149383 - drag (electric) scroll & close tab/window crashes

Status: RESOLVED WORKSFORME

(Core :: DOM: Selection, defect)

Description

[Tuukka Tolvanen (sp3000)]

From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.0.0) Gecko/20020529
BuildID:    2002052918

1. mousedown left button on text
2. drag down to statusbar edge to begin scroll
3. click right button
4. mouseup left button (page should keep scrolling now; on linux you may need
   to focus another window temporarily or mouse entering content will stop the
   scroll)
5. close tab -> crash

Reproducible approx. 1/40.
iirc can also happen when closing window rather than tab.
Present in 1.0 and trunk
Might happen on Windows too, can't remember now...

talkback id: TB7036404X

This is an _old_ problem, I just noticed I hadn't ever filed it :(

Comment 1

[Doron Rosenberg (IBM)]

not very usefull:

Stack Signature  0x08fb1419 aca7fa41
Email Address
Product ID Gecko1.0
Build ID 2002052918
Trigger Time 2002-06-05 12:05:29
Platform LinuxIntel
Operating System Linux 2.4.18-k7
Module
URL visited
User Comments 1. mousedown left button on text 2. drag down to statusbar edge to
begin scroll 3. mousedown right button 4. mouseup left button 5. mouseup right
button 6. close tab -> crash Not always reproducible.
Trigger Reason SIGSEGV: Segmentation Fault: (signal 11)
Source File Name
Trigger Line No.
Stack Trace
0x08fb1419
0xbffff558
libxpcom.so + 0xa3f4c (0x40168f4c)
libxpcom.so + 0xa4077 (0x40169077)
libxpcom.so + 0xa0227 (0x40165227)
libxpcom.so + 0xa060b (0x4016560b)
libwidget_gtk.so + 0xd77f (0x408bb77f)
libxpcom.so + 0x6fe0b (0x40134e0b)
libwidget_gtk.so + 0xd7b9 (0x408bb7b9)
libwidget_gtk.so + 0x13ec3 (0x408c1ec3)
libgdk-1.2.so.0 + 0x17457 (0x40348457)
libglib-1.2.so.0 + 0x104d8 (0x403784d8)
libglib-1.2.so.0 + 0x10ae3 (0x40378ae3)
libglib-1.2.so.0 + 0x10c7c (0x40378c7c)
libgtk-1.2.so.0 + 0x8d7e7 (0x402997e7)
libwidget_gtk.so + 0xd53c (0x408bb53c)
libnsappshell.so + 0x107c6 (0x4089a7c6)
mozilla-bin + 0x8fe9 (0x08050fe9)
mozilla-bin + 0x97d7 (0x080517d7)
libc.so.6 + 0x1914f (0x404b514f) 

Comment 2

[Matthias Versen [:Matti]]

CC [e-mail]
hmm, a talkback Stack trace without symbols ?
Is talkback broken ?

Comment 3

[Shiva Thirumazhusai]

Matti, Doron: Can one of you reproduce this in the branch builds ? 

Comment 4

[Matthias Versen [:Matti]]

namachi:
I have no talkback access and i have no Linux builds.
I saw this problem a few months ago for a few days.
I would request a new TB ID from a new build if I know that TB works again and I
thought i can ask you if it works again :-)

Comment 5

[Matthias Versen [:Matti]]

-> XP Toolkit

Comment 6

[jag (Peter Annema)]

I'm gonna guess this has something to do with selection. -> Selection

Comment 7

[Tuukka Tolvanen (sp3000)]

Whoopee, I'm able to reproduce this >50% in a debug build now.

 1. Open new browser window, http://www.mozilla.org/start/
 2. Open links "Tree Status", "New Checkins" to new tabs
 3. Switch to tinderbox tab
 4. Open a second window, http://www.mozilla.org/start/
 5. Electric-auto-scroll tinderbox page in first window as described in
    comment 0 steps 1-4
 6. Close old window [X]

I got illegal instruction once, but mostly good ol' segmentation fault.
attaching bt's

Comment 8

[Tuukka Tolvanen (sp3000)]

Attachment: assertions, bt full -- illegal instruction

The only difference between the stacks that I can parse is fullCount = 1 here
vs 0 in next, in PL_ProcessEventsBeforeID

Comment 9

[Tuukka Tolvanen (sp3000)]

Attachment: warnings and bt full -- segfault

Comment 10

[Tuukka Tolvanen (sp3000)]

gtk2 fx trunk 20050708, seamonkey 1.8b1 -- the "autoscroll" ;) behaviour at
STR#4 no longer happens -> unreproducible -> wfm