Closed Bug 236077 Opened 21 years ago Closed 21 years ago

Browser crash when selecting alternate style sheet @ [nsHTMLContainerFrame::CreateViewForFrame]

Categories

(Core :: CSS Parsing and Computation, defect)

x86
Windows 98
defect
Not set
critical

Tracking

()

RESOLVED DUPLICATE of bug 231776

People

(Reporter: brewthatistrue, Assigned: dbaron)

References

()

Details

(Keywords: crash)

Attachments

(1 file)

User-Agent: Build Identifier: Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.7b) Gecko/20040228 Firefox/0.8.0+ Selecting this page's alternate css stylesheet crashes FireFox. Reproducible: Always Steps to Reproduce: 1. go to http://ln.hixie.ch 2. click on bottom left (alternate css) 3. choose "Orange" Actual Results: crash Expected Results: switch stylesheets related to bug #133219 ?
Attached file testcase
nsDebugImpl::Assertion(nsDebugImpl * const 0x002a9ec8, const char * 0x01bd3430, const char * 0x01bd3428, const char * 0x01bd33e4, int 532) line 272 nsDebug::Assertion(const char * 0x01bd3430, const char * 0x01bd3428, const char * 0x01bd33e4, int 532) line 109 nsHTMLContainerFrame::CreateViewForFrame(nsIFrame * 0x0401a48c, nsIFrame * 0x04019e34, int 0) line 532 + 32 bytes nsCSSFrameConstructor::ConstructFrameByDisplayType(nsIPresShell * 0x04038430, nsIPresContext * 0x03ffdd00, nsFrameConstructorState & {...}, const nsStyleDisplay * 0x040ad374, nsIContent * 0x03888da0, int 3, nsIAtom * 0x00ec46f0, nsIFrame * 0x04019e34, nsStyleContext * 0x0384771c, nsFrameItems & {...}) line 6111 + 15 bytes nsCSSFrameConstructor::ConstructFrameInternal(nsIPresShell * 0x04038430, nsIPresContext * 0x03ffdd00, nsFrameConstructorState & {...}, nsIContent * 0x03888da0, nsIFrame * 0x04019e34, nsIAtom * 0x00ec46f0, int 3, nsStyleContext * 0x0384771c, nsFrameItems & {...}, int 0) line 7100 + 53 bytes nsCSSFrameConstructor::ConstructFrame(nsIPresShell * 0x04038430, nsIPresContext * 0x03ffdd00, nsFrameConstructorState & {...}, nsIContent * 0x03888da0, nsIFrame * 0x04019e34, nsFrameItems & {...}) line 6956 + 51 bytes nsCSSFrameConstructor::ProcessChildren(nsIPresShell * 0x04038430, nsIPresContext * 0x03ffdd00, nsFrameConstructorState & {...}, nsIContent * 0x0412c800, nsIFrame * 0x04019e34, int 1, nsFrameItems & {...}, int 1, nsTableCreator * 0x00000000) line 11407 + 66 bytes nsCSSFrameConstructor::ConstructTableCellFrame(nsIPresShell * 0x04038430, nsIPresContext * 0x03ffdd00, nsFrameConstructorState & {...}, nsIContent * 0x0412c800, nsIFrame * 0x0401a91c, nsStyleContext * 0x0401a320, nsTableCreator & {...}, int 0, nsFrameItems & {...}, nsIFrame * & 0x0401ab44, nsIFrame * & 0x04019e34, int & 1) line 2868 + 40 bytes nsCSSFrameConstructor::TableProcessChild(nsIPresShell * 0x04038430, nsIPresContext * 0x03ffdd00, nsFrameConstructorState & {...}, nsIContent * 0x0412c800, nsIContent * 0x03b73000, nsIFrame * 0x0401a91c, nsIAtom * 0x00ec4fb0, nsStyleContext * 0x04019c00, nsTableCreator & {...}, nsFrameItems & {...}, nsIFrame * & 0x00000000) line 3125 + 59 bytes nsCSSFrameConstructor::TableProcessChildren(nsIPresShell * 0x04038430, nsIPresContext * 0x03ffdd00, nsFrameConstructorState & {...}, nsIContent * 0x03b73000, nsIFrame * 0x0401a91c, nsTableCreator & {...}, nsFrameItems & {...}, nsIFrame * & 0x00000000) line 3020 + 63 bytes nsCSSFrameConstructor::ConstructTableFrame(nsIPresShell * 0x04038430, nsIPresContext * 0x03ffdd00, nsFrameConstructorState & {...}, nsIContent * 0x03b73000, nsIFrame * 0x040f4cb0, nsIFrame * 0x040f4cb0, nsStyleContext * 0x04019c00, nsTableCreator & {...}, int 0, nsFrameItems & {...}, nsIFrame * & 0x0401a8c0, nsIFrame * & 0x0401a91c, int & 0) line 2484 + 42 bytes nsCSSFrameConstructor::ConstructFrameByDisplayType(nsIPresShell * 0x04038430, nsIPresContext * 0x03ffdd00, nsFrameConstructorState & {...}, const nsStyleDisplay * 0x0401a818, nsIContent * 0x03b73000, int 3, nsIAtom * 0x00ec4790, nsIFrame * 0x040f4cb0, nsStyleContext * 0x04019c00, nsFrameItems & {...}) line 6272 + 67 bytes nsCSSFrameConstructor::ConstructFrameInternal(nsIPresShell * 0x04038430, nsIPresContext * 0x03ffdd00, nsFrameConstructorState & {...}, nsIContent * 0x03b73000, nsIFrame * 0x040f4cb0, nsIAtom * 0x00ec4790, int 3, nsStyleContext * 0x04019c00, nsFrameItems & {...}, int 0) line 7100 + 53 bytes nsCSSFrameConstructor::ConstructFrame(nsIPresShell * 0x04038430, nsIPresContext * 0x03ffdd00, nsFrameConstructorState & {...}, nsIContent * 0x03b73000, nsIFrame * 0x040f4cb0, nsFrameItems & {...}) line 6956 + 51 bytes nsCSSFrameConstructor::ConstructDocElementTableFrame(nsIPresShell * 0x04038430, nsIPresContext * 0x03ffdd00, nsIContent * 0x03b73000, nsIFrame * 0x040f4cb0, nsIFrame * & 0x00000000, nsILayoutHistoryState * 0x03b75ea0) line 3201 nsCSSFrameConstructor::ConstructDocElementFrame(nsIPresShell * 0x04038430, nsIPresContext * 0x03ffdd00, nsFrameConstructorState & {...}, nsIContent * 0x03b73000, nsIFrame * 0x040f4cb0, nsStyleContext * 0x0401a728, nsIFrame * & 0x00000000) line 3368 + 43 bytes nsCSSFrameConstructor::ReconstructDocElementHierarchy(nsIPresContext * 0x03ffdd00) line 7211 + 51 bytes nsCSSFrameConstructor::RecreateFramesForContent(nsIPresContext * 0x03ffdd00, nsIContent * 0x03b73000) line 11290 nsCSSFrameConstructor::ProcessRestyledFrames(nsStyleChangeList & {...}, nsIPresContext * 0x03ffdd00) line 9806 PresShell::ReconstructStyleData(PresShell * const 0x04038430) line 5322 PresShell::EndUpdate(nsIDocument * 0x03ff6dc0, unsigned int 2) line 3570 nsDocument::EndUpdate(unsigned int 2) line 1701 CSSStyleSheetImpl::SetDisabled(CSSStyleSheetImpl * const 0x0401ced4, int 0) line 2445 XPTC_InvokeByIndex(nsISupports * 0x0401ced4, unsigned int 5, unsigned int 1, nsXPTCVariant * 0x0012c2c8) line 102 XPCWrappedNative::CallMethod(XPCCallContext & {...}, XPCWrappedNative::CallMode CALL_SETTER) line 2022 + 43 bytes XPCWrappedNative::SetAttribute(XPCCallContext & {...}) line 1887 + 14 bytes XPC_WN_GetterSetter(JSContext * 0x026318f0, JSObject * 0x0380b628, unsigned int 1, long * 0x040aebcc, long * 0x0012c5dc) line 1311 + 12 bytes js_Invoke(JSContext * 0x026318f0, unsigned int 1, unsigned int 2) line 941 + 23 bytes js_InternalInvoke(JSContext * 0x026318f0, JSObject * 0x0380b628, long 58766936, unsigned int 0, unsigned int 1, long * 0x0012d3e4, long * 0x0012d3e4) line 1035 + 20 bytes js_InternalGetOrSet(JSContext * 0x026318f0, JSObject * 0x0380b628, long 50433856, long 58766936, int 8, unsigned int 1, long * 0x0012d3e4, long * 0x0012d3e4) line 1078 + 31 bytes js_SetProperty(JSContext * 0x026318f0, JSObject * 0x0380b628, long 50433856, long * 0x0012d3e4) line 2756 + 53 bytes js_Interpret(JSContext * 0x026318f0, long * 0x0012d5bc) line 2803 + 2049 bytes js_Invoke(JSContext * 0x026318f0, unsigned int 1, unsigned int 2) line 958 + 13 bytes js_InternalInvoke(JSContext * 0x026318f0, JSObject * 0x0380af18, long 58767392, unsigned int 0, unsigned int 1, long * 0x0012d840, long * 0x0012d83c) line 1035 + 20 bytes JS_CallFunctionValue(JSContext * 0x026318f0, JSObject * 0x0380af18, long 58767392, unsigned int 1, long * 0x0012d840, long * 0x0012d83c) line 3589 + 31 bytes nsJSContext::CallEventHandler(JSObject * 0x0380af18, JSObject * 0x0380b820, unsigned int 1, long * 0x0012d840, long * 0x0012d83c) line 1267 + 33 bytes nsJSEventListener::HandleEvent(nsJSEventListener * const 0x00ec17b8, nsIDOMEvent * 0x04105f98) line 175 + 52 bytes nsEventListenerManager::HandleEventSubType(nsListenerStruct * 0x00ec11c8, nsIDOMEvent * 0x04105f98, nsIDOMEventTarget * 0x038445b8, unsigned int 8, unsigned int 2) line 1434 + 20 bytes nsEventListenerManager::HandleEvent(nsEventListenerManager * const 0x00ec1760, nsIPresContext * 0x027d69b8, nsEvent * 0x0012f278, nsIDOMEvent * * 0x0012f158, nsIDOMEventTarget * 0x038445b8, unsigned int 2, nsEventStatus * 0x0012f2c4) line 1529 nsXULElement::HandleDOMEvent(nsIPresContext * 0x027d69b8, nsEvent * 0x0012f278, nsIDOMEvent * * 0x0012f158, unsigned int 2, nsEventStatus * 0x0012f2c4) line 2881 nsXULElement::HandleDOMEvent(nsIPresContext * 0x027d69b8, nsEvent * 0x0012f278, nsIDOMEvent * * 0x0012f158, unsigned int 2, nsEventStatus * 0x0012f2c4) line 2898 + 57 bytes nsXULElement::HandleDOMEvent(nsIPresContext * 0x027d69b8, nsEvent * 0x0012f278, nsIDOMEvent * * 0x0012f158, unsigned int 2, nsEventStatus * 0x0012f2c4) line 2898 + 57 bytes nsXULElement::HandleDOMEvent(nsIPresContext * 0x027d69b8, nsEvent * 0x0012f278, nsIDOMEvent * * 0x0012f158, unsigned int 2, nsEventStatus * 0x0012f2c4) line 2898 + 57 bytes nsXULElement::HandleDOMEvent(nsIPresContext * 0x027d69b8, nsEvent * 0x0012f278, nsIDOMEvent * * 0x0012f158, unsigned int 7, nsEventStatus * 0x0012f2c4) line 2898 + 57 bytes PresShell::HandleDOMEventWithTarget(PresShell * const 0x027f1a08, nsIContent * 0x03743520, nsEvent * 0x0012f278, nsEventStatus * 0x0012f2c4) line 6118 nsMenuFrame::Execute(nsGUIEvent * 0x0012f738) line 1648 nsMenuFrame::HandleEvent(nsMenuFrame * const 0x03ff6250, nsIPresContext * 0x027d69b8, nsGUIEvent * 0x0012f738, nsEventStatus * 0x0012f52c) line 447 PresShell::HandleEventInternal(nsEvent * 0x0012f738, nsIView * 0x0380e968, unsigned int 1, nsEventStatus * 0x0012f52c) line 6082 + 33 bytes PresShell::HandleEvent(PresShell * const 0x027f1a24, nsIView * 0x0380e968, nsGUIEvent * 0x0012f738, nsEventStatus * 0x0012f52c, int 0, int & 1) line 5930 + 25 bytes nsViewManager::HandleEvent(nsView * 0x03b52ee8, nsGUIEvent * 0x0012f738, int 0) line 2301 nsViewManager::DispatchEvent(nsViewManager * const 0x027da388, nsGUIEvent * 0x0012f738, nsEventStatus * 0x0012f624) line 2039 + 20 bytes HandleEvent(nsGUIEvent * 0x0012f738) line 79 nsWindow::DispatchEvent(nsWindow * const 0x03b52fa4, nsGUIEvent * 0x0012f738, nsEventStatus & nsEventStatus_eIgnore) line 1064 + 10 bytes nsWindow::DispatchWindowEvent(nsGUIEvent * 0x0012f738) line 1085 nsWindow::DispatchMouseEvent(unsigned int 301, unsigned int 0, nsPoint * 0x00000000) line 5207 + 21 bytes ChildWindow::DispatchMouseEvent(unsigned int 301, unsigned int 0, nsPoint * 0x00000000) line 5462 nsWindow::ProcessMessage(unsigned int 514, unsigned int 0, long 3211334, long * 0x0012fbe4) line 4001 + 28 bytes nsWindow::WindowProc(HWND__ * 0x000803b0, unsigned int 514, unsigned int 0, long 3211334) line 1346 + 27 bytes USER32! 77d13a50() USER32! 77d13b1f() USER32! 77d13d79() USER32! 77d13ddf() nsAppShellService::Run(nsAppShellService * const 0x00f8e878) line 484 main1(int 1, char * * 0x002b1ac0, nsISupports * 0x00ed3120) line 1291 + 32 bytes main(int 1, char * * 0x002b1ac0) line 1678 + 37 bytes mainCRTStartup() line 338 + 17 bytes KERNEL32! 77e614c7()
Status: UNCONFIRMED → NEW
Ever confirmed: true
Keywords: crash
Summary: Browser crash when selecting alternate style sheet on http://ln.hixie.ch → Browser crash when selecting alternate style sheet @ [nsHTMLContainerFrame::CreateViewForFrame]
nsIFrame* parent = aFrame->GetAncestorWithView(); fails at http://lxr.mozilla.org/seamonkey/source/layout/html/base/src/nsHTMLContainerFrame.cpp#531
*** This bug has been marked as a duplicate of 231776 ***
Status: NEW → RESOLVED
Closed: 21 years ago
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: