300229 - crash, if drop a bookmark from internet shotcut icon on desktop [@ JS_GetFrameFunctionObject]

Status: RESOLVED DUPLICATE of bug 279678

(Core :: Security: CAPS, defect)

Description

[baffclan]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8b3) Gecko/20050709 Firefox/1.0+
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8b3) Gecko/20050709 Firefox/1.0+

crash, if drop a bookmark from internet shotcut icon on disktop or
from SeaMonkey bookmarks menu

Reproducible: Always

Steps to Reproduce:
1. run Firefox
2. drop bookmark from internets hotcut icon


Actual Results:  
Firefox is crash.

Expected Results:  
Firefox is not crash.

Talkback is come up.
but cannot send a talkback report.
# talkbak's server down?

Comment 1

[baffclan]

send a talkbak.
ID : TB7340180M, TB7340167G

Comment 2

[timeless]

Incident ID: 7340180
Stack Signature	JS_GetFrameFunctionObject 915c96d8
Product ID	FirefoxTrunk
Build ID	2005070900
Trigger Time	2005-07-09 17:15:40.0
Platform	Win32
Operating System	Windows NT 5.1 build 2600
Module	js3250.dll + (0000ec11)
URL visited	drop a bookmark from disktop shotcut icon
User Comments	
Since Last Crash	13 sec
Total Uptime	2965 sec
Trigger Reason	Access violation
Source File, Line No.
c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/js/src/jsdbgapi.c, line 815
Stack Trace 	
JS_GetFrameFunctionObject 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/js/src/jsdbgapi.c, line 815]
nsScriptSecurityManager::GetPrincipalAndFrame 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/caps/src/nsScriptSecurityManager.cpp,
line 1949]
nsScriptSecurityManager::GetSubjectPrincipal 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/caps/src/nsScriptSecurityManager.cpp,
line 1991]
nsScriptSecurityManager::doGetSubjectPrincipal 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/caps/src/nsScriptSecurityManager.cpp,
line 1638]
nsScriptSecurityManager::SubjectPrincipalIsSystem 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/caps/src/nsScriptSecurityManager.cpp,
line 1673]
nsGlobalWindow::IsCallerChrome 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/dom/src/base/nsGlobalWindow.cpp,
line 2369]
nsGlobalWindow::CanSetProperty 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/dom/src/base/nsGlobalWindow.cpp,
line 3193]
nsWebShellWindow::HandleEvent 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/xpfe/appshell/src/nsWebShellWindow.cpp,
line 499]
nsWindow::DispatchEvent 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/widget/src/windows/nsWindow.cpp,
line 1171]
nsWindow::DispatchFocus 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/widget/src/windows/nsWindow.cpp,
line 5980]
nsWindow::ProcessMessage 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/widget/src/windows/nsWindow.cpp,
line 4600]
nsWindow::WindowProc 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/widget/src/windows/nsWindow.cpp,
line 1348]
USER32.dll + 0x8734 (0x77cf8734)
USER32.dll + 0x8816 (0x77cf8816)
USER32.dll + 0xb4c0 (0x77cfb4c0)
USER32.dll + 0xb50c (0x77cfb50c)
ntdll.dll + 0xeae3 (0x7c94eae3)
USER32.dll + 0xb3f9 (0x77cfb3f9)
USER32.dll + 0xb393 (0x77cfb393)
nsWindow::DefaultWindowProc 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/widget/src/windows/nsWindow.cpp,
line 1374]
USER32.dll + 0x8734 (0x77cf8734)
USER32.dll + 0x8816 (0x77cf8816)
USER32.dll + 0xc63f (0x77cfc63f)
USER32.dll + 0xc665 (0x77cfc665)
nsWindow::WindowProc 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/widget/src/windows/nsWindow.cpp,
line 1355]
USER32.dll + 0x8734 (0x77cf8734)
USER32.dll + 0x8816 (0x77cf8816)
USER32.dll + 0xb4c0 (0x77cfb4c0)
USER32.dll + 0xb50c (0x77cfb50c)
ntdll.dll + 0xeae3 (0x7c94eae3)
USER32.dll + 0x9402 (0x77cf9402)
nsAppShell::Run 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/widget/src/windows/nsAppShell.cpp,
line 128]
nsAppStartup::Run 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/toolkit/components/startup/src/nsAppStartup.cpp,
line 146]
main 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/browser/app/nsBrowserApp.cpp,
line 61]
kernel32.dll + 0x16d4f (0x7c816d4f)

Comment 3

[baffclan]

I cannot reproduce Firefox/2005071106-trunk/WinXP.
WFM?

Comment 4

[Adam Guthrie]

*** This bug has been marked as a duplicate of 279678 ***