305299 - crash if clicking on an image and closing that new window [@ ImageListener::OnStopRequest ]

Status: VERIFIED DUPLICATE of bug 305215

(Firefox :: General, defect)

Description

[Andreas Morawietz]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9a1) Gecko/20050819 Firefox/1.6a1
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9a1) Gecko/20050819 Firefox/1.6a1

Clicked on third image in second row on 
http://www.partysaarfari.de/index.php?page=digitalarts
A new window opens.
If I close that window, firefox crashs.

-->  TB8545417G



Reproducible: Always

Comment 1

[Andreas Morawietz]

This crash only happens in newest trunk - the branch closes that window without
a crash.

Comment 2

[Peter van der Woude [:Peter6]]

stack

Stack Signature	 ImageListener::OnStopRequest 14a41d78
Product ID	FirefoxTrunk
Build ID	2005081922
Trigger Time	2005-08-20 02:57:10.0
Platform	Win32
Operating System	Windows NT 5.1 build 2600
Module	firefox.exe + (001b9fb8)
URL visited	http://www.partysaarfari.de/index.php?page=digitalarts
User Comments	Clicked on third image in second row. A new window opens. If I
close that window, firefox crashs. WHY???
Since Last Crash	30 sec
Total Uptime	30 sec
Trigger Reason	Access violation
Source File, Line No.
c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/content/html/document/src/nsImageDocument.cpp,
line 234
Stack Trace 	
ImageListener::OnStopRequest 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/content/html/document/src/nsImageDocument.cpp,
line 234]
nsDocumentOpenInfo::OnStopRequest 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/uriloader/base/nsURILoader.cpp,
line 390]
nsStreamListenerTee::OnStopRequest 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/netwerk/base/src/nsStreamListenerTee.cpp,
line 65]
nsInputStreamPump::OnStateStop 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/netwerk/base/src/nsInputStreamPump.cpp,
line 507]

Comment 3

[Mats Palmgren (inactive)]

*** This bug has been marked as a duplicate of 305215 ***