204487 - crash, nsEventStateManager::GenerateDragGesture, mGestureDownFrame is null

Status: RESOLVED DUPLICATE of bug 202843

(Core :: DOM: Copy & Paste and Drag & Drop, defect)

Description

[(not reading, please use [e-mail] instead)]

approx. line 1420, MOZILLA\CONTENT\events\src\nsEventStateManager.cpp

mGestureDownFrame->GetWindow(aPresContext, getter_AddRefs(targetWidget));

mGestureDownFrame was null.

here's the stack:

nsEventStateManager::GenerateDragGesture(nsIPresContext * 0x0523d600, nsGUIEvent
* 0x0012f78c) line 1419 + 46 bytes
nsEventStateManager::PreHandleEvent(nsEventStateManager * const 0x052ae9f0,
nsIPresContext * 0x0523d600, nsEvent * 0x0012f78c, nsIFrame * 0x05079dd0,
nsEventStatus * 0x0012f57c, nsIView * 0x05457f70) line 394
PresShell::HandleEventInternal(nsEvent * 0x0012f78c, nsIView * 0x05457f70,
unsigned int 1, nsEventStatus * 0x0012f57c) line 6372 + 43 bytes
PresShell::HandleEvent(PresShell * const 0x0571548c, nsIView * 0x05457f70,
nsGUIEvent * 0x0012f78c, nsEventStatus * 0x0012f57c, int 1, int & 1) line 6295 +
25 bytes
nsViewManager::HandleEvent(nsView * 0x05457f70, nsGUIEvent * 0x0012f78c, int 0)
line 2292
nsView::HandleEvent(nsViewManager * 0x05b1e028, nsGUIEvent * 0x0012f78c, int 0)
line 308
nsViewManager::DispatchEvent(nsViewManager * const 0x05b1e028, nsGUIEvent *
0x0012f78c, nsEventStatus * 0x0012f68c) line 2022 + 23 bytes
HandleEvent(nsGUIEvent * 0x0012f78c) line 82
nsWindow::DispatchEvent(nsWindow * const 0x05565654, nsGUIEvent * 0x0012f78c,
nsEventStatus & nsEventStatus_eIgnore) line 1053 + 10 bytes
nsWindow::DispatchWindowEvent(nsGUIEvent * 0x0012f78c) line 1074
nsWindow::DispatchMouseEvent(unsigned int 300, unsigned int 0, nsPoint *
0x00000000) line 5175 + 21 bytes
ChildWindow::DispatchMouseEvent(unsigned int 300, unsigned int 0, nsPoint *
0x00000000) line 5432
nsWindow::ProcessMessage(unsigned int 512, unsigned int 0, long 6030399, long *
0x0012fc34) line 3955 + 28 bytes
nsWindow::WindowProc(HWND__ * 0x000d07b2, unsigned int 512, unsigned int 0, long
6030399) line 1336 + 27 bytes
USER32! 77e3a244()
USER32! 77e145e5()
USER32! 77e1a792()
nsAppShellService::Run(nsAppShellService * const 0x015c14f8) line 479
main1(int 3, char * * 0x00271e70, nsISupports * 0x00f06ed0) line 1268 + 32 bytes
main(int 3, char * * 0x00271e70) line 1647 + 37 bytes
mainCRTStartup() line 338 + 17 bytes
KERNEL32! 77ea847c()

we seem to null check mGestureDownFrame elsewhere

Comment 1

[(not reading, please use [e-mail] instead)]

I only saw this once, and I was just browsing / using tabs, clicking on links, etc.

nothing special that I can remember.

it was with my debug win2k bits, pulled at Fri May 2 08:23:28 2003

I'd rather not ship 1.4 beta with this, if we can just add a null check.

so marking 1.4 beta blocker

Comment 2

[Olivier Cahagne]

isn't this dupe of bug 202843 fixed recently ?

Comment 3

[Matthias Versen [:Matti]]

should be a dupe

*** This bug has been marked as a duplicate of 202843 ***