380980 - crash @ nsContentUtils::ContentIsDescendantOf(), aPossibleDescendant is null

Status: RESOLVED DUPLICATE of bug 380716

(Firefox :: General, defect)

Description

[(not reading, please use [e-mail] instead)]

crash @ nsContentUtils::ContentIsDescendantOf(), aPossibleDescendant is null

at the time I was using bugzilla, I believe I had clicked the button to upload a file as an attachment.

this was with my debug build:

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9a5pre) Gecko/20070515 Minefield/3.0a5pre

from the console:

###!!! ASSERTION: The possible ancestor is null!: 'aPossibleAncestor', file c:/b
uilds/trunk-no-places/mozilla/content/base/src/nsContentUtils.cpp, line 1144
###!!! ASSERTION: The possible descendant is null!: 'aPossibleDescendant', file
c:/builds/trunk-no-places/mozilla/content/base/src/nsContentUtils.cpp, line 1143

here's a stack:

 	gklayout.dll!nsINode::GetNodeParent()  Line 473 + 0x3 bytes	C++
>	gklayout.dll!nsContentUtils::ContentIsDescendantOf(nsINode * aPossibleDescendant=0x00000000, nsINode * aPossibleAncestor=0x05f11840)  Line 1149 + 0x8 bytes	C++
 	gklayout.dll!nsGenericElement::doPreHandleEvent(nsIContent * aContent=0x05f11840, nsEventChainPreVisitor & aVisitor={...})  Line 1909 + 0x15 bytes	C++
 	gklayout.dll!nsGenericElement::PreHandleEvent(nsEventChainPreVisitor & aVisitor={...})  Line 1859 + 0xd bytes	C++
 	gklayout.dll!nsEventTargetChainItem::PreHandleEvent(nsEventChainPreVisitor & aVisitor={...})  Line 190 + 0x1c bytes	C++
 	gklayout.dll!nsEventDispatcher::Dispatch(nsISupports * aTarget=0x05f11840, nsPresContext * aPresContext=0x05cf91a8, nsEvent * aEvent=0x0012ec10, nsIDOMEvent * aDOMEvent=0x00000000, nsEventStatus * aEventStatus=0x0012ec0c, nsDispatchingCallback * aCallback=0x0012ec00)  Line 438	C++
 	gklayout.dll!nsEventStateManager::DispatchMouseEvent(nsGUIEvent * aEvent=0x0012f4b0, unsigned int aMessage=331, nsIContent * aTargetContent=0x05f11840, nsIContent * aRelatedContent=0x05f1fa70)  Line 2699 + 0x21 bytes	C++
 	gklayout.dll!nsEventStateManager::NotifyMouseOver(nsGUIEvent * aEvent=0x0012f4b0, nsIContent * aContent=0x05f11840)  Line 2822 + 0x1e bytes	C++
 	gklayout.dll!nsEventStateManager::GenerateMouseEnterExit(nsGUIEvent * aEvent=0x0012f4b0)  Line 2855	C++
 	gklayout.dll!nsEventStateManager::PreHandleEvent(nsPresContext * aPresContext=0x05cf91a8, nsEvent * aEvent=0x0012f4b0, nsIFrame * aTargetFrame=0x05f1e8c4, nsEventStatus * aStatus=0x0012f250, nsIView * aView=0x054e6660)  Line 718	C++
 	gklayout.dll!PresShell::HandleEventInternal(nsEvent * aEvent=0x0012f4b0, nsIView * aView=0x054e6660, nsEventStatus * aStatus=0x0012f250)  Line 5699 + 0x36 bytes	C++
 	gklayout.dll!PresShell::HandlePositionedEvent(nsIView * aView=0x054e6660, nsIFrame * aTargetFrame=0x05f1e8c4, nsGUIEvent * aEvent=0x0012f4b0, nsEventStatus * aEventStatus=0x0012f250)  Line 5598 + 0x14 bytes	C++
 	gklayout.dll!PresShell::HandleEvent(nsIView * aView=0x054e6660, nsGUIEvent * aEvent=0x0012f4b0, nsEventStatus * aEventStatus=0x0012f250)  Line 5441 + 0x1e bytes	C++
 	gklayout.dll!nsViewManager::HandleEvent(nsView * aView=0x054e6660, nsPoint aPoint={...}, nsGUIEvent * aEvent=0x0012f4b0, int aCaptured=0)  Line 1286	C++
 	gklayout.dll!nsViewManager::DispatchEvent(nsGUIEvent * aEvent=0x0012f4b0, nsEventStatus * aStatus=0x0012f390)  Line 1239 + 0x22 bytes	C++
 	gklayout.dll!HandleEvent(nsGUIEvent * aEvent=0x0012f4b0)  Line 174	C++
 	gkwidget.dll!nsWindow::DispatchEvent(nsGUIEvent * event=0x0012f4b0, nsEventStatus & aStatus=nsEventStatus_eIgnore)  Line 1112 + 0xc bytes	C++
 	gkwidget.dll!nsWindow::DispatchWindowEvent(nsGUIEvent * event=0x0012f4b0)  Line 1133	C++
 	gkwidget.dll!nsWindow::DispatchMouseEvent(unsigned int aEventType=300, unsigned int wParam=0, long lParam=27328814, int aIsContextMenuKey=0, short aButton=0)  Line 6297 + 0x1a bytes	C++
 	gkwidget.dll!ChildWindow::DispatchMouseEvent(unsigned int aEventType=300, unsigned int wParam=0, long lParam=27328814, int aIsContextMenuKey=0, short aButton=0)  Line 6479	C++
 	gkwidget.dll!nsWindow::ProcessMessage(unsigned int msg=512, unsigned int wParam=0, long lParam=27328814, long * aRetValue=0x0012f944)  Line 4676 + 0x24 bytes	C++
 	gkwidget.dll!nsWindow::WindowProc(HWND__ * hWnd=0x00110de4, unsigned int msg=512, unsigned int wParam=0, long lParam=27328814)  Line 1325 + 0x1d bytes	C++
 	user32.dll!7e418734() 	
 	[Frames below may be incorrect and/or missing, no symbols loaded for user32.dll]	
 	user32.dll!7e418816() 	
 	user32.dll!7e4189cd() 	
 	user32.dll!7e419402() 	
 	user32.dll!7e418a10() 	
 	gkwidget.dll!nsAppShell::ProcessNextNativeEvent(int mayWait=0)  Line 149	C++
 	gkwidget.dll!nsBaseAppShell::DoProcessNextNativeEvent(int mayWait=0)  Line 137 + 0x11 bytes	C++
 	gkwidget.dll!nsBaseAppShell::OnProcessNextEvent(nsIThreadInternal * thr=0x00bace08, int mayWait=1, unsigned int recursionDepth=0)  Line 225 + 0xd bytes	C++
 	xpcom_core.dll!nsThread::ProcessNextEvent(int mayWait=1, int * result=0x0012fb30)  Line 472	C++
 	xpcom_core.dll!NS_ProcessNextEvent_P(nsIThread * thread=0x00bace08, int mayWait=1)  Line 227 + 0x16 bytes	C++
 	gkwidget.dll!nsBaseAppShell::Run()  Line 154 + 0xc bytes	C++
 	tkitcmps.dll!nsAppStartup::Run()  Line 171 + 0x1c bytes	C++
 	xul.dll!XRE_main(int argc=1, char * * argv=0x00ba9650, const nsXREAppData * aAppData=0x004036b4)  Line 2806 + 0x25 bytes	C++
 	firefox.exe!main(int argc=1, char * * argv=0x00ba9650)  Line 61 + 0x13 bytes	C++
 	firefox.exe!__tmainCRTStartup()  Line 586 + 0x19 bytes	C
 	firefox.exe!mainCRTStartup()  Line 403	C
 	kernel32.dll!7c816fd7() 	
 	xpcom_core.dll!xptiFile::`vector deleting destructor'()  + 0x5e bytes	C++
 	xpcom_core.dll!EdgePool::Builder::Add(PtrInfo * aEdge=0x0078005f)  Line 401 + 0x1e bytes	C++
 	xpcom_core.dll!EdgePool::Builder::Add(PtrInfo * aEdge=0x00720070)  Line 401 + 0x1e bytes	C++
 	xpcom_core.dll!nsLocalFile::GetVersionInfoField(const char * aField=0x00220033, nsAString_internal & _retval={...})  Line 1356 + 0x46 bytes	C++
 	xpcom_core.dll!nsComponentManagerImpl::WritePersistentRegistry()  Line 1313 + 0x8 bytes	C++
 	xpcom_core.dll!nsComponentManagerImpl::WritePersistentRegistry()  Line 1313 + 0x8 bytes	C++

Comment 1

[(not reading, please use [e-mail] instead)]

possible dupe of bug #380716?