42290 - Crash when click on a gif image

Status: VERIFIED WORKSFORME

(Core :: Graphics: ImageLib, defect, P3)

Description

[ppandit]

Using a debug mozilla build from 6/12/00

Went to linux.corel.com
Clicked on link for online tutorial and then for "How to use tutoria;
Clicked on button.gif for "Connect to the Internet"

Here is the code:
<tr> 
  <td width="49">&nbsp;</td>
  <td width="20"><font face="Verdana, Arial, Helvetica, sans-serif" 
size="2"><img src="about_images/bullet.gif" width="19" height="18"></font></td>
  <td width="341"> <font face="Verdana, Arial, Helvetica, sans-serif" 
size="2">Connect to the Internet</font></td>
</tr>

Got a crash (Unhandled exception in XPCOM.DLL, 0xC0000005 Access Violation)

nsQueryInterface::operator()(const nsID & {...}, void * * 0x0012d56c) line 32 + 
23 bytes
nsCOMPtr<nsIEditor>::assign_from_helper(const nsCOMPtr_helper & {...}, const 
nsID & {...}) line 854 + 18 bytes
nsCOMPtr<nsIEditor>::nsCOMPtr<nsIEditor>(const nsQueryInterface & {...}) line 
563
nsCutCommand::IsCommandEnabled(nsCutCommand * const 0x03aaea20, const unsigned 
short * 0x0381a040, nsISupports * 0x07fbb240, int * 0x0012d814) line 102
nsControllerCommandManager::IsCommandEnabled(nsControllerCommandManager * const 
0x03aaee80, const unsigned short * 0x0381a040, nsISupports * 0x07fbb240, int * 
0x0012d814) line 116 + 44 bytes
nsEditorController::IsCommandEnabled(nsEditorController * const 0x07fbd1f0, 
const unsigned short * 0x0381a040, int * 0x0012d814) line 187
XPTC_InvokeByIndex(nsISupports * 0x07fbd1f0, unsigned int 3, unsigned int 2, 
nsXPTCVariant * 0x0012d804) line 139
nsXPCWrappedNativeClass::CallWrappedMethod(JSContext * 0x04786460, 
nsXPCWrappedNative * 0x059491e0, const XPCNativeMemberDescriptor * 0x0586cf74, 
nsXPCWrappedNativeClass::CallMode CALL_METHOD, unsigned int 1, long * 
0x066ef0e4, long * 0x0012d9b4) line 914 + 43 bytes
WrappedNative_CallMethod(JSContext * 0x04786460, JSObject * 0x066fbba8, unsigned 
int 1, long * 0x066ef0e4, long * 0x0012d9b4) line 200 + 34 bytes
js_Invoke(JSContext * 0x04786460, unsigned int 1, unsigned int 0) line 686 + 23 
bytes
js_Interpret(JSContext * 0x04786460, long * 0x0012e2f0) line 2490 + 15 bytes
js_Invoke(JSContext * 0x04786460, unsigned int 1, unsigned int 2) line 702 + 13 
bytes
js_InternalInvoke(JSContext * 0x04786460, JSObject * 0x066fbb88, long 107985808, 
unsigned int 0, unsigned int 1, long * 0x0012e488, long * 0x0012e428) line 775 + 
19 bytes
JS_CallFunctionValue(JSContext * 0x04786460, JSObject * 0x066fbb88, long 
107985808, unsigned int 1, long * 0x0012e488, long * 0x0012e428) line 2801 + 31 
bytes
nsJSContext::CallEventHandler(nsJSContext * const 0x047836b0, void * 0x066fbb88, 
void * 0x066fbb90, unsigned int 1, void * 0x0012e488, int * 0x0012e484, int 0) 
line 788 + 33 bytes
nsJSEventListener::HandleEvent(nsIDOMEvent * 0x05841714) line 154 + 64 bytes
nsEventListenerManager::HandleEventSubType(nsListenerStruct * 0x07f4de60, 
nsIDOMEvent * 0x05841714, nsIDOMEventTarget * 0x04b6b220, unsigned int 32, 
unsigned int 7) line 754 + 19 bytes
nsEventListenerManager::HandleEvent(nsIPresContext * 0x047851f0, nsEvent * 
0x0012ebe8, nsIDOMEvent * * 0x0012eae4, nsIDOMEventTarget * 0x04b6b220, unsigned 
int 7, nsEventStatus * 0x0012ec08) line 1564 + 39 bytes
nsXULElement::HandleDOMEvent(nsXULElement * const 0x04b6b210, nsIPresContext * 
0x047851f0, nsEvent * 0x0012ebe8, nsIDOMEvent * * 0x0012eae4, unsigned int 1, 
nsEventStatus * 0x0012ec08) line 3381
nsXULCommandDispatcher::UpdateCommands(nsXULCommandDispatcher * const 
0x04c6a910, const nsString & {...}) line 311
GlobalWindowImpl::UpdateCommands(GlobalWindowImpl * const 0x04783714, const 
nsString & {...}) line 1718
GlobalWindowImpl::UpdateCommands(GlobalWindowImpl * const 0x08028f24, const 
nsString & {...}) line 1699 + 30 bytes
nsDocViwerSelectionListener::NotifySelectionChanged(nsDocViwerSelectionListener 
* const 0x0805ee90, nsIDOMDocument * 0x0800e514, nsIDOMDocument * 0x0800e514, 
nsIDOMDocument * 0x0800e514) line 1793 + 53 bytes
nsDOMSelection::NotifySelectionListeners() line 5646
nsSelection::NotifySelectionListeners(short 1) line 2037 + 16 bytes
nsDOMSelection::Extend(nsDOMSelection * const 0x0805d950, nsIDOMNode * 
0x04c2f9d0, int 1) line 4967 + 20 bytes
nsSelection::TakeFocus(nsSelection * const 0x0805ef30, nsIContent * 0x04c2f9d8, 
unsigned int 0, unsigned int 1, int 0, int 0) line 1706
nsSelection::HandleClick(nsSelection * const 0x0805ef30, nsIContent * 
0x04c2f9d8, unsigned int 0, unsigned int 1, int 0, int 0, int 1) line 1585 + 35 
bytes
nsFrame::HandlePress(nsFrame * const 0x05565e48, nsIPresContext * 0x0800cf00, 
nsGUIEvent * 0x0012f8c0, nsEventStatus * 0x0012f7b0) line 1086 + 62 bytes
nsFrame::HandleEvent(nsFrame * const 0x05565e48, nsIPresContext * 0x0800cf00, 
nsGUIEvent * 0x0012f8c0, nsEventStatus * 0x0012f7b0) line 793
nsImageFrame::HandleEvent(nsImageFrame * const 0x05565e48, nsIPresContext * 
0x0800cf00, nsGUIEvent * 0x0012f8c0, nsEventStatus * 0x0012f7b0) line 910
PresShell::HandleEventInternal(nsEvent * 0x0012f8c0, nsIView * 0x0808c550, 
nsEventStatus * 0x0012f7b0) line 3620 + 38 bytes
PresShell::HandleEvent(PresShell * const 0x0805cae4, nsIView * 0x0808c550, 
nsGUIEvent * 0x0012f8c0, nsEventStatus * 0x0012f7b0, int & 1) line 3540 + 23 
bytes
nsView::HandleEvent(nsView * const 0x0808c550, nsGUIEvent * 0x0012f8c0, unsigned 
int 8, nsEventStatus * 0x0012f7b0, int & 1) line 782
nsView::HandleEvent(nsView * const 0x0808f500, nsGUIEvent * 0x0012f8c0, unsigned 
int 8, nsEventStatus * 0x0012f7b0, int & 1) line 755
nsView::HandleEvent(nsView * const 0x08042550, nsGUIEvent * 0x0012f8c0, unsigned 
int 28, nsEventStatus * 0x0012f7b0, int & 1) line 755
nsViewManager2::DispatchEvent(nsViewManager2 * const 0x08043920, nsGUIEvent * 
0x0012f8c0, nsEventStatus * 0x0012f7b0) line 1369
HandleEvent(nsGUIEvent * 0x0012f8c0) line 69
nsWindow::DispatchEvent(nsWindow * const 0x0808f3d4, nsGUIEvent * 0x0012f8c0, 
nsEventStatus & nsEventStatus_eIgnore) line 560 + 10 bytes
nsWindow::DispatchWindowEvent(nsGUIEvent * 0x0012f8c0) line 581
nsWindow::DispatchMouseEvent(unsigned int 302, nsPoint * 0x00000000) line 3673 + 
21 bytes
ChildWindow::DispatchMouseEvent(unsigned int 302, nsPoint * 0x00000000) line 
3880
nsWindow::ProcessMessage(unsigned int 513, unsigned int 1, long 29491267, long * 
0x0012fc24) line 2780 + 24 bytes
nsWindow::WindowProc(HWND__ * 0x00dd03f0, unsigned int 513, unsigned int 1, long 
29491267) line 829 + 27 bytes
USER32! 77e71820()
GKHTML! 01c20043()

Comment 1

[ppandit]

Added crash to Keywords.

Comment 2

[leger]

Moving all current open XPCOM and XPCOM Registry bugs to rayw since dp is on 
sabbatical.  rayw is now default assignee for these components.

Comment 3

[leger]

elig...you see this?

Comment 4

[Eli Goldberg]

[going through less recent bug comments]

Sorry, I no longer see this link on the page in question, and it's not readily 
discoverable on the site. 

The code snippet is insufficient (for me, at least) to readily reproduce the bug 
since it uses relative URLs (which are not relative to the root URL).

So, in other words, I don't know. Par, if you have pointers, it would be handy. 
Otherwise, I'm punting on this one, unless Pam archived more info.

Comment 5

[pnunn]

Since the link described is no longer on the site, I tested as many
links as possible on the page. I have not had a crash yet. 
I'm closing it.

Comment 6

[pnunn]

okay. Should be closed with a worksforme.
-p

Comment 7

[pnunn]

works for me.
-p

Comment 8

[Keyser Sose]

Works for me:
Platform: PC
OS: Windows 98
Mozilla Build: 2000101214 M18 Trunk Build

Marking as Verified.