136434 - Crash opening windows

Status: RESOLVED WORKSFORME

(Core :: XPCOM, defect)

Description

[Stephen P. Morse]

I got the following crash by opening browser window + mail window + IRC window 
+ composer window + address book.  Crash occured when the last window was 
opened.  Not reproducible.

However I got the same crash with the same stack trace earlier this morning as a 
side effect of testing out another bug (see bug 135668 comment 2).  And that one 
was reproducible.


nsCOMPtr<nsIEventQueue>::assign_with_AddRef(nsISupports * 0x04c48dd8) line 913 + 
9 bytes
nsCOMPtr<nsIEventQueue>::operator=(nsIEventQueue * 0x04c48dd8) line 585
nsEventQueueImpl::GetYoungestActive(nsEventQueueImpl * const 0x04c48ddc, 
nsIEventQueue * * 0x0012ea3c) line 569
nsEventQueueImpl::GetYoungestActive(nsEventQueueImpl * const 0x00bd43ac, 
nsIEventQueue * * 0x0012ea74) line 565 + 42 bytes
nsEventQueueServiceImpl::GetYoungestEventQueue(nsIEventQueue * 0x00bd43a8, 
nsIEventQueue * * 0x0012eaa8) line 247 + 47 bytes
nsEventQueueServiceImpl::GetThreadEventQueue(nsEventQueueServiceImpl * const 
0x008c9f98, PRThread * 0x00000000, nsIEventQueue * * 0x0012ee4c) line 386 + 41 
bytes
nsEventQueueServiceImpl::ResolveEventQueue(nsEventQueueServiceImpl * const 
0x008c9f98, nsIEventQueue * 0x00000000, nsIEventQueue * * 0x0012ee4c) line 403 + 
18 bytes
imgLoader::LoadImage(imgLoader * const 0x0125c520, nsIURI * 0x04bb5108, nsIURI * 
0x00000000, nsILoadGroup * 0x00000000, imgIDecoderObserver * 0x04ae8078, 
nsISupports * 0x047ed720, unsigned int 0, nsISupports * 0x00000000, imgIRequest 
* 0x00000000, imgIRequest * * 0x0012ef18) line 198 + 64 bytes
nsTreeBodyFrame::GetImage(int 0, const unsigned short * 0x04ddbb80, int 1, 
nsIStyleContext * 0x04cb66c0, imgIContainer * * 0x0012f04c) line 1723 + 104 
bytes
nsTreeBodyFrame::GetImageSize(int 0, const unsigned short * 0x04ddbb80, int 1, 
nsIStyleContext * 0x04cb66c0) line 1791 + 48 bytes
nsTreeBodyFrame::PaintTwisty(nsTreeBodyFrame * const 0x04bbabf0, int 0, 
nsTreeColumn * 0x04981d20, const nsRect & {...}, nsIPresContext * 0x047ed720, 
nsIRenderingContext & {...}, const nsRect & {...}, nsFramePaintLayer 
eFramePaintLayer_Underlay, int & 2340, int & 45) line 2414 + 62 bytes
nsTreeBodyFrame::PaintCell(nsTreeBodyFrame * const 0x04bbabf0, int 0, 
nsTreeColumn * 0x04981d20, const nsRect & {...}, nsIPresContext * 0x047ed720, 
nsIRenderingContext & {...}, const nsRect & {...}, nsFramePaintLayer 
eFramePaintLayer_Underlay) line 2321
nsTreeBodyFrame::PaintRow(nsTreeBodyFrame * const 0x04bbabf0, int 0, const 
nsRect & {...}, nsIPresContext * 0x047ed720, nsIRenderingContext & {...}, const 
nsRect & {...}, nsFramePaintLayer eFramePaintLayer_Underlay) line 2149
nsTreeBodyFrame::Paint(nsTreeBodyFrame * const 0x04bbabf0, nsIPresContext * 
0x047ed720, nsIRenderingContext & {...}, const nsRect & {...}, nsFramePaintLayer 
eFramePaintLayer_Underlay, unsigned int 0) line 1976
PresShell::Paint(PresShell * const 0x0471140c, nsIView * 0x04bb9498, 
nsIRenderingContext & {...}, const nsRect & {...}) line 5658 + 36 bytes
nsView::Paint(nsView * const 0x04bb9498, nsIRenderingContext & {...}, const 
nsRect & {...}, unsigned int 0, int & 1242632) line 280
nsViewManager::RenderDisplayListElement(DisplayListElement2 * 0x04a79d98, 
nsIRenderingContext & {...}) line 1181
nsViewManager::RenderViews(nsView * 0x04bb9498, nsIRenderingContext & {...}, 
const nsRect & {...}, int & 0) line 1130
nsViewManager::Refresh(nsView * 0x04bb9498, nsIRenderingContext * 0x04bca590, 
nsIRegion * 0x04cd3418, unsigned int 1) line 721
nsViewManager::DispatchEvent(nsViewManager * const 0x04a13dd8, nsGUIEvent * 
0x0012f914, nsEventStatus * 0x0012f828) line 1721
HandleEvent(nsGUIEvent * 0x0012f914) line 83
nsWindow::DispatchEvent(nsWindow * const 0x04b79ac4, nsGUIEvent * 0x0012f914, 
nsEventStatus & nsEventStatus_eIgnore) line 865 + 10 bytes
nsWindow::DispatchWindowEvent(nsGUIEvent * 0x0012f914, nsEventStatus & 
nsEventStatus_eIgnore) line 891
nsWindow::OnPaint() line 4508 + 28 bytes
nsWindow::ProcessMessage(unsigned int 15, unsigned int 0, long 0, long * 
0x0012fd4c) line 3397 + 17 bytes
nsWindow::WindowProc(HWND__ * 0x008b08c2, unsigned int 15, unsigned int 0, long 
0) line 1130 + 27 bytes
USER32! 77e7131f()
USER32! 77e71a3d()
NTDLL! 77f7637b()

Comment 1

[Matthias Versen [:Matti]]

Morse: I can't fix this bug. Do you know a better component for this ?

Comment 2

[Stephen P. Morse]

Sorry but I have no idea.  If I did, I would have assigned it to that component 
originally.

Comment 3

[timeless]

*** Bug 133137 has been marked as a duplicate of this bug. ***

Comment 4

[timeless]

evicting from b-g

Comment 5

[Darin Fisher]

cc'ing danm.. this bug might interest him.

Comment 6

[Doug Turner (:dougt)]

pavlov -> dougt

Comment 7

[Doug Turner (:dougt)]

over to danm.

Comment 8

[Alex Vincent [:WeirdAl]]

Is this bug still valid?  I can't find any sort of indication of a cancel button
anywhere per the reproducible testcase.

Comment 9

[Dan M]

The steps to reproduce given in comment 0 are, as it says in the comment, not
reproducible. I just tried my reading of the alternate steps given in bug 135668
comment 2:

navigate to a site requiring basic auth
  give the auth dialog a bogus name/password
  it asks again
  repeat two times more
cancel the auth dialog

That's all it says (though it doesn't mention a specific number). No crash for
me using a Windows Mozilla build from 20040329.