Closed Bug 403828 Opened 17 years ago Closed 17 years ago

Crash [@ nsParser::ParseFragment] when dragging something into xhtml document

Categories

(Core :: DOM: HTML Parser, defect)

Product:
Core
Component:
DOM: HTML Parser
Platform:
x86
Windows XP
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED DUPLICATE of bug 403664

People

(Reporter: martijn.martijn, Unassigned)

References

(
URL
)

Details

(Keywords: crash, regression, testcase)

Crash Data

The testcase comes from bug 401990.

To reproduce:
- Select some text in the testcase.
- Drag it to another spot and drop it.

Expected result:
- Dragged text should have been put on the dropped spot

Actual result:
- Crash.

http://crash-stats.mozilla.com/report/index/28e24f8a-9302-11dc-8031-001a4bd46e84
0  	nsParser::ParseFragment(nsAString_internal const&, void*, nsTArray<nsAutoString>&, int, nsACString_internal const&, nsDTDMode)  	 mozilla/parser/htmlparser/src/nsParser.cpp:1464
1 	nsHTMLEditor::ParseFragment(nsAString_internal const&, nsTArray<nsAutoString>&, nsIDocument*, nsCOMPtr<nsIDOMNode>*) 	mozilla/editor/libeditor/html/nsHTMLDataTransfer.cpp:2665
2 	nsHTMLEditor::CreateDOMFragmentFromPaste(nsAString_internal const&, nsAString_internal const&, nsAString_internal const&, nsCOMPtr<nsIDOMNode>*, nsCOMPtr<nsIDOMNode>*, nsCOMPtr<nsIDOMNode>*, int*, int*) 	mozilla/editor/libeditor/html/nsHTMLDataTransfer.cpp:2554
3 	nsHTMLEditor::InsertHTMLWithContext(nsAString_internal const&, nsAString_internal const&, nsAString_internal const&, nsAString_internal const&, nsIDOMDocument*, nsIDOMNode*, int, int) 	mozilla/editor/libeditor/html/nsHTMLDataTransfer.cpp:298
4 	nsHTMLEditor::InsertFromTransferable(nsITransferable*, nsIDOMDocument*, nsAString_internal const&, nsAString_internal const&, nsIDOMNode*, int, int) 	mozilla/editor/libeditor/html/nsHTMLDataTransfer.cpp:1294
5 	nsHTMLEditor::InsertFromDrop(nsIDOMEvent*) 	mozilla/editor/libeditor/html/nsHTMLDataTransfer.cpp:1673
6 	nsTextEditorDragListener::DragDrop(nsIDOMEvent*) 	mozilla/editor/libeditor/text/nsEditorEventListeners.cpp:675
7 	nsEventListenerManager::HandleEvent(nsPresContext*, nsEvent*, nsIDOMEvent**, nsISupports*, unsigned int, nsEventStatus*) 	mozilla/content/events/src/nsEventListenerManager.cpp:1208
8 	nsEventTargetChainItem::HandleEvent(nsEventChainPostVisitor&, unsigned int) 	mozilla/content/events/src/nsEventDispatcher.cpp:206
9 	nsEventTargetChainItem::HandleEventTargetChain(nsEventChainPostVisitor&, unsigned int, nsDispatchingCallback*) 	mozilla/content/events/src/nsEventDispatcher.cpp:287
10 	nsEventDispatcher::Dispatch(nsISupports*, nsPresContext*, nsEvent*, nsIDOMEvent*, nsEventStatus*, nsDispatchingCallback*) 	mozilla/content/events/src/nsEventDispatcher.cpp:479
etc...
Flags: blocking1.9?
Possibly due to checkin here: bug 403549
Also causing similar crash on TB trunk.
Status: NEW → RESOLVED
Closed: 17 years ago
Resolution: --- → DUPLICATE
Oh, I hadn't noticed you marked this as blocking bug 207531... is it not a dupe?
Yeah, it's a dupe, I made a wrong assumption here.
No longer blocks: 207531
Crash Signature: [@ nsParser::ParseFragment]
You need to log in before you can comment on or make changes to this bug.