355843 - Browser crashed when i closing small javascript-window on page http://www.businesslingua.ru/ [@ GetFrameFromLine]

Status: RESOLVED WORKSFORME

(Core :: Layout: Images, Video, and HTML Frames, defect)

Description

[ru-vadik]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; ru; rv:1.8.1) Gecko/20061003 Firefox/2.0
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; ru; rv:1.8.1) Gecko/20061003 Firefox/2.0



Reproducible: Always

Comment 1

[Radek 'sysKin' Czyz]

Despite OP's scarce of any steps to reproduce, I can confirm.

Steps to reproduce:
1. Go to that page
2. Find a small flash advertisement floating over the website. Its url is http://www.businesslingua.ru/images/popup.swf in case you can't find it.
3. Click a closing X in that flash

Actual results: TB24249855Y [ @ GetFrameFromLine 902b706a ]

Comment 2

[Ria Klaassen (not reading all bugmail)]

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9a1) Gecko/20061006 Minefield/3.0a1

The problem is not present in trunk anymore. Was repaired somewhere in August 2005.

Comment 3

[Ria Klaassen (not reading all bugmail)]

Incident ID: 24249855
Stack Signature	GetFrameFromLine 902b706a
Product ID	Firefox2
Build ID	2006100603
Trigger Time	2006-10-07 06:33:44.0
Platform	Win32
Operating System	Windows NT 5.1 build 2600
Module	firefox.exe + (002ce2dd)
URL visited	
User Comments	bug 355843
Since Last Crash	20304 sec
Total Uptime	20304 sec
Trigger Reason	Access violation
Source File, Line No.	c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/generic/nsBlockFrame.cpp, line 6877
Stack Trace 	
GetFrameFromLine  [mozilla/layout/generic/nsBlockFrame.cpp, line 6877]
nsBlockFrame::GetFrameForPointUsing  [mozilla/layout/generic/nsBlockFrame.cpp, line 6952]
nsBlockFrame::GetFrameForPoint  [mozilla/layout/generic/nsBlockFrame.cpp, line 6988]
PresShell::HandleEvent  [mozilla/layout/base/nsPresShell.cpp, line 6205]
nsViewManager::HandleEvent  [mozilla/view/src/nsViewManager.cpp, line 2559]
nsViewManager::DispatchEvent  [mozilla/view/src/nsViewManager.cpp, line 2246]
HandleEvent  [mozilla/view/src/nsView.cpp, line 174]
nsWindow::DispatchEvent  [mozilla/widget/src/windows/nsWindow.cpp, line 1377]
nsWindow::DispatchMouseEvent  [mozilla/widget/src/windows/nsWindow.cpp, line 6336]
ChildWindow::DispatchMouseEvent  [mozilla/widget/src/windows/nsWindow.cpp, line 6583]
nsWindow::WindowProc  [mozilla/widget/src/windows/nsWindow.cpp, line 1565]
USER32.dll + 0x8734 (0x77d48734)
USER32.dll + 0x8816 (0x77d48816)
USER32.dll + 0x89cd (0x77d489cd)
USER32.dll + 0x8a10 (0x77d48a10)
nsAppShell::Run  [mozilla/widget/src/windows/nsAppShell.cpp, line 159]
nsAppStartup::Run  [mozilla/toolkit/components/startup/src/nsAppStartup.cpp, line 152]
main  [mozilla/browser/app/nsBrowserApp.cpp, line 61]
kernel32.dll + 0x16fd7 (0x7c816fd7)

Comment 4

[Martijn Wargers (dead)]

I attached a testcase in bug 399852 that seems to trigger the same crash with current branch builds (I have to keep it security sensitive for now, sorry).

Comment 5

[François Gagné]

I think I just fallen on a instance of that bug on 1.8 branch:

1) Load http://www.giggleprint.com/PersonalizedProducts.aspx?Catalog=Primary&ProductID=GPC-BLANK2-BO-IH-0
2) Click on the big cyan 'A'
3) On newly opened dialog, click 'close' (on the top right of the _dialog_)
4) Crash


Firefox 2.0 Crash so it's really not a recent problem.

See TB41006054Q

Comment 6

[François Gagné]

Incident ID: 41006054
Stack Signature	GetFrameFromLine 648b4c0a
Product ID	Firefox2
Build ID	2008020305
Trigger Time	2008-02-03 10:16:09.0
Platform	Win32
Operating System	Windows NT 5.1 build 2600
Module	firefox.exe + (002d522f)
URL visited	http://www.giggleprint.com/PersonalizedProducts.aspx?Catalog=Primary&ProductID=GPC-BLANK2-BO-IH-0
User Comments	1) Load http://www.giggleprint.com/PersonalizedProducts.aspx?Catalog=Primary&ProductID=GPC-BLANK2-BO-IH-0 2) Click on the big cyan 'A' 3) Click 'close' on the top right of the dialog Crash
Since Last Crash	45 sec
Total Uptime	8891 sec
Trigger Reason	Access violation
Source File, Line No.	c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/generic/nsBlockFrame.cpp, line 6898
Stack Trace 	
GetFrameFromLine  [mozilla/layout/generic/nsBlockFrame.cpp, line 6898]
nsBlockFrame::GetFrameForPointUsing  [mozilla/layout/generic/nsBlockFrame.cpp, line 6973]
nsBlockFrame::GetFrameForPoint  [mozilla/layout/generic/nsBlockFrame.cpp, line 7009]
PresShell::HandleEvent  [mozilla/layout/base/nsPresShell.cpp, line 6300]
nsViewManager::HandleEvent  [mozilla/view/src/nsViewManager.cpp, line 2566]
nsViewManager::DispatchEvent  [mozilla/view/src/nsViewManager.cpp, line 2253]
HandleEvent  [mozilla/view/src/nsView.cpp, line 174]
nsWindow::DispatchEvent  [mozilla/widget/src/windows/nsWindow.cpp, line 1319]
nsWindow::DispatchMouseEvent  [mozilla/widget/src/windows/nsWindow.cpp, line 6329]
ChildWindow::DispatchMouseEvent  [mozilla/widget/src/windows/nsWindow.cpp, line 6576]
nsWindow::WindowProc  [mozilla/widget/src/windows/nsWindow.cpp, line 1507]
USER32.dll + 0x8734 (0x7e418734)
USER32.dll + 0x8816 (0x7e418816)
USER32.dll + 0x89cd (0x7e4189cd)
USER32.dll + 0x8a10 (0x7e418a10)
nsAppShell::Run  [mozilla/widget/src/windows/nsAppShell.cpp, line 159]
nsAppStartup::Run  [mozilla/toolkit/components/startup/src/nsAppStartup.cpp, line 152]
main  [mozilla/browser/app/nsBrowserApp.cpp, line 61]
kernel32.dll + 0x16fd7 (0x7c816fd7)

Comment 7

[Tyler Downer [He/Him]]

Confirming that the bug does not appear in Windows Vista, with Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.1a1pre) Gecko/2008071803 Minefield/3.1a1pre when visiting the website http://www.businesslingua.ru/ (none of which I can read). The giggleprint site does not have the lin k needed to cause crash.

Comment 8

[Wayne Mery (:wsmwk)]

thanks Tyler. no crash here either
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2a1pre) Gecko/20090618 Minefield/3.6a1pre

additionally, GetFrameFromLine  does not appear in crash-stats