384704 - [1.8 branch] Crash [@ nsHTMLCSSUtils::SetCSSPropertyPixels] while dragging absolutely positioned element

Status: RESOLVED WORKSFORME

(Core :: DOM: Editor, defect)

Description

[Martijn Wargers (dead)]

This is a follow-up from bug 336160.

I'm still crashing in current trunk builds with the testcase from that bug with slightly
different steps to reproduce:
- Drag the absolute positioned element until the mouse is out of the iframe
- Wait a little while, then relese the left mouse button
- Click inside the iframe

Result: crash
https://crash-reports.mozilla.com/reports/report/index/7c500fab-1b62-11dc-89f0-001a4bd46e84
0  	@0x78
1 	nsHTMLCSSUtils::SetCSSPropertyPixels(nsIDOMElement *,nsIAtom *,int,int)
2 	nsHTMLEditor::SetFinalPosition(int,int)
3 	nsHTMLEditor::MouseUp(int,int,nsIDOMElement *)
4 	nsHTMLEditorMouseListener::MouseUp(nsIDOMEvent *)
5 	nsEventListenerManager::HandleEvent(nsPresContext *,nsEvent *,nsIDOMEvent * *,nsISupports *,unsigned int,nsEventStatus *)
6 	nsEventTargetChainItem::HandleEvent(nsEventChainPostVisitor &,unsigned int)
7 	nsEventTargetChainItem::HandleEventTargetChain(nsEventChainPostVisitor &,unsigned int,nsDispatchingCallback *)
8 	nsEventDispatcher::Dispatch(nsISupports *,nsPresContext *,nsEvent *,nsIDOMEvent *,nsEventStatus *,nsDispatchingCallback *)
9 	PresShell::HandleEventInternal(nsEvent *,nsIView *,nsEventStatus *)

Olli mentioned in bug 336160 that the patch for bug 382778 should fix this.

Comment 1

[Martijn Wargers (dead)]

This is still crashing for me with Firefox2.0.0.5 and current trunk build (current trunk gives a weird stacktrace, though, it might be something else).

Comment 2

[Olli Pettay [:smaug][[e-mail]]]

I can't reproduce the crash in linux trunk.

Comment 3

[Olli Pettay [:smaug][[e-mail]]]

latest branch does crash.

Comment 4

[Martijn Wargers (dead)]

Ah, sorry, you're correct. I thought I could reproduce this on trunk, but I can't.

Comment 5

[Martijn Wargers (dead)]

Marking resolved worksforme, as this is only a problem in the 1.8 branch and not in later builds and the 1.8 branch is not maintained anymore by Mozilla.