Closed Bug 312455 Opened 18 years ago Closed 15 years ago

crash involving silverskin theme [@ libqtengine.so] [@ moz_gtk_dropdown_arrow_paint]

Categories

(Core Graveyard :: GFX: Gtk, defect)

Product:
Core Graveyard
Component:
GFX: Gtk
Platform:
x86
Linux
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

(Not tracked)

Status:
RESOLVED WORKSFORME

People

(Reporter: KKuhlemann, Assigned: MatsPalmgren_bugz)

References

Details

(Keywords: crash, regression)

Crash Data

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; de; rv:1.8b5) Gecko/20051006 Firefox/1.4.1
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; de; rv:1.8b5) Gecko/20051006 Firefox/1.4.1

Opening a compose window in thunderbird 1.5b2, thunderbird crashes. This is any
time opening the compose window via konsole -compose or using a mailto: link in
kde 3.4.3 . This is only in 1.5b2 (english 20051006 build and latest german
20051014 nigthly. Thunderbird 1.0.7 works fine with the same profile and system
configuration.

Reproducible: Always

Steps to Reproduce:
1. Type in konsole /usr/local/username/thunterbird/thunderbird -compose
2. crash
Or:
1. Set thunderbird in the preferences as default application.
2. Open firefox or konqueror.
3. Open a html page with mailto: link.
4. Click on the mailto: link
5. crash
Actual Results:  
crash, talkback started instead of the compose window

Expected Results:  
open the compose window with inserted email adress

talkback ID's:
TB10644534Z  TB 10644429H  TB 10642357X  TB10641702Q

failure messages in konsole:
ku@linux:~> /usr/local/thunderbird/thunderbird -compose
/home/ku/.gtk_qt_engine_rc:240: Bilddatei konnte nicht in pixmap_path gefunden
werden: »22x22/apps/khelpcenter.png«
/home/ku/.gtk_qt_engine_rc:241: Bilddatei konnte nicht in pixmap_path gefunden
werden: »32x32/apps/khelpcenter.png«
/home/ku/.gtk_qt_engine_rc:242: Bilddatei konnte nicht in pixmap_path gefunden
werden: »32x32/apps/khelpcenter.png«
/home/ku/.gtk_qt_engine_rc:243: Bilddatei konnte nicht in pixmap_path gefunden
werden: »16x16/apps/khelpcenter.png«
/home/ku/.gtk_qt_engine_rc:244: Bilddatei konnte nicht in pixmap_path gefunden
werden: »16x16/apps/khelpcenter.png«
/home/ku/.gtk_qt_engine_rc:245: Bilddatei konnte nicht in pixmap_path gefunden
werden: »16x16/apps/khelpcenter.png«
/home/ku/.gtk_qt_engine_rc:246: Bilddatei konnte nicht in pixmap_path gefunden
werden: »22x22/apps/khelpcenter.png«

(Gecko:19627): Gtk-CRITICAL **: gtk_widget_get_parent_window: assertion
`GTK_IS_WIDGET (widget)' failed

(Gecko:19627): Gdk-CRITICAL **: gdk_window_is_viewable: assertion `window !=
NULL' failed

(Gecko:19627): Gtk-CRITICAL **: gtk_widget_get_parent: assertion `GTK_IS_WIDGET
(widget)' failed
/usr/local/thunderbird/run-mozilla.sh: line 131: 19627 Speicherzugriffsfehler 
"$prog" ${1+"$@"}
ku@linux:~>
Keywords: regression
Stacktrace:
libqtengine.so + 0xa5f7 (0x4104f5f7)
libgtk-x11-2.0.so.0 + 0x16bbea (0x4035bbea)
moz_gtk_dropdown_arrow_paint() 
[/builds/tinderbox/Tb-Mozilla1.8/Linux_2.4.18-14_Depend/mozilla/gfx/src/gtk/gtk2drawing.c,
line 973]
nsNativeThemeGTK::DrawWidgetBackground() 
[/builds/tinderbox/Tb-Mozilla1.8/Linux_2.4.18-14_Depend/mozilla/gfx/src/gtk/nsNativeThemeGTK.cpp,
line 458]
nsCSSRendering::PaintBackgroundWithSC() 
[/builds/tinderbox/Tb-Mozilla1.8/Linux_2.4.18-14_Depend/mozilla/layout/base/nsCSSRendering.cpp,
line 2825]
nsCSSRendering::PaintBackground() 
[/builds/tinderbox/Tb-Mozilla1.8/Linux_2.4.18-14_Depend/mozilla/layout/base/nsCSSRendering.cpp,
line 2749]
nsFrame::PaintSelf() 
[/builds/tinderbox/Tb-Mozilla1.8/Linux_2.4.18-14_Depend/mozilla/layout/generic/nsFrame.cpp,
line 945]
nsBoxFrame::Paint() 
[/builds/tinderbox/Tb-Mozilla1.8/Linux_2.4.18-14_Depend/mozilla/layout/xul/base/src/nsBoxFrame.cpp,
line 1412]
nsBoxFrame::PaintChild() 
[/builds/tinderbox/Tb-Mozilla1.8/Linux_2.4.18-14_Depend/mozilla/layout/xul/base/src/nsBoxFrame.cpp,
line 330]
nsBoxFrame::PaintChildren() 
[/builds/tinderbox/Tb-Mozilla1.8/Linux_2.4.18-14_Depend/mozilla/layout/xul/base/src/nsBoxFrame.cpp,
line 1410]
nsBoxFrame::Paint() 
[/builds/tinderbox/Tb-Mozilla1.8/Linux_2.4.18-14_Depend/mozilla/layout/xul/base/src/nsBoxFrame.cpp,
line 1437]
nsBoxFrame::PaintChild() 
[/builds/tinderbox/Tb-Mozilla1.8/Linux_2.4.18-14_Depend/mozilla/layout/xul/base/src/nsBoxFrame.cpp,
line 330]
nsBoxFrame::PaintChildren() 
[/builds/tinderbox/Tb-Mozilla1.8/Linux_2.4.18-14_Depend/mozilla/layout/xul/base/src/nsBoxFrame.cpp,
line 1410]
nsBoxFrame::Paint() 
[/builds/tinderbox/Tb-Mozilla1.8/Linux_2.4.18-14_Depend/mozilla/layout/xul/base/src/nsBoxFrame.cpp,
line 1437]
nsBoxFrame::PaintChild() 
[/builds/tinderbox/Tb-Mozilla1.8/Linux_2.4.18-14_Depend/mozilla/layout/xul/base/src/nsBoxFrame.cpp,
line 330]
nsBoxFrame::PaintChildren() 
[/builds/tinderbox/Tb-Mozilla1.8/Linux_2.4.18-14_Depend/mozilla/layout/xul/base/src/nsBoxFrame.cpp,
line 1410]
nsBoxFrame::Paint() 
[/builds/tinderbox/Tb-Mozilla1.8/Linux_2.4.18-14_Depend/mozilla/layout/xul/base/src/nsBoxFrame.cpp,
line 1437]
nsBoxFrame::PaintChild() 
[/builds/tinderbox/Tb-Mozilla1.8/Linux_2.4.18-14_Depend/mozilla/layout/xul/base/src/nsBoxFrame.cpp,
line 330]
nsBoxFrame::PaintChildren() 
[/builds/tinderbox/Tb-Mozilla1.8/Linux_2.4.18-14_Depend/mozilla/layout/xul/base/src/nsBoxFrame.cpp,
line 1410]
nsBoxFrame::Paint() 
[/builds/tinderbox/Tb-Mozilla1.8/Linux_2.4.18-14_Depend/mozilla/layout/xul/base/src/nsBoxFrame.cpp,
line 1437]
PresShell::Paint() 
[/builds/tinderbox/Tb-Mozilla1.8/Linux_2.4.18-14_Depend/mozilla/layout/base/nsPresShell.cpp,
line 5805]
nsView::Paint() 
[/builds/tinderbox/Tb-Mozilla1.8/Linux_2.4.18-14_Depend/mozilla/view/src/nsView.cpp,
line 848]
nsViewManager::RenderDisplayListElement() 
[/builds/tinderbox/Tb-Mozilla1.8/Linux_2.4.18-14_Depend/mozilla/view/src/nsViewManager.cpp,
line 1460]
nsViewManager::RenderViews() 
[/builds/tinderbox/Tb-Mozilla1.8/Linux_2.4.18-14_Depend/mozilla/view/src/nsViewManager.cpp,
line 1375]
nsViewManager::Refresh() 
[/builds/tinderbox/Tb-Mozilla1.8/Linux_2.4.18-14_Depend/mozilla/view/src/nsViewManager.cpp,
line 930]
nsViewManager::DispatchEvent() 
[/builds/tinderbox/Tb-Mozilla1.8/Linux_2.4.18-14_Depend/mozilla/view/src/nsViewManager.cpp,
line 1973]
HandleEvent() 
[/builds/tinderbox/Tb-Mozilla1.8/Linux_2.4.18-14_Depend/mozilla/view/src/nsView.cpp,
line 251]
nsCommonWidget::DispatchEvent() 
[/builds/tinderbox/Tb-Mozilla1.8/Linux_2.4.18-14_Depend/mozilla/widget/src/gtk2/nsCommonWidget.cpp,
line 219]
nsWindow::OnExposeEvent() 
[/builds/tinderbox/Tb-Mozilla1.8/Linux_2.4.18-14_Depend/mozilla/widget/src/gtk2/nsWindow.cpp,
line 1342]
expose_event_cb() 
[/builds/tinderbox/Tb-Mozilla1.8/Linux_2.4.18-14_Depend/mozilla/widget/src/gtk2/nsWindow.cpp,
line 3610]
libgtk-x11-2.0.so.0 + 0x11b81e (0x4030b81e)
libgobject-2.0.so.0 + 0x8c25 (0x405b3c25)
libgobject-2.0.so.0 + 0x1867d (0x405c367d)
libgobject-2.0.so.0 + 0x19722 (0x405c4722)
libgobject-2.0.so.0 + 0x19d62 (0x405c4d62)
libgtk-x11-2.0.so.0 + 0x202f14 (0x403f2f14)
libgtk-x11-2.0.so.0 + 0x1166ee (0x403066ee)
libgdk-x11-2.0.so.0 + 0x2936d (0x404e136d)
libgdk-x11-2.0.so.0 + 0x294df (0x404e14df)
libgtk-x11-2.0.so.0 + 0x217a0a (0x40407a0a)
libgobject-2.0.so.0 + 0x16118 (0x405c1118)
libgobject-2.0.so.0 + 0x81c7 (0x405b31c7)
libgobject-2.0.so.0 + 0x8c25 (0x405b3c25)
libgobject-2.0.so.0 + 0x18849 (0x405c3849)
libgobject-2.0.so.0 + 0x1986b (0x405c486b)
libgobject-2.0.so.0 + 0x19d62 (0x405c4d62)
libgtk-x11-2.0.so.0 + 0x8c5b5 (0x4027c5b5)
libgtk-x11-2.0.so.0 + 0x8c65b (0x4027c65b)
libglib-2.0.so.0 + 0x25721 (0x4060a721)
libglib-2.0.so.0 + 0x27027 (0x4060c027)
libglib-2.0.so.0 + 0x29422 (0x4060e422)
libglib-2.0.so.0 + 0x2a477 (0x4060f477)
libgtk-x11-2.0.so.0 + 0x116be3 (0x40306be3)
nsAppShell::Run() 
[/builds/tinderbox/Tb-Mozilla1.8/Linux_2.4.18-14_Depend/mozilla/widget/src/gtk2/nsAppShell.cpp,
line 141]
nsAppStartup::Run() 
[/builds/tinderbox/Tb-Mozilla1.8/Linux_2.4.18-14_Depend/mozilla/toolkit/components/startup/src/nsAppStartup.cpp,
line 151]
XRE_main() 
[/builds/tinderbox/Tb-Mozilla1.8/Linux_2.4.18-14_Depend/mozilla/toolkit/xre/nsAppRunner.cpp,
line 848]
main() 
[/builds/tinderbox/Tb-Mozilla1.8/Linux_2.4.18-14_Depend/mozilla/mail/app/nsMailApp.cpp,
line 63]
libc.so.6 + 0x14e80 (0x40a2de80)
Assignee: mscott → blizzard
Component: Message Compose Window → GFX: Gtk
Product: Thunderbird → Core
QA Contact: gtk
Summary: Thunderbird crashes while opening compose window → Thunderbird crashes while opening compose window [@ libqtengine.so] [@ moz_gtk_dropdown_arrow_paint]
Version: unspecified → Trunk
This depends from the installed theme:
The silverskin v. 2.5 theme triggers this bug even in 1.0.7, I got a crash using
the "outlook silver" theme, too. Aquabird and the default theme did not induce
crashes.   
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8b5) Gecko/20051013
Firefox/1.4.1 ID:2005101321

No crash using compose in this build: 1.8b5_2005101307.
(In reply to comment #2)
> This depends from the installed theme:
> The silverskin v. 2.5 theme triggers this bug even in 1.0.7, I got a crash using
> the "outlook silver" theme, too. Aquabird and the default theme did not induce
> crashes.   

I'm running thunderbird 1.5.0.2 on Mac OSX 1.3.9 and I also get the same problem: application crashes when i click on the Write button or select New Message from the Message menu. I am using default theme, and have not installed any new themes.
*** Bug 340692 has been marked as a duplicate of this bug. ***
*** Bug 340701 has been marked as a duplicate of this bug. ***
*** Bug 346543 has been marked as a duplicate of this bug. ***
*** Bug 346555 has been marked as a duplicate of this bug. ***
This crash seems to be caused by certain themes.
URL: any mailto:
Status: UNCONFIRMED → NEW
Ever confirmed: true
Keywords: crash
Summary: Thunderbird crashes while opening compose window [@ libqtengine.so] [@ moz_gtk_dropdown_arrow_paint] → crash involving silverskin theme [@ libqtengine.so] [@ moz_gtk_dropdown_arrow_paint]
Are there any Talkback incidents from 2.0.0.4?  (we did fix some problems
in the widget/view code that could have fixed it)
(In reply to comment #10)
> Are there any Talkback incidents from 2.0.0.4?  (we did fix some problems
> in the widget/view code that could have fixed it)
> 

The latest version of the SilverSkin theme is not supposed to be compatible with 2.0.0.4, or even with 2.0.0.0. This theme has been removed from the addons.mozilla.org site, but the author's site http://www.maurobartoccelli.com/silverskin/ offers downloads of «SilverSkin 2.6.6 for Firefox 1.5» and «SilverSkin 2.6 for Thunderbird 1.5». I didn't try to override the maxVersion setting.

I haven't succeeded to contact the author. Does anyone know if he has a Bugzilla account? And for which email address? If anyone does, it might be useful to add him to the CC.
Ok, how about 1.5.0.12 then?
I installed from the releases.mozilla.org site:

Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.0.12) Gecko/20070508 Firefox/1.5.0.12

downloaded, installed and selected SilverSkin 2.6.6, restarted Firefox, and got a crash when clicking Edit => Preferences (which was the first thing I did after restart). The talkback report TB32988174H is at the bottom of this comment. Trying to restart after the crash produced a crash at startup, I didn't send a second traceback report. The present comment was posted using the same browser with the -safe-mode command-line switch.

The crash was accompanied (each time) by the following messages on sysout and/or syserr:

(Gecko:6458): Gtk-CRITICAL **: gtk_widget_get_parent_window: assertion `GTK_IS_WIDGET (widget)' failed

(Gecko:6458): Gdk-CRITICAL **: gdk_window_is_viewable: assertion `window != NULL' failed

(Gecko:6458): Gtk-CRITICAL **: gtk_widget_get_parent: assertion `GTK_IS_WIDGET (widget)' failed
./run-mozilla.sh: line 131:  6458 Segmentation fault      "$prog" ${1+"$@"}

Now here comes the talkback report:

Incident ID: 32988174
Stack Signature	libqtengine.so + 0x1d14b (0xb693814b) 35e6a02f
Product ID	Firefox15
Build ID	2007050813
Trigger Time	2007-06-09 18:15:00.0
Platform	LinuxIntel
Operating System	Linux 2.6.18.8-0.3-default
Module	libqtengine.so + (0001d14b)
URL visited	
User Comments	clicking "Edit => Preferences" with SilverSkin theme set
Since Last Crash	0 sec
Total Uptime	0 sec
Trigger Reason	SIGSEGV: Segmentation Fault: (signal 11)
Source File, Line No.	N/A
Stack Trace 	
libqtengine.so + 0x1d14b (0xb693814b)
libgtk-x11-2.0.so.0 + 0x1a2748 (0xb7c30748)
moz_gtk_dropdown_arrow_paint()  [mozilla/gfx/src/gtk/gtk2drawing.c, line 973]
nsNativeThemeGTK::DrawWidgetBackground()  [mozilla/gfx/src/gtk/nsNativeThemeGTK.cpp, line 460]
nsCSSRendering::PaintBackgroundWithSC()  [mozilla/layout/base/nsCSSRendering.cpp, line 2825]
nsCSSRendering::PaintBackground()  [mozilla/layout/base/nsCSSRendering.cpp, line 2749]
nsFrame::PaintSelf()  [mozilla/layout/generic/nsFrame.cpp, line 947]
nsBoxFrame::Paint()  [mozilla/layout/xul/base/src/nsBoxFrame.cpp, line 1423]
nsBoxFrame::PaintChild()  [mozilla/layout/xul/base/src/nsBoxFrame.cpp, line 329]
nsBoxFrame::PaintChildren()  [mozilla/layout/xul/base/src/nsBoxFrame.cpp, line 1429]
nsBoxFrame::Paint()  [mozilla/layout/xul/base/src/nsBoxFrame.cpp, line 1445]
nsBoxFrame::PaintChild()  [mozilla/layout/xul/base/src/nsBoxFrame.cpp, line 329]
nsBoxFrame::PaintChildren()  [mozilla/layout/xul/base/src/nsBoxFrame.cpp, line 1429]
nsBoxFrame::Paint()  [mozilla/layout/xul/base/src/nsBoxFrame.cpp, line 1445]
nsBoxFrame::PaintChild()  [mozilla/layout/xul/base/src/nsBoxFrame.cpp, line 329]
nsBoxFrame::PaintChildren()  [mozilla/layout/xul/base/src/nsBoxFrame.cpp, line 1429]
nsBoxFrame::Paint()  [mozilla/layout/xul/base/src/nsBoxFrame.cpp, line 1445]
nsBoxFrame::PaintChild()  [mozilla/layout/xul/base/src/nsBoxFrame.cpp, line 329]
nsBoxFrame::PaintChildren()  [mozilla/layout/xul/base/src/nsBoxFrame.cpp, line 1429]
nsBoxFrame::Paint()  [mozilla/layout/xul/base/src/nsBoxFrame.cpp, line 1445]
nsBoxFrame::PaintChild()  [mozilla/layout/xul/base/src/nsBoxFrame.cpp, line 329]
nsBoxFrame::PaintChildren()  [mozilla/layout/xul/base/src/nsBoxFrame.cpp, line 1429]
nsBoxFrame::Paint()  [mozilla/layout/xul/base/src/nsBoxFrame.cpp, line 1445]
nsBoxFrame::PaintChild()  [mozilla/layout/xul/base/src/nsBoxFrame.cpp, line 329]
nsBoxFrame::PaintChildren()  [mozilla/layout/xul/base/src/nsBoxFrame.cpp, line 1429]
nsBoxFrame::Paint()  [mozilla/layout/xul/base/src/nsBoxFrame.cpp, line 1445]
nsBoxFrame::PaintChild()  [mozilla/layout/xul/base/src/nsBoxFrame.cpp, line 329]
nsBoxFrame::PaintChildren()  [mozilla/layout/xul/base/src/nsBoxFrame.cpp, line 1429]
nsGroupBoxFrame::Paint()  [mozilla/layout/xul/base/src/nsGroupBoxFrame.cpp, line 225]
nsBoxFrame::PaintChild()  [mozilla/layout/xul/base/src/nsBoxFrame.cpp, line 329]
nsBoxFrame::PaintChildren()  [mozilla/layout/xul/base/src/nsBoxFrame.cpp, line 1429]
nsBoxFrame::Paint()  [mozilla/layout/xul/base/src/nsBoxFrame.cpp, line 1445]
PresShell::Paint()  [mozilla/layout/base/nsPresShell.cpp, line 5870]
nsView::Paint()  [mozilla/view/src/nsView.cpp, line 848]
nsViewManager::RenderDisplayListElement()  [mozilla/view/src/nsViewManager.cpp, line 1460]
nsViewManager::RenderViews()  [mozilla/view/src/nsViewManager.cpp, line 1375]
nsViewManager::Refresh()  [mozilla/view/src/nsViewManager.cpp, line 930]
nsViewManager::DispatchEvent()  [mozilla/view/src/nsViewManager.cpp, line 842]
HandleEvent()  [mozilla/view/src/nsView.cpp, line 251]
nsCommonWidget::DispatchEvent()  [mozilla/widget/src/gtk2/nsCommonWidget.cpp, line 219]
nsWindow::OnExposeEvent()  [mozilla/widget/src/gtk2/nsWindow.cpp, line 842]
expose_event_cb()  [mozilla/widget/src/gtk2/nsWindow.cpp, line 3633]
libgtk-x11-2.0.so.0 + 0x1321b0 (0xb7bc01b0)
libgobject-2.0.so.0 + 0x9c0b (0xb7959c0b)
libgobject-2.0.so.0 + 0x1ad3d (0xb796ad3d)
libgobject-2.0.so.0 + 0x1c00f (0xb796c00f)
libgobject-2.0.so.0 + 0x1c415 (0xb796c415)
libgtk-x11-2.0.so.0 + 0x245b18 (0xb7cd3b18)
libgtk-x11-2.0.so.0 + 0x12c935 (0xb7bba935)
libgdk-x11-2.0.so.0 + 0x2c53f (0xb7a3853f)
libgdk-x11-2.0.so.0 + 0x2c787 (0xb7a38787)
libgdk-x11-2.0.so.0 + 0x2c805 (0xb7a38805)
libglib-2.0.so.0 + 0x2c061 (0xb78e3061)
libglib-2.0.so.0 + 0x2dde2 (0xb78e4de2)
libglib-2.0.so.0 + 0x30e1f (0xb78e7e1f)
libglib-2.0.so.0 + 0x311c9 (0xb78e81c9)
libgtk-x11-2.0.so.0 + 0x12ccd4 (0xb7bbacd4)
nsAppShell::Run()  [mozilla/widget/src/gtk2/nsAppShell.cpp, line 141]
nsAppStartup::Run()  [mozilla/toolkit/components/startup/src/nsAppStartup.cpp, line 151]
XRE_main()  [mozilla/toolkit/xre/nsAppRunner.cpp, line 2382]
main()  [mozilla/browser/app/nsBrowserApp.cpp, line 62]
libc.so.6 + 0x15f9c (0xb73bff9c)

I think this could have same underlying cause as bug 380359.
I'll take a look when I update the patch there...
Assignee: blizzard → mats.palmgren
Depends on: 380359
Product: Core → Core Graveyard
Please reopen the bug if still occurs in a recent build.

-> WORKSFORME (possibly fixed by bug 380359 per last comment)
Status: NEW → RESOLVED
Closed: 15 years ago
Resolution: --- → WORKSFORME
(In reply to comment #15)
> Please reopen the bug if still occurs in a recent build.
> 
> -> WORKSFORME (possibly fixed by bug 380359 per last comment)

I had dropped SilverSkin because of this bug (in favour of GrayModern) and nowadays I'm using Firefox less and less often (in favour of SeaMonkey, mostly) so it may take me some time before I get around to test this. Thanks for the heads-up anyway.
Crash Signature: [@ libqtengine.so] [@ moz_gtk_dropdown_arrow_paint]
You need to log in before you can comment on or make changes to this bug.