75240 - Browser crashes when loading mail with img and html attachment.

Status: VERIFIED DUPLICATE of bug 74441

(SeaMonkey :: MailNews: Message Display, defect)

Description

[ji]

*****Observed with 04/09 win32 build****

I have a testing folder containing two iso-2022-jp mails. The first one is a html mail with an euc html attachment
and the second one is a html mail  with a shift-jis  attachement.
The browser crashes when loading the 1st one, and it doesn't crash when loading the 2nd one.
6.01 doesn't crash with either of them.
I'll attach the testing folder later.

Comment 1

[ji]

Attachment: A zipped folder containing the two messages mentioned above.

Comment 2

[ji]

It crashes on linux 04/09 trunk build as well.

Comment 3

[ji]

Browser is hung with Mac build when loading the 1st mail in the folder.

Comment 4

[Frank Tang]

add crash keyword

Comment 5

[nhottanscp]

Is talkback result available for the crash?

Comment 6

[nhottanscp]

Is the crash specific to the attachment or reproducible with other JA HTML?

Comment 7

[ji]

So far the crash is only reproducible with the 1st mail in the attached folder.
It doesn't crash with other ja attachments.
Talkback server (cyclone) is not accessible today. I'll try to attach the call stack when it's up.

Comment 8

[ji]

Attachment: The html attachment file in the problematic mail.

Comment 9

[ji]

Reassigned to putterman per Naoki's request.

Comment 10

[ji]

Attachment: The mail caused crash. Please use this to reproduce.

Comment 11

[ji]

Below is the call stack:
 Call Stack:     (Signature = nsImageFrame::Paint c420876d)
     nsImageFrame::Paint
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsImageFrame.cpp, line 987]
     nsContainerFrame::PaintChild
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsContainerFrame.cpp, line 208]
     nsBlockFrame::PaintChildren
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsBlockFrame.cpp, line 6573]
     nsBlockFrame::Paint
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsBlockFrame.cpp, line 6451]
     nsContainerFrame::PaintChild
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsContainerFrame.cpp, line 208]
     nsBlockFrame::PaintChildren
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsBlockFrame.cpp, line 6573]
     nsBlockFrame::Paint
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsBlockFrame.cpp, line 6451]
     nsContainerFrame::PaintChild
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsContainerFrame.cpp, line 208]
     nsBlockFrame::PaintChildren
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsBlockFrame.cpp, line 6573]
     nsBlockFrame::Paint
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsBlockFrame.cpp, line 6451]
     nsContainerFrame::PaintChild
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsContainerFrame.cpp, line 208]
     nsContainerFrame::PaintChildren
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsContainerFrame.cpp, line 152]
     nsHTMLContainerFrame::Paint
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsHTMLContainerFrame.cpp, line
109]
     PresShell::Paint
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 4857]
     nsView::Paint [d:\builds\seamonkey\mozilla\view\src\nsView.cpp, line 277]
     nsViewManager::RenderDisplayListElement
[d:\builds\seamonkey\mozilla\view\src\nsViewManager.cpp, line 1394]
     nsViewManager::RenderViews
[d:\builds\seamonkey\mozilla\view\src\nsViewManager.cpp, line 1319]
     nsViewManager::Refresh
[d:\builds\seamonkey\mozilla\view\src\nsViewManager.cpp, line 885]
     nsViewManager::DispatchEvent
[d:\builds\seamonkey\mozilla\view\src\nsViewManager.cpp, line 1909]
     HandleEvent [d:\builds\seamonkey\mozilla\view\src\nsView.cpp, line 68]
     nsWindow::DispatchEvent
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 699]
     nsWindow::DispatchWindowEvent
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 721]
     nsWindow::OnPaint
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 3826]
     nsWindow::ProcessMessage
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 2833]
     nsWindow::WindowProc
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 951]
     KERNEL32.DLL + 0x3663 (0xbff73663)  
     KERNEL32.DLL + 0x2297c (0xbff9297c)  
     0x00688b5c

Comment 12

[scottputterman]

reassigning to pavlov. This is probably a dup.

Comment 13

[sairuh (rarely reading bugmail)]

yep, dupping.

*** This bug has been marked as a duplicate of 74441 ***

Comment 14

[ji]

Verified as a dup.