275663 - Crash [@ nsHTMLReflowState::GetContainingBlockFor ] when using DOM Inspector on attached testcase

Status: RESOLVED DUPLICATE of bug 273458

(Other Applications :: DOM Inspector, defect)

Description

[Jack Whelpton]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8a6) Gecko/20041221 Firefox/1.0+
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8a6) Gecko/20041221 Firefox/1.0+

The attached testcase includes style information in the header and body of the
document. Inspecting the computed style on the node referenced in these rules
causes a crash.

Reproducible: Always

Steps to Reproduce:
1. Open attached testcase, click Tools->DOM Inspector
2. Navigate to #document->HTML->BODY->DIV (pane)
3. In the right-hand pane, choose "Computed style"

Actual Results:  
Crash.

Expected Results:  
Not crash.

Comment 1

[Jack Whelpton]

Attachment: Crash testcase

Comment 2

[Martijn Wargers (dead)]

Crashes for me also with the same trunk build.

Talkback ID:
http://talkback-public.mozilla.org/talkback/fastfind.jsp?search=2&type=iid&id=TB2692192M

nsHTMLReflowState::GetContainingBlockFor 
[c:/builds/tinderbox/firefox/WINNT_5.0_Clobber/mozilla/layout/generic/nsHTMLReflowState.cpp,
line 387]
nsComputedDOMStyle::GetOffsetWidthFor 
[c:/builds/tinderbox/firefox/WINNT_5.0_Clobber/mozilla/layout/style/nsComputedDOMStyle.cpp,
line 2937]
nsComputedDOMStyle::GetBottom 
[c:/builds/tinderbox/firefox/WINNT_5.0_Clobber/mozilla/layout/style/nsComputedDOMStyle.cpp,
line 449]
nsComputedDOMStyle::GetPropertyValue 
[c:/builds/tinderbox/firefox/WINNT_5.0_Clobber/mozilla/layout/style/nsComputedDOMStyle.cpp,
line 271]
XPTC_InvokeByIndex 
[c:/builds/tinderbox/firefox/WINNT_5.0_Clobber/mozilla/xpcom/reflect/xptcall/src/md/win32/xptcinvoke.cpp,
line 102]
XPCWrappedNative::CallMethod 
[c:/builds/tinderbox/firefox/WINNT_5.0_Clobber/mozilla/js/src/xpconnect/src/xpcwrappednative.cpp,
line 2034]
XPC_WN_CallMethod 
[c:/builds/tinderbox/firefox/WINNT_5.0_Clobber/mozilla/js/src/xpconnect/src/xpcwrappednativejsops.cpp,
line 1287]
js_Invoke 
[c:/builds/tinderbox/firefox/WINNT_5.0_Clobber/mozilla/js/src/jsinterp.c, line 1286]
js_Interpret 
[c:/builds/tinderbox/firefox/WINNT_5.0_Clobber/mozilla/js/src/jsinterp.c, line 3557]
js_Invoke 
[c:/builds/tinderbox/firefox/WINNT_5.0_Clobber/mozilla/js/src/jsinterp.c, line 1306]
nsXPCWrappedJSClass::CallMethod 
[c:/builds/tinderbox/firefox/WINNT_5.0_Clobber/mozilla/js/src/xpconnect/src/xpcwrappedjsclass.cpp,
line 1339]
nsXPCWrappedJS::CallMethod 
[c:/builds/tinderbox/firefox/WINNT_5.0_Clobber/mozilla/js/src/xpconnect/src/xpcwrappedjs.cpp,
line 450]
SharedStub 
[c:/builds/tinderbox/firefox/WINNT_5.0_Clobber/mozilla/xpcom/reflect/xptcall/src/md/win32/xptcstubs.cpp,
line 147]
nsTreeBodyFrame::PaintText 
[c:/builds/tinderbox/firefox/WINNT_5.0_Clobber/mozilla/layout/xul/base/src/tree/src/nsTreeBodyFrame.cpp,
line 2736]
nsTreeBodyFrame::PaintCell 
[c:/builds/tinderbox/firefox/WINNT_5.0_Clobber/mozilla/layout/xul/base/src/tree/src/nsTreeBodyFrame.cpp,
line 2535]
nsTreeBodyFrame::PaintRow 
[c:/builds/tinderbox/firefox/WINNT_5.0_Clobber/mozilla/layout/xul/base/src/tree/src/nsTreeBodyFrame.cpp,
line 2310]
nsTreeBodyFrame::Paint 
[c:/builds/tinderbox/firefox/WINNT_5.0_Clobber/mozilla/layout/xul/base/src/tree/src/nsTreeBodyFrame.cpp,
line 2150]
PresShell::Paint 
[c:/builds/tinderbox/firefox/WINNT_5.0_Clobber/mozilla/layout/base/nsPresShell.cpp,
line 5414]
nsView::Paint 
[c:/builds/tinderbox/firefox/WINNT_5.0_Clobber/mozilla/view/src/nsView.cpp, line
316]
nsViewManager::RenderDisplayListElement 
[c:/builds/tinderbox/firefox/WINNT_5.0_Clobber/mozilla/view/src/nsViewManager.cpp,
line 1461]
nsViewManager::RenderViews 
[c:/builds/tinderbox/firefox/WINNT_5.0_Clobber/mozilla/view/src/nsViewManager.cpp,
line 1376]
nsViewManager::Refresh 
[c:/builds/tinderbox/firefox/WINNT_5.0_Clobber/mozilla/view/src/nsViewManager.cpp,
line 941]
nsViewManager::DispatchEvent 
[c:/builds/tinderbox/firefox/WINNT_5.0_Clobber/mozilla/view/src/nsViewManager.cpp,
line 1942]
HandleEvent 
[c:/builds/tinderbox/firefox/WINNT_5.0_Clobber/mozilla/view/src/nsView.cpp, line
174]
nsWindow::DispatchEvent 
[c:/builds/tinderbox/firefox/WINNT_5.0_Clobber/mozilla/widget/src/windows/nsWindow.cpp,
line 1102]
nsWindow::ProcessMessage 
[c:/builds/tinderbox/firefox/WINNT_5.0_Clobber/mozilla/widget/src/windows/nsWindow.cpp,
line 3897]
nsWindow::WindowProc 
[c:/builds/tinderbox/firefox/WINNT_5.0_Clobber/mozilla/widget/src/windows/nsWindow.cpp,
line 1383]
USER32.dll + 0x1ef0 (0x77e11ef0)
USER32.dll + 0x3869 (0x77e13869)
USER32.dll + 0x38ab (0x77e138ab)
ntdll.dll + 0x1ff57 (0x77f9ff57)
USER32.dll + 0x21af (0x77e121af)
nsAppStartup::Run 
[c:/builds/tinderbox/firefox/WINNT_5.0_Clobber/mozilla/toolkit/components/startup/src/nsAppStartup.cpp,
line 147]
main 
[c:/builds/tinderbox/firefox/WINNT_5.0_Clobber/mozilla/browser/app/nsBrowserApp.cpp,
line 60]
KERNEL32.DLL + 0x2893d (0x7c59893d)

Maybe this is related to bug 273458?

Comment 3

[Martijn Wargers (dead)]

Ok, it works in:
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8a5) Gecko/20041124
Firefox/0.9.1+
But it crashes in:
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8a5) Gecko/20041125
Firefox/0.9.1+

So definitely related to bug 273458.

Comment 4

[Alex Vincent [:WeirdAl]]

Also for me using a Mozilla trunk build, so this isn't a Firefox-only issue.

I'd call it a dupe instead of blocking.  But I'll let wiser heads make that call.

Comment 5

[Jack Whelpton]

Just retested this using a tinderbox build that postdates Boris' fix for bug
273458, and it appears to have been resolved. Thanks!

Comment 6

[timeless]

*** This bug has been marked as a duplicate of 273458 ***