310913 - textbox with value in toolbar crashes [@ nsCSSFrameConstructor::ConstructFrame] firefox

Status: RESOLVED WORKSFORME

(Core :: Layout, defect)

Description

[Henrik Gemal]

I have an extension that has the following line within a toolbar:

<textbox textLength="5" value="test" />
this crashes firefox at startup

changing it to:
<textbox textLength="5" value="" />
fixes it so it doesn't crash at startup.

it's an extension that provides it's own toolbar

talkback:
TB10102251Q
TB10101644H
TB10101283Z

Comment 1

[Henrik Gemal]

perhaps this should be moved to CSS since the crash happens  in
nsCSSFrameConstructor::ConstructFrame 26cb3991

Comment 2

[Martijn Wargers (dead)]

Henrik, do you have the extension somewhere, where I can install it?

Comment 3

[Henrik Gemal]

Attachment: xpi that crashes firefox

Comment 4

[Martijn Wargers (dead)]

Thanks, but I'm not getting a crash from that extension, using 2005-10-06 winxp
trunk build.
Maybe the crash depends on another thing also you have on your computer?

From talkback ID TB10101644H:
nsCSSFrameConstructor::ConstructFrame 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/layout/base/nsCSSFrameConstructor.cpp,
line 7607]
nsCSSFrameConstructor::ProcessChildren 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/layout/base/nsCSSFrameConstructor.cpp,
line 11604]
nsCSSFrameConstructor::ConstructXULFrame 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/layout/base/nsCSSFrameConstructor.cpp,
line 6302]
nsCSSFrameConstructor::ConstructFrameInternal 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/layout/base/nsCSSFrameConstructor.cpp,
line 7740]
nsCSSFrameConstructor::ConstructFrame 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/layout/base/nsCSSFrameConstructor.cpp,
line 7624]
nsCSSFrameConstructor::ProcessChildren 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/layout/base/nsCSSFrameConstructor.cpp,
line 11604]
nsCSSFrameConstructor::ConstructDocElementFrame 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/layout/base/nsCSSFrameConstructor.cpp,
line 4525]
nsCSSFrameConstructor::ContentInserted 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/layout/base/nsCSSFrameConstructor.cpp,
line 9114]
PresShell::InitialReflow 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/layout/base/nsPresShell.cpp,
line 2725]
nsXULDocument::StartLayout 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/content/xul/document/src/nsXULDocument.cpp,
line 2071]
nsXULDocument::ResumeWalk 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/content/xul/document/src/nsXULDocument.cpp,
line 3099]
nsXULDocument::OnStreamComplete 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/content/xul/document/src/nsXULDocument.cpp,
line 3383]
nsStreamLoader::OnStopRequest 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/netwerk/base/src/nsStreamLoader.cpp,
line 120]
nsJARChannel::OnStopRequest 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/modules/libjar/nsJARChannel.cpp,
line 712]

Comment 5

[Adam Guthrie]

Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9a1) Gecko/20051123 Firefox/1.6a1

WFM in a debug build from the 23rd, and in a trunk tinderbox build from the 25th.

Comment 6

[Adam Guthrie]

*** Bug 317749 has been marked as a duplicate of this bug. ***

Comment 7

[Boris Zbarsky [:bzbarsky]]

Is this still an issue in current trunk builds?  If I unstall that XPI in a current trunk firefox it seems to always be checking for updates to it (and the extension never gets enabled)....

Comment 8

[Henrik Gemal]

it works for me now also