448644 - Trunk build crashes when copying selection into clipboard [@ nsHTMLContentSerializer::IsFirstChildOfOL]

Status: RESOLVED DUPLICATE of bug 448445

(Core :: DOM: Serializers, defect)

Description

[Frank Wein [:mcsmurf]]

To reproduce:
1. Go to URL
2. Select one line in the "Proposed" column
3. Press Ctrl+C or your platform shortcut to copy into clipboard

Results:
Crash.

Stacktrace:
> kp
ChildEBP RetAddr  
0012e94c 0136e67f gklayout!nsHTMLContentSerializer::IsFirstChildOfOL(class nsIDOMElement * aElement = 0x00000000)+0x44 [f:\mozilla\tree-hg\src\mozilla\content\base\src\nshtmlcontentserializer.cpp @ 1350]
0012eab8 0136860b gklayout!nsHTMLContentSerializer::AppendElementStart(class nsIDOMElement * aElement = 0x00c10fa0, class nsIDOMElement * aOriginalElement = 0x00000000, class nsAString_internal * aStr = 0x0012ed98)+0x2c2 [f:\mozilla\tree-hg\src\mozilla\content\base\src\nshtmlcontentserializer.cpp @ 721]
0012eae4 01368b04 gklayout!nsDocumentEncoder::SerializeNodeStart(class nsIDOMNode * aNode = 0x00c10001, int aStartOffset = 12652448, int aEndOffset = 0, class nsAString_internal * aStr = 0x0012ed98, class nsIDOMNode * aOriginalNode = 0x00000000)+0x157 [f:\mozilla\tree-hg\src\mozilla\content\base\src\nsdocumentencoder.cpp @ 292]
0012ebb8 01389619 gklayout!nsHTMLCopyEncoder::EncodeToStringWithContext(class nsAString_internal * aContextString = 0x0012ed98, class nsAString_internal * aInfoString = 0x0012eec0, class nsAString_internal * aEncodedString = 0x0012ef54)+0x101 [f:\mozilla\tree-hg\src\mozilla\content\base\src\nsdocumentencoder.cpp @ 1277]
0012f080 0126b498 gklayout!nsCopySupport::HTMLCopy(class nsISelection * aSel = 0x0499be78, class nsIDocument * aDoc = 0x0a7106b0, short aClipboardID = 1)+0x41c [f:\mozilla\tree-hg\src\mozilla\content\base\src\nscopysupport.cpp @ 159]
0012f0ac 0127373a gklayout!PresShell::DoCopy(void)+0x79 [f:\mozilla\tree-hg\src\mozilla\layout\base\nspresshell.cpp @ 4244]
0012f0bc 0141e25c gklayout!DocumentViewerImpl::CopySelection(void)+0x2e [f:\mozilla\tree-hg\src\mozilla\layout\base\nsdocumentviewer.cpp @ 2364]
0012f0c4 0141ed79 gklayout!nsClipboardCopyCommand::DoClipboardCommand(char * aCommandName = 0x01145d2a "???", class nsIContentViewerEdit * aEdit = 0x02b2ced0, class nsICommandParams * aParams = 0x03a643e0)+0xa [f:\mozilla\tree-hg\src\mozilla\dom\src\base\nsglobalwindowcommands.cpp @ 560]
*** WARNING: Unable to verify checksum for F:\mozilla\tree-hg\obj-suite\mozilla\dist\bin\components\embedcomponents.dll
0012f0e0 01145d2a gklayout!nsClipboardBaseCommand::DoCommand(char * aCommandName = 0x03a643e0 "cmd_copy", class nsISupports * aCommandContext = 0x0a785ca4)+0x46 [f:\mozilla\tree-hg\src\mozilla\dom\src\base\nsglobalwindowcommands.cpp @ 459]
0012f0fc 01147e77 embedcomponents!nsControllerCommandTable::DoCommand(char * aCommandName = 0x03a643e0 "cmd_copy", class nsISupports * aCommandRefCon = 0x0a785ca4)+0x42 [f:\mozilla\tree-hg\src\mozilla\embedding\components\commandhandler\src\nscontrollercommandtable.cpp @ 191]
*** WARNING: Unable to verify checksum for F:\mozilla\tree-hg\obj-suite\mozilla\dist\bin\xpcom_core.dll
0012f120 002b0156 embedcomponents!nsBaseCommandController::DoCommand(char * aCommand = 0x03a643e0 "cmd_copy")+0x5c [f:\mozilla\tree-hg\src\mozilla\embedding\components\commandhandler\src\nsbasecommandcontroller.cpp @ 169]
*** WARNING: Unable to verify checksum for F:\mozilla\tree-hg\obj-suite\mozilla\dist\bin\components\xpc3250.dll
0012f134 022f7f41 xpcom_core!NS_InvokeByIndex_P(class nsISupports * that = 0x110ded78, unsigned int methodIndex = 5, unsigned int paramCount = 1, struct nsXPTCVariant * params = 0x0012f158)+0x27 [f:\mozilla\tree-hg\src\mozilla\xpcom\reflect\xptcall\src\md\win32\xptcinvoke.cpp @ 102]
0012f1a4 00000000 xpc3250!XPCWrappedNative::CallMethod(class XPCCallContext * ccx = 0x00000001, XPCWrappedNative::CallMode mode = CALL_GETTER (1))+0x83e [f:\mozilla\tree-hg\src\mozilla\js\src\xpconnect\src\xpcwrappednative.cpp @ 2393]