381257 - Crash [@ nsSHistory::EvictWindowContentViewers], with following steps

Status: RESOLVED DUPLICATE of bug 358599

(SeaMonkey :: UI Design, defect)

Description

[Serge Gautherie (:sgautherie)]

Attachment: DrWtsn32, TB31971729M

[Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.9a5pre) Gecko/20070515 SeaMonkey/1.5a] (nightly) (W2Ksp4)

First time I ever see this one.

{{
Incident ID: 32293680
Stack Signature	nsSHistory::EvictWindowContentViewers b7cfcc45
Product ID	MozillaTrunk
Build ID	2007051508
Trigger Time	2007-05-19 07:13:17.0
Platform	Win32
Operating System	Windows NT 5.0 build 2195
Module	docshell.dll + (0002125d)
URL visited	
User Comments	Submitting a FORM, which reloads a page.
Since Last Crash	20921 sec
Total Uptime	102926 sec
Trigger Reason	Access violation
Source File, Line No.	d:\builds\tinderbox\seamonkeytrunk\winnt_5.2_clobber\mozilla\docshell\shistory\src\nsshistory.cpp, line 798
Stack Trace 	
nsSHistory::EvictWindowContentViewers  [mozilla/docshell/shistory/src/nsshistory.cpp, line 798]
nsSHistory::EvictContentViewers  [mozilla/docshell/shistory/src/nsshistory.cpp, line 654]
nsPresContext::EnsureVisible  [mozilla/layout/base/nsprescontext.cpp, line 1351]
PresShell::UnsuppressAndInvalidate  [mozilla/layout/base/nspresshell.cpp, line 4171]
PresShell::UnsuppressPainting  [mozilla/layout/base/nspresshell.cpp, line 4231]
0x0593ca50
0x05614a88
nsXMLDocument::AddRef  [mozilla/content/xml/document/src/nsxmldocument.cpp, line 209]
0x0c7d8b57
}}

Comment 1

[Martijn Wargers (dead)]

On what page did you get this crash?

Comment 2

[Serge Gautherie (:sgautherie)]

Form page: <http://v0.battle-arenas.net/forum/rediger.php?id=14718&type=M&forum=3&groupe=5541&sujet=79873>
Reloading page: <http://v0.battle-arenas.net/forum/messages.php?forum=3&sujet=79873>

But an (free) account is needed to access to the forum,
(and that specific area/subject is restricted to a few people).

Comment 3

[Martijn Wargers (dead)]

I tried it on: http://v0.battle-arenas.net/forum/messages.php?forum=0&sujet=20503
but I didn't crash (and I don't want to spoil the forum with all kinds of test posts)
Serge, is it a reproducable crash? Does it happen with a clean profile?
Any chance, you are able to make a minimised testcase?

I noticed that the message posting happens in a popup window, which then reloads the original page.

Comment 4

[Serge Gautherie (:sgautherie)]

On the right of the comment, there a "Supprimer" button which you can use to remove your test(s).

I created, in the "issue" area, a dedicated
<http://v0.battle-arenas.net/forum/messages.php?forum=0&sujet=110928>
[ SeaMonkey: sujet pour tester (BugZilla) bug 381257 ]
which can be used to test as much as we want.

*****

100% reproducible; with the profiles as I have them; with my site account...
I didn't try to make a reduced testcase page(s), but here are some clues:


[Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.9a5pre) Gecko/2007052108 Minefield/3.0a5pre] (nightly) (W2Ksp4)

No bug, per following steps.


[Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.9a5pre) Gecko/20070521 SeaMonkey/1.5a] (nightly) (W2Ksp4)
[Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.9a5pre) Gecko/2007052112 SeaMonkey/1.5a] (suiterunner, tinderbox-builds) (W2Ksp4)

Steps:
0. It needs "windows to open in tabs" [browser.link.open_newwindow;3 and browser.link.open_newwindow.restriction;0].
1. Log in; go to subject URL; press "Répondre".
2. Type something in the textarea: "test" for example.
3. On the smiley panel on the left, click one at a time on 2,3,4,5 tabs.
3-NB: Tab 5 is empty. The order does not matter: you only need to have loaded all the tabs.
4. Submit the form.
4r. The form is submitted and processed by the site; the reload of the subject page starts; crash !

I submitted a few SeaMonkey talkback reports while testing (with Bug Id in the comment)...
(suiterunner has no "talkback" yet.)

Comment 5

[Martijn Wargers (dead)]

Thanks for the accurate description.
I can reproduce this with current Seamonkey trunk build, but not with current Firefox trunk build. Nor can I reproduce it with a Seamonkey branch build.

Comment 6

[Serge Gautherie (:sgautherie)]

Regressed between
[Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.9a1) Gecko/20060928 SeaMonkey/1.5a] (2006-09-28-10-trunk) (W2Ksp4)
and
[Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.9a1) Gecko/20060929 SeaMonkey/1.5a] (2006-09-29-11-trunk) (W2Ksp4)

<http://bonsai.mozilla.org/cvsquery.cgi?treeid=default&module=SeaMonkeyAll&branch=HEAD&branchtype=match&sortby=Date&hours=2&date=explicit&mindate=2006-09-28+10&maxdate=2006-09-29+12&cvsroot=%2Fcvsroot>
My guess would be
Bug 350416 Closing a Tab should add Undo option when applicable

*** Ah...

"Bad" news:
This is a duplicate of bug 358599, which I had not searched for :-(

Good news:
They were missing reproducible steps :-)

Comment 7

[Serge Gautherie (:sgautherie)]

For the record, I sent a few more talkback reports (with bug id) while narrowing the timeframe.

Comment 8

[Serge Gautherie (:sgautherie)]

[Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.9a6pre) Gecko/2007060312 SeaMonkey/2.0a1pre] (sea-win32-tbox-trunk) (W2Ksp4)

(Still crashing with new Trunk SMv2.)