295591 - blazingly fast for/backward overwrites? svg objects

Status: VERIFIED DUPLICATE of bug 299153

(Firefox :: General, defect)

Description

[p-etges]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; de-DE; rv:1.8b2) Gecko/20050525 Firefox/1.0+
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8b2) Gecko/20050525 Firefox/1.0+

If blazinly fast forward/backword is "on" (browser.sessionhistory.max_viewers is
set to nonzero):
If the last page contains multiple svg objects, then all except the last will be
overwritten when going back to that page.

Reproducible: Always

Steps to Reproduce:
0. Set browser.sessionhistory.max_viewers to a nonzero value
1. Load
http://www.carto.net/papers/svg/manipulating_svg_with_dom_ecmascript/index.shtml 
2. Click on any link
3. Click the back button
Actual Results:  
All svg objects-containers only show the content of the last object

Expected Results:  
Each svg object is shown in its container

Comment 1

[Peter van der Woude [:Peter6]]

Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8b2) Gecko/20050525
Firefox/1.0+ ID:2005052515

Confirmed, I have no idea why this happens
Maybe because <embed> is used ?

Comment 2

[Peter van der Woude [:Peter6]]

Attachment: testcase

open testcase and click on the link in that document, than click Back

Comment 3

[Peter van der Woude [:Peter6]]

Attachment: testcase with iframe

This document uses <iframe> i/o <embed> and it works fine

Comment 4

[Peter van der Woude [:Peter6]]

testcase regressed into a crash !!

TB6728250Z

... more  as soon as the talkback is available

Comment 5

[Peter van der Woude [:Peter6]]

crash [@ nsDocShell::CreateContentViewer] / [@ 	 nsDocShell::FinishRestore
59cb1c0c] only on 1st testcase


20050615 13:29 pdt , no crash
20050615 19:36 pdt , crash

checkins
http://bonsai.mozilla.org/cvsquery.cgi?treeid=default&module=PhoenixTinderbox&branch=HEAD&branchtype=match&dir=&file=&filetype=match&who=&whotype=match&sortby=Date&hours=2&date=explicit&mindate=2005-06-15+15%3A00%3A00&maxdate=2005-06-15+19%3A00%3A00&cvsroot=%2Fcvsroot

Stack Signature	 nsDocShell::FinishRestore 59cb1c0c
Product ID	FirefoxTrunk
Build ID	2005061606
Trigger Time	2005-06-16 09:19:39.0
Platform	Win32
Operating System	Windows NT 5.0 build 2195
Module	firefox.exe + (00322e52)
URL visited	https://bugzilla.mozilla.org/attachment.cgi?id=184596
User Comments	
Since Last Crash	1166 sec
Total Uptime	1166 sec
Trigger Reason	Access violation
Source File, Line No.
c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/docshell/base/nsDocShell.cpp,
line 5000
Stack Trace 	
nsDocShell::FinishRestore 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/docshell/base/nsDocShell.cpp,
line 5000]
nsDocShell::FinishRestore 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/docshell/base/nsDocShell.cpp,
line 4997]
HandleRestorePresentationEvent 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/docshell/base/nsDocShell.cpp,
line 4913]
SETUPAPI.DLL + 0x30c24 (0x778b0c24)

Stack Signature	 nsDocShell::CreateContentViewer 90035da6
Product ID	FirefoxTrunk
Build ID	2005061506
Trigger Time	2005-06-16 09:13:23.0
Platform	Win32
Operating System	Windows NT 5.1 build 2600
Module	firefox.exe + (00323411)
URL visited	
User Comments	
Since Last Crash	26137 sec
Total Uptime	26137 sec
Trigger Reason	Access violation
Source File, Line No.
c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/docshell/base/nsDocShell.cpp,
line 5339
Stack Trace 	
nsDocShell::CreateContentViewer 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/docshell/base/nsDocShell.cpp,
line 5339]
nsDocShell::CreateContentViewer 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/docshell/base/nsDocShell.cpp,
line 5339]
nsDocShell::RestorePresentation 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/docshell/base/nsDocShell.cpp,
line 5216]
0x778b0c24
nsHTMLModElement::CloneNode 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/content/html/content/src/nsHTMLDelElement.cpp,
line 94]
0x488d0424

Comment 6

[Peter van der Woude [:Peter6]]

possible regressor bug 292971
the only one that touches Docshell

CC bryner

Comment 7

[Brian Ryner (not reading)]

*** This bug has been marked as a duplicate of 299153 ***

Comment 8

[Greg K.]

Verifying duplicate; in any event, it WFM using Win FF 1.5.