239908 - crash if I undo image insertion with right-click and then redo with right-click.

Status: RESOLVED DUPLICATE of bug 243809

(SeaMonkey :: Composer, defect)

Description

[Frank Manna]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7b) Gecko/20040316
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7b) Gecko/20040316

After inserting a JPEG image with the Image button on toolbar, Undo-ing image
insertion with right-click->Undo and then Redo-ing image insertion with
right-click->Redo causes mozilla to crash.

Reproducible: Always
Steps to Reproduce:
1. Open new or existing document in composer.
2. Insert a JPEG with the Image button in toolbar.
3. Right-click and choose Undo.
4. Right-click and choose Redo.

Actual Results:  
Mozilla process crashes.

Expected Results:  
Re-insert the image.

default theme, one Mozilla Navigator window, Mozilla Mail window open.

Comment 1

[Frank Manna]

Attachment: test HTML in which crash can be reproduced

this HTML was created with composer, and after making a newline and an indent
(enter, then tab) and inserting an image, then undoing and redoing, composer
crashes.

Comment 2

[Frank Manna]

crash is not reproduced with blank HTML document

Comment 3

[Frank Manna]

Attachment: image which reproduces bug if inserted, undone, and redone.

Comment 4

[Bogdan Stroe]

Confirming this bug using Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US;
rv:1.7b) Gecko/20040402

I typed some text, then newline, indent, insert any image, undo, and redo
results in a crash.

No talkback ID, but the windows report is:
AppName: mozilla.exe	 AppVer: 1.7.20040.40215	 ModName: editor.dll
ModVer: 1.7.20040.40215	 Offset: 0001929d

Comment 5

[Ian Graham]

I can reproduce this crash on Mozilla 1.6 
[ Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.6) Gecko/20040113  ]
under Windows XP. 

Comment 6

[Stephen Donner [:stephend] Not actively reading bugmail]

Can someone who can still reproduce this post a talkback incident or a stack
trace here?

I'm thinking this might be:

bug 243809   	nor   	--   	PC   	[e-mail]   	NEW   	  	mozilla crash
at nsHTMLEditor::CheckSelectionStateForAnon...
bug 244089 	cri 	-- 	PC 	[e-mail] 	NEW 		M17rc2 crash [@
nsHTMLEditor::CheckSelectionStateForAnony...

(they're really the same bugs as each other, but I'm waiting for one to be fixed
to DUP the other to)

Comment 7

[Stephen Donner [:stephend] Not actively reading bugmail]

*** This bug has been marked as a duplicate of 243809 ***