237499 - Mozilla crashes when moving the mouse over a link on this page [@ IsCanvasFrame ]

Status: VERIFIED DUPLICATE of bug 236590

(Core :: Layout, defect)

Description

[Tom Williams]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7b) Gecko/20040303
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7b) Gecko/20040303

When I move the mouse over the "Hover here to make the left column the longest"
link, Mozilla crashes with a segmentation fault.  This also crashes Firefox
(Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7b) Gecko/20040312 Firefox/0.8.0+).

Reproducible: Always
Steps to Reproduce:
1.http://www.stunicholls.myby.co.uk/layouts/3cols.html
2.Move the mouse ove the "Hover here to make the left column the longest" link
3.Mozilla crashes with a segmentation fault

Actual Results:  
Mozilla crashes with a segmentation fault

Expected Results:  
Mozilla should not crash.

Works fine in Opera 7.50 TP3 on Linux.

Comment 1

[Peter 'vt100' Schwindt]

WFM in Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.6) Gecko/20040227
Firefox/0.8 (debian)

Comment 2

[R.K.Aa.]

confirming crash 1.7b 20040311 Linux

Comment 3

[Frederic Bezies]

Confirming crash on both left and right column.

WinXP-Sp1 and my own homemade build from yesterday CVS source.

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7b) Gecko/20040314
Firefox/0.8.0+ (MozJF)

Anybody with OS-X to change OS -> All ? 

Comment 4

[tenthumbs]

Attachment: stack trace

I also crash on my Linux gtk1 build from Saturday. Here's a stack trace

Comment 5

[tenthumbs]

Confirming this and changing component to CSS as the most likely candidate.

Comment 6

[Olivier Cahagne]

related (similar stack): bug 217541 ?

Comment 7

[Bill Mason]

->component owner

Comment 8

[Boris Zbarsky [:bzbarsky]]

Where do you see anything style-system related on the stack there? 
nsCSSFrameConstructor is not style system.

Comment 9

[Hermann Schwab]

regressed between BuildID 2004021913 (working) and BuildID 2004022411 (crashing)

Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.7a) Gecko/20040219

Comment 10

[Andrew Schultz]

this regressed between linux trunk build 2004022308 and 2004022407, perhaps bug
233972?

Comment 11

[Olivier Cahagne]

by way of identical stack from bug 237983

*** This bug has been marked as a duplicate of 236590 ***

Comment 12

[Olivier Cahagne]

v