295390 - Using Tab or Arrow Keys on "Website Certified by Unknown Authority" dialog causes crash.

Status: VERIFIED DUPLICATE of bug 281196

(Firefox :: General, defect)

Description

[mkohler]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.7) Gecko/20050421 Firefox/1.0.3 (Debian package 1.0.3-2)
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.7) Gecko/20050421 Firefox/1.0.3 (Debian package 1.0.3-2)

If the first key you hit after seeing the "Website Certified by Unknown
Authority" dialog is the TAB key, or an arrow key, Firefox crashes.

Reproducible: Always

Steps to Reproduce:
1. Using a https URL to go to a site that has a certificat with an unknown
certifying authority.
2. Notice the dialog box you get.
3. Press the TAB key, or an arrow key.

Actual Results:  
Firefox crashes.

Expected Results:  
Changed the focus of the dialog.

Comment 1

[:Gavin Sharp [email: [e-mail]]]

Could you provide a talkback incident ID, or a stack trace?

Comment 2

[mkohler]

The stack trace is below. Seeing GTK on the top of the stack, I changed the
Gnome theme of my desktop from Slider to Default, and the problem went away.
Presumably that means this is a GTK bug, not a Firefox bug. Does that mean
I should mark the bug's resolution as INVALID?

(gdb) bt
#0  0x415407b5 in smooth_draw_slider_grip ()
   from /usr/lib/gtk-2.0/2.4.0/engines/libsmooth.so
#1  0x41546327 in smooth_draw_focus ()
   from /usr/lib/gtk-2.0/2.4.0/engines/libsmooth.so
#2  0x40332298 in gtk_paint_focus () from /usr/lib/libgtk-x11-2.0.so.0
#3  0x08517467 in moz_gtk_button_get_focus ()
#4  0x08513925 in nsNativeThemeGTK::GetGtkWidgetAndState ()
#5  0x085b9b6f in nsCSSRendering::PaintBackgroundWithSC ()
#6  0x085b8c64 in nsCSSRendering::PaintBackground ()
#7  0x08573396 in nsFrame::PaintSelf ()
#8  0x085ead00 in nsBoxFrame::GetDebugPref ()
#9  0x085eae14 in nsBoxFrame::PaintChild ()
#10 0x085eaf8b in nsBoxFrame::PaintChildren ()
#11 0x085eac1a in nsBoxFrame::GetDebugPref ()
#12 0x085eae14 in nsBoxFrame::PaintChild ()
#13 0x085eaf8b in nsBoxFrame::PaintChildren ()
#14 0x085eac1a in nsBoxFrame::GetDebugPref ()
#15 0x085eae14 in nsBoxFrame::PaintChild ()
#16 0x085eaf8b in nsBoxFrame::PaintChildren ()
#17 0x085eac1a in nsBoxFrame::GetDebugPref ()
#18 0x085eae14 in nsBoxFrame::PaintChild ()
#19 0x085eaf8b in nsBoxFrame::PaintChildren ()
#20 0x085eac1a in nsBoxFrame::GetDebugPref ()
---Type <return> to continue, or q <return> to quit---
#21 0x085eae14 in nsBoxFrame::PaintChild ()
#22 0x085eaf8b in nsBoxFrame::PaintChildren ()
#23 0x085eac1a in nsBoxFrame::GetDebugPref ()
#24 0x085eae14 in nsBoxFrame::PaintChild ()
#25 0x085eaf8b in nsBoxFrame::PaintChildren ()
#26 0x085eac1a in nsBoxFrame::GetDebugPref ()
#27 0x085eae14 in nsBoxFrame::PaintChild ()
#28 0x085eaf8b in nsBoxFrame::PaintChildren ()
#29 0x085eac1a in nsBoxFrame::GetDebugPref ()
#30 0x085eae14 in nsBoxFrame::PaintChild ()
#31 0x085eaf8b in nsBoxFrame::PaintChildren ()
#32 0x085eac1a in nsBoxFrame::GetDebugPref ()
#33 0x087efc26 in nsContainerFrame::PaintChild ()
#34 0x087efb1f in nsContainerFrame::PaintChildren ()
#35 0x087efab7 in nsContainerFrame::GetAdditionalChildListName ()
#36 0x096451e0 in ?? ()
#37 0x0968ab10 in ?? ()
#38 0xbfffc014 in ?? ()
#39 0x00000000 in ?? ()
#40 0x00000000 in ?? ()
#41 0xbfffbfac in ?? ()
#42 0x0858dc3d in PresShell::StyleRuleRemoved ()
Previous frame inner to this frame (corrupt stack?)
(gdb)

Comment 3

[:Gavin Sharp [email: [e-mail]]]

This would be an exact dupe of bug 281196. I'd say it definitely looks like a
GTK bug, rather than a Mozilla bug.

*** This bug has been marked as a duplicate of 281196 ***

Comment 4

[timeless]

*** Bug 299177 has been marked as a duplicate of this bug. ***