From Bugzilla Helper: User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:0.9.8+) Gecko/20020227 BuildID: 2002022703 mozilla crashes on styled elements (e.g. HR) when it's background is already used as shotcut icon Reproducible: Always Steps to Reproduce: 1. load testcase Actual Results: crash Expected Results: guess seems not to occur if one deletes the link rel=stylesheet line

the module it crashed was: gkgfxwin.dll some talkback IDs are: TB3486577M TB3485969M TB3441933K and others

Stephend, could you get the stack?

nsImageWin::DrawTile [d:\builds\seamonkey\mozilla\gfx\src\windows\nsImageWin.cpp, line 797] nsRenderingContextImpl::DrawTile [d:\builds\seamonkey\mozilla\gfx\src\nsRenderingContextImpl.cpp, line 968] nsCSSRendering::PaintBackgroundWithSC [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSRendering.cpp, line 2676] nsCSSRendering::PaintBackground [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSRendering.cpp, line 2603] NS_NewHRFrame [d:\builds\seamonkey\mozilla\layout\html\base\src\nsHRFrame.cpp, line 93] nsContainerFrame::PaintChild [d:\builds\seamonkey\mozilla\layout\html\base\src\nsContainerFrame.cpp, line 227] nsBlockFrame::PaintChildren [d:\builds\seamonkey\mozilla\layout\html\base\src\nsBlockFrame.cpp, line 5566] nsBlockFrame::PaintFloaters [d:\builds\seamonkey\mozilla\layout\html\base\src\nsBlockFrame.cpp, line 5449] nsContainerFrame::PaintChild [d:\builds\seamonkey\mozilla\layout\html\base\src\nsContainerFrame.cpp, line 227] nsBlockFrame::PaintChildren [d:\builds\seamonkey\mozilla\layout\html\base\src\nsBlockFrame.cpp, line 5566] nsBlockFrame::PaintFloaters [d:\builds\seamonkey\mozilla\layout\html\base\src\nsBlockFrame.cpp, line 5449] nsContainerFrame::PaintChild [d:\builds\seamonkey\mozilla\layout\html\base\src\nsContainerFrame.cpp, line 227] nsBlockFrame::PaintChildren [d:\builds\seamonkey\mozilla\layout\html\base\src\nsBlockFrame.cpp, line 5566] nsBlockFrame::PaintFloaters [d:\builds\seamonkey\mozilla\layout\html\base\src\nsBlockFrame.cpp, line 5449] nsContainerFrame::PaintChild [d:\builds\seamonkey\mozilla\layout\html\base\src\nsContainerFrame.cpp, line 227] nsContainerFrame::Paint [d:\builds\seamonkey\mozilla\layout\html\base\src\nsContainerFrame.cpp, line 176] nsHTMLContainerFrame::Paint [d:\builds\seamonkey\mozilla\layout\html\base\src\nsHTMLContainerFrame.cpp, line 123] CanvasFrame::AppendFrames [d:\builds\seamonkey\mozilla\layout\html\base\src\nsHTMLFrame.cpp, line 303] PresShell::GetCaretBidiLevel [d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5615] nsView::Paint [d:\builds\seamonkey\mozilla\view\src\nsView.cpp, line 280] nsViewManager::RenderDisplayListElement [d:\builds\seamonkey\mozilla\view\src\nsViewManager.cpp, line 1175] nsViewManager::RenderViews [d:\builds\seamonkey\mozilla\view\src\nsViewManager.cpp, line 1124] nsViewManager::Refresh [d:\builds\seamonkey\mozilla\view\src\nsViewManager.cpp, line 719] nsViewManager::DispatchEvent [d:\builds\seamonkey\mozilla\view\src\nsViewManager.cpp, line 1709] HandleEvent [d:\builds\seamonkey\mozilla\view\src\nsView.cpp, line 83] nsWindow::DispatchWindowEvent [d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 878] nsWindow::CaptureRollupEvents [d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 912] nsWindow::DispatchMouseEvent [d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 4562] nsWindow::ProcessMessage [d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 3668] nsWindow::DefaultWindowProc [d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 1145] USER32.dll + 0x3a5f (0x77d43a5f) USER32.dll + 0x3b2e (0x77d43b2e) USER32.dll + 0x5874 (0x77d45874) USER32.dll + 0x58a4 (0x77d458a4) ntdll.dll + 0x108f (0x77f5108f) USER32.dll + 0x41fd (0x77d441fd) nsAppShellService::Run [d:\builds\seamonkey\mozilla\xpfe\appshell\src\nsAppShellService.cpp, line 308] main1 [d:\builds\seamonkey\mozilla\xpfe\bootstrap\nsAppRunner.cpp, line 1301] main [d:\builds\seamonkey\mozilla\xpfe\bootstrap\nsAppRunner.cpp, line 1628] WinMain [d:\builds\seamonkey\mozilla\xpfe\bootstrap\nsAppRunner.cpp, line 1646] WinMainCRTStartup() kernel32.dll + 0x1eb69 (0x77e7eb69)

to imagelib based on stack

dcone has been playing with the windows tiling code recently.. over to him

*** This bug has been marked as a duplicate of 128282 ***