305137 - crash/hang when changing iframe content [@ nsQueryInterface::operator() ]

Status: RESOLVED DUPLICATE of bug 304639

(Core :: DOM: Navigation, defect)

Description

[Peter van der Woude [:Peter6]]

Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8b4) Gecko/20050818
Firefox/1.0+ ID:2005081812

the crash/hang started with the first patch of Bug 296639

repro crash:
1. Open Firefox with 1 tab (important!)
2. Open http://home.planet.nl/~pa1six/particles/test.html in that tab
3. click on the tab with "GOES X-ray flux" (top left)
4. a page will open in the right frame
5. in that frame click on the tab "3 days"
-- crash

repro to hang:
as repro crash, but have more tabs open (content is unimportant)

TB8459705K (winXp) , TB8459563W (win2k)

debug stack next

Comment 1

[Peter van der Woude [:Peter6]]

Attachment: backtrace

Comment 2

[Martijn Wargers (dead)]

Doesn't crash with 2005-08-03 build, but crashes with 2005-08-04 build, so I
guess this could be a regression from fixing bug 301397.
Bug 304639 seems to be similar.

Comment 3

[Peter van der Woude [:Peter6]]

my bad about the innitially wrong regression, i must have screwed something up
while testing

Confirming Martijn's range
firefox-1.0+.en-US.win32_20050803_1133pdt works
firefox-1.0+.en-US.win32_20050804_0613pdt fails

http://bonsai.mozilla.org/cvsquery.cgi?treeid=default&module=all&branch=HEAD&branchtype=match&dir=&file=&filetype=match&who=&whotype=match&sortby=Date&hours=2&date=explicit&mindate=2005-08-03+10%3A50%3A00&maxdate=2005-08-04+06%3A00%3A00&cvsroot=%2Fcvsroot

Comment 4

[TimoT]

I get the same stack by doing to following

1) log on to gmail account
2) click rss feed icon in url bar
3) click back
4) hit the feed icon again

TB8494191K and TB8494217W

Comment 5

[Mats Palmgren (inactive)]

My suggested patch for bug 304639 fixes this. I'll update it and get it in ASAP.

*** This bug has been marked as a duplicate of 304639 ***

Comment 6

[Peter van der Woude [:Peter6]]

confirming bug 304639 fixed this