286373 - winembed crash closing a popup window after closing its parent [@nsCOMPtr<nsIWebBrowserChrome>::~nsCOMPtr<nsIWebBrowserChrome>]

Status: RESOLVED INCOMPLETE

(Core Graveyard :: Embedding: MFC Embed, defect, P5)

Description

[timeless]

winembed from mid february

steps: close a popup window (it looks like i already closed its parent)

-	this	0x04339e40 {mRefCnt={mValue=1 } _mOwningThread={mThread=0x003d4f58 }
mNativeWindow=0x000409b8 ...}	WebBrowserChrome * const
|+	nsIWebBrowserChrome	{...}	nsIWebBrowserChrome
|+	nsIWebBrowserChromeFocus	{...}	nsIWebBrowserChromeFocus
|+	nsIWebProgressListener	{...}	nsIWebProgressListener
|+	nsIEmbeddingSiteWindow	{...}	nsIEmbeddingSiteWindow
|+	nsIInterfaceRequestor	{...}	nsIInterfaceRequestor
|+	nsISHistoryListener	{...}	nsISHistoryListener
|+	nsIObserver	{...}	nsIObserver
|+	nsIContextMenuListener	{...}	nsIContextMenuListener
|+	nsITooltipListener	{...}	nsITooltipListener
|+	nsSupportsWeakReference	{mProxy=0x00000000 {mRefCnt={mValue=??? }
_mOwningThread={mThread=??? } mReferent=??? } }	nsSupportsWeakReference
|+	mRefCnt	{mValue=1 }	nsAutoRefCnt
|+	_mOwningThread	{mThread=0x003d4f58 }	nsAutoOwningThread
|	mNativeWindow	0x000409b8	void *
|	mChromeFlags	1790	unsigned int
|	mContinueModalLoop	0	int
|	mSizeSet	1	int
|+	mWebBrowser	{mRawPtr=0x00000000 }	nsCOMPtr<nsIWebBrowser>
\-	mDependentParent	{mRawPtr=0x0177c810 }	nsCOMPtr<nsIWebBrowserChrome>
 \-	mRawPtr	0x0177c810	nsIWebBrowserChrome *
  \-	nsISupports	{...}	nsISupports
   \+	__vfptr	0xdddddddd	*
 	winEmbed.exe!nsCOMPtr<nsIWebBrowserChrome>::~nsCOMPtr<nsIWebBrowserChrome>() 
Line 583 + 0xd	C++
>	winEmbed.exe!WebBrowserChrome::~WebBrowserChrome()  Line 60 + 0xb	C++
 	winEmbed.exe!WebBrowserChrome::`scalar deleting destructor'()  + 0xf	C++
 	winEmbed.exe!WebBrowserChrome::Release()  Line 113 + 0xcd	C++
 	winEmbed.exe!WebBrowserChromeUI::Destroy(nsIWebBrowserChrome *
chrome=0x04339e40)  Line 930 + 0xc	C++
 	winEmbed.exe!BrowserDlgProc(HWND__ * hwndDlg=0x0007098e, unsigned int
uMsg=274, unsigned int wParam=61536, long lParam=0)  Line 547 + 0x9	C++
 	user32.dll!_InternalCallWinProc@20()  + 0x28	
 	user32.dll!_UserCallDlgProcCheckWow@32()  + 0xb5	
 	user32.dll!_DefDlgProcWorker@20()  + 0x7f	
 	user32.dll!_DefDlgProcA@16()  + 0x22	
 	user32.dll!_InternalCallWinProc@20()  + 0x28	
 	user32.dll!_UserCallWinProcCheckWow@32()  + 0xb7	
 	user32.dll!_DispatchMessageWorker@8()  + 0xdc	
 	user32.dll!_DispatchMessageA@4()  + 0xf	
 	winEmbed.exe!AppCallbacks::RunEventLoop(int & aRunCondition=1)  Line 1198	C++
 	winEmbed.exe!main(int argc=1, char * * argv=0x003d81b0)  Line 188 + 0x9	C++
 	winEmbed.exe!mainCRTStartup()  Line 398 + 0x11	C
 	kernel32.dll!_BaseProcessStart@4()  + 0x23

Comment 1

[Takanori MATSUURA]

This bug lies at rest in the graveyard.