341724 - Crash on clicking javascript:close() link twice [@ nsGenericHTMLElement::PostHandleEventForAnchors]

Status: RESOLVED WORKSFORME

(Core :: DOM: Core & HTML, defect)

Description

[Raj Bhaskar]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9a1) Gecko/20060615 MultiZilla/1.8.2.0i SeaMonkey/1.5a
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9a1) Gecko/20060615 MultiZilla/1.8.2.0i SeaMonkey/1.5a

If I open a window with Javascript that has a link in it <a href="javascript:close();">, and then click the link, nothing happens.  Clicking it again causes a crash.

Testcase to come.



Reproducible: Always

Steps to Reproduce:
1. Open the attached testcase
2. Click "Click me to open a window" (allow the window to open)
3. In the new window, click the "Close window" link
4. Nothing happens
5. Click the "close window" link again
Actual Results:  
SeaMonkey crashes

Expected Results:  
Window should close after the first click on the link

Talkback ID: TB19930527X

Clicking the close button (red X) works fine.

Comment 1

[Raj Bhaskar]

Attachment: Testcase

Comment 2

[Olli Pettay [:smaug][[e-mail]]]

WFM, trunk FF

Comment 3

[Raj Bhaskar]

Never mind, I disabled extensions and discovered it to be a problem with MultiZilla.

Comment 4

[timeless]

please indicate the precise version of multizilla (a url to install it is a ideall) we shouldn't crash, i wonder how it got the focuscontroller to be null.

http://bonsai.mozilla.org/cvsblame.cgi?file=/mozilla/content/html/content/src/nsGenericHTMLElement.cpp&mark=1446&rev=1.658#1443

Incident ID: 19930527
Stack Signature	nsGenericHTMLElement::PostHandleEventForAnchors 8826215c
Product ID	MozillaTrunk
Build ID	2006061509
Trigger Time	2006-06-16 02:26:50.0
Platform	Win32
Operating System	Windows NT 5.1 build 2600
Module	gklayout.dll + (001277bb)
URL visited	
User Comments	
Since Last Crash	364 sec
Total Uptime	550 sec
Trigger Reason	Access violation
Source File, Line No.	c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/content/html/content/src/nsGenericHTMLElement.cpp, line 1446
Stack Trace 	
nsGenericHTMLElement::PostHandleEventForAnchors  [c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/content/html/content/src/nsGenericHTMLElement.cpp, line 1446]
nsEventTargetChainItem::PostHandleEvent  [c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/content/events/src/nsEventDispatcher.cpp, line 348]
nsEventTargetChainItem::HandleEventTargetChain  [c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/content/events/src/nsEventDispatcher.cpp, line 508]
nsEventTargetChainItem::CreateChainAndHandleEvent  [c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/content/events/src/nsEventDispatcher.cpp, line 405]
nsEventTargetChainItem::CreateChainAndHandleEvent  [c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/content/events/src/nsEventDispatcher.cpp, line 392]
nsEventTargetChainItem::CreateChainAndHandleEvent  [c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/content/events/src/nsEventDispatcher.cpp, line 392]
nsEventTargetChainItem::CreateChainAndHandleEvent  [c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/content/events/src/nsEventDispatcher.cpp, line 392]
nsEventTargetChainItem::CreateChainAndHandleEvent  [c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/content/events/src/nsEventDispatcher.cpp, line 392]
nsEventTargetChainItem::CreateChainAndHandleEvent  [c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/content/events/src/nsEventDispatcher.cpp, line 392]
nsEventDispatcher::Dispatch  [c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/content/events/src/nsEventDispatcher.cpp, line 575]
PresShell::HandleEventInternal  [c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/base/nsPresShell.cpp, line 6236]
PresShell::HandlePositionedEvent  [c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/base/nsPresShell.cpp, line 6111]
PresShell::HandleEvent  [c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/layout/base/nsPresShell.cpp, line 5939]
nsViewManager::HandleEvent  [c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/view/src/nsViewManager.cpp, line 1665]
nsViewManager::DispatchEvent  [c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/view/src/nsViewManager.cpp, line 1618]
HandleEvent  [c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/view/src/nsView.cpp, line 174]
nsWindow::DispatchEvent  [c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/widget/src/windows/nsWindow.cpp, line 1102]
nsWindow::DispatchMouseEvent  [c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/widget/src/windows/nsWindow.cpp, line 6007]
ChildWindow::DispatchMouseEvent  [c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/widget/src/windows/nsWindow.cpp, line 6189]
nsWindow::WindowProc  [c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/widget/src/windows/nsWindow.cpp, line 1291]
USER32.dll + 0x8734 (0x77d48734)
USER32.dll + 0x8816 (0x77d48816)
USER32.dll + 0x89cd (0x77d489cd)
USER32.dll + 0x8a10 (0x77d48a10)
nsAppShell::ProcessNextNativeEvent  [c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/widget/src/windows/nsAppShell.cpp, line 152]
nsBaseAppShell::DoProcessNextNativeEvent  [c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/widget/src/xpwidgets/nsBaseAppShell.cpp, line 137]
0xc0850845

Comment 5

[Raj Bhaskar]

(In reply to comment #4)
> please indicate the precise version of multizilla (a url to install it is a
> ideall) we shouldn't crash, i wonder how it got the focuscontroller to be null.

I'm using MultiZilla 1.8.2.0h.  Link to install: http://downloads.mozdev.org/multizilla/multiviews-v1820.xpi

FWIW, it doesn't crash in SM 1.0.1.

Comment 6

[Boris Zbarsky [:bzbarsky]]

Is this still a problem with current Multizilla?  If so, where would I install it from?  Is this just a problem in Seamonkey, or also in Firefox?

Comment 7

[Raj Bhaskar]

The stable MultiZilla hasn't changed from the link below, but there's an updated jar file available to make it work properly in current trunk nightlies.  Install 1.8.2.0 from the link in comment 5 then replace multiviews.jar with http://downloads.mozdev.org/multizilla/multiviews-nightly.jar

I'll test it from work tomorrow.

Comment 8

[Raj Bhaskar]

I no longer see this bug with Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9a1) Gecko/20060820 MultiZilla/1.8.3.0a SeaMonkey/1.5a and the latest MultiZilla experimental nightly (see link in comment 7).

Should this bug be closed as WFM or INVALID?

Comment 9

[Boris Zbarsky [:bzbarsky]]

WFM, I think.