302584 - Click on regular context menu, while sub menu is open causes program to crash. [@ destroyTimerEvent] [@ 0x00000000 destroyTimerEvent]

Status: RESOLVED FIXED

(Core :: DOM: Editor, defect)

Description

[Jeff F.]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.10) Gecko/20050716 Firefox/1.0.6
Build Identifier: Mozilla, Firefox, Thunderbird, Current Versions

This happens in all recent projects. Tested with Fx, Tb, and Mozilla Suite.

It may not Crash, but the sub menu will be disabled if it does not crash.


Reproducible: Always

Steps to Reproduce:
For MoS, Fx (You must have any extention that has a context menu)
1. Right click on a page
2. Scroll over the sub menu
3. Move mouse off the the side off the sub menu, but not over the orginal
context menu.
4. Click on any regular context menu item while the sub menu is open.
TB
1. Right click on an email
2. Scroll over "Move to"
3. Scroll over "Local Folders"
4. Click on "Open message in new window"
Actual Results:  
Crash

Expected Results:  
Make me rich.

Comment 1

[Jeff F.]

This is a further test of https://bugzilla.mozilla.org/show_bug.cgi?id=268399 

It has talkback IDs for Fx

For TB
TB7900232Q TB7900669Y

for MoS

Comment 2

[timeless]

Incident ID: 7900232
Stack Signature	destroyTimerEvent 3b400f38
Product ID	Thunderbird10
Build ID	2004120606
Trigger Time	2005-07-28 18:34:14.0
Platform	Win32
Operating System	Windows NT 5.1 build 2600
Module	xpcom.dll + (00029519)
URL visited	N/A
User Comments	Click on context menu while a submenu is open causes Crash
Since Last Crash	166419 sec
Total Uptime	166419 sec
Trigger Reason	Access violation
Source File, Line No.
e:/builds/tinderbox/thunderbird-branch/WINNT_5.0_Clobber/mozilla/xpcom/threads/nsTimerImpl.cpp,
line 455
Stack Trace 	
destroyTimerEvent 
[e:/builds/tinderbox/thunderbird-branch/WINNT_5.0_Clobber/mozilla/xpcom/threads/nsTimerImpl.cpp,
line 455]
0x778b0c24
nsBaseCommandController::QueryInterface 
[e:/builds/tinderbox/thunderbird-branch/WINNT_5.0_Clobber/mozilla/embedding/components/commandhandler/src/nsBaseCommandController.cpp,
line 53]
0x8b510447

Incident ID: 7900669
Stack Trace 	
0x00000001
destroyTimerEvent 
[e:/builds/tinderbox/Tb-Aviary1.0.1/WINNT_5.0_Depend/mozilla/xpcom/threads/nsTimerImpl.cpp,
line 456]
0x778b0c24
nsCommandParams::Init 
[e:/builds/tinderbox/Tb-Aviary1.0.1/WINNT_5.0_Depend/mozilla/embedding/components/commandhandler/src/nsCommandParams.cpp,
line 77]
0xc0e8cb8b

Comment 3

[Boris Zbarsky [:bzbarsky]]

Is this a problem with a current trunk or 1.8 branch build?

Comment 4

[Jeff F.]

Still an isssue see TB15457675Q

Comment 5

[Jeff F.]

Three more Talkbacks: TB15457766H , TB15457778X , TB15457808H

Comment 6

[Jeff F.]

Some Thunderbird talkbacks: TB15722207W , TB15722272E , TB15722313H

Comment 7

[Jeff F.]

Crashed Sunbird and Mozilla also, Major issue in sunbird and Thunderbird

Comment 8

[Nickolay_Ponomarev]

Those are all similar. I don't think any more talkback IDs are needed.

Stack Signature	 0x00000000 c0489b7a
Product ID	Firefox15
Build ID	2006011112
Trigger Time	2006-02-21 19:03:24.0
Platform	Win32
Operating System	Windows NT 5.1 build 2600
Module	
URL visited	N/A
User Comments	
Since Last Crash	154 sec
Total Uptime	852881 sec
Trigger Reason	Access violation
Source File, Line No.	N/A
Stack Trace 	
0x00000000
destroyTimerEvent  [c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/xpcom/threads/nsTimerImpl.cpp, line 468]
0x778b0c24
nsHTMLFormElement::GetPositionInGroup  [c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/content/html/content/src/nsHTMLFormElement.cpp, line 1548]
0x20982ddc

Thunderbird ones are:
Incident ID: 15457675
Stack Signature	0x00000000 734451e1
Product ID	Firefox15
Build ID	2006011112
Trigger Time	2006-02-21 19:00:19.0
Platform	Win32
Operating System	Windows NT 5.1 build 2600
Module	
URL visited	N/A
User Comments	Context menu issue See bug: 302584
Since Last Crash	236715 sec
Total Uptime	852727 sec
Trigger Reason	Access violation
Source File, Line No.	N/A
Stack Trace 	
0x00000000
destroyTimerEvent  [c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/xpcom/threads/nsTimerImpl.cpp, line 468]
shdocvw.dll + 0x150c24 (0x778b0c24)
nsHTMLFormElement::GetPositionInGroup  [c:/builds/tinderbox/Fx-Mozilla1.8.0/WINNT_5.2_Depend/mozilla/content/html/content/src/nsHTMLFormElement.cpp, line 1548]
0x20982ddc

Comment 9

[Nickolay_Ponomarev]

I don't suppose it matters much, but the correct thunderbird stack is (stupid clipboard bugs!):

Incident ID: 15722313
Stack Signature	0x00000000 165a9acc
Product ID	Thunderbird15
Build ID	2005120115
Trigger Time	2006-02-27 22:18:17.0
Platform	Win32
Operating System	Windows NT 5.1 build 2600
Module	
URL visited	
User Comments	
Since Last Crash	45 sec
Total Uptime	370 sec
Trigger Reason	Access violation
Source File, Line No.	N/A
Stack Trace 	
0x00000000
destroyTimerEvent  [e:/builds/tinderbox/Tb-Mozilla1.8/WINNT_5.0_Depend/mozilla/xpcom/threads/nsTimerImpl.cpp, line 468]
shdocvw.dll + 0x150c24 (0x778b0c24)
nsWebBrowserPersist::OnProgress  [e:/builds/tinderbox/Tb-Mozilla1.8/WINNT_5.0_Depend/mozilla/embedding/components/webbrowserpersist/src/nsWebBrowserPersist.cpp, line 940]
0x1974c085

Comment 10

[chris hofmann]

> Is this a problem with a current trunk or 1.8 branch build?

I haven't been able to reproduce with
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.2) Gecko/20060313 Firefox/1.5.0.2

Comment 11

[Martijn Wargers (dead)]

I think this is the same as bug 246712 basically, and I still can reproduce bug 246712, so...

Comment 12

[Martijn Wargers (dead)]

Now that bug 246712 is fixed, you might want to recheck in tomorrow's builds to see if it is still happening.

Comment 13

[Marcia Knous [:marcia]]

chofmann asked me to check Thunderbird - using version 1.5.0.2 (20060308) I don't see the crash following the STR by the reporter.

Comment 14

[Jeff F.]

Can't reprduce in any mozilla product an longer, seems resolved..