227111 - on UBB.x and Opentopic message boards, mozilla crashes if more than one reply window is opened [@ nsCSSFrameConstructor::FindFrameWithContent ]

Status: RESOLVED DUPLICATE of bug 203041

(SeaMonkey :: General, defect)

Description

[Jim Zaremski]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.6a) Gecko/20031030
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.6a) Gecko/20031030

Infopop's Opentopic and UBB.x message boards make extensive use of Javascript. 
One way they use it is for replying to posts, clicking "Reply" runs a script
that opens a pop-up window with a text box which posters will use to enter
replies.  One problem that's come up recently is that if you open a reply
window, then if for whatever reason you click "Reply" again (thereby attempting
to open another reply window,) the browser will crash.  This happens
consistently, and it does not seem to matter which browser version or operating
system is used- along with this report, I and others have reproduced this crash
on Firebird 0.7, Mozilla 1.4 and 1.5, on both Windows and Linux.

Reproducible: Always

Steps to Reproduce:
1. Go to a UBB.x or OpenTopic message board (for example,
http://community.infopop.net/6/ubb.x )  
2. Open an existing thread (i.e.,
http://community.infopop.net/eve/ubb.x?a=frm&s=729094322&f=5193060105 )
3. Click "Reply" button at top of thread.  Window will pop up asking for login
(and I'm not sure if an account will have to be created- it's free anyway)
4. If necessary, move login window out of the way, and click "Reply" button at
top of thread again.

Actual Results:  
Mozilla will crash.

Expected Results:  
Not sure.  IF it is a bug in Infopop's code, I'd think Mozilla should do nothing
or report an error.

Comment 1

[Jim Zaremski]

more info:

After entering this bug report, I confirmed that the crash still exists.  other
key info:

- on UBB.x boards, you will have to create an account and log in, duplicate
login windows will not cause a crash but duplicate reply windows will.  
- Windows 2000's event viewer logged this info about the browser crash:
"The application, , generated an application error The error occurred on
11/30/2003 @ 11:48:58.046 The exception generated was c0000096 at address
046C814C (<nosymbols>)"

Comment 2

[Olivier Cahagne]

confirming crash 20031128 Win2k, Dr Watson shows the beginning of stack as:

<nosymbols>
nsPrintSettings::SetStartPageRange
nsScriptableRegion::GetRegion
nsRegion::GetNumRects
[...]

Comment 3

[dolphinling]

Confirming

I set up a test account at the url specified, username bugzilla1234, password
test1234

Comment 4

[Jon Henry]

I'm not certain enough to actually mark it a duplicate, but this could be a dupe
of bug 203041 (which I was directed to while working on bug 206839). The problem
looks identical to me, although the stack traces are different which is why I
hesitate to go ahead and dupe it.

Comment 5

[Olivier Cahagne]

based on stack found here:
http://forums.mozillazine.org/viewtopic.php?t=52289

*** This bug has been marked as a duplicate of 203041 ***