Closed Bug 254671 Opened 20 years ago Closed 20 years ago

crash if click illegal HTTP hyper-link

Categories

(SeaMonkey :: General, defect)

Product:
SeaMonkey
Component:
General
Platform:
x86
Windows Server 2003
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

(Not tracked)

Status:
RESOLVED DUPLICATE of bug 250900

People

(Reporter: chengwx, Unassigned)

References

Details

(Keywords: crash) 

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.7.2) Gecko/20040803
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.7.2) Gecko/20040803

for example the illegal HTTP link is like this:
<a http='ed2k://|file|[comic][测试测试].
zip|123431413413413413412313134134134124|/'
target='_blank'>ed2k://|file|[comic][测试测试]
|123431413413413413412313134134134124|/</a>

if I rightclick this link, mozilla will crash, then close its windows, only
"quality feedback windows" shows up.

Reproducible: Always
Steps to Reproduce:
1.
2.
3.

Actual Results:  
crashed, mozilla window disappear, data lost, "quality feedback" dialog shows up.

Expected Results:  
should pop a windows saying "illegal link" instead of crashing
typo, the link should be:
<a href='http://|file|[comic][测试测试].
zip|123431413413413413412313134134134124|/'
target='_blank'>ed2k://|file|[comic][测试测试]
|123431413413413413412313134134134124|/</a>
can you post Talkback Incident ID for this crash
"mozilla/components/talkback.exe"  ?
Keywords: crash, stackwanted
Looks a bit like bug 250900
Stacktrace (from debug build):
NTDLL! 778ccaad()
_heap_alloc_base(unsigned int 0x00000030) line 200
_heap_alloc_dbg(unsigned int 0x00000005, int 0x00000001, const char *
0x00000000, int 0x00000000) line 378 + 9 bytes
_nh_malloc_dbg(unsigned int 0x00000005, int 0x00000000, int 0x00000001, const
char * 0x00000000, int 0x00000000) line 248 + 21 bytes
malloc(unsigned int 0x00000005) line 130 + 21 bytes
PL_strdup(const char * 0x0012c23c) line 53 + 10 bytes
nsCRT::strdup(const char * 0x0012c23c) line 172 + 9 bytes
nsScriptSecurityManager::GetBaseURIScheme(nsIURI * 0x03a89c58, char * *
0x0012c340) line 1162 + 18 bytes
nsScriptSecurityManager::CheckLoadURIWithPrincipal(nsScriptSecurityManager *
const 0x00f4d508, nsIPrincipal * 0x025b3570, nsIURI * 0x03bfa810, unsigned int
0x00000000) line 1200 + 41 bytes
nsScriptSecurityManager::CheckLoadURI(nsScriptSecurityManager * const
0x00f4d508, nsIURI * 0x03a89c58, nsIURI * 0x03bfa810, unsigned int 0x00000000)
line 1177 + 29 bytes
nsScriptSecurityManager::CheckLoadURIStr(nsScriptSecurityManager * const
0x00f4d508, const char * 0x03bcba60, const char * 0x03a02d00, unsigned int
0x00000000) line 1390 + 34 bytes
XPTC_InvokeByIndex(nsISupports * 0x00f4d508, unsigned int 0x0000000c, unsigned
int 0x00000003, nsXPTCVariant * 0x0012c594) line 102
XPCWrappedNative::CallMethod(XPCCallContext & {...}, XPCWrappedNative::CallMode
CALL_METHOD) line 2028 + 43 bytes
XPC_WN_CallMethod(JSContext * 0x03122240, JSObject * 0x038669e8, unsigned int
0x00000003, long * 0x03c931c8, long * 0x0012c864) line 1287 + 14 bytes
js_Invoke(JSContext * 0x03122240, unsigned int 0x00000003, unsigned int
0x00000000) line 1281 + 23 bytes
js_Interpret(JSContext * 0x03122240, long * 0x0012d29c) line 3375 + 15 bytes
js_Invoke(JSContext * 0x03122240, unsigned int 0x00000001, unsigned int
0x00000002) line 1301 + 13 bytes
js_InternalInvoke(JSContext * 0x03122240, JSObject * 0x03866938, long
0x03865190, unsigned int 0x00000000, unsigned int 0x00000001, long * 0x0012d4a8,
long * 0x0012d4a4) line 1378 + 20 bytes
JS_CallFunctionValue(JSContext * 0x03122240, JSObject * 0x03866938, long
0x03865190, unsigned int 0x00000001, long * 0x0012d4a8, long * 0x0012d4a4) line
3684 + 31 bytes
nsJSContext::CallEventHandler(JSObject * 0x03866938, JSObject * 0x03865190,
unsigned int 0x00000001, long * 0x0012d4a8, long * 0x0012d4a4) line 1348 + 33 bytes
nsJSEventListener::HandleEvent(nsJSEventListener * const 0x03106ce0, nsIDOMEvent
* 0x03978f28) line 174 + 54 bytes
nsEventListenerManager::HandleEventSubType(nsListenerStruct * 0x03106da0,
nsIDOMEvent * 0x03978f28, nsIDOMEventTarget * 0x03b75da8, unsigned int
0x00000004, unsigned int 0x00000002) line 1496 + 20 bytes
nsEventListenerManager::HandleEvent(nsEventListenerManager * const 0x03106c88,
nsIPresContext * 0x03b96728, nsEvent * 0x0012efa4, nsIDOMEvent * * 0x0012ebc4,
nsIDOMEventTarget * 0x03b75da8, unsigned int 0x00000002, nsEventStatus *
0x0012f494) line 1591
nsXULElement::HandleDOMEvent(nsIPresContext * 0x03b96728, nsEvent * 0x0012efa4,
nsIDOMEvent * * 0x0012ebc4, unsigned int 0x00000002, nsEventStatus * 0x0012f494)
line 2788
nsXULElement::HandleDOMEvent(nsIPresContext * 0x03b96728, nsEvent * 0x0012efa4,
nsIDOMEvent * * 0x0012ebc4, unsigned int 0x00000002, nsEventStatus * 0x0012f494)
line 2805 + 57 bytes
nsXULElement::HandleDOMEvent(nsIPresContext * 0x03b96728, nsEvent * 0x0012efa4,
nsIDOMEvent * * 0x0012ebc4, unsigned int 0x00000002, nsEventStatus * 0x0012f494)
line 2805 + 57 bytes
nsXULElement::HandleDOMEvent(nsIPresContext * 0x03b96728, nsEvent * 0x0012efa4,
nsIDOMEvent * * 0x0012ebc4, unsigned int 0x00000002, nsEventStatus * 0x0012f494)
line 2805 + 57 bytes
nsXULElement::HandleChromeEvent(nsXULElement * const 0x03a38d5c, nsIPresContext
* 0x03b96728, nsEvent * 0x0012efa4, nsIDOMEvent * * 0x0012ebc4, unsigned int
0x00000002, nsEventStatus * 0x0012f494) line 3872 + 35 bytes
GlobalWindowImpl::HandleDOMEvent(nsIPresContext * 0x03b96728, nsEvent *
0x0012efa4, nsIDOMEvent * * 0x0012ebc4, unsigned int 0x00000002, nsEventStatus *
0x0012f494) line 908
nsDocument::HandleDOMEvent(nsIPresContext * 0x03b96728, nsEvent * 0x0012efa4,
nsIDOMEvent * * 0x0012ebc4, unsigned int 0x00000002, nsEventStatus * 0x0012f494)
line 3801
nsGenericElement::HandleDOMEvent(nsIPresContext * 0x03b96728, nsEvent *
0x0012efa4, nsIDOMEvent * * 0x0012ebc4, unsigned int 0x00000002, nsEventStatus *
0x0012f494) line 1981 + 52 bytes
nsGenericHTMLElement::HandleDOMEvent(nsIPresContext * 0x03b96728, nsEvent *
0x0012efa4, nsIDOMEvent * * 0x0012ebc4, unsigned int 0x00000002, nsEventStatus *
0x0012f494) line 1370 + 28 bytes
nsGenericElement::HandleDOMEvent(nsIPresContext * 0x03b96728, nsEvent *
0x0012efa4, nsIDOMEvent * * 0x0012ebc4, unsigned int 0x00000002, nsEventStatus *
0x0012f494) line 1974 + 56 bytes

so looks like a dupe...
Keywords: stackwanted
Depends on: 250900
 Contents of the Stack

[   0] 1C 01 00 00 0C 01 00 00 F4 FE 12 00 0C 01 00 00 [................]
[  10] 00 00 00 00 F0 39 2C 00 00 00 00 00 00 00 00 00 [.....9,.........]
[  20] CC D9 BE 77 01 00 00 00 00 00 00 00 60 5F 98 00 [...w........`_..]
[  30] C0 FF 12 00 2E 2D 40 00 01 00 00 00 F0 39 2C 00 [.....-@......9,.]
[  40] 46 23 15 00 2E DD 40 00 00 00 40 00 00 00 00 00 [F#....@...@.....]
[  50] 46 23 15 00 01 00 00 00 00 00 00 00 00 00 00 00 [F#..............]
[  60] 00 F0 FD 7F 05 00 00 C0 46 23 15 00 F0 39 2C 00 [........F#...9,.]
[  70] 00 00 00 00 F8 5B B0 F6 C0 29 2C 00 01 00 00 00 [.....[...),.....]
[  80] 44 00 00 00 08 3D 15 00 58 32 15 00 98 3F 15 00 [D....=..X2...?..]
[  90] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [................]
[  A0] 00 00 00 00 00 00 00 00 00 00 00 00 01 0C 00 00 [................]
[  B0] 01 00 00 00 00 00 00 00 00 00 00 00 01 00 01 00 [................]
[  C0] 00 00 00 00 3C FF 12 00 CC D0 12 00 E0 FF 12 00 [....<...........]
[  D0] D6 DD 40 00 78 E8 40 00 00 00 00 00 F0 FF 12 00 [..@.x.@.........]
[  E0] 8C F3 E4 77 00 00 00 00 00 00 00 00 00 F0 FD 7F [...w............]
[  F0] F0 5C B0 F6 C8 FF 12 00 00 00 00 00 FF FF FF FF [.\..............]
[ 100] BC 0A E7 77 E0 22 E8 77 00 00 00 00 00 00 00 00 [...w.".w........]
[ 110] 00 00 00 00 FA DB 40 00 00 00 00 00             [......@.....]

Processor Registers

[   0] 1F 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 [................]
[  10] 00 00 00 00 00 00 00 00 00 00 00 00 7F 02 FF FF [................]
[  20] 20 40 FF FF FF FF FF FF 00 00 00 00 00 00 00 00 [ @..............]
[  30] 00 00 00 00 00 00 FF FF 28 BA 68 BC D2 0D 00 00 [........(.h.....]
[  40] 01 00 84 00 00 00 00 00 00 00 B7 00 55 80 D0 77 [............U..w]
[  50] 00 00 00 00 20 FD C7 41 9A BF 44 87 03 F6 58 4B [.... ..A..D...XK]
[  60] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [................]
[  70] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [................]
[  80] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [................]
[  90] 3B 00 00 00 23 00 00 00 23 00 00 00 08 D6 12 00 [;...#...#.......]
[  A0] 00 00 00 00 68 58 A3 01 F8 D4 12 00 33 34 31 33 [....hX......3413]
[  B0] 48 4B EC 01 14 FF 12 00 47 19 40 00 1B 00 00 00 [HK......G.@.....]
[  C0] 46 02 21 00 F4 FE 12 00 23 00 00 00 00 00 00 00 [F.!.....#.......]
[  D0] 00 00 00 00 00 00 00 40 FE FF FF FF 00 03 00 00 [.......@........]
[  E0] 92 00 00 00 08 00 00 00 76 01 00 00 01 01 00 01 [........v.......]
[  F0] 44 88 03 F6 3B 00 00 00 00 00 00 00 8C 06 54 00 [D...;.........T.]
[ 100] 00 00 00 00 54 FC 12 00 3B 00 00 00 ED 74 D0 77 [....T...;....t.w]
[ 110] 1B 00 00 00 93 02 20 00 4C FC 12 00 23 00 00 00 [...... .L...#...]
[ 120] 30 09 00 00 40 01 00 00 F0 00 00 00 8C A2 9C BF [0...@...........]
[ 130] 7F 02 20 01 00 00 00 00 00 00 00 00 00 00 00 00 [.. .............]
[ 140] 00 00 00 00 00 00 00 00 80 1F 00 00 B8 86 03 F6 [................]
[ 150] 00 00 00 00 00 00 00 00 24 D4 34 E1 1C D4 34 E1 [........$.4...4.]
[ 160] 1B 29 8E BF B8 86 03 F6 40 4A 91 E2 68 88 03 F6 [.)......@J..h...]
[ 170] 58 A9 7F E1 01 00 00 00 04 86 03 F6 78 9A 78 E1 [X...........x.x.]
[ 180] 08 87 03 F6 8A 0F 98 BF 68 4B 99 BF FF FF FF FF [........hK......]
[ 190] 1B 29 8E BF 08 A1 8E BF 50 4A 91 E2 00 00 00 00 [.)......PJ......]
[ 1A0] 00 00 00 00 00 00 00 00 00 00 00 00 B8 86 03 F6 [................]
[ 1B0] 00 00 00 00 00 00 00 00 24 D4 34 E1 1C D4 34 E1 [........$.4...4.]
[ 1C0] F0 F0 00 00 08 00 00 00 68 88 03 F6 01 01 00 01 [........h.......]
[ 1D0] 2C 89 03 F6 3B 00 00 00 00 00 00 00 8C 06 54 00 [,...;.........T.]
[ 1E0] 00 00 00 00 54 FC 12 00 3B 00 00 00 ED 74 D0 77 [....T...;....t.w]
[ 1F0] 1B 00 00 00 46 02 20 00 4C FC 12 00 23 00 00 00 [....F. .L...#...]
[ 200] 00 00 00 00 70 00 00 00 06 02 90 BF 00 00 00 00 [....p...........]
[ 210] 7F 02 20 01 00 00 00 00 00 00 00 00 01 01 00 01 [.. .............]
[ 220] 74 89 03 F6 3B 00 00 00 00 00 00 00 D0 FD 12 00 [t...;...........]
[ 230] 00 00 00 00 0C FD 12 00 3B 00 00 00 ED 74 D0 77 [........;....t.w]
[ 240] 1B 00 00 00 86 02 20 00 04 FD 12 00 70 00 00 00 [...... .....p...]
[ 250] 17 10 8E BF EB 0A 04 29 2C 87 03 F6 DC E1 FD 7F [.......),.......]
[ 260] F4 86 03 F6 44 DF 8F BF 84 88 03 F6 8A 0F 98 BF [....D...........]
[ 270] 58 4B 99 BF FF FF FF FF 17 10 8E BF 2D 0F 8E BF [XK..........-...]
[ 280] 01 00 00 00 B0 DF 8F BF 00 00 00 00 80 35 C9 E1 [.............5..]
[ 290] EB 0A 04 29 00 00 00 00 94 88 03 F6 DC D2 8F BF [...)............]
[ 2A0] EB 0A 04 29 00 E0 FD 7F 01 00 00 00 E1 B4 8E BF [...)............]
[ 2B0] 8D B4 8E BF 50 79 56 80 20 30 76 81 01 00 00 00 [....PyV. 0v.....]
[ 2C0] 00 00 00 00 05 00 00 00 FF 03 00 00             [............]

 Program Counter
      4200775 (0x00401947)



 Program Instructions

[   0] 70 00 00 00 60 00 00 00 27 19 40 00 60 00 00 00 [p...`...'.@.`...]
[  10] 3B C6 74 06 8B 08 50 FF 51 0C 8B 45 FC 3B C6 75 [;.t...P.Q..E.;.u]
[  20] 03 8B 45 F8 50 FF 75 0C FF 75 08 E8 21 01 00 00 [..E.P.u..u..!...]
[  30] 8B F0 83 C4 0C 85 F7 75 05 E8 18 00 00 00 E8 05 [.......u........]
[  40] BC 00 00 56 E8 05 00 00 00 59 5F 5E C9 C3 8B 44 [...V.....Y_^...D]
[  50] 24 04 C1 E8 1F C3 55 8B EC 83 EC 18 56 57 8D 45 [$.....U.....VW.E]
[  60] FC 33 FF 50 57 68 5C 31 41 00 8D 4D E8 E8 59 F8 [.3.PWh\1A..M..Y.]
weixiang cheng: Please try again with the latest nightly build:
http://ftp.mozilla.org/pub/mozilla.org/mozilla/nightly/latest/


*** This bug has been marked as a duplicate of 250900 ***
Status: UNCONFIRMED → RESOLVED
Closed: 20 years ago
Resolution: --- → DUPLICATE
Product: Browser → Seamonkey
You need to log in before you can comment on or make changes to this bug.