[e10s] Crash on print preview

RESOLVED FIXED in Firefox 40

Status

()

defect
--
critical
RESOLVED FIXED
4 years ago
4 years ago

People

(Reporter: jonathan, Assigned: smaug)

Tracking

({crash})

40 Branch
mozilla40
Points:
---

Firefox Tracking Flags

(e10s+, firefox40 fixed)

Details

(crash signature)

Attachments

(1 attachment)

User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:40.0) Gecko/20100101 Firefox/40.0
Build ID: 20150426030248

Steps to reproduce:

nightly e10s
about:home
about:blank
print preview
click on page, or mouse down and move.

(clicking end of most documents also crashes)



Actual results:

content crash
windows bp-de63ce3d-768f-45de-9b6c-952bf2150426
linux bp-14360e23-6b67-441b-a1f7-14c5c2150426
Crash Signature: [@ nsIContent::GetPrimaryFrame()] [@ mozilla::EventStateManager::GenerateDragGesture(nsPresContext*, mozilla::WidgetMouseEvent*)]
Keywords: crash
Status: UNCONFIRMED → NEW
tracking-e10s: --- → ?
Ever confirmed: true
OS: Unspecified → All
Hardware: Unspecified → All
Reproduced with 2015-04-27-03-02-07-mozilla-central-firefox-40.0a1.ru.linux-x86_64.
Severity: normal → critical
Component: Untriaged → DOM: Events
Product: Firefox → Core
Jonathan, are you able to reproduce this with e10s disabled?
Flags: needinfo?(jonathan)
Only crashes with e10s
Flags: needinfo?(jonathan)
Jonathan,  assuming this is a regression, can you determine the Nightly build this bug first appeared in?
Flags: needinfo?(jonathan)
I can reproduce this. Taking.
Posted patch v1Splinter Review
We expect that if mGestureDownContent is non-null, so should mGestureDownFrameOwner be. And usually those should be the same.
(See the comment in EventStateManager.h)
Assignee: nobody → bugs
Attachment #8601525 - Flags: review?(enndeakin)
Flags: needinfo?(jonathan)
Attachment #8601525 - Flags: review?(enndeakin) → review+
https://hg.mozilla.org/mozilla-central/rev/fffaa2d9be9a
Status: NEW → RESOLVED
Closed: 4 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla40
You need to log in before you can comment on or make changes to this bug.