Comment 5

[Jeremy M. Dolan]

WFM Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.5b) Gecko/20030803 Mozilla
Firebird/0.6.1  [sorry, old, but just returned from vacation]

The bug I just duped to here has a testcase (which doesn't work for me, but).

Comment 6

[Sven Krohlas]

WFM Mozilla/5.0 (X11; U; Linux i586; en-US; rv:1.7a) Gecko/20040202
Reopen if your opinion is different and you are able to reproduce this with a
current build.