Closed Bug 242257 Opened 20 years ago Closed 19 years ago

M17 crash [@ nsTypeAheadFind::GetSearchContainers] when using "Find as you type" before the site loaded

Categories

(SeaMonkey :: Find In Page, defect)

defect
Not set
critical

Tracking

(Not tracked)

RESOLVED WORKSFORME

People

(Reporter: sekundes, Assigned: mcsmurf)

References

()

Details

(Keywords: crash, topcrash)

Crash Data

Attachments

(1 file)

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8a) Gecko/20040417
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8a) Gecko/20040417

Tested on Mozilla 1.6 and Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US;
rv:1.8a) Gecko/20040417

Reproducible: Always
Steps to Reproduce:
1.browse http://w3.org/TR/SVG11.
2.when Mozilla is loading the page, start using "Find as you type" by pressing /.
3.type any keyword letters and / until Mozilla fully loads the page.
4.Mozilla would crash before it has fully loaded.
Summary: crash when using "Find as you type" before the site → crash when using "Find as you type" before the site loaded
Reporter, if possible please submit a talkback crash report to allow developers
to help track down this problem.
 
See also bug 242107 raised against Firefox.
wfm Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8a) Gecko/20040430
how do I get the talkback crash report?
First you need a TB enabled build, current releases and nighlies should include
TB. Then when you crash send your TB report. Now open talkback.exe in [Mozilla
program folder]/components and there you can see the TB id. Now tell us the id :)
Re #2:
It also occurs on my 2004-04-30-09 build.

My talkback id is TB35535M.
Yet I can't see my crash report on http://talkback-public.mozilla.org/
Blocks: 242107
TB35535M is available now. Triggered by
nsTypeAheadFind::GetSearchContainers
[d:/BUILDS/tinderbox/Mozilla1.7/WINNT_5.0_Clobber/mozilla/extensions/typeaheadfind/src/nsTypeAheadFind.cpp,
line 1522]
There are quite a few of these crashes with Mozilla 1.7 rc1 and has the
potential to be a topcrash.  Someone was also able to reproduce this in MacOS X,
so Hardware->All and OS->All.

Here is a recent incident with rc1:
Incident ID: 44543
Stack Signature	nsTypeAheadFind::GetSearchContainers 8b919f22
Email Address	
Product ID	Mozilla17
Build ID	2004042109
Trigger Time	2004-05-11 13:21:19.0
Platform	Win32
Operating System	Windows NT 5.0 build 2195
Module	typeaheadfind.dll + (00003af1)
URL visited	
User Comments	
Since Last Crash	sec
Total Uptime	sec
Trigger Reason	Access violation
Source File Name
d:/BUILDS/tinderbox/Mozilla1.7/WINNT_5.0_Clobber/mozilla/extensions/typeaheadfind/src/nsTypeAheadFind.cpp
Trigger Line No.	1522
Stack Trace 	
nsTypeAheadFind::GetSearchContainers
[d:/BUILDS/tinderbox/Mozilla1.7/WINNT_5.0_Clobber/mozilla/extensions/typeaheadfind/src/nsTypeAheadFind.cpp,
line 1522]
nsTypeAheadFind::FindItNow
[d:/BUILDS/tinderbox/Mozilla1.7/WINNT_5.0_Clobber/mozilla/extensions/typeaheadfind/src/nsTypeAheadFind.cpp,
line 1343]
nsTypeAheadFind::HandleChar
[d:/BUILDS/tinderbox/Mozilla1.7/WINNT_5.0_Clobber/mozilla/extensions/typeaheadfind/src/nsTypeAheadFind.cpp,
line 965]
nsTypeAheadFind::KeyPress
[d:/BUILDS/tinderbox/Mozilla1.7/WINNT_5.0_Clobber/mozilla/extensions/typeaheadfind/src/nsTypeAheadFind.cpp,
line 608]
DispatchToInterface
[d:/BUILDS/tinderbox/Mozilla1.7/WINNT_5.0_Clobber/mozilla/content/events/src/nsEventListenerManager.cpp,
line 128]
nsEventListenerManager::HandleEvent
[d:/BUILDS/tinderbox/Mozilla1.7/WINNT_5.0_Clobber/mozilla/content/events/src/nsEventListenerManager.cpp,
line 1524]
nsWindowRoot::HandleChromeEvent
[d:/BUILDS/tinderbox/Mozilla1.7/WINNT_5.0_Clobber/mozilla/dom/src/base/nsWindowRoot.cpp,
line 211]
GlobalWindowImpl::HandleDOMEvent
[d:/BUILDS/tinderbox/Mozilla1.7/WINNT_5.0_Clobber/mozilla/dom/src/base/nsGlobalWindow.cpp,
line 914]
nsXULDocument::HandleDOMEvent
[d:/BUILDS/tinderbox/Mozilla1.7/WINNT_5.0_Clobber/mozilla/content/xul/document/src/nsXULDocument.cpp,
line 1271]
nsXULElement::HandleDOMEvent
[d:/BUILDS/tinderbox/Mozilla1.7/WINNT_5.0_Clobber/mozilla/content/xul/content/src/nsXULElement.cpp,
line 2868]
nsXULElement::HandleDOMEvent
[d:/BUILDS/tinderbox/Mozilla1.7/WINNT_5.0_Clobber/mozilla/content/xul/content/src/nsXULElement.cpp,
line 2860]
nsXULElement::HandleDOMEvent
[d:/BUILDS/tinderbox/Mozilla1.7/WINNT_5.0_Clobber/mozilla/content/xul/content/src/nsXULElement.cpp,
line 2860]
nsXULElement::HandleDOMEvent
[d:/BUILDS/tinderbox/Mozilla1.7/WINNT_5.0_Clobber/mozilla/content/xul/content/src/nsXULElement.cpp,
line 2860]
nsXULElement::HandleDOMEvent
[d:/BUILDS/tinderbox/Mozilla1.7/WINNT_5.0_Clobber/mozilla/content/xul/content/src/nsXULElement.cpp,
line 2860]
nsXULElement::HandleDOMEvent
[d:/BUILDS/tinderbox/Mozilla1.7/WINNT_5.0_Clobber/mozilla/content/xul/content/src/nsXULElement.cpp,
line 2860]
nsXULElement::HandleDOMEvent
[d:/BUILDS/tinderbox/Mozilla1.7/WINNT_5.0_Clobber/mozilla/content/xul/content/src/nsXULElement.cpp,
line 2860]
nsXULElement::HandleDOMEvent
[d:/BUILDS/tinderbox/Mozilla1.7/WINNT_5.0_Clobber/mozilla/content/xul/content/src/nsXULElement.cpp,
line 2860]
nsXULElement::HandleChromeEvent
[d:/BUILDS/tinderbox/Mozilla1.7/WINNT_5.0_Clobber/mozilla/content/xul/content/src/nsXULElement.cpp,
line 3985]
GlobalWindowImpl::HandleDOMEvent
[d:/BUILDS/tinderbox/Mozilla1.7/WINNT_5.0_Clobber/mozilla/dom/src/base/nsGlobalWindow.cpp,
line 914]
nsDocument::HandleDOMEvent
[d:/BUILDS/tinderbox/Mozilla1.7/WINNT_5.0_Clobber/mozilla/content/base/src/nsDocument.cpp,
line 3697]
nsGenericElement::HandleDOMEvent
[d:/BUILDS/tinderbox/Mozilla1.7/WINNT_5.0_Clobber/mozilla/content/base/src/nsGenericElement.cpp,
line 2000]
nsGenericElement::HandleDOMEvent
[d:/BUILDS/tinderbox/Mozilla1.7/WINNT_5.0_Clobber/mozilla/content/base/src/nsGenericElement.cpp,
line 1990]
nsGenericElement::HandleDOMEvent
[d:/BUILDS/tinderbox/Mozilla1.7/WINNT_5.0_Clobber/mozilla/content/base/src/nsGenericElement.cpp,
line 1990]
nsEventStateManager::DispatchNewEvent
[d:/BUILDS/tinderbox/Mozilla1.7/WINNT_5.0_Clobber/mozilla/content/events/src/nsEventStateManager.cpp,
line 4454]
nsEventListenerManager::DispatchEvent
[d:/BUILDS/tinderbox/Mozilla1.7/WINNT_5.0_Clobber/mozilla/content/events/src/nsEventListenerManager.cpp,
line 1812]
nsDOMEventRTTearoff::DispatchEvent
[d:/BUILDS/tinderbox/Mozilla1.7/WINNT_5.0_Clobber/mozilla/content/base/src/nsGenericElement.cpp,
line 668]
XPTC_InvokeByIndex
[d:/BUILDS/tinderbox/Mozilla1.7/WINNT_5.0_Clobber/mozilla/xpcom/reflect/xptcall/src/md/win32/xptcinvoke.cpp,
line 102]
XPCWrappedNative::CallMethod
[d:/BUILDS/tinderbox/Mozilla1.7/WINNT_5.0_Clobber/mozilla/js/src/xpconnect/src/xpcwrappednative.cpp,
line 2029]
XPC_WN_CallMethod
[d:/BUILDS/tinderbox/Mozilla1.7/WINNT_5.0_Clobber/mozilla/js/src/xpconnect/src/xpcwrappednativejsops.cpp,
line 1288]
js_Invoke
[d:/BUILDS/tinderbox/Mozilla1.7/WINNT_5.0_Clobber/mozilla/js/src/jsinterp.c,
line 943]
js_Interpret
[d:/BUILDS/tinderbox/Mozilla1.7/WINNT_5.0_Clobber/mozilla/js/src/jsinterp.c,
line 2964]
js_Invoke
[d:/BUILDS/tinderbox/Mozilla1.7/WINNT_5.0_Clobber/mozilla/js/src/jsinterp.c,
line 959]
js_InternalInvoke
[d:/BUILDS/tinderbox/Mozilla1.7/WINNT_5.0_Clobber/mozilla/js/src/jsinterp.c,
line 1036]
JS_CallFunctionValue
[d:/BUILDS/tinderbox/Mozilla1.7/WINNT_5.0_Clobber/mozilla/js/src/jsapi.c, line 3609]
nsJSContext::CallEventHandler
[d:/BUILDS/tinderbox/Mozilla1.7/WINNT_5.0_Clobber/mozilla/dom/src/base/nsJSEnvironment.cpp,
line 1299]
nsJSEventListener::HandleEvent
[d:/BUILDS/tinderbox/Mozilla1.7/WINNT_5.0_Clobber/mozilla/dom/src/events/nsJSEventListener.cpp,
line 181]
nsXBLPrototypeHandler::ExecuteHandler
[d:/BUILDS/tinderbox/Mozilla1.7/WINNT_5.0_Clobber/mozilla/content/xbl/src/nsXBLPrototypeHandler.cpp,
line 461]
nsXBLPrototypeHandler::BindingAttached
[d:/BUILDS/tinderbox/Mozilla1.7/WINNT_5.0_Clobber/mozilla/content/xbl/src/nsXBLPrototypeHandler.cpp,
line 533]
nsXBLBinding::ExecuteAttachedHandler
[d:/BUILDS/tinderbox/Mozilla1.7/WINNT_5.0_Clobber/mozilla/content/xbl/src/nsXBLBinding.cpp,
line 854]
nsElementSH::PostCreate
[d:/BUILDS/tinderbox/Mozilla1.7/WINNT_5.0_Clobber/mozilla/dom/src/base/nsDOMClassInfo.cpp,
line 4815]
XPCWrappedNative::GetNewOrUsed
[d:/BUILDS/tinderbox/Mozilla1.7/WINNT_5.0_Clobber/mozilla/js/src/xpconnect/src/xpcwrappednative.cpp,
line 432]
XPCConvert::NativeInterface2JSObject
[d:/BUILDS/tinderbox/Mozilla1.7/WINNT_5.0_Clobber/mozilla/js/src/xpconnect/src/xpcconvert.cpp,
line 1062]
XPCConvert::NativeData2JS
[d:/BUILDS/tinderbox/Mozilla1.7/WINNT_5.0_Clobber/mozilla/js/src/xpconnect/src/xpcconvert.cpp,
line 467]
XPCWrappedNative::CallMethod
[d:/BUILDS/tinderbox/Mozilla1.7/WINNT_5.0_Clobber/mozilla/js/src/xpconnect/src/xpcwrappednative.cpp,
line 2123]
XPC_WN_GetterSetter
[d:/BUILDS/tinderbox/Mozilla1.7/WINNT_5.0_Clobber/mozilla/js/src/xpconnect/src/xpcwrappednativejsops.cpp,
line 1320]
js_Invoke
[d:/BUILDS/tinderbox/Mozilla1.7/WINNT_5.0_Clobber/mozilla/js/src/jsinterp.c,
line 943]
js_InternalInvoke
[d:/BUILDS/tinderbox/Mozilla1.7/WINNT_5.0_Clobber/mozilla/js/src/jsinterp.c,
line 1036]
js_InternalGetOrSet
[d:/BUILDS/tinderbox/Mozilla1.7/WINNT_5.0_Clobber/mozilla/js/src/jsinterp.c,
line 1079]
js_GetProperty
[d:/BUILDS/tinderbox/Mozilla1.7/WINNT_5.0_Clobber/mozilla/js/src/jsobj.c, line 2679]
js_Interpret
[d:/BUILDS/tinderbox/Mozilla1.7/WINNT_5.0_Clobber/mozilla/js/src/jsinterp.c,
line 2795]
js_Invoke
[d:/BUILDS/tinderbox/Mozilla1.7/WINNT_5.0_Clobber/mozilla/js/src/jsinterp.c,
line 959]
nsXPCWrappedJSClass::CallMethod
[d:/BUILDS/tinderbox/Mozilla1.7/WINNT_5.0_Clobber/mozilla/js/src/xpconnect/src/xpcwrappedjsclass.cpp,
line 1338]
nsXPCWrappedJS::CallMethod
[d:/BUILDS/tinderbox/Mozilla1.7/WINNT_5.0_Clobber/mozilla/js/src/xpconnect/src/xpcwrappedjs.cpp,
line 450]
PrepareAndDispatch
[d:/BUILDS/tinderbox/Mozilla1.7/WINNT_5.0_Clobber/mozilla/xpcom/reflect/xptcall/src/md/win32/xptcstubs.cpp,
line 119]
SharedStub
[d:/BUILDS/tinderbox/Mozilla1.7/WINNT_5.0_Clobber/mozilla/xpcom/reflect/xptcall/src/md/win32/xptcstubs.cpp,
line 147]
nsEventListenerManager::HandleEventSubType
[d:/BUILDS/tinderbox/Mozilla1.7/WINNT_5.0_Clobber/mozilla/content/events/src/nsEventListenerManager.cpp,
line 1435]
nsEventListenerManager::HandleEvent
[d:/BUILDS/tinderbox/Mozilla1.7/WINNT_5.0_Clobber/mozilla/content/events/src/nsEventListenerManager.cpp,
line 1512]
nsXULElement::HandleDOMEvent
[d:/BUILDS/tinderbox/Mozilla1.7/WINNT_5.0_Clobber/mozilla/content/xul/content/src/nsXULElement.cpp,
line 2841]
nsXULElement::HandleDOMEvent
[d:/BUILDS/tinderbox/Mozilla1.7/WINNT_5.0_Clobber/mozilla/content/xul/content/src/nsXULElement.cpp,
line 2860]
nsXULElement::HandleDOMEvent
[d:/BUILDS/tinderbox/Mozilla1.7/WINNT_5.0_Clobber/mozilla/content/xul/content/src/nsXULElement.cpp,
line 2860]
nsXULElement::HandleDOMEvent
[d:/BUILDS/tinderbox/Mozilla1.7/WINNT_5.0_Clobber/mozilla/content/xul/content/src/nsXULElement.cpp,
line 2860]
nsXULElement::HandleDOMEvent
[d:/BUILDS/tinderbox/Mozilla1.7/WINNT_5.0_Clobber/mozilla/content/xul/content/src/nsXULElement.cpp,
line 2860]
nsXULElement::HandleDOMEvent
[d:/BUILDS/tinderbox/Mozilla1.7/WINNT_5.0_Clobber/mozilla/content/xul/content/src/nsXULElement.cpp,
line 2860]
nsEventStateManager::DispatchNewEvent
[d:/BUILDS/tinderbox/Mozilla1.7/WINNT_5.0_Clobber/mozilla/content/events/src/nsEventStateManager.cpp,
line 4449]

And some of the crash data from the MacOS X crash:
Exception:  EXC_BAD_ACCESS (0x0001)
Codes:      KERN_PROTECTION_FAILURE (0x0002) at 0x00000000

Thread 0 Crashed:
0   libtypeaheadfind.dylib 	0x0055a3ac
_ZN15nsTypeAheadFind19GetSearchContainersEP11nsISupportsiiiPP12nsIPresShellPP14nsIPresContext
+ 0x2f4
1   libtypeaheadfind.dylib 	0x0055997c
_ZN15nsTypeAheadFind9FindItNowEP12nsIPresShelliii + 0x2e8
2   libtypeaheadfind.dylib 	0x00558ca8 _ZN15nsTypeAheadFind10HandleCharEt + 0x2ec
3   libtypeaheadfind.dylib 	0x00558518
_ZN15nsTypeAheadFind8KeyPressEP11nsIDOMEvent + 0x454
4   libgklayout.dylib      	0x021a9820
_Z19DispatchToInterfaceP11nsIDOMEventP19nsIDOMEventListenerMS1_FjS0_ERK4nsIDPi +
0x98
5   libgklayout.dylib      	0x021ac8c4
_ZN22nsEventListenerManager11HandleEventEP14nsIPresContextP7nsEventPP11nsIDOMEventP17nsIDOMEventTargetjP13nsEventStatus
+ 0x25c
6   libgklayout.dylib      	0x02300e28
_ZN12nsXULElement14HandleDOMEventEP14nsIPresContextP7nsEventPP11nsIDOMEventjP13nsEventStatus
+ 0xab8
7   libgklayout.dylib      	0x02304ca4
_ZN12nsXULElement17HandleChromeEventEP14nsIPresContextP7nsEventPP11nsIDOMEventjP13nsEventStatus
+ 0x70
8   libgklayout.dylib      	0x022b50ec
_ZN16GlobalWindowImpl14HandleDOMEventEP14nsIPresContextP7nsEventPP11nsIDOMEventjP13nsEventStatus
+ 0x420
9   libgklayout.dylib      	0x02148680
_ZN10nsDocument14HandleDOMEventEP14nsIPresContextP7nsEventPP11nsIDOMEventjP13nsEventStatus
+ 0x154
10  libgklayout.dylib      	0x02163ab8
_ZN16nsGenericElement14HandleDOMEventEP14nsIPresContextP7nsEventPP11nsIDOMEventjP13nsEventStatus
+ 0x6d8
11  libgklayout.dylib      	0x02058850
_ZN9PresShell19HandleEventInternalEP7nsEventP7nsIViewjP13nsEventStatus + 0x2c8
12  libgklayout.dylib      	0x02058470
_ZN9PresShell11HandleEventEP7nsIViewP10nsGUIEventP13nsEventStatusiRi + 0x4f4
13  libgklayout.dylib      	0x022a8698
_ZN13nsViewManager11HandleEventEP6nsViewP10nsGUIEventi + 0x100
14  libgklayout.dylib      	0x022a7c2c
_ZN13nsViewManager13DispatchEventEP10nsGUIEventP13nsEventStatus + 0x868
15  libgklayout.dylib      	0x022a0494 _Z11HandleEventP10nsGUIEvent + 0x48
16  libwidget_mac.dylib    	0x01352b08
_ZN8nsWindow13DispatchEventEP10nsGUIEventR13nsEventStatus + 0xac
17  libwidget_mac.dylib    	0x01352b94
_ZN8nsWindow19DispatchWindowEventER10nsGUIEvent + 0x20
18  libwidget_mac.dylib    	0x0133af6c
_ZN17nsMacEventHandler15HandleUKeyEventEPKtlR11EventRecord + 0x2f4
19  libwidget_mac.dylib    	0x0133eaa8
_ZN19nsMacTSMMessagePump32UnicodeNotFromInputMethodHandlerEPK6AEDescPS0_l + 0xe4
20  com.apple.AE           	0x91674a68 _Z20aeDispatchAppleEventPK6AEDescPS_mPh +
0xd0
21  com.apple.AE           	0x9167bf1c _Z10sendToSelfPK6AEDescPS_ll + 0x174
22  com.apple.AE           	0x91678160 AESendMessage + 0x1f0
23  com.apple.AE           	0x9167bacc aeSend + 0xe0
24  com.apple.HIToolbox    	0x928ede08 AESend + 0x6c
25  com.apple.HIToolbox    	0x92848ce8 _Z20HandleTextInputEventP14OpaqueEventRef
+ 0x11c
26  com.apple.HIToolbox    	0x927e31a4
_Z29ToolboxEventDispatcherHandlerP25OpaqueEventHandlerCallRefP14OpaqueEventRefPv
+ 0x204
27  com.apple.HIToolbox    	0x927d25a0 DispatchEventToHandlers + 0x20c
28  com.apple.HIToolbox    	0x927d2758 SendEventToEventTargetInternal + 0x174
29  com.apple.HIToolbox    	0x927e4be8 SendEventToEventTarget + 0x28
30  com.apple.HIToolbox    	0x92851508 SendTSMEvent + 0xe4
31  com.apple.HIToolbox    	0x928173a4 SendUnicodeTextAEToUnicodeDoc + 0x2b0
32  com.apple.HIToolbox    	0x92821544 utDeliverTSMEvent + 0x3fc
33  com.apple.HIToolbox    	0x92851408 TSMKeyEvent + 0x64
34  com.apple.HIToolbox    	0x928028d8 TSMProcessRawKeyEvent + 0x398
35  com.apple.HIToolbox    	0x92834094
_Z27HandleCompatibilityKeyEventP14OpaqueEventRef + 0x68
36  com.apple.HIToolbox    	0x927f52b4
_ZN13HIApplication12EventHandlerEP25OpaqueEventHandlerCallRefP14OpaqueEventRefPv
+ 0x1c0
37  com.apple.HIToolbox    	0x927d24e4 DispatchEventToHandlers + 0x150
38  com.apple.HIToolbox    	0x927d2758 SendEventToEventTargetInternal + 0x174
39  com.apple.HIToolbox    	0x927d6bc0 SendEventToEventTargetWithOptions + 0x28
40  com.apple.HIToolbox    	0x9280b674 _Z19HandleKeyboardEventP14OpaqueEventRefm
+ 0x160
41  com.apple.HIToolbox    	0x927e3198
_Z29ToolboxEventDispatcherHandlerP25OpaqueEventHandlerCallRefP14OpaqueEventRefPv
+ 0x1f8
42  com.apple.HIToolbox    	0x927d25a0 DispatchEventToHandlers + 0x20c
43  com.apple.HIToolbox    	0x927d2758 SendEventToEventTargetInternal + 0x174
44  com.apple.HIToolbox    	0x927e4be8 SendEventToEventTarget + 0x28
45  com.apple.HIToolbox    	0x927e8ae0 ToolboxEventDispatcher + 0x5c
46  com.apple.HIToolbox    	0x927f8d44 TryEventDispatcher + 0x6c
47  com.apple.HIToolbox    	0x927d92b4 GetOrPeekEvent + 0x134
48  com.apple.HIToolbox    	0x927d9590 GetNextEventMatchingMask + 0x1c8
49  com.apple.HIToolbox    	0x927ed01c WNEInternal + 0xa0
50  com.apple.HIToolbox    	0x927fdd34 WaitNextEvent + 0x4c
51  libwidget_mac.dylib    	0x0133cf20
_ZN16nsMacMessagePump8GetEventER11EventRecord + 0x74
52  libwidget_mac.dylib    	0x0133cdfc _ZN16nsMacMessagePump13DoMessagePumpEv + 0x30
53  libwidget_mac.dylib    	0x01330bf8 _ZN10nsAppShell3RunEv + 0x38
54  com.netscape.mozilla   	0x00004ad0 _Z5main1iPPcP11nsISupports + 0x664
55  com.netscape.mozilla   	0x00005024 main + 0x13c
56  com.netscape.mozilla   	0x00001d00 _start + 0x17c
57  com.netscape.mozilla   	0x00001b80 start + 0x30

Thread 1:
0   libSystem.B.dylib      	0x9000b30c select + 0xc
1   libnspr4.dylib         	0x000cf998 poll + 0x188
2   libnspr4.dylib         	0x000cc18c _pr_poll_with_poll + 0x340
3   libnecko.dylib         	0x0102829c _ZN24nsSocketTransportService3RunEv + 0x1c4
4   libxpcom.dylib         	0x0024adc4 _ZN8nsThread4MainEPv + 0x38
5   libnspr4.dylib         	0x000cd5f4 _pt_root + 0xa8
6   libSystem.B.dylib      	0x900247e8 _pthread_body + 0x28

Thread 2:
0   libSystem.B.dylib      	0x900075c8 mach_msg_trap + 0x8
1   libSystem.B.dylib      	0x90007118 mach_msg + 0x38
2   libjvm.dylib           	0x9253c68c JNI_CreateJavaVM_Impl + 0x173c
3   libjvm.dylib           	0x9253c624 JNI_CreateJavaVM_Impl + 0x16d4
4   libjvm.dylib           	0x924fdc9c JVM_GetClassMethodsCount + 0x21c
5   libSystem.B.dylib      	0x900247e8 _pthread_body + 0x28
Status: UNCONFIRMED → NEW
Ever confirmed: true
Keywords: crash, topcrash
OS: Windows 2000 → All
Hardware: PC → All
Summary: crash when using "Find as you type" before the site loaded → crash when using "Find as you type" before the site loaded - M17rc1 [@ nsTypeAheadFind::GetSearchContainers]
Summary: crash when using "Find as you type" before the site loaded - M17rc1 [@ nsTypeAheadFind::GetSearchContainers] → M17rc1 crash [@ nsTypeAheadFind::GetSearchContainers] when using "Find as you type" before the site loaded
I haven't been able to reproduce this for a while, and there aren't a lot of
these crashes in current Talkback data.  If no one is able to reproduce this
with a recent nightly or the latest releases of Mozilla and/or Firefox, we
should probably mark it worksforme.
Summary: M17rc1 crash [@ nsTypeAheadFind::GetSearchContainers] when using "Find as you type" before the site loaded → M17 crash [@ nsTypeAheadFind::GetSearchContainers] when using "Find as you type" before the site loaded
Summary: M17 crash [@ nsTypeAheadFind::GetSearchContainers] when using "Find as you type" before the site loaded → M17 FF09x crash [@ nsTypeAheadFind::GetSearchContainers] when using "Find as you type" before the site loaded
I can reproduce on Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8a3)
Gecko/20040723, though it's not the latest build...

I cannot reproduce on Firefox maybe due to the new FastFind feature.
Summary: M17 FF09x crash [@ nsTypeAheadFind::GetSearchContainers] when using "Find as you type" before the site loaded → M17 crash [@ nsTypeAheadFind::GetSearchContainers] when using "Find as you type" before the site loaded
I can't reproduce crash with 2004080309/SeaMonkey-trunk/W2K
Summary: M17 crash [@ nsTypeAheadFind::GetSearchContainers] when using "Find as you type" before the site loaded → M17 crash [@ nsTypeAheadFind::GetSearchContainers] when using "Find as you type" before the site loaded
Reproduced on Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8a3)
Gecko/20040806.
http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/extensions/typeaheadfind/src/nsTypeAheadFind.cpp&rev=1.84&mark=1519&cvsroot=/cvsroot#1500
Assignee: general → aaronleventhal
Component: Browser-General → Keyboard: Find as you Type
QA Contact: general
Well, (still) can't reproduce, so unlikely i can contribute something to this bug.
Attached patch Patch v1Splinter Review
does a null pointer check and so fixes this bug (not a very good patch, but
it's ok)
Assignee: aaronleventhal → mcsmurf
Status: NEW → ASSIGNED
Attachment #155723 - Flags: review?(timeless)
Comment on attachment 155723 [details] [diff] [review]
Patch v1

>   if (aCanUseDocSelection && selectionPresShell == presShell) {
>-    mFocusedDocSelection->GetRangeAt(0, getter_AddRefs(currentSelectionRange));
>+    if (!mFocusedDocSelection) {
>+      return NS_ERROR_FAILURE;
>+    }

because you're returning here, |else| isn't needed, so remove the |else {| and
its matching |}|

>+    else {
>+      mFocusedDocSelection->GetRangeAt(0, getter_AddRefs(currentSelectionRange));
>+    }
>   }
Attachment #155723 - Flags: superreview?(dmose)
Attachment #155723 - Flags: review?(timeless)
Attachment #155723 - Flags: review+
Comment on attachment 155723 [details] [diff] [review]
Patch v1

sr=dmose, but doesn't this still require aaronl to review it as module owner?
Attachment #155723 - Flags: superreview?(dmose) → superreview+
Should we try to get this into the branches? Jay, is this still on the topcrash
radar?
According to the latest Talkback data,this no longer seems to be a topcrasher. 
There have been some changes in the Find feature, so I'm wondering if this was
fixed or is no longer a problem in current code.

The most recent crashes are with Mozilla 1.7.3 and Firefox 0.9.3.  I don't see
any recent branch crashes for Mozilla or Firefox:
http://talkback-public.mozilla.org/talkback/fastfind.jsp?search=1&searchby=stacksig&match=contains&searchfor=nsTypeAheadFind%3A%3AGetSearchContainers&vendor=All&product=All&platform=All&buildid=&sdate=&stime=&edate=&etime=&sortby=build
I haven't looked at the patch here yet, but I had another crash fix in bug
185824. Could someone look and see if that's helpful on the branch? Looks like
it might even be relevant to this bug.

If not, r=aaronlev on this one.
Blake fixed another Find related topcrash (bug 260887) recently.  Not sure if
anything there would be helpful or related, but just wanted to throw that out there.
This crash is long gone...  is there anything left to checkin anywhere?  If so,
please let us know, otherwise this should be safe to mark fixed according to the
latest Talkback data:
http://talkback-public.mozilla.org/talkback/fastfind.jsp?search=1&searchby=stacksig&match=contains&searchfor=nsTypeAheadFind%3A%3AGetSearchContainers&vendor=All&product=All&platform=All&buildid=&sdate=&stime=&edate=&etime=&sortby=bbid
Flags: blocking1.7.5?
1.7.5 has shipped. Moving request to 1.7.6.
Flags: blocking1.7.5? → blocking1.7.6?
minus for 1.7.6, doesn't appear to be a 1.7 problem anymore
Flags: blocking1.7.6? → blocking1.7.6-
yeah TB doesn't show any new crashes in branch, wfm
Status: ASSIGNED → RESOLVED
Closed: 19 years ago
Resolution: --- → WORKSFORME
Product: Core → SeaMonkey
Crash Signature: [@ nsTypeAheadFind::GetSearchContainers]
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: