404329 - crash [@ nsEventStateManager::PostHandleEvent 438f556d] when changing div's css position from fixed to absolute while javascript alert visible

Status: RESOLVED WORKSFORME

(Core :: DOM: UI Events & Focus Handling, defect)

Description

[Märt]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.9) Gecko/20071025 Firefox/2.0.0.9
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.9) Gecko/20071025 Firefox/2.0.0.9

It seems that Firefox crashes right after the CSS property 'position' is changed from 'fixed' to 'absolute' while a JavaScript alert is visible.

Reproducible: Always

Steps to Reproduce:
1. Go to the given URL.
2. The "OK" button should be focused. If not, give it focus.
3. Click "[CRASH ME]".
4. Click the "OK" button of the Javascript alert.
5. Firefox crashes.

Comment 1

[Märt]

Attachment: Another example in case the original is not working.

Some people have reported that the main example does not crash. Here is another one, contains some probably unnecessary code, but works more often.

Comment 2

[Märt]

Talkback ID: TB38249090H

Comment 3

[Samuel Sidler (old account; do not CC)]

I crash on branch (2.0.0.9) but not on trunk. Talkback doesn't come up for me either. I don't see any obvious dupes, so confirming.

Stack Signature	 nsEventStateManager::PostHandleEvent 438f556d
Product ID	Firefox2
Build ID	2007102514
Trigger Time	2007-11-19 16:30:42.0
Platform	Win32
Operating System	Windows NT 5.1 build 2600
Module	FIREFOX.EXE + (002636bb)
URL visited	http://mardu.nohik.net/stuff/crashfirefox2.html
User Comments	
Since Last Crash	9061 sec
Total Uptime	432622 sec
Trigger Reason	Access violation
Source File, Line No.	c:/builds/tinderbox/Fx-Mozilla1.8-Release/WINNT_5.2_Depend/mozilla/content/events/src/nsEventStateManager.cpp, line 2078
Stack Trace 	
nsEventStateManager::PostHandleEvent  [mozilla/content/events/src/nsEventStateManager.cpp, line 2078]
PresShell::HandleEventInternal  [mozilla/layout/base/nsPresShell.cpp, line 6586]
PresShell::HandleEvent  [mozilla/layout/base/nsPresShell.cpp, line 6350]
nsViewManager::HandleEvent  [mozilla/view/src/nsViewManager.cpp, line 2566]
nsViewManager::DispatchEvent  [mozilla/view/src/nsViewManager.cpp, line 2253]
HandleEvent  [mozilla/view/src/nsView.cpp, line 174]
nsWindow::DispatchEvent  [mozilla/widget/src/windows/nsWindow.cpp, line 1319]
nsWindow::DispatchMouseEvent  [mozilla/widget/src/windows/nsWindow.cpp, line 6329]
ChildWindow::DispatchMouseEvent  [mozilla/widget/src/windows/nsWindow.cpp, line 6576]
nsWindow::WindowProc  [mozilla/widget/src/windows/nsWindow.cpp, line 1507]
USER32.dll + 0x8734 (0x7e418734)
USER32.dll + 0x8816 (0x7e418816)
USER32.dll + 0x89cd (0x7e4189cd)
USER32.dll + 0x8a10 (0x7e418a10)
nsAppShell::Run  [mozilla/widget/src/windows/nsAppShell.cpp, line 159]
nsAppStartup::Run  [mozilla/toolkit/components/startup/src/nsAppStartup.cpp, line 152]
main  [mozilla/browser/app/nsBrowserApp.cpp, line 61]
kernel32.dll + 0x16fd7 (0x7c816fd7)

Comment 4

[Jesse Ruderman on Windows]

> I crash on branch (2.0.0.9) but not on trunk.

Sounds like WFM to me.