256351 - browser crash if clicking on autocomplete drop-down list after hiting enter [@ nsFormFillController::OnTextEntered ]

Status: RESOLVED DUPLICATE of bug 253709

(Toolkit :: Form Manager, defect)

Description

[Mathieu Gilbert]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7) Gecko/20040803 Firefox/0.8
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7) Gecko/20040803 Firefox/0.8  || Edited: It is actually Firefox 0.9.3

This is the page i found the bug on. I was using 0.9.2 at the time so I updated
to 0.9.3 and the bug is still present. I can reproduce it at anytime, as long as
i have enough time to hit backspace a couple times before the new page shows up.

The bug goes as follow. Go to a page with a textbox in it. Type something in
that you previously submitted so that the autocomplete list shows up. Change one
of the character so that it would create a text you've never entered before.
Then hit enter to submit. The caption is still in the box at this point so hit
backspace untill the autocomplete list appears again. You have to do that before
the new page loads(since you've hit enter, it sent the form to the server). 

Once the new page is loaded, the autocomplete list is still on the screen. Take
you mouse over and click on it. Bang it crashes.

Just so I'm clear enough is the same example shown with text and "pictures".
   
 
 ----------------
| oksala         |         <--- That is what I have in the textbox when I submit
 ----------------
  oksalu                   <--- That is the autocomplete list before i put
  oksaly                        the last letter in.


At this point the browser is waiting for a reply from server. Just hit backspace
once, and the autocomplete list will appear.

The new page shows up, the drop down list is still on the page.

Click on it. BANG.

Hope it helps

mathieu

wilbrod45 at hotmail.com



http://www.meteomedia.com/Meteo/Villes/can/Pages/CAAB0103.htm

Reproducible: Always
Steps to Reproduce:
1.
2.
3.

Actual Results:  
browswer simply crashes

Expected Results:  
either not shown the autocomplete dropdown list on the new page or simply done
nothing after clicking on it/disapear.

Comment 1

[Mathieu Gilbert]

I just tested it on multiples websites that are just slow enough so I have
enough time to hit backspace before the new page load (www.everything2.org is
perfect) and it crashes everytime.

Comment 2

[Adam Hauner]

Mathieu Gilbert: Could you provide TalkBack incident ID?

Comment 3

[Mathieu Gilbert]

Here is all I could find (look below). I don't really know what you mean by
talkback Incident id. Just follow my "how to make it crash" text and you'll
see.. it crashes every time. All you need is a text box with autocomplete
showing you a list. Select an item from the list with the keyboard (down arow
then enter), then press enter again to send the form, hit backspace quickly so
the automplete list re-shows up, wait for the new page to load and click using
your mouse on the drop down autocomplete list that did not disapear with the
loading of the new page.

Mathieu

Application Information

 Application Launch Time
   2004-08-25 15:37

 Build Identifier
   2004080301

 Deployment Identifier
   MozillaOrgFirefox10Win322004080301

 Interface Version
            8 (0x00000008)

 Monitor Configuration Version
            7 (0x00000007)

 Platform Identifier
   Win32

 Product Identifier
   Firefox10

 Talkback Configuration Version
            7 (0x00000007)

 Talkback Library Version
            7 (0x00000007)

 Vendor Identifier
   MozillaOrg

Runtime Information

 Active Application
         7012 (0x00001B64)

 Command Line
   "C:\Program Files\Mozilla Firefox\firefox.exe" 

 Contents of the Stack

[   0] 18 00 00 00 08 00 00 00 F8 FF 12 00 08 00 00 00 [................]
[  10] 76 85 89 00 00 00 00 00                         [v.......]

 Event Description
   32-bit Windows exception

 Event Type
            1 (0x00000001)

 Information Collection Time
   2004-08-25 15:38

 Memory Status

[   0] 20 00 00 00 36 00 00 00 00 C0 EF 1B 00 B0 C6 0C [ ...6...........]
[  10] 00 E0 E5 41 00 20 F5 2F 00 00 FE 7F 00 20 73 7A [...A. ./..... sz]

Comment 4

[Adam Hauner]

After crash, TalkBack agent appears and it will ask you about sendind report.
Send it and then  go to your Firefox directory and go to components/, there
start talkback.exe, it'll give you a list with the Talkback IDs. Thank's a lot.

Comment 5

[Mathieu Gilbert]

Ok .. i got it now :)

TB657971Y

Comment 6

[timeless]

*** This bug has been marked as a duplicate of 253709 ***

Comment 7

[Adam Hauner]

Mathieu, could you try to reproduce with actual nightbuild from Aviary Branch
<http://ftp.mozilla.org/pub/mozilla.org/firefox/nightly/latest-0.9/>? Some bugs
with this signature were fixed recently.

TB657971Y:
nsFormFillController::OnTextEntered 
[d:/builds/tinderbox/firefox-0.9.3/WINNT_5.0_Clobber/mozilla/toolkit/components/satchel/src/nsFormFillController.cpp,
line 428]
nsAutoCompleteController::EnterMatch 
[d:/builds/tinderbox/firefox-0.9.3/WINNT_5.0_Clobber/mozilla/toolkit/components/autocomplete/src/nsAutoCompleteController.cpp,
line 888]
nsAutoCompleteController::HandleEnter 
[d:/builds/tinderbox/firefox-0.9.3/WINNT_5.0_Clobber/mozilla/toolkit/components/autocomplete/src/nsAutoCompleteController.cpp,
line 236]
XPTC_InvokeByIndex 
[d:/builds/tinderbox/firefox-0.9.3/WINNT_5.0_Clobber/mozilla/xpcom/reflect/xptcall/src/md/win32/xptcinvoke.cpp,
line 102]
XPCWrappedNative::CallMethod 
[d:/builds/tinderbox/firefox-0.9.3/WINNT_5.0_Clobber/mozilla/js/src/xpconnect/src/xpcwrappednative.cpp,
line 2027]
XPC_WN_CallMethod 
[d:/builds/tinderbox/firefox-0.9.3/WINNT_5.0_Clobber/mozilla/js/src/xpconnect/src/xpcwrappednativejsops.cpp,
line 1287]
js_Invoke 
[d:/builds/tinderbox/firefox-0.9.3/WINNT_5.0_Clobber/mozilla/js/src/jsinterp.c,
line 941]
js_Interpret 
[d:/builds/tinderbox/firefox-0.9.3/WINNT_5.0_Clobber/mozilla/js/src/jsinterp.c,
line 2973]
js_Invoke 
[d:/builds/tinderbox/firefox-0.9.3/WINNT_5.0_Clobber/mozilla/js/src/jsinterp.c,
line 958]
js_InternalInvoke 
[d:/builds/tinderbox/firefox-0.9.3/WINNT_5.0_Clobber/mozilla/js/src/jsinterp.c,
line 1035]
JS_CallFunctionValue 
[d:/builds/tinderbox/firefox-0.9.3/WINNT_5.0_Clobber/mozilla/js/src/jsapi.c,
line 3607]
nsJSContext::CallEventHandler 
[d:/builds/tinderbox/firefox-0.9.3/WINNT_5.0_Clobber/mozilla/dom/src/base/nsJSEnvironment.cpp,
line 1297]
nsJSEventListener::HandleEvent 
[d:/builds/tinderbox/firefox-0.9.3/WINNT_5.0_Clobber/mozilla/dom/src/events/nsJSEventListener.cpp,
line 184]
nsXBLPrototypeHandler::ExecuteHandler 
[d:/builds/tinderbox/firefox-0.9.3/WINNT_5.0_Clobber/mozilla/content/xbl/src/nsXBLPrototypeHandler.cpp,
line 461]
nsXBLEventHandler::HandleEvent 
[d:/builds/tinderbox/firefox-0.9.3/WINNT_5.0_Clobber/mozilla/content/xbl/src/nsXBLEventHandler.cpp,
line 88]
nsEventListenerManager::HandleEventSubType 
[d:/builds/tinderbox/firefox-0.9.3/WINNT_5.0_Clobber/mozilla/content/events/src/nsEventListenerManager.cpp,
line 1434]
nsEventListenerManager::HandleEvent 
[d:/builds/tinderbox/firefox-0.9.3/WINNT_5.0_Clobber/mozilla/content/events/src/nsEventListenerManager.cpp,
line 1512]
nsXULElement::HandleDOMEvent 
[d:/builds/tinderbox/firefox-0.9.3/WINNT_5.0_Clobber/mozilla/content/xul/content/src/nsXULElement.cpp,
line 2841]
PresShell::HandleEventInternal 
[d:/builds/tinderbox/firefox-0.9.3/WINNT_5.0_Clobber/mozilla/layout/html/base/src/nsPresShell.cpp,
line 6036]
PresShell::HandleEvent 
[d:/builds/tinderbox/firefox-0.9.3/WINNT_5.0_Clobber/mozilla/layout/html/base/src/nsPresShell.cpp,
line 5929]
nsViewManager::HandleEvent 
[d:/builds/tinderbox/firefox-0.9.3/WINNT_5.0_Clobber/mozilla/view/src/nsViewManager.cpp,
line 2285]
nsViewManager::DispatchEvent 
[d:/builds/tinderbox/firefox-0.9.3/WINNT_5.0_Clobber/mozilla/view/src/nsViewManager.cpp,
line 2025]
HandleEvent 
[d:/builds/tinderbox/firefox-0.9.3/WINNT_5.0_Clobber/mozilla/view/src/nsView.cpp,
line 79]
nsWindow::DispatchEvent 
[d:/builds/tinderbox/firefox-0.9.3/WINNT_5.0_Clobber/mozilla/widget/src/windows/nsWindow.cpp,
line 1067]
nsWindow::DispatchMouseEvent 
[d:/builds/tinderbox/firefox-0.9.3/WINNT_5.0_Clobber/mozilla/widget/src/windows/nsWindow.cpp,
line 5261]
ChildWindow::DispatchMouseEvent 
[d:/builds/tinderbox/firefox-0.9.3/WINNT_5.0_Clobber/mozilla/widget/src/windows/nsWindow.cpp,
line 5511]
nsWindow::WindowProc 
[d:/builds/tinderbox/firefox-0.9.3/WINNT_5.0_Clobber/mozilla/widget/src/windows/nsWindow.cpp,
line 1349]
USER32.dll + 0x3a50 (0x77d13a50)
USER32.dll + 0x3b1f (0x77d13b1f)
USER32.dll + 0x3d79 (0x77d13d79)
USER32.dll + 0x3ddf (0x77d13ddf)
nsAppShellService::Run 
[d:/builds/tinderbox/firefox-0.9.3/WINNT_5.0_Clobber/mozilla/xpfe/appshell/src/nsAppShellService.cpp,
line 495]
main 
[d:/builds/tinderbox/firefox-0.9.3/WINNT_5.0_Clobber/mozilla/browser/app/nsBrowserApp.cpp,
line 58]
kernel32.dll + 0x214c7 (0x77e614c7)