283027 - position: fixed causes crash

Status: RESOLVED DUPLICATE of bug 235405

(Core :: Layout, defect)

Description

[Carl Schrader]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8b) Gecko/20050218 Firefox/1.0+
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8b) Gecko/20050218 Firefox/1.0+

I have the following div on a page:
<div id="dwindow"
style="position:fixed;background-color:#ffffff;cursor:hand;right:0px;top:10px;display:none;"
onSelectStart="return false;">
    <iframe id="cframe" src="about:blank" class="cframe" width=100%
height=100%></iframe>
    <div id="saver"
style="width:100%;height:100%;position:absolute;left:0;top:0;display:none"></div>
    </div>

the crash occurs when I use some javascript code to "close" this div:

function closeIt(){
  top.document.getElementById("cframe").src="about:blank"
  top.document.getElementById("dwindow").style.display="none"
}

This is executed from the div using this code:
<div class="close" title="Close Window"><a href="javascript: closeIt();"></a></div>

If I change the div to be:

<div id="dwindow"
style="position:absolute;background-color:#ffffff;cursor:hand;right:0px;top:10px;display:none;"
onSelectStart="return false;">
    <iframe id="cframe" src="about:blank" class="cframe" width=100%
height=100%></iframe>
    <div id="saver"
style="width:100%;height:100%;position:absolute;left:0;top:0;display:none"></div>
    </div>

(Position is absolute instead of fixed.) The crash doesn't happen anymore.

Reproducible: Always

Actual Results:  
Crash

Expected Results:  
Div "closed"

Crash Talkback Incident: TB3840291K

Comment 1

[Frank Wein [:mcsmurf]]

Please search for dupes before filing a bug report :) (look up your talkback
report under http://talkback-public.mozilla.org and click on the top function
signature, here GetFrameFromLine). Or file your bug report as UNCONFIRMED, you
can do this by using the regular bug form under
https://bugzilla.mozilla.org/enter_bug.cgi (if you use the guided form, it will
file all bugs as NEW if you have the permissions to do so), thanks :).

*** This bug has been marked as a duplicate of 235405 ***