777706 - Unable to tap the Twitter sign-in button

Status: RESOLVED FIXED

(Core :: DOM: Core & HTML, defect)

Description

[Aaron Train [:aaronmt]]

Tapping the sign-in button simply flashes the button orange.

--
Nightly (07/26)
Samsung Galaxy Nexus (Android 4.1.1)

Comment 1

[Aaron Train [:aaronmt]]

Interesting

E/GeckoConsole( 2792): [JavaScript Error: "Error: Permission denied to access property '0'" {file: "https://mobile.twitter.com/" line: 3965}]

Comment 2

[Kartikaya Gupta (email:[e-mail])]

If this is a recent regression it may have been caused by bug 773427 or bug 773431.

Comment 3

[Aaron Train [:aaronmt]]

http://hg.mozilla.org/integration/mozilla-inbound/pushloghtml?fromchange=98a7b0f3b539&tochange=3ff93386d03f

Comment 4

[Kartikaya Gupta (email:[e-mail])]

For some reason having our event listener registered in capture mode instead of bubble mode (which is what the patch from bug 773431 does) results in the event objects touches property to become inaccessible. This is what is causing the script error in comment 1, and what is causing the link to not load. Simplified test page at http://people.mozilla.org/~kgupta/bug/777706.html - click on the text should result in an alert dialog in FF for Android, but currently does not.

Comment 5

[Kartikaya Gupta (email:[e-mail])]

Commenting out the check for "aEvent.touches.length > 1" in browser.js fixes this, so it's probably some sort of javascript protection mechanism. i.e. if we access aEvent.touches from browser.js first then it becomes inaccessible to the content page, but if they access it first then it's all good.

Comment 6

[Wesley Johnston (:wesj)]

Smaug pointed out this might be a regression from bug 734503. Backing it out locally to test.

Comment 7

[Wesley Johnston (:wesj)]

Backing out bug 734503 kills the security exceptions, but the array method of getting touches (i.e. event.touches[0]) return undefined even though event.touches.length === 1. Going to bug some more people....

Comment 8

[Wesley Johnston (:wesj)]

I have almost no idea how this works, but it looks like the dom-bindings are doing some caching of their own. Is that causing us to get something that's been wrapped incorrectly when the page tries to access it later?

http://mxr.mozilla.org/mozilla-central/source/js/xpconnect/src/dombindingsgen.py#95

Will keep looking at this tomorrow.

Comment 9

[Boris Zbarsky [:bzbarsky]]

Hmm.  So the touchlist uses the document as the parent if created via createTouchList.

But if it's gotten off an event it uses the _event_ as the parent.

And I bet we've got no parenting on the event object so the touchlist gets wrapped in the chrome scope, and all's bad after that.

This used to work because the touchlist didn't use to be a wrappercache, so it got separately wrapped in every single scope....

Would it make any sense to use the event target as a parent instead of the event?

Comment 10

[Kyle Huey (Exited; not receiving bugmail, old account, do not use)]

Which event target?

Comment 11

[Kyle Huey (Exited; not receiving bugmail, old account, do not use)]

Ok, I realized that's a stupid question, because events can't end up bubbling from chrome to content (I hope).

Comment 12

[Boris Zbarsky [:bzbarsky]]

Events cannot bubble from chrome to content, no.

The right event target is probably the explicitOriginalTarget or whatnot.  Basically, whatever will only be affected by the retargeting when leaving native anonymous content.  Assuming we have such a thing.

Comment 13

[Olli Pettay [:smaug][[e-mail]]]

There isn't event target when event hasn't been dispatched.

Comment 14

[Boris Zbarsky [:bzbarsky]]

But in those situations you won't have script getting the touches off the event either, right?

Comment 15

[Boris Zbarsky [:bzbarsky]]

I guess events can get redispatched, though.  Hrm.

Can we just associate the event with a window and use that window as the parent here?  I know you were talking about doing that for events in general.

Comment 16

[Olli Pettay [:smaug][[e-mail]]]

(In reply to Boris Zbarsky (:bz) from comment #15)
> Can we just associate the event with a window and use that window as the
> parent here? 
Yes, that is my plan for ParisBindings+Events, but we need to fix this bug in some other way
asap, I think.

Comment 17

[Wesley Johnston (:wesj)]

Attachment: Backout patch

This backs out bug 734503 and the touchlist parts of bug 768669. Using this twitter and kat's test page are fixed.

Comment 18

[Olli Pettay [:smaug][[e-mail]]]

Do we need the backout also in aurora, or even in beta?

Comment 19

[Kartikaya Gupta (email:[e-mail])]

I would like to have this backed out in aurora (16) and beta (15), because then I can uplift bug 773431 to those channels without regressing twitter.

Comment 20

[Wesley Johnston (:wesj)]

https://hg.mozilla.org/integration/mozilla-inbound/rev/84ae895140f3

Comment 21

[Wesley Johnston (:wesj)]

Going to wait to make sure these are ok on central before requesting approval. That ok kats?

Comment 22

[Kartikaya Gupta (email:[e-mail])]

Sure, sounds good.

Comment 23

[Ryan VanderMeulen [:RyanVM]]

https://hg.mozilla.org/mozilla-central/rev/84ae895140f3

Comment 24

[Matt Brubeck (:mbrubeck)]

Ready to request Aurora/Beta approval?

Comment 25

[Wesley Johnston (:wesj)]

Comment on attachment 647612 [details] [diff] [review]
Backout patch

[Approval Request Comment]
Bug caused by (feature/regressing bug #): regression from 734503 and 768669. backout of the relevent parts of both patches. unnoticed until bug 773431 made it visible. can't move bug 773431 forward without this.
User impact if declined: Any touches that we (or extensions) take in chrome suddenly make them inaccessible by content
Testing completed (on m-c, etc.): landed on mc last week. No regressions I know of
Risk to taking this patch (and alternatives if risky): should just be reverting us to the behavior gecko has had since forever before this
String or UUID changes made by this patch: none

Comment 26

[Lukas Blakk [:lsblakk] use ?needinfo]

Comment on attachment 647612 [details] [diff] [review]
Backout patch

approving backout for branches.

Comment 27

[Wesley Johnston (:wesj)]

I apologize. This isn't needed on beta.

https://hg.mozilla.org/mozilla-central/rev/84ae895140f3

Comment 28

[Scoobidiver (away)]

Landed on Aurora:
http://hg.mozilla.org/releases/mozilla-aurora/rev/0004e9b268ae