Closed Bug 316690 Opened 19 years ago Closed 19 years ago

Random crashes during message composition (generally when deleting or typing over selected text) [@nsTextServicesDocument::DeleteNode]

Categories

(MailNews Core :: Composition, defect)

PowerPC
macOS
defect
Not set
critical

Tracking

(Not tracked)

RESOLVED DUPLICATE of bug 304720

People

(Reporter: smjg, Unassigned)

Details

(Keywords: crash)

Crash Data

Attachments

(1 file)

User-Agent:       Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.9a1) Gecko/20051108 SeaMonkey/1.5a
Build Identifier: Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.9a1) Gecko/20051108 SeaMonkey/1.5a

In my time I have lost far too many newsgroup messages that I'm in the middle of typing to this bug.  I'm typing a message, I select some text to delete, and suddenly it crashes out on me.  I've the feeling that it happens mostly, but not always, when there is some quoted text in what was selected.

Reproducible: Sometimes

Steps to Reproduce:
1. Start a reply to a news message.
2. Get carried away with writing it.
3. Select some text.
4. Either press delete or start typing something to replace the text.
Actual Results:  
Crash ("The application seamonkey-bin has unexpectedly quit")

Expected Results:  
I'll give you a million guesses....
Keywords: crash
Huh?  That's not what I set the severity to!
Severity: enhancement → critical
Stewart, any chance of a Talkback ID?
I habitually close Talkback the moment it appears as it doesn't seem to work on my setup (or didn't last time I knew.  But I'll see what I can do next time it happens.
Not sure, since your stacktrace does not contain function names, but this bug here looks like a dupe of Bug 304720.

Current stacktrace of that crasher looks like this:
nsTextServicesDocument::DeleteNode(nsTextServicesDocument * const 0x00000000, nsIDOMNode * 0x0313c600) line 2525 + 3 bytes
nsTSDNotifier::DidDeleteNode(nsTSDNotifier * const 0x083fffc8, nsIDOMNode * 0x0313c600, unsigned int 0) line 119
nsEditor::DeleteNode(nsEditor * const 0x00000002, nsIDOMNode * 0x0313c600) line 1538 + 12 bytes
nsHTMLEditor::DeleteNode(nsHTMLEditor * const 0x066b00e0, nsIDOMNode * 0x0313c600) line 3882 + 11 bytes
nsTextEditRules::DidDeleteSelection(nsTextEditRules * const 0x00000000, nsISelection * 0x0ac82d48, short 2, unsigned int 0) line 1005 + 18 bytes
nsHTMLEditRules::DidDeleteSelection(nsHTMLEditRules * const 0x00000000, nsISelection * 0x0ac82d48, short 2, unsigned int 0) line 2858 + 17 bytes
nsHTMLEditRules::DidDoAction(nsHTMLEditRules * const 0x032a1b04, nsISelection * 0x0ac82d48, nsRulesInfo * 0x0012f6bc, unsigned int 0) line 641 + 22 bytes
nsPlaintextEditor::DeleteSelection(nsPlaintextEditor * const 0x066b00e0, short 2) line 721 + 22 bytes
nsTextEditorKeyListener::KeyPress(nsTextEditorKeyListener * const 0x0aca3e60, nsIDOMEvent * 0x080f9ca0) line 203
DispatchToInterface(nsIDOMEvent * 0x080f9ca0, nsIDOMEventListener * 0x0aca3e60, unsigned int (nsIDOMEvent *)* 0x017c6ba4 `vcall'(nsIDOMEvent *), const nsID & {...}, int * 0x0012f7a8) line 140 + 18 bytes
nsEventListenerManager::HandleEvent(nsEventListenerManager * const 0x0aca3f58, nsPresContext * 0x00000000, nsEvent * 0x00000002, nsIDOMEvent * * 0x0012f81c, nsIDOMEventTarget * 0x08597a7c, unsigned int 514, nsEventStatus * 0x0012f958) line 1776 + 25 bytes
nsDocument::HandleDOMEvent(nsDocument * const 0x00000000, nsPresContext * 0x0ac78a70, nsEvent * 0x00000000, nsIDOMEvent * * 0x0012f81c, unsigned int 514, nsEventStatus * 0x0012f958) line 4232
nsGenericElement::HandleDOMEvent(nsGenericElement * const 0x00000000, nsPresContext * 0x0ac78a70, nsEvent * 0x00000000, nsIDOMEvent * * 0x0012f81c, unsigned int 519, nsEventStatus * 0x0012f958) line 2202 + 27 bytes
PresShell::HandleEventInternal(PresShell * const 0x00000000, nsEvent * 0x00000000, nsIView * 0x0ac78e68, unsigned int 1, nsEventStatus * 0x0012f958) line 6056 + 18 bytes
PresShell::HandleEvent(PresShell * const 0x03142c68, nsIView * 0x0ac78e68, nsGUIEvent * 0x0012fa0c, nsEventStatus * 0x0012f958, int 1, int & 1) line 5857 + 19 bytes
nsViewManager::HandleEvent(nsViewManager * const 0x00000000, nsView * 0x00000001, nsPoint {...}, nsGUIEvent * 0x00000000, int 0) line 2504
nsViewManager::DispatchEvent(nsViewManager * const 0x0ac78de0, nsGUIEvent * 0x0ac78e68, nsEventStatus * 0x0012f9cc) line 2237 + 41 bytes
HandleEvent(nsGUIEvent * 0x0012fa0c) line 176
nsWindow::DispatchEvent(nsWindow * const 0x0ac7393c, nsGUIEvent * 0x0012fa0c, nsEventStatus & nsEventStatus_eIgnore) line 1140 + 3 bytes
nsWindow::DispatchWindowEvent(nsWindow * const 0x00000000, nsGUIEvent * 0x00000000) line 1161
nsWindow::DispatchKeyEvent(nsWindow * const 0x00000000, unsigned int 131, unsigned short 0, unsigned int 8, long 1074659329, unsigned int 0) line 3344 + 14 bytes
nsWindow::OnKeyDown(nsWindow * const 0x00000000, unsigned int 8, unsigned int 16398, long 1074659329) line 3482
nsWindow::ProcessMessage(nsWindow * const 0x00000000, unsigned int 256, unsigned int 8, long 1074659329, long * 0x0012fd78) line 4427 + 18 bytes
nsWindow::WindowProc(HWND__ * 0x00130300, unsigned int 256, unsigned int 8, long 180828476) line 1329 + 16 bytes

which would match your stacktrace (9 frames in libeditor, 1 in embedding, then layout).
That bug talks of the inline spellchecker.  I've a recollection of this happening on and off even before the inline spellchecker was implemented.
But the patch there checks for "if (!mIterator)", which will also prevent this crash here (since "this" is 0x00000000).
Depends on: 304720
I've now got Talkback working.  TB12698841Z
strange

Incident ID: 12698841
Stack Signature	libeditor.dylib + 0x5ce38 (0x06461e38) 9024048c
Product ID	MozillaTrunk
Build ID	2005110810
Trigger Time	2005-12-07 06:02:13.0
Platform	MacOSX
Operating System	Darwin 7.9.0
Module	libeditor.dylib + (0005ce38)
URL visited	
User Comments	Typing over selected text while composing a message - see bug 316690.
Since Last Crash	156124 sec
Total Uptime	990251 sec
Trigger Reason	SIGBUS: Bus Error: (signal 10)
Source File, Line No.	N/A
Stack Trace 	
libeditor.dylib + 0x5ce38 (0x06461e38)

ideally talkback reports are better than crash reports, but you managed to have builds where neither are happy.
Duping per Frank's comments. 

*** This bug has been marked as a duplicate of 304720 ***
Status: NEW → RESOLVED
Closed: 19 years ago
No longer depends on: 304720
Resolution: --- → DUPLICATE
Summary: Random crashes during message composition (generally when deleting or typing over selected text) → Random crashes during message composition (generally when deleting or typing over selected text) [@nsTextServicesDocument::DeleteNode]
Product: Core → MailNews Core
Crash Signature: [@nsTextServicesDocument::DeleteNode]
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: