Crashes at nsTreeItemDragCapturer::ComputeDropPosition when scrolling

VERIFIED FIXED

Status

()

Product:
Core
Component:
XUL
Importance:
P3
critical
Status:
VERIFIED FIXED
Reported:
19 years ago
Modified:
11 years ago

People

(Reporter: namachi, Assigned: hyatt)

Tracking

({crash})

Version:
Trunk
Platform:
x86
Windows NT
Keywords:
crash
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

(Whiteboard: 7/26 eta, URL)

(Reporter)

Description

•
19 years ago 
nsTreeItemDragCapturer::ComputeDropPosition

    nsTreeItemDragCapturer::ComputeDropPosition 604725e5
        
http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/layout/xul/base/src/nsTreeIt
emDragCapturer.cpp
line 144
        Build: 2000062021 CrashDate: 2000-06-21 UptimeMinutes: 147  Total: 147 
        OS: Windows NT  4.0 build 1381
        URL: 
        Comment: 
        Stacktrace: 
http://cyclone/reports/stackcommentemail.cfm?dynamicBBID=12858403

    nsTreeItemDragCapturer::ComputeDropPosition 150faf93
        
http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/layout/xul/base/src/nsTreeIt
emDragCapturer.cpp
line 144
        Build: 2000062109 CrashDate: 2000-06-22 UptimeMinutes: 20  Total: 277 
        OS: Windows NT  4.0 build 1381
        URL: 
        Comment: 
        Stacktrace: 
http://cyclone/reports/stackcommentemail.cfm?dynamicBBID=12886246

    nsTreeItemDragCapturer::ComputeDropPosition 265d6fa0
        
http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/layout/xul/base/src/nsTreeIt
emDragCapturer.cpp
line 144
        Build: 2000062009 CrashDate: 2000-06-21 UptimeMinutes: 10  Total: 104 
        OS: Windows 98  4.10 build 67766222
        URL: 
        Comment: scroll a tree
        Stacktrace: 
http://cyclone/reports/stackcommentemail.cfm?dynamicBBID=12817729

    nsTreeItemDragCapturer::ComputeDropPosition 3ee5cf15
        
http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/layout/xul/base/src/nsTreeIt
emDragCapturer.cpp
line 144
        Build: 2000062009 CrashDate: 2000-06-20 UptimeMinutes: 2  Total: 6 
        OS: Windows NT  4.0 build 1381
        URL: 
        Comment: Scrolling in mail thread pan
        Stacktrace: 
http://cyclone/reports/stackcommentemail.cfm?dynamicBBID=12772203

    nsTreeItemDragCapturer::ComputeDropPosition 2899abd3
        
http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/layout/xul/base/src/nsTreeIt
emDragCapturer.cpp
line 144
        Build: 2000062009 CrashDate: 2000-06-20 UptimeMinutes: 3  Total: 3 
        OS: Windows NT  4.0 build 1381
        URL: 
        Comment: Scrolling in the mail thread pan
        Stacktrace: 
http://cyclone/reports/stackcommentemail.cfm?dynamicBBID=12772006

nsTreeItemDragCapturer::ComputeDropPosition

    nsTreeItemDragCapturer::ComputeDropPosition 604725e5
        
http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/layout/xul/base/src/nsTreeIt
emDragCapturer.cpp
line 144
        Build: 2000062021 CrashDate: 2000-06-21 UptimeMinutes: 147  Total: 147 
        OS: Windows NT  4.0 build 1381
        URL: 
        Comment: 
        Stacktrace: 
http://cyclone/reports/stackcommentemail.cfm?dynamicBBID=12858403

    nsTreeItemDragCapturer::ComputeDropPosition 150faf93
        
http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/layout/xul/base/src/nsTreeIt
emDragCapturer.cpp
line 144
        Build: 2000062109 CrashDate: 2000-06-22 UptimeMinutes: 20  Total: 277 
        OS: Windows NT  4.0 build 1381
        URL: 
        Comment: 
        Stacktrace: 
http://cyclone/reports/stackcommentemail.cfm?dynamicBBID=12886246

    nsTreeItemDragCapturer::ComputeDropPosition 265d6fa0
        
http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/layout/xul/base/src/nsTreeIt
emDragCapturer.cpp
line 144
        Build: 2000062009 CrashDate: 2000-06-21 UptimeMinutes: 10  Total: 104 
        OS: Windows 98  4.10 build 67766222
        URL: 
        Comment: scroll a tree
        Stacktrace: 
http://cyclone/reports/stackcommentemail.cfm?dynamicBBID=12817729

    nsTreeItemDragCapturer::ComputeDropPosition 3ee5cf15
        
http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/layout/xul/base/src/nsTreeIt
emDragCapturer.cpp
line 144
        Build: 2000062009 CrashDate: 2000-06-20 UptimeMinutes: 2  Total: 6 
        OS: Windows NT  4.0 build 1381
        URL: 
        Comment: Scrolling in mail thread pan
        Stacktrace: 
http://cyclone/reports/stackcommentemail.cfm?dynamicBBID=12772203

    nsTreeItemDragCapturer::ComputeDropPosition 2899abd3
        
http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/layout/xul/base/src/nsTreeIt
emDragCapturer.cpp
line 144
        Build: 2000062009 CrashDate: 2000-06-20 UptimeMinutes: 3  Total: 3 
        OS: Windows NT  4.0 build 1381
        URL: 
        Comment: Scrolling in the mail thread pan
        Stacktrace: 
http://cyclone/reports/stackcommentemail.cfm?dynamicBBID=12772006

nsTreeItemDragCapturer::ComputeDropPosition

    nsTreeItemDragCapturer::ComputeDropPosition 604725e5
        
http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/layout/xul/base/src/nsTreeIt
emDragCapturer.cpp
line 144
        Build: 2000062021 CrashDate: 2000-06-21 UptimeMinutes: 147  Total: 147 
        OS: Windows NT  4.0 build 1381
        URL: 
        Comment: 
        Stacktrace: 
http://cyclone/reports/stackcommentemail.cfm?dynamicBBID=12858403

    nsTreeItemDragCapturer::ComputeDropPosition 150faf93
        
http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/layout/xul/base/src/nsTreeIt
emDragCapturer.cpp
line 144
        Build: 2000062109 CrashDate: 2000-06-22 UptimeMinutes: 20  Total: 277 
        OS: Windows NT  4.0 build 1381
        URL: 
        Comment: 
        Stacktrace: 
http://cyclone/reports/stackcommentemail.cfm?dynamicBBID=12886246

    nsTreeItemDragCapturer::ComputeDropPosition 265d6fa0
        
http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/layout/xul/base/src/nsTreeIt
emDragCapturer.cpp
line 144
        Build: 2000062009 CrashDate: 2000-06-21 UptimeMinutes: 10  Total: 104 
        OS: Windows 98  4.10 build 67766222
        URL: 
        Comment: scroll a tree
        Stacktrace: 
http://cyclone/reports/stackcommentemail.cfm?dynamicBBID=12817729

    nsTreeItemDragCapturer::ComputeDropPosition 3ee5cf15
        
http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/layout/xul/base/src/nsTreeIt
emDragCapturer.cpp
line 144
        Build: 2000062009 CrashDate: 2000-06-20 UptimeMinutes: 2  Total: 6 
        OS: Windows NT  4.0 build 1381
        URL: 
        Comment: Scrolling in mail thread pan
        Stacktrace: 
http://cyclone/reports/stackcommentemail.cfm?dynamicBBID=12772203

    nsTreeItemDragCapturer::ComputeDropPosition 2899abd3
        
http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/layout/xul/base/src/nsTreeIt
emDragCapturer.cpp
line 144
        Build: 2000062009 CrashDate: 2000-06-20 UptimeMinutes: 3  Total: 3 
        OS: Windows NT  4.0 build 1381
        URL: 
        Comment: Scrolling in the mail thread pan
        Stacktrace: 
http://cyclone/reports/stackcommentemail.cfm?dynamicBBID=12772006

nsTreeItemDragCapturer::ComputeDropPosition

    nsTreeItemDragCapturer::ComputeDropPosition 604725e5
        
http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/layout/xul/base/src/nsTreeIt
emDragCapturer.cpp
line 144
        Build: 2000062021 CrashDate: 2000-06-21 UptimeMinutes: 147  Total: 147 
        OS: Windows NT  4.0 build 1381
        URL: 
        Comment: 
        Stacktrace: 
http://cyclone/reports/stackcommentemail.cfm?dynamicBBID=12858403

    nsTreeItemDragCapturer::ComputeDropPosition 150faf93
        
http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/layout/xul/base/src/nsTreeIt
emDragCapturer.cpp
line 144
        Build: 2000062109 CrashDate: 2000-06-22 UptimeMinutes: 20  Total: 277 
        OS: Windows NT  4.0 build 1381
        URL: 
        Comment: 
        Stacktrace: 
http://cyclone/reports/stackcommentemail.cfm?dynamicBBID=12886246

    nsTreeItemDragCapturer::ComputeDropPosition 265d6fa0
        
http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/layout/xul/base/src/nsTreeIt
emDragCapturer.cpp
line 144
        Build: 2000062009 CrashDate: 2000-06-21 UptimeMinutes: 10  Total: 104 
        OS: Windows 98  4.10 build 67766222
        URL: 
        Comment: scroll a tree
        Stacktrace: 
http://cyclone/reports/stackcommentemail.cfm?dynamicBBID=12817729

    nsTreeItemDragCapturer::ComputeDropPosition 3ee5cf15
        
http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/layout/xul/base/src/nsTreeIt
emDragCapturer.cpp
line 144
        Build: 2000062009 CrashDate: 2000-06-20 UptimeMinutes: 2  Total: 6 
        OS: Windows NT  4.0 build 1381
        URL: 
        Comment: Scrolling in mail thread pan
        Stacktrace: 
http://cyclone/reports/stackcommentemail.cfm?dynamicBBID=12772203

    nsTreeItemDragCapturer::ComputeDropPosition 2899abd3
        
http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/layout/xul/base/src/nsTreeIt
emDragCapturer.cpp
line 144
        Build: 2000062009 CrashDate: 2000-06-20 UptimeMinutes: 3  Total: 3 
        OS: Windows NT  4.0 build 1381
        URL: 
        Comment: Scrolling in the mail thread pan
        Stacktrace: 
http://cyclone/reports/stackcommentemail.cfm?dynamicBBID=12772006

nsTreeItemDragCapturer::ComputeDropPosition

    nsTreeItemDragCapturer::ComputeDropPosition 604725e5
        
http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/layout/xul/base/src/nsTreeIt
emDragCapturer.cpp
line 144
        Build: 2000062021 CrashDate: 2000-06-21 UptimeMinutes: 147  Total: 147 
        OS: Windows NT  4.0 build 1381
        URL: 
        Comment: 
        Stacktrace: 
http://cyclone/reports/stackcommentemail.cfm?dynamicBBID=12858403

    nsTreeItemDragCapturer::ComputeDropPosition 150faf93
        
http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/layout/xul/base/src/nsTreeIt
emDragCapturer.cpp
line 144
        Build: 2000062109 CrashDate: 2000-06-22 UptimeMinutes: 20  Total: 277 
        OS: Windows NT  4.0 build 1381
        URL: 
        Comment: 
        Stacktrace: 
http://cyclone/reports/stackcommentemail.cfm?dynamicBBID=12886246

    nsTreeItemDragCapturer::ComputeDropPosition 265d6fa0
        
http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/layout/xul/base/src/nsTreeIt
emDragCapturer.cpp
line 144
        Build: 2000062009 CrashDate: 2000-06-21 UptimeMinutes: 10  Total: 104 
        OS: Windows 98  4.10 build 67766222
        URL: 
        Comment: scroll a tree
        Stacktrace: 
http://cyclone/reports/stackcommentemail.cfm?dynamicBBID=12817729

    nsTreeItemDragCapturer::ComputeDropPosition 3ee5cf15
        
http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/layout/xul/base/src/nsTreeIt
emDragCapturer.cpp
line 144
        Build: 2000062009 CrashDate: 2000-06-20 UptimeMinutes: 2  Total: 6 
        OS: Windows NT  4.0 build 1381
        URL: 
        Comment: Scrolling in mail thread pan
        Stacktrace: 
http://cyclone/reports/stackcommentemail.cfm?dynamicBBID=12772203

    nsTreeItemDragCapturer::ComputeDropPosition 2899abd3
        
http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/layout/xul/base/src/nsTreeIt
emDragCapturer.cpp
line 144
        Build: 2000062009 CrashDate: 2000-06-20 UptimeMinutes: 3  Total: 3 
        OS: Windows NT  4.0 build 1381
        URL: 
        Comment: Scrolling in the mail thread pan
        Stacktrace: 
http://cyclone/reports/stackcommentemail.cfm?dynamicBBID=12772006

Stack Trace :-

ncident ID 12886246 
nsTreeItemDragCapturer::ComputeDropPosition 
[d:\builds\seamonkey\mozilla\layout\xul\base\src\nsTreeItemDragCapturer.cpp, 
line 144] 
nsTreeItemDragCapturer::DragOver 
[d:\builds\seamonkey\mozilla\layout\xul\base\src\nsTreeItemDragCapturer.cpp, 
line 223] 
nsEventListenerManager::HandleEvent 
[d:\builds\seamonkey\mozilla\layout\events\src\nsEventListenerManager.cpp, line 
1424] 
nsXULElement::HandleDOMEvent 
[d:\builds\seamonkey\mozilla\rdf\content\src\nsXULElement.cpp, line 3430] 
nsXULElement::HandleDOMEvent 
[d:\builds\seamonkey\mozilla\rdf\content\src\nsXULElement.cpp, line 3419] 
nsXULElement::HandleDOMEvent 
[d:\builds\seamonkey\mozilla\rdf\content\src\nsXULElement.cpp, line 3419] 
PresShell::HandleEventInternal 
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 3736] 
PresShell::HandleEvent 
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 3666] 
nsView::HandleEvent [d:\builds\seamonkey\mozilla\view\src\nsView.cpp, line 782] 
nsView::HandleEvent [d:\builds\seamonkey\mozilla\view\src\nsView.cpp, line 755] 
nsView::HandleEvent [d:\builds\seamonkey\mozilla\view\src\nsView.cpp, line 755] 
nsViewManager2::DispatchEvent 
[d:\builds\seamonkey\mozilla\view\src\nsViewManager2.cpp, line 1387] 
HandleEvent [d:\builds\seamonkey\mozilla\view\src\nsView.cpp, line 69] 
nsWindow::DispatchEvent 
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 564] 
nsNativeDragTarget::DispatchDragDropEvent 
[d:\builds\seamonkey\mozilla\widget\src\windows\nsNativeDragTarget.cpp, line 
178] 
nsNativeDragTarget::ProcessDrag 
[d:\builds\seamonkey\mozilla\widget\src\windows\nsNativeDragTarget.cpp, line 
200] 
nsNativeDragTarget::DragOver 
[d:\builds\seamonkey\mozilla\widget\src\windows\nsNativeDragTarget.cpp, line 
253] 
ole32.dll + 0x88a99 (0x77ba8a99) 
ole32.dll + 0x88c53 (0x77ba8c53) 
ole32.dll + 0x6f4cd (0x77b8f4cd) 
ole32.dll + 0x6f011 (0x77b8f011) 
nsDragService::StartInvokingDragSession 
[d:\builds\seamonkey\mozilla\widget\src\windows\nsDragService.cpp, line 142] 
nsDragService::InvokeDragSession 
[d:\builds\seamonkey\mozilla\widget\src\windows\nsDragService.cpp, line 109] 
XPTC_InvokeByIndex 
[d:\builds\seamonkey\mozilla\xpcom\reflect\xptcall\src\md\win32\xptcinvoke.cpp, 
line 139] 
nsXPCWrappedNativeClass::CallWrappedMethod 
[d:\builds\seamonkey\mozilla\js\src\xpconnect\src\xpcwrappednativeclass.cpp, 
line 915] 
WrappedNative_CallMethod 
[d:\builds\seamonkey\mozilla\js\src\xpconnect\src\xpcwrappednativejsops.cpp, 
line 195] 
js_Invoke [d:\builds\seamonkey\mozilla\js\src\jsinterp.c, line 687] 
js_Interpret [d:\builds\seamonkey\mozilla\js\src\jsinterp.c, line 2491] 
js_Invoke [d:\builds\seamonkey\mozilla\js\src\jsinterp.c, line 703] 
js_InternalInvoke [d:\builds\seamonkey\mozilla\js\src\jsinterp.c, line 776] 
JS_CallFunctionValue [d:\builds\seamonkey\mozilla\js\src\jsapi.c, line 2803] 
nsJSContext::CallEventHandler 
[d:\builds\seamonkey\mozilla\dom\src\base\nsJSEnvironment.cpp, line 790] 
nsJSEventListener::HandleEvent 
[d:\builds\seamonkey\mozilla\dom\src\events\nsJSEventListener.cpp, line 155] 
nsEventListenerManager::HandleEventSubType 
[d:\builds\seamonkey\mozilla\layout\events\src\nsEventListenerManager.cpp, line 
755] 
nsEventListenerManager::HandleEvent 
[d:\builds\seamonkey\mozilla\layout\events\src\nsEventListenerManager.cpp, line 
1471] 
nsXULElement::HandleDOMEvent 
[d:\builds\seamonkey\mozilla\rdf\content\src\nsXULElement.cpp, line 3430] 
nsXULElement::HandleDOMEvent 
[d:\builds\seamonkey\mozilla\rdf\content\src\nsXULElement.cpp, line 3455] 
nsXULElement::HandleDOMEvent 
[d:\builds\seamonkey\mozilla\rdf\content\src\nsXULElement.cpp, line 3455] 
nsXULElement::HandleDOMEvent 
[d:\builds\seamonkey\mozilla\rdf\content\src\nsXULElement.cpp, line 3455] 
nsXULElement::HandleDOMEvent 
[d:\builds\seamonkey\mozilla\rdf\content\src\nsXULElement.cpp, line 3455] 
nsEventStateManager::GenerateDragGesture 
[d:\builds\seamonkey\mozilla\layout\events\src\nsEventStateManager.cpp, line 
769] 
nsEventStateManager::PreHandleEvent 
[d:\builds\seamonkey\mozilla\layout\events\src\nsEventStateManager.cpp, line 
295] 
PresShell::HandleEventInternal 
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 3726] 
PresShell::HandleEvent 
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 3666] 
nsView::HandleEvent [d:\builds\seamonkey\mozilla\view\src\nsView.cpp, line 782] 
nsViewManager2::DispatchEvent 
[d:\builds\seamonkey\mozilla\view\src\nsViewManager2.cpp, line 1387] 
HandleEvent [d:\builds\seamonkey\mozilla\view\src\nsView.cpp, line 69] 
nsWindow::DispatchEvent 
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 564] 
nsWindow::DispatchWindowEvent 
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 581] 
nsWindow::DispatchMouseEvent 
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 3681] 
ChildWindow::DispatchMouseEvent 
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 3886] 
nsWindow::ProcessMessage 
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 2801] 
nsWindow::WindowProc 
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 830] 
USER32.dll + 0x1268 (0x77e71268) 
0x00960379 


Code Around the Crash :-

    
134                 // get the rect of the row (not the tree item) that the 
mouse is over. This is
135                 // where we need to start computing things from.
136                 nsRect rowRect;
137                 nsIFrame* rowFrame;

138 troy      1.4   mTreeItem->FirstChild(mPresContext, nsnull, &rowFrame);
139 pinkerton 1.1   NS_ASSERTION ( rowFrame, "couldn't get rowGroup's row frame" 
);
140                 rowFrame->GetRect(rowRect);
141                  
142                 // compute the offset to top level in twips
143                 float t2p;
144                 mPresContext->GetTwipsToPixels(&t2p);
145                 PRInt32 frameOffsetX = 0, frameOffsetY = 0;
146                 nsIFrame* curr = rowFrame;
147                 curr->GetParent(&curr);
148                 while ( curr ) {
149                   nsPoint origin;
150                   curr->GetOrigin(origin);      // in twips    
151                   frameOffsetX += origin.x;     // build the offset 
incrementally
152                   frameOffsetY += origin.y;    
153                   curr->GetParent(&curr);       // moving up the chain
154                 } // until we reach the top
(Reporter)

Comment 1

•
19 years ago 
Adding crash and topcrash keywords.
URL: Scrolling a Tree → Scrolling a Tree
Keywords: crash, topcrash

Comment 2

•
19 years ago 
Moving this to Trees component and reassigning.
Assignee: clayton → hyatt
Component: Layout → XP Toolkit/Widgets: Trees
QA Contact: petersen → jrgm

Updated

•
19 years ago
Keywords: nsbeta2

Comment 3

•
19 years ago 
nominating for nsbeta2

Updated

•
19 years ago
Whiteboard: [nsbeta2+]

Comment 4

•
19 years ago 
Putting on [nsbeta2+] radar for beta2 fix.
 (Assignee)

Comment 5

•
19 years ago 
I need steps to reproduce please.
Whiteboard: [nsbeta2+] → [nsbeta2+] 7/26 eta

Comment 6

•
19 years ago 
Steps to reproduce according to Talkback data no longer seems to crash the app.  
The latest Talkback statistics are not showing this as a top crasher anymore.  
PDT gave this a + due to topcrash status...so maybe this needs to be given a -?  
Removing nsbeta2+ and renominating.
Whiteboard: [nsbeta2+] 7/26 eta → 7/26 eta

Updated

•
19 years ago
Keywords: topcrash

Comment 7

•
19 years ago 
removing topcrash keyword
 (Assignee)

Comment 8

•
19 years ago 
I'm fairly certain I fixed this bug with other tree widget landings.  Anyway, I 
can't reproduce.  Marking fixed.
Status: NEW → RESOLVED
Last Resolved: 19 years ago
Resolution: --- → FIXED

Comment 9

•
19 years ago 
verifying per hyatt's comments, and i haven't seen this crash lately either.
Status: RESOLVED → VERIFIED

Updated

•
11 years ago
Component: XP Toolkit/Widgets: Trees → XUL
QA Contact: jrgmorrison → xptoolkit.widgets
You need to log in before you can comment on or make changes to this bug.