When attempting to log on to Visto.com, when either tabbing to password field or mouse clicking to password field, the following error occurs: MOZILLA caused a stack fault in module RDF.DLL at 017f:606a7e8d. Registers: EAX=01472540 CS=017f EIP=606a7e8d EFLGS=00010202 EBX=0054293c SS=0187 ESP=00542000 EBP=005420c8 ECX=606b3740 DS=0187 ESI=01545190 FS=4357 EDX=6026be70 ES=0187 EDI=00000001 GS=0000 Bytes at CS:EIP: 6a 04 ff 75 14 53 ff 75 0c 50 ff 91 18 01 00 00 Stack dump: 00542968 00000001 0158ebf0 0054293c 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000

I don't see this behavior on my build. But my build is a few days old so that might explain it. In any event, from the description this has nothing to do with single signon but rather with form filling. Reassigning.

Adding "crash" keyword to all known open crasher bugs.

reassign qa contact --ckritzer, correct me if your the wrong person...

I went the url and entered "foo" in the member name and when I put the cursor in the password field I got a stack that is too long (and I cut it short). Reassigning to Saari because I see focus stuff in the stack. nsStr::Append(nsStr & {...}, const nsStr & {...}, unsigned int 0, int 42) line 161 + 21 bytes nsString::Append(const char * 0x01b98408, int 42) line 1157 + 43 bytes nsString::Assign(const char * 0x01b98408, int -1) line 1031 nsStringKey::nsStringKey(const char * 0x01b98408) line 254 nsComponentManagerImpl::ProgIDToClassID(nsComponentManagerImpl * const 0x00ff4590, const char * 0x01b98408, nsID * 0x00033174) line 1151 nsComponentManager::ProgIDToClassID(const char * 0x01b98408, nsID * 0x00033174) line 59 nsServiceManagerImpl::GetService(nsServiceManagerImpl * const 0x00ff4900, const char * 0x01b98408, const nsID & {...}, nsISupports * * 0x000331e4, nsIShutdownListener * 0x00000000) line 429 + 13 bytes nsServiceManager::GetService(const char * 0x01b98408, const nsID & {...}, nsISupports * * 0x000331e4, nsIShutdownListener * 0x00000000) line 545 nsGetServiceByProgID::operator()(const nsID & {...}, void * * 0x000331e4) line 63 + 22 bytes nsCOMPtr<nsIScriptSecurityManager>::assign_from_helper(const nsCOMPtr_helper & {...}, const nsID & {...}) line 768 + 18 bytes nsCOMPtr<nsIScriptSecurityManager>::nsCOMPtr<nsIScriptSecurityManager>(const nsCOMPtr_helper & {...}) line 497 GetWindowProperty(JSContext * 0x021fcdb0, JSObject * 0x01106340, long -5, long * 0x00033d94) line 125 + 33 bytes js_Interpret(JSContext * 0x021fcdb0, long * 0x00033f24) line 2308 + 170 bytes js_Invoke(JSContext * 0x021fcdb0, unsigned int 0, unsigned int 0) line 682 + 13 bytes js_Interpret(JSContext * 0x021fcdb0, long * 0x0003475c) line 2262 + 15 bytes js_Invoke(JSContext * 0x021fcdb0, unsigned int 1, unsigned int 2) line 682 + 13 bytes js_InternalInvoke(JSContext * 0x021fcdb0, JSObject * 0x01147c58, long 18160168, unsigned int 0, unsigned int 1, long * 0x000348e4, long * 0x00034890) line 759 + 19 bytes JS_CallFunctionValue(JSContext * 0x021fcdb0, JSObject * 0x01147c58, long 18160168, unsigned int 1, long * 0x000348e4, long * 0x00034890) line 2771 + 31 bytes nsJSContext::CallEventHandler(nsJSContext * const 0x021fcf40, void * 0x01147c58, void * 0x01151a28, unsigned int 1, void * 0x000348e4, int * 0x000348e0) line 562 + 33 bytes nsJSEventListener::HandleEvent(nsIDOMEvent * 0x02ac85a4) line 128 + 57 bytes nsEventListenerManager::HandleEventSubType(nsListenerStruct * 0x022b3540, nsIDOMEvent * 0x02ac85a4, unsigned int 4) line 680 + 19 bytes nsEventListenerManager::HandleEvent(nsIPresContext * 0x02281c20, nsEvent * 0x00034d78, nsIDOMEvent * * 0x00034cd8, unsigned int 7, nsEventStatus * 0x00034db0) line 1174 + 31 bytes nsGenericElement::HandleDOMEvent(nsIPresContext * 0x02281c20, nsEvent * 0x00034d78, nsIDOMEvent * * 0x00034cd8, unsigned int 1, nsEventStatus * 0x00034db0) line 809 nsHTMLInputElement::HandleDOMEvent(nsHTMLInputElement * const 0x022b37f0, nsIPresContext * 0x02281c20, nsEvent * 0x00034d78, nsIDOMEvent * * 0x00000000, unsigned int 1, nsEventStatus * 0x00034db0) line 739 + 31 bytes nsEnderEventListener::Blur(nsIDOMEvent * 0x02acc4f4) line 3876 nsEventListenerManager::HandleEvent(nsIPresContext * 0x0283d5a0, nsEvent * 0x000350d4, nsIDOMEvent * * 0x00034f6c, unsigned int 7, nsEventStatus * 0x000350f4) line 1061 + 17 bytes nsDocument::HandleDOMEvent(nsDocument * const 0x0283dc20, nsIPresContext * 0x0283d5a0, nsEvent * 0x000350d4, nsIDOMEvent * * 0x00034f6c, unsigned int 1, nsEventStatus * 0x000350f4) line 2423 nsEventStateManager::SendFocusBlur(nsEventStateManager * const 0x0229f2c0, nsIPresContext * 0x02281c20, nsIContent * 0x022b56e0) line 2177 nsEventStateManager::SetContentState(nsEventStateManager * const 0x0229f2c0, nsIContent * 0x022b56e0, int 2) line 2020 nsHTMLInputElement::SetFocus(nsHTMLInputElement * const 0x022b56e8, nsIPresContext * 0x02281c20) line 629 nsHTMLInputElement::Focus(nsHTMLInputElement * const 0x022b56d0) line 607 + 25 bytes HTMLInputElementFocus(JSContext * 0x021fcdb0, JSObject * 0x01151ee8, unsigned int 0, long * 0x011b7278, long * 0x0003539c) line 878 + 15 bytes js_Invoke(JSContext * 0x021fcdb0, unsigned int 0, unsigned int 0) line 666 + 26 bytes js_Interpret(JSContext * 0x021fcdb0, long * 0x00035c18) line 2262 + 15 bytes js_Invoke(JSContext * 0x021fcdb0, unsigned int 0, unsigned int 0) line 682 + 13 bytes js_Interpret(JSContext * 0x021fcdb0, long * 0x00036450) line 2262 + 15 bytes js_Invoke(JSContext * 0x021fcdb0, unsigned int 1, unsigned int 2) line 682 + 13 bytes js_InternalInvoke(JSContext * 0x021fcdb0, JSObject * 0x01147c58, long 18160168, unsigned int 0, unsigned int 1, long * 0x000365d8, long * 0x00036584) line 759 + 19 bytes JS_CallFunctionValue(JSContext * 0x021fcdb0, JSObject * 0x01147c58, long 18160168, unsigned int 1, long * 0x000365d8, long * 0x00036584) line 2771 + 31 bytes nsJSContext::CallEventHandler(nsJSContext * const 0x021fcf40, void * 0x01147c58, void * 0x01151a28, unsigned int 1, void * 0x000365d8, int * 0x000365d4) line 562 + 33 bytes nsJSEventListener::HandleEvent(nsIDOMEvent * 0x02ac87e4) line 128 + 57 bytes nsEventListenerManager::HandleEventSubType(nsListenerStruct * 0x022b3540, nsIDOMEvent * 0x02ac87e4, unsigned int 4) line 680 + 19 bytes nsEventListenerManager::HandleEvent(nsIPresContext * 0x02281c20, nsEvent * 0x00036a6c, nsIDOMEvent * * 0x000369cc, unsigned int 7, nsEventStatus * 0x00036aa4) line 1174 + 31 bytes nsGenericElement::HandleDOMEvent(nsIPresContext * 0x02281c20, nsEvent * 0x00036a6c, nsIDOMEvent * * 0x000369cc, unsigned int 1, nsEventStatus * 0x00036aa4) line 809 nsHTMLInputElement::HandleDOMEvent(nsHTMLInputElement * const 0x022b37f0, nsIPresContext * 0x02281c20, nsEvent * 0x00036a6c, nsIDOMEvent * * 0x00000000, unsigned int 1, nsEventStatus * 0x00036aa4) line 739 + 31 bytes nsEnderEventListener::Blur(nsIDOMEvent * 0x02ac8314) line 3876 nsEventListenerManager::HandleEvent(nsIPresContext * 0x0283d5a0, nsEvent * 0x00036dc8, nsIDOMEvent * * 0x00036c60, unsigned int 7, nsEventStatus * 0x00036de8) line 1061 + 17 bytes nsDocument::HandleDOMEvent(nsDocument * const 0x0283dc20, nsIPresContext * 0x0283d5a0, nsEvent * 0x00036dc8, nsIDOMEvent * * 0x00036c60, unsigned int 1, nsEventStatus * 0x00036de8) line 2423 nsEventStateManager::SendFocusBlur(nsEventStateManager * const 0x0229f2c0, nsIPresContext * 0x02281c20, nsIContent * 0x022b56e0) line 2177 nsEventStateManager::SetContentState(nsEventStateManager * const 0x0229f2c0, nsIContent * 0x022b56e0, int 2) line 2020 nsHTMLInputElement::SetFocus(nsHTMLInputElement * const 0x022b56e8, nsIPresContext * 0x02281c20) line 629 nsHTMLInputElement::Focus(nsHTMLInputElement * const 0x022b56d0) line 607 + 25 bytes HTMLInputElementFocus(JSContext * 0x021fcdb0, JSObject * 0x01151ee8, unsigned int 0, long * 0x011b724c, long * 0x00037090) line 878 + 15 bytes js_Invoke(JSContext * 0x021fcdb0, unsigned int 0, unsigned int 0) line 666 + 26 bytes js_Interpret(JSContext * 0x021fcdb0, long * 0x0003790c) line 2262 + 15 bytes js_Invoke(JSContext * 0x021fcdb0, unsigned int 0, unsigned int 0) line 682 + 13 bytes js_Interpret(JSContext * 0x021fcdb0, long * 0x00038144) line 2262 + 15 bytes js_Invoke(JSContext * 0x021fcdb0, unsigned int 1, unsigned int 2) line 682 + 13 bytes js_InternalInvoke(JSContext * 0x021fcdb0, JSObject * 0x01147c58, long 18160168, unsigned int 0, unsigned int 1, long * 0x000382cc, long * 0x00038278) line 759 + 19 bytes JS_CallFunctionValue(JSContext * 0x021fcdb0, JSObject * 0x01147c58, long 18160168, unsigned int 1, long * 0x000382cc, long * 0x00038278) line 2771 + 31 bytes nsJSContext::CallEventHandler(nsJSContext * const 0x021fcf40, void * 0x01147c58, void * 0x01151a28, unsigned int 1, void * 0x000382cc, int * 0x000382c8) line 562 + 33 bytes nsJSEventListener::HandleEvent(nsIDOMEvent * 0x02ac8034) line 128 + 57 bytes nsEventListenerManager::HandleEventSubType(nsListenerStruct * 0x022b3540, nsIDOMEvent * 0x02ac8034, unsigned int 4) line 680 + 19 bytes nsEventListenerManager::HandleEvent(nsIPresContext * 0x02281c20, nsEvent * 0x00038760, nsIDOMEvent * * 0x000386c0, unsigned int 7, nsEventStatus * 0x00038798) line 1174 + 31 bytes nsGenericElement::HandleDOMEvent(nsIPresContext * 0x02281c20, nsEvent * 0x00038760, nsIDOMEvent * * 0x000386c0, unsigned int 1, nsEventStatus * 0x00038798) line 809 nsHTMLInputElement::HandleDOMEvent(nsHTMLInputElement * const 0x022b37f0, nsIPresContext * 0x02281c20, nsEvent * 0x00038760, nsIDOMEvent * * 0x00000000, unsigned int 1, nsEventStatus * 0x00038798) line 739 + 31 bytes nsEnderEventListener::Blur(nsIDOMEvent * 0x02ac8094) line 3876 nsEventListenerManager::HandleEvent(nsIPresContext * 0x0283d5a0, nsEvent * 0x00038abc, nsIDOMEvent * * 0x00038954, unsigned int 7, nsEventStatus * 0x00038adc) line 1061 + 17 bytes nsDocument::HandleDOMEvent(nsDocument * const 0x0283dc20, nsIPresContext * 0x0283d5a0, nsEvent * 0x00038abc, nsIDOMEvent * * 0x00038954, unsigned int 1, nsEventStatus * 0x00038adc) line 2423 nsEventStateManager::SendFocusBlur(nsEventStateManager * const 0x0229f2c0, nsIPresContext * 0x02281c20, nsIContent * 0x022b56e0) line 2177 nsEventStateManager::SetContentState(nsEventStateManager * const 0x0229f2c0, nsIContent * 0x022b56e0, int 2) line 2020 nsHTMLInputElement::SetFocus(nsHTMLInputElement * const 0x022b56e8, nsIPresContext * 0x02281c20) line 629 nsHTMLInputElement::Focus(nsHTMLInputElement * const 0x022b56d0) line 607 + 25 bytes HTMLInputElementFocus(JSContext * 0x021fcdb0, JSObject * 0x01151ee8, unsigned int 0, long * 0x011b7220, long * 0x00038d84) line 878 + 15 bytes js_Invoke(JSContext * 0x021fcdb0, unsigned int 0, unsigned int 0) line 666 + 26 bytes js_Interpret(JSContext * 0x021fcdb0, long * 0x00039600) line 2262 + 15 bytes js_Invoke(JSContext * 0x021fcdb0, unsigned int 0, unsigned int 0) line 682 + 13 bytes js_Interpret(JSContext * 0x021fcdb0, long * 0x00039e38) line 2262 + 15 bytes js_Invoke(JSContext * 0x021fcdb0, unsigned int 1, unsigned int 2) line 682 + 13 bytes js_InternalInvoke(JSContext * 0x021fcdb0, JSObject * 0x01147c58, long 18160168, unsigned int 0, unsigned int 1, long * 0x00039fc0, long * 0x00039f6c) line 759 + 19 bytes JS_CallFunctionValue(JSContext * 0x021fcdb0, JSObject * 0x01147c58, long 18160168, unsigned int 1, long * 0x00039fc0, long * 0x00039f6c) line 2771 + 31 bytes nsJSContext::CallEventHandler(nsJSContext * const 0x021fcf40, void * 0x01147c58, void * 0x01151a28, unsigned int 1, void * 0x00039fc0, int * 0x00039fbc) line 562 + 33 bytes nsJSEventListener::HandleEvent(nsIDOMEvent * 0x02ac9054) line 128 + 57 bytes nsEventListenerManager::HandleEventSubType(nsListenerStruct * 0x022b3540, nsIDOMEvent * 0x02ac9054, unsigned int 4) line 680 + 19 bytes nsEventListenerManager::HandleEvent(nsIPresContext * 0x02281c20, nsEvent * 0x0003a454, nsIDOMEvent * * 0x0003a3b4, unsigned int 7, nsEventStatus * 0x0003a48c) line 1174 + 31 bytes nsGenericElement::HandleDOMEvent(nsIPresContext * 0x02281c20, nsEvent * 0x0003a454, nsIDOMEvent * * 0x0003a3b4, unsigned int 1, nsEventStatus * 0x0003a48c) line 809 nsHTMLInputElement::HandleDOMEvent(nsHTMLInputElement * const 0x022b37f0, nsIPresContext * 0x02281c20, nsEvent * 0x0003a454, nsIDOMEvent * * 0x00000000, unsigned int 1, nsEventStatus * 0x0003a48c) line 739 + 31 bytes nsEnderEventListener::Blur(nsIDOMEvent * 0x02ac5aa4) line 3876 nsEventListenerManager::HandleEvent(nsIPresContext * 0x0283d5a0, nsEvent * 0x0003a7b0, nsIDOMEvent * * 0x0003a648, unsigned int 7, nsEventStatus * 0x0003a7d0) line 1061 + 17 bytes nsDocument::HandleDOMEvent(nsDocument * const 0x0283dc20, nsIPresContext * 0x0283d5a0, nsEvent * 0x0003a7b0, nsIDOMEvent * * 0x0003a648, unsigned int 1, nsEventStatus * 0x0003a7d0) line 2423 nsEventStateManager::SendFocusBlur(nsEventStateManager * const 0x0229f2c0, nsIPresContext * 0x02281c20, nsIContent * 0x022b56e0) line 2177 nsEventStateManager::SetContentState(nsEventStateManager * const 0x0229f2c0, nsIContent * 0x022b56e0, int 2) line 2020 nsHTMLInputElement::SetFocus(nsHTMLInputElement * const 0x022b56e8, nsIPresContext * 0x02281c20) line 629 nsHTMLInputElement::Focus(nsHTMLInputElement * const 0x022b56d0) line 607 + 25 bytes HTMLInputElementFocus(JSContext * 0x021fcdb0, JSObject * 0x01151ee8, unsigned int 0, long * 0x011b71f4, long * 0x0003aa78) line 878 + 15 bytes js_Invoke(JSContext * 0x021fcdb0, unsigned int 0, unsigned int 0) line 666 + 26 bytes js_Interpret(JSContext * 0x021fcdb0, long * 0x0003b2f4) line 2262 + 15 bytes js_Invoke(JSContext * 0x021fcdb0, unsigned int 0, unsigned int 0) line 682 + 13 bytes js_Interpret(JSContext * 0x021fcdb0, long * 0x0003bb2c) line 2262 + 15 bytes js_Invoke(JSContext * 0x021fcdb0, unsigned int 1, unsigned int 2) line 682 + 13 bytes js_InternalInvoke(JSContext * 0x021fcdb0, JSObject * 0x01147c58, long 18160168, unsigned int 0, unsigned int 1, long * 0x0003bcb4, long * 0x0003bc60) line 759 + 19 bytes JS_CallFunctionValue(JSContext * 0x021fcdb0, JSObject * 0x01147c58, long 18160168, unsigned int 1, long * 0x0003bcb4, long * 0x0003bc60) line 2771 + 31 bytes nsJSContext::CallEventHandler(nsJSContext * const 0x021fcf40, void * 0x01147c58, void * 0x01151a28, unsigned int 1, void * 0x0003bcb4, int * 0x0003bcb0) line 562 + 33 bytes nsJSEventListener::HandleEvent(nsIDOMEvent * 0x02ac1cb4) line 128 + 57 bytes nsEventListenerManager::HandleEventSubType(nsListenerStruct * 0x022b3540, nsIDOMEvent * 0x02ac1cb4, unsigned int 4) line 680 + 19 bytes nsEventListenerManager::HandleEvent(nsIPresContext * 0x02281c20, nsEvent * 0x0003c148, nsIDOMEvent * * 0x0003c0a8, unsigned int 7, nsEventStatus * 0x0003c180) line 1174 + 31 bytes nsGenericElement::HandleDOMEvent(nsIPresContext * 0x02281c20, nsEvent * 0x0003c148, nsIDOMEvent * * 0x0003c0a8, unsigned int 1, nsEventStatus * 0x0003c180) line 809 nsHTMLInputElement::HandleDOMEvent(nsHTMLInputElement * const 0x022b37f0, nsIPresContext * 0x02281c20, nsEvent * 0x0003c148, nsIDOMEvent * * 0x00000000, unsigned int 1, nsEventStatus * 0x0003c180) line 739 + 31 bytes nsEnderEventListener::Blur(nsIDOMEvent * 0x02ac0e94) line 3876 nsEventListenerManager::HandleEvent(nsIPresContext * 0x0283d5a0, nsEvent * 0x0003c4a4, nsIDOMEvent * * 0x0003c33c, unsigned int 7, nsEventStatus * 0x0003c4c4) line 1061 + 17 bytes nsDocument::HandleDOMEvent(nsDocument * const 0x0283dc20, nsIPresContext * 0x0283d5a0, nsEvent * 0x0003c4a4, nsIDOMEvent * * 0x0003c33c, unsigned int 1, nsEventStatus * 0x0003c4c4) line 2423 nsEventStateManager::SendFocusBlur(nsEventStateManager * const 0x0229f2c0, nsIPresContext * 0x02281c20, nsIContent * 0x022b56e0) line 2177 nsEventStateManager::SetContentState(nsEventStateManager * const 0x0229f2c0, nsIContent * 0x022b56e0, int 2) line 2020 nsHTMLInputElement::SetFocus(nsHTMLInputElement * const 0x022b56e8, nsIPresContext * 0x02281c20) line 629 nsHTMLInputElement::Focus(nsHTMLInputElement * const 0x022b56d0) line 607 + 25 bytes HTMLInputElementFocus(JSContext * 0x021fcdb0, JSObject * 0x01151ee8, unsigned int 0, long * 0x011b71c8, long * 0x0003c76c) line 878 + 15 bytes js_Invoke(JSContext * 0x021fcdb0, unsigned int 0, unsigned int 0) line 666 + 26 bytes js_Interpret(JSContext * 0x021fcdb0, long * 0x0003cfe8) line 2262 + 15 bytes js_Invoke(JSContext * 0x021fcdb0, unsigned int 0, unsigned int 0) line 682 + 13 bytes js_Interpret(JSContext * 0x021fcdb0, long * 0x0003d820) line 2262 + 15 bytes js_Invoke(JSContext * 0x021fcdb0, unsigned int 1, unsigned int 2) line 682 + 13 bytes js_InternalInvoke(JSContext * 0x021fcdb0, JSObject * 0x01147c58, long 18160168, unsigned int 0, unsigned int 1, long * 0x0003d9a8, long * 0x0003d954) line 759 + 19 bytes JS_CallFunctionValue(JSContext * 0x021fcdb0, JSObject * 0x01147c58, long 18160168, unsigned int 1, long * 0x0003d9a8, long * 0x0003d954) line 2771 + 31 bytes nsJSContext::CallEventHandler(nsJSContext * const 0x021fcf40, void * 0x01147c58, void * 0x01151a28, unsigned int 1, void * 0x0003d9a8, int * 0x0003d9a4) line 562 + 33 bytes nsJSEventListener::HandleEvent(nsIDOMEvent * 0x02ac66b4) line 128 + 57 bytes nsEventListenerManager::HandleEventSubType(nsListenerStruct * 0x022b3540, nsIDOMEvent * 0x02ac66b4, unsigned int 4) line 680 + 19 bytes nsEventListenerManager::HandleEvent(nsIPresContext * 0x02281c20, nsEvent * 0x0003de3c, nsIDOMEvent * * 0x0003dd9c, unsigned int 7, nsEventStatus * 0x0003de74) line 1174 + 31 bytes nsGenericElement::HandleDOMEvent(nsIPresContext * 0x02281c20, nsEvent * 0x0003de3c, nsIDOMEvent * * 0x0003dd9c, unsigned int 1, nsEventStatus * 0x0003de74) line 809 nsHTMLInputElement::HandleDOMEvent(nsHTMLInputElement * const 0x022b37f0, nsIPresContext * 0x02281c20, nsEvent * 0x0003de3c, nsIDOMEvent * * 0x00000000, unsigned int 1, nsEventStatus * 0x0003de74) line 739 + 31 bytes nsEnderEventListener::Blur(nsIDOMEvent * 0x02ac3794) line 3876 nsEventListenerManager::HandleEvent(nsIPresContext * 0x0283d5a0, nsEvent * 0x0003e198, nsIDOMEvent * * 0x0003e030, unsigned int 7, nsEventStatus * 0x0003e1b8) line 1061 + 17 bytes nsDocument::HandleDOMEvent(nsDocument * const 0x0283dc20, nsIPresContext * 0x0283d5a0, nsEvent * 0x0003e198, nsIDOMEvent * * 0x0003e030, unsigned int 1, nsEventStatus * 0x0003e1b8) line 2423 nsEventStateManager::SendFocusBlur(nsEventStateManager * const 0x0229f2c0, nsIPresContext * 0x02281c20, nsIContent * 0x022b56e0) line 2177 nsEventStateManager::SetContentState(nsEventStateManager * const 0x0229f2c0, nsIContent * 0x022b56e0, int 2) line 2020 nsHTMLInputElement::SetFocus(nsHTMLInputElement * const 0x022b56e8, nsIPresContext * 0x02281c20) line 629 nsHTMLInputElement::Focus(nsHTMLInputElement * const 0x022b56d0) line 607 + 25 bytes HTMLInputElementFocus(JSContext * 0x021fcdb0, JSObject * 0x01151ee8, unsigned int 0, long * 0x011b719c, long * 0x0003e460) line 878 + 15 bytes js_Invoke(JSContext * 0x021fcdb0, unsigned int 0, unsigned int 0) line 666 + 26 bytes js_Interpret(JSContext * 0x021fcdb0, long * 0x0003ecdc) line 2262 + 15 bytes js_Invoke(JSContext * 0x021fcdb0, unsigned int 0, unsigned int 0) line 682 + 13 bytes js_Interpret(JSContext * 0x021fcdb0, long * 0x0003f514) line 2262 + 15 bytes js_Invoke(JSContext * 0x021fcdb0, unsigned int 1, unsigned int 2) line 682 + 13 bytes js_InternalInvoke(JSContext * 0x021fcdb0, JSObject * 0x01147c58, long 18160168, unsigned int 0, unsigned int 1, long * 0x0003f69c, long * 0x0003f648) line 759 + 19 bytes JS_CallFunctionValue(JSContext * 0x021fcdb0, JSObject * 0x01147c58, long 18160168, unsigned int 1, long * 0x0003f69c, long * 0x0003f648) line 2771 + 31 bytes nsJSContext::CallEventHandler(nsJSContext * const 0x021fcf40, void * 0x01147c58, void * 0x01151a28, unsigned int 1, void * 0x0003f69c, int * 0x0003f698) line 562 + 33 bytes nsJSEventListener::HandleEvent(nsIDOMEvent * 0x02ac5034) line 128 + 57 bytes nsEventListenerManager::HandleEventSubType(nsListenerStruct * 0x022b3540, nsIDOMEvent * 0x02ac5034, unsigned int 4) line 680 + 19 bytes nsEventListenerManager::HandleEvent(nsIPresContext * 0x02281c20, nsEvent * 0x0003fb30, nsIDOMEvent * * 0x0003fa90, unsigned int 7, nsEventStatus * 0x0003fb68) line 1174 + 31 bytes nsGenericElement::HandleDOMEvent(nsIPresContext * 0x02281c20, nsEvent * 0x0003fb30, nsIDOMEvent * * 0x0003fa90, unsigned int 1, nsEventStatus * 0x0003fb68) line 809 nsHTMLInputElement::HandleDOMEvent(nsHTMLInputElement * const 0x022b37f0, nsIPresContext * 0x02281c20, nsEvent * 0x0003fb30, nsIDOMEvent * * 0x00000000, unsigned int 1, nsEventStatus * 0x0003fb68) line 739 + 31 bytes nsEnderEventListener::Blur(nsIDOMEvent * 0x02ac2c04) line 3876 nsEventListenerManager::HandleEvent(nsIPresContext * 0x0283d5a0, nsEvent * 0x0003fe8c, nsIDOMEvent * * 0x0003fd24, unsigned int 7, nsEventStatus * 0x0003feac) line 1061 + 17 bytes nsDocument::HandleDOMEvent(nsDocument * const 0x0283dc20, nsIPresContext * 0x0283d5a0, nsEvent * 0x0003fe8c, nsIDOMEvent * * 0x0003fd24, unsigned int 1, nsEventStatus * 0x0003feac) line 2423 nsEventStateManager::SendFocusBlur(nsEventStateManager * const 0x0229f2c0, nsIPresContext * 0x02281c20, nsIContent * 0x022b56e0) line 2177 nsEventStateManager::SetContentState(nsEventStateManager * const 0x0229f2c0, nsIContent * 0x022b56e0, int 2) line 2020 nsHTMLInputElement::SetFocus(nsHTMLInputElement * const 0x022b56e8, nsIPresContext * 0x02281c20) line 629 nsHTMLInputElement::Focus(nsHTMLInputElement * const 0x022b56d0) line 607 + 25 bytes HTMLInputElementFocus(JSContext * 0x021fcdb0, JSObject * 0x01151ee8, unsigned int 0, long * 0x011b7170, long * 0x00040154) line 878 + 15 bytes js_Invoke(JSContext * 0x021fcdb0, unsigned int 0, unsigned int 0) line 666 + 26 bytes js_Interpret(JSContext * 0x021fcdb0, long * 0x000409d0) line 2262 + 15 bytes js_Invoke(JSContext * 0x021fcdb0, unsigned int 0, unsigned int 0) line 682 + 13 bytes js_Interpret(JSContext * 0x021fcdb0, long * 0x00041208) line 2262 + 15 bytes js_Invoke(JSContext * 0x021fcdb0, unsigned int 1, unsigned int 2) line 682 + 13 bytes js_InternalInvoke(JSContext * 0x021fcdb0, JSObject * 0x01147c58, long 18160168, unsigned int 0, unsigned int 1, long * 0x00041390, long * 0x0004133c) line 759 + 19 bytes JS_CallFunctionValue(JSContext * 0x021fcdb0, JSObject * 0x01147c58, long 18160168, unsigned int 1, long * 0x00041390, long * 0x0004133c) line 2771 + 31 bytes nsJSContext::CallEventHandler(nsJSContext * const 0x021fcf40, void * 0x01147c58, void * 0x01151a28, unsigned int 1, void * 0x00041390, int * 0x0004138c) line 562 + 33 bytes nsJSEventListener::HandleEvent(nsIDOMEvent * 0x02ac09f4) line 128 + 57 bytes nsEventListenerManager::HandleEventSubType(nsListenerStruct * 0x022b3540, nsIDOMEvent * 0x02ac09f4, unsigned int 4) line 680 + 19 bytes nsEventListenerManager::HandleEvent(nsIPresContext * 0x02281c20, nsEvent * 0x00041824, nsIDOMEvent * * 0x00041784, unsigned int 7, nsEventStatus * 0x0004185c) line 1174 + 31 bytes nsGenericElement::HandleDOMEvent(nsIPresContext * 0x02281c20, nsEvent * 0x00041824, nsIDOMEvent * * 0x00041784, unsigned int 1, nsEventStatus * 0x0004185c) line 809 nsHTMLInputElement::HandleDOMEvent(nsHTMLInputElement * const 0x022b37f0, nsIPresContext * 0x02281c20, nsEvent * 0x00041824, nsIDOMEvent * * 0x00000000, unsigned int 1, nsEventStatus * 0x0004185c) line 739 + 31 bytes nsEnderEventListener::Blur(nsIDOMEvent * 0x02ac1864) line 3876 nsEventListenerManager::HandleEvent(nsIPresContext * 0x0283d5a0, nsEvent * 0x00041b80, nsIDOMEvent * * 0x00041a18, unsigned int 7, nsEventStatus * 0x00041ba0) line 1061 + 17 bytes nsDocument::HandleDOMEvent(nsDocument * const 0x0283dc20, nsIPresContext * 0x0283d5a0, nsEvent * 0x00041b80, nsIDOMEvent * * 0x00041a18, unsigned int 1, nsEventStatus * 0x00041ba0) line 2423 nsEventStateManager::SendFocusBlur(nsEventStateManager * const 0x0229f2c0, nsIPresContext * 0x02281c20, nsIContent * 0x022b56e0) line 2177 nsEventStateManager::SetContentState(nsEventStateManager * const 0x0229f2c0, nsIContent * 0x022b56e0, int 2) line 2020 nsHTMLInputElement::SetFocus(nsHTMLInputElement * const 0x022b56e8, nsIPresContext * 0x02281c20) line 629 nsHTMLInputElement::Focus(nsHTMLInputElement * const 0x022b56d0) line 607 + 25 bytes HTMLInputElementFocus(JSContext * 0x021fcdb0, JSObject * 0x01151ee8, unsigned int 0, long * 0x011b7144, long * 0x00041e48) line 878 + 15 bytes js_Invoke(JSContext * 0x021fcdb0, unsigned int 0, unsigned int 0) line 666 + 26 bytes js_Interpret(JSContext * 0x021fcdb0, long * 0x000426c4) line 2262 + 15 bytes js_Invoke(JSContext * 0x021fcdb0, unsigned int 0, unsigned int 0) line 682 + 13 bytes js_Interpret(JSContext * 0x021fcdb0, long * 0x00042efc) line 2262 + 15 bytes js_Invoke(JSContext * 0x021fcdb0, unsigned int 1, unsigned int 2) line 682 + 13 bytes js_InternalInvoke(JSContext * 0x021fcdb0, JSObject * 0x01147c58, long 18160168, unsigned int 0, unsigned int 1, long * 0x00043084, long * 0x00043030) line 759 + 19 bytes JS_CallFunctionValue(JSContext * 0x021fcdb0, JSObject * 0x01147c58, long 18160168, unsigned int 1, long * 0x00043084, long * 0x00043030) line 2771 + 31 bytes nsJSContext::CallEventHandler(nsJSContext * const 0x021fcf40, void * 0x01147c58, void * 0x01151a28, unsigned int 1, void * 0x00043084, int * 0x00043080) line 562 + 33 bytes nsJSEventListener::HandleEvent(nsIDOMEvent * 0x02ac2064) line 128 + 57 bytes nsEventListenerManager::HandleEventSubType(nsListenerStruct * 0x022b3540, nsIDOMEvent * 0x02ac2064, unsigned int 4) line 680 + 19 bytes nsEventListenerManager::HandleEvent(nsIPresContext * 0x02281c20, nsEvent * 0x00043518, nsIDOMEvent * * 0x00043478, unsigned int 7, nsEventStatus * 0x00043550) line 1174 + 31 bytes nsGenericElement::HandleDOMEvent(nsIPresContext * 0x02281c20, nsEvent * 0x00043518, nsIDOMEvent * * 0x00043478, unsigned int 1, nsEventStatus * 0x00043550) line 809 nsHTMLInputElement::HandleDOMEvent(nsHTMLInputElement * const 0x022b37f0, nsIPresContext * 0x02281c20, nsEvent * 0x00043518, nsIDOMEvent * * 0x00000000, unsigned int 1, nsEventStatus * 0x00043550) line 739 + 31 bytes nsEnderEventListener::Blur(nsIDOMEvent * 0x02ac0524) line 3876 nsEventListenerManager::HandleEvent(nsIPresContext * 0x0283d5a0, nsEvent * 0x00043874, nsIDOMEvent * * 0x0004370c, unsigned int 7, nsEventStatus * 0x00043894) line 1061 + 17 bytes nsDocument::HandleDOMEvent(nsDocument * const 0x0283dc20, nsIPresContext * 0x0283d5a0, nsEvent * 0x00043874, nsIDOMEvent * * 0x0004370c, unsigned int 1, nsEventStatus * 0x00043894) line 2423 nsEventStateManager::SendFocusBlur(nsEventStateManager * const 0x0229f2c0, nsIPresContext * 0x02281c20, nsIContent * 0x022b56e0) line 2177 nsEventStateManager::SetContentState(nsEventStateManager * const 0x0229f2c0, nsIContent * 0x022b56e0, int 2) line 2020 nsHTMLInputElement::SetFocus(nsHTMLInputElement * const 0x022b56e8, nsIPresContext * 0x02281c20) line 629 nsHTMLInputElement::Focus(nsHTMLInputElement * const 0x022b56d0) line 607 + 25 bytes HTMLInputElementFocus(JSContext * 0x021fcdb0, JSObject * 0x01151ee8, unsigned int 0, long * 0x011b7118, long * 0x00043b3c) line 878 + 15 bytes js_Invoke(JSContext * 0x021fcdb0, unsigned int 0, unsigned int 0) line 666 + 26 bytes js_Interpret(JSContext * 0x021fcdb0, long * 0x000443b8) line 2262 + 15 bytes js_Invoke(JSContext * 0x021fcdb0, unsigned int 0, unsigned int 0) line 682 + 13 bytes js_Interpret(JSContext * 0x021fcdb0, long * 0x00044bf0) line 2262 + 15 bytes js_Invoke(JSContext * 0x021fcdb0, unsigned int 1, unsigned int 2) line 682 + 13 bytes js_InternalInvoke(JSContext * 0x021fcdb0, JSObject * 0x01147c58, long 18160168, unsigned int 0, unsigned int 1, long * 0x00044d78, long * 0x00044d24) line 759 + 19 bytes JS_CallFunctionValue(JSContext * 0x021fcdb0, JSObject * 0x01147c58, long 18160168, unsigned int 1, long * 0x00044d78, long * 0x00044d24) line 2771 + 31 bytes nsJSContext::CallEventHandler(nsJSContext * const 0x021fcf40, void * 0x01147c58, void * 0x01151a28, unsigned int 1, void * 0x00044d78, int * 0x00044d74) line 562 + 33 bytes nsJSEventListener::HandleEvent(nsIDOMEvent * 0x02ac2674) line 128 + 57 bytes nsEventListenerManager::HandleEventSubType(nsListenerStruct * 0x022b3540, nsIDOMEvent * 0x02ac2674, unsigned int 4) line 680 + 19 bytes nsEventListenerManager::HandleEvent(nsIPresContext * 0x02281c20, nsEvent * 0x0004520c, nsIDOMEvent * * 0x0004516c, unsigned int 7, nsEventStatus * 0x00045244) line 1174 + 31 bytes nsGenericElement::HandleDOMEvent(nsIPresContext * 0x02281c20, nsEvent * 0x0004520c, nsIDOMEvent * * 0x0004516c, unsigned int 1, nsEventStatus * 0x00045244) line 809 nsHTMLInputElement::HandleDOMEvent(nsHTMLInputElement * const 0x022b37f0, nsIPresContext * 0x02281c20, nsEvent * 0x0004520c, nsIDOMEvent * * 0x00000000, unsigned int 1, nsEventStatus * 0x00045244) line 739 + 31 bytes nsEnderEventListener::Blur(nsIDOMEvent * 0x02ac0584) line 3876 nsEventListenerManager::HandleEvent(nsIPresContext * 0x0283d5a0, nsEvent * 0x00045568, nsIDOMEvent * * 0x00045400, unsigned int 7, nsEventStatus * 0x00045588) line 1061 + 17 bytes nsDocument::HandleDOMEvent(nsDocument * const 0x0283dc20, nsIPresContext * 0x0283d5a0, nsEvent * 0x00045568, nsIDOMEvent * * 0x00045400, unsigned int 1, nsEventStatus * 0x00045588) line 2423 nsEventStateManager::SendFocusBlur(nsEventStateManager * const 0x0229f2c0, nsIPresContext * 0x02281c20, nsIContent * 0x022b56e0) line 2177 nsEventStateManager::SetContentState(nsEventStateManager * const 0x0229f2c0, nsIContent * 0x022b56e0, int 2) line 2020 nsHTMLInputElement::SetFocus(nsHTMLInputElement * const 0x022b56e8, nsIPresContext * 0x02281c20) line 629 and on and on and on

This is a fun bug where the onchange handler fired after the blur event hit the content model, but before we reset or state for what was in focus. The onchange handler then set focus to the password field, causing us to try to blur the user field again because our state still said it had focus. That blur fired the onchange handler again. Repeat until you run out of stack space. Hyatt, I'm not sure what the right thing to do here is. I reset gLastFocusedDocument and gLastFocusedContent prior to the blur dispatch in SendFocusBlur, and that works, and doesn't seem to break anything on Mac or Windows (havn't tested linux yet). However, I'm having trouble convincing myself that just setting these to null is the right thing to do. Thoughts?

Release them before you set them to null. I believe they're refcounted.

*** Bug 25790 has been marked as a duplicate of this bug. ***

Adding PDT+ and beta1 from bug 25790, dupe of this one

Fixed. Tabbing between fields seems to have issues, but it doesn't crash anymore. Clicking works fine.

Marking VERIFIED FIXED on: - Linux6 2000-02-17-08 Commercial build - MacOS9 2000-02-16-16 Mozilla build - Win98 2000-02-16-16 Commercial build