284584 - ###!!! ASSERTION: nsHTMLDocument::Close(): nsIWyciwygChannel could not be removed!: '!mWyciwygChannel', file r:/mozilla/content/html/document/src/nsHTMLDocument.cpp, line 2170

Status: RESOLVED INCOMPLETE

(Core :: DOM: Core & HTML, defect, P5)

Description

[timeless]

Error loading URL wyciwyg://2/http://www.geocities.com/ladypenstar/ : 804b0002
WARNING: NS_ENSURE_TRUE(NS_SUCCEEDED(rv)) failed, file
r:/mozilla/content/html/document/src/nsHTMLDocument.cpp, line 3514
###!!! ASSERTION: nsHTMLDocument::Close(): nsIWyciwygChannel could not be
removed!: '!mWyciwygChannel', file
r:/mozilla/content/html/document/src/nsHTMLDocument.cpp, line 2170

 	xpcom_core.dll!nsDebug::Assertion(const char * aStr=0x02086680, const char *
aExpr=0x02086668, const char * aFile=0x02086630, int aLine=2170)  Line 109	C++
 	gklayout.dll!nsHTMLDocument::Close()  Line 2170 + 0x29	C++
 	xpcom_core.dll!XPTC_InvokeByIndex(nsISupports * that=0x0b930714, unsigned int
methodIndex=60, unsigned int paramCount=0, nsXPTCVariant * params=0x0012e99c)
 Line 102	C++
 	xpc3250.dll!XPCWrappedNative::CallMethod(XPCCallContext & ccx={...},
XPCWrappedNative::CallMode mode=CALL_METHOD)  Line 2070 + 0x1e	C++
 	xpc3250.dll!XPC_WN_CallMethod(JSContext * cx=0x093123d0, JSObject *
obj=0x08d0b8a8, unsigned int argc=0, long * argv=0x0b70c788, long *
vp=0x0012ec70)  Line 1311 + 0xb	C++
 	js3250.dll!js_Invoke(JSContext * cx=0x093123d0, unsigned int argc=0, unsigned
int flags=0)  Line 1293 + 0x20	C
 	js3250.dll!js_Interpret(JSContext * cx=0x093123d0, unsigned char *
pc=0x0b9a6c83, long * result=0x0012f70c)  Line 3566 + 0xf	C
 	js3250.dll!js_Execute(JSContext * cx=0x093123d0, JSObject * chain=0x0a057e08,
JSScript * script=0x0b9a6ae0, JSStackFrame * down=0x00000000, unsigned int
flags=0, long * result=0x0012f814)  Line 1523 + 0x13	C
 	js3250.dll!JS_EvaluateUCScriptForPrincipals(JSContext * cx=0x093123d0,
JSObject * obj=0x0a057e08, JSPrincipals * principals=0x09d4c68c, const unsigned
short * chars=0x0b89eed8, unsigned int length=1302, const char *
filename=0x075b7850, unsigned int lineno=1, long * rval=0x0012f814)  Line 3766
+ 0x19	C
 	gklayout.dll!nsJSContext::EvaluateString(const nsAString & aScript={...}, void
* aScopeObject=0x0a057e08, nsIPrincipal * aPrincipal=0x09d4c688, const char *
aURL=0x075b7850, unsigned int aLineNo=1, const char * aVersion=0x00dc3854,
nsAString * aRetValue=0x00000000, int * aIsUndefined=0x0012f8e4)  Line 1038 +
0x43	C++
 	gklayout.dll!nsScriptLoader::EvaluateScript(nsScriptLoadRequest *
aRequest=0x07733600, const nsString & aScript={...})  Line 723	C++
 	gklayout.dll!nsScriptLoader::ProcessRequest(nsScriptLoadRequest *
aRequest=0x07733600)  Line 629 + 0x13	C++
 	gklayout.dll!nsScriptLoader::OnStreamComplete(nsIStreamLoader *
aLoader=0x0a4b6668, nsISupports * aContext=0x07733600, unsigned int aStatus=0,
unsigned int stringLen=4294967295, const unsigned char * string=0x0b886daf) 
Line 975	C++
 	necko.dll!nsStreamLoader::OnStopRequest(nsIRequest * request=0x092efbb0,
nsISupports * ctxt=0x07733600, unsigned int aStatus=0)  Line 137	C++
 	necko.dll!nsHTTPCompressConv::OnStopRequest(nsIRequest * request=0x092efbb0,
nsISupports * aContext=0x07733600, unsigned int aStatus=0)  Line 135	C++
 	necko.dll!nsStreamListenerTee::OnStopRequest(nsIRequest * request=0x092efbb0,
nsISupports * context=0x07733600, unsigned int status=0)  Line 66	C++
 	necko.dll!nsHttpChannel::OnStopRequest(nsIRequest * request=0x0b994240,
nsISupports * ctxt=0x00000000, unsigned int status=0)  Line 3814	C++
 	necko.dll!nsInputStreamPump::OnStateStop()  Line 507	C++
 	necko.dll!nsInputStreamPump::OnInputStreamReady(nsIAsyncInputStream *
stream=0x0b519ae0)  Line 343 + 0xb	C++
 	xpcom_core.dll!nsInputStreamReadyEvent::EventHandler(PLEvent *
plevent=0x09118b24)  Line 119	C++
 	xpcom_core.dll!PL_HandleEvent(PLEvent * self=0x09118b24)  Line 698 + 0xa	C
 	xpcom_core.dll!PL_ProcessPendingEvents(PLEventQueue * self=0x00bce008)  Line
633 + 0x9	C
 	xpcom_core.dll!_md_EventReceiverProc(HWND__ * hwnd=0x001205ac, unsigned int
uMsg=49418, unsigned int wParam=0, long lParam=12378120)  Line 1435 + 0x9	C
 	user32.dll!_InternalCallWinProc@20()  + 0x28	
 	user32.dll!_UserCallWinProcCheckWow@32()  + 0xb7	
 	user32.dll!_DispatchMessageWorker@8()  + 0xdc	
 	user32.dll!_DispatchMessageW@4()  + 0xf	
 	gkwidget.dll!nsAppShell::Run()  Line 135	C++
 	appcomps.dll!nsAppStartup::Run()  Line 207	C++
 	mozilla.exe!main1(int argc=1, char * * argv=0x00347a98, nsISupports *
nativeApp=0x00bbbfb8)  Line 1324 + 0x20	C++
 	mozilla.exe!main(int argc=1, char * * argv=0x00347a98)  Line 1825 + 0x25	C++
 	mozilla.exe!mainCRTStartup()  Line 398 + 0x11	C
 	kernel32.dll!_BaseProcessStart@4()  + 0x23	

+	mData	0x0bc47988 "wyciwyg"	char *
+	mData	0x0b651978 "//2/http://www.geocities.com/ladypenstar/"	char *

i may have been trying to close a popup

Comment 1

[Boris Zbarsky [:bzbarsky]]

Step to reproduce?

Comment 2

[timeless]

i'm just using the browser buster from http://landfill.mozilla.org/ryl/random.html

Error loading URL wyciwyg://3/http://www.geocities.com/Athens/Aegean/6720/ :
804b0002
WARNING: NS_ENSURE_TRUE(NS_SUCCEEDED(rv)) failed, file
r:/mozilla/content/html/document/src/nsHTMLDocument.cpp, line 3514
###!!! ASSERTION: nsHTMLDocument::Close(): nsIWyciwygChannel could not be
removed!: '!mWyciwygChannel', file
r:/mozilla/content/html/document/src/nsHTMLDocument.cpp, line 2170
Break: at file r:/mozilla/content/html/document/src/nsHTMLDocument.cpp, line 2170
0 [native frame]
1 <TOP LEVEL>
["http://us.adserver.yahoo.com/a?f=76001083&p=geocities&l=PUC&c=o&bg=ffffff":22]
    this = [object Window @ 0xb6b1790]
0 [native frame]
1 <TOP LEVEL>
["http://us.adserver.yahoo.com/a?f=76001083&p=geocities&l=PUC&c=o&bg=ffffff":22]
    this = [object Window @ 0xb6b1790]

+
{,,necko.dll}((*(nsACString*)(&(*(nsCSubstring*)(&(*(nsStandardURL*){*}((((*(nsIDocument*)(&(*(nsDocument*)(&*this))))).mDocumentURI).mRawPtr)).mSpec))))).mData
0x0a48ee30 "http://www.geocities.com/Athens/Aegean/6720/"	char *
+
{,,necko.dll}((*(nsACString*)(&(*(nsCSubstring*)(&(*(nsSimpleURI*){,,gklayout.dll}(((*(nsWyciwygChannel*){*}(((*this).mWyciwygChannel).mRawPtr)).mURI).mRawPtr)).mScheme))))).mData
0x0a1916a0 "wyciwyg"	char *
+
{,,necko.dll}((*(nsACString*)(&(*(nsCSubstring*)(&(*(nsSimpleURI*){,,gklayout.dll}(((*(nsWyciwygChannel*){*}(((*this).mWyciwygChannel).mRawPtr)).mURI).mRawPtr)).mPath))))).mData
0x09fee318 "//3/http://www.geocities.com/Athens/Aegean/6720/"	char *

that's two hits from geocities, seems like that'd be where i'd start.

Comment 3

[Andrey Melnikov]

CONFIRMED

User-agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8b2)
Gecko/20050331 Firefox/1.0+

Steps to reproduce:

1. Open http://www.geocities.com/ladypenstar/
2. Right-click the background with stars

Expected behaviour: Browser context menu opens

Actual behaviour: Browser crashes and creates a talkback report

Comment 4

[Boris Zbarsky [:bzbarsky]]

Andrey, this bug report is about an assertion, not a crash...  you're seeing a
different bug.  Please file it, and cc me.  Please include the talkback incident
id with your report.

Comment 5

[Firefox Bug Husbandry Bot]

https://bugzilla.mozilla.org/show_bug.cgi?id=1472046

Move all DOM bugs that haven’t been updated in more than 3 years and has no one currently assigned to P5.

If you have questions, please contact :mdaly.

Comment 6

[Andrew McCreight [:mccr8]]

This is an old bug without good STR, and Wyciwyg is going away in bug 1489308, so I think this can be closed.