13081 - Crash mousing over bookmarks menu title in menubar

Status: VERIFIED DUPLICATE of bug 14540

(Core Graveyard :: RDF, defect, P3)

Description

[Peter Trudelle]

9/2 optimized bits, win98
Launch
Mouse over bookmarks menu title in menubar
disk churns a few seconds, then crash, 100%
no problem mousing over the rest of the menubar.

Comment 1

[Chris Waterson]

this WORKSFORME. could you post a stack trace, make sure your profile is
installed correctly, etc.

Comment 2

[Peter Trudelle]

Attachment: Crashes with these bookmarks.

Comment 3

[Peter Trudelle]

This is the optimized build, is there any way to get a stack trace? Also, how
would I determine whether the profile is installed correctly?  Everything else
works correctly.

Comment 4

[Peter Trudelle]

After deleting a bunch of bookmarks, it no longer crashes. Same bookmarks file
seems fine in 4.6.1.

Comment 5

[Chris Waterson]

robert, can you look at this?

Comment 6

[Robert John Churchill]

A stack trace is below.  I'm assuming that this is either a Hyatt (XP_Menu) bug,
or a Eric Vaughn (boxes) bug. I'm going to throw it at David and see what he
thinks. David?

nsBoxFrame::GetChildBoxInfo(nsIPresContext & {...}, const nsHTMLReflowState &
{...}, nsIFrame * 0x02cc1568, nsCalculatedBoxInfo & {...}) line 235
nsBoxFrame::GetBoxInfo(nsBoxFrame * const 0x008f8808, nsIPresContext & {...},
const nsHTMLReflowState & {...}, nsBoxInfo & {...}) line 1572 + 44 bytes
nsBoxFrame::Reflow(nsBoxFrame * const 0x008f87cc, nsIPresContext & {...},
nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, unsigned int & 0)
line 401
nsContainerFrame::ReflowChild(nsIFrame * 0x008f87c8, nsIPresContext & {...},
nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, unsigned int & 0)
line 439 + 28 bytes
nsMenuFrame::Reflow(nsMenuFrame * const 0x02bdb7e8, nsIPresContext & {...},
nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, unsigned int & 0)
line 491 + 34 bytes
nsBoxFrame::FlowChildAt(nsIFrame * 0x02bdb7e4, nsIPresContext & {...},
nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, unsigned int & 0,
nsCalculatedBoxInfo & {...}, int & 0, nsString & {...}) line 968
nsBoxFrame::FlowChildren(nsIPresContext & {...}, nsHTMLReflowMetrics & {...},
const nsHTMLReflowState & {...}, unsigned int & 0, nsRect & {...}) line 599
nsBoxFrame::Reflow(nsBoxFrame * const 0x0090bddc, nsIPresContext & {...},
nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, unsigned int & 0)
line 434
nsBoxFrame::FlowChildAt(nsIFrame * 0x0090bdd8, nsIPresContext & {...},
nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, unsigned int & 0,
nsCalculatedBoxInfo & {...}, int & 0, nsString & {...}) line 968
nsBoxFrame::FlowChildren(nsIPresContext & {...}, nsHTMLReflowMetrics & {...},
const nsHTMLReflowState & {...}, unsigned int & 0, nsRect & {...}) line 599
nsBoxFrame::Reflow(nsBoxFrame * const 0x0090a298, nsIPresContext & {...},
nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, unsigned int & 0)
line 434
nsToolboxFrame::Reflow(nsToolboxFrame * const 0x0090a298, nsIPresContext &
{...}, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, unsigned
int & 0) line 362 + 25 bytes
nsBoxFrame::FlowChildAt(nsIFrame * 0x0090a294, nsIPresContext & {...},
nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, unsigned int & 0,
nsCalculatedBoxInfo & {...}, int & 0, nsString & {...}) line 968
nsBoxFrame::FlowChildren(nsIPresContext & {...}, nsHTMLReflowMetrics & {...},
const nsHTMLReflowState & {...}, unsigned int & 0, nsRect & {...}) line 599
nsBoxFrame::Reflow(nsBoxFrame * const 0x00908340, nsIPresContext & {...},
nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, unsigned int & 0)
line 434
nsContainerFrame::ReflowChild(nsIFrame * 0x0090833c, nsIPresContext & {...},
nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, unsigned int & 0)
line 439 + 28 bytes
RootFrame::Reflow(RootFrame * const 0x034f9284, nsIPresContext & {...},
nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, unsigned int & 0)
line 330
nsContainerFrame::ReflowChild(nsIFrame * 0x034f9280, nsIPresContext & {...},
nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, unsigned int & 0)
line 439 + 28 bytes
ViewportFrame::Reflow(ViewportFrame * const 0x034f1e54, nsIPresContext & {...},
nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, unsigned int & 0)
line 516
nsHTMLReflowCommand::Dispatch(nsHTMLReflowCommand * const 0x03aee8d0,
nsIPresContext & {...}, nsHTMLReflowMetrics & {...}, const nsSize & {...},
nsIRenderingContext & {...}) line 140
PresShell::ProcessReflowCommands(PresShell * const 0x029f87c0) line 1234
PresShell::ExitReflowLock(PresShell * const 0x029f87c0) line 586
PresShell::AttributeChanged(PresShell * const 0x029f87c8, nsIDocument *
0x029cd5b0, nsIContent * 0x0357a7d0, nsIAtom * 0x02a890d0, int -1) line 1644
XULDocumentImpl::AttributeChanged(XULDocumentImpl * const 0x029cd5b0, nsIContent
* 0x0357a7d0, nsIAtom * 0x02a890d0, int -1) line 2158
RDFElementImpl::SetAttribute(RDFElementImpl * const 0x0357a7d0, int 0, nsIAtom *
0x02a890d0, const nsString & {...}, int 1) line 2413
nsMenuFrame::MarkAsGenerated() line 357 + 71 bytes
nsMenuBarFrame::SetCurrentMenuItem(nsMenuBarFrame * const 0x0090d8c4, nsIFrame *
0x02bdb7e4) line 371
nsMenuFrame::HandleEvent(nsMenuFrame * const 0x02bdb7e4, nsIPresContext & {...},
nsGUIEvent * 0x0067f980, nsEventStatus & nsEventStatus_eConsumeDoDefault) line
292
PresShell::HandleEvent(PresShell * const 0x029f87c4, nsIView * 0x029f8c20,
nsGUIEvent * 0x0067f980, nsEventStatus & nsEventStatus_eConsumeDoDefault) line
2000 + 38 bytes
nsView::HandleEvent(nsView * const 0x029f8c20, nsGUIEvent * 0x0067f980, unsigned
int 28, nsEventStatus & nsEventStatus_eConsumeDoDefault, int & 0) line 835
nsViewManager::DispatchEvent(nsViewManager * const 0x029f8e40, nsGUIEvent *
0x0067f980, nsEventStatus & nsEventStatus_eConsumeDoDefault) line 1612
HandleEvent(nsGUIEvent * 0x0067f980) line 67
nsWindow::DispatchEvent(nsWindow * const 0x029f8ae4, nsGUIEvent * 0x0067f980,
nsEventStatus & nsEventStatus_eIgnore) line 381 + 10 bytes
nsWindow::DispatchWindowEvent(nsGUIEvent * 0x0067f980) line 406
nsWindow::DispatchMouseEvent(unsigned int 300, nsPoint * 0x00000000) line 3162 +
21 bytes
ChildWindow::DispatchMouseEvent(unsigned int 300, nsPoint * 0x00000000) line
3357
nsWindow::ProcessMessage(unsigned int 512, unsigned int 0, long 1310899, long *
0x0067fba0) line 2408 + 24 bytes
nsWindow::WindowProc(HWND__ * 0x00000ca4, unsigned int 512, unsigned int 0, long
1310899) line 454 + 27 bytes
KERNEL32! bff7363b()
KERNEL32! bff94407()

Comment 7

[David Hyatt]

I can't reproduce. Must be some offending bookmark. Dunno.

Comment 8

[Peter Trudelle]

moving to m12

Comment 9

[David Hyatt]

My hands have deteriorated to the point where I can no longer type.  I need
help.  If you think you can fix this bug on your own, please take it away from
me.  If you'd like to volunteer to be my hands for a specific bug, then I'll be
happy to come up to your cube and sit with you and fix the bug (assuming you
have the patience for that).

Comment 10

[Ben Bucksch (:BenB)]

I have the same problem.

Bug #14540 looks like a duplicate of this bug mow.

Comment 11

[Peter Trudelle]

moving to m14

Comment 12

[Ben Bucksch (:BenB)]

Why is this marked M14?

Comment 13

[Peter Trudelle]

I moved it because I thought this was an edge case that nobody else was seeing.
It probably belongs with waterson anyway, but it got bounced back to hyatt, who
cannot type.  I don't think it is just the size of the file, since don has a
bookmark file that is 4-5 times the size of mine.  I have to cut mine by 90% to
avoid crashes in mozilla, so I think it is content-related.  If you and I are the
only people seeing this, then it isn't going to be high priority. cc waterson

Comment 14

[Ben Bucksch (:BenB)]

Did you see the test case
<URL:http://bugzilla.mozilla.org/showattachment.cgi?attach_id=1861> I created
for 14540?

If it's the content, then there're not many possibilites.

Comment 15

[Peter Trudelle]

Thanks, your test file reproduces this bug for me, and is a better test case
than the bookmarks file I attached.


*** This bug has been marked as a duplicate of 14540 ***

Comment 16

[Paul MacQuiddy]

verified as a dup