103860 - M097, N623 and Trunk crash [@ nsXULWindow::GetPositionAndSize]

Status: VERIFIED WORKSFORME

(Core :: Layout, defect)

Description

[Stephane Saux]

I have configured N6 to start messenger and AIM, and I use SSL/IMAP. When I
start the application, numerous pwd dialogs come up:
Master Password for the IButton (a hardware device where my certs are located).
SecurID dialog for AIM
Once there have been entered, a cert picker dialog shows up.
When the crash occurs, I don't see the cert picker.
The talkback IDs are:
http://cyclone/reports/SingleIncidentInfo.cfm?dynamicBBID=36467822
http://cyclone/reports/SingleIncidentInfo.cfm?dynamicBBID=36422243
Another bug with the same stack trace occured with the 10/05 build
but I've seen this happens more reliably with the 10/08 build.
10/05 talkback ID:
http://cyclone/reports/SingleIncidentInfo.cfm?dynamicBBID=36440881

Comment 1

[Stephane Saux]

SW -> add pdt.
crash keyword.

Comment 2

[Marc Attinasi]

nsXULWindow::GetPositionAndSize
[d:\builds\seamonkey\mozilla\xpfe\appshell\src\nsXULWindow.cpp, line 442]
nsXULWindow::Center
[d:\builds\seamonkey\mozilla\xpfe\appshell\src\nsXULWindow.cpp, line 480]
nsXULWindow::OnChromeLoaded
[d:\builds\seamonkey\mozilla\xpfe\appshell\src\nsXULWindow.cpp, line 744]
nsWebShellWindow::OnStateChange
[d:\builds\seamonkey\mozilla\xpfe\appshell\src\nsWebShellWindow.cpp, line 1242]
nsDocLoaderImpl::FireOnStateChange
[d:\builds\seamonkey\mozilla\uriloader\base\nsDocLoader.cpp, line 1095]
nsDocLoaderImpl::doStopDocumentLoad
[d:\builds\seamonkey\mozilla\uriloader\base\nsDocLoader.cpp, line 735]
nsDocLoaderImpl::DocLoaderIsEmpty
[d:\builds\seamonkey\mozilla\uriloader\base\nsDocLoader.cpp, line 632]
nsDocLoaderImpl::OnStopRequest
[d:\builds\seamonkey\mozilla\uriloader\base\nsDocLoader.cpp, line 563]
nsLoadGroup::RemoveRequest
[d:\builds\seamonkey\mozilla\netwerk\base\src\nsLoadGroup.cpp, line 521]
imgRequestProxy::OnStopRequest
[d:\builds\seamonkey\mozilla\modules\libpr0n\src\imgRequestProxy.cpp, line 385]
imgRequest::OnStopRequest
[d:\builds\seamonkey\mozilla\modules\libpr0n\src\imgRequest.cpp, line 681]
ProxyListener::OnStopRequest
[d:\builds\seamonkey\mozilla\modules\libpr0n\src\imgLoader.cpp, line 397]
nsJARChannel::OnStopRequest
[d:\builds\seamonkey\mozilla\netwerk\protocol\jar\src\nsJARChannel.cpp, line 582]
nsOnStopRequestEvent::HandleEvent
[d:\builds\seamonkey\mozilla\netwerk\base\src\nsRequestObserverProxy.cpp, line 162]
PL_HandleEvent [d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c, line 591]
PL_ProcessPendingEvents [d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c,
line 524]
_md_EventReceiverProc [d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c, line
1072] 

crashing in nsXULWindow - not my area. Over to hyatt - he can fix anything.

Comment 3

[Stephane Saux]

Notes:
Because of the way I've configured the client, I'm bombarded with dialogs at
startup. There's the IButton master password dialog, the securId dialog, and a
cert chooser for picking the client-auth cert to use to identify myself to the
mail server.  The  cert chooser can only appear after the IButton master
password has been entered.

When the app crashes, the cert chooser fails to appear (or maybe an attempt to
display it causes the crash.)  If it appears there is no crash.

Comment 4

[greer]

Talkback shows this signature in M094 and N610 as well as the current branch 
builds. 
Adjusting the summary and keywords for talkback tracking. cc'ing talkback.

Comment 5

[Jaime Rodriguez, Jr.]

what are the chances this is gonna make the 094 branch?

Comment 6

[Peter Trudelle]

Can QA reproduce this?

Comment 7

[Chris Petersen]

I don't have my build setup with certificates so I don't see this problem (
2001-10-15-04). Stephane, is this still occuring ?

Comment 8

[Stephane Saux]

Not for me in the last few 0.9.4 branch builds.  I haven't checked the talkbacks.

Comment 9

[Jaime Rodriguez, Jr.]

PDT-, because the reporter and QA can not reproduce this one.

Comment 10

[greer]

M095 has two crashes with comments that may help repro this bug:
-(36740922) Windows 98  4.10 build 67766446 opened an ctrl-L dialog and typed
"mga.com"  pressed enter  and it bombed.

-(36772721) Windows NT  4.0 build 1381 loaded that url off a graphical link from
photo.net  page loaded part of the way  i refused some cookies  an
d it crashed.

One M094 user has crashed on Linux with this comment:
- (36671882) I was editing a page in Composer. This problem can be easily
reproduced. Here's how: * Click on the image button to insert an image. * Type
the name of the file, but don't enter any alternate text. * Press ENTER three
times really fast (the second time is to cancel the warning about there being no
              alternate text). If you press ENTER slowly, giving the dialog box
enough time to come up, everything works fine. If you press ENTER too quickly,
then               it crashes and burns. This is easy to reproduce. If you're
having any trouble reproducing this problem, please email me and I'll help you.

I haven't been able to crash with these scenarios on Windows NT4. Can somebody
with a Linux box take a look?

 Updating OS to "All"  

Comment 11

[Peter Trudelle]

greer: any reason to suspect those crashes are the same as this?  
Has anyone seen incidents in recent builds?  Any reason for this to be still
marked topcrash?

Comment 12

[Jay Patel [:jay]]

Peter: I'm not sure if those crashes that Tom mentioned are the same as the one
originally reported.  And I don't know if this one is either:

 Incident ID 1501587   
Stack Signature  nsXULWindow::GetPositionAndSize() 775ca620
Trigger Time 2002-01-10 15:46:14
Email Address [e-mail]
URL visited buyerzone.com
User Comments had a search result window open from google, clicked on a google
ad at the top of the results for buyerzone.com (opened it in a new window) and
refused a few of their cookies, then the browser froze.
Build ID 2002010408
Product ID MozillaTrunk
Platform
Operating System LinuxIntel
Module
Trigger Reason SIGSEGV: Segmentation Fault: (signal 11)
Stack Trace
nsXULWindow::GetPositionAndSize()
nsXULWindow::Center()
nsXULWindow::OnChromeLoaded()
nsWebShellWindow::OnStateChange()
nsDocLoaderImpl::FireOnStateChange()
nsDocLoaderImpl::doStopDocumentLoad()
nsDocLoaderImpl::DocLoaderIsEmpty()
nsDocLoaderImpl::OnStopRequest()
nsLoadGroup::RemoveRequest()
imgRequestProxy::OnStopRequest()
imgRequest::OnStopRequest()
ProxyListener::OnStopRequest()
nsJARChannel::OnStopRequest()
nsOnStopRequestEvent::HandleEvent()
nsARequestObserverEvent::HandlePLEvent()
PL_HandleEvent()
PL_ProcessEventsBeforeID()
processQueue()
nsVoidArray::EnumerateForwards()
nsAppShell::ProcessBeforeID()
handle_gdk_event()
libgdk-1.2.so.0 + 0x17137 (0x4033f137)
libglib-1.2.so.0 + 0x10309 (0x4036d309)
libglib-1.2.so.0 + 0x10913 (0x4036d913)
libglib-1.2.so.0 + 0x109c5 (0x4036d9c5)
nsAppShell::DispatchNativeEvent()
nsXULWindow::ShowModal()
nsWebShellWindow::ShowModal()
nsContentTreeOwner::ShowAsModal()
nsWindowWatcher::OpenWindowJS()
nsWindowWatcher::OpenWindow()
nsPromptService::DoDialog()
nsPromptService::ConfirmEx()
nsPrompt::ConfirmEx()
permission_CheckConfirmYN()
Permission_Check()
cookie_SetCookieString()
COOKIE_SetCookieStringFromHttp()
nsCookieService::SetCookieStringFromHttp()
nsCookieHTTPNotify::OnExamineResponse()
XPTC_InvokeByIndex()
nsProxyObject::Post()
nsProxyEventObject::CallMethod()
PrepareAndDispatch()
nsXPTCStubBase::Stub4()
nsHttpHandler::OnExamineResponse()
nsHttpChannel::ProcessResponse()
nsHttpChannel::OnStartRequest()
nsOnStartRequestEvent::HandleEvent()
nsARequestObserverEvent::HandlePLEvent()
PL_HandleEvent()
PL_ProcessPendingEvents()
nsEventQueueImpl::ProcessPendingEvents()
event_processor_callback()
our_gdk_io_invoke()
libglib-1.2.so.0 + 0xec40 (0x4036bc40)
libglib-1.2.so.0 + 0x10309 (0x4036d309)
libglib-1.2.so.0 + 0x10913 (0x4036d913)
libglib-1.2.so.0 + 0x109c5 (0x4036d9c5)
nsAppShell::DispatchNativeEvent()
nsXULWindow::ShowModal()
nsWebShellWindow::ShowModal()
nsContentTreeOwner::ShowAsModal()
nsWindowWatcher::OpenWindowJS()
nsWindowWatcher::OpenWindow()
nsPromptService::DoDialog()
nsPromptService::ConfirmEx()
nsPrompt::ConfirmEx()
permission_CheckConfirmYN()
Permission_Check()
cookie_SetCookieString()
COOKIE_SetCookieStringFromHttp()
COOKIE_SetCookieStringFromHttp()
nsCookieService::SetCookieStringFromHttp()
nsCookieHTTPNotify::OnExamineResponse()
XPTC_InvokeByIndex()
nsProxyObject::Post()
nsProxyEventObject::CallMethod()
PrepareAndDispatch()
nsXPTCStubBase::Stub4()
nsHttpHandler::OnExamineResponse()
nsHttpChannel::ProcessResponse()
nsHttpChannel::OnStartRequest()
nsOnStartRequestEvent::HandleEvent()
nsARequestObserverEvent::HandlePLEvent()
PL_HandleEvent()
PL_ProcessPendingEvents()
nsEventQueueImpl::ProcessPendingEvents()
event_processor_callback()
our_gdk_io_invoke()
libglib-1.2.so.0 + 0xec40 (0x4036bc40)
libglib-1.2.so.0 + 0x10309 (0x4036d309)
libglib-1.2.so.0 + 0x10913 (0x4036d913)
libglib-1.2.so.0 + 0x10aac (0x4036daac)
libgtk-1.2.so.0 + 0x8d6f7 (0x402906f7)
nsAppShell::Run()
nsAppShellService::Run()
main1()
main()
libc.so.6 + 0x18a42 (0x40492a42) 

That is a recent crash on the MozillaTrunk with the same stack signature and a
similar looking stack.  If we can determine it is related to the original
problem I can update this bug further with more info....otherwise we should mark
this one worksforme and I can log a new bug on more recent crashes with the
nsXULWindow::GetPositionAndSize stack signature.

Also, is this still really a "blocker"?

Comment 13

[Peter Trudelle]

Whoever marked it as a blocker might want to downgrade it.

Comment 14

[Dan M]

stack traces in comments 2 and 12 make this look like bug 120430, fixed on 24 jan.

Comment 15

[Peter Trudelle]

There are lots of crashes with this stack sig in builds since then, especially 
2002020409, but nothing in the last 2 weeks.

Comment 16

[Shiva Thirumazhusai]

nominating topcrash bugs for nsbeta1. 

Comment 17

[Peter Trudelle]

nsbeta1- per Nav triage team, no sign of recent crashes, nor reproducible case

Comment 18

[Jay Patel [:jay]]

Addin N623 to summary, since this crash last occurred with Netscape 6.23.  No
crashes have been reported since then, so making topcrash- and marking this
worksforme.

Comment 19

[Jay Patel [:jay]]

v.wfm

Comment 20

[Jay Patel [:jay]]

v.wfm for real this time.