Closed Bug 269995 Opened 20 years ago Closed 20 years ago

crash when dragging a link to the tabbar [@ objc_msgSend]

Categories

(Camino Graveyard :: Drag & Drop, defect)

Product:
Camino Graveyard
Component:
Drag & Drop
Platform:
PowerPC
macOS
Type:
defect
Priority:
Not set
Severity:
major

Tracking

(Not tracked)

Status:
RESOLVED FIXED
Milestone:
Camino0.9

People

(Reporter: timeless, Assigned: me)

Details

(Keywords: crash)

Crash Data

Attachments

(4 files, 4 obsolete files)

Sample of Camino hung after trying to drag weblog to tab bar
7.86 KB, text/plain
Details
presumably related crash from -[BrowserTabBarView draggingUpdated:]
30.12 KB, text/plain
Details
presumably related crash from -[BrowserTabBarView draggingUpdated:]
28.98 KB, text/plain
Details
v4
3.74 KB, patch
Details | Diff | Splinter Review
Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.8a5) Gecko/20041110 Camino/0.8+ Date/Time: 2004-11-15 08:54:13 -0800 OS Version: 10.3.6 (Build 7R28) Report Version: 2 Command: Camino Path: /Applications/Browsers/Camino.app/Contents/MacOS/Camino Version: 0.8+ (0.8+) PID: 11039 Thread: 0 Exception: EXC_BAD_ACCESS (0x0001) Codes: KERN_PROTECTION_FAILURE (0x0002) at 0x00000020 Thread 0 Crashed: 0 libobjc.A.dylib 0x908311ec objc_msgSend + 0xc 1 org.mozilla.navigator 0x000661a8 -[BrowserTabBarView prepareForDragOperation:] + 0x28 2 com.apple.AppKit 0x93058d70 NSCoreDragReceiveProc + 0x290 3 com.apple.HIServices 0x92d4c23c DoDropMessage + 0x60 4 com.apple.HIServices 0x92d4c1ac SendDropMessage + 0x34 5 com.apple.HIServices 0x92d3ce7c DragInApplication + 0x1bc 6 com.apple.HIServices 0x92d4bc7c DragLoop + 0x80 7 com.apple.HIServices 0x92d4b16c CoreDragStartDragging + 0xac 8 com.apple.HIToolbox 0x92918948 TrackDrag + 0x25c 9 org.mozilla.navigator 0x00587c6c nsDragService::InvokeDragSession(nsIDOMNode*, nsISupportsArray*, nsIScriptableRegion*, unsigned) + 0x1d8 10 org.mozilla.navigator 0x0038d0d0 nsContentAreaDragDrop::DragGesture(nsIDOMEvent*) + 0x45c 11 org.mozilla.navigator 0x002e7330 DispatchToInterface(nsIDOMEvent*, nsIDOMEventListener*, unsigned (nsIDOMEventListener::*)(nsIDOMEvent*), nsID const&, int*) + 0x88 12 org.mozilla.navigator 0x002ea3ec nsEventListenerManager::HandleEvent(nsPresContext*, nsEvent*, nsIDOMEvent**, nsIDOMEventTarget*, unsigned, nsEventStatus*) + 0x240 13 org.mozilla.navigator 0x00431694 nsWindowRoot::HandleChromeEvent(nsPresContext*, nsEvent*, nsIDOMEvent**, unsigned, nsEventStatus*) + 0xb4 14 org.mozilla.navigator 0x0034487c GlobalWindowImpl::HandleDOMEvent(nsPresContext*, nsEvent*, nsIDOMEvent**, unsigned, nsEventStatus*) + 0x3e8 15 org.mozilla.navigator 0x002d4f40 nsDocument::HandleDOMEvent(nsPresContext*, nsEvent*, nsIDOMEvent**, unsigned, nsEventStatus*) + 0x14c 16 org.mozilla.navigator 0x00355fdc nsGenericElement::HandleDOMEvent(nsPresContext*, nsEvent*, nsIDOMEvent**, unsigned, nsEventStatus*) + 0x714 17 org.mozilla.navigator 0x00355fdc nsGenericElement::HandleDOMEvent(nsPresContext*, nsEvent*, nsIDOMEvent**, unsigned, nsEventStatus*) + 0x714 18 org.mozilla.navigator 0x00355fdc nsGenericElement::HandleDOMEvent(nsPresContext*, nsEvent*, nsIDOMEvent**, unsigned, nsEventStatus*) + 0x714 19 org.mozilla.navigator 0x00355fdc nsGenericElement::HandleDOMEvent(nsPresContext*, nsEvent*, nsIDOMEvent**, unsigned, nsEventStatus*) + 0x714 20 org.mozilla.navigator 0x00355fdc nsGenericElement::HandleDOMEvent(nsPresContext*, nsEvent*, nsIDOMEvent**, unsigned, nsEventStatus*) + 0x714 21 org.mozilla.navigator 0x00355fdc nsGenericElement::HandleDOMEvent(nsPresContext*, nsEvent*, nsIDOMEvent**, unsigned, nsEventStatus*) + 0x714 22 org.mozilla.navigator 0x00355fdc nsGenericElement::HandleDOMEvent(nsPresContext*, nsEvent*, nsIDOMEvent**, unsigned, nsEventStatus*) + 0x714 23 org.mozilla.navigator 0x00355fdc nsGenericElement::HandleDOMEvent(nsPresContext*, nsEvent*, nsIDOMEvent**, unsigned, nsEventStatus*) + 0x714 24 org.mozilla.navigator 0x00355fdc nsGenericElement::HandleDOMEvent(nsPresContext*, nsEvent*, nsIDOMEvent**, unsigned, nsEventStatus*) + 0x714 25 org.mozilla.navigator 0x00355fdc nsGenericElement::HandleDOMEvent(nsPresContext*, nsEvent*, nsIDOMEvent**, unsigned, nsEventStatus*) + 0x714 26 org.mozilla.navigator 0x00355fdc nsGenericElement::HandleDOMEvent(nsPresContext*, nsEvent*, nsIDOMEvent**, unsigned, nsEventStatus*) + 0x714 27 org.mozilla.navigator 0x0036f4f4 nsGenericHTMLElement::HandleDOMEventForAnchors(nsPresContext*, nsEvent*, nsIDOMEvent**, unsigned, nsEventStatus*) + 0x38 28 org.mozilla.navigator 0x004d05f4 nsGenericDOMDataNode::HandleDOMEvent(nsPresContext*, nsEvent*, nsIDOMEvent**, unsigned, nsEventStatus*) + 0x190 29 org.mozilla.navigator 0x003c3518 nsEventStateManager::GenerateDragGesture(nsPresContext*, nsGUIEvent*) + 0x38c 30 org.mozilla.navigator 0x003c152c nsEventStateManager::PreHandleEvent(nsPresContext*, nsEvent*, nsIFrame*, nsEventStatus*, nsIView*) + 0x258 31 org.mozilla.navigator 0x0026d050 PresShell::HandleEventInternal(nsEvent*, nsIView*, unsigned, nsEventStatus*) + 0x14c 32 org.mozilla.navigator 0x0026cdf4 PresShell::HandleEvent(nsIView*, nsGUIEvent*, nsEventStatus*, int, int&) + 0x448 33 org.mozilla.navigator 0x00324920 nsViewManager::HandleEvent(nsView*, nsGUIEvent*, int) + 0x320 34 org.mozilla.navigator 0x00323cc0 nsViewManager::DispatchEvent(nsGUIEvent*, nsEventStatus*) + 0xb94 35 org.mozilla.navigator 0x003cbab0 HandleEvent(nsGUIEvent*) + 0x48 36 org.mozilla.navigator 0x0057f65c nsChildView::DispatchEvent(nsGUIEvent*, nsEventStatus&) + 0xa0 37 org.mozilla.navigator 0x0057f6e8 nsChildView::DispatchWindowEvent(nsGUIEvent&) + 0x20 38 org.mozilla.navigator 0x0057f794 nsChildView::DispatchMouseEvent(nsMouseEvent&) + 0x58 39 org.mozilla.navigator 0x005814c8 -[ChildView mouseDragged:] + 0xe4 40 com.apple.AppKit 0x92e02b70 -[NSWindow sendEvent:] + 0x1780 41 org.mozilla.navigator 0x00036cd4 -[BrowserWindow sendEvent:] + 0xb4 42 com.apple.AppKit 0x92df4b98 -[NSApplication sendEvent:] + 0xebc 43 com.apple.AppKit 0x92dfcfb0 -[NSApplication run] + 0x240 44 com.apple.AppKit 0x92eb948c NSApplicationMain + 0x1d0 45 org.mozilla.navigator 0x0000a458 _start + 0x17c 46 org.mozilla.navigator 0x0000a2d8 start + 0x30 Thread 1: 0 libSystem.B.dylib 0x9000b20c select + 0xc 1 libnspr4.dylib 0x0301fa38 poll + 0x188 2 libnspr4.dylib 0x0301c284 _pr_poll_with_poll + 0x32c 3 org.mozilla.navigator 0x000aeaf0 nsSocketTransportService::Run() + 0x198 4 libxpcom_core.dylib 0x10046248 nsThread::Main(void*) + 0x38 5 libnspr4.dylib 0x0301d6cc _pt_root + 0xac 6 libSystem.B.dylib 0x900246e8 _pthread_body + 0x28 Thread 2: 0 libSystem.B.dylib 0x900074c8 mach_msg_trap + 0x8 1 libSystem.B.dylib 0x90007018 mach_msg + 0x38 2 libjvm.dylib 0x9253c68c JNI_CreateJavaVM_Impl + 0x173c 3 libjvm.dylib 0x9253c624 JNI_CreateJavaVM_Impl + 0x16d4 4 libjvm.dylib 0x924fdc9c JVM_GetClassMethodsCount + 0x21c 5 libSystem.B.dylib 0x900246e8 _pthread_body + 0x28 Thread 3: 0 libSystem.B.dylib 0x900074c8 mach_msg_trap + 0x8 1 libSystem.B.dylib 0x90007018 mach_msg + 0x38 2 libjvm.dylib 0x9249a89c JVM_NewInstance + 0x1fcc 3 libjvm.dylib 0x924b9f18 JVM_FillInStackTrace + 0x2b8 4 libjvm.dylib 0x924bf948 JVM_Send + 0x42e8 5 libjvm.dylib 0x9255173c JNI_CreateJavaVM_Impl + 0x167ec 6 libjvm.dylib 0x924fdc9c JVM_GetClassMethodsCount + 0x21c 7 libSystem.B.dylib 0x900246e8 _pthread_body + 0x28 Thread 4: 0 libSystem.B.dylib 0x900074c8 mach_msg_trap + 0x8 1 libSystem.B.dylib 0x90007018 mach_msg + 0x38 2 libjvm.dylib 0x9249a808 JVM_NewInstance + 0x1f38 3 libjvm.dylib 0x924a2a20 JVM_ArrayCopy + 0x4d0 4 libjvm.dylib 0x924b8b48 JVM_MonitorNotify + 0x778 5 libjvm.dylib 0x924b97a8 JVM_MonitorWait + 0xd8 6 <<00000000>> 0x101e8680 0 + 0x101e8680 7 <<00000000>> 0x101e668c 0 + 0x101e668c 8 <<00000000>> 0x101e668c 0 + 0x101e668c 9 <<00000000>> 0xa24a3720 typeinfo name for std::bad_exception + 0x6e7c 10 libjvm.dylib 0x9249808c JVM_CurrentTimeMillis + 0x136c 11 libjvm.dylib 0x924cd518 JVM_GetCPClassNameUTF + 0x1798 12 libjvm.dylib 0x924d2ce4 JVM_FindClassFromClass + 0x9e4 13 libjvm.dylib 0x924ec170 JVM_IsSameClassPackage + 0xfc0 14 libjvm.dylib 0x924e66d8 JVM_GetMethodIxExceptionTableEntry + 0x2058 15 libjvm.dylib 0x92577054 JVM_UnloadLibrary + 0x85c4 16 libjvm.dylib 0x924fdc9c JVM_GetClassMethodsCount + 0x21c 17 libSystem.B.dylib 0x900246e8 _pthread_body + 0x28 Thread 5: 0 libSystem.B.dylib 0x900074c8 mach_msg_trap + 0x8 1 libSystem.B.dylib 0x90007018 mach_msg + 0x38 2 libjvm.dylib 0x9249a808 JVM_NewInstance + 0x1f38 3 libjvm.dylib 0x924a2a20 JVM_ArrayCopy + 0x4d0 4 libjvm.dylib 0x924b8b48 JVM_MonitorNotify + 0x778 5 libjvm.dylib 0x924b97a8 JVM_MonitorWait + 0xd8 6 <<00000000>> 0x101e8680 0 + 0x101e8680 7 <<00000000>> 0x101e668c 0 + 0x101e668c 8 <<00000000>> 0x101e65cc 0 + 0x101e65cc 9 <<00000000>> 0x101e65cc 0 + 0x101e65cc 10 <<00000000>> 0xa24a3720 typeinfo name for std::bad_exception + 0x6e7c 11 libjvm.dylib 0x9249808c JVM_CurrentTimeMillis + 0x136c 12 libjvm.dylib 0x924cd518 JVM_GetCPClassNameUTF + 0x1798 13 libjvm.dylib 0x924d2ce4 JVM_FindClassFromClass + 0x9e4 14 libjvm.dylib 0x924ec170 JVM_IsSameClassPackage + 0xfc0 15 libjvm.dylib 0x924e66d8 JVM_GetMethodIxExceptionTableEntry + 0x2058 16 libjvm.dylib 0x92577054 JVM_UnloadLibrary + 0x85c4 17 libjvm.dylib 0x924fdc9c JVM_GetClassMethodsCount + 0x21c 18 libSystem.B.dylib 0x900246e8 _pthread_body + 0x28 Thread 6: 0 libSystem.B.dylib 0x900074c8 mach_msg_trap + 0x8 1 libSystem.B.dylib 0x90007018 mach_msg + 0x38 2 libjvm.dylib 0x9249a89c JVM_NewInstance + 0x1fcc 3 libjvm.dylib 0x924a1a04 JVM_GetClassLoader + 0x1824 4 libjvm.dylib 0x924a17a4 JVM_GetClassLoader + 0x15c4 5 libjvm.dylib 0x924fdc9c JVM_GetClassMethodsCount + 0x21c 6 libSystem.B.dylib 0x900246e8 _pthread_body + 0x28 Thread 7: 0 libSystem.B.dylib 0x900074c8 mach_msg_trap + 0x8 1 libSystem.B.dylib 0x90007018 mach_msg + 0x38 2 libjvm.dylib 0x9249a808 JVM_NewInstance + 0x1f38 3 libjvm.dylib 0x924b9f70 JVM_FillInStackTrace + 0x310 4 libjvm.dylib 0x92553b20 JVM_InitProperties + 0x1b10 5 libjvm.dylib 0x92553920 JVM_InitProperties + 0x1910 6 libjvm.dylib 0x92577054 JVM_UnloadLibrary + 0x85c4 7 libjvm.dylib 0x924fdc9c JVM_GetClassMethodsCount + 0x21c 8 libSystem.B.dylib 0x900246e8 _pthread_body + 0x28 Thread 8: 0 libSystem.B.dylib 0x900074c8 mach_msg_trap + 0x8 1 libSystem.B.dylib 0x90007018 mach_msg + 0x38 2 libjvm.dylib 0x9249a808 JVM_NewInstance + 0x1f38 3 libjvm.dylib 0x924b9f70 JVM_FillInStackTrace + 0x310 4 libjvm.dylib 0x924e22b0 JVM_StartThread + 0x580 5 libjvm.dylib 0x924d0e04 JVM_FindLoadedClass + 0xa44 6 libjvm.dylib 0x92577054 JVM_UnloadLibrary + 0x85c4 7 libjvm.dylib 0x924fdc9c JVM_GetClassMethodsCount + 0x21c 8 libSystem.B.dylib 0x900246e8 _pthread_body + 0x28 Thread 9: 0 libSystem.B.dylib 0x90018be8 semaphore_timedwait_signal_trap + 0x8 1 libSystem.B.dylib 0x9000e788 _pthread_cond_wait + 0x268 2 libnspr4.dylib 0x030185e4 pt_TimedWait + 0xa8 3 libnspr4.dylib 0x03018848 PR_WaitCondVar + 0x88 4 libxpcom_core.dylib 0x10048d98 TimerThread::Run() + 0x19c 5 libxpcom_core.dylib 0x10046248 nsThread::Main(void*) + 0x38 6 libnspr4.dylib 0x0301d6cc _pt_root + 0xac 7 libSystem.B.dylib 0x900246e8 _pthread_body + 0x28 Thread 10: 0 libSystem.B.dylib 0x90016f48 semaphore_wait_signal_trap + 0x8 1 libSystem.B.dylib 0x9000e790 _pthread_cond_wait + 0x270 2 com.apple.Foundation 0x90a4bb00 -[NSConditionLock lockWhenCondition:] + 0x44 3 com.apple.AppKit 0x92dca11c -[NSUIHeartBeat _heartBeatThread:] + 0x190 4 com.apple.Foundation 0x90a39b74 forkThreadForFunction + 0x6c 5 libSystem.B.dylib 0x900246e8 _pthread_body + 0x28 Thread 11: 0 libSystem.B.dylib 0x900074c8 mach_msg_trap + 0x8 1 libSystem.B.dylib 0x90007018 mach_msg + 0x38 2 com.apple.CoreFoundation 0x90191708 __CFRunLoopRun + 0x350 3 com.apple.CoreFoundation 0x90195e94 CFRunLoopRunSpecific + 0x148 4 com.apple.audio.CoreAudio 0x90732f80 HALRunLoop::OwnThread(void*) + 0x104 5 com.apple.audio.CoreAudio 0x907391e0 CAPThread::Entry(CAPThread*) + 0x30 6 libSystem.B.dylib 0x900246e8 _pthread_body + 0x28 Thread 12: 0 libSystem.B.dylib 0x90018be8 semaphore_timedwait_signal_trap + 0x8 1 libSystem.B.dylib 0x9000e788 _pthread_cond_wait + 0x268 2 libnspr4.dylib 0x030185e4 pt_TimedWait + 0xa8 3 libnspr4.dylib 0x03018848 PR_WaitCondVar + 0x88 4 org.mozilla.navigator 0x000bac88 nsHostResolver::GetHostToLookup(nsHostRecord**) + 0x84 5 org.mozilla.navigator 0x000bafdc nsHostResolver::ThreadFunc(void*) + 0xb8 6 libnspr4.dylib 0x0301d6cc _pt_root + 0xac 7 libSystem.B.dylib 0x900246e8 _pthread_body + 0x28 PPC Thread State: srr0: 0x908311ec srr1: 0x0000f030 vrsave: 0x00000000 cr: 0x42444224 xer: 0x20000000 lr: 0x000661a8 ctr: 0x908311e0 r0: 0x000661a8 r1: 0xbfffced0 r2: 0x019af814 r3: 0x05301430 r4: 0x90888e24 r5: 0x05595c00 r6: 0xa0190dcc r7: 0xa0190dcc r8: 0xa0190dcc r9: 0x01901010 r10: 0x00000000 r11: 0x0085f23c r12: 0x00000000 r13: 0x00000000 r14: 0x00000000 r15: 0x00000000 r16: 0x00000000 r17: 0x00000000 r18: 0x00000000 r19: 0xa2df8aec r20: 0xa2df8aec r21: 0x08000001 r22: 0x00000000 r23: 0xbfffd410 r24: 0xbfffd440 r25: 0x00000000 r26: 0x00000000 r27: 0x00038f8c r28: 0x05595c00 r29: 0x019a42b0 r30: 0x019a42b0 r31: 0x00066180 Binary Images Description: 0x1000 - 0x847fff org.mozilla.navigator 0.8+ /Applications/Browsers/Camino.app/Contents/MacOS/Camino 0x19f36c0 - 0x19f3775 CFMPriv_DVComponentGlue PEF binary: CFMPriv_DVComponentGlue 0x19f3990 - 0x19f3a33 CFMPriv_QuickTime PEF binary: CFMPriv_QuickTime 0x19f3aa0 - 0x19f3b17 CFMPriv_System PEF binary: CFMPriv_System 0x19f3d90 - 0x19f3e60 CFMPriv_CarbonSound PEF binary: CFMPriv_CarbonSound 0x19f3ed0 - 0x19f3fa3 CFMPriv_CommonPanels PEF binary: CFMPriv_CommonPanels 0x19f4f70 - 0x19f502b CFMPriv_Help PEF binary: CFMPriv_Help 0x19f5030 - 0x19f50fa CFMPriv_HIToolbox PEF binary: CFMPriv_HIToolbox 0x19f5170 - 0x19f5246 CFMPriv_HTMLRenderingü= ü>p PEF binary: CFMPriv_HTMLRenderingü= ü>p 0x19f52b0 - 0x19f5383 CFMPriv_ImageCapture PEF binary: CFMPriv_ImageCapture 0x19f5400 - 0x19f54e5 CFMPriv_NavigationServices PEF binary: CFMPriv_NavigationServices 0x19f5550 - 0x19f5626 CFMPriv_OpenScriptingMacBLib PEF binary: CFMPriv_OpenScriptingMacBLib 0x19f56f0 - 0x19f57ae CFMPriv_Print PEF binary: CFMPriv_Print 0x19f57c0 - 0x19f588d CFMPriv_SecurityHI PEF binary: CFMPriv_SecurityHI 0x19f5900 - 0x19f59e2 CFMPriv_SpeechRecognition PEF binary: CFMPriv_SpeechRecognition 0x19f5a50 - 0x19f5b23 CFMPriv_CarbonCore PEF binary: CFMPriv_CarbonCore 0x19f5b90 - 0x19f5c63 CFMPriv_OSServices PEF binary: CFMPriv_OSServices 0x19f5d30 - 0x19f5df2 CFMPriv_AE PEF binary: CFMPriv_AE 0x19f5e00 - 0x19f5ec5 CFMPriv_ATS PEF binary: CFMPriv_ATS 0x19f5f30 - 0x19f6007 CFMPriv_ColorSync PEF binary: CFMPriv_ColorSync 0x19f6080 - 0x19f6163 CFMPriv_FindByContentüQ PEF binary: CFMPriv_FindByContentüQ 0x19f61d0 - 0x19f62aa CFMPriv_HIServices PEF binary: CFMPriv_HIServices 0x19f6310 - 0x19f63f0 CFMPriv_LangAnalysis PEF binary: CFMPriv_LangAnalysis 0x19f6470 - 0x19f6556 CFMPriv_LaunchServices PEF binary: CFMPriv_LaunchServices 0x19f6620 - 0x19f66f7 CFMPriv_PrintCore PEF binary: CFMPriv_PrintCore 0x19f6700 - 0x19f67c2 CFMPriv_QD PEF binary: CFMPriv_QD 0x19f68b0 - 0x19f6999 CFMPriv_SpeechSynthesis PEF binary: CFMPriv_SpeechSynthesis 0x19f7120 - 0x19f71d2 CFMPriv_CoreFoundation PEF binary: CFMPriv_CoreFoundation 0x2cca000 - 0x2ccbfff org.mozilla.camino.AddressBookManager ??? (0.0.1d1) /Applications/Browsers/Camino.app/Contents/Resources/AddressBookManager.bundle/Contents/MacOS/AddressBookManager 0x3000000 - 0x3033fff libnspr4.dylib /Applications/Browsers/Camino.app/Contents/MacOS/libnspr4.dylib 0x3f67000 - 0x3f69fff com.apple.PDFImporter 1.3.1 (???) /System/Library/Components/PDFImporter.component/Contents/MacOS/PDFImporter 0x3f72000 - 0x3f74fff com.apple.textencoding.unicode 1.6.4 /System/Library/TextEncodings/Unicode Encodings.bundle/Contents/MacOS/Unicode Encodings 0x4000000 - 0x400dfff libplds4.dylib /Applications/Browsers/Camino.app/Contents/MacOS/libplds4.dylib 0x4a16000 - 0x4a3afff libnssckbi.dylib /Applications/Browsers/Camino.app/Contents/MacOS/libnssckbi.dylib 0x4b5d000 - 0x4b61fff com.apple.FolderActionsMenu 1.2.1 /System/Library/Contextual Menu Items/FolderActionsMenu.plugin/Contents/MacOS/FolderActionsMenu 0x4be5000 - 0x4c309b1 CarbonLibpwpc PEF binary: CarbonLibpwpc 0x4c309c0 - 0x4c48cad Apple;Carbon;Multimedia PEF binary: Apple;Carbon;Multimedia 0x4c4a1f0 - 0x4c4bf7b Apple;Carbon;Networking PEF binary: Apple;Carbon;Networking 0x4c63000 - 0x4c63fff com.apple.aoa.halplugin 2.4.1 /System/Library/Extensions/IOAudioFamily.kext/Contents/PlugIns/AOAHALPlugin.bundle/Contents/MacOS/AOAHALPlugin 0x4ea8000 - 0x4fe0e45 Flash Player PEF binary: Flash Player 0x5000000 - 0x500efff libplc4.dylib /Applications/Browsers/Camino.app/Contents/MacOS/libplc4.dylib 0x54b1000 - 0x54ebfff com.apple.audio.SoundManager.Components 3.8 /System/Library/Components/SoundManagerComponents.component/Contents/MacOS/SoundManagerComponents 0x5669000 - 0x56a5fff com.apple.iSightAudio 6.5.2 /Library/Audio/Plug-Ins/HAL/iSightAudio.plugin/Contents/MacOS/iSightAudio 0x6000000 - 0x606afff libmozjs.dylib /Applications/Browsers/Camino.app/Contents/MacOS/libmozjs.dylib 0x7000000 - 0x7001fff libxpcom.dylib /Applications/Browsers/Camino.app/Contents/MacOS/libxpcom.dylib 0x8000000 - 0x801afff libssl3.dylib /Applications/Browsers/Camino.app/Contents/MacOS/libssl3.dylib 0x9000000 - 0x905dfff libnss3.dylib /Applications/Browsers/Camino.app/Contents/MacOS/libnss3.dylib 0xa000000 - 0xa01dfff libsmime3.dylib /Applications/Browsers/Camino.app/Contents/MacOS/libsmime3.dylib 0xb000000 - 0xb079fff libsoftokn3.dylib /Applications/Browsers/Camino.app/Contents/MacOS/libsoftokn3.dylib 0xc000000 - 0xc019fff libxpcom_compat.dylib /Applications/Browsers/Camino.app/Contents/MacOS/libxpcom_compat.dylib 0x10000000 - 0x10083fff libxpcom_core.dylib /Applications/Browsers/Camino.app/Contents/MacOS/libxpcom_core.dylib 0x30000000 - 0x30004fff ??? SharedMenusCocoa version 0.2 (0.0.3) /Applications/Browsers/Camino.app/Contents/MacOS/../Frameworks/SharedMenusCocoa.framework/Versions/A/SharedMenusCocoa 0x83b6c000 - 0x83b78fff com.apple.agl 2.5 (AGL-2.5) /System/Library/Frameworks/AGL.framework/Versions/A/AGL 0x84660000 - 0x84669fff libz.1.1.3.dylib /usr/lib/libz.1.1.3.dylib 0x86b90000 - 0x86bbafff com.apple.QuickTime Plugin.plugin 6.5.2 /Library/Internet Plug-Ins/QuickTime Plugin.plugin/Contents/MacOS/QuickTime Plugin 0x89c7c000 - 0x89c7dfff DVComponentGlue /System/Library/Frameworks/DVComponentGlue.framework/Versions/A/DVComponentGlue 0x8c390000 - 0x8c3d1fff com.apple.QuickTimeFirewireDV.component 6.5.2 /System/Library/QuickTime/QuickTimeFirewireDV.component/Contents/MacOS/QuickTimeFirewireDV 0x8c520000 - 0x8c570fff com.apple.QuickTimeMPEG.component 6.5.2 /System/Library/QuickTime/QuickTimeMPEG.component/Contents/MacOS/QuickTimeMPEG 0x8de3f000 - 0x8e507fff com.apple.QuickTimeComponents.component 6.5.2 /System/Library/QuickTime/QuickTimeComponents.component/Contents/MacOS/QuickTimeComponents 0x8f020000 - 0x8f02efff com.apple.JavaEmbedding 1.0.4 /System/Library/Frameworks/JavaEmbedding.framework/Versions/A/JavaEmbedding 0x8fe00000 - 0x8fe4ffff dyld /usr/lib/dyld 0x90000000 - 0x90122fff libSystem.B.dylib /usr/lib/libSystem.B.dylib 0x90190000 - 0x9023dfff com.apple.CoreFoundation 6.3.5 (299.32) /System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation 0x90280000 - 0x904f9fff com.apple.CoreServices.CarbonCore 10.3.6 (10.3.5) /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CarbonCore.framework/Versions/A/CarbonCore 0x90570000 - 0x905dffff com.apple.framework.IOKit 1.3.6 (???) /System/Library/Frameworks/IOKit.framework/Versions/A/IOKit 0x90610000 - 0x9069afff com.apple.CoreServices.OSServices 3.0.1 /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/OSServices.framework/Versions/A/OSServices 0x90700000 - 0x90700fff com.apple.CoreServices 10.3 (???) /System/Library/Frameworks/CoreServices.framework/Versions/A/CoreServices 0x90720000 - 0x90787fff com.apple.audio.CoreAudio 2.1.2 /System/Library/Frameworks/CoreAudio.framework/Versions/A/CoreAudio 0x907f0000 - 0x907f9fff com.apple.DiskArbitration 2.0.4 /System/Library/PrivateFrameworks/DiskArbitration.framework/Versions/A/DiskArbitration 0x90810000 - 0x90810fff com.apple.ApplicationServices 1.0 (???) /System/Library/Frameworks/ApplicationServices.framework/Versions/A/ApplicationServices 0x90830000 - 0x9089ffff libobjc.A.dylib /usr/lib/libobjc.A.dylib 0x90910000 - 0x90983fff com.apple.DesktopServices 1.2.2 /System/Library/PrivateFrameworks/DesktopServicesPriv.framework/Versions/A/DesktopServicesPriv 0x909f0000 - 0x90b4bfff com.apple.Foundation 6.3.5 (500.56) /System/Library/Frameworks/Foundation.framework/Versions/C/Foundation 0x90c30000 - 0x90c4afff libGL.dylib /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGL.dylib 0x90c60000 - 0x90cc2fff libGLU.dylib /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLU.dylib 0x90d00000 - 0x90d1bfff com.apple.SystemConfiguration 1.7.1 (???) /System/Library/Frameworks/SystemConfiguration.framework/Versions/A/SystemConfiguration 0x90d40000 - 0x90d40fff com.apple.Carbon 10.3 (???) /System/Library/Frameworks/Carbon.framework/Versions/A/Carbon 0x90d60000 - 0x90d6bfff com.apple.opengl 1.3.6 /System/Library/Frameworks/OpenGL.framework/Versions/A/OpenGL 0x90da0000 - 0x90dc0fff com.apple.DirectoryService.Framework 1.7 /System/Library/Frameworks/DirectoryService.framework/Versions/A/DirectoryService 0x90df0000 - 0x90df4fff com.apple.JavaVM 1.4.2 (1.4.2 Release 2) /System/Library/Frameworks/JavaVM.framework/Versions/A/JavaVM 0x90ec0000 - 0x90ec0fff com.apple.Cocoa 6.3 (???) /System/Library/Frameworks/Cocoa.framework/Versions/A/Cocoa 0x910b0000 - 0x91101fff com.apple.bom 1.2.5 (63.2) /System/Library/PrivateFrameworks/Bom.framework/Versions/A/Bom 0x912a0000 - 0x912bdfff com.apple.audio.SoundManager 3.8 /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/CarbonSound.framework/Versions/A/CarbonSound 0x912e0000 - 0x912f7fff com.apple.LangAnalysis 1.5.4 /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/LangAnalysis.framework/Versions/A/LangAnalysis 0x91320000 - 0x913defff ColorSync /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ColorSync.framework/Versions/A/ColorSync 0x91460000 - 0x91473fff com.apple.speech.synthesis.framework 3.2 /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/SpeechSynthesis.framework/Versions/A/SpeechSynthesis 0x914a0000 - 0x91509fff com.apple.htmlrendering 1.1.2 /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HTMLRendering.framework/Versions/A/HTMLRendering 0x91560000 - 0x91619fff com.apple.QD 3.4.65 (???) /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/QD.framework/Versions/A/QD 0x91670000 - 0x916a8fff com.apple.AE 1.4 /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/AE.framework/Versions/A/AE 0x916e0000 - 0x91773fff com.apple.print.framework.PrintCore 3.3 /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/PrintCore.framework/Versions/A/PrintCore 0x917e0000 - 0x917f0fff com.apple.speech.recognition.framework 3.3 /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/SpeechRecognition.framework/Versions/A/SpeechRecognition 0x91810000 - 0x9182afff com.apple.openscripting 1.2.1 (???) /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/OpenScripting.framework/Versions/A/OpenScripting 0x91850000 - 0x91860fff com.apple.ImageCapture 2.1.5 /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/ImageCapture.framework/Versions/A/ImageCapture 0x91890000 - 0x9189cfff com.apple.help 1.0.1 /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Help.framework/Versions/A/Help 0x918c0000 - 0x918cdfff com.apple.CommonPanels 1.2.1 (1.0) /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/CommonPanels.framework/Versions/A/CommonPanels 0x918f0000 - 0x9193efff com.apple.print.framework.Print 3.3 /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Print.framework/Versions/A/Print 0x91990000 - 0x9199bfff com.apple.securityhi 1.2 (90) /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/SecurityHI.framework/Versions/A/SecurityHI 0x919c0000 - 0x91a33fff com.apple.NavigationServices 3.3.2 /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/NavigationServices.framework/Versions/A/NavigationServices 0x91a90000 - 0x91a90fff com.apple.audio.units.AudioUnit 1.3.2 /System/Library/Frameworks/AudioUnit.framework/Versions/A/AudioUnit 0x91ab0000 - 0x91ac4fff libCGATS.A.dylib /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libCGATS.A.dylib 0x91ae0000 - 0x91aebfff libCSync.A.dylib /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libCSync.A.dylib 0x91b10000 - 0x91b2afff libPDFRIP.A.dylib /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libPDFRIP.A.dylib 0x91b50000 - 0x91b5ffff libPSRIP.A.dylib /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libPSRIP.A.dylib 0x91b80000 - 0x91b93fff libRIP.A.dylib /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libRIP.A.dylib 0x91bb0000 - 0x91d45fff com.apple.QuickTime 6.5.2 /System/Library/Frameworks/QuickTime.framework/Versions/A/QuickTime 0x92070000 - 0x92096fff com.apple.FindByContent 1.4 (1.2) /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/FindByContent.framework/Versions/A/FindByContent 0x920c0000 - 0x922a7fff com.apple.security 2.3 (176) /System/Library/Frameworks/Security.framework/Versions/A/Security 0x92430000 - 0x92468fff com.apple.LaunchServices 10.3.5 (98.4) /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/LaunchServices.framework/Versions/A/LaunchServices 0x92490000 - 0x92616fff libjvm.dylib /System/Library/Frameworks/JavaVM.framework/Versions/1.3.1/Libraries/libjvm.dylib 0x92740000 - 0x92777fff com.apple.CFNetwork 1.2.1 (7) /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CFNetwork.framework/Versions/A/CFNetwork 0x927d0000 - 0x92b54fff com.apple.HIToolbox 1.3.4 (???) /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/HIToolbox 0x92d30000 - 0x92d80fff com.apple.HIServices 1.4.1 (0.0.1d1) /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/HIServices 0x92dc0000 - 0x932befff com.apple.AppKit 6.3.4 (743.24) /System/Library/Frameworks/AppKit.framework/Versions/C/AppKit 0x935d0000 - 0x938a8fff com.apple.CoreGraphics 1.203.26 (???) /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/CoreGraphics 0x939a0000 - 0x939b4fff libcups.2.dylib /usr/lib/libcups.2.dylib 0x939d0000 - 0x939d4fff libmathCommon.A.dylib /usr/lib/system/libmathCommon.A.dylib 0x939f0000 - 0x93ad7fff com.apple.AddressBook.framework 1.1.2 (321) /System/Library/Frameworks/AddressBook.framework/Versions/A/AddressBook 0x93b50000 - 0x93bf3fff com.apple.audio.toolbox.AudioToolbox 1.3.2 /System/Library/Frameworks/AudioToolbox.framework/Versions/A/AudioToolbox 0x93cc0000 - 0x93ccbfff libverify.dylib /System/Library/Frameworks/JavaVM.framework/Versions/1.3.1/Libraries/libverify.dylib 0x93ed0000 - 0x93edcfff libzip.jnilib /System/Library/Frameworks/JavaVM.framework/Versions/1.3.1/Libraries/libzip.jnilib 0x93f10000 - 0x93f2cfff libjava.jnilib /System/Library/Frameworks/JavaVM.framework/Versions/1.3.1/Libraries/libjava.jnilib 0x94000000 - 0x9403cfff com.apple.LDAPFramework 1.3.3 (37.3.1) /System/Library/Frameworks/LDAP.framework/Versions/A/LDAP 0x94060000 - 0x94078fff com.apple.WebServices 1.1.1 (1.1.0) /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/WebServicesCore.framework/Versions/A/WebServicesCore 0x940e0000 - 0x940e1fff com.apple.JavaCarbonSupport 1.1 /System/Library/PrivateFrameworks/JavaCarbonSupport.framework/Versions/A/JavaCarbonSupport 0x94180000 - 0x9418ffff com.apple.frameworks.preferencepanes 10.0 /System/Library/Frameworks/PreferencePanes.framework/Versions/A/PreferencePanes 0x94500000 - 0x9450ffff libsasl2.2.0.1.dylib /usr/lib/libsasl2.2.0.1.dylib 0x945b0000 - 0x945b9fff libz.1.dylib /usr/lib/libz.1.dylib 0x94610000 - 0x9462afff libresolv.9.dylib /usr/lib/libresolv.9.dylib 0x94650000 - 0x946affff com.apple.SearchKit 1.0.2 /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/SearchKit.framework/Versions/A/SearchKit 0x94720000 - 0x94721fff com.apple.securityfoundation 1.0 (6) /System/Library/Frameworks/SecurityFoundation.framework/Versions/A/SecurityFoundation 0x94a30000 - 0x94af5fff libxml2.2.dylib /usr/lib/libxml2.2.dylib 0x94b20000 - 0x94badfff com.apple.ink.framework 101.1.3 (55.10) /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Ink.framework/Versions/A/Ink 0x94bd0000 - 0x94c01fff com.apple.securityinterface 1.0 (36) /System/Library/Frameworks/SecurityInterface.framework/Versions/A/SecurityInterface 0x94c40000 - 0x94c4ffff com.apple.DSObjCWrappers.Framework 1.0 /System/Library/PrivateFrameworks/DSObjCWrappers.framework/Versions/A/DSObjCWrappers 0x954c0000 - 0x95ac6fff libBLAS.dylib /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libBLAS.dylib 0x95b20000 - 0x95df0fff libLAPACK.dylib /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libLAPACK.dylib 0x95e40000 - 0x95eadfff libvDSP.dylib /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvDSP.dylib 0x95f00000 - 0x95f20fff libvMisc.dylib /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvMisc.dylib 0x968d0000 - 0x969b2fff libicucore.A.dylib /usr/lib/libicucore.A.dylib 0x96a20000 - 0x96ae2fff libcrypto.0.9.7.dylib /usr/lib/libcrypto.0.9.7.dylib 0x96b40000 - 0x96b6efff libssl.0.9.7.dylib /usr/lib/libssl.0.9.7.dylib 0x96bf0000 - 0x96c7ffff ATS /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/ATS 0x96cb0000 - 0x96d9efff libiconv.2.dylib /usr/lib/libiconv.2.dylib 0x96e80000 - 0x96e90fff com.apple.vecLib 3.0.2 (vecLib 3.0.2) /System/Library/Frameworks/vecLib.framework/Versions/A/vecLib 0x97510000 - 0x97518fff libbsm.dylib /usr/lib/libbsm.dylib steps: run gmail, drag a bug link to the tab bar (a bit higher than normally). i'm told this should mean that the object was dead (as sending a message to a nil object is supposed to be a nop).
erp, but of course it's trying to send a message to 0x20. so this is a flavor of a null pointer deref.
egads. please in the future attach full stacks instead of pasting them in the comment section. what build was this on? trunk builds?
pink: first line of the bug report has the useragent, that should be a trunk build.
Assignee: pinkerton → me
I attached a similar crashlog to bug 265994 (https://bugzilla.mozilla.org/attachment.cgi?id=163941&action=view) a while ago since I thought it might be related to that bug. When dragging a webloc to the blank part of the tab bar doesn't fail gracefully, mostly I experience a crash. Today, however, Camino has hung (SBOD) when doing this (and not failing gracefully). *This* attachment is a sample of the hanging Camino 2004111108 (v0.8+)
The method that's calling objc_msgSend() in this stack trace is located at http://bonsai.mozilla.org/ cvsblame.cgi?file=mozilla/camino/src/browser/BrowserTabBarView.mm&rev=1.2&mark=477,479#476 with pertinent lines hilighted. There are only three message sends in this method. By looking at the values of the registers at the time of the crash, we can rule out the two which aren't hilighted in the above link (the last two). The first parameter of an ObjC message is passed in r5 on PPC. In this crash log, r5 is 0x05595c00. YES and NO are #defined to 1 and 0 respectively, so it's clear that the affected message is the first one in the method, which is hilighted in the above URL. mDragDest cannot be nil, because messages to nil are legal in ObjC, and are a no-op. (There is a special gcc optimization that makes this illegal in return for a small speed gain. I assume that is not being used on this file.) It's possible that it has been overwritten with the value 0xc, or something small like that. More likely in my opinion is that the memory which mDragDest is pointing to has been overwritten with 0's. The first four bytes of an ObjC object is the 'isa', which is a pointer to a struct objc_class which contains information about a class. The first thing objc_msgSend will do is deference the isa and look in the class's method cache. If we look at the defintion of struct objc_class (in /usr/include/objc/objc- class.h), we see that the value at offset 0x20 is the method cache. If the isa were 0x0, attempting to access isa->cache would access 0x20, and it would cause a crash like the one shown. This is not 100% sure, of course, but it looks like a likely explanation. I cannot offer any explanation as to why the objcet is being overwritten. If it were being deallocated early and then overwritten by a new allocation, that might be a possible explanation, but this would probably not be so reproduceable.
putting this on the 0.9 radar even though its not confirmed yet
Target Milestone: --- → Camino0.9
Need better steps to reproduce this. I tried for a couple of minutes with a very recent CVS build and I couldn't repro.
(In reply to comment #9) > Need better steps to reproduce this. I tried for a couple of minutes with a very > recent CVS build and I couldn't repro. Much like the "can't drag webloc/bookmark to tabbar" bug 265994 to which this bug "seems" related, it's difficult to reproduce consistently. I find that the crash typically happens *after* I've been browsing *for a while* (so playing for a couple minutes wouldn't show it, unless your couple minutes come after having surfed for some time...).
Confirming this bug. Steps to reproduce. 1) open a tab group or several tabs withurls. 2) in one of the tab, drag a link to the empty tab bar, you will notice the url will not get opened (another bug?). 3) drag an url from the bookmark bar to the empty tab bar. Url opens. 4) Close the newly made tab and try draging a url from a page to the empty tab bar again. 5) BOOM camino crashes. I get the exact same crash reports as timeless attached. I'm able to succesfully (100%) reproduce this bug with these steps.
Severity: normal → major
Status: UNCONFIRMED → NEW
Ever confirmed: true
Confirming on 2005012508 (v0.8+), Mac OS X 10.3.7, using steps of comment #11
Every time mDragDest is set it is after code like TabButtonCell * button = [self buttonAtPoint:[self convertPoint:[sender draggingLocation] fromView:nil]]; if (!button) { ... return; } prepareForDragOperation: uses mDragDest without a check like that. If it hasn't gone over a button during the drag mDragDest will either be nil and do nothing if it has never had a value set, or an old and maybe deallocated button view which will crash in the deallocated case. That is why closing the tab in step 4 make the crash happen.
Attached patch one liner to fix this and 265994 (obsolete) — — Splinter Review
This patch checks to see if the drag destination is nil and has the tabview (instead of the tab bar) handle it if that's the case. It also fixes 265994.
Attachment #176390 - Flags: review?(joshmoz)
Attachment #176390 - Flags: superreview?
Comment on attachment 176390 [details] [diff] [review] one liner to fix this and 265994 sr=pink
Attachment #176390 - Flags: superreview?
Attachment #176390 - Flags: superreview+
Attachment #176390 - Flags: review?(joshmoz)
landed.
Status: NEW → RESOLVED
Closed: 20 years ago
Resolution: --- → FIXED
Attached patch v2 (obsolete) — — Splinter Review
a fix for the case where mDragDeest would have been non-nil but deallocated.
Attachment #176390 - Attachment is obsolete: true
Attached patch v3 (obsolete) — — Splinter Review
erm... against HEAD this time
Attached patch v3 (obsolete) — — Splinter Review
erm... against HEAD this time
Attachment #176411 - Attachment is obsolete: true
Attachment #176413 - Attachment is obsolete: true
Comment on attachment 176414 [details] [diff] [review] v3 still crashes Command: Camino Path: /Users/josh/src/mozilla_project/camino_opt/mozilla/camino/build/Camino.app/Cont ents/MacOS/Camino Version: 0.8+ (0.8+) PID: 2224 Thread: 0 Exception: EXC_BAD_ACCESS (0x0001) Codes: KERN_PROTECTION_FAILURE (0x0002) at 0x00000010 Thread 0 Crashed: 0 libobjc.A.dylib 0x9083293c class_initialize + 0x9c 1 libobjc.A.dylib 0x9083294c class_initialize + 0xac 2 libobjc.A.dylib 0x9083294c class_initialize + 0xac 3 libobjc.A.dylib 0x90831524 _class_lookupMethodAndLoadCache + 0x84 4 libobjc.A.dylib 0x90831298 objc_msgSend + 0xb8 5 org.mozilla.navigator 0x0005d66c -[BrowserTabBarView draggingUpdated:] + 0x8c 6 com.apple.AppKit 0x9305a6ac sendDraggingUpdate + 0x9c 7 com.apple.AppKit 0x9305a140 NSCoreDragTrackingProc + 0x358 8 com.apple.HIServices 0x92d3816c DoTrackingMessage + 0x12c 9 com.apple.HIServices 0x92d420d0 SendTrackingMessage + 0x34 10 com.apple.HIServices 0x92d3cddc DragInApplication + 0x11c 11 com.apple.HIServices 0x92d4bc7c DragLoop + 0x80 12 com.apple.HIServices 0x92d4b16c CoreDragStartDragging + 0xac 13 com.apple.HIToolbox 0x92918950 TrackDrag + 0x25c
Attachment #176414 - Attachment is obsolete: true
Attachment #176414 - Flags: review-
Attached patch v4 — — Splinter Review
make sure to set mDragDestButton to nil to avoid another crasher
checked in v4 for further fixes, sr=pinkerton
Crash Signature: [@ objc_msgSend]
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: