Closed Bug 234435 Opened 21 years ago Closed 21 years ago

Crash on clicking link in popup window [@ PresShell::DidDoReflow]

Categories

(Core :: DOM: UI Events & Focus Handling, defect)

x86
Windows XP
defect
Not set
critical

Tracking

()

RESOLVED FIXED

People

(Reporter: betheking, Assigned: dbaron)

References

Details

User-Agent: Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7a) Gecko/20040213 Firebird/0.8.0+ Mozilla Firefox (e.g. official build from 2004-02-13) crashes when I click on a link in a certain popup window. This crash occurs in the method PresShell::DidDoReflow (nsPresShell.cp:6349), because the mViewManager is null (DidDoReflow was called from PresShell::ProcessReflowCommands, in turn called from ReflowEvent::HandleEvent). The popup window is the mail reading window on an Exchange webmail server (the link is the reply button), so I can't easily provide an example or URI. Firefox 0.8 does not have this problem. Reproducible: Always Steps to Reproduce: 1. I click on a link which opens a popup window. 2. In the popup window, I click another link. 3. The link consists of javascript code that changes the location URI for the popup window. 4. The contents of the new URI opens a new popup window (this requires popup blocking to be disabled, or the site to be white-listed) and closes the old. Actual Results: Firefox crashes when both windows are open, and there's nothing rendered in the new window (nothing at all, so it is in fact transparent, until the Windows crash dialog opens). Expected Results: The old popup window should close and the new one should be shown instead. Access violation (accessing NULL pointer) in PresShell::DidDoReflow() (nsPresShell.cpp:6349). Similar to bug 232798.
Just noticed that the backout of bug 20022 (on Feb 14) fixed this bug. The offending code, a de-reference of mViewManager, was removed.
Blocks: 20022
Should leave this open pending bug 20022 getting resolved one way or another, at which point this bug should be looked at again...
Assignee: firefox → dbaron
Component: General → Event Handling
Product: Firefox → Browser
Version: unspecified → Trunk
I relanded bug 20022, but with this bug fixed (by a null check).
Status: UNCONFIRMED → RESOLVED
Closed: 21 years ago
Resolution: --- → FIXED
*** Bug 238546 has been marked as a duplicate of this bug. ***
Component: Event Handling → User events and focus handling
You need to log in before you can comment on or make changes to this bug.