Closed Bug 370504 Opened 18 years ago Closed 18 years ago

Crash [@ ntdll.dll] with unminimised testcase that changes cols and rows of frameset and resizes window

Categories

(Core :: Layout: Images, Video, and HTML Frames, defect)

x86
Windows XP
defect
Not set
critical

Tracking

()

RESOLVED WORKSFORME

People

(Reporter: martijn.martijn, Unassigned)

References

Details

(Keywords: crash, testcase)

Crash Data

Attachments

(1 file)

Attached file testcase
See zipped testcase, you need to open the file named 'parenframe.htm'. I crash sometimes when opening that file and letting it run for 10 seconds or so. It also crashes branch builds, so marking security sensitive. Talkback ID: TB29358601H ntdll.dll + 0x10f29 (0x7c910f29) ntdll.dll + 0x10d5c (0x7c910d5c) MSVCR80.dll + 0x4c3b (0x78134c3b) nsHTMLFramesetFrame::~nsHTMLFramesetFrame [mozilla\layout\generic\nsframesetframe.cpp, line 242] But I also get talkacks with other stack traces (seemingly random)
TB29355781Q (which mw22 also got using the testcase) looks quite similar to Bug 369150 or Bug 367471
Depends on: 367471, 369150
Flags: blocking1.9?
Ok, this is worksforme, using: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9a3pre) Gecko/20070325 Minefield/3.0a3pre I guess this was basically the same as bug 369150.
Status: NEW → RESOLVED
Closed: 18 years ago
Flags: blocking1.9?
Resolution: --- → WORKSFORME
Crash Signature: [@ ntdll.dll]
Group: core-security → core-security-release
Group: core-security-release
Product: Core → Core Graveyard
Component: Layout: HTML Frames → Layout: Images
Product: Core Graveyard → Core
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: