135438 - crash when scrolling with mouse wheel beyond end of page

Status: RESOLVED WORKSFORME

(Core :: DOM: UI Events & Focus Handling, defect)

Description

[Brian Haskin (Janzert)]

From Bugzilla Helper:
User-Agent: Mozilla/5.0 (Windows; U; Win98; en-US; rv:0.9.9+) Gecko/20020221
BuildID:    from cvs pulled 4-4-02  aprox. 1:00am EST

If the page is scrolled all the way up or down and you try and scroll with the
mouse wheel in that direction, or attempt to scroll when there is no scroll bar,
mozilla crashes.

Reproducible: Always
Steps to Reproduce:
1. Scroll to top or bottom of page
2. Attempt to scroll some more with the mouse wheel


Actual Results:  Crash

Expected Results:  Ignore wheel event

Comment 1

[Brian Haskin (Janzert)]

Forgot the stack trace. Sorry for the spam.

nsEventStateManager::DoWheelScroll(nsIPresContext * 0x00000000, nsIFrame *
0x00000000, nsMouseScrollEvent * 0x0067f4a4, int 3, int 0, int 1) line 1370 + 43
bytes
nsEventStateManager::DoWheelScroll(nsIPresContext * 0x01e2b610, nsIFrame *
0x026748e4, nsMouseScrollEvent * 0x0067f4a4, int 3, int 0, int 1) line 1518 + 34
bytes
nsEventStateManager::DoWheelScroll(nsIPresContext * 0x01f177a0, nsIFrame *
0x027a2bac, nsMouseScrollEvent * 0x0067f4a4, int 3, int 0, int 0) line 1518 + 34
bytes
nsEventStateManager::PostHandleEvent(nsEventStateManager * const 0x01f1d768,
nsIPresContext * 0x01f177a0, nsEvent * 0x0067f4a4, nsIFrame * 0x027a2bac,
nsEventStatus * 0x0067f1a8, nsIView * 0x02354f50) line 1784
PresShell::HandleEventInternal(nsEvent * 0x0067f4a4, nsIView * 0x02354f50,
unsigned int 1, nsEventStatus * 0x0067f1a8) line 5983 + 38 bytes
PresShell::HandleEvent(PresShell * const 0x01f18024, nsIView * 0x02354f50,
nsGUIEvent * 0x0067f4a4, nsEventStatus * 0x0067f1a8, int 0, int & 1) line 5886 +
22 bytes
nsViewManager::HandleEvent(nsView * 0x02356120, nsGUIEvent * 0x0067f4a4, int 0)
line 2064
nsView::HandleEvent(nsViewManager * 0x01f15ed0, nsGUIEvent * 0x0067f4a4, int 0)
line 306
nsViewManager::DispatchEvent(nsViewManager * const 0x01f15ed0, nsGUIEvent *
0x0067f4a4, nsEventStatus * 0x0067f320) line 1869 + 20 bytes
HandleEvent(nsGUIEvent * 0x0067f4a4) line 83
nsWindow::DispatchEvent(nsWindow * const 0x02356014, nsGUIEvent * 0x0067f4a4,
nsEventStatus & nsEventStatus_eIgnore) line 865 + 9 bytes
nsWindow::DispatchWindowEvent(nsGUIEvent * 0x0067f4a4) line 886
nsWindow::ProcessMessage(unsigned int 522, unsigned int 4287102976, long
23527908, long * 0x0067fab0) line 4134 + 24 bytes
nsWindow::ProcessMessage(unsigned int 522, unsigned int 4287102976, long
23527908, long * 0x0067fab0) line 4104 + 29 bytes
nsWindow::WindowProc(HWND__ * 0x0000078c, unsigned int 522, unsigned int
4287102976, long 23527908) line 1130 + 24 bytes
KERNEL32! bff7363b()
KERNEL32! bff94407()
00678b36()

Comment 2

[Oliver Klee]

This isn't a Blocker, just Critical.

Comment 3

[Brian Haskin (Janzert)]

Repulling from later in the day is now working for me, marking as such.