43643 - crash on form submit when unchecked "show warning dialog"

Status: VERIFIED WORKSFORME

(Core :: DOM: Core & HTML, defect, P3)

Description

[Dave]

Overview Description: 

After selecting a state at the above URL, clicking on the buttons labeled
"search region", "search selected cities" or "get area map" without checking any
of the boxes next to the cities makes the browser crash.

Here's the html for one of the offending forms on that page:

<FORM
ACTION="http://www.rent.net/ctg/cgi-bin/RentNet/FrameRooms/AAAAfNAAXAAAKy7AAk"
          TARGET=MainNested METHOD=POST
ENCTYPE="application/x-www-form-urlencoded"> 
<input type="checkbox" name="CityIDs" value="TX1R3C1">&nbsp;<FONT 
SIZE=-1>Austin</FONT><BR>
<input type="checkbox" name="CityIDs" value="TX1R3C8">&nbsp;<FONT  SIZE=-1>Cedar
Park</FONT><BR>
<input type="checkbox" name="CityIDs" value="TX1R3C7">&nbsp;<FONT 
SIZE=-1>Georgetown</FONT><BR>
</TD>
<TD WIDTH=33% VALIGN=TOP bgcolor=#FFFFCC>
<input type="checkbox" name="CityIDs" value="TX1R3C2">&nbsp;<FONT  SIZE=-1>Round
Rock</FONT><BR>
<input type="checkbox" name="CityIDs" value="TX1R3C3">&nbsp;<FONT  SIZE=-1>San
Marcos</FONT><BR>
&nbsp;</TD>
<TD WIDTH=33% VALIGN=TOP bgcolor=#FFFFCC>
<input type="checkbox" name="CityIDs" value="TX1R3C4">&nbsp;<FONT 
SIZE=-1>Sunset Valley</FONT><BR>
<input type="checkbox" name="CityIDs" value="TX1R3C6">&nbsp;<FONT 
SIZE=-1>Taylor</FONT><BR>
&nbsp;</TD></TR>
<TR HEIGHT=6><TD><IMG
SRC="http://www.rent.net/ctg/RentNet/active/images/white.gif"></TD><TD
bgcolor=#FFFFCC><IMG
SRC="http://www.rent.net/ctg/RentNet/active/images/white.gif"></TD><TD
bgcolor=#FFFFCC><IMG
SRC="http://www.rent.net/ctg/RentNet/active/images/white.gif"></TD><TD
bgcolor=#FFFFCC><IMG
SRC="http://www.rent.net/ctg/RentNet/active/images/white.gif"></TD></TR>
<TR VALIGN=MIDDLE><TD WIDTH="4">&nbsp;</TD>
<TD bgcolor=#FFFFCC>
<INPUT TYPE="image"
src="http://www.rent.net/ctg/RentNet/active/images/checkedcities_b.gif" BORDER=0
VSPACE="0">
 <INPUT TYPE=HIDDEN NAME="Page" VALUE="Rooms"> 
<INPUT TYPE=HIDDEN NAME="RgID" VALUE="TX1R3"> 
<INPUT TYPE=HIDDEN NAME="RgIdNg" VALUE="TX1R3"> 
<INPUT TYPE=HIDDEN NAME="ng_geopol" VALUE="ARUSSCTXxx03"> 
<INPUT TYPE=HIDDEN NAME="stateID" VALUE="TX2"> 
<INPUT TYPE=HIDDEN NAME="brand" VALUE=""> 
<INPUT TYPE=HIDDEN NAME="MaxRow" VALUE="25"> 
<INPUT TYPE=HIDDEN NAME="Times" VALUE="1"> 
</FORM>


Steps to Reproduce: 
1) go to above url
2) click on a state... any state should do
3) Do NOT check any of the boxes
4) click on one of the "search" buttons or the "map" button

Actual Results: 

Browser crashes

Expected Results: 

Browser should send some type of default value?

Reproducibility: 

always

Build Date & Platform Bug Found: 

2000062220/Linux

Additional Builds and Platforms Tested On: 

Works on NS 4.7

Comment 1

[rods (gone)]

reassigning

Comment 2

[Eric Pollmann]

Finally got this.  You must uncheck the "show me this warning next time" 
checkbox in the warning dialog that comes up when you submit the form.  From 
then on it will crash on submit at this site.  Linux Debug or Opt, can't 
reproduce on NT.

I'll attach a stack trace.

Comment 3

[Eric Pollmann]

Attachment: stack trace

Comment 4

[Eric Pollmann]

Dup of Bug 41013?  I'll try moving my fix into my Linux tree to see if it clears 
this up too.

Comment 5

[Andreas Franke (gone)]

Just as a side note: Bug 27660 also a stack trace that starts with:
	nsGenericElement::HandleDOMEvent()
	nsGenericHTMLElement::HandleDOMEventForAnchors()
	nsHTMLAnchorElement::HandleDOMEvent()

Comment 6

[Andreas Franke (gone)]

Setting severity=critical, adding crash kw.
Bug 42454 "crash in HandleDOMEventForAnchors" could be related, too.

Comment 7

[Eric Pollmann]

This does not crash for me in today's Linux build.
To verify:

- Go to 
http://www.rent.net/ctg/cgi-bin/RentNet/AptRentalStates/AAAAfNAAXAAAKy7AAk/?bran
d=
- Click on a state (Alabama)
- Click on "search checked cities" under one of the regions (Birmingham)
You will see a security warning dialog box
- Uncheck the "Show me this warning next time" checkbox
- Click Ok
The dialog box will be dismissed
- Click the Reload button
You should be back where you started
- Click on a state (Alabama)
- Click on "search checked cities" under on of the regions (Birmingham)
You should not crash

Thanks!

Comment 8

[Dave]

confirming on 2000062920/Linux

Comment 9

[ckritzer (gone)]

Marking VERIFIED WORKSFORME on:
- LinuxRH62 2000-09-13-08-M18 Commercial
- Win98     2000-09-13-08-M18 Mozilla
- MacOS86   2000-09-13-04-M18 Commercial