116796 - Active Accessibility: Crash in drop down list with Immersion Desktop Running

Status: RESOLVED FIXED

(Core :: XUL, defect, P2)

Description

[Mike Young]

This bug is related to bug 88070. However, it now appears in the Mail compose
window and not form widgets so I've filed a new bug. I've CCd the people from
that bug I thought would be interested. I'm sorry for the spam if you are not.

Talkback IDs: TB864132W and TB864471Y

What happens is this:

Immersion desktop is a program which uses Active accessibility to provide force
feedback signals to peripherals like the Logitech iFeel mouse. Mozilla crashes
whenever it is running if you perform the following actions. 

Steps to Reproduce:

File > New > Message...
Click the "From:" Dropdown list. (This implies that you have multiple accounts)

Expected Results: No Crash and a menu appears
Actual Results: Crash in Accessibility.dll everytime Immersion is running

Reproducable: Always

I'm not sure whether this is reproducable anywhere else in the browser. 

Build ID: 2001122308 Win98
Immersion Desktop 2.1.6

Comment 1

[Mike Young]

Well, this bug is in many more places than just the Mail window. Apparently we
are crashing in *any* drop down listbox. (Not form widgets) 

Changing summary and moving to proper component.

Comment 2

[Mike Young]

reassigning to default owner and QA. (Sorry for the Spam!)

Comment 3

[John Morrison]

nsXULSelectOptionAccessible::GetAccState 
[d:\builds\seamonkey\mozilla\accessible\src\xul\nsXULSelectAccessible.cpp, line 
137] 
Accessible::get_accState 
[d:\builds\seamonkey\mozilla\widget\src\windows\Accessible.cpp, line 393] 
TRACKER.DLL + 0x1327 (0x009b1327) 
0x8b55b2b1 

-> aaronl to ponder

Comment 4

[Aaron Leventhal]

Ha, I downloaded Immersion desktop so I should experience these bugs a lot
sooner from now on. I have reproduced the crash.

Comment 5

[Aaron Leventhal]

Attachment: Tested -- works

Comment 6

[John Gaunt (redfive)]

Comment on attachment 63873 [details] [diff] [review]
Tested -- works

r=jgaunt

Comment 7

[Chris Waterson]

Feels like wallpaper. Why can all these pointers be null?

Comment 8

[Aaron Leventhal]

Not always sure what happens -- we have to be thread safe. Sometimes the outer
process might ask for the selection before the selection exists. There must be
times when there is no selection. Looks to me like we need to handle the case
where there is no selection.

Comment 9

[John Gaunt (redfive)]

Hmmm, did some digging. turns out we were QIing to someting it wasn't. Heh. We
have clearance to add the implements="nsIDOMXULSelectControlItemElement" to
menulist-base in menu.xml

I'm going to test it and then post a patch

Comment 10

[John Gaunt (redfive)]

Attachment: one line fix in xbl file

Just needed to add an interface to the widget so we could QI it properly

Comment 11

[Aaron Leventhal]

Comment on attachment 64005 [details] [diff] [review]
one line fix in xbl file

r=aaronl

Comment 12

[Aaron Leventhal]

-> John, who wrote the fix

Comment 13

[John Gaunt (redfive)]

accepting and marking other as it is affecting at least 2 windows versions (98,2k)

appealing to waterson for re-sr

Comment 14

[Chris Waterson]

Comment on attachment 64005 [details] [diff] [review]
one line fix in xbl file

sr=waterson, assuming that is actually implements this interface! ;-)

Comment 15

[John Gaunt (redfive)]

checked in to the trunk

Comment 16

[Aaron Leventhal]

*** Bug 119667 has been marked as a duplicate of this bug. ***