Closed Bug 43611 Opened 25 years ago Closed 25 years ago

Crashes at nsTreeItemDragCapturer::ComputeDropPosition when scrolling

Categories

(Core :: XUL, defect, P3)

Product:
Core
Component:
XUL
Platform:
x86
Windows NT
Type:
defect

Tracking

()

Status:
VERIFIED FIXED

People

(Reporter: namachi, Assigned: hyatt)

References

(
URL
)

Details

(Keywords: crash, Whiteboard: 7/26 eta)

nsTreeItemDragCapturer::ComputeDropPosition nsTreeItemDragCapturer::ComputeDropPosition 604725e5 http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/layout/xul/base/src/nsTreeIt emDragCapturer.cpp line 144 Build: 2000062021 CrashDate: 2000-06-21 UptimeMinutes: 147 Total: 147 OS: Windows NT 4.0 build 1381 URL: Comment: Stacktrace: http://cyclone/reports/stackcommentemail.cfm?dynamicBBID=12858403 nsTreeItemDragCapturer::ComputeDropPosition 150faf93 http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/layout/xul/base/src/nsTreeIt emDragCapturer.cpp line 144 Build: 2000062109 CrashDate: 2000-06-22 UptimeMinutes: 20 Total: 277 OS: Windows NT 4.0 build 1381 URL: Comment: Stacktrace: http://cyclone/reports/stackcommentemail.cfm?dynamicBBID=12886246 nsTreeItemDragCapturer::ComputeDropPosition 265d6fa0 http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/layout/xul/base/src/nsTreeIt emDragCapturer.cpp line 144 Build: 2000062009 CrashDate: 2000-06-21 UptimeMinutes: 10 Total: 104 OS: Windows 98 4.10 build 67766222 URL: Comment: scroll a tree Stacktrace: http://cyclone/reports/stackcommentemail.cfm?dynamicBBID=12817729 nsTreeItemDragCapturer::ComputeDropPosition 3ee5cf15 http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/layout/xul/base/src/nsTreeIt emDragCapturer.cpp line 144 Build: 2000062009 CrashDate: 2000-06-20 UptimeMinutes: 2 Total: 6 OS: Windows NT 4.0 build 1381 URL: Comment: Scrolling in mail thread pan Stacktrace: http://cyclone/reports/stackcommentemail.cfm?dynamicBBID=12772203 nsTreeItemDragCapturer::ComputeDropPosition 2899abd3 http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/layout/xul/base/src/nsTreeIt emDragCapturer.cpp line 144 Build: 2000062009 CrashDate: 2000-06-20 UptimeMinutes: 3 Total: 3 OS: Windows NT 4.0 build 1381 URL: Comment: Scrolling in the mail thread pan Stacktrace: http://cyclone/reports/stackcommentemail.cfm?dynamicBBID=12772006 nsTreeItemDragCapturer::ComputeDropPosition nsTreeItemDragCapturer::ComputeDropPosition 604725e5 http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/layout/xul/base/src/nsTreeIt emDragCapturer.cpp line 144 Build: 2000062021 CrashDate: 2000-06-21 UptimeMinutes: 147 Total: 147 OS: Windows NT 4.0 build 1381 URL: Comment: Stacktrace: http://cyclone/reports/stackcommentemail.cfm?dynamicBBID=12858403 nsTreeItemDragCapturer::ComputeDropPosition 150faf93 http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/layout/xul/base/src/nsTreeIt emDragCapturer.cpp line 144 Build: 2000062109 CrashDate: 2000-06-22 UptimeMinutes: 20 Total: 277 OS: Windows NT 4.0 build 1381 URL: Comment: Stacktrace: http://cyclone/reports/stackcommentemail.cfm?dynamicBBID=12886246 nsTreeItemDragCapturer::ComputeDropPosition 265d6fa0 http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/layout/xul/base/src/nsTreeIt emDragCapturer.cpp line 144 Build: 2000062009 CrashDate: 2000-06-21 UptimeMinutes: 10 Total: 104 OS: Windows 98 4.10 build 67766222 URL: Comment: scroll a tree Stacktrace: http://cyclone/reports/stackcommentemail.cfm?dynamicBBID=12817729 nsTreeItemDragCapturer::ComputeDropPosition 3ee5cf15 http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/layout/xul/base/src/nsTreeIt emDragCapturer.cpp line 144 Build: 2000062009 CrashDate: 2000-06-20 UptimeMinutes: 2 Total: 6 OS: Windows NT 4.0 build 1381 URL: Comment: Scrolling in mail thread pan Stacktrace: http://cyclone/reports/stackcommentemail.cfm?dynamicBBID=12772203 nsTreeItemDragCapturer::ComputeDropPosition 2899abd3 http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/layout/xul/base/src/nsTreeIt emDragCapturer.cpp line 144 Build: 2000062009 CrashDate: 2000-06-20 UptimeMinutes: 3 Total: 3 OS: Windows NT 4.0 build 1381 URL: Comment: Scrolling in the mail thread pan Stacktrace: http://cyclone/reports/stackcommentemail.cfm?dynamicBBID=12772006 nsTreeItemDragCapturer::ComputeDropPosition nsTreeItemDragCapturer::ComputeDropPosition 604725e5 http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/layout/xul/base/src/nsTreeIt emDragCapturer.cpp line 144 Build: 2000062021 CrashDate: 2000-06-21 UptimeMinutes: 147 Total: 147 OS: Windows NT 4.0 build 1381 URL: Comment: Stacktrace: http://cyclone/reports/stackcommentemail.cfm?dynamicBBID=12858403 nsTreeItemDragCapturer::ComputeDropPosition 150faf93 http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/layout/xul/base/src/nsTreeIt emDragCapturer.cpp line 144 Build: 2000062109 CrashDate: 2000-06-22 UptimeMinutes: 20 Total: 277 OS: Windows NT 4.0 build 1381 URL: Comment: Stacktrace: http://cyclone/reports/stackcommentemail.cfm?dynamicBBID=12886246 nsTreeItemDragCapturer::ComputeDropPosition 265d6fa0 http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/layout/xul/base/src/nsTreeIt emDragCapturer.cpp line 144 Build: 2000062009 CrashDate: 2000-06-21 UptimeMinutes: 10 Total: 104 OS: Windows 98 4.10 build 67766222 URL: Comment: scroll a tree Stacktrace: http://cyclone/reports/stackcommentemail.cfm?dynamicBBID=12817729 nsTreeItemDragCapturer::ComputeDropPosition 3ee5cf15 http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/layout/xul/base/src/nsTreeIt emDragCapturer.cpp line 144 Build: 2000062009 CrashDate: 2000-06-20 UptimeMinutes: 2 Total: 6 OS: Windows NT 4.0 build 1381 URL: Comment: Scrolling in mail thread pan Stacktrace: http://cyclone/reports/stackcommentemail.cfm?dynamicBBID=12772203 nsTreeItemDragCapturer::ComputeDropPosition 2899abd3 http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/layout/xul/base/src/nsTreeIt emDragCapturer.cpp line 144 Build: 2000062009 CrashDate: 2000-06-20 UptimeMinutes: 3 Total: 3 OS: Windows NT 4.0 build 1381 URL: Comment: Scrolling in the mail thread pan Stacktrace: http://cyclone/reports/stackcommentemail.cfm?dynamicBBID=12772006 nsTreeItemDragCapturer::ComputeDropPosition nsTreeItemDragCapturer::ComputeDropPosition 604725e5 http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/layout/xul/base/src/nsTreeIt emDragCapturer.cpp line 144 Build: 2000062021 CrashDate: 2000-06-21 UptimeMinutes: 147 Total: 147 OS: Windows NT 4.0 build 1381 URL: Comment: Stacktrace: http://cyclone/reports/stackcommentemail.cfm?dynamicBBID=12858403 nsTreeItemDragCapturer::ComputeDropPosition 150faf93 http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/layout/xul/base/src/nsTreeIt emDragCapturer.cpp line 144 Build: 2000062109 CrashDate: 2000-06-22 UptimeMinutes: 20 Total: 277 OS: Windows NT 4.0 build 1381 URL: Comment: Stacktrace: http://cyclone/reports/stackcommentemail.cfm?dynamicBBID=12886246 nsTreeItemDragCapturer::ComputeDropPosition 265d6fa0 http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/layout/xul/base/src/nsTreeIt emDragCapturer.cpp line 144 Build: 2000062009 CrashDate: 2000-06-21 UptimeMinutes: 10 Total: 104 OS: Windows 98 4.10 build 67766222 URL: Comment: scroll a tree Stacktrace: http://cyclone/reports/stackcommentemail.cfm?dynamicBBID=12817729 nsTreeItemDragCapturer::ComputeDropPosition 3ee5cf15 http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/layout/xul/base/src/nsTreeIt emDragCapturer.cpp line 144 Build: 2000062009 CrashDate: 2000-06-20 UptimeMinutes: 2 Total: 6 OS: Windows NT 4.0 build 1381 URL: Comment: Scrolling in mail thread pan Stacktrace: http://cyclone/reports/stackcommentemail.cfm?dynamicBBID=12772203 nsTreeItemDragCapturer::ComputeDropPosition 2899abd3 http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/layout/xul/base/src/nsTreeIt emDragCapturer.cpp line 144 Build: 2000062009 CrashDate: 2000-06-20 UptimeMinutes: 3 Total: 3 OS: Windows NT 4.0 build 1381 URL: Comment: Scrolling in the mail thread pan Stacktrace: http://cyclone/reports/stackcommentemail.cfm?dynamicBBID=12772006 nsTreeItemDragCapturer::ComputeDropPosition nsTreeItemDragCapturer::ComputeDropPosition 604725e5 http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/layout/xul/base/src/nsTreeIt emDragCapturer.cpp line 144 Build: 2000062021 CrashDate: 2000-06-21 UptimeMinutes: 147 Total: 147 OS: Windows NT 4.0 build 1381 URL: Comment: Stacktrace: http://cyclone/reports/stackcommentemail.cfm?dynamicBBID=12858403 nsTreeItemDragCapturer::ComputeDropPosition 150faf93 http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/layout/xul/base/src/nsTreeIt emDragCapturer.cpp line 144 Build: 2000062109 CrashDate: 2000-06-22 UptimeMinutes: 20 Total: 277 OS: Windows NT 4.0 build 1381 URL: Comment: Stacktrace: http://cyclone/reports/stackcommentemail.cfm?dynamicBBID=12886246 nsTreeItemDragCapturer::ComputeDropPosition 265d6fa0 http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/layout/xul/base/src/nsTreeIt emDragCapturer.cpp line 144 Build: 2000062009 CrashDate: 2000-06-21 UptimeMinutes: 10 Total: 104 OS: Windows 98 4.10 build 67766222 URL: Comment: scroll a tree Stacktrace: http://cyclone/reports/stackcommentemail.cfm?dynamicBBID=12817729 nsTreeItemDragCapturer::ComputeDropPosition 3ee5cf15 http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/layout/xul/base/src/nsTreeIt emDragCapturer.cpp line 144 Build: 2000062009 CrashDate: 2000-06-20 UptimeMinutes: 2 Total: 6 OS: Windows NT 4.0 build 1381 URL: Comment: Scrolling in mail thread pan Stacktrace: http://cyclone/reports/stackcommentemail.cfm?dynamicBBID=12772203 nsTreeItemDragCapturer::ComputeDropPosition 2899abd3 http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/layout/xul/base/src/nsTreeIt emDragCapturer.cpp line 144 Build: 2000062009 CrashDate: 2000-06-20 UptimeMinutes: 3 Total: 3 OS: Windows NT 4.0 build 1381 URL: Comment: Scrolling in the mail thread pan Stacktrace: http://cyclone/reports/stackcommentemail.cfm?dynamicBBID=12772006 Stack Trace :- ncident ID 12886246 nsTreeItemDragCapturer::ComputeDropPosition [d:\builds\seamonkey\mozilla\layout\xul\base\src\nsTreeItemDragCapturer.cpp, line 144] nsTreeItemDragCapturer::DragOver [d:\builds\seamonkey\mozilla\layout\xul\base\src\nsTreeItemDragCapturer.cpp, line 223] nsEventListenerManager::HandleEvent [d:\builds\seamonkey\mozilla\layout\events\src\nsEventListenerManager.cpp, line 1424] nsXULElement::HandleDOMEvent [d:\builds\seamonkey\mozilla\rdf\content\src\nsXULElement.cpp, line 3430] nsXULElement::HandleDOMEvent [d:\builds\seamonkey\mozilla\rdf\content\src\nsXULElement.cpp, line 3419] nsXULElement::HandleDOMEvent [d:\builds\seamonkey\mozilla\rdf\content\src\nsXULElement.cpp, line 3419] PresShell::HandleEventInternal [d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 3736] PresShell::HandleEvent [d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 3666] nsView::HandleEvent [d:\builds\seamonkey\mozilla\view\src\nsView.cpp, line 782] nsView::HandleEvent [d:\builds\seamonkey\mozilla\view\src\nsView.cpp, line 755] nsView::HandleEvent [d:\builds\seamonkey\mozilla\view\src\nsView.cpp, line 755] nsViewManager2::DispatchEvent [d:\builds\seamonkey\mozilla\view\src\nsViewManager2.cpp, line 1387] HandleEvent [d:\builds\seamonkey\mozilla\view\src\nsView.cpp, line 69] nsWindow::DispatchEvent [d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 564] nsNativeDragTarget::DispatchDragDropEvent [d:\builds\seamonkey\mozilla\widget\src\windows\nsNativeDragTarget.cpp, line 178] nsNativeDragTarget::ProcessDrag [d:\builds\seamonkey\mozilla\widget\src\windows\nsNativeDragTarget.cpp, line 200] nsNativeDragTarget::DragOver [d:\builds\seamonkey\mozilla\widget\src\windows\nsNativeDragTarget.cpp, line 253] ole32.dll + 0x88a99 (0x77ba8a99) ole32.dll + 0x88c53 (0x77ba8c53) ole32.dll + 0x6f4cd (0x77b8f4cd) ole32.dll + 0x6f011 (0x77b8f011) nsDragService::StartInvokingDragSession [d:\builds\seamonkey\mozilla\widget\src\windows\nsDragService.cpp, line 142] nsDragService::InvokeDragSession [d:\builds\seamonkey\mozilla\widget\src\windows\nsDragService.cpp, line 109] XPTC_InvokeByIndex [d:\builds\seamonkey\mozilla\xpcom\reflect\xptcall\src\md\win32\xptcinvoke.cpp, line 139] nsXPCWrappedNativeClass::CallWrappedMethod [d:\builds\seamonkey\mozilla\js\src\xpconnect\src\xpcwrappednativeclass.cpp, line 915] WrappedNative_CallMethod [d:\builds\seamonkey\mozilla\js\src\xpconnect\src\xpcwrappednativejsops.cpp, line 195] js_Invoke [d:\builds\seamonkey\mozilla\js\src\jsinterp.c, line 687] js_Interpret [d:\builds\seamonkey\mozilla\js\src\jsinterp.c, line 2491] js_Invoke [d:\builds\seamonkey\mozilla\js\src\jsinterp.c, line 703] js_InternalInvoke [d:\builds\seamonkey\mozilla\js\src\jsinterp.c, line 776] JS_CallFunctionValue [d:\builds\seamonkey\mozilla\js\src\jsapi.c, line 2803] nsJSContext::CallEventHandler [d:\builds\seamonkey\mozilla\dom\src\base\nsJSEnvironment.cpp, line 790] nsJSEventListener::HandleEvent [d:\builds\seamonkey\mozilla\dom\src\events\nsJSEventListener.cpp, line 155] nsEventListenerManager::HandleEventSubType [d:\builds\seamonkey\mozilla\layout\events\src\nsEventListenerManager.cpp, line 755] nsEventListenerManager::HandleEvent [d:\builds\seamonkey\mozilla\layout\events\src\nsEventListenerManager.cpp, line 1471] nsXULElement::HandleDOMEvent [d:\builds\seamonkey\mozilla\rdf\content\src\nsXULElement.cpp, line 3430] nsXULElement::HandleDOMEvent [d:\builds\seamonkey\mozilla\rdf\content\src\nsXULElement.cpp, line 3455] nsXULElement::HandleDOMEvent [d:\builds\seamonkey\mozilla\rdf\content\src\nsXULElement.cpp, line 3455] nsXULElement::HandleDOMEvent [d:\builds\seamonkey\mozilla\rdf\content\src\nsXULElement.cpp, line 3455] nsXULElement::HandleDOMEvent [d:\builds\seamonkey\mozilla\rdf\content\src\nsXULElement.cpp, line 3455] nsEventStateManager::GenerateDragGesture [d:\builds\seamonkey\mozilla\layout\events\src\nsEventStateManager.cpp, line 769] nsEventStateManager::PreHandleEvent [d:\builds\seamonkey\mozilla\layout\events\src\nsEventStateManager.cpp, line 295] PresShell::HandleEventInternal [d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 3726] PresShell::HandleEvent [d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 3666] nsView::HandleEvent [d:\builds\seamonkey\mozilla\view\src\nsView.cpp, line 782] nsViewManager2::DispatchEvent [d:\builds\seamonkey\mozilla\view\src\nsViewManager2.cpp, line 1387] HandleEvent [d:\builds\seamonkey\mozilla\view\src\nsView.cpp, line 69] nsWindow::DispatchEvent [d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 564] nsWindow::DispatchWindowEvent [d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 581] nsWindow::DispatchMouseEvent [d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 3681] ChildWindow::DispatchMouseEvent [d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 3886] nsWindow::ProcessMessage [d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 2801] nsWindow::WindowProc [d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 830] USER32.dll + 0x1268 (0x77e71268) 0x00960379 Code Around the Crash :- 134 // get the rect of the row (not the tree item) that the mouse is over. This is 135 // where we need to start computing things from. 136 nsRect rowRect; 137 nsIFrame* rowFrame; 138 troy 1.4 mTreeItem->FirstChild(mPresContext, nsnull, &rowFrame); 139 pinkerton 1.1 NS_ASSERTION ( rowFrame, "couldn't get rowGroup's row frame" ); 140 rowFrame->GetRect(rowRect); 141 142 // compute the offset to top level in twips 143 float t2p; 144 mPresContext->GetTwipsToPixels(&t2p); 145 PRInt32 frameOffsetX = 0, frameOffsetY = 0; 146 nsIFrame* curr = rowFrame; 147 curr->GetParent(&curr); 148 while ( curr ) { 149 nsPoint origin; 150 curr->GetOrigin(origin); // in twips 151 frameOffsetX += origin.x; // build the offset incrementally 152 frameOffsetY += origin.y; 153 curr->GetParent(&curr); // moving up the chain 154 } // until we reach the top
Adding crash and topcrash keywords.
URL: Scrolling a Tree → Scrolling a Tree
Keywords: crash, topcrash
Moving this to Trees component and reassigning.
Assignee: clayton → hyatt
Component: Layout → XP Toolkit/Widgets: Trees
QA Contact: petersen → jrgm
Keywords: nsbeta2
nominating for nsbeta2
Whiteboard: [nsbeta2+]
Putting on [nsbeta2+] radar for beta2 fix.
I need steps to reproduce please.
Whiteboard: [nsbeta2+] → [nsbeta2+] 7/26 eta
Steps to reproduce according to Talkback data no longer seems to crash the app. The latest Talkback statistics are not showing this as a top crasher anymore. PDT gave this a + due to topcrash status...so maybe this needs to be given a -? Removing nsbeta2+ and renominating.
Whiteboard: [nsbeta2+] 7/26 eta → 7/26 eta
Keywords: topcrash
removing topcrash keyword
I'm fairly certain I fixed this bug with other tree widget landings. Anyway, I can't reproduce. Marking fixed.
Status: NEW → RESOLVED
Closed: 25 years ago
Resolution: --- → FIXED
verifying per hyatt's comments, and i haven't seen this crash lately either.
Status: RESOLVED → VERIFIED
Component: XP Toolkit/Widgets: Trees → XUL
QA Contact: jrgmorrison → xptoolkit.widgets
You need to log in before you can comment on or make changes to this bug.