Closed Bug 18655 Opened 25 years ago Closed 24 years ago

[CRASH] crash when closing browser window with menu accelerators

Categories

(Core :: Layout, defect, P3)

Product:
Core
Component:
Layout
Platform:
x86
Linux
Type:
defect

Tracking

()

Status:
VERIFIED DUPLICATE of bug 20193

People

(Reporter: blizzard, Assigned: blizzard)

Details

Mail from msw:


I do file->new browser window, then close that browser window.

from nsVoidArray.h:43
42     PRInt32 Count() const {
43         return mCount;
44     }

(gdb) p this
$1 = (nsVoidArray *) 0x0
(gdb) p mCount
Cannot access memory at address 0xc.

Program received signal SIGSEGV, Segmentation fault.
nsVoidArray::Count (this=0x0) at ../../../xpcom/ds/nsVoidArray.h:43
43          return mCount;
(gdb) bt
#0  nsVoidArray::Count (this=0x0) at ../../../xpcom/ds/nsVoidArray.h:43
#1  0x200050e8de4 in nsEventListenerManager::HandleEvent (this=0x2000726d880,
    aPresContext=@0x20007958690, aEvent=0x11ffff638, aDOMEvent=0x11ffff0a0,
    aFlags=4, aEventStatus=@0x11ffff4e8)
    at ../../../../layout/events/src/nsEventListenerManager.cpp:777
#2  0x200039380ac in nsXULDocument::HandleDOMEvent (this=0x2000726a4f0,
    aPresContext=@0x20007958690, aEvent=0x11ffff638, aDOMEvent=0x11ffff0a0,
    aFlags=4, aEventStatus=@0x11ffff4e8)
    at ../../../../rdf/content/src/nsXULDocument.cpp:1641
#3  0x200038dd918 in nsXULElement::HandleDOMEvent (this=0x200072b81d0,
    aPresContext=@0x20007958690, aEvent=0x11ffff638, aDOMEvent=0x11ffff0a0,
    aFlags=4, aEventStatus=@0x11ffff4e8)
    at ../../../../rdf/content/src/nsXULElement.cpp:2571
#4  0x200038dd8d4 in nsXULElement::HandleDOMEvent (this=0x20007562980,
    aPresContext=@0x20007958690, aEvent=0x11ffff638, aDOMEvent=0x11ffff0a0,
    aFlags=4, aEventStatus=@0x11ffff4e8)
    at ../../../../rdf/content/src/nsXULElement.cpp:2568
#5  0x200038dd8d4 in nsXULElement::HandleDOMEvent (this=0x2000755dca0,
    aPresContext=@0x20007958690, aEvent=0x11ffff638, aDOMEvent=0x11ffff0a0,
    aFlags=4, aEventStatus=@0x11ffff4e8)
    at ../../../../rdf/content/src/nsXULElement.cpp:2568
#6  0x200038dd8d4 in nsXULElement::HandleDOMEvent (this=0x20007562f70,
    aPresContext=@0x20007958690, aEvent=0x11ffff638, aDOMEvent=0x11ffff0a0,
    aFlags=4, aEventStatus=@0x11ffff4e8)
    at ../../../../rdf/content/src/nsXULElement.cpp:2568
#7  0x200038dd8d4 in nsXULElement::HandleDOMEvent (this=0x200075631c0,
    aPresContext=@0x20007958690, aEvent=0x11ffff638, aDOMEvent=0x11ffff0a0,
    aFlags=4, aEventStatus=@0x11ffff4e8)
    at ../../../../rdf/content/src/nsXULElement.cpp:2568
#8  0x200019b1988 in GlobalWindowImpl::HandleDOMEvent (this=0x2000728a900,
    aPresContext=@0x20007958690, aEvent=0x11ffff638, aDOMEvent=0x11ffff0a0,
    aFlags=4, aEventStatus=@0x11ffff4e8)
    at ../../../../dom/src/base/nsGlobalWindow.cpp:2957
#9  0x20005595ec0 in nsDocument::HandleDOMEvent (this=0x200072a48d0,
    aPresContext=@0x20007958690, aEvent=0x11ffff638, aDOMEvent=0x11ffff0a0,
    aFlags=4, aEventStatus=@0x11ffff4e8)
    at ../../../../layout/base/src/nsDocument.cpp:2369
#10 0x20005240034 in nsHTMLHtmlElement::HandleDOMEvent (this=0x20007962c30,
    aPresContext=@0x20007958690, aEvent=0x11ffff638, aDOMEvent=0x11ffff0a0,
    aFlags=4, aEventStatus=@0x11ffff4e8)
    at ../../../../../layout/html/content/src/nsHTMLHtmlElement.cpp:191
#11 0x200055c4c28 in nsGenericElement::HandleDOMEvent (this=0x200072c9e68,
    aPresContext=@0x20007958690, aEvent=0x11ffff638, aDOMEvent=0x11ffff0a0,
    aFlags=4, aEventStatus=@0x11ffff4e8)
    at ../../../../layout/base/src/nsGenericElement.cpp:777
#12 0x200051eee40 in nsHTMLBodyElement::HandleDOMEvent (this=0x200072c9e40,
    aPresContext=@0x20007958690, aEvent=0x11ffff638, aDOMEvent=0x11ffff0a0,
    aFlags=4, aEventStatus=@0x11ffff4e8)
    at ../../../../../layout/html/content/src/nsHTMLBodyElement.cpp:719
#13 0x200055c4c28 in nsGenericElement::HandleDOMEvent (this=0x20007548bb8,
    aPresContext=@0x20007958690, aEvent=0x11ffff638, aDOMEvent=0x11ffff0a0,
    aFlags=4, aEventStatus=@0x11ffff4e8)
    at ../../../../layout/base/src/nsGenericElement.cpp:777
#14 0x200052dcde0 in nsHTMLTableElement::HandleDOMEvent (this=0x20007548b90,
    aPresContext=@0x20007958690, aEvent=0x11ffff638, aDOMEvent=0x11ffff0a0,
    aFlags=4, aEventStatus=@0x11ffff4e8)
    at ../../../../../layout/html/content/src/nsHTMLTableElement.cpp:1302
#15 0x200055c4c28 in nsGenericElement::HandleDOMEvent (this=0x20007549608,
    aPresContext=@0x20007958690, aEvent=0x11ffff638, aDOMEvent=0x11ffff0a0,
    aFlags=4, aEventStatus=@0x11ffff4e8)
    at ../../../../layout/base/src/nsGenericElement.cpp:777
#16 0x20005301cc0 in nsHTMLTableSectionElement::HandleDOMEvent (
    this=0x200075495e0, aPresContext=@0x20007958690, aEvent=0x11ffff638,
    aDOMEvent=0x11ffff0a0, aFlags=4, aEventStatus=@0x11ffff4e8)
    at ../../../../../layout/html/content/src/nsHTMLTableSectionElement.cpp:373
#17 0x200055c4c28 in nsGenericElement::HandleDOMEvent (this=0x200075496a8,
    aPresContext=@0x20007958690, aEvent=0x11ffff638, aDOMEvent=0x11ffff0a0,
    aFlags=4, aEventStatus=@0x11ffff4e8)
    at ../../../../layout/base/src/nsGenericElement.cpp:777
#18 0x200052fc1e0 in nsHTMLTableRowElement::HandleDOMEvent (
    this=0x20007549680, aPresContext=@0x20007958690, aEvent=0x11ffff638,
    aDOMEvent=0x11ffff0a0, aFlags=4, aEventStatus=@0x11ffff4e8)
    at ../../../../../layout/html/content/src/nsHTMLTableRowElement.cpp:738
#19 0x200055c4c28 in nsGenericElement::HandleDOMEvent (this=0x20007549750,
    aPresContext=@0x20007958690, aEvent=0x11ffff638, aDOMEvent=0x11ffff0a0,
    aFlags=4, aEventStatus=@0x11ffff4e8)
    at ../../../../layout/base/src/nsGenericElement.cpp:777
#20 0x200052e91a0 in nsHTMLTableCellElement::HandleDOMEvent (
    this=0x20007549720, aPresContext=@0x20007958690, aEvent=0x11ffff638,
    aDOMEvent=0x11ffff0a0, aFlags=4, aEventStatus=@0x11ffff4e8)
    at ../../../../../layout/html/content/src/nsHTMLTableCellElement.cpp:558
#21 0x200055c4c28 in nsGenericElement::HandleDOMEvent (this=0x20007549928,
    aPresContext=@0x20007958690, aEvent=0x11ffff638, aDOMEvent=0x11ffff0a0,
    aFlags=1, aEventStatus=@0x11ffff4e8)
    at ../../../../layout/base/src/nsGenericElement.cpp:777
#22 0x2000524b5e0 in nsHTMLImageElement::HandleDOMEvent (this=0x200075498f0,
    aPresContext=@0x20007958690, aEvent=0x11ffff638, aDOMEvent=0x0, aFlags=1,
    aEventStatus=@0x11ffff4e8)
    at ../../../../../layout/html/content/src/nsHTMLImageElement.cpp:333
#23 0x200051826e0 in PresShell::HandleEvent (this=0x200072fb2c0,
    aView=0x20007540fc0, aEvent=0x11ffff638, aEventStatus=@0x11ffff4e8)
    at ../../../../../layout/html/base/src/nsPresShell.cpp:2408
#24 0x20005f761d4 in nsView::HandleEvent (this=0x20007540fc0,
    event=0x11ffff638, aEventFlags=8, aStatus=@0x11ffff4e8,
    aHandled=@0x11ffff47c) at ../../../view/src/nsView.cpp:837
#25 0x20005f7613c in nsView::HandleEvent (this=0x2000751f3d0,
    event=0x11ffff638, aEventFlags=8, aStatus=@0x11ffff4e8,
    aHandled=@0x11ffff47c) at ../../../view/src/nsView.cpp:821
#26 0x20005f7613c in nsView::HandleEvent (this=0x2000752d6c0,
    event=0x11ffff638, aEventFlags=8, aStatus=@0x11ffff4e8,
    aHandled=@0x11ffff47c) at ../../../view/src/nsView.cpp:821
#27 0x20005f7613c in nsView::HandleEvent (this=0x200072fa2d0,
    event=0x11ffff638, aEventFlags=28, aStatus=@0x11ffff4e8,
    aHandled=@0x11ffff47c) at ../../../view/src/nsView.cpp:821
#28 0x20005f890f8 in nsViewManager::DispatchEvent (this=0x20007947f60,
    aEvent=0x11ffff638, aStatus=@0x11ffff4e8)
    at ../../../view/src/nsViewManager.cpp:1741
#29 0x20005f73c5c in HandleEvent (aEvent=0x11ffff638)
    at ../../../view/src/nsView.cpp:66
#30 0x200025b9f3c in nsWidget::DispatchEvent (this=0x2000751f470,
    aEvent=0x11ffff638, aStatus=@0x11ffff5d8)
    at ../../../../widget/src/gtk/nsWidget.cpp:1347
#31 0x200025b9808 in nsWidget::DispatchWindowEvent (this=0x2000751f470,
    event=0x11ffff638) at ../../../../widget/src/gtk/nsWidget.cpp:1238
#32 0x200025c3884 in nsWindow::OnKey (this=0x2000751f470, aEvent=@0x11ffff638)
    at ../../../../widget/src/gtk/nsWindow.cpp:1688
#33 0x2000259c1ac in handle_key_press_event (w=0x0, event=0x20003756d10,
    p=0x2000751f470) at ../../../../widget/src/gtk/nsGtkEventHandler.cpp:805
#34 0x2000259c644 in handle_gdk_event (event=0x20003756d10, data=0x0)
    at ../../../../widget/src/gtk/nsGtkEventHandler.cpp:880
#35 0x200029ea230 in gdk_event_dispatch ()
#36 0x20002c2c230 in g_main_dispatch ()
#37 0x20002c2c998 in g_main_iterate ()
#38 0x20002c2cbbc in g_main_run ()
#39 0x200027ed030 in gtk_main ()
Status: NEW → ASSIGNED
Summary: crash when closing browser window → [SUPERWIN] crash when closing browser window
Ok, I can't reproduce this.  I tried opening ten windows and then closing them
and didn't get any crashes.  Is this on the alpha?
Summary: [SUPERWIN] crash when closing browser window → [CRASH] crash when closing browser window with menu accelerators
Clarification - you need to use <Ctrl+W> to close the window.  This crash
happens on GTK+ tip of tree as well.
Severity: normal → critical
Status: ASSIGNED → RESOLVED
Closed: 25 years ago
Resolution: --- → DUPLICATE
*** This bug has been marked as a duplicate of 20193 ***
Status: RESOLVED → VERIFIED
Agreed. Marking verified dup of 20193
Please ignore the spam.  Changing address.
Assignee: blizzard → blizzard
Status: VERIFIED → NEW
bustage from my reassign
Status: NEW → RESOLVED
Closed: 25 years ago → 24 years ago
bustage from my reassign
Status: RESOLVED → VERIFIED
You need to log in before you can comment on or make changes to this bug.