[Bug 158423] Crash when loading inside window.onload in 0-sized embed tag
gst
gst at sysfrog.org
Mon Oct 29 19:43:43 UTC 2007
Public bug reported:
Binary package hint: flashplugin-nonfree
I was able to extract the specific HTML code which caused a reproducable
crash on the Amazon website. This crash only happens if the "Global
Storage Settings" for websites are set to "None" (so that the Flash asks
if a website is allowed to store data). To do this go to
http://www.macromedia.com/support/documentation/en/flashplayer/help/settings_manager03.html
(you can change the settings for your local Flash installation on this
website). Also check that there is no individual setting for amazon.com
under the "Website Storage Settings". This bug only occurs if the
embedded .swf file asks if it may store data.
The file with the code that causes Firefox/Flash to crash is located at:
http://virtual.sysfrog.org/~gst/crash.html
Basically it sets a window.onload which inserts an embed tag with width
and height of zero. Opening this website works fine, as soon as the
website is left (i.e. the tab is closed) Firefox segfaults.
I'm not 100% sure if this is a Firefox or a Flash problem.
gdb bt and "full bt" are attached below:
bt:
#0 0x00000000 in ?? ()
#1 0xaf9e1dc2 in ?? () from /usr/lib/flashplugin-nonfree/libflashplayer.so
#2 0xaf9e38bb in ?? () from /usr/lib/flashplugin-nonfree/libflashplayer.so
#3 0xafaa68cf in ?? () from /usr/lib/flashplugin-nonfree/libflashplayer.so
#4 0xaf70183f in ?? () from /usr/lib/flashplugin-nonfree/libflashplayer.so
#5 0xaf6fcec9 in ?? () from /usr/lib/flashplugin-nonfree/libflashplayer.so
#6 0xaf6f5e61 in ?? () from /usr/lib/flashplugin-nonfree/libflashplayer.so
#7 0xaf6fa517 in ?? () from /usr/lib/flashplugin-nonfree/libflashplayer.so
#8 0x08e4a224 in ?? ()
#9 0xbfc5ffd4 in ?? ()
#10 0xb778517c in ?? () from /lib/tls/i686/cmov/libc.so.6
#11 0xafe9f420 in ?? () from /usr/lib/firefox/components/libgkplugin.so
#12 0xb7dbd1a9 in PR_LogFlush () at prlog.c:499
#13 0xafe809cb in ns4xPluginInstance::Stop (this=0x8e4a208) at ns4xPluginInstance.cpp:965
#14 0xb590a666 in nsObjectFrame::Destroy (this=0x8d19540, aPresContext=0x8b7eb18) at nsObjectFrame.cpp:748
#15 0xb5900c8a in nsLineBox::DeleteLineList (aPresContext=0x8b7eb18, aLines=@0x8d18ce0) at nsLineBox.cpp:325
#16 0xb58c9552 in nsBlockFrame::Destroy (this=0x8d18ca8, aPresContext=0x8b7eb18) at nsBlockFrame.cpp:304
#17 0xb5900c8a in nsLineBox::DeleteLineList (aPresContext=0x8b7eb18, aLines=@0x8d18770) at nsLineBox.cpp:325
#18 0xb58c9552 in nsBlockFrame::Destroy (this=0x8d18738, aPresContext=0x8b7eb18) at nsBlockFrame.cpp:304
#19 0xb5900c8a in nsLineBox::DeleteLineList (aPresContext=0x8b7eb18, aLines=@0x8d18260) at nsLineBox.cpp:325
#20 0xb58c9552 in nsBlockFrame::Destroy (this=0x8d18228, aPresContext=0x8b7eb18) at nsBlockFrame.cpp:304
#21 0xb58e4f63 in nsFrameList::DestroyFrames (this=0x8d135ac, aPresContext=0x8b7eb18) at nsFrameList.cpp:138
#22 0xb58d96bf in nsContainerFrame::Destroy (this=0x8d1357c, aPresContext=0x8b7eb18) at nsContainerFrame.cpp:165
#23 0xb58f1a1b in CanvasFrame::Destroy (this=0x8d1357c, aPresContext=0x8b7eb18) at nsHTMLFrame.cpp:230
#24 0xb58e4f63 in nsFrameList::DestroyFrames (this=0x8d136f4, aPresContext=0x8b7eb18) at nsFrameList.cpp:138
#25 0xb58d96bf in nsContainerFrame::Destroy (this=0x8d136c4, aPresContext=0x8b7eb18) at nsContainerFrame.cpp:165
#26 0xb58e4f63 in nsFrameList::DestroyFrames (this=0x8d1351c, aPresContext=0x8b7eb18) at nsFrameList.cpp:138
#27 0xb58d96bf in nsContainerFrame::Destroy (this=0x8d134ec, aPresContext=0x8b7eb18) at nsContainerFrame.cpp:165
#28 0xb58a8ee7 in nsFrameManager::Destroy (this=0x8c7c0dc) at nsFrameManager.cpp:297
#29 0xb58bb917 in PresShell::Destroy (this=0x8c7c0c0) at nsPresShell.cpp:2001
#30 0xb58a3ca9 in DocumentViewerImpl::Hide (this=0x8c21b48) at nsDocumentViewer.cpp:2034
#31 0xb5d82cbe in nsDocShell::SetVisibility (this=0x8addcd0, aVisibility=0) at nsDocShell.cpp:3806
#32 0xb58e4aa7 in nsSubDocumentFrame::Destroy (this=0x8c19dc4, aPresContext=0x87878d0) at nsFrameFrame.cpp:598
#33 0xb58e4f63 in nsFrameList::DestroyFrames (this=0x8c1a0ac, aPresContext=0x87878d0) at nsFrameList.cpp:138
#34 0xb58d96bf in nsContainerFrame::Destroy (this=0x8c1a07c, aPresContext=0x87878d0) at nsContainerFrame.cpp:165
#35 0xb58e4f63 in nsFrameList::DestroyFrames (this=0x8c1a114, aPresContext=0x87878d0) at nsFrameList.cpp:138
#36 0xb58d96bf in nsContainerFrame::Destroy (this=0x8c1a0e4, aPresContext=0x87878d0) at nsContainerFrame.cpp:165
#37 0xb59f0a52 in nsBoxFrame::RemoveFrame (this=0x89f190c, aListName=0x0, aOldFrame=0x8c1a0e4) at nsBoxFrame.cpp:1178
#38 0xb58a8e1d in nsFrameManager::RemoveFrame (this=0x8875f3c, aParentFrame=0x89f190c, aListName=0x0, aOldFrame=0x8c1a0e4) at nsFrameManager.cpp:717
#39 0xb588fcfd in nsCSSFrameConstructor::ContentRemoved (this=0x8876218, aContainer=0x897fc18, aChild=0x8a0c6c8, aIndexInContainer=4, aInReinsertContent=0) at nsCSSFrameConstructor.cpp:10149
#40 0xb58bac3f in PresShell::ContentRemoved (this=0x8875f20, aDocument=0x886c5e0, aContainer=0x897fc18, aChild=0x8a0c6c8, aIndexInContainer=4) at nsPresShell.cpp:5614
#41 0xb5a4bbd1 in nsDocument::ContentRemoved (this=0x886c5e0, aContainer=0x897fc18, aChild=0x8a0c6c8, aIndexInContainer=4) at nsDocument.cpp:2480
#42 0xb5b74c6d in nsXULDocument::ContentRemoved (this=0x886c5e0, aContainer=0x897fc18, aChild=0x8a0c6c8, aIndexInContainer=4) at nsXULDocument.cpp:1199
#43 0xb5a68998 in doRemoveChildAt (aIndex=4, aNotify=1, aKid=0x8a0c6c8, aParent=0x897fc18, aDocument=0x886c5e0, aChildArray=@0x897fc2c) at nsGenericElement.cpp:3048
#44 0xb5a68bec in nsGenericElement::RemoveChildAt (this=0x897fc18, aIndex=4, aNotify=1) at nsGenericElement.cpp:2915
#45 0xb5b6700b in nsXULElement::RemoveChildAt (this=0x897fc18, aIndex=4, aNotify=1) at nsXULElement.cpp:1271
#46 0xb5a6403f in nsGenericElement::RemoveChild (this=0x897fc18, aOldChild=0x8a0c6e0, aReturn=0xbfc609ec) at nsGenericElement.cpp:3688
#47 0xb7e8f9c9 in XPTC_InvokeByIndex () at xptcinvoke_gcc_x86_unix.cpp:50
#48 0xb676a3a7 in XPCWrappedNative::CallMethod (ccx=@0xbfc60b0c, mode=XPCWrappedNative::CALL_METHOD) at xpcwrappednative.cpp:2169
#49 0xb6770c3f in XPC_WN_CallMethod (cx=0x877fe40, obj=0x89d67a8, argc=1, argv=0x9733eb0, vp=0xbfc60c30) at xpcwrappednativejsops.cpp:1455
#50 0xb7ef3841 in js_Invoke (cx=0x877fe40, argc=1, flags=0) at jsinterp.c:1375
#51 0xb7ef5a11 in js_Interpret (cx=0x877fe40, pc=0x899acea ":", result=0xbfc60ff8) at jsinterp.c:3944
#52 0xb7ef3cd4 in js_Invoke (cx=0x877fe40, argc=1, flags=2) at jsinterp.c:1394
#53 0xb7f03b5d in js_InternalInvoke (cx=0x877fe40, obj=0x8b6c738, fval=156659256, flags=2, argc=1, argv=0xbfc61254, rval=0xbfc61244) at jsinterp.c:1469
#54 0xb7ec1dc0 in JS_CallFunctionValue (cx=0x877fe40, obj=0x8b6c738, fval=156659256, argc=1, argv=0xbfc61254, rval=0xbfc61244) at jsapi.c:4351
#55 0xb5b963fa in nsJSContext::CallEventHandler (this=0x877f058, aTarget=0x8b6c738, aHandler=0x9566e38, argc=1, argv=0xbfc61254, rval=0xbfc61244) at nsJSEnvironment.cpp:1493
#56 0xb5bd3809 in nsJSEventListener::HandleEvent (this=0x9691c28, aEvent=0x94810d8) at nsJSEventListener.cpp:186
#57 0xb5b594e0 in nsXBLPrototypeHandler::ExecuteHandler (this=0x89bd158, aReceiver=0x8d77ee0, aEvent=0x94810d8) at nsXBLPrototypeHandler.cpp:512
#58 0xb5b55c6a in nsXBLEventHandler::HandleEvent (this=0x89e9b28, aEvent=0x94810d8) at nsXBLEventHandler.cpp:84
#59 0xb5a9a6ae in nsEventListenerManager::HandleEventSubType (this=0x8c1add8, aListenerStruct=0x8c1ae60, aListener=0x89e9b28, aDOMEvent=0x94810d8, aCurrentTarget=0x8d77ee0, aSubType=4,
aPhaseFlags=<value optimized out>) at nsEventListenerManager.cpp:1655
#60 0xb5a9c71c in nsEventListenerManager::HandleEvent (this=0x8c1add8, aPresContext=0x87878d0, aEvent=0xbfc61b3c, aDOMEvent=0xbfc619f4, aCurrentTarget=0x8d77ee0, aFlags=7, aEventStatus=0xbfc61fac)
at nsEventListenerManager.cpp:1759
#61 0xb5b67d9a in nsXULElement::HandleDOMEvent (this=0x8b662f0, aPresContext=0x87878d0, aEvent=0xbfc61b3c, aDOMEvent=0xbfc619f4, aFlags=7, aEventStatus=0xbfc61fac) at nsXULElement.cpp:2231
#62 0xb58b948c in PresShell::HandleEventInternal (this=0x8875f20, aEvent=0xbfc61b3c, aView=0x0, aFlags=1, aStatus=0xbfc61fac) at nsPresShell.cpp:6474
#63 0xb58b9925 in PresShell::HandleEventWithTarget (this=0x8875f20, aEvent=0xbfc61b3c, aFrame=0x8c19f50, aContent=0x8b662f0, aFlags=1, aStatus=0xbfc61fac) at nsPresShell.cpp:6371
#64 0xb5aa1db4 in nsEventStateManager::CheckForAndDispatchClick (this=0x8875790, aPresContext=0x87878d0, aEvent=0xbfc62134, aStatus=0xbfc61fac) at nsEventStateManager.cpp:3206
#65 0xb5aa2be1 in nsEventStateManager::PostHandleEvent (this=0x8875790, aPresContext=0x87878d0, aEvent=0xbfc62134, aTargetFrame=0x8c19f50, aStatus=0xbfc61fac, aView=0x89e0a90) at nsEventStateManager.cpp:2169
#66 0xb58b95f3 in PresShell::HandleEventInternal (this=0x8875f20, aEvent=0xbfc62134, aView=0x89e0a90, aFlags=513, aStatus=0xbfc61fac) at nsPresShell.cpp:6546
#67 0xb58b9c43 in PresShell::HandleEvent (this=0x8875f20, aView=0x89e0a90, aEvent=0xbfc62134, aEventStatus=0xbfc61fac, aForceHandle=0, aHandled=@0xbfc61fa8) at nsPresShell.cpp:6310
#68 0xb5b8cdce in nsViewManager::HandleEvent (this=0x8875c90, aView=0x8875d08, aEvent=0xbfc62134, aCaptured=0) at nsViewManager.cpp:2564
#69 0xb5b8f3fc in nsViewManager::DispatchEvent (this=0x8875c90, aEvent=0xbfc62134, aStatus=0xbfc620f0) at nsViewManager.cpp:2253
#70 0xb5b83ec6 in HandleEvent (aEvent=0xbfc62134) at nsView.cpp:171
#71 0xb6709dfe in nsCommonWidget::DispatchEvent (this=0x8875d70, aEvent=0xbfc62134, aStatus=@0xbfc6217c) at nsCommonWidget.cpp:219
#72 0xb6707d89 in nsWindow::OnButtonReleaseEvent (this=0x8875d70, aWidget=0x84304a0, aEvent=0x807ed58) at nsWindow.cpp:1721
#73 0xb6707de9 in button_release_event_cb (widget=0x84304a0, event=0x807ed58) at nsWindow.cpp:3911
#74 0xb7b6e1de in _gtk_marshal_BOOLEAN__BOXED (closure=0x877f0b0, return_value=0xbfc62300, n_param_values=2, param_values=0xbfc623dc, invocation_hint=0xbfc622ec, marshal_data=0xb6707dc0)
at /build/buildd/gtk+2.0-2.12.0/gtk/gtkmarshalers.c:84
#75 0xb756b772 in g_closure_invoke () from /usr/lib/libgobject-2.0.so.0
#76 0xb757c323 in ?? () from /usr/lib/libgobject-2.0.so.0
#77 0x0877f0b0 in ?? ()
#78 0xbfc62300 in ?? ()
#79 0x00000002 in ?? ()
#80 0xbfc623dc in ?? ()
#81 0xbfc622ec in ?? ()
#82 0x00000000 in ?? ()
full bt:
#0 0x00000000 in ?? ()
No symbol table info available.
#1 0xaf9e1dc2 in ?? () from /usr/lib/flashplugin-nonfree/libflashplayer.so
No symbol table info available.
#2 0xaf9e38bb in ?? () from /usr/lib/flashplugin-nonfree/libflashplayer.so
No symbol table info available.
#3 0xafaa68cf in ?? () from /usr/lib/flashplugin-nonfree/libflashplayer.so
No symbol table info available.
#4 0xaf70183f in ?? () from /usr/lib/flashplugin-nonfree/libflashplayer.so
No symbol table info available.
#5 0xaf6fcec9 in ?? () from /usr/lib/flashplugin-nonfree/libflashplayer.so
No symbol table info available.
#6 0xaf6f5e61 in ?? () from /usr/lib/flashplugin-nonfree/libflashplayer.so
No symbol table info available.
#7 0xaf6fa517 in ?? () from /usr/lib/flashplugin-nonfree/libflashplayer.so
No symbol table info available.
#8 0x08e4a224 in ?? ()
No symbol table info available.
#9 0xbfc5ffd4 in ?? ()
No symbol table info available.
#10 0xb778517c in ?? () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.
#11 0xafe9f420 in ?? () from /usr/lib/firefox/components/libgkplugin.so
No symbol table info available.
#12 0xb7dbd1a9 in PR_LogFlush () at prlog.c:499
No locals.
#13 0xafe809cb in ns4xPluginInstance::Stop (this=0x8e4a208) at ns4xPluginInstance.cpp:965
error = <value optimized out>
sdata = (NPSavedData *) 0x0
#14 0xb590a666 in nsObjectFrame::Destroy (this=0x8d19540, aPresContext=0x8b7eb18) at nsObjectFrame.cpp:748
window = (nsPluginNativeWindow *) 0x8d72b40
doCache = 0
doCallSetWindowAfterDestroy = 0
win = (nsPluginWindow *) 0x8d72b44
nullinst = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}
pluginHost = {<nsCOMPtr_base> = {mRawPtr = 0x8d0df50}, <No data fields>}
inst = {<nsCOMPtr_base> = {mRawPtr = 0x8e4a208}, <No data fields>}
#15 0xb5900c8a in nsLineBox::DeleteLineList (aPresContext=0x8b7eb18, aLines=@0x8d18ce0) at nsLineBox.cpp:325
nextChild = (nsIFrame *) 0x0
child = (nsIFrame *) 0xae7020e0
shell = <value optimized out>
#16 0xb58c9552 in nsBlockFrame::Destroy (this=0x8d18ca8, aPresContext=0x8b7eb18) at nsBlockFrame.cpp:304
overflowLines = <value optimized out>
#17 0xb5900c8a in nsLineBox::DeleteLineList (aPresContext=0x8b7eb18, aLines=@0x8d18770) at nsLineBox.cpp:325
nextChild = (nsIFrame *) 0x8d18d40
child = (nsIFrame *) 0xae7020e0
shell = <value optimized out>
#18 0xb58c9552 in nsBlockFrame::Destroy (this=0x8d18738, aPresContext=0x8b7eb18) at nsBlockFrame.cpp:304
overflowLines = <value optimized out>
#19 0xb5900c8a in nsLineBox::DeleteLineList (aPresContext=0x8b7eb18, aLines=@0x8d18260) at nsLineBox.cpp:325
nextChild = (nsIFrame *) 0x0
child = (nsIFrame *) 0xae7020e0
shell = <value optimized out>
#20 0xb58c9552 in nsBlockFrame::Destroy (this=0x8d18228, aPresContext=0x8b7eb18) at nsBlockFrame.cpp:304
overflowLines = <value optimized out>
#21 0xb58e4f63 in nsFrameList::DestroyFrames (this=0x8d135ac, aPresContext=0x8b7eb18) at nsFrameList.cpp:138
frame = (nsIFrame *) 0xae7020e0
next = (nsIFrame *) 0x0
#22 0xb58d96bf in nsContainerFrame::Destroy (this=0x8d1357c, aPresContext=0x8b7eb18) at nsContainerFrame.cpp:165
overflowFrames = {mFirstChild = 0xbfc6017c}
#23 0xb58f1a1b in CanvasFrame::Destroy (this=0x8d1357c, aPresContext=0x8b7eb18) at nsHTMLFrame.cpp:230
scrollingView = (nsIScrollableView *) 0x8d145d4
#24 0xb58e4f63 in nsFrameList::DestroyFrames (this=0x8d136f4, aPresContext=0x8b7eb18) at nsFrameList.cpp:138
frame = (nsIFrame *) 0xae7020e0
next = (nsIFrame *) 0x0
#25 0xb58d96bf in nsContainerFrame::Destroy (this=0x8d136c4, aPresContext=0x8b7eb18) at nsContainerFrame.cpp:165
overflowFrames = {mFirstChild = 0xbfc6021c}
#26 0xb58e4f63 in nsFrameList::DestroyFrames (this=0x8d1351c, aPresContext=0x8b7eb18) at nsFrameList.cpp:138
frame = (nsIFrame *) 0xae7020e0
next = (nsIFrame *) 0x0
#27 0xb58d96bf in nsContainerFrame::Destroy (this=0x8d134ec, aPresContext=0x8b7eb18) at nsContainerFrame.cpp:165
overflowFrames = {mFirstChild = 0x8b7eb18}
#28 0xb58a8ee7 in nsFrameManager::Destroy (this=0x8c7c0dc) at nsFrameManager.cpp:297
presContext = (nsPresContext *) 0x8b7eb18
#29 0xb58bb917 in PresShell::Destroy (this=0x8c7c0c0) at nsPresShell.cpp:2001
i = <value optimized out>
count = 145611988
eventQueue = {<nsCOMPtr_base> = {mRawPtr = 0x80cbdc0}, <No data fields>}
#30 0xb58a3ca9 in DocumentViewerImpl::Hide (this=0x8c21b48) at nsDocumentViewer.cpp:2034
saveLayoutState = 1
is_in_print_mode = 0
selection = {<nsCOMPtr_base> = {mRawPtr = 0x83d7558}, <No data fields>}
selPrivate = {<nsCOMPtr_base> = {mRawPtr = 0x83d755c}, <No data fields>}
xul_doc = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}
docShell = {<nsCOMPtr_base> = {mRawPtr = 0x8addd64}, <No data fields>}
base_win = {<nsCOMPtr_base> = {mRawPtr = 0xb7dc321d}, <No data fields>}
#31 0xb5d82cbe in nsDocShell::SetVisibility (this=0x8addcd0, aVisibility=0) at nsDocShell.cpp:3806
No locals.
#32 0xb58e4aa7 in nsSubDocumentFrame::Destroy (this=0x8c19dc4, aPresContext=0x87878d0) at nsFrameFrame.cpp:598
content_viewer = {<nsCOMPtr_base> = {mRawPtr = 0x8c21b48}, <No data fields>}
baseWin = {<nsCOMPtr_base> = {mRawPtr = 0x8addd80}, <No data fields>}
docShell = {<nsCOMPtr_base> = {mRawPtr = 0x8addd64}, <No data fields>}
#33 0xb58e4f63 in nsFrameList::DestroyFrames (this=0x8c1a0ac, aPresContext=0x87878d0) at nsFrameList.cpp:138
frame = (nsIFrame *) 0xae7020e0
next = (nsIFrame *) 0x0
#34 0xb58d96bf in nsContainerFrame::Destroy (this=0x8c1a07c, aPresContext=0x87878d0) at nsContainerFrame.cpp:165
overflowFrames = {mFirstChild = 0x0}
#35 0xb58e4f63 in nsFrameList::DestroyFrames (this=0x8c1a114, aPresContext=0x87878d0) at nsFrameList.cpp:138
frame = (nsIFrame *) 0xae7020e0
next = (nsIFrame *) 0x0
#36 0xb58d96bf in nsContainerFrame::Destroy (this=0x8c1a0e4, aPresContext=0x87878d0) at nsContainerFrame.cpp:165
overflowFrames = {mFirstChild = 0x0}
#37 0xb59f0a52 in nsBoxFrame::RemoveFrame (this=0x89f190c, aListName=0x0, aOldFrame=0x8c1a0e4) at nsBoxFrame.cpp:1178
presContext = (nsPresContext *) 0x87878d0
state = {mPresContext = {<nsCOMPtr_base> = {mRawPtr = 0x87878d0}, <No data fields>}, mReflowState = 0x0, mMaxElementWidth = 0x0, mType = nsBoxLayoutState::Dirty, mLayoutFlags = 0, mPaintingDisabled = 0}
#38 0xb58a8e1d in nsFrameManager::RemoveFrame (this=0x8875f3c, aParentFrame=0x89f190c, aListName=0x0, aOldFrame=0x8c1a0e4) at nsFrameManager.cpp:717
No locals.
#39 0xb588fcfd in nsCSSFrameConstructor::ContentRemoved (this=0x8876218, aContainer=0x897fc18, aChild=0x8a0c6c8, aIndexInContainer=4, aInReinsertContent=0) at nsCSSFrameConstructor.cpp:10149
outerTableFrame = <value optimized out>
parentFrame = (nsIFrame *) 0x89f190c
containingBlock = (nsIFrame *) 0x0
display = (const nsStyleDisplay *) 0x89f1a14
placeholderFrame = (nsPlaceholderFrame *) 0x0
frameManager = (nsFrameManager *) 0x8875f3c
presContext = (nsPresContext *) 0x87878d0
rv = 0
childFrame = (nsIFrame *) 0x8c1a0e4
#40 0xb58bac3f in PresShell::ContentRemoved (this=0x8875f20, aDocument=0x886c5e0, aContainer=0x897fc18, aChild=0x8a0c6c8, aIndexInContainer=4) at nsPresShell.cpp:5614
frame = (nsIFrame *) 0x8c1a0e4
#41 0xb5a4bbd1 in nsDocument::ContentRemoved (this=0x886c5e0, aContainer=0x897fc18, aChild=0x8a0c6c8, aIndexInContainer=4) at nsDocument.cpp:2480
iter_ = {<nsDocumentObserverList::Iterator> = {mPosition = 2, mStep = 1, mList = @0x886c704, mNext = 0x0}, <No data fields>}
obs_ = {<nsCOMPtr_base> = {mRawPtr = 0x8875fa0}, <No data fields>}
#42 0xb5b74c6d in nsXULDocument::ContentRemoved (this=0x886c5e0, aContainer=0x897fc18, aChild=0x8a0c6c8, aIndexInContainer=4) at nsXULDocument.cpp:1199
rv = <value optimized out>
#43 0xb5a68998 in doRemoveChildAt (aIndex=4, aNotify=1, aKid=0x8a0c6c8, aParent=0x897fc18, aDocument=0x886c5e0, aChildArray=@0x897fc2c) at nsGenericElement.cpp:3048
updateBatch = {mDocument = {<nsCOMPtr_base> = {mRawPtr = 0x886c5e0}, <No data fields>}, mUpdateType = 1}
#44 0xb5a68bec in nsGenericElement::RemoveChildAt (this=0x897fc18, aIndex=4, aNotify=1) at nsGenericElement.cpp:2915
oldKid = {<nsCOMPtr_base> = {mRawPtr = 0x8a0c6c8}, <No data fields>}
#45 0xb5b6700b in nsXULElement::RemoveChildAt (this=0x897fc18, aIndex=4, aNotify=1) at nsXULElement.cpp:1271
oldKidElem = {<nsCOMPtr_base> = {mRawPtr = 0xbfc6081c}, <No data fields>}
rv = 0
oldKid = {<nsCOMPtr_base> = {mRawPtr = 0x8a0c6c8}, <No data fields>}
controlElement = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}
listBox = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}
fireSelectionHandler = 0
newCurrentIndex = -1
ni = <value optimized out>
doc = <value optimized out>
#46 0xb5a6403f in nsGenericElement::RemoveChild (this=0x897fc18, aOldChild=0x8a0c6e0, aReturn=0xbfc609ec) at nsGenericElement.cpp:3688
res = 0
content = {<nsCOMPtr_base> = {mRawPtr = 0x8a0c6c8}, <No data fields>}
pos = -1368383264
#47 0xb7e8f9c9 in XPTC_InvokeByIndex () at xptcinvoke_gcc_x86_unix.cpp:50
No locals.
#48 0xb676a3a7 in XPCWrappedNative::CallMethod (ccx=@0xbfc60b0c, mode=XPCWrappedNative::CALL_METHOD) at xpcwrappednative.cpp:2169
rv = <value optimized out>
paramBuffer = {{<nsXPTCMiniVariant> = {val = {i8 = -32 '�, i16 = -14624, i32 = 144754400, i64 = -4627999884620806432, u8 = 224 '�, u16 = 50912, u32 = 144754400, u64 = 13818744189088745184,
f = 9.67640501e-34, d = -0.17219925328531982, b = 144754400, c = -32 '�, wc = 50912, p = 0x8a0c6e0}}, ptr = 0x0, type = {<XPTTypeDescriptorPrefix> = {flags = 146 '\222'}, <No data fields>},
flags = 4 '\004'}, {<nsXPTCMiniVariant> = {val = {i8 = 0 '\0', i16 = 0, i32 = 0, i64 = 0, u8 = 0 '\0', u16 = 0, u32 = 0, u64 = 0, f = 0, d = 0, b = 0, c = 0 '\0', wc = 0, p = 0x0}}, ptr = 0xbfc609ec,
type = {<XPTTypeDescriptorPrefix> = {flags = 146 '\222'}, <No data fields>}, flags = 5 '\005'}, {<nsXPTCMiniVariant> = {val = {i8 = 88 'X', i16 = -18600, i32 = -1208633512, i64 = 3086333784, u8 = 88 'X',
u16 = 46936, u32 = 3086333784, u64 = 3086333784, f = -2.9291652e-05, d = 1.5248514942736183e-314, b = -1208633512, c = 88 'X', wc = 46936, p = 0xb7f5b758}}, ptr = 0x877fe40,
type = {<XPTTypeDescriptorPrefix> = {flags = 8 '\b'}, <No data fields>}, flags = 11 '\v'}, {<nsXPTCMiniVariant> = {val = {i8 = 65 'A', i16 = 14401, i32 = -1209059263, i64 = 610235828449261633, u8 = 65 'A',
u16 = 14401, u32 = 3085908033, u64 = 610235828449261633, f = -2.85172155e-05, d = 7.2666056108572569e-268, b = -1209059263, c = 65 'A', wc = 14401, p = 0xb7ef3841}}, ptr = 0x8b6c6c0,
type = {<XPTTypeDescriptorPrefix> = {flags = 0 '\0'}, <No data fields>}, flags = 0 '\0'}, {<nsXPTCMiniVariant> = {val = {i8 = -52 '�, i16 = 16076, i32 = 158547660, i64 = -4627999884607013172, u8 = 204 '�,
u16 = 16076, u32 = 158547660, u64 = 13818744189102538444, f = 2.9279588e-33, d = -0.17219925366815969, b = 158547660, c = -52 '�, wc = 16076, p = 0x9733ecc}}, ptr = 0x8b6c6c0,
type = {<XPTTypeDescriptorPrefix> = {flags = 72 'H'}, <No data fields>}, flags = 10 '\n'}, {<nsXPTCMiniVariant> = {val = {i8 = 0 '\0', i16 = 0, i32 = 0, i64 = 0, u8 = 0 '\0', u16 = 0, u32 = 0, u64 = 0,
f = 0, d = 0, b = 0, c = 0 '\0', wc = 0, p = 0x0}}, ptr = 0xb5bc7031, type = {<XPTTypeDescriptorPrefix> = {flags = 24 '\030'}, <No data fields>}, flags = 111 'o'}, {<nsXPTCMiniVariant> = {val = {
i8 = -108 '\224', i16 = 12692, i32 = -1209257580, i64 = -5197728685063655020, u8 = 148 '\224', u16 = 12692, u32 = 3085709716, u64 = 13249015388645896596, f = -2.81564789e-05,
d = -1.3756131668536281e-39, b = -1209257580, c = -108 '\224', wc = 12692, p = 0xb7ec3194}}, ptr = 0x2, type = {<XPTTypeDescriptorPrefix> = {flags = 104 'h'}, <No data fields>}, flags = 10 '\n'},
{<nsXPTCMiniVariant> = {val = {i8 = -8 '�, i16 = 25592, i32 = -1210227720, i64 = 7379706872, u8 = 248 '�, u16 = 25592, u32 = 3084739576, u64 = 7379706872, f = -2.63918046e-05, d = 3.6460596418337653e-314,
b = -1210227720, c = -8 '�, wc = 25592, p = 0xb7dd63f8}}, ptr = 0x89da838, type = {<XPTTypeDescriptorPrefix> = {flags = 168 '�'}, <No data fields>}, flags = 149 '\225'}}
autoStrings = {{<nsFixedString> = {<nsString> = {<nsSubstring> = {<nsAString_internal> = {mVTable = 0xb7ead588, mData = 0xbfc6095c, mLength = 0, mFlags = 65553}, <No data fields>}, <No data fields>},
mFixedCapacity = 63, mFixedBuf = 0xbfc6095c}, mStorage = {0, 0, 26072, 2205, 0, 0, 65535, 65535, 0, 0, 0, 0, 29860, 2411, 2428, 49094, 1064, 46712, 0, 0, 6, 0, 0, 0, 38256, 2064, 65496, 2167, 65088, 2167,
0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 50880, 2230, 50880, 2230, 50880, 2230, 50168, 2208, 50196, 2208, 21768, 2114, 22416, 2197, 19208, 2114, 19268, 2114, 21652, 2072, 16364, 2419, 0, 0}}}
autoStringIndex = 0
retval = 0
dispatchParams = (nsXPTCVariant *) 0xbfc609dc
i = <value optimized out>
methodInfo = (const nsXPTMethodInfo *) 0x830d2f8
requiredArgs = 224 '�
paramCount = <value optimized out>
src = 146196128
invokeResult = <value optimized out>
param_iid = {m0 = 2798620796, m1 = 5555, m2 = 4562, m3 = "\223.\000\200_\212�"}
err = <value optimized out>
sm = <value optimized out>
foundDependentParam = 0
rt = (XPCJSRuntime *) 0x80e30e8
callee = (nsISupports *) 0x897fc30
tls = <value optimized out>
ifaceInfo = (nsIInterfaceInfo *) 0x8426968
name = 138269756
argv = (jsval *) 0x9733eb0
secAction = 0
#49 0xb6770c3f in XPC_WN_CallMethod (cx=0x877fe40, obj=0x89d67a8, argc=1, argv=0x9733eb0, vp=0xbfc60c30) at xpcwrappednativejsops.cpp:1455
funobj = (JSObject *) 0x89d8240
ccx = {<nsIXPCNativeCallContext> = {<nsISupports> = {_vptr.nsISupports = 0xb6780428}, <No data fields>}, mRefCnt = {mValue = 0}, mState = XPCCallContext::READY_TO_CALL, mXPC = 0x80e1918,
mThreadData = 0x8109570, mXPCContext = 0x877ffd8, mJSContext = 0x877fe40, mContextPopRequired = 0, mDestroyJSContextInDestructor = 0, mCallerLanguage = XPCContext::LANG_JS,
mPrevCallerLanguage = XPCContext::LANG_UNKNOWN, mPrevCallContext = 0x0, mOperandJSObject = 0x89d67a8, mCurrentJSObject = 0x89d67a8, mFlattenedJSObject = 0x89d67a8, mWrapper = 0x89da800, mTearOff = 0x8953f60,
mScriptableInfo = 0x8425508, mSet = 0x8955790, mInterface = 0x8424b08, mMember = 0x8424bbc, mName = 138269756, mStaticMemberIsLocal = 142083488, mArgc = 1, mArgv = 0x9733eb0, mRetVal = 0xbfc60c30,
mExceptionWasThrown = 0, mReturnValueWasSet = 0, mMethodIndex = 17, mCallee = 0x0}
wrapper = <value optimized out>
iface = (XPCNativeInterface *) 0x8424b08
member = (XPCNativeMember *) 0x8424bbc
#50 0xb7ef3841 in js_Invoke (cx=0x877fe40, argc=1, flags=0) at jsinterp.c:1375
mark = (void *) 0x9733ebc
fp = (JSStackFrame *) 0x9733de4
frame = {callobj = 0x0, argsobj = 0x0, varobj = 0x0, script = 0x0, fun = 0x88d2c88, thisp = 0x89d67a8, argc = 1, argv = 0x9733eb0, rval = -2147483647, nvars = 0, vars = 0x9733eb4, down = 0x9733de4,
annotation = 0x0, scopeChain = 0x83d4c48, pc = 0x0, sp = 0x9733eb4, spbase = 0x0, sharpDepth = 0, sharpArray = 0x0, flags = 0, dormantNext = 0x0, xmlNamespace = 0x0, blockChain = 0x0}
sp = (jsval *) 0x9733eb4
newsp = <value optimized out>
vp = (jsval *) 0x9733ea8
v = 144540224
thisv = 144533416
funobj = <value optimized out>
parent = (JSObject *) 0x813fc20
thisp = <value optimized out>
ok = 142123088
clasp = <value optimized out>
ops = <value optimized out>
native = (JSNative) 0xb6770b10 <XPC_WN_CallMethod(JSContext*, JSObject*, unsigned int, long*, long*)>
fun = (JSFunction *) 0x88d2c88
script = (JSScript *) 0x0
nslots = 0
nvars = 0
nalloc = <value optimized out>
hook = (JSInterpreterHook) 0
hookData = (void *) 0x0
#51 0xb7ef5a11 in js_Interpret (cx=0x877fe40, pc=0x899acea ":", result=0xbfc60ff8) at jsinterp.c:3944
idval_ = <value optimized out>
rt = (JSRuntime *) 0x81095a8
fp = (JSStackFrame *) 0x9733de4
script = (JSScript *) 0x899aa28
inlineCallCount = 1
obj = (JSObject *) 0x89d8240
obj2 = (JSObject *) 0x83d4c48
parent = <value optimized out>
currentVersion = JSVERSION_DEFAULT
originalVersion = JSVERSION_DEFAULT
onbranch = (JSBranchCallback) 0xb5b96730 <nsJSContext::DOMBranchCallback(JSContext*, JSScript*)>
ok = 1
cond = 1
interruptHandler = (JSTrapHandler) 0
depth = 5
len = -1208633512
sp = (jsval *) 0x9733eb4
newsp = (jsval *) 0x9733fc0
mark = (void *) 0x9733dbc
endpc = <value optimized out>
pc2 = (jsbytecode *) 0x5 <Address 0x5 out of bounds>
op = JSOP_CALL
atomIndex = <value optimized out>
atom = (JSAtom *) 0x877fe40
argc = <value optimized out>
attrs = 156659240
flags = 137333832
slot = <value optimized out>
vp = (jsval *) 0x9733ea8
lval = 144540224
rval = 146196128
ltmp = <value optimized out>
rtmp = -2147483638
id = 135822656
withobj = <value optimized out>
iterobj = <value optimized out>
prop = (JSProperty *) 0x83559e4
sprop = <value optimized out>
str = (JSString *) 0x64b665e1
str2 = <value optimized out>
i = 2
j = 156659240
d = 5
d2 = 2
clasp = <value optimized out>
fun = (JSFunction *) 0x88d2c88
type = <value optimized out>
ida = <value optimized out>
low = 0
high = <value optimized out>
off = <value optimized out>
npairs = -1077539320
getter = <value optimized out>
setter = <value optimized out>
stackDummy = 146308960
jumpTable = (void **) 0xb7f5d400
normalJumpTable = {0xb7ef80b5, 0xb7efcaf7, 0xb7efc4b3, 0xb7efc4eb, 0xb7ef7f38, 0xb7ef5e39, 0xb7ef51f0, 0xb7ef800e, 0xb7ef8070, 0xb7efa885, 0xb7efce15, 0xb7efcc30, 0xb7ef6ffb, 0xb7ef704f, 0xb7ef70b2,
0xb7ef74ed, 0xb7ef75ed, 0xb7ef76ed, 0xb7ef7acd, 0xb7ef77ed, 0xb7ef7db5, 0xb7efc305, 0xb7efc3c8, 0xb7ef99dc, 0xb7ef9a9f, 0xb7ef9ba7, 0xb7efc6ae, 0xb7ef8e90, 0xb7ef92ff, 0xb7ef90b0, 0xb7ef91db, 0xb7ef942a,
0xb7efc647, 0xb7efc17e, 0xb7efc78b, 0xb7ef8abc, 0xb7ef8adb, 0xb7ef8c03, 0xb7ef8cee, 0xb7ef5282, 0xb7ef8e51, 0xb7efc6a9, 0xb7efcd0c, 0xb7ef853f, 0xb7efcded, 0xb7efcdf5, 0xb7efcde8, 0xb7ef4dd8, 0xb7ef5061,
0xb7ef50ae, 0xb7ef4dd8, 0xb7ef5061, 0xb7ef50ae, 0xb7ef56c4, 0xb7efa9bc, 0xb7ef57fd, 0xb7ef5eaa, 0xb7ef614c, 0xb7ef5946, 0xb7ef81d8, 0xb7efa6f1, 0xb7efcde3, 0xb7efa60a, 0xb7efa657, 0xb7efa6a4, 0xb7ef9f49,
0xb7efa00d, 0xb7efa05a, 0xb7efcc49, 0xb7efcc8e, 0xb7efa0a7, 0xb7efa174, 0xb7ef7c93, 0xb7ef79ba, 0xb7ef6404, 0xb7ef6d6f, 0xb7ef6edf, 0xb7efaaef, 0xb7efab9e, 0xb7efa6f6, 0xb7ef515e, 0xb7efcb3d, 0xb7ef8a60,
0xb7efa826, 0xb7ef9746, 0xb7ef97a8, 0xb7ef980a, 0xb7ef986c, 0xb7ef8327, 0xb7ef690a, 0xb7ef69d9, 0xb7ef6a2c, 0xb7ef6b5e, 0xb7ef6bb3, 0xb7ef6ca5, 0xb7ef8544, 0xb7ef8716, 0xb7ef85d5, 0xb7ef8791, 0xb7ef864a,
0xb7ef87d8, 0xb7ef86c8, 0xb7ef8923, 0xb7efcc3f, 0xb7ef4bbc, 0xb7efcbe3, 0xb7ef4c67, 0xb7efc48b, 0xb7ef7339, 0xb7ef73f2, 0xb7efb463, 0xb7ef9d6b, 0xb7efb1b6, 0xb7efb27d, 0xb7efb4e0, 0xb7ef9664, 0xb7efb3db,
0xb7ef94eb, 0xb7efa4c3, 0xb7ef7a27, 0xb7ef51e9, 0xb7ef5946, 0xb7ef6000, 0xb7ef5c18, 0xb7ef5c18, 0xb7efc8bc, 0xb7ef5590, 0xb7ef5590, 0xb7ef67e2, 0xb7ef623a, 0xb7efb491, 0xb7efcb65, 0xb7ef80d6, 0xb7ef6c63,
0xb7ef6c84, 0xb7efcb8d, 0xb7efa907, 0xb7ef96b4, 0xb7ef65e4, 0xb7ef5235, 0xb7efc806, 0xb7efc877, 0xb7efcd11, 0xb7efcd56, 0xb7ef95d2, 0xb7ef7d00, 0xb7ef522e, 0xb7efa282, 0xb7efa379, 0xb7ef52f6, 0xb7ef52f6,
0xb7efb420, 0xb7ef7fd5, 0xb7ef5e97, 0xb7ef98ce, 0xb7ef9910, 0xb7ef8958, 0xb7ef899a, 0xb7ef89dc, 0xb7ef8a1e, 0xb7efa4e4, 0xb7efb2f9, 0xb7efb35e, 0xb7efb563, 0xb7efb6e5, 0xb7efb5e7, 0xb7efb673, 0xb7efaff2,
0xb7ef5416, 0xb7ef5416, 0xb7ef619e, 0xb7efb06c, 0xb7efb10b, 0xb7ef54b7, 0xb7efac75, 0xb7efad75, 0xb7efadd3, 0xb7efae4b, 0xb7efaec3, 0xb7efaf3a, 0xb7efb7a3, 0xb7efbff2, 0xb7efbf35, 0xb7efc0af, 0xb7efbb15,
0xb7efbd7d, 0xb7ef9ee9, 0xb7ef54b7, 0xb7ef838b, 0xb7ef83f1, 0xb7ef8478, 0xb7ef5109, 0xb7efad91, 0xb7efadb2, 0xb7efbc48, 0xb7efce25, 0xb7ef56c4, 0xb7ef57fd, 0xb7ef5282, 0xb7efbdf4...}
interruptJumpTable = {0xb7ef479b <repeats 57 times>, 0xb7ef614c, 0xb7ef479b <repeats 158 times>}
#52 0xb7ef3cd4 in js_Invoke (cx=0x877fe40, argc=1, flags=2) at jsinterp.c:1394
mark = (void *) 0x9733db4
fp = (JSStackFrame *) 0xbfc6102c
frame = {callobj = 0x9566e28, argsobj = 0x0, varobj = 0x9566e28, script = 0x9691b38, fun = 0x957a3a0, thisp = 0x8b6c738, argc = 1, argv = 0x9733db0, rval = -2147483647, nvars = 2, vars = 0x9733db4,
down = 0xbfc6102c, annotation = 0x0, scopeChain = 0x9566e28, pc = 0x9691bb5 ":", sp = 0x9733ddc, spbase = 0x9733dd0, sharpDepth = 0, sharpArray = 0x0, flags = 2, dormantNext = 0x0, xmlNamespace = 0x0,
blockChain = 0x0}
sp = (jsval *) 0x9733dbc
newsp = <value optimized out>
vp = (jsval *) 0x9733da8
v = -2147483647
thisv = 146196280
funobj = <value optimized out>
parent = (JSObject *) 0x8b6c738
thisp = <value optimized out>
ok = -1233638660
clasp = <value optimized out>
ops = <value optimized out>
native = (JSNative) 0
fun = (JSFunction *) 0x957a3a0
script = (JSScript *) 0x9691b38
nslots = 0
nvars = 2
nalloc = <value optimized out>
hook = (JSInterpreterHook) 0
hookData = (void *) 0x0
#53 0xb7f03b5d in js_InternalInvoke (cx=0x877fe40, obj=0x8b6c738, fval=156659256, flags=2, argc=1, argv=0xbfc61254, rval=0xbfc61244) at jsinterp.c:1469
fp = (JSStackFrame *) 0xbfc6102c
oldfp = (JSStackFrame *) 0x0
frame = {callobj = 0x0, argsobj = 0x0, varobj = 0x0, script = 0x0, fun = 0x0, thisp = 0x0, argc = 0, argv = 0x0, rval = 0, nvars = 0, vars = 0x0, down = 0x0, annotation = 0x0, scopeChain = 0x0,
pc = 0x0, sp = 0x9733db4, spbase = 0x0, sharpDepth = 0, sharpArray = 0x0, flags = 0, dormantNext = 0x0, xmlNamespace = 0x0, blockChain = 0x0}
oldsp = (jsval *) 0x0
sp = (jsval *) 0x9733db4
mark = <value optimized out>
i = <value optimized out>
ok = <value optimized out>
#54 0xb7ec1dc0 in JS_CallFunctionValue (cx=0x877fe40, obj=0x8b6c738, fval=156659256, argc=1, argv=0xbfc61254, rval=0xbfc61244) at jsapi.c:4351
ok = <value optimized out>
#55 0xb5b963fa in nsJSContext::CallEventHandler (this=0x877f058, aTarget=0x8b6c738, aHandler=0x9566e38, argc=1, argv=0xbfc61254, rval=0xbfc61244) at nsJSEnvironment.cpp:1493
ok = <value optimized out>
rv = 0
stack = {<nsCOMPtr_base> = {mRawPtr = 0x810c8d0}, <No data fields>}
locked = <value optimized out>
#56 0xb5bd3809 in nsJSEventListener::HandleEvent (this=0x9691c28, aEvent=0x94810d8) at nsJSEventListener.cpp:186
priv = {<nsCOMPtr_base> = {mRawPtr = 0x8d78600}, <No data fields>}
event = (nsEvent *) 0x9566e30
funval = 156659256
arg = 156659248
argv = <value optimized out>
stackPtr = <value optimized out>
eventString = {<nsFixedString> = {<nsString> = {<nsSubstring> = {<nsAString_internal> = {mVTable = 0xb7ead588, mData = 0xbfc61190, mLength = 10, mFlags = 65553}, <No data fields>}, <No data fields>},
mFixedCapacity = 63, mFixedBuf = 0xbfc61190}, mStorage = {111, 110, 120, 98, 108, 99, 108, 105, 99, 107, 0, 0, 4568, 49094, 3054, 47087, 50664, 2064, 18096, 2062, 4584, 49094, 2873, 46710, 18100, 2062, 1,
0, 22649, 2109, 46936, 47093, 7208, 2409, 65088, 2167, 4600, 49094, 3279, 47087, 38312, 2064, 19528, 2109, 4616, 49094, 46936, 47093, 7208, 2409, 65088, 2167, 4632, 49094, 12968, 46525, 7208, 2409, 19528,
2109, 32, 0, 61428, 46984}}
rv = 0
xpc = (nsIXPConnect *) 0x80e1918
wrapper = {<nsCOMPtr_base> = {mRawPtr = 0x9691c50}, <No data fields>}
obj = (JSObject *) 0x8b6c738
rval = <value optimized out>
#57 0xb5b594e0 in nsXBLPrototypeHandler::ExecuteHandler (this=0x89bd158, aReceiver=0x8d77ee0, aEvent=0x94810d8) at nsXBLPrototypeHandler.cpp:512
privateWindow = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}
nsUIEvent = {<nsCOMPtr_base> = {mRawPtr = 0xb779eff4}, <No data fields>}
controller = {<nsCOMPtr_base> = {mRawPtr = 0xbfc615e8}, <No data fields>}
windowRoot = {<nsCOMPtr_base> = {mRawPtr = 0xb77a0170}, <No data fields>}
command = {<nsCAutoString> = {<nsFixedCString> = {<nsCString> = {<nsCSubstring> = {<nsACString_internal> = {mVTable = 0x89bd158, mData = 0x94810c8 "\b\tе\210\tе\020\nеP\nеp\nе�nе \vе\005",
mLength = 3217430104, mFlags = 148340448}, <No data fields>}, <No data fields>}, mFixedCapacity = 3085621640, mFixedBuf = 0xb5cc478c "����\021�\207"},
mStorage = "X\026ƿ�����b\214G̵|\026ƿ\024���020H\t�\026ƿ\210\026ƿe��X�233\b�020H\t\b\000\000\000��b�020H\t\210��"}, <No data fields>}
type = {<nsFixedString> = {<nsString> = {<nsSubstring> = {<nsAString_internal> = {mVTable = 0xbfc61558, mData = 0xb5a9c4a4, mLength = 156397648, mFlags = 0}, <No data fields>}, <No data fields>},
mFixedCapacity = 0, mFixedBuf = 0x0}, mStorage = {38512, 2204, 41120, 46540, 5452, 49094, 23, 0, 4, 0, 17, 1, 3, 0, 55688, 47082, 60160, 46547, 0, 0, 5400, 49094, 50708, 47074, 38512, 2204, 41120, 46540,
5432, 49094, 45756, 46506, 32480, 2263, 5816, 49094, 5464, 49094, 54200, 46547, 5520, 49094, 53592, 2203, 5480, 49094, 50678, 46506, 4312, 2376, 46076, 46540, 5468, 49094, 48367, 47074, 1, 0, 20928, 2060,
23232, 46541, 0, 0}}
preventDefault = <value optimized out>
privateEvent = {<nsCOMPtr_base> = {mRawPtr = 0xb7e2c665}, <No data fields>}
focusController = {<nsCOMPtr_base> = {mRawPtr = 0xbfc61614}, <No data fields>}
rv = <value optimized out>
isXULKey = <value optimized out>
isXBLCommand = <value optimized out>
onEvent = {<nsFixedString> = {<nsString> = {<nsSubstring> = {<nsAString_internal> = {mVTable = 0xb7ead588, mData = 0xbfc613b0, mLength = 10, mFlags = 65553}, <No data fields>}, <No data fields>},
mFixedCapacity = 63, mFixedBuf = 0xbfc613b0}, mStorage = {111, 110, 120, 98, 108, 99, 108, 105, 99, 107, 0, 0, 5464, 49094, 30789, 46518, 38752, 2199, 30928, 2168, 6972, 49094, 6644, 49094, 4, 0, 8108,
49094, 3, 0, 5448, 49094, 17800, 2087, 17803, 2087, 17803, 2087, 11894, 46518, 5424, 49094, 5416, 49094, 3, 0, 0, 0, 3, 0, 17803, 2087, 17800, 2087, 23311, 47081, 13008, 2242, 58432, 46517, 0, 0, 0, 0}}
str = {<nsFixedString> = {<nsString> = {<nsSubstring> = {<nsAString_internal> = {mVTable = 0xb7ead588, mData = 0xbfc61318, mLength = 5, mFlags = 65553}, <No data fields>}, <No data fields>},
mFixedCapacity = 63, mFixedBuf = 0xbfc61318}, mStorage = {99, 108, 105, 99, 107, 0, 16472, 46540, 4972, 49094, 55688, 47082, 5976, 49094, 5976, 49094, 4984, 49094, 54200, 46547, 16472, 46540, 4, 0, 9, 0,
52210, 34876, 29192, 2203, 52768, 2182, 243, 0, 23, 0, 19896, 2215, 47488, 47074, 511, 0, 23, 0, 0, 0, 52768, 2182, 5032, 49094, 49329, 47074, 0, 0, 29192, 2203, 5052, 49094, 41653, 46506, 32480, 2263,
29192, 2203}}
onEventAtom = {<nsCOMPtr_base> = {mRawPtr = 0x8d78600}, <No data fields>}
handler = (void *) 0x9566e88
boundGlobal = {<nsCOMPtr_base> = {mRawPtr = 0x8788af4}, <No data fields>}
winRoot = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}
focusedWin = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}
boundContext = (nsIScriptContext *) 0x877f058
scriptObject = (JSObject *) 0x8b6c738
wrapper = {<nsCOMPtr_base> = {mRawPtr = 0x8c1afc8}, <No data fields>}
eventName = <value optimized out>
handlerText = {<nsString> = {<nsSubstring> = {<nsAString_internal> = {mVTable = 0xb7ead588, mData = 0x89bd9b0, mLength = 1872, mFlags = 1}, <No data fields>}, <No data fields>}, <No data fields>}
bindingURI = {<nsFixedCString> = {<nsCString> = {<nsCSubstring> = {<nsACString_internal> = {mVTable = 0xb7ead688, mData = 0x893ee60 "chrome://global/content/bindings/tabbrowser.xml", mLength = 47,
mFlags = 65541}, <No data fields>}, <No data fields>}, mFixedCapacity = 63, mFixedBuf = 0xbfc615e0 ""},
mStorage = "\000\020H\t�020H\t(\026ƿ,\205��\020\000\000\000�y�\030\026ƿE����020H\t\030\026ƿ8\026ƿS,����b�020H\t\000\000\000\000���"}
eventListener = {<nsCOMPtr_base> = {mRawPtr = 0x9691c28}, <No data fields>}
jsListener = {<nsCOMPtr_base> = {mRawPtr = 0x9691c2c}, <No data fields>}
#58 0xb5b55c6a in nsXBLEventHandler::HandleEvent (this=0x89e9b28, aEvent=0x94810d8) at nsXBLEventHandler.cpp:84
target = {<nsCOMPtr_base> = {mRawPtr = 0x8d77ee0}, <No data fields>}
receiver = {<nsCOMPtr_base> = {mRawPtr = 0x8d77ee0}, <No data fields>}
#59 0xb5a9a6ae in nsEventListenerManager::HandleEventSubType (this=0x8c1add8, aListenerStruct=0x8c1ae60, aListener=0x89e9b28, aDOMEvent=0x94810d8, aCurrentTarget=0x8d77ee0, aSubType=4,
aPhaseFlags=<value optimized out>) at nsEventListenerManager.cpp:1655
aPrivDOMEvent = {<nsCOMPtr_base> = {mRawPtr = 0x94810e0}, <No data fields>}
result = 0
pusher = {mStack = {<nsCOMPtr_base> = {mRawPtr = 0x810c8d0}, <No data fields>}, mScx = {<nsCOMPtr_base> = {mRawPtr = 0x877f058}, <No data fields>}, mScriptIsRunning = 0}
#60 0xb5a9c71c in nsEventListenerManager::HandleEvent (this=0x8c1add8, aPresContext=0x87878d0, aEvent=0xbfc61b3c, aDOMEvent=0xbfc619f4, aCurrentTarget=0x8d77ee0, aFlags=7, aEventStatus=0xbfc61fac)
at nsEventListenerManager.cpp:1759
ls = (._294 *) 0x8c1ae60
k = 0
count = 2
originalListeners = {_vptr.nsVoidArray = 0xb7eaa0a8, mImpl = 0x9481138}
ret = 0
currentGroup = 0
kungFuDeathGrip = {<nsCOMPtr_base> = {mRawPtr = 0x8c1add8}, <No data fields>}
listeners = (nsVoidArray *) 0x8c1ae28
typeData = (const EventTypeData *) 0xb5d3eb00
dispData = (const EventDispatchData *) 0xb5cd7520
#61 0xb5b67d9a in nsXULElement::HandleDOMEvent (this=0x8b662f0, aPresContext=0x87878d0, aEvent=0xbfc61b3c, aDOMEvent=0xbfc619f4, aFlags=7, aEventStatus=0xbfc61fac) at nsXULElement.cpp:2231
target = {<nsCOMPtr_base> = {mRawPtr = 0x8d77ee0}, <No data fields>}
ret = 0
retarget = 1
externalDOMEvent = 0
oldTarget = {<nsCOMPtr_base> = {mRawPtr = 0x96dcd70}, <No data fields>}
domEvent = (nsIDOMEvent *) 0x94810d8
parent = {<nsCOMPtr_base> = {mRawPtr = 0x8b6e2b8}, <No data fields>}
doc = (nsIDocument *) 0x886c5e0
#62 0xb58b948c in PresShell::HandleEventInternal (this=0x8875f20, aEvent=0xbfc61b3c, aView=0x0, aFlags=1, aStatus=0xbfc61fac) at nsPresShell.cpp:6474
isHandlingUserInput = 0
manager = {<nsCOMPtr_base> = {mRawPtr = 0x8875798}, <No data fields>}
rv = 0
#63 0xb58b9925 in PresShell::HandleEventWithTarget (this=0x8875f20, aEvent=0xbfc61b3c, aFrame=0x8c19f50, aContent=0x8b662f0, aFlags=1, aStatus=0xbfc61fac) at nsPresShell.cpp:6371
No locals.
#64 0xb5aa1db4 in nsEventStateManager::CheckForAndDispatchClick (this=0x8875790, aPresContext=0x87878d0, aEvent=0xbfc62134, aStatus=0xbfc61fac) at nsEventStateManager.cpp:3206
mouseContent = {<nsCOMPtr_base> = {mRawPtr = 0x8b662f0}, <No data fields>}
event = {<nsInputEvent> = {<nsGUIEvent> = {<nsEvent> = {eventStructType = 10 '\n', message = 327, point = {x = 17297, y = 245}, refPoint = {x = 1238, y = 112}, time = 0, flags = 2055,
internalAppFlags = 2, userType = 0x0}, widget = 0x8875d70, nativeMsg = 0x0}, isShift = 0, isControl = 0, isAlt = 0, isMeta = 0}, clickCount = 1, acceptActivation = 0 '\0', reason = nsMouseEvent::eReal}
presShell = {<nsCOMPtr_base> = {mRawPtr = 0x8875f20}, <No data fields>}
ret = <value optimized out>
eventMsg = <value optimized out>
flags = 1
#65 0xb5aa2be1 in nsEventStateManager::PostHandleEvent (this=0x8875790, aPresContext=0x87878d0, aEvent=0xbfc62134, aTargetFrame=0x8c19f50, aStatus=0xbfc61fac, aView=0x89e0a90) at nsEventStateManager.cpp:2169
shell = <value optimized out>
pcContainer = {<nsCOMPtr_base> = {mRawPtr = 0xbfc61e04}, <No data fields>}
ret = 2147500035
#66 0xb58b95f3 in PresShell::HandleEventInternal (this=0x8875f20, aEvent=0xbfc62134, aView=0x89e0a90, aFlags=513, aStatus=0xbfc61fac) at nsPresShell.cpp:6546
isHandlingUserInput = 1
manager = {<nsCOMPtr_base> = {mRawPtr = 0x8875798}, <No data fields>}
rv = 0
#67 0xb58b9c43 in PresShell::HandleEvent (this=0x8875f20, aView=0x89e0a90, aEvent=0xbfc62134, aEventStatus=0xbfc61fac, aForceHandle=0, aHandled=@0xbfc61fa8) at nsPresShell.cpp:6310
esm = <value optimized out>
manager = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}
frame = (nsIFrame *) 0x89df29c
rv = 0
#68 0xb5b8cdce in nsViewManager::HandleEvent (this=0x8875c90, aView=0x8875d08, aEvent=0xbfc62134, aCaptured=0) at nsViewManager.cpp:2564
handled = 1
vVM = <value optimized out>
v = (nsView *) 0x89e0a90
obs = {<nsCOMPtr_base> = {mRawPtr = 0x8875f9c}, <No data fields>}
targetViews = {<nsVoidArray> = {_vptr.nsVoidArray = 0xb7eaa088, mImpl = 0xbfc61fc0}, mAutoBuf = "\b\000\000\000\004\000\000\0008\022H\t\200\022H\t\000\023H\tH\023H\t�003\000\000`]\207\b`]\207\b���"}
heldRefCountsToOtherVMs = {<nsCOMArray_base> = {mArray = {_vptr.nsVoidArray = 0xb7eaa0a8, mImpl = 0x0}}, <No data fields>}
displayArena = {first = {next = 0x94811e0, base = 3217432464, limit = 3217432464, avail = 3217432464}, current = 0x94811e0, arenasize = 1024, mask = 3}
status = nsEventStatus_eIgnore
i = 0
#69 0xb5b8f3fc in nsViewManager::DispatchEvent (this=0x8875c90, aEvent=0xbfc62134, aStatus=0xbfc620f0) at nsViewManager.cpp:2253
t2p = 0
p2t = 14
baseView = <value optimized out>
view = (nsView *) 0x8875d08
capturedEvent = 0
#70 0xb5b83ec6 in HandleEvent (aEvent=0xbfc62134) at nsView.cpp:171
result = nsEventStatus_eIgnore
#71 0xb6709dfe in nsCommonWidget::DispatchEvent (this=0x8875d70, aEvent=0xbfc62134, aStatus=@0xbfc6217c) at nsCommonWidget.cpp:219
No locals.
#72 0xb6707d89 in nsWindow::OnButtonReleaseEvent (this=0x8875d70, aWidget=0x84304a0, aEvent=0x807ed58) at nsWindow.cpp:1721
eventType = <value optimized out>
event = {<nsInputEvent> = {<nsGUIEvent> = {<nsEvent> = {eventStructType = 10 '\n', message = 301, point = {x = 17297, y = 245}, refPoint = {x = 1238, y = 112}, time = 0, flags = 1024,
internalAppFlags = 2, userType = 0x0}, widget = 0x8875d70, nativeMsg = 0x0}, isShift = 0, isControl = 0, isAlt = 0, isMeta = 0}, clickCount = 1, acceptActivation = 0 '\0', reason = nsMouseEvent::eReal}
status = nsEventStatus_eIgnore
#73 0xb6707de9 in button_release_event_cb (widget=0x84304a0, event=0x807ed58) at nsWindow.cpp:3911
window = (nsWindow *) 0xae7023e0
#74 0xb7b6e1de in _gtk_marshal_BOOLEAN__BOXED (closure=0x877f0b0, return_value=0xbfc62300, n_param_values=2, param_values=0xbfc623dc, invocation_hint=0xbfc622ec, marshal_data=0xb6707dc0)
at /build/buildd/gtk+2.0-2.12.0/gtk/gtkmarshalers.c:84
data1 = (gpointer) 0x84304a0
data2 = <value optimized out>
v_return = <value optimized out>
__PRETTY_FUNCTION__ = "_gtk_marshal_BOOLEAN__BOXED"
#75 0xb756b772 in g_closure_invoke () from /usr/lib/libgobject-2.0.so.0
No symbol table info available.
#76 0xb757c323 in ?? () from /usr/lib/libgobject-2.0.so.0
No symbol table info available.
#77 0x0877f0b0 in ?? ()
No symbol table info available.
#78 0xbfc62300 in ?? ()
No symbol table info available.
#79 0x00000002 in ?? ()
No symbol table info available.
#80 0xbfc623dc in ?? ()
No symbol table info available.
#81 0xbfc622ec in ?? ()
No symbol table info available.
#82 0x00000000 in ?? ()
No symbol table info available.
** Affects: flashplugin-nonfree (Ubuntu)
Importance: Undecided
Status: New
--
Crash when loading inside window.onload in 0-sized embed tag
https://bugs.launchpad.net/bugs/158423
You received this bug notification because you are a member of Mozilla
Bugs, which is a bug contact for flashplugin-nonfree in ubuntu.
More information about the Ubuntu-mozillateam-bugs
mailing list