83694 - Hitting Del in an input box crashes when BiDi enabled (rtl)

Status: RESOLVED DUPLICATE of bug 83448

(Core :: Layout: Text and Fonts, defect)

Description

[Olivier Cahagne]

Using latest Mozilla 20010601 on Win32, it crashed when viewing a page with 
BiDi content and hitting Delete within an input box.

URLs:
http://nocc.sourceforge.net/demo/?lang=ar (UTF-8 Arabic)
http://nocc.sourceforge.net/demo/?lang=he (ISO-8859-8-i Hebrew)

Focus is on the first input box.
Type "Del" (crash doesn't occur when hitting "Backspace").
Mozilla crashes.
I'll add a simple test to reproduce.

Comment 1

[Olivier Cahagne]

Attachment: HTML form with rtl tag that can crashes Mozilla when hitting Del

Comment 2

[Mike Kaply [:mkaply]]

I trap just doubleclicking on the entryfield to give it focus.

Comment 3

[Simon Montagu :smontagu]

Can somebody confirm whether this is a dupe of 83448?

Comment 4

[Katsuhiko Momoi]

The stack traces are slightly different between the 2 cases.
For this bug, it is a short trace for a crash:

------------------
Stack Trace
nsTextEditRules::WillDeleteSelection
[d:\builds\seamonkey\mozilla\editor\base\nsTextEditRules.cpp, line 824] 
------------------

This is what I got from the Talkback trace for this bug.

For Bug 83448, I got the following stack trace:

------------------
Stack Trace
nsCOMPtr_base::~nsCOMPtr_base
[d:\builds\seamonkey\mozilla\xpcom\base\nsCOMPtr.cpp, line 47]
nsWeakReference::QueryReferent
[d:\builds\seamonkey\mozilla\xpcom\base\nsWeakReference.cpp, line 152]
nsTextEditRules::WillDoAction
[d:\builds\seamonkey\mozilla\editor\base\nsTextEditRules.cpp, line 257]
------------------

There is some similarity, however, between the 2 in that both
involves nsTextEditRules.cpp.

I suggest we keep both bugs open and get one of them fixed 
and see what happens to the other.

CC'ing Gilad who will the be default QA contact next week.

Comment 5

[Simon Montagu :smontagu]

Attachment 36636 [details] in bug 83448 fixes this crash for me, so I'm going ahead and
marking this bug as a dupe. Anyone who disagrees feel free to reopen it
(especially mkaply, since you seem to be seeing slightly different behaviour,
which I never managed to reproduce)



*** This bug has been marked as a duplicate of 83448 ***

Comment 6

[(no longer active)]

Mass-assigning the new rtl keyword to RTL-related (see bug 349193).