292301 - Ctrl + Left/Right arrow on ending radio boxes crash browser

Status: RESOLVED WORKSFORME

(Toolkit :: Form Manager, defect)

Description

[Don Wilson]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.7) Gecko/20050414 Firefox/1.0.3
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.7) Gecko/20050414 Firefox/1.0.3

If you go inside phpMyAdmin, create a new table with a couple of columns and
you'll see a row of radios to the right. Normally you can Ctrl+arrow around the
input/select boxes to the left, but you have to manually tab to the right to get
into the radio boxes (this may be a problem with their coding, or one with
mozilla, not sure).

Once one of the radio boxes is selected, you can freely move about inside the
radio boxes with the Ctrl+Arrow feature, but if you try to go outside of that
group, the browser crashes.

Reproducible: Always

Steps to Reproduce:
1. Create form with an input and a radio button
2. Select radio box
3. Ctrl+arrow out of it

Actual Results:  
browser crashes

Expected Results:  
Deselect radio box and select the input box.

Comment 1

[Steve England [:stevee]]

Don, can you provide a link and steps to reproduce this; or a reduced testcase?
thanks!

Comment 2

[Don Wilson]

(In reply to comment #1)
> Don, can you provide a link and steps to reproduce this; or a reduced testcase?
> thanks!

If you go into an install of phpMyAmin (found at http://www.phpmyadmin.net/) and
create a new table (image:
http://www.efficienthosting.co.uk/support/i/mysql4.gif) inside a database, you
can run through my steps and reproduce the error.

Comment 3

[Steve England [:stevee]]

OK let's try this a different way

1) Can you try a firefox nightly trunk (1.1beta) build and see if this still
happens for you?

http://ftp.uni-erlangen.de/pub/mozilla.org/firefox/nightly/latest-trunk/

2) Did you sumbit any crash data to the talkback server? If so, please run
/Mozilla Firefox/components/talkback.exe and quote the TalkbackIDs that you
submitted. Thanks!

Comment 4

[Don Wilson]

The latest trunk doesn't seem to me working properly (msi nor exe). I just tried
it again on my current build and it did exactly as expected. Incident ID: TB5532688Y

Comment 5

[timeless]

see also bug 242835/bug 144610/bug 256835 
Trigger Reason	Stack overflow
in:
nsFrame::PeekOffset 
[d:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.0_Depend/mozilla/layout/html/base/src/nsFrame.cpp,
line 3627]

Comment 6

[Matthias Versen [:Matti]]

*** This bug has been marked as a duplicate of 295142 ***

Comment 7

[Ginn Chen]

(In reply to comment #6)
> 
> *** This bug has been marked as a duplicate of 295142 ***

How do you think it is a duplication? bug 295142 is about BiDi and it can't be reproduced on Windows.
Still, I didn't try to reproduce this bug yet. 

Comment 8

[Ginn Chen]

Not reproducible on
Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.8b2) Gecko/20050522
and
Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.8b2) Gecko/20050522