Closed Bug 280510 Opened 20 years ago Closed 20 years ago

When using css' opacity on popups all Gecko browsers crashes

Categories

(Core :: CSS Parsing and Computation, defect)

Product:
Core
Component:
CSS Parsing and Computation
Version:
1.7 Branch
Platform:
x86
All
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED WONTFIX

People

(Reporter: bugzilla.mozilla.org, Assigned: dbaron)

Details

Attachments

(2 files)

crashtest00.css
58 bytes, text/css
Details
crashtest.xul
344 bytes, application/vnd.mozilla.xul+xml
Details 
User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.5) Gecko/20041205 Firefox/1.0
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.5) Gecko/20041205 Firefox/1.0

Browser crashes when displaying pop-up menus with menuitems that have CSS' style
-moz-opacity or opacity assigned. I experienced this problem on normaln menu's
and on tree's "column picker". Crashes latest Mozilla/Firefox/Epiphany on my Gentoo.

Reproducible: Always

Steps to Reproduce:
1.
create 2 files: crashtest00.css, crashtest00.xul

crashtest00.css:
menuitem[disabled="true"] { 
  -moz-opacity: 0.25;
}

crashtest00.xul:
<?xml-stylesheet href="crashtest00.css" type="text/css"?>
<window xmlns="http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul">
  <menu label="Crash Test">
    <menupopup>
      <menuitem disabled="true" label="Test1"/>
      <menuitem label="Test2" />
    </menupopup>
  </menu>
</window>

2. Visit the crashtest00.xul with your browser and click on 'Crash Test' menu.
My browser crashes immediatly without any warning.
Actual Results:  
Browser crashes.

Expected Results:  
Showing up menuitems with CSS style "opacity" applied.
Severity: blocker → critical
crashes Mozilla/5.0 (Windows; U; Win98; de-DE; rv:1.7.5) Gecko/20041122 Firefox/1.0
Talkback TB3407901H

wfm Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.8b) Gecko/20050129 Firefox/1.0+

I`m changing the settings of this bug,
Hardware from 'other' to 'PC', as the reports here are from x86 CPUs,
OS from 'Linux' to 'All', as the bug is seen on Linux and Win98
Version from 'Trunk' to '1.7Branch' as I see only reports from branch, and my
trunk version is working.
OS: Linux → All
Hardware: Other → PC
Version: Trunk → 1.7 Branch
wfm Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.8b) Gecko/20050131
crash Mozilla 1.7.5: 2004121708
WFM Linux i686 Mozilla 1.8a6 gcc-2.95.3 compiled, XFree86 4.2.
that incident id unfortunately has no symbols
3 Talkbacks, all without symbols:
http://talkback-public.mozilla.org/talkback/fastfind.jsp?search=1&searchby=comments&match=contains&searchfor=Bug+280510&vendor=All&product=All&platform=All&buildid=&sdate=&stime=&edate=&etime=&sortby=bbid
3428522 GKLAYOUT.DLL + 0x136285 (0x61506285) 0b0b4d5d Mozilla17Win322005012109
3428251 GKLAYOUT.DLL + 0x13624d (0x6150624d) a2257197 Mozilla17Win322004121609
3407901 FIREFOX.EXE + 0x1e1e73 (0x005e1e73) 63fa11ee  Firefox10Win322004112212

I used the latest Mozilla 1.7 Branch on Windows, there are more current ones on
Linux. I didn´t find a current Firefox based on Mozilla 1.7.5


http://talkback-public.mozilla.org/talkback/fastfind.jsp?search=2&type=iid&id=3428872#id
Stack Signature	 nsView::GetDimensions
Firefox10  BuildID 2004110711 Win98SE

nsView::GetDimensions 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/view/src/nsView.h,
line 248]
nsView::GetClippedRect 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/view/src/nsView.cpp,
line 839]
nsViewManager::UpdateView 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/view/src/nsViewManager.cpp,
line 1761]
nsViewManager::MoveViewTo 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/view/src/nsViewManager.cpp,
line 2608]
nsContainerFrame::PositionFrameView 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/base/src/nsContainerFrame.cpp,
line 510]
nsBox::SetBounds 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/xul/base/src/nsBox.cpp,
line 584]
nsSprocketLayout::Layout 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/xul/base/src/nsSprocketLayout.cpp,
line 517]
nsContainerBox::DoLayout 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/xul/base/src/nsContainerBox.cpp,
line 610]
nsBox::Layout 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/xul/base/src/nsBox.cpp,
line 1016]
nsBox::Layout 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/xul/base/src/nsBox.cpp,
line 1016]
nsContainerBox::DoLayout 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/xul/base/src/nsContainerBox.cpp,
line 610]
nsBox::Layout 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/xul/base/src/nsBox.cpp,
line 1016]
nsContainerBox::DoLayout 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/xul/base/src/nsContainerBox.cpp,
line 610]
nsBox::Layout 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/xul/base/src/nsBox.cpp,
line 1016]
nsBox::Layout 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/xul/base/src/nsBox.cpp,
line 1016]
nsContainerBox::DoLayout 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/xul/base/src/nsContainerBox.cpp,
line 610]
nsBox::Layout 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/xul/base/src/nsBox.cpp,
line 1016]
nsContainerBox::DoLayout 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/xul/base/src/nsContainerBox.cpp,
line 610]
nsBox::Layout 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/xul/base/src/nsBox.cpp,
line 1016]
nsRootBoxFrame::Reflow 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/xul/base/src/nsRootBoxFrame.cpp,
line 240]
nsContainerFrame::ReflowChild 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/base/src/nsContainerFrame.cpp,
line 982]
ViewportFrame::Reflow 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/base/src/nsViewportFrame.cpp,
line 249]
IncrementalReflow::Dispatch 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/base/src/nsPresShell.cpp,
line 904]
PresShell::ProcessReflowCommands 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/base/src/nsPresShell.cpp,
line 6401]
PresShell::FlushPendingNotifications 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/base/src/nsPresShell.cpp,
line 5114]
nsMenuFrame::OpenMenuInternal 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/xul/base/src/nsMenuFrame.cpp,
line 829]
nsMenuFrame::AttributeChanged 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/xul/base/src/nsMenuFrame.cpp,
line 710]
nsCSSFrameConstructor::AttributeChanged 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/style/src/nsCSSFrameConstructor.cpp,
line 10127]
PresShell::AttributeChanged 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/base/src/nsPresShell.cpp,
line 5198]
nsXULElement::SetAttrAndNotify 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/content/xul/content/src/nsXULElement.cpp,
line 2225]
nsXULElement::SetAttr 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/content/xul/content/src/nsXULElement.cpp,
line 2148]
nsXULElement::SetAttribute 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/content/xul/content/src/nsXULElement.cpp,
line 1022]
nsMenuFrame::OpenMenu 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/xul/base/src/nsMenuFrame.cpp,
line 741]
nsMenuFrame::ToggleMenuState 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/xul/base/src/nsMenuFrame.cpp,
line 558]
nsMenuFrame::HandleEvent 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/xul/base/src/nsMenuFrame.cpp,
line 411]
PresShell::HandleEventInternal 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/base/src/nsPresShell.cpp,
line 6103]
PresShell::HandleEvent 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/layout/html/base/src/nsPresShell.cpp,
line 5921]
nsViewManager::HandleEvent 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/view/src/nsViewManager.cpp,
line 2326]
nsViewManager::DispatchEvent 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/view/src/nsViewManager.cpp,
line 2066]
HandleEvent 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/view/src/nsView.cpp,
line 77]
nsWindow::DispatchEvent 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/widget/src/windows/nsWindow.cpp,
line 1067]
nsWindow::DispatchMouseEvent 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/widget/src/windows/nsWindow.cpp,
line 5261]
ChildWindow::DispatchMouseEvent 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/widget/src/windows/nsWindow.cpp,
line 5511]
nsWindow::WindowProc 
[d:/builds/tinderbox/firefox-1.0/WINNT_5.0_Clobber/mozilla/widget/src/windows/nsWindow.cpp,
line 1349]
KERNEL32.DLL + 0x363b (0xbff7363b)
KERNEL32.DLL + 0x24407 (0xbff94407)
0x00c98782
Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.7.6) Gecko/20050130

Incident ID: 3442960  Stack Signature	 nsView::GetDimensions 98412ad7

http://talkback-public.mozilla.org/talkback/fastfind.jsp?search=2&type=iid&id=3442960#id
Would you mind putting this testcase here as Bugzilla attachments? Attach the
CSS file first, then you can use the URL of the CSS file in your XUL file.
Attached file crashtest00.css — 

    
    

    
  

      
      
      
      

        Attached file
          
        crashtest.xul
        — 
      

    


  

    
    

    
  
crash using attached testcase:
TB3541523G Firefox10 Build ID 2004110812
http://talkback-public.mozilla.org/talkback/fastfind.jsp?search=2&type=iid&id=TB3541523G


    
    

    
  
This appears to be branch only. And I don't think it's important to fix on the
branch. Closing.
Status: UNCONFIRMED → RESOLVED
Closed: 20 years ago
Resolution: --- → FIXED

    
    

    
  
(In reply to comment #12)
> This appears to be branch only. And I don't think it's important to fix on the
> branch. Closing.

in comment #1 I changed the settings from 'trunk' to 'branch', in comment #6 you
can see the bug still is in the comming 1.7.6.
I don´t think FIXED is the correct resolution, mark it WONTFIX instead.
reopening.


Status: RESOLVED → UNCONFIRMED
Resolution: FIXED → ---
Status: UNCONFIRMED → RESOLVED
Closed: 20 years ago → 20 years ago
Resolution: --- → WONTFIX

          You need to log in
          before you can comment on or make changes to this bug.
        






  

    
  







  

    

      
Attachment

      

      
      
      
      
    

    

      

        

          

            
General

            

              Creator: 



            

            
Created: 

            
Updated: 

            
Size: