154242 - crash typing ctrl-L in de nav window after switching to en locale [@nsMenuPopupFrame::FindMenuWithShortcut]

Status: RESOLVED INCOMPLETE

(Core :: XUL, defect, P5)

Description

[timeless]

w2k cvs trunk opt profile build from this weekend
jar, xul cache disabled
live skin, locale switching enabled

initial locale: de
terminal locale: en

launched nav, (mozilla -P qnx)
load prefs,
selected de
ok
load js console
<xmouse hover>-switch to navigator
i typed ctrl-L, foolishly trying to get to the location bar

nsWindow::OnChar indicates:
	(char)uniChar	108 'l'

nsMenuPopupFrame::FindMenuWithShortcut(nsMenuPopupFrame * const 0x0012e3e8, 
nsIDOMKeyEvent * 0x042e5868, int & 0) line 1578 + 41 bytes
nsMenuPopupFrame::ShortcutNavigation(nsMenuPopupFrame * const 0x034b9864, 
nsIDOMKeyEvent * 0x00000000, int & 0) line 1737 + 16 bytes
nsMenuListener::KeyPress(nsMenuListener * const 0x042a8dd0, nsIDOMEvent * 
0x042e5868) line 245 + 19 bytes
nsEventListenerManager::HandleEvent(nsEventListenerManager * const 0x01ac6618, 
nsIPresContext * 0x0000000e, nsEvent * 0x0012fb10, nsIDOMEvent * * 0x042a8dd0, 
nsIDOMEventTarget * 0x00b6837c, unsigned int 4, nsEventStatus * 0x0012fa74) 
line 1665
nsXULDocument::HandleDOMEvent(nsXULDocument * const 0x00b68350, nsIPresContext 
* 0x026d9008, nsEvent * 0x0012fb10, nsIDOMEvent * * 0x0012f900, unsigned int 4, 
nsEventStatus * 0x0012fa74) line 2603
nsXULElement::HandleDOMEvent(nsXULElement * const 0x01b5c778, nsIPresContext * 
0x026d9008, nsEvent * 0x00000000, nsIDOMEvent * * 0x0012f900, unsigned int 4, 
nsEventStatus * 0x0012fa74) line 3430 + 21 bytes
nsXULElement::HandleDOMEvent(nsXULElement * const 0x01b6aec0, nsIPresContext * 
0x026d9008, nsEvent * 0x01b5c778, nsIDOMEvent * * 0x0012f900, unsigned int 4, 
nsEventStatus * 0x0012fa74) line 3428
nsXULElement::HandleDOMEvent(nsXULElement * const 0x01b67c88, nsIPresContext * 
0x026d9008, nsEvent * 0x01b6aec0, nsIDOMEvent * * 0x0012f900, unsigned int 4, 
nsEventStatus * 0x0012fa74) line 3428
nsXULElement::HandleDOMEvent(nsXULElement * const 0x01b67d30, nsIPresContext * 
0x026d9008, nsEvent * 0x01b67c88, nsIDOMEvent * * 0x0012f900, unsigned int 4, 
nsEventStatus * 0x0012fa74) line 3428
nsXULElement::HandleDOMEvent(nsXULElement * const 0x01b67d78, nsIPresContext * 
0x026d9008, nsEvent * 0x01b67d30, nsIDOMEvent * * 0x0012f900, unsigned int 4, 
nsEventStatus * 0x0012fa74) line 3428
nsXULElement::HandleDOMEvent(nsXULElement * const 0x02419ea8, nsIPresContext * 
0x026d9008, nsEvent * 0x01b67d78, nsIDOMEvent * * 0x0012f900, unsigned int 4, 
nsEventStatus * 0x0012fa74) line 3428
nsXULElement::HandleDOMEvent(nsXULElement * const 0x0251e5c8, nsIPresContext * 
0x026d9008, nsEvent * 0x02419ea8, nsIDOMEvent * * 0x0012f900, unsigned int 4, 
nsEventStatus * 0x0012fa74) line 3428
nsXULElement::HandleDOMEvent(nsXULElement * const 0x0251e690, nsIPresContext * 
0x026d9008, nsEvent * 0x0251e5c8, nsIDOMEvent * * 0x0012f900, unsigned int 4, 
nsEventStatus * 0x0012fa74) line 3428
nsXULElement::HandleChromeEvent(nsXULElement * const 0x00b68350, nsIPresContext 
* 0x026d9008, nsEvent * 0x0012fb10, nsIDOMEvent * * 0x0012f900, unsigned int 4, 
nsEventStatus * 0x0012fa74) line 4675 + 24 bytes
GlobalWindowImpl::HandleDOMEvent(GlobalWindowImpl * const 0x0250bc10, 
nsIPresContext * 0x026d9008, nsEvent * 0x0012fb10, nsIDOMEvent * * 0x0012f900, 
unsigned int 4, nsEventStatus * 0x0012fa74) line 732
nsDocument::HandleDOMEvent(nsDocument * const 0x02485ac8, nsIPresContext * 
0x026d9008, nsEvent * 0x0012fb10, nsIDOMEvent * * 0x0012f900, unsigned int 4, 
nsEventStatus * 0x0012fa74) line 3461
nsGenericElement::HandleDOMEvent(nsGenericElement * const 0x01be2400, 
nsIPresContext * 0x026d9008, nsEvent * 0x00000000, nsIDOMEvent * * 0x0012f900, 
unsigned int 1, nsEventStatus * 0x0012fa74) line 1819 + 21 bytes
PresShell::HandleEventInternal(PresShell * const 0x0012e3e8, nsEvent * 
0x0012fb10, nsIView * 0x02644aa8, unsigned int 1, nsEventStatus * 0x0012fa74) 
line 6178 + 18 bytes
PresShell::HandleEvent(PresShell * const 0x034b0450, nsIView * 0x02644aa8, 
nsGUIEvent * 0x0012fb10, nsEventStatus * 0x0012fa74, int 1, int & 1) line 6101 
+ 18 bytes
nsViewManager::HandleEvent(nsViewManager * const 0x0012e3e8, nsView * 
0x00000001, nsGUIEvent * 0x00000000, int 0) line 2039
nsView::HandleEvent(nsView * const 0x0012e3e8, nsViewManager * 0x026eecb8, 
nsGUIEvent * 0x0012fb10, int 0) line 306
nsViewManager::DispatchEvent(nsViewManager * const 0x026eecb8, nsGUIEvent * 
0x02644aa8, nsEventStatus * 0x0012fad8) line 1890 + 30 bytes
HandleEvent(nsGUIEvent * 0x0012fb10) line 83
nsWindow::DispatchEvent(nsWindow * const 0x01a7772c, nsGUIEvent * 0x0012fb10, 
nsEventStatus & nsEventStatus_eIgnore) line 1029
nsWindow::DispatchWindowEvent(nsWindow * const 0x0012e3e8, nsGUIEvent * 
0x00000000) line 1046
nsWindow::DispatchKeyEvent(nsWindow * const 0x0012e3e8, unsigned int 131, 
unsigned short 108, unsigned int 0, long 0) line 2823 + 14 bytes
nsWindow::OnChar(nsWindow * const 0x0012e3e8, unsigned int 12, unsigned int 12, 
unsigned char 0) line 2982 + 17 bytes
nsWindow::ProcessMessage(nsWindow * const 0x0012e3e8, unsigned int 258, 
unsigned int 12, long 2490369, long * 0x0012fd90) line 3632
nsWindow::WindowProc(HWND__ * 0x00d80102, unsigned int 0, unsigned int 12, long 
27752236) line 1290 + 16 bytes
USER32! 77e11b60()
USER32! 77e11cca()
USER32! 77e183f1()
nsAppShellService::Run(nsAppShellService * const 0x00b5a830) line 458
main1(int 3, char * * 0x00262ed8, nsISupports * 0x00262f10) line 1456 + 9 bytes
main(int 3, char * * 0x00262ed8) line 1805 + 26 bytes
WinMain(HINSTANCE__ * 0x00400000, HINSTANCE__ * 0x00400000, char * 0x00133454, 
HINSTANCE__ * 0x00400000) line 1825 + 23 bytes
MOZILLA! WinMainCRTStartup + 308 bytes
KERNEL32! 77e8d326()

  nsCOMPtr<nsIContent> parentContent;
=>mContent->GetParent(*getter_AddRefs(parentContent));
  if (parentContent) {

-	mContent	0x0012e414
-	nsISupports	{...}
-	__vfptr	0x0012e46c
	[0]	0x0012e614
	[1]	0x0196bf99
	[2]	0x042a8dd0

i've cc'd the people from bug 126675.

Comment 1

[timeless]

i can't quite figure out how to make mCount [2] match, a real object, but this 
is what msvc said about it..

-	(nsIDOMKeyListener*)0x042a8dd0	0x042a8dd0
|\-	[nsMenuListener]	{...}
| \-	nsIDOMKeyListener	{...}
|  \-	nsIDOMEventListener	{...}
|   \+	nsISupports	{...}
|-	nsIDOMFocusListener	{...}
|\-	nsIDOMEventListener	{...}
| \+	nsISupports	{...}
|-	nsIDOMMouseListener	{...}
|\-	nsIDOMEventListener	{...}
| \+	nsISupports	{...}
|	mRefCnt	3
|-	mMenuParent	0x034b9864
|\+	[nsMenuPopupFrame]	{...}
||+	nsISupports	{...}
|-	nsIDOMEventListener	{...}
 \-	nsISupports	{...}
  \-	__vfptr	0x01ee55ec const  nsMenuListener::`vftable'{for 
`nsIDOMKeyListener'}
   |	[0]	0x01e96f25 nsMenuBarListener::QueryInterface(const nsID &, void 
* *)
   |	[1]	0x01ea6a15 nsTreeContentView::AddRef(void)
   |	[2]	0x01e964d8 nsMenuListener::Release(void)

Comment 2

[Olivier Cahagne]

timeless, any news on this ? Shall we leave it open a little more or mark it WFM ?

Comment 3

[timeless]

well, i hadn't touched skin/locale switching for a while. my guess is that the
xmouse bit contributed.

i'm pretty sure i could still crash if i added xmouse back into my environment,
but right now i have plenty of other crashes to worry about. ask me in 6months.

ccs: any thoughts?

Comment 4

[Marc Bejarano]

timeless: it's been more than six months, so i'll ask...

any news on this?

marc

Comment 5

[Robert Kaiser]

We don't support dynamic locale switching at this time - and if we move to doing that and it still crashes, we should file a new bug with an actual signature referencing current code.