15946 - Tooltips crash Mozilla (e.g., the Open Windows in Taskbar)

Status: VERIFIED FIXED

(Core :: XUL, defect, P1)

Description

[Scott Miga]

I am using Mozilla M10, on a linux system running the Debian 2.2 distribution
and linux kernel 2.2.12. I have a AMD K6-2 processor with 144 megs of ram, and
10.5 gigs of hard drive space.


When I click on the Mozilla or Open Windows buttons in the bottom Task Bar,
Mozilla crashes. There is not a specific error for it, but it just closes.


I am using the binarys of M10 and not my own compiled source.

Comment 1

[David Baron :dbaron: (⌚️UTC-4, no longer working on Mozilla)]

The last line I see before the "Mozilla" button causes a crash is:

Gtk-WARNING **: invalid cast from (NULL) pointer to `GtkWidget'

I think the problem is in the tooltip code.  I don't see a crash on the Open
Windows button, only the Mozilla button.  I'm using Linux apprunner
1999-10-14-12-M11.  A longer listing of what I see before the crash is:

Document http://www.fas.harvard.edu/~dbaron/ loaded successfully
Document: Done (4.899 secs)
run LoadDetectorsMenu()
X Pos: 340
Y Pos: 479
JavaScript Error: TypeError: tipElement has no properties
URL:
file:////home/david/mozilla/package/chrome/navigator/content/default/tooltip.js
LineNo: 23


Gtk-WARNING **: invalid cast from (NULL) pointer to `GtkWidget'



Pavlov, any ideas??

Comment 2

[Mats Palmgren (inactive)]

*** Bug 16478 has been marked as a duplicate of this bug. ***

Comment 3

[Mats Palmgren (inactive)]

This bug occurs on Sun/Solaris as well, see bug 16478. This bug is probably
a duplicate of bug 15407 reported against Windows 98/NT but there is a slight
difference in how to trigger it so I'll leave them as separate.

Comment 4

[Paul MacQuiddy]

*** Bug 17512 has been marked as a duplicate of this bug. ***

Comment 5

[Paul MacQuiddy]

Peter has assigned 17512 to saari, so he gets this one.

Comment 6

[Paul MacQuiddy]

Peter had set the dup to M12, so setting this one to M12, though it would be
nice to not crash for M11, IMHO

Comment 7

[Claudius Gayle]

note to self: adding RN to the whiteboard in case this isn't fixed for m11 so I can look for it
and Release Note it.

Comment 8

[Peter Trudelle]

mass-moving all m12 bugs to m13

Comment 9

[Peter Trudelle]

Moving to M12 and adding Dogfood to summary.

Comment 10

[Peter Trudelle]

reassigning to pinkerton as p1 for M11
I don't see this elsewhere, but this seems to require mouseover, then pausing
till the tooltip appears before clicking. Quick clicks don't crash , at least
for me.

Comment 11

[Mike Pinkerton (not reading bugmail)]

accepting bug, updaing whiteboard.

Comment 12

[David Baron :dbaron: (⌚️UTC-4, no longer working on Mozilla)]

*** Bug 18082 has been marked as a duplicate of this bug. ***

Comment 13

[Mike Pinkerton (not reading bugmail)]

we tried a couple simple solutions, but this is going to take some new
interfaces, etc. removed the tooltip that causes the crashes and moving this out
to post-beta because tooltips aren't considered important for beta.

reassiging back to hyatt. Also clearing dogfood marker since this no longer
crashes.

Comment 14

[Claudius Gayle]

*** Bug 17371 has been marked as a duplicate of this bug. ***

Comment 15

[Claudius Gayle]

*** Bug 18146 has been marked as a duplicate of this bug. ***

Comment 16

[Matthew Bielanski]

Attachment: Simple solution to tooltip.js problem

Comment 17

[David Baron :dbaron: (⌚️UTC-4, no longer working on Mozilla)]

*** Bug 18055 has been marked as a duplicate of this bug. ***

Comment 18

[Robert Ginda]

This is crashing again on linux.  Just start mozilla and click on either
"Mozilla V" or "Open Windows V" and you'll crash with:

###!!! ASSERTION: You can't dereference a NULL nsCOMPtr with operator->().:
'mRawPtr != 0', file ../../../dist/include/nsCOMPtr.h, line 569
###!!! Break: at file ../../../dist/include/nsCOMPtr.h, line 569

It seems the line at nsWebShellWindow.cpp:1230
nsCOMPtr<nsIPopupSetFrame> popupSetFrame = do_QueryInterface(frame);
is failing, popupSetFrame takes on a null, and the
popupSetFrame->CreatePopup(...)
line causes the assertion.

Comment 19

[Claudius Gayle]

Is this still happening? I don't see it on the 2000011808 RH6 builds.

Comment 20

[David Baron :dbaron: (⌚️UTC-4, no longer working on Mozilla)]

I think it should be left open even if not.  See pinkerton's 11/09/99 comment.

Comment 21

[Claudius Gayle]

this will stay open. I'm noting here that from a blackbox level everything is okay with
the 2000011908 builds (cuz the tooltip is turned off, I know).

Comment 22

[David Hyatt]

Pulling in to M14, since it will be fixed by my M14 bug on popup closing.

Comment 23

[Peter Trudelle]

putting on beta1 radar

Comment 24

[David Hyatt]

Fixed.

Comment 25

[David Hyatt]

Fix checked in.

Comment 26

[Claudius Gayle]

what's fixed? fixed with regard to pink's 11/09 comments? If so, is there a prefs for tooltips or something? I've got no way to test 
this.

Comment 27

[David Hyatt]

Someone will have to re-enable tooltips in order for you to test it.

Comment 28

[leger]

Adding crash keyword

Comment 29

[Claudius Gayle]

marking VERIFIED tooltips are back in and the world didn't completely fall apart.