79304 - browser crash on form submission

Status: VERIFIED DUPLICATE of bug 78504

(Core :: DOM: Core & HTML, defect)

Description

[Christian Williams]

From Bugzilla Helper:
User-Agent: Mozilla/5.0 (Macintosh; U; PPC; en-US; rv:0.9) Gecko/20010505
BuildID:    2001050518

Form submission causes browser crash on Mac.

The "entrar" button is in a form with a TARGET attribute, METHOD=POST.  The
button's onClick calls a function which submits the form, then does a self.close().

Reproducible: Always
Steps to Reproduce:
1. Go to http://latino.gay.com/
2. Click on "E-Mail" from the list on the left; a window.open() happens.
3. Click the "entrar" button in the window. Browser crashes.

Comment 1

[Boris Zbarsky [:bzbarsky]]

I see this on Linux too:

#0  0x405b72bc in nsWindowWatcher::OpenWindowJS (this=0x814db08, aParent=0x8da40dc, 
    aUrl=0x0, aName=0x8aa9da8 "latinhome", aFeatures=0x0, aDialog=0, argc=0, 
    argv=0x8be114c, _retval=0xbfffe97c) at nsWindowWatcher.cpp:514
#1  0x4069b8b1 in GlobalWindowImpl::OpenInternal (this=0x8da40d8, cx=0x8d94100, 
    argv=0x8be1140, argc=2, aDialog=0, aReturn=0xbfffeb80) at
nsGlobalWindow.cpp:3048
#2  0x4069717d in GlobalWindowImpl::Open (this=0x8da40d8, cx=0x8d94100,
argv=0x8be1140, 
    argc=2, aReturn=0xbfffeb80) at nsGlobalWindow.cpp:2119

(gdb) frame 0
#0  0x405b72bc in nsWindowWatcher::OpenWindowJS (this=0x814db08, aParent=0x8da40dc, 
    aUrl=0x0, aName=0x8aa9da8 "latinhome", aFeatures=0x0, aDialog=0, argc=0, 
    argv=0x8be114c, _retval=0xbfffe97c) at nsWindowWatcher.cpp:514
514                                               getter_AddRefs(newDocShellItem));
(gdb) p parentTreeOwner
$1 = {mRawPtr = 0x0}

Comment 2

[Boris Zbarsky [:bzbarsky]]

Attachment: full stack trace

Comment 3

[Keyser Sose]

Dupe..

*** This bug has been marked as a duplicate of 78504 ***

Comment 4

[Boris Zbarsky [:bzbarsky]]

same stack.  verified.