70512 - Crash in gklayout.dll submitting this form

Status: VERIFIED DUPLICATE of bug 69850

(Core :: DOM: Core & HTML, defect)

Description

[Stephen Moehle]

The URL above will crash in gklayout.dll when submitted.  Repeatable always.

Steps to reproduce:
1) Go the URL above.
2) Fill in the field to buy a ticket.  Don't worry.  Mozilla will crash before
you are asked for a credit card.
3) Click on proceed.  If there are seats available, an SSL page will be loaded.
 Mozilla crashes loading this SSL page.

Talkback IDs: TB27081188Y and TB27080845M

Tested with Mozilla 2001022705 on NT4.

Comment 1

[Asa Dotzler [:asa]]

   nsTableFrame::GetFrameAtOrBefore  
[d:\builds\seamonkey\mozilla\layout\html\table\src\nsTableFrame.cpp, line 4325]
     nsTableRowFrame::InsertFrames
[d:\builds\seamonkey\mozilla\layout\html\table\src\nsTableRowFrame.cpp, line 237]
     FrameManager::InsertFrames
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsFrameManager.cpp, line 799]
     nsCSSFrameConstructor::ContentInserted
[d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp,
line 8614]
     StyleSetImpl::ContentInserted
[d:\builds\seamonkey\mozilla\content\base\src\nsStyleSet.cpp, line 1224]
     PresShell::ContentInserted
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 4290]
     nsVoidArray::ElementAt
[d:\builds\seamonkey\mozilla\xpcom\ds\nsVoidArray.cpp, line 126]
     nsHTMLDocument::ContentInserted
[d:\builds\seamonkey\mozilla\content\html\document\src\nsHTMLDocument.cpp, line
1323]
     nsHTMLDocument::ContentInserted
[d:\builds\seamonkey\mozilla\content\html\document\src\nsHTMLDocument.cpp, line
1323]
     HTMLContentSink::NotifyInsert
[d:\builds\seamonkey\mozilla\content\html\document\src\nsHTMLContentSink.cpp,
line 4503]
     SinkContext::DidAddContent
[d:\builds\seamonkey\mozilla\content\html\document\src\nsHTMLContentSink.cpp,
line 1337]
     SinkContext::CloseContainer
[d:\builds\seamonkey\mozilla\content\html\document\src\nsHTMLContentSink.cpp,
line 1526]
     HTMLContentSink::CloseContainer
[d:\builds\seamonkey\mozilla\content\html\document\src\nsHTMLContentSink.cpp,
line 3156]
     CNavDTD::CloseContainer
[d:\builds\seamonkey\mozilla\htmlparser\src\CNavDTD.cpp, line 3508]
     CNavDTD::CloseContainersTo
[d:\builds\seamonkey\mozilla\htmlparser\src\CNavDTD.cpp, line 3543]
     CNavDTD::HandleSavedTokens
[d:\builds\seamonkey\mozilla\htmlparser\src\CNavDTD.cpp, line 2038]
     CNavDTD::HandleToken
[d:\builds\seamonkey\mozilla\htmlparser\src\CNavDTD.cpp, line 737]
     CNavDTD::BuildModel
[d:\builds\seamonkey\mozilla\htmlparser\src\CNavDTD.cpp, line 523]
     nsParser::BuildModel
[d:\builds\seamonkey\mozilla\htmlparser\src\nsParser.cpp, line 2032]
     nsParser::ResumeParse
[d:\builds\seamonkey\mozilla\htmlparser\src\nsParser.cpp, line 1911]
     nsParser::ContinueParsing
[d:\builds\seamonkey\mozilla\htmlparser\src\nsParser.cpp, line 1523]
     CSSLoaderImpl::Cleanup
[d:\builds\seamonkey\mozilla\content\html\style\src\nsCSSLoader.cpp, line 709]
     CSSLoaderImpl::SheetComplete
[d:\builds\seamonkey\mozilla\content\html\style\src\nsCSSLoader.cpp, line 833]
     CSSLoaderImpl::ParseSheet
[d:\builds\seamonkey\mozilla\content\html\style\src\nsCSSLoader.cpp, line 868]
     CSSLoaderImpl::DidLoadStyle
[d:\builds\seamonkey\mozilla\content\html\style\src\nsCSSLoader.cpp, line 904]
     SheetLoadData::OnStreamComplete
[d:\builds\seamonkey\mozilla\content\html\style\src\nsCSSLoader.cpp, line 647]
     nsStreamLoader::OnStopRequest
[d:\builds\seamonkey\mozilla\netwerk\base\src\nsStreamLoader.cpp, line 122]
     nsHTTPFinalListener::OnStopRequest
[d:\builds\seamonkey\mozilla\netwerk\protocol\http\src\nsHTTPResponseListener.cpp,
line 1125]
     nsHTTPChannel::ResponseCompleted
[d:\builds\seamonkey\mozilla\netwerk\protocol\http\src\nsHTTPChannel.cpp, line 1815]
     nsHTTPServerListener::OnStopRequest
[d:\builds\seamonkey\mozilla\netwerk\protocol\http\src\nsHTTPResponseListener.cpp,
line 697]
     nsOnStopRequestEvent::HandleEvent
[d:\builds\seamonkey\mozilla\netwerk\base\src\nsStreamObserverProxy.cpp, line 179]
     nsStreamObserverEvent::HandlePLEvent
[d:\builds\seamonkey\mozilla\netwerk\base\src\nsStreamObserverProxy.cpp, line 79]
     PL_HandleEvent [d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c, line 577]
     _md_EventReceiverProc [d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c,
line 1055]
<http://cyclone/images/spacer.gif> 

Comment 2

[Keyser Sose]

*** This bug has been marked as a duplicate of 69850 ***

Comment 3

[Vladimir Ermakov]

Verifying Duplicate