233240 - Crash when clicking link

Status: RESOLVED FIXED

(SeaMonkey :: General, defect)

Description

[Sebastian von Knorring]

User-Agent:       
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7a) Gecko/20040205

Mozilla crashes on me when selecting "Bangkok" as the flight destination in the
flight scheduler/booker on the eBookers webiste. I have repeated this behaviour
twice.

Reproducible: Always
Steps to Reproduce:
1. Go to http://www.ebookers.fi/
2. Click on "[ Lentokenttälista ]" ("List of airports") in order to fill in the
"Mihin" ("To") form field with a predefined value.
3. In the pop-up window that opens, select "Thailand" in the "Valitse maa"
("Select country") drop down menu.
4. Click on the first entry in the list, "Bangkok"
Actual Results:  
Mozilla crashed

Expected Results:  
Mozilla should not have crashed

I will attach the Inspector IIXII log. See
http://www.opera.com/support/search/supsearch.dml?index=432 for more info about
Inspector IIXII.

Comment 1

[Sebastian von Knorring]

Attachment: Inspector IIXII log zipped

Comment 2

[Charles Fenwick]

Attachment: bt

bt from current cvs build on Linux

Comment 3

[Daniel de Wildt]

I could confirm this with 
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7a) Gecko/20040201

I could not reproduce this everytime, sometimes I must select the airport 5
times before it crashes. I could not reproduce this (yet) with
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.6) Gecko/20040113

Comment 4

[Daniel de Wildt]

My debugger (MS VisStud 6) crashes in
http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/content/base/src/nsGenericElement.cpp&mark=3112#3086
handler contains invalid code (0xdddddddd). Maybe the memory is freed before?
bug 229371 has patch that was checked in to this file on feb 01. Maybe that's
the reason.

Comment 5

[Boris Zbarsky [:bzbarsky]]

Daniel, see the "depends on" I added to this bug and the comments therein.

Comment 6

[Sebastian von Knorring]

OK, the "depends on" bug 232798 seems to be fixed now.

And also, I cannot repeat the crash anymore. Thanks!

Comment 7

[Andreas Kunz]

Works for reporter, I also cannot reproduce anymore.

Seems like fixed by bug 232798. Marking so.