Closed Bug 209365 Opened 21 years ago Closed 20 years ago

mozilla crash when displaying editable <menulist> that is in the <menupopup>

Categories

(Core :: Web Painting, defect)

x86
All
defect
Not set
critical

Tracking

()

RESOLVED WORKSFORME

People

(Reporter: cj, Assigned: roc)

References

Details

(Keywords: crash, regression, testcase)

Attachments

(3 files)

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.4) Gecko/20030529
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.4) Gecko/20030529

The following XUL code causes Mozilla to crash (looks like null pointer assignment):

<menubar id="menu">
    <menu label="Edit" />
    <menu label="Options" >
        <menupopup>
            <menuitem label="Item" />
            <button label="Button wow!" />
            <edit>Edit wow!</edit>
            <menuitem label="Sewcond itemm"/>
            <menuitem label="Yet another item"/>
            <menulist editable="true">
                <menupopup>
                    <menuitem label="Item 1"/>
                    <menuitem label="Item 2"/>
                    <menuitem label="Item 3"/>
                    <menuitem label="Item 4"/>
                    </menupopup>
                </menulist>
        </menupopup>
        </menu>
    <menu label="Help" />
    </menubar>

When the cursor is over "Options" item, mozilla crashes. It happens everytime
when XUL is loaded -- from chrome or just into browser. When I turn "editable"
to "false" for the <menulist>, bug disappears.

Reproducible: Always

Steps to Reproduce:
1. Create the following XUL code into the file "mycalc.xul"
----------------------------------------------------------------------------
<?xml version="1.0"?>
<?xml-stylesheet href="chrome://global/skin" type="text/css"?>
<?xml-stylesheet href="chrome://mycalc/skin" type="text/css"?>
<!DOCTYPE window SYSTEM "chrome://mycalc/locale/mycalc.dtd" >
<window title="Mozilla Calculator"
  xmlns:html="http://www.w3.org/1999/xhtml"
  xmlns="http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul"
  width="300"
  height="215"
  onload="centerWindowOnScreen()">
<script type="application/x-javascript"
src="chrome://global/content/dialogOverlay.js" />
<script type="application/x-javascript" src="chrome://mycalc/content/mycalc.js" />

<menubar id="menu">
    <menu label="Edit" />

<!-- BEGIN: Only this code is important -->

    <menu label="Options" >
        <menupopup>
            <menuitem label="Item" />
            <button label="Button wow!" />
            <edit>Edit wow!</edit>
            <menuitem label="Sewcond itemm"/>
            <menuitem label="Yet another item"/>
            <menulist editable="true">
                <menupopup>
                    <menuitem label="Item 1"/>
                    <menuitem label="Item 2"/>
                    <menuitem label="Item 3"/>
                    <menuitem label="Item 4"/>
                    </menupopup>
                </menulist>
        </menupopup>
        </menu>
<!-- END -->

    <menu label="Help" />
    </menubar>

 <vbox align="left" id="vb">
  <label id="xlabel" value="a label" />
  <image src="file:///D:/Images/Cj.png" />
  <button label="Hi!" />
 </vbox>
</window>
----------------------------------------------------------------------------
2. Load file into the mozilla browser.
3. See the process "mozilla.exe" has died, and all mozilla applications have
followed it.

Actual Results:  
Win32 error window about access violation at 0x00000000 appears.

Expected Results:  
I think Mozilla shoud display a popup-menu with a editable combo inside.
However, I dont really need this, it was just a test of XUL.

This kept happening while I was upgrading mozilla to versions 1.3, 1.3.1, 1.4b
and 1.4rc1 (current BuildID:2003052908).

I repeat, this is not critical bug although it crashes Mozilla. I dont think
edits or combos in popup menus is good UI solution.
for your convenience: copied example from below.
Loading it from my harddisk gave me TalkbackID TB21028915K (after crashing)
Confirming on Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.5a) Gecko/20030613
TB21028915K loaded locally,
TB21029019K from loading of attachment
Status: UNCONFIRMED → NEW
Ever confirmed: true
Confriming crash on Liunx with cvs 20030610. Reporter please change OS to All
Changing OS to All
TB21030489Q
OS: Windows XP → All
sorry for double-post..

-> Views
Assignee: hyatt → roc+moz
Component: XP Toolkit/Widgets: Menus → Layout: View Rendering
QA Contact: shrir → ian
this regressed between trunk builds 2003041705 and 2003041805
*** Bug 210919 has been marked as a duplicate of this bug. ***
*** Bug 211839 has been marked as a duplicate of this bug. ***
Still crashing Moz 1.7 Beta, Slackware Current: Mozilla/5.0 (X11; U; Linux i686;
en-US; rv:1.7b) Gecko/20040316

Talkback ID is: TB11335X
Captured at 04/03/04 at 01:33 PM
This seems to be fixed in recent cvs. I cannot get linux to crash anymore with
example provided. Anyone ?
worksforme with linux trunk 2004100206
Status: NEW → RESOLVED
Closed: 20 years ago
Resolution: --- → WORKSFORME
Component: Layout: View Rendering → Layout: Web Painting
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: