Closed Bug 2347 Opened 26 years ago Closed 26 years ago

Pointing mouse on most imagemaps crashes Viewer

Categories

(Core Graveyard :: Viewer App, defect, P1)

Product:
Core Graveyard
Component:
Viewer App
Type:
defect

Tracking

(Not tracked)

Status:
VERIFIED FIXED

People

(Reporter: elig, Assigned: joki)

References

Details

* TITLE/SUMMARY Pointing mouse on nonexistent imagemap crashes Viewer * STEPS TO REPRODUCE 0) Launch Viewer 1) From Viewer, open the enclosed HTML snippet (appended to back of bug). 2) Move the mouse pointer to the imagemap (whose actual image file isn't loaded) * RESULT - What happened Crash. - What was expected !(Crash) * REGRESSION - Occurs On viewer (1.13.99 build for Mac OS) viewer (1.12.99 build for Win32) - Doesn't Occur On viewer (1.13.99 build for Linux --- build is broken, so haven't checked.) * CONFIGURATIONS TESTED - PowerMac 8500/120 (233 Mhz 604e), 64 MB RAM, 1024x768 (16-bit video), Mac OS 8.5.1 * HTML SNIPPET <HTML> <BODY> <A HREF="/images/banner1.map"><IMG SRC=/images/ns_netcenter_bar.gif WIDTH=579 HEIGHT=42 BORDER=0 ALT=Netcenter usemap="#banner1" ISMAP></A> </BODY> </HTML> * MACSBUG LOG Calling chain using A6/R1 links Back chain ISA Caller 00000000 PPC 0B10E610 032D8980 PPC 0B1052E4 032D8920 PPC 0B104BD0 032D88E0 PPC 0ADD73FC nsMacMessageSink::DispatchMenuCommand(EventRecord&, long)+004FC 032D8800 PPC 0ADD78A0 nsMacMessageSink::DispatchMenuCommand(EventRecord&, long)+009A0 032D87A0 PPC 0ADD7ECC nsMacMessageSink::DispatchMenuCommand(EventRecord&, long)+00FCC 032D8760 PPC 0ADD7CEC nsMacMessageSink::DispatchMenuCommand(EventRecord&, long)+00DEC 032D8710 PPC 0ADD7F18 nsMacMessageSink::DispatchMenuCommand(EventRecord&, long)+01018 032D86D0 PPC 0ADD6EE4 nsMacMessageSink::DispatchOSEvent(EventRecord&, GrafPort*)+00040 032D8680 PPC 0ADD4F38 NS_GetWidgetNativeData(nsISupports*, void**)+0BFB8 032D8620 PPC 0ADD50E8 NS_GetWidgetNativeData(nsISupports*, void**)+0C168 032D85E0 PPC 0ADD56B0 NS_GetWidgetNativeData(nsISupports*, void**)+0C730 032D8560 PPC 0ADC4408 032D8500 PPC 0ADC4390 032D84C0 PPC 0ADC4308 032D8470 PPC 0AB7FDA0 NSGetFactory+02834 032D8420 PPC 0AB7E998 NSGetFactory+0142C 032D8310 PPC 0AB81408 NSGetFactory+03E9C 032D82A0 PPC 0AB8149C NSGetFactory+03F30 032D8230 PPC 0AC39B44 NS_NewPresShell(nsIPresShell**)+0223C 032D81D0 PPC 0AC95F30 NS_NewEventListenerManager(nsIEventListenerManager** )+0046C 032D8170 PPC 0AC961D0 NS_NewEventListenerManager(nsIEventListenerManager** )+0070C 032D8120 PPC 0AD14E8C NS_NewImageDocument(nsIDocument**)+7B5F4 032D8070 PPC 0AD146D4 NS_NewImageDocument(nsIDocument**)+7AE3C PowerPC illegal instruction at 0028CC50 Closing log
Summary: Pointing mouse on nonexistent imagemap crashes Viewer → Pointing mouse on some imagemaps crashes Viewer
<Changing bug title.> Note that this does actually occur on some active imagemaps, too (Checked Win NT 4 & Mac OS on 1.13.98 Mac OS and 1.12.98 Win32 builds). To see another example, go to www.pathfinder.com, and move Mouse pointer onto the Time/People/Money?Fortune blue banner after or before it draws. Immediate crash the moment the mouse pointer enters the region; identical stack crawl.
(Note that the image map cited in the "HTML SNIPPET" of the bug report, from www.netscape.com, does in fact work correctly when embedded into the actual page.) Can research further to find common causatory factor, if desired.
Summary: Pointing mouse on some imagemaps crashes Viewer → Pointing mouse on most imagemaps crashes Viewer
[This occurs on a lot of other sites, like www.ebay.com, and www.mapquest.com, and is a significant test obstacle.]
Assignee: rickg → joki
This appears to be an event bug. Tom, please take a look.
Status: NEW → ASSIGNED
Somehow there was a really bogus return value in nsHTMLDocument::GetImageMap. Don't know why. I've fixed it locally and if the tree is ever open and all green at the same time again I'll check it in.
*** Bug 2361 has been marked as a duplicate of this bug. ***
Status: ASSIGNED → RESOLVED
Closed: 26 years ago
Resolution: --- → FIXED
Okay, fix checked in.
[will verify on tomorrow's build, or on today's build tomorrow. ;]
Verified fixed in 1.22.99 Mac OS build and 1.21.99 Win32 build. Specifically, moved the mouse pointer over these image maps with no crash: * ebay.com * pathfinder.com * HTML Snippet from bug report However, deferring from formally marking as 'Verified' until also verifying in Linux. (most recent build checked segfaulted on launch; haven't checked today's build)
Status: RESOLVED → VERIFIED
Verified no crash on 1.22.99 Linux build (checked www.ebay.com and www.pathfinder.com) Thus, this bug is now formally verified.
Product: Core → Core Graveyard
You need to log in before you can comment on or make changes to this bug.