271483 - Crash when styling an element used by XBL

Status: RESOLVED DUPLICATE of bug 55070

(Core :: XBL, defect)

Description

[J. Carlos Navea]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7.5) Gecko/20041107 Firefox/1.0
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7.5) Gecko/20041107 Firefox/1.0

The attached testcase files xul,css,xbl better describe the problem. The crash
basically occurs when I style an element such as <button> via css and there is a
<xul:button> in an xbl.

The package was installed as:

installed-chrome.txt
--------------------
content,install,url,file:///E:/work/coding/xul/content/tests/

chrome.rdf
----------
  <RDF:Seq RDF:about="urn:mozilla:package:root">
    <!-- regular packages here-->
    <RDF:li RDF:resource="urn:mozilla:package:tests"/>
  </RDF:Seq>

  <RDF:Description RDF:about="urn:mozilla:package:tests"
                   c:baseURL="file:///E:/work/coding/xul/content/tests/"
                   c:locType="install"
                   c:displayName="tests"
                   c:author="mozilla.org"
                   c:name="tests"
                   c:localeVersion="0.9.9"
                   c:skinVersion="1.5"
                   c:hasOverlays="true" />

Reproducible: Always
Steps to Reproduce:
1. Install the testcase files as a chrome package
2. Run test package from a chrome url ie: chrome://tests/content/crash-css.xul

Actual Results:  
Firefox crashes


Talkback crash ID: TB2144688Q

Comment 1

[J. Carlos Navea]

Attachment: testcase xul

Comment 2

[J. Carlos Navea]

Attachment: testcase css

Comment 3

[J. Carlos Navea]

Attachment: testcase xbl

Comment 4

[Martijn Wargers (dead)]

In the stylesheet you are adding a binding to the button. That binding creates
another button. That button also gets binded, etc. So you'll get infinite recursion.

So I guess this is a duplicate of bug 55070.

Talkback link:
http://talkback-public.mozilla.org/talkback/fastfind.jsp?search=2&type=iid&id=TB2144688Q

Comment 5

[:Gavin Sharp [email: [e-mail]]]

*** This bug has been marked as a duplicate of 55070 ***