340651 - Menu-Funktions are broken (Regression) [@ JS_GetOptions]

Status: VERIFIED FIXED

(Core :: DOM: Core & HTML, defect)

Description

[Tobias Fischer]

Using: 
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.9a1) Gecko/20060601 Mnenhy/0.7.4.0 SeaMonkey/1.5a {Build ID: 2006060622}

several Funktions are broken and crashes SeaMonkey and Thunderbird (latest Patrocles Build 20060606xx?) too. This wis a Blocker, because further Testing is not possible. 

Thunderbird crashes @JS_GetOptions when open "Account-Settings", "About Mozilla Thunderbird" or "Add Ons" from Tools-Menu. 
TB: TB19593486M, TB19593446Y, TB19593428W

Add Stack from TB19593486M:

JS_GetOptions  [e:/builds/tinderbox/thunderbird-trunk/WINNT_5.0_Depend/mozilla/js/src/jsapi.c, line 1049]
nsContentUtils::ReportToConsole  [e:/builds/tinderbox/thunderbird-trunk/WINNT_5.0_Depend/mozilla/content/base/src/nsContentUtils.cpp, line 2424]
nsContentUtils::ReportToConsole  [e:/builds/tinderbox/thunderbird-trunk/WINNT_5.0_Depend/mozilla/content/base/src/nsContentUtils.cpp, line 2399]
nsContentUtils::GetLocalizedString  [e:/builds/tinderbox/thunderbird-trunk/WINNT_5.0_Depend/mozilla/content/base/src/nsContentUtils.cpp, line 2357]
nsEventStateManager::SetContentState  [e:/builds/tinderbox/thunderbird-trunk/WINNT_5.0_Depend/mozilla/content/events/src/nsEventStateManager.cpp, line 3991]
nsXULElement::GetAttrInfo  [e:/builds/tinderbox/thunderbird-trunk/WINNT_5.0_Depend/mozilla/content/xul/content/src/nsXULElement.cpp, line 2332]
invoke_copy_to_stack  [e:/builds/tinderbox/thunderbird-trunk/WINNT_5.0_Depend/mozilla/xpcom/reflect/xptcall/src/md/win32/xptcinvoke.cpp, line 49]
XPCWrappedNative::CallMethod  [e:/builds/tinderbox/thunderbird-trunk/WINNT_5.0_Depend/mozilla/js/src/xpconnect/src/xpcwrappednative.cpp, line 2055]
XPC_WN_Helper_NewResolve  [e:/builds/tinderbox/thunderbird-trunk/WINNT_5.0_Depend/mozilla/js/src/xpconnect/src/xpcwrappednativejsops.cpp, line 1069]
js_Invoke  [e:/builds/tinderbox/thunderbird-trunk/WINNT_5.0_Depend/mozilla/js/src/jsinterp.c, line 1328]
js_Interpret  [e:/builds/tinderbox/thunderbird-trunk/WINNT_5.0_Depend/mozilla/js/src/jsinterp.c, line 4019]
js_Invoke  [e:/builds/tinderbox/thunderbird-trunk/WINNT_5.0_Depend/mozilla/js/src/jsinterp.c, line 1347]
js_InternalInvoke  [e:/builds/tinderbox/thunderbird-trunk/WINNT_5.0_Depend/mozilla/js/src/jsinterp.c, line 1422]
JS_CallFunctionValue  [e:/builds/tinderbox/thunderbird-trunk/WINNT_5.0_Depend/mozilla/js/src/jsapi.c, line 4341]
nsJSContext::BindCompiledEventHandler  [e:/builds/tinderbox/thunderbird-trunk/WINNT_5.0_Depend/mozilla/dom/src/base/nsJSEnvironment.cpp, line 1481]
nsDOMMouseEvent::GetTarget  [e:/builds/tinderbox/thunderbird-trunk/WINNT_5.0_Depend/mozilla/content/events/src/nsDOMMouseEvent.h, line 61]
nsEventListenerManager::AddEventListener  [e:/builds/tinderbox/thunderbird-trunk/WINNT_5.0_Depend/mozilla/content/events/src/nsEventListenerManager.cpp, line 1827]
nsEventListenerManager::FixContextMenuEvent  [e:/builds/tinderbox/thunderbird-trunk/WINNT_5.0_Depend/mozilla/content/events/src/nsEventListenerManager.cpp, line 1987]
nsEventTargetChainItem::CreateChainAndHandleEvent  [e:/builds/tinderbox/thunderbird-trunk/WINNT_5.0_Depend/mozilla/content/events/src/nsEventDispatcher.cpp, line 401]
nsEventDispatcher::Dispatch  [e:/builds/tinderbox/thunderbird-trunk/WINNT_5.0_Depend/mozilla/content/events/src/nsEventDispatcher.cpp, line 527]
nsEventTargetChainItem::HandleEventTargetChain  [e:/builds/tinderbox/thunderbird-trunk/WINNT_5.0_Depend/mozilla/content/events/src/nsEventDispatcher.cpp, line 453]
nsEventTargetChainItem::HandleEventTargetChain  [e:/builds/tinderbox/thunderbird-trunk/WINNT_5.0_Depend/mozilla/content/events/src/nsEventDispatcher.cpp, line 435]
nsEventDispatcher::DispatchDOMEvent  [e:/builds/tinderbox/thunderbird-trunk/WINNT_5.0_Depend/mozilla/content/events/src/nsEventDispatcher.cpp, line 607]
DocumentViewerImpl::PermitUnload  [e:/builds/tinderbox/thunderbird-trunk/WINNT_5.0_Depend/mozilla/layout/base/nsDocumentViewer.cpp, line 1204]
nsDocShell::FinishRestore  [e:/builds/tinderbox/thunderbird-trunk/WINNT_5.0_Depend/mozilla/docshell/base/nsDocShell.cpp, line 5228]
nsWebShell::CanCopySelection  [e:/builds/tinderbox/thunderbird-trunk/WINNT_5.0_Depend/mozilla/docshell/base/nsWebShell.cpp, line 1345]
nsDocShell::BeginRestore  [e:/builds/tinderbox/thunderbird-trunk/WINNT_5.0_Depend/mozilla/docshell/base/nsDocShell.cpp, line 5185]
nsExternalHelperAppService::nsExternalHelperAppService  [e:/builds/tinderbox/thunderbird-trunk/WINNT_5.0_Depend/mozilla/uriloader/exthandler/nsExternalHelperAppService.cpp, line 484]
nsDocLoader::GetListenerInfo  [e:/builds/tinderbox/thunderbird-trunk/WINNT_5.0_Depend/mozilla/uriloader/base/nsDocLoader.cpp, line 1321]
nsDocLoader::FireOnLocationChange  [e:/builds/tinderbox/thunderbird-trunk/WINNT_5.0_Depend/mozilla/uriloader/base/nsDocLoader.cpp, line 1248]
nsLoadGroup::Resume  [e:/builds/tinderbox/thunderbird-trunk/WINNT_5.0_Depend/mozilla/netwerk/base/src/nsLoadGroup.cpp, line 427]
nsJARChannel::OnStopRequest  [e:/builds/tinderbox/thunderbird-trunk/WINNT_5.0_Depend/mozilla/modules/libjar/nsJARChannel.cpp, line 757]


SeaMonkey 2006060622 crashes when try to install *.xpi, or open MailNews. 

This regressed between 2006060610 and 2006060622. Probably this was an Duplicate for Rias Bug 340640, but I am not sure if this here was caised by Cairo so i file this one.

Comment 1

[Frederic Bezies]

*** Bug 340650 has been marked as a duplicate of this bug. ***

Comment 2

[Frederic Bezies]

Seeing those kind of crashes under linux too.

Anybody on Apple to set OS to ALL instead of Windows only ?

Comment 3

[Frederic Bezies]

Possible guilty bugs :

* bug 296040
* bug 340517
* bug 336674
* bug 334765
* bug 331432
* bug 338718

Maybe 296040 is the one ?

Comment 4

[timeless]

weirdal sent me a stack with JS_GetOptions at the top

i know jst was the reviewer of record, but i'm hoping that missed something and that this is the right bug.

note that filing a bug in js because the top frame is js is going to get you yelled at. js is the victim here.

Comment 5

[Ria Klaassen (not reading all bugmail)]

Is this bug 340640 or do you see this also in non-cairo?

Comment 6

[Tobias Fischer]

(In reply to comment #5)
> Is this bug 340640 or do you see this also in non-cairo?
> 

See Bug 340640#c3. I have no Idea for further testing with Non-Cairo-Builds at Moment, because the latest Firefox-Builds wont start. 

And thanks for the hint timeless, will look at this file future Bugreports.

Comment 7

[timeless]

my bet is this is bug 340602

Comment 8

[Tobias Fischer]

(In reply to comment #7)
> my bet is this is bug 340602
> 
Won't bet against you. 
But now I can reproduce some crash with Firefox-Non-Cairo-Zip-Build 200606060705 from: http://ftp.mozilla.org/pub/mozilla.org/firefox/nightly/experimental/non-cairo/2006-06-07-05-trunk/

TB19601198Q

But the Stack is a little different from the first named Incidents. 

Comment 9

[Wayne Mery (:wsmwk)]

crashes on startup - slightly different stack. TB started with 2006060705, didn't happen with 2006060205
TB19601502

Comment 10

[pal-moz]

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9a1) Gecko/20060607 Minefield/3.0a1 ID:2006060704 [cairo]

Tools>Options, Help>About Minefield : Crash
other dialogs work fine.

Comment 11

[Peter van der Woude [:Peter6]]

Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.9a1) Gecko/20060607 Minefield/3.0a1 ID:2006060710 [cairo]

verified/fixed

Comment 12

[timeless]

*** Bug 340664 has been marked as a duplicate of this bug. ***

Comment 13

[timeless]

*** Bug 340688 has been marked as a duplicate of this bug. ***

Comment 14

[timeless]

*** Bug 340952 has been marked as a duplicate of this bug. ***