31126 - Crash in nsGenericDOMDataNode.cpp when selecting a new newsgroup to display it's contents.

Status: VERIFIED WORKSFORME

(SeaMonkey :: MailNews: Message Display, defect, P3)

Description

[lchiang]

Crash in nsGenericDOMDataNode.cpp when selecting a new newsgroup to display it's 
contents.

Win32 03/08 build.  I don't know if this is reproducible, but hopefully the 
stack trace will help and if I see this again, I can add to this bug report.

Here is a summary of what I was doing:

 Read IMAP msgs. Read about 12 msgs in mozilla.org mail-news newsgroup. Select 
mac newsgroup. Status shows downloading 11 headers. Crash. Thread pane still 
showing contents of mail-news newsgroup 

Stack trace:

   nsGenericDOMDataNode::GetParent                  
[d:\builds\seamonkey\mozilla\layout\base\src\nsGenericDOMDataNode.cpp, line 760]
   nsHTMLImageElement::GetParent                   
[d:\builds\seamonkey\mozilla\layout\html\content\src\nsHTMLImageElement.cpp, 
line 130]
   nsCSSFrameConstructor::FindPrimaryFrameFor                                   
[d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp, 
line 8667]
   StyleSetImpl::FindPrimaryFrameFor                                 
[d:\builds\seamonkey\mozilla\layout\base\src\nsStyleSet.cpp, line 1075]
   FrameManager::GetPrimaryFrameFor                                  
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrameManager.cpp, line 422]
   PresShell::GetPrimaryFrameFor                                     
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 2769]
   nsCSSFrameConstructor::ContentStatesChanged                                  
[d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp, 
line 7596]
   StyleSetImpl::ContentStatesChanged                                 
[d:\builds\seamonkey\mozilla\layout\base\src\nsStyleSet.cpp, line 1002]
   PresShell::ContentStatesChanged                                
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 2580]
   nsXULDocument::ContentStatesChanged                                      
[d:\builds\seamonkey\mozilla\rdf\content\src\nsXULDocument.cpp, line 1399]
   nsEventStateManager::SetContentState                                    
[d:\builds\seamonkey\mozilla\layout\events\src\nsEventStateManager.cpp, line 
2232]
   nsEventStateManager::GenerateMouseEnterExit                            
[d:\builds\seamonkey\mozilla\layout\events\src\nsEventStateManager.cpp, line 
1377]
   nsEventStateManager::PreHandleEvent                                      
[d:\builds\seamonkey\mozilla\layout\events\src\nsEventStateManager.cpp, line 
427]
   PresShell::HandleEvent                                  
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 3008]
   nsView::HandleEvent                                      
[d:\builds\seamonkey\mozilla\view\src\nsView.cpp, line 799]
   nsView::HandleEvent                                      
[d:\builds\seamonkey\mozilla\view\src\nsView.cpp, line 784]
   nsView::HandleEvent 
[d:\builds\seamonkey\mozilla\view\src\nsView.cpp, line 784]
   nsView::HandleEvent 
[d:\builds\seamonkey\mozilla\view\src\nsView.cpp, line 784]
   nsViewManager2::DispatchEvent 
[d:\builds\seamonkey\mozilla\view\src\nsViewManager2.cpp, line 1216]
   HandleEvent 
[d:\builds\seamonkey\mozilla\view\src\nsView.cpp, line 69]
   nsWindow::DispatchEvent 
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 497]
   nsWindow::DispatchWindowEvent                         
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 514]
   nsWindow::DispatchMouseEvent 
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 2976]
   ChildWindow::DispatchMouseEvent                 
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 3192]
   nsWindow::ProcessMessage                       
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 2274]
   nsWindow::WindowProc                     
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 672]
   USER32.dll + 0x1268 (0x77e71268)

Comment 1

[Phil Peterson]

Reassign to rickg for triage. cc sspitzer.

Comment 2

[rickg]

Mark: Please take a look into this crasher.

Comment 3

[Marc Attinasi]

I tried this several times, and also spent an hour+ in mail-news doing similar 
things and could not get a crash.

lchiang, can you reproduce it, if so, reliably?

I'd have to mark this WORKSFORME but I want to make sure it isn't reporducable 
on another machine first. Also, my source is from the trunk on 3/20 so it is 
considerably newer than the build you had on 3/8 when you reported it.

Let me know if you can repro still.

Comment 4

[lchiang]

I have not seen this for a while.

Comment 5

[Marc Attinasi]

Marking WORKSFORME - if it crops up again we'll have to reopen it or open 
another.

Comment 6

[leger]

Adding crash keyword

Comment 7

[lchiang]

verified