User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.1) Gecko/20060111 Firefox/1.5.0.1 Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.1) Gecko/20060111 Firefox/1.5.0.1 A crash occurs when I press the space bar 2 times when I try to login on this web site. Reproducible: Always Steps to Reproduce: 1. Visit http://www.mycpdemos.com:2082/ 2. Click cancel on the password prompt 3. Enter icandy as the username, demo as the password 4. Press TAB to go to the Login button 5. Press the space bar, you will be asked to save the password. Press the space bar again to select "Not now". 6. Press the space bar again, just before to be redirected to the next page. 7. You will be asked to save your password. Do not click on "Not now", wait until the page is completly loaded. 8. Press "not now". Actual Results: It crashes.

Could you install with talkback and get a talkback ID for the crash? http://kb.mozillazine.org/Talkback

Confirmed with a 2006-02-08 trunk Firefox build on windows. Talkback ID: TB15050506K

Testcase that has an artificial loading delay of 5 seconds in it for easy reproducing. Instructions to trigger the crash are in the testcase. http://wargers.org/mozilla/326836_crash_password_remember.php From Talkback ID: IsChildOfDomWindow [c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/security/manager/boot/src/nsSecureBrowserUIImpl.cpp, line 310] nsSecureBrowserUIImpl::Notify [c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/security/manager/boot/src/nsSecureBrowserUIImpl.cpp, line 367] nsHTMLFormElement::NotifySubmitObservers [c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/content/html/content/src/nsHTMLFormElement.cpp, line 1067] nsHTMLFormElement::SubmitSubmission [c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/content/html/content/src/nsHTMLFormElement.cpp, line 977] nsHTMLFormElement::DoSubmit [c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/content/html/content/src/nsHTMLFormElement.cpp, line 894] nsHTMLFormElement::DoSubmitOrReset [c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/content/html/content/src/nsHTMLFormElement.cpp, line 818] PresShell::HandleDOMEventWithTarget [c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/layout/base/nsPresShell.cpp, line 6157] nsHTMLInputElement::HandleDOMEvent [c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/content/html/content/src/nsHTMLInputElement.cpp, line 1661] nsHTMLInputElement::HandleDOMEvent [c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/content/html/content/src/nsHTMLInputElement.cpp, line 1503] PresShell::HandleEventInternal [c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/layout/base/nsPresShell.cpp, line 6076] PresShell::HandleEvent [c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/layout/base/nsPresShell.cpp, line 5851] nsViewManager::HandleEvent [c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/view/src/nsViewManager.cpp, line 1725] nsViewManager::DispatchEvent [c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/view/src/nsViewManager.cpp, line 1678] HandleEvent [c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/view/src/nsView.cpp, line 175] nsWindow::DispatchEvent [c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/widget/src/windows/nsWindow.cpp, line 1169] nsWindow::DispatchKeyEvent [c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/widget/src/windows/nsWindow.cpp, line 3382] nsWindow::OnKeyUp [c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/widget/src/windows/nsWindow.cpp, line 3532] nsWindow::WindowProc [c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/widget/src/windows/nsWindow.cpp, line 1358] USER32.dll + 0x27b17 (0x77d37b17) USER32.dll + 0x2cdce (0x77d3cdce) USER32.dll + 0x4435 (0x77d14435) USER32.dll + 0x9611 (0x77d19611) nsAppStartup::Run [c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/toolkit/components/startup/src/nsAppStartup.cpp, line 162] main [c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/browser/app/nsBrowserApp.cpp, line 61] kernel32.dll + 0x1eb69 (0x77e5eb69)

Duping forward, since timeless has a patch. *** This bug has been marked as a duplicate of 332324 ***