182986 - Crash on selection+TAB in combo/list box [@ nsComboboxControlFrame::SetFocus ]

Status: RESOLVED WORKSFORME

(Core :: Layout: Form Controls, defect, P2)

Description

[Jimmy Super]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.1) Gecko/20020826
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.1) Gecko/20020826

Mozilla crashes on hitting the TAB key or when list/combobox items are selected
on specific web pages.

Reproducible: Sometimes

Steps to Reproduce:
Please navigate to the page indicated by the URL. 
Select an item in the list under "1. Kies een land".
Hit the TAB key.

Actual Results:  
Notice: all instances of Mozilla close instantly.

Expected Results:  
Proceed to select the second listbox.

Comment 1

[Jimmy Super]

Also crashes the Windows version.
Hardware was PC not Macintosh.
Listbox item selection should be done through keyboard.

Comment 2

[José Jeria]

WFM 2002120104, Windows 2000.
Your Mozilla version is outdated. Try a newer build and see if the problem 
remains.

Comment 3

[Jimmy Super]

Downloaded and tested the 1.2 version as listed on mozilla.org/releases/

Mozilla/5.0 (X11;U; Linux i686; en-US; rv.1.2b) Gecko/20021016

No change. Tested Linux only. 
The other enviroment tested with 20020611 was Win NT 4.0SP6

Try this to repro: go to the URL listed, hit TAB, hit Arrow Down, hit TAB. 
Crash 100% repro.

Comment 4

[Olivier Cahagne]

confirming using build 2002120104 on Win2k: TB14621414K

Comment 5

[Olivier Cahagne]

Attachment: Stack trace from Linux build 20021128

Comment 6

[Olivier Cahagne]

No dupes found, marking NEW. Can be reproduced easily by several people on 2
platforms, including latest nightly trunk build.
-> Layout ?

Comment 7

[James Graham]

Unsurprisingly, also affects Windows 98. Build 2002112607. Talkback ID TB14639691W.

Comment 8

[Andrew Schultz]

Attachment: testcase

select option2, TAB => crash with linux trunk build 20021130

Comment 9

[Andrew Schultz]

this is not clean-report without a testcase

Comment 10

[Simon Montagu :smontagu]

I see in the debugger that mPresContext gets deleted during CheckFireOnChange()
at
http://lxr.mozilla.org/seamonkey/source/layout/html/forms/src/nsComboboxControlFrame.cpp#525

Comment 11

[Rick Ju]

works for me on trunk build (Gecko/20021209 ) 
can u guys still reproduce it?

Comment 12

[Olivier Cahagne]

wfm using build 2002121808 on Win2k.
The behaviour has changed (it reloads page when selecting item, whereas before,
it remained one the same page), maybe fixed by patch for bug 175670 ?

Comment 13

[Kevin McCluskey (gone)]

WFM: Based on comment 11 ,12