crash on quit [@ nsMacEventHandler::HandleMouseMoveEvent] or [@ nsMacEventHandler::ConvertOSEventToMouseEvent]

RESOLVED FIXED

Status

Core Graveyard
Widget: Mac
--
critical
RESOLVED FIXED
11 years ago
6 years ago

People

(Reporter: (not reading, please use seth@sspitzer.org instead), Assigned: Mark Mentovai)

Tracking

({crash, fixed1.8.1.4})

Trunk
x86
Mac OS X
crash, fixed1.8.1.4
Dependency tree / graph

Firefox Tracking Flags

(Not tracked)

Details

(crash signature, URL)

Attachments

(5 attachments)

crash on quit [@nsMacEventHandler::HandleMouseMoveEvent]

this was with my debug, mac os x, trunk build

Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.9a1) Gecko/20060921 Minefield/3.0a1

Program received signal EXC_BAD_ACCESS, Could not access memory.
Reason: KERN_INVALID_ADDRESS at address: 0x4a7400a2

0x158e9ff1 in nsMacEventHandler::HandleMouseMoveEvent (this=0x34128680, aOSEvent=@0xbfffee10) at /Users/sspitzer/Desktop/trunk/mozilla/widget/src/mac/nsMacEventHandler.cpp:1679
1679              lastWidgetPointed->GetBounds(bounds);
(gdb) print lastWidgetPointed
$1 = (nsWindow *) 0x20000
(gdb) where

I'll attach the full stack.

so far, I haven't been able to reproduce it.
Created attachment 239589 [details]
stack, from within gdb
(Assignee)

Comment 2

11 years ago
Reproducible?
> Reproducible?

sorry mark, not yet.  :(

Updated

11 years ago
Assignee: nobody → joshmoz
Severity: normal → critical
Component: General → Widget: Mac
Keywords: crash
Product: Firefox → Core
QA Contact: general → mac
Summary: crash on quit [@nsMacEventHandler::HandleMouseMoveEvent] → crash on quit [@ nsMacEventHandler::HandleMouseMoveEvent]
Created attachment 239746 [details]
hit it again, but still not reproducable
josh / mark, does that second crash report look like a different issue, or the the same as my stack attached as comment #1?  (The top of the stack looks similar).
Created attachment 239828 [details]
another crash log, similar (but different), in case this helps
Created attachment 244314 [details]
stack trace from user in #firefox

A user (quix) reported this stack trace, which seems similar to the ones on this bug. This was with Firefox 2; he didn't know what the trigger was, but had been switching back to the app when it crashed.

Comment 8

11 years ago
*** Bug 360047 has been marked as a duplicate of this bug. ***
Duplicate of this bug: 372291

Comment 10

11 years ago
Possibly related: bug 368907 which describes a nsMacEventHandler::HandleMouseMoveEvent crash on window close.
Duplicate of this bug: 372959
This is a pretty popular crash on Mac with over 100 crashes thus far for Fx 2.0.0.2. Most of the comments in talkback indicate it's happening either when closing a window (as bug 368907 mentions) or on quit, most usually when doing a restart of Firefox for an extension install or update. Looking through a good portion of the crashes in the query below, I didn't see any on 10.3, but that could just be a consequence of most people on 10.4 by now. It's pretty universal across all minor releases of 10.4, however.

Talkback query: http://tinyurl.com/yukrtp
Blocks: 368907
Blocks: 376012
(Assignee)

Comment 13

11 years ago
Fairly reliable testcase:

From a browser window, get the location bar autocomplete popup to show by starting to type something autocompletable (like "m") in the location bar.  With the popup displayed, begin moving the mouse cursor (within the window?).  With the popup displayed and the cursor moving, press command-W to close the window.
(Assignee)

Comment 14

11 years ago
widget/src/mac/nsMacEventHandler.cpp:
1640   WindowRef wind = reinterpret_cast<WindowRef>(mTopLevelWidget->GetNativeData(NS_NATIVE_DISPLAY));
(Assignee)

Comment 15

11 years ago
Caused by a conjunction of bug 344238 and bug 344570 (10.4-only after bug 345388).  A description is in the patch to follow.  The patch will fix this bug, and bug 368907.  I don't know about bug 376012.
Assignee: joshmoz → mark
Blocks: 344238, 344570
(Assignee)

Comment 16

11 years ago
Created attachment 260243 [details] [diff] [review]
Fix
Attachment #260243 - Flags: review?(joshmoz)
(Assignee)

Updated

11 years ago
Summary: crash on quit [@ nsMacEventHandler::HandleMouseMoveEvent] → crash on quit [@ nsMacEventHandler::HandleMouseMoveEvent] or [@ nsMacEventHandler::ConvertOSEventToMouseEvent]

Updated

11 years ago
Attachment #260243 - Flags: review?(joshmoz) → review+
(Assignee)

Updated

11 years ago
Attachment #260243 - Flags: superreview?(vladimir)
Attachment #260243 - Flags: superreview?(vladimir) → superreview+
(Assignee)

Comment 17

11 years ago
Comment on attachment 260243 [details] [diff] [review]
Fix

1.8.1-only, this is a Mac topcrasher.
Attachment #260243 - Flags: approval1.8.1.4?
Comment on attachment 260243 [details] [diff] [review]
Fix

approved for 1.8.1.4, a=dveditz for release-drivers
Attachment #260243 - Flags: approval1.8.1.4? → approval1.8.1.4+
(Assignee)

Comment 19

11 years ago
Checked in on MOZILLA_1_8_BRANCH.
Status: NEW → RESOLVED
Last Resolved: 11 years ago
Keywords: fixed1.8.1.4
Resolution: --- → FIXED
Duplicate of this bug: 376112
Duplicate of this bug: 378586

Updated

10 years ago
Duplicate of this bug: 384170
Duplicate of this bug: 382119

Updated

8 years ago
Component: Widget: Mac → Widget: Mac
Product: Core → Core Graveyard
Crash Signature: [@ nsMacEventHandler::HandleMouseMoveEvent] [@ nsMacEventHandler::ConvertOSEventToMouseEvent]
You need to log in before you can comment on or make changes to this bug.