10145 - Crash on exiting the Create Profile Wizard (while closing toplevel window)

Status: VERIFIED WORKSFORME

(Core :: Web Painting, defect, P3)

Description

[racham]

CreateProfileWizard is the first thing we see when we run the apprunner, if the
number of the profiles is zero. So, to reproduce the scenario, please delete
mozregistry.dat. After deleting that file run the Apprunner. A toplevel window
(created by the call CreateTopLevelWindow()) displays the CreateProfileWizard
pages. On clicking the Finish button on the Wizard, it does the profiles stuff
and a call to CloseWindow() of toolkitCore happens at that stage to close the
toplevel window. The app crashes at this stage. It seemed to be linked to
DocumentViewerImpl and nsView(s). Here is the stack trace.

NTDLL! 77f76148()
nsDebug::PreCondition(const char * 0x01a227f8, const char * 0x01a227e4, const
char * 0x01a227c4, int 1124) line 143 + 13 bytes
nsView::GetChild(const nsView * const 0x019149d0, int 0, nsIView * & 0x0193c290)
line 1124 + 37 bytes
nsView::~nsView() line 94
nsView::`scalar deleting destructor'(unsigned int 1) + 15 bytes
nsView::Destroy(nsView * const 0x019149d0) line 247 + 34 bytes
nsViewManager::Release(nsViewManager * const 0x01914c90) line 213
nsCOMPtr<nsIViewManager>::~nsCOMPtr<nsIViewManager>() line 387
DocumentViewerImpl::~DocumentViewerImpl() line 295 + 44 bytes
DocumentViewerImpl::`scalar deleting destructor'(unsigned int 1) + 15 bytes
DocumentViewerImpl::Release(DocumentViewerImpl * const 0x0160c1f0) line 237 + 99
bytes
nsWebShell::Destroy(nsWebShell * const 0x00c9be00) line 1114 + 27 bytes
nsWebShellWindow::Close(nsWebShellWindow * const 0x00c9a700) line 426
nsToolkitCore::CloseWindow(nsToolkitCore * const 0x019e6efc, nsIDOMWindow *
0x00c9dc78) line 390
ToolkitCoreCloseWindow(JSContext * 0x0196ba40, JSObject * 0x00e1d678, unsigned
int 1, long * 0x00e2fad4, long * 0x0012dd94) line 343 + 21 bytes
js_Invoke(JSContext * 0x0196ba40, unsigned int 1, unsigned int 0) line 654 + 26
bytes
js_Interpret(JSContext * 0x0196ba40, long * 0x0012e5bc) line 2225 + 15 bytes
js_Invoke(JSContext * 0x0196ba40, unsigned int 0, unsigned int 0) line 670 + 13
bytes
js_Interpret(JSContext * 0x0196ba40, long * 0x0012eda0) line 2225 + 15 bytes
js_Invoke(JSContext * 0x0196ba40, unsigned int 0, unsigned int 0) line 670 + 13
bytes
js_Interpret(JSContext * 0x0196ba40, long * 0x0012f584) line 2225 + 15 bytes
js_Invoke(JSContext * 0x0196ba40, unsigned int 1, unsigned int 2) line 670 + 13
bytes
js_InternalCall(JSContext * 0x0196ba40, JSObject * 0x00e1cf48, long 14798672,
unsigned int 1, long * 0x0012f6c8, long * 0x0012f6d0) line 747 + 15 bytes
JS_CallFunctionValue(JSContext * 0x0196ba40, JSObject * 0x00e1cf48, long
14798672, unsigned int 1, long * 0x0012f6c8, long * 0x0012f6d0) line 2643 + 29
bytes
nsJSEventListener::HandleEvent(nsIDOMEvent * 0x019d6bb0) line 97 + 34 bytes
nsEventListenerManager::HandleEvent(nsIPresContext & {...}, nsEvent *
0x0012f944, nsIDOMEvent * * 0x0012f810, unsigned int 3, nsEventStatus &
nsEventStatus_eIgnore) line 586 + 21 bytes
nsGenericElement::HandleDOMEvent(nsIPresContext & {...}, nsEvent * 0x0012f944,
nsIDOMEvent * * 0x0012f810, unsigned int 1, nsEventStatus &
nsEventStatus_eIgnore) line 782
nsHTMLButtonElement::HandleDOMEvent(nsHTMLButtonElement * const 0x019d159c,
nsIPresContext & {...}, nsEvent * 0x0012f944, nsIDOMEvent * * 0x00000000,
unsigned int 1, nsEventStatus & nsEventStatus_eIgnore) line 383 + 31 bytes
nsEventStateManager::CheckForAndDispatchClick(nsEventStateManager * const
0x019d3320, nsIPresContext & {...}, nsMouseEvent * 0x0012fb9c, nsEventStatus &
nsEventStatus_eIgnore) line 668 + 31 bytes
nsEventStateManager::PostHandleEvent(nsEventStateManager * const 0x019d3320,
nsIPresContext & {...}, nsGUIEvent * 0x0012fb9c, nsIFrame * 0x019d5bb0,
nsEventStatus & nsEventStatus_eIgnore, nsIView * 0x01999a30) line 194 + 24 bytes
PresShell::HandleEvent(PresShell * const 0x019b2054, nsIView * 0x01999a30,
nsGUIEvent * 0x0012fb9c, nsEventStatus & nsEventStatus_eIgnore) line 2215 + 43
bytes
nsView::HandleEvent(nsView * const 0x01999a30, nsGUIEvent * 0x0012fb9c, unsigned
int 28, nsEventStatus & nsEventStatus_eIgnore, int & 0) line 833
nsViewManager::DispatchEvent(nsViewManager * const 0x01999c50, nsGUIEvent *
0x0012fb9c, nsEventStatus & nsEventStatus_eIgnore) line 1736
HandleEvent(nsGUIEvent * 0x0012fb9c) line 67
nsWindow::DispatchEvent(nsWindow * const 0x019b5534, nsGUIEvent * 0x0012fb9c,
nsEventStatus & nsEventStatus_eIgnore) line 489 + 10 bytes
nsWindow::DispatchWindowEvent(nsGUIEvent * 0x0012fb9c) line 514
nsWindow::DispatchMouseEvent(unsigned int 301, nsPoint * 0x00000000) line 3244 +
15 bytes
ChildWindow::DispatchMouseEvent(unsigned int 301, nsPoint * 0x00000000) line
3397
nsWindow::ProcessMessage(unsigned int 514, unsigned int 0, long 721224, long *
0x0012fdc0) line 2512 + 24 bytes
nsWindow::WindowProc(HWND__ * 0x00070220, unsigned int 514, unsigned int 0, long
721224) line 578 + 27 bytes
USER32! 77e71250()

Comment 1

[Patrick C. Beard]

I can't reproduce this on WinNT 4.0 with my build from 7/20/99.

Comment 2

[Grace Bush]

build 1999072108 was successful in exiting Create Profile Wizard, launching
apprunner