Closed Bug 391428 Opened 18 years ago Closed 18 years ago

Crash [@ AppKitMenuEventHandler] when clicking on tree-rows within popups

Categories

(Core :: Widget: Cocoa, defect)

Product:
Core
Component:
Widget: Cocoa
Platform:
x86
macOS
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED DUPLICATE of bug 390707

People

(Reporter: asaf, Assigned: jaas)

References

Details

(Keywords: crash)

Crash Data

I get the following crash often when clicking multiple times on tree-rows within the new places popup (see bug 385266). Version: 3.0a8pre (3.0a8pre) PID: 3081 Thread: 0 Exception: EXC_BAD_ACCESS (0x0001) Codes: KERN_INVALID_ADDRESS (0x0001) at 0x73746e85 Thread 0 Crashed: 0 libobjc.A.dylib 0x90a594c0 objc_msgSend + 16 1 com.apple.AppKit 0x9336d0d7 AppKitMenuEventHandler + 2334 2 com.apple.HIToolbox 0x92deb537 DispatchEventToHandlers(EventTargetRec*, OpaqueEventRef*, HandlerCallRec*) + 1093 3 com.apple.HIToolbox 0x92deabdc SendEventToEventTargetInternal(OpaqueEventRef*, OpaqueEventTargetRef*, HandlerCallRec*) + 304 4 com.apple.HIToolbox 0x92deaaa1 SendEventToEventTargetWithOptions + 55 5 com.apple.HIToolbox 0x92e8ebc7 SendMenuPopulate(MenuData*, OpaqueEventTargetRef*, unsigned long, double) + 259 6 com.apple.HIToolbox 0x92ea9ec2 PopulateMenu(MenuData*, OpaqueEventTargetRef*, CheckMenuData*, unsigned long, double) + 34 7 com.apple.HIToolbox 0x92ea9591 Check1MenuForKeyEvent(MenuData*, CheckMenuData*) + 147 8 com.apple.HIToolbox 0x92eca51c CheckEachHMenuForKeyEvent(MenuData*, unsigned long) + 54 9 com.apple.HIToolbox 0x92e26e77 ForEachInstalledHMenuDo(long (*)(MenuData*, unsigned long), unsigned long) + 93 10 com.apple.HIToolbox 0x92ea9011 CheckMenusForKeyEvent(MenuData*, CheckMenuData*) + 753 11 com.apple.HIToolbox 0x92ea8cc4 IsMenuKeyEvent(MenuData*, OpaqueEventRef*, unsigned long, MenuData**, unsigned short*) + 630 12 com.apple.HIToolbox 0x92ea8a0d IsMenuKeyEvent + 109 13 com.apple.AppKit 0x9336c608 _NSGetMenuItemForCommandKeyEvent + 420 14 com.apple.AppKit 0x9335eead _NSHandleCarbonMenuEvent + 628 15 com.apple.AppKit 0x932927fc _DPSNextEvent + 1491 16 com.apple.AppKit 0x93292056 -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 137 17 libwidget_mac.dylib 0x0d96e731 nsAppShell::ProcessNextNativeEvent(int) + 275 (nsAppShell.mm:309) 18 libwidget_mac.dylib 0x0d98c797 nsBaseAppShell::DoProcessNextNativeEvent(int) + 51 (nsBaseAppShell.cpp:137) 19 libwidget_mac.dylib 0x0d98cc63 nsBaseAppShell::OnProcessNextEvent(nsIThreadInternal*, int, unsigned) + 251 (nsBaseAppShell.cpp:247) 20 libwidget_mac.dylib 0x0d96e9fc nsAppShell::OnProcessNextEvent(nsIThreadInternal*, int, unsigned) + 180 (nsAppShell.mm:379) 21 libxpcom_core.dylib 0x0135d607 nsThread::ProcessNextEvent(int, int*) + 415 (nsThread.cpp:480) 22 libxpcom_core.dylib 0x01303c26 NS_ProcessNextEvent_P(nsIThread*, int) + 130 (nsThreadUtils.cpp:227) 23 libwidget_mac.dylib 0x0d98c826 nsBaseAppShell::Run() + 124 (nsBaseAppShell.cpp:153) 24 libwidget_mac.dylib 0x0d96e93a nsAppShell::Run() + 190 (nsAppShell.mm:355) 25 libwidget_mac.dylib 0x0d96ecb6 -[AppShellDelegate runAppShell] + 36 (nsAppShell.mm:459) 26 com.apple.Foundation 0x9280a03b __NSFireDelayedPerform + 403 27 com.apple.CoreFoundation 0x9082d7e2 CFRunLoopRunSpecific + 3341 28 com.apple.CoreFoundation 0x9082cace CFRunLoopRunInMode + 61 29 com.apple.HIToolbox 0x92dec8d8 RunCurrentEventLoopInMode + 285 30 com.apple.HIToolbox 0x92debf19 ReceiveNextEventCommon + 184 31 com.apple.HIToolbox 0x92debe39 BlockUntilNextEventMatchingListInMode + 81 32 com.apple.AppKit 0x93292465 _DPSNextEvent + 572 33 com.apple.AppKit 0x93292056 -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 137 34 com.apple.AppKit 0x9328bddb -[NSApplication run] + 512 35 libwidget_mac.dylib 0x0d96e90e nsAppShell::Run() + 146 (nsAppShell.mm:352) 36 libtoolkitcomps.dylib 0x0e6b345f nsAppStartup::Run() + 147 (nsAppStartup.cpp:170) 37 XUL 0x00210244 XRE_main + 11010 (nsAppRunner.cpp:3057) 38 org.mozilla.firefox 0x00002798 main + 708 (nsBrowserApp.cpp:153) 39 org.mozilla.firefox 0x00001dca _start + 216 40 org.mozilla.firefox 0x00001cf1 start + 41 Thread 1: 0 libSystem.B.dylib 0x9001a1cc select + 12 1 libnspr4.dylib 0x00596198 _pr_poll_with_poll + 1333 (ptio.c:3882) 2 libnspr4.dylib 0x00596406 PR_Poll + 31 (ptio.c:4286) 3 libnecko.dylib 0x0c1576d7 nsSocketTransportService::Poll(int, unsigned*) + 223 (nsSocketTransportService2.cpp:333) 4 libnecko.dylib 0x0c158547 nsSocketTransportService::DoPollIteration(int) + 797 (nsSocketTransportService2.cpp:619) 5 libnecko.dylib 0x0c15884b nsSocketTransportService::OnProcessNextEvent(nsIThreadInternal*, int, unsigned) + 61 (nsSocketTransportService2.cpp:497) 6 libxpcom_core.dylib 0x0135d607 nsThread::ProcessNextEvent(int, int*) + 415 (nsThread.cpp:480) 7 libxpcom_core.dylib 0x01303c26 NS_ProcessNextEvent_P(nsIThread*, int) + 130 (nsThreadUtils.cpp:227) 8 libnecko.dylib 0x0c1580a7 nsSocketTransportService::Run() + 293 (nsSocketTransportService2.cpp:528) 9 libxpcom_core.dylib 0x0135d70b nsThread::ProcessNextEvent(int, int*) + 675 (nsThread.cpp:491) 10 libxpcom_core.dylib 0x01303c26 NS_ProcessNextEvent_P(nsIThread*, int) + 130 (nsThreadUtils.cpp:227) 11 libxpcom_core.dylib 0x0135d918 nsThread::ThreadFunc(void*) + 262 (nsThread.cpp:253) 12 libnspr4.dylib 0x00597987 _pt_root + 313 (ptthread.c:224) 13 libSystem.B.dylib 0x90024227 _pthread_body + 84 Thread 2: 0 libSystem.B.dylib 0x90047dd7 semaphore_timedwait_signal_trap + 7 1 libnspr4.dylib 0x00590936 pt_TimedWait + 338 (ptsynch.c:280) 2 libnspr4.dylib 0x00590e4e PR_WaitCondVar + 369 (ptsynch.c:407) 3 libxpcom_core.dylib 0x013625d6 TimerThread::Run() + 616 (TimerThread.cpp:322) 4 libxpcom_core.dylib 0x0135d70b nsThread::ProcessNextEvent(int, int*) + 675 (nsThread.cpp:491) 5 libxpcom_core.dylib 0x01303c26 NS_ProcessNextEvent_P(nsIThread*, int) + 130 (nsThreadUtils.cpp:227) 6 libxpcom_core.dylib 0x0135d918 nsThread::ThreadFunc(void*) + 262 (nsThread.cpp:253) 7 libnspr4.dylib 0x00597987 _pt_root + 313 (ptthread.c:224) 8 libSystem.B.dylib 0x90024227 _pthread_body + 84 Thread 3: 0 libSystem.B.dylib 0x900248c7 semaphore_wait_signal_trap + 7 1 libnspr4.dylib 0x00590e29 PR_WaitCondVar + 332 (ptsynch.c:405) 2 libpipnss.dylib 0x32fd232e nsSSLThread::Run() + 276 (nsSSLThread.cpp:951) 3 libpipnss.dylib 0x32fd079f nsPSMBackgroundThread::nsThreadRunner(void*) + 27 (nsPSMBackgroundThread.cpp:45) 4 libnspr4.dylib 0x00597987 _pt_root + 313 (ptthread.c:224) 5 libSystem.B.dylib 0x90024227 _pthread_body + 84 Thread 4: 0 libSystem.B.dylib 0x900248c7 semaphore_wait_signal_trap + 7 1 libnspr4.dylib 0x00590e29 PR_WaitCondVar + 332 (ptsynch.c:405) 2 libpipnss.dylib 0x32fd2d11 nsCertVerificationThread::Run() + 71 (nsCertVerificationThread.cpp:135) 3 libpipnss.dylib 0x32fd079f nsPSMBackgroundThread::nsThreadRunner(void*) + 27 (nsPSMBackgroundThread.cpp:45) 4 libnspr4.dylib 0x00597987 _pt_root + 313 (ptthread.c:224) 5 libSystem.B.dylib 0x90024227 _pthread_body + 84 Thread 5: 0 libSystem.B.dylib 0x900248c7 semaphore_wait_signal_trap + 7 1 libnspr4.dylib 0x00590e29 PR_WaitCondVar + 332 (ptsynch.c:405) 2 libstoragecomps.dylib 0x34b0ef3c ProcessAsyncMessages() + 172 (mozStorageAsyncIO.cpp:1519) 3 libstoragecomps.dylib 0x34b1be20 AsyncWriteThread::Run() + 80 (mozStorageAsyncIO.cpp:475) 4 libxpcom_core.dylib 0x0135d70b nsThread::ProcessNextEvent(int, int*) + 675 (nsThread.cpp:491) 5 libxpcom_core.dylib 0x01303c26 NS_ProcessNextEvent_P(nsIThread*, int) + 130 (nsThreadUtils.cpp:227) 6 libxpcom_core.dylib 0x0135d918 nsThread::ThreadFunc(void*) + 262 (nsThread.cpp:253) 7 libnspr4.dylib 0x00597987 _pt_root + 313 (ptthread.c:224) 8 libSystem.B.dylib 0x90024227 _pthread_body + 84 Thread 6: 0 libSystem.B.dylib 0x900248c7 semaphore_wait_signal_trap + 7 1 libnspr4.dylib 0x00590e29 PR_WaitCondVar + 332 (ptsynch.c:405) 2 libnspr4.dylib 0x00591563 PR_Wait + 264 (ptsynch.c:584) 3 libxpcom_core.dylib 0x013b3dcb nsAutoMonitor::Wait(unsigned) + 27 (nsAutoLock.h:322) 4 libxpcom_core.dylib 0x0135bd6d nsEventQueue::GetEvent(int, nsIRunnable**) + 133 (nsEventQueue.cpp:86) 5 libxpcom_core.dylib 0x013c1ebe nsThread::nsChainedEventQueue::GetEvent(int, nsIRunnable**) + 34 (nsThread.h:113) 6 libxpcom_core.dylib 0x0135d671 nsThread::ProcessNextEvent(int, int*) + 521 (nsThread.cpp:481) 7 libxpcom_core.dylib 0x01303c26 NS_ProcessNextEvent_P(nsIThread*, int) + 130 (nsThreadUtils.cpp:227) 8 libxpcom_core.dylib 0x0135d918 nsThread::ThreadFunc(void*) + 262 (nsThread.cpp:253) 9 libnspr4.dylib 0x00597987 _pt_root + 313 (ptthread.c:224) 10 libSystem.B.dylib 0x90024227 _pthread_body + 84 Thread 7: 0 libSystem.B.dylib 0x90047dd7 semaphore_timedwait_signal_trap + 7 1 libnspr4.dylib 0x00590936 pt_TimedWait + 338 (ptsynch.c:280) 2 libnspr4.dylib 0x00590e4e PR_WaitCondVar + 369 (ptsynch.c:407) 3 libnspr4.dylib 0x00591563 PR_Wait + 264 (ptsynch.c:584) 4 libxpcom_core.dylib 0x013b3dcb nsAutoMonitor::Wait(unsigned) + 27 (nsAutoLock.h:322) 5 libxpcom_core.dylib 0x0135fd19 nsThreadPool::Run() + 555 (nsThreadPool.cpp:200) 6 libxpcom_core.dylib 0x0135d70b nsThread::ProcessNextEvent(int, int*) + 675 (nsThread.cpp:491) 7 libxpcom_core.dylib 0x01303c26 NS_ProcessNextEvent_P(nsIThread*, int) + 130 (nsThreadUtils.cpp:227) 8 libxpcom_core.dylib 0x0135d918 nsThread::ThreadFunc(void*) + 262 (nsThread.cpp:253) 9 libnspr4.dylib 0x00597987 _pt_root + 313 (ptthread.c:224) 10 libSystem.B.dylib 0x90024227 _pthread_body + 84 Thread 0 crashed with X86 Thread State (32-bit): eax: 0x73746e65 ebx: 0x9336d161 ecx: 0x90ab8488 edx: 0x00000002 edi: 0x3587c550 esi: 0x3587c530 ebp: 0xbfffd348 esp: 0xbfffd2c8 ss: 0x0000001f efl: 0x00010206 eip: 0x90a594c0 cs: 0x00000017 ds: 0x0000001f es: 0x0000001f fs: 0x00000000 gs: 0x00000037
Flags: blocking1.9?
Keywords: crash
Summary: Crash when clicking on tree-rows within popups → Crash [@ AppKitMenuEventHandler] when clicking on tree-rows within popups
What build are you seeing this in? roc checked in the patch over in bug 390707 sometime yesterday afternoon that should've fixed this crash.
Severity: normal → critical
Version: unspecified → Trunk
Mano, still reproducible or was it fixed by bug 390707's patch?
No, thanks for the reminder.
Status: NEW → RESOLVED
Closed: 18 years ago
Resolution: --- → DUPLICATE
Flags: blocking1.9?
Crash Signature: [@ AppKitMenuEventHandler]
You need to log in before you can comment on or make changes to this bug.