95197 - Crash when clicking on a link, while the browser is loading another link

Status: VERIFIED FIXED

(Core :: Security: CAPS, defect)

Description

[Ashley Bischoff (blog at handcoding.com)]

From Bugzilla Helper:
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:0.9.3+)
Gecko/20010809
BuildID:    2001080904

I was looking at some query results in Google. I clicked a link. But, the page
was resolving too slowly, so I clicked another link in the query results
instead: crash.

Talkback Incident ID: TB34075578M

Reproducible: Sometimes
Steps to Reproduce:
1.Enter a query into Google
2. Click on a link that's dead or slow
3. Click on another link in the query results page instead (this should cancel
the first page-load request and load the second clicked link instead)

Actual Results:  Crash

Expected Results:  No crash ;).

My description may be off, but hopefully the Talkback Incident ID should clear
things up. And, I'm sure whomever peruses the Talkback Incident will be able to
assign a more appropriate Component :).

Comment 1

[Ashley Bischoff (blog at handcoding.com)]

Adding "crash" keyword.

Comment 2

[Ashley Bischoff (blog at handcoding.com)]

Talkback Incident IDs TB34118512H and TB34105312H are also as a result of this bug.

Comment 3

[Asa Dotzler [:asa]]

Incident ID 34118512
Stack Signature nsScriptSecurityManager::GetBaseURIScheme 28723496
Bug ID
Trigger Time 2001-08-14 18:52:10
Email Address [e-mail]
User Comments This is Bugzilla bug 95197, again. I sure hope this gets fixed
soon -- it's killing me :(
Build ID 2001081309
Product ID MozillaTrunk
Platform ID Win32
Trigger Reason Access violation
Stack Trace
nsScriptSecurityManager::GetBaseURIScheme
[d:\builds\seamonkey\mozilla\caps\src\nsScriptSecurityManager.cpp, line 670]
nsScriptSecurityManager::CheckLoadURI
[d:\builds\seamonkey\mozilla\caps\src\nsScriptSecurityManager.cpp, line 712]
nsGenericElement::TriggerLink
[d:\builds\seamonkey\mozilla\content\base\src\nsGenericElement.cpp, line 2638]
nsGenericHTMLElement::HandleDOMEventForAnchors
[d:\builds\seamonkey\mozilla\content\html\content\src\nsGenericHTMLElement.cpp,
line 1324]
nsHTMLAreaElement::HandleDOMEvent
[d:\builds\seamonkey\mozilla\content\html\content\src\nsHTMLAreaElement.cpp,
line 203]
nsGenericDOMDataNode::HandleDOMEvent
[d:\builds\seamonkey\mozilla\content\base\src\nsGenericDOMDataNode.cpp, line 678]
nsTextNode::HandleDOMEvent
[d:\builds\seamonkey\mozilla\content\base\src\nsTextNode.cpp, line 241]
PresShell::HandleEventInternal
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5648]
PresShell::HandleEventWithTarget
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5620]
nsEventStateManager::CheckForAndDispatchClick
[d:\builds\seamonkey\mozilla\content\events\src\nsEventStateManager.cpp, line 2467]
nsEventStateManager::PostHandleEvent
[d:\builds\seamonkey\mozilla\content\events\src\nsEventStateManager.cpp, line 1553]
PresShell::HandleEventInternal
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5669]
PresShell::HandleEvent
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5575]
nsView::HandleEvent [d:\builds\seamonkey\mozilla\view\src\nsView.cpp, line 377]
nsView::HandleEvent [d:\builds\seamonkey\mozilla\view\src\nsView.cpp, line 350]
nsView::HandleEvent [d:\builds\seamonkey\mozilla\view\src\nsView.cpp, line 350]
nsViewManager::DispatchEvent
[d:\builds\seamonkey\mozilla\view\src\nsViewManager.cpp, line 2058]
HandleEvent [d:\builds\seamonkey\mozilla\view\src\nsView.cpp, line 68]
nsWindow::DispatchEvent
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 724]
nsWindow::DispatchWindowEvent
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 741]
nsWindow::DispatchMouseEvent
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 4253]
ChildWindow::DispatchMouseEvent
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 4500]
nsWindow::ProcessMessage
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 3240]
nsWindow::WindowProc
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 989]
USER32.DLL + 0x2e98 (0x77e12e98)
USER32.DLL + 0x30e0 (0x77e130e0)
USER32.DLL + 0x5824 (0x77e15824)
nsAppShellService::Run
[d:\builds\seamonkey\mozilla\xpfe\appshell\src\nsAppShellService.cpp, line 425]
main1 [d:\builds\seamonkey\mozilla\xpfe\bootstrap\nsAppRunner.cpp, line 1303]
main [d:\builds\seamonkey\mozilla\xpfe\bootstrap\nsAppRunner.cpp, line 1613]
WinMain [d:\builds\seamonkey\mozilla\xpfe\bootstrap\nsAppRunner.cpp, line 1631]
WinMainCRTStartup()
KERNEL32.DLL + 0x17d08 (0x77e97d08) 

Comment 4

[Mitchell Stoltz (not reading bugmail)]

This was fixed (I believe) by adding a null check wich was checked in on 8/13.
Talkback shows no reports of this crash after 8/13, so I assume this is fixed.

Comment 5

[bsharma]

Verified on
build: 2001-09-13-0.9.4
platform: Win NT

Following the steps to reproduce, the browser behaves properly.