Closed Bug 426392 Opened 15 years ago Closed 15 years ago

Crash in nsXULPopupManager::ShowPopupCallback when customizing toolbar using "Icons and Text"


(Core :: XUL, defect, P2)






(Reporter: marcia, Assigned: cpearce)



(Keywords: crash, regression, topcrash)


(1 file)

Seen using Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9pre) Gecko/2008040104 Minefield/3.0pre.

1. With a fresh profile, go to Customize Toolbars and select "Icons and Text."
2. Visit a few sites to get the back and forward buttons active.
3. Click on the dropmarker. Crash

Breakpad URLS (currently 404s)
I have several others as well.

This is easy to reproduce on Leopard. Bug 414445 was checked in last night, which seemed to touch this area.
Summary: Crash when customizing toolbar using "Icons and Text" → Crash in nsXULPopupManager::ShowPopupCallback when customizing toolbar using "Icons and Text"
I have not been able to reproduce this on Tiger or Win XP yet.
Nope, not bug 414445, since I'm seeing it in Thunderbird, trying to test my patch for bug 425015 (which otherwise make it impossible to see anything about customizing in Thunderbird). Confirmed by local backout that's it's because of bug 420499
Blocks: 420499
Severity: major → critical
Component: Toolbars → XP Toolkit/Widgets: XUL
Keywords: regression
Product: Firefox → Core
QA Contact: toolbars → xptoolkit.xul
Flags: blocking1.9?
Ah, Tbird's probably an easier crash-test because we have so many menu-buttons - I started out testing my patch by dragging both the Tag and Mark buttons onto the toolbar, and both of them have popups.
Blocks: 425015
Chris, we either need a very fast fix here or backout of bug 420499
Keywords: topcrash
+'ing this as it's due to fallout from bug 420499.
Assignee: nobody → chris
Flags: blocking1.9? → blocking1.9+
Priority: -- → P2
Attached patch Possible patchSplinter Review
I don't have a Leopard machine to test this on, but I think this patch will fix the crash... Can someone test this please?
Chris: Can you make a tryserver build for us to test:
Ok, you can download a TryServer build here:

It's my first time using TryServer, but it looks like it worked.
Running the build in Comment 8 on Leopard, despite numerous valiant attempts I was not able to crash in the same stack. I followed the same STR in my initial report.

I did crash while testing this build, but it was in libobjc.A.dylib 0x908ab6e8 objc_msgSend which is a different crash (clicking the login link in Bugzilla) and I think it is unrelated. So I think we are good - I will run the build for a bit longer to see if any other crashes materialize.
Yep, fixes the crash in Thunderbird, too (where valiant attempts weren't required to crash, so I'm pretty certain those cover what I was hitting).
layout/xul/base/src/nsXULPopupManager.cpp 1.58
Closed: 15 years ago
Keywords: checkin-needed
Resolution: --- → FIXED
Target Milestone: --- → mozilla1.9
My version Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.4; en-US; rv:1.9pre) Gecko/2008040304 Minefield/3.0pre ID:2008040304 crashes each time I try to open the context menu.

Verified with Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.4; en-US; rv:1.9pre) Gecko/2008040504 Minefield/3.0pre ID:2008040504
Component: XP Toolkit/Widgets: XUL → XUL
QA Contact: xptoolkit.xul → xptoolkit.widgets
You need to log in before you can comment on or make changes to this bug.