20953 - purify reports UMR in nsEventStateManager::GenerateMouseEnterExit

Status: RESOLVED WORKSFORME

(Core :: Layout, defect, P3)

Description

[buster]

[W] UMR: Uninitialized memory read in
nsEventStateManager::GenerateMouseEnterExit(nsIPresContext *,nsGUIEvent *) {1
occurrence}
    Reading 4 bytes from 0x0012f7d0 (4 bytes at 0x0012f7d0 uninitialized)
    Address 0x0012f7d0 points into a thread's stack
    Address 0x0012f7d0 is 8 bytes past the start of local variable 'event' in
nsEnderEventListener::DispatchMouseEvent(nsIDOMMouseEvent *,int)
    Thread ID: 0xe3
    Error location
        nsEventStateManager::GenerateMouseEnterExit(nsIPresContext *,nsGUIEvent
*) [nsEventStateManager.cpp:1066]
                        event.message = NS_MOUSE_ENTER;
                        event.widget = aEvent->widget;
                        event.clickCount = 0;
             =>         event.point = aEvent->point;
                        event.refPoint = aEvent->refPoint;

                        mCurrentTargetContent = targetContent;
        nsEventStateManager::PreHandleEvent(nsIPresContext *,nsGUIEvent
*,nsIFrame *,nsEventStatus *,nsIView *) [nsEventStateManager.cpp:195]
        nsEnderEventListener::DispatchMouseEvent(nsIDOMMouseEvent *,int)
[nsGfxTextControlFrame.cpp:3140]
        nsEnderEventListener::MouseOver(nsIDOMEvent *)
[nsGfxTextControlFrame.cpp:3337]
        nsEventListenerManager::HandleEvent(nsIPresContext *,nsEvent
*,nsIDOMEvent * *,UINT,nsEventStatus *) [nsEventListenerManager.cpp:705]
        nsDocument::HandleDOMEvent(nsIPresContext *,nsEvent *,nsIDOMEvent *
*,UINT,nsEventStatus *) [nsDocument.cpp:2399]
        nsHTMLHtmlElement::HandleDOMEvent(nsIPresContext *,nsEvent *,nsIDOMEvent
* *,UINT,nsEventStatus *) [nsHTMLHtmlElement.cpp:192]
        nsGenericElement::HandleDOMEvent(nsIPresContext *,nsEvent *,nsIDOMEvent
* *,UINT,nsEventStatus *) [nsGenericElement.cpp:794]
        nsHTMLDivElement::HandleDOMEvent(nsIPresContext *,nsEvent *,nsIDOMEvent
* *,UINT,nsEventStatus *) [nsHTMLDivElement.cpp:226]
        nsGenericDOMDataNode::HandleDOMEvent(nsIPresContext *,nsEvent
*,nsIDOMEvent * *,UINT,nsEventStatus *) [nsGenericDOMDataNode.cpp:799]

Comment 1

[joki (gone)]

Mass-moving excess bugs to M14

Comment 2

[joki (gone)]

Moving to M15 

Comment 3

[joki (gone)]

Mass-moving bugs out of M15 that I won't get to.  Will refit individual 
milestones after moving them.

Comment 4

[joki (gone)]

Moving to M18

Comment 5

[joki (gone)]

This bug has been marked "future" because the original netscape engineer working 
on this is over-burdened. If you feel this is an error, that you or another 
known resource will be working on this bug,or if it blocks your work in some way 
-- please attach your concern to the bug for reconsideration.

Comment 6

[buster]

fixed the summary, it's a UMR, not an ABR.  Marking "helpwanted", this is a bug 
that somebody could easily pick up for Tom.

Comment 7

[[e-mail] (gone - use [e-mail] instead)]

Is bug 203505 the newer 'version' of this bug?

Comment 8

[Mike Kaply [:mkaply]]

I just ran a current build with Purify and this UMR doesn't happen anymore.