91992 - Clicking 'Back' button on this URL results in a crash

Status: RESOLVED DUPLICATE of bug 68488

(Core :: XPCOM, defect)

Description

[Dave Barrowman]

1. Go to http://www.infinitybroadcasting.com 
2. Now click the Back button
3. Fight off the multiple popups
4. Eventually you will crash 
Platform: Win98, build 20010723
Reproducible: Always

Comment 1

[Matthias Versen [:Matti]]

confirming with win2k build 20010723..

I won the fight 3x but then mozilla lost it :-)
After you had won the fight you must delete x (4-5) cookies to get the popups 
again.
(My debug isn't crashing but my opt is crashing in XPCOM)

-> XPCOM

Comment 2

[chris hofmann]

I can't reproduce this on 
Mozilla/5.0 (Windows; U; Win98; en-US; rv:0.9.2) Gecko/20010724 Netscape6/6.1 

We need a stack trace to make traction.

dave, can you provide more info?
jay/shiva, can you look though barrowma's talkback reports and
try to see if there is anything we can hook up to this bug.

Comment 3

[Jay Patel [:jay]]

Here is one of barrowma's Talkback incidents (the only one that actually
mentioned clicking the back button in the comments):

Incident ID 33248960
Stack Signature GlobalWindowImpl::DropTimeout 423e0a42
Bug ID
Trigger Time 2001-07-23 15:21:19
User Comments click back button on http://www.inifinitybroadcasting.com - you'll
get lots of popups and eventually a crash.
Build ID 2001072306
Product ID Netscape6.10
Platform ID Win32
Stack Trace
GlobalWindowImpl::DropTimeout
[d:\builds\seamonkey\mozilla\dom\src\base\nsGlobalWindow.cpp, line 3568]
nsGlobalWindow_RunTimeout
[d:\builds\seamonkey\mozilla\dom\src\base\nsGlobalWindow.cpp, line 3717]
nsTimer::Fire [d:\builds\seamonkey\mozilla\widget\timer\src\windows\nsTimer.cpp,
line 196]
nsTimerManager::FireNextReadyTimer
[d:\builds\seamonkey\mozilla\widget\timer\src\windows\nsTimerManager.cpp, line 117]
nsAppShell::Run [d:\builds\seamonkey\mozilla\widget\src\windows\nsAppShell.cpp,
line 118]
nsAppShellService::Run
[d:\builds\seamonkey\mozilla\xpfe\appshell\src\nsAppShellService.cpp, line 426]
NETSCP6.EXE + 0x16f0 (0x004016f0)
NETSCP6.EXE + 0x11b8 (0x004011b8)
NETSCP6.EXE + 0x3366 (0x00403366)
KERNEL32.DLL + 0x1b560 (0xbff8b560)
KERNEL32.DLL + 0x1b412 (0xbff8b412)
KERNEL32.DLL + 0x19dd5 (0xbff89dd5)
0x0badf00d 

There are 2 other crashes with the same stack signature, but different comments
(although the url is still http://www.infinitybroadcasting.com):

Incident ID 33279014
Stack Signature GlobalWindowImpl::DropTimeout b5f4a629
Bug ID
Trigger Time 2001-07-24 08:51:37
User Comments hit CTRL-o to open a file
Build ID 2001072306
Product ID Netscape6.10
Platform ID Win32
Stack Trace
GlobalWindowImpl::DropTimeout
[d:\builds\seamonkey\mozilla\dom\src\base\nsGlobalWindow.cpp, line 3568]
nsGlobalWindow_RunTimeout
[d:\builds\seamonkey\mozilla\dom\src\base\nsGlobalWindow.cpp, line 3717]
nsTimer::Fire [d:\builds\seamonkey\mozilla\widget\timer\src\windows\nsTimer.cpp,
line 196]
FireTimeout [d:\builds\seamonkey\mozilla\widget\timer\src\windows\nsTimer.cpp,
line 78]
KERNEL32.DLL + 0x2317 (0xbff72317)
FireTimeout [d:\builds\seamonkey\mozilla\widget\timer\src\windows\nsTimer.cpp,
line 51]
USER32.DLL + 0x3bb5 (0xbfc03bb5)
0x278c0003
0x046f1a01 

Incident ID 33283252
Stack Signature GlobalWindowImpl::DropTimeout b5f4a629
Bug ID
Trigger Time 2001-07-24 10:35:43
User Comments crash after saving a file
Build ID 2001072306
Product ID Netscape6.10
Platform ID Win32
Stack Trace
GlobalWindowImpl::DropTimeout
[d:\builds\seamonkey\mozilla\dom\src\base\nsGlobalWindow.cpp, line 3568]
nsGlobalWindow_RunTimeout
[d:\builds\seamonkey\mozilla\dom\src\base\nsGlobalWindow.cpp, line 3717]
nsTimer::Fire [d:\builds\seamonkey\mozilla\widget\timer\src\windows\nsTimer.cpp,
line 196]
FireTimeout [d:\builds\seamonkey\mozilla\widget\timer\src\windows\nsTimer.cpp,
line 78]
KERNEL32.DLL + 0x2317 (0xbff72317)
FireTimeout [d:\builds\seamonkey\mozilla\widget\timer\src\windows\nsTimer.cpp,
line 51]
USER32.DLL + 0x3bb5 (0xbfc03bb5)
0x278c0003
0x046f1a01 

Note that all of these crashes are with Netscape6.10 build 2001072306, which is
not the final N610 release build.  Dave, are you able to reproduce with the
final N610 build 2001072700 or any recent MozillaTrunk builds?

This crash is already logged in bug 68488, which was fixed on the branch only on
7/23...that fix still needs to be checked into the MozillaTrunk.  Marking this
bug a dup of bug 68488.

*** This bug has been marked as a duplicate of 68488 ***

Comment 4

[Dave Barrowman]

I am unable to reproduce using the 20010727 builds.

Comment 5

[Glen]

 invalid page fault in
module JS3250.DLL at 015f:018e2540.
Registers:
EAX=019c0890 CS=015f EIP=018e2540 EFLGS=00010206
EBX=00000002 SS=0167 ESP=00560000 EBP=00560030
ECX=fb26f9bf DS=0167 ESI=04d905d0 FS=247f
EDX=d75d8a5f ES=0167 EDI=04d905e4 GS=0000
Bytes at CS:EIP:
ff 74 24 0c ff 74 24 0c e8 33 44 01 00 83 c4 0c
Stack dump:
0198f7d4 0197f8ea 006be804 04d905e4 0198f7d4 00560060 04d905d0 020d0bf8 0197f899 
04d905d0 0056006c 00560178 00560058 016e7406 04d905d0 019872c8