1109909 - e10s + master password sheet => crash

Status: RESOLVED DUPLICATE of bug 1051842

(Firefox :: Untriaged, defect)

Description

[clements]

User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:37.0) Gecko/20100101 Firefox/37.0
Build ID: 20141210030207

Steps to reproduce:

0) Make sure all extensions are disabled, only plugin enabled is OpenH264.
1) In Nightly, enable e10s, and set a master password using prefs pane.
2) Quit nightly.
3) Start nightly.
4) Navigate to page requiring password-fill-in.
5) See master password sheet slide down, with blinking cursor in box.
6) type a key--say, 'a'. 
7) BANG! core dump.



Actual results:

Core dump.


Expected results:

Not core dump. Should have seen a dot in the text box in the master password entry field.

Hard to imagine this wouldn't have been reported before... I tried starting Firefox in "safe mode," but apparently this also disables e10s (at least, none of the tab titles are underlined).

Comment 1

[Jim Mathies [:jimm]]

Are there any recent crash signatures listed under about:crashes?

Comment 2

[clements]

Ah! Didn't know it existed, lovely.

Yes, many many crash signatures.

The most recent has id "ID: 9acad048-bff3-4b99-a9bb-079512141210", which presumably allows you to look it up. The salient feature that jumps out at me is this, the App Notes:

AdapterVendorID: 0x8086, AdapterDeviceID: 0x 126GL Layers? GL Context? GL Context+ GL Layers+ 
Bug 893973: A password editor has focus, but not in secure input mode
view [ChildView 0x1178f9040, gecko child 0x121fcc400, frame {{0, 0}, {474, 156}}], window [<BaseWindow: 0x124f360e0>], key event [NSEvent: type=KeyDown loc=(-481,217) time=222484.0 flags=0x100 win=0x124f360e0 winNum=39824 ctxt=0x0 chars="a" unmodchars="a" repeat=0 keyCode=0], window is key 1, is fullscreen 0, app is active 1

Looks like four(?) threads crashed all of them in AppKit (if I'm reading those thread summaries correctly.

Comment 3

[Jim Mathies [:jimm]]

Steve, does this crash stack ring any bells? Doesn't really look e10s specific, although the message manager is on the stack down at the bottom.

-[ChildView keyDown:]

https://crash-stats.mozilla.com/report/index/9acad048-bff3-4b99-a9bb-079512141210

Comment 4

[Steven Michaud [:smichaud] (Retired)]

This probably is a dup of bug 1051842.

The [@ -[ChildView keyDown:] ] crashes can happen in both e10s and non-e10s mode, but are much more common with e10s.  And we have two bugs for this signature -- bug 893973 for the non-e10s crashes and bug 1051842 for the e10s ones.

In case you're not aware:  There's a long standing Socorro bug that prevents bug numbers from showing up in lists of crashes if their signatures use Objective-C syntax.