87842 - Crash when hitting back button through CMS HTTPS web pages

Status: RESOLVED WORKSFORME

(Core :: Layout: Form Controls, defect, P1)

Description

[Bob Lord]

Talkback ID: TB32200331E

Comment 1

[David P. Drinan]

From the stack trace, the crash occured in layout. Re-assigning.

Comment 2

[Asa Dotzler [:asa]]

not gonna make it for 0.9.2. retargeting to 0.9.3 (please excuse the trespass).

Comment 3

[David Baron :dbaron: (⌚️UTC-5, no longer working on Mozilla)]

Stack was:

0x00000001
PresShell::~PresShell
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 1478]
PresShell::`scalar deleting destructor'
nsTextInputListener::Release
[d:\builds\seamonkey\mozilla\layout\html\forms\src\nsGfxTextControlFrame2.cpp,
line 235]
nsCOMPtr_base::~nsCOMPtr_base
[d:\builds\seamonkey\mozilla\xpcom\base\nsCOMPtr.cpp, line 50]
nsEventStateManager::PreHandleEvent
[d:\builds\seamonkey\mozilla\content\events\src\nsEventStateManager.cpp, line 594]
nsEventStateManager::PreHandleEvent
[d:\builds\seamonkey\mozilla\content\events\src\nsEventStateManager.cpp, line 594]
PresShell::HandleEventInternal
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5560]
PresShell::HandleEvent
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5492]
nsView::HandleEvent [d:\builds\seamonkey\mozilla\view\src\nsView.cpp, line 377]
nsViewManager::DispatchEvent
[d:\builds\seamonkey\mozilla\view\src\nsViewManager.cpp, line 2051]
HandleEvent [d:\builds\seamonkey\mozilla\view\src\nsView.cpp, line 68]
nsWindow::DispatchEvent
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 724]
nsWindow::DispatchWindowEvent
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 741]
nsWindow::DispatchFocus
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 4426]
nsWindow::ProcessMessage
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 3345]
nsWindow::WindowProc
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 989]
USER32.DLL + 0x3eb0 (0x77e13eb0)
USER32.DLL + 0x591b (0x77e1591b)
USER32.DLL + 0x595d (0x77e1595d)
ntdll.dll + 0x1fb83 (0x77f9fb83)
GlobalWindowImpl::Focus
[d:\builds\seamonkey\mozilla\dom\src\base\nsGlobalWindow.cpp, line 1766]
nsWebShellWindow::HandleEvent
[d:\builds\seamonkey\mozilla\xpfe\appshell\src\nsWebShellWindow.cpp, line 530]
nsWindow::DispatchEvent
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 724]
nsWindow::DispatchWindowEvent
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 741]
nsWindow::DispatchFocus
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 4426]
nsWindow::ProcessMessage
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 3341]
nsWindow::WindowProc
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 989]
USER32.DLL + 0x3eb0 (0x77e13eb0)
USER32.DLL + 0x591b (0x77e1591b)
USER32.DLL + 0x595d (0x77e1595d)
ntdll.dll + 0x1fb83 (0x77f9fb83)
USER32.DLL + 0x69a7 (0x77e169a7)
USER32.DLL + 0x3eb0 (0x77e13eb0)
USER32.DLL + 0x6469 (0x77e16469)
USER32.DLL + 0xa6f8 (0x77e1a6f8)
nsWindow::WindowProc
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 1000]
USER32.DLL + 0x3eb0 (0x77e13eb0)
USER32.DLL + 0x591b (0x77e1591b)
USER32.DLL + 0x595d (0x77e1595d)
ntdll.dll + 0x1fb83 (0x77f9fb83)
nsWebShellWindow::Destroy
[d:\builds\seamonkey\mozilla\xpfe\appshell\src\nsWebShellWindow.cpp, line 1744]
nsChromeTreeOwner::Destroy
[d:\builds\seamonkey\mozilla\xpfe\appshell\src\nsChromeTreeOwner.cpp, line 228]
GlobalWindowImpl::ReallyCloseWindow
[d:\builds\seamonkey\mozilla\dom\src\base\nsGlobalWindow.cpp, line 2382]
GlobalWindowImpl::CloseWindow
[d:\builds\seamonkey\mozilla\dom\src\base\nsGlobalWindow.cpp, line 3150]
nsJSContext::ScriptEvaluated
[d:\builds\seamonkey\mozilla\dom\src\base\nsJSEnvironment.cpp, line 1350]
nsJSContext::CallEventHandler
[d:\builds\seamonkey\mozilla\dom\src\base\nsJSEnvironment.cpp, line 949]
nsJSEventListener::HandleEvent
[d:\builds\seamonkey\mozilla\dom\src\events\nsJSEventListener.cpp, line 140]
nsEventListenerManager::HandleEventSubType
[d:\builds\seamonkey\mozilla\content\events\src\nsEventListenerManager.cpp, line
1162]
nsEventListenerManager::HandleEvent
[d:\builds\seamonkey\mozilla\content\events\src\nsEventListenerManager.cpp, line
2134]
nsXULElement::HandleDOMEvent
[d:\builds\seamonkey\mozilla\content\xul\content\src\nsXULElement.cpp, line 3635]
PresShell::HandleDOMEventWithTarget
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5613]
nsButtonBoxFrame::MouseClicked
[d:\builds\seamonkey\mozilla\layout\xul\base\src\nsButtonBoxFrame.cpp, line 181]
nsButtonBoxFrame::HandleEvent
[d:\builds\seamonkey\mozilla\layout\xul\base\src\nsButtonBoxFrame.cpp, line 119]
PresShell::HandleEventInternal
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5582]
PresShell::HandleEvent
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5492]
nsView::HandleEvent [d:\builds\seamonkey\mozilla\view\src\nsView.cpp, line 377]
nsViewManager::DispatchEvent
[d:\builds\seamonkey\mozilla\view\src\nsViewManager.cpp, line 2051]
HandleEvent [d:\builds\seamonkey\mozilla\view\src\nsView.cpp, line 68]
nsWindow::DispatchEvent
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 724]
nsWindow::DispatchWindowEvent
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 741]
nsWindow::DispatchKeyEvent
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 2390]
nsWindow::OnKeyUp [d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp,
line 2470]
nsWindow::ProcessMessage
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 3113] 

Comment 4

[David Baron :dbaron: (⌚️UTC-5, no longer working on Mozilla)]

The Release method of TextInputListener should not call the destructor of
PresShell, so something is corrupt at another level.

->HTML Form Controls?

Comment 5

[rods (gone)]

I need an URL so I can reproduce

Comment 6

[albrecht]

I think I can reproduce this bug on a different web site. Using 0.9.3, this will
alway crash the browser on win NT. You do not need to log in so anyone should be
able to reproduce the bug.

Note: in 0.9.4, https://easyweb.tdcanadatrust.com comes up as a blank page. This
is another bug (100081). I don't know if 100081 affects this bug; I haven't got
0.9.4 installed any more.

1. Go to http://www.tdcanadatrust.com
2. In the upper right corner you will see the phrase "Login to: EasyWeb Now".
   The word Now is a link; click on it.
3. You will be on https://easyweb.tdcanadatrust.com.
4. Click the back button on the browser and Mozilla crashes.

I have also sent in the talkback report for this crash. It was submitted with
[e-mail] as the email address and easyweb.tdcanadatrust.com as
the URL.

Comment 7

[albrecht]

I set my character encoding to iso-8859-1 to fix the bug 100081 in 0.9.4. I do
not get a crash when going through the steps in my previous post for 0.9.4. I
double checked with 0.9.3 and it crashed. For this page at least, the problem
has been fixed in 0.9.4.

Comment 8

[rods (gone)]

moving to 0.9.6

Comment 9

[Madhur Bhatia]

The url provided by [e-mail], does not crash on win2000 or 
linux 7.1 - branch builds of 2001-10-03

Removing keyword 'crash'.

Comment 10

[rods (gone)]

->

Comment 11

[Alexandru Savulov]

move to 0.9.7

Comment 12

[Alexandru Savulov]

looks like there are no crashes here since a while
-> future

Comment 13

[Asa Dotzler [:asa]]

Is this still a problem? If no one is seeing it can we resolve this bug? (It's
not showing up in our limited talkback data from 1.7 beta)

Comment 14

[Mats Palmgren (inactive)]

I tried the steps to reproduce in comment 6 without any problems.

-> WORKSFORME