297574 - problems with a <tree> element in XUL popup [@ nsView::GetDimensions]

Status: RESOLVED WORKSFORME

(Core :: XUL, defect)

Description

[Andreas Herz]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.8) Gecko/20050511 Firefox/1.0.4
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.8) Gecko/20050511 Firefox/1.0.4

Crash if I try to open a <tree> element in a popup 
e.g. context menu of click on a button.


Reproducible: Always

Steps to Reproduce:
1. open example document
2. click on button 
3. ...crash

Actual Results:  
crash

Expected Results:  
Open a working XUL <tree>

The current trunk build doesn't crash but the <tree> doesn't 
receive any mouse (click) events.

Comment 1

[Andreas Herz]

Attachment: Test document.

Attention: 
  crash if you click on the button....
  With version 1.0.4 on Suse 6.2

Comment 2

[Andreas Herz]

in Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8b2) Gecko/20050517 Firefox/1.0+
the tree is shown.....BUT the click "offset" isn't corrent

to select an element in the tree you must click two of three elements below
(if I click on the 5th the 2nd. will be receive the event).

Comment 3

[Adam Guthrie]

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8b2) Gecko/20050618
Firefox/1.0+ ID:2005061809

WFM. Have you tested this on the latest trunk build?

Comment 4

[Andreas Herz]

tested with the latest-trunk.

behaviour:
 tree control is visible but I must click one or two rows below
 to select any element in the tree of the test document.

 I think the offset of the treecontrol is alway '0' and not
 the current possition in the document.


 

Comment 5

[Andreas Herz]

Error exists in "Deer Park Alpha 2" too

Comment 6

[Nickolay_Ponomarev]

So it doesn't crash anymore?

Comment 7

[Adam Guthrie]

Incident ID: 10714669
Stack Signature	nsView::GetDimensions a038d188
Product ID	Firefox10
Build ID	2005091517
Trigger Time	2005-10-15 22:17:48.0
Platform	Win32
Operating System	Windows NT 5.1 build 2600
Module	firefox.exe + (001e329f)
URL visited	
User Comments	
Since Last Crash	24 sec
Total Uptime	655 sec
Trigger Reason	Access violation
Source File, Line No.
c:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.2_Depend/mozilla/view/src/nsView.h,
line 248
Stack Trace 	
nsView::GetDimensions 
[c:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.2_Depend/mozilla/view/src/nsView.h,
line 248]
nsView::GetClippedRect 
[c:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.2_Depend/mozilla/view/src/nsView.cpp,
line 839]
nsViewManager::UpdateView 
[c:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.2_Depend/mozilla/view/src/nsViewManager.cpp,
line 1761]
nsViewManager::MoveViewTo 
[c:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.2_Depend/mozilla/view/src/nsViewManager.cpp,
line 2603]
nsContainerFrame::PositionFrameView 
[c:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.2_Depend/mozilla/layout/html/base/src/nsContainerFrame.cpp,
line 510]
nsContainerFrame::PositionChildViews 
[c:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.2_Depend/mozilla/layout/html/base/src/nsContainerFrame.cpp,
line 1020]
nsSprocketLayout::Layout 
[c:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.2_Depend/mozilla/layout/xul/base/src/nsSprocketLayout.cpp,
line 517]
nsContainerBox::DoLayout 
[c:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.2_Depend/mozilla/layout/xul/base/src/nsContainerBox.cpp,
line 610]
nsBox::Layout 
[c:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.2_Depend/mozilla/layout/xul/base/src/nsBox.cpp,
line 1016]
nsBox::Layout 
[c:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.2_Depend/mozilla/layout/xul/base/src/nsBox.cpp,
line 1016]
nsContainerBox::DoLayout 
[c:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.2_Depend/mozilla/layout/xul/base/src/nsContainerBox.cpp,
line 610]
nsBox::Layout 
[c:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.2_Depend/mozilla/layout/xul/base/src/nsBox.cpp,
line 1016]
nsContainerBox::DoLayout 
[c:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.2_Depend/mozilla/layout/xul/base/src/nsContainerBox.cpp,
line 610]
nsBox::Layout 
[c:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.2_Depend/mozilla/layout/xul/base/src/nsBox.cpp,
line 1016]
nsBox::Layout 
[c:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.2_Depend/mozilla/layout/xul/base/src/nsBox.cpp,
line 1016]
nsContainerBox::DoLayout 
[c:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.2_Depend/mozilla/layout/xul/base/src/nsContainerBox.cpp,
line 610]
nsBox::Layout 
[c:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.2_Depend/mozilla/layout/xul/base/src/nsBox.cpp,
line 1016]
nsContainerBox::DoLayout 
[c:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.2_Depend/mozilla/layout/xul/base/src/nsContainerBox.cpp,
line 610]
nsBox::Layout 
[c:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.2_Depend/mozilla/layout/xul/base/src/nsBox.cpp,
line 1016]
nsRootBoxFrame::Reflow 
[c:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.2_Depend/mozilla/layout/xul/base/src/nsRootBoxFrame.cpp,
line 240]
nsContainerFrame::ReflowChild 
[c:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.2_Depend/mozilla/layout/html/base/src/nsContainerFrame.cpp,
line 982]
ViewportFrame::Reflow 
[c:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.2_Depend/mozilla/layout/html/base/src/nsViewportFrame.cpp,
line 249]
IncrementalReflow::Dispatch 
[c:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.2_Depend/mozilla/layout/html/base/src/nsPresShell.cpp,
line 904]
PresShell::ProcessReflowCommands 
[c:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.2_Depend/mozilla/layout/html/base/src/nsPresShell.cpp,
line 6401]
ReflowEvent::HandleEvent 
[c:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.2_Depend/mozilla/layout/html/base/src/nsPresShell.cpp,
line 6226]
PL_HandleEvent 
[c:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.2_Depend/mozilla/xpcom/threads/plevent.c,
line 674]
0x778b0c24
nsMathMLChar::Stretch 
[c:/builds/tinderbox/Fx-Aviary1.0.1/WINNT_5.2_Depend/mozilla/layout/mathml/base/src/nsMathMLChar.cpp,
line 1611]
0x26eb8007

*** This bug has been marked as a duplicate of 35299 ***

Comment 8

[Andreas Herz]

"Test document"  now doesn't crash the firefox BUT

Please - try to select any tree element in the popup!!!!

You must click 2 or 3 rows below to select any element. The ofset seems to
be wrong.

Comment 9

[gekacheka]

(In reply to comment #8)
> "Test document"  now doesn't crash the firefox BUT
> 
> Please - try to select any tree element in the popup!!!!
> 
> You must click 2 or 3 rows below to select any element. The ofset seems to
> be wrong.
> 

The selection problem sounds like a separate bug than the crash this bug originally reported.  The problem is hard to see in the testcase on this bug.

I filed bug 319062 with a title, description, and testcase specific to the select problem after running into it independently.  

Comment 10

[Adam Guthrie]

Since there's been a new bug filed and this one doesn't crash anymore, resolving as WFM.