461866 - right-click-mouse-menu (Table-Select Row, Column, All-Cells) crashes Composer [@ 0x83028b0c - nsHTMLEditor::SelectAllTableCells]

Status: RESOLVED WORKSFORME

(SeaMonkey :: Composer, defect)

Description

[Barry Edwin GIlmour]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1b2pre) Gecko/20081027 Lightning/1.0pre SeaMonkey/2.0a2pre
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1b2pre) Gecko/20081027 Lightning/1.0pre SeaMonkey/2.0a2pre

Linux GNU/MandrivaLinux-2008.1 Mon 20080728 15:12-EDT 2.6.24.7-desktop-1mnb i686 Intel®P4®CPU2.53GHz 
SM-2.0a1(20080924175508) or SM2.0a2pre inclusive, up-to
Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1b2pre) Gecko/20081027 Lightning/1.0pre SeaMonkey/2.0a2pre ID:20081027000444

Instant-crash of entire-suite from within a Composer-Table, when
selecting any of these 3 right-click-mouse-menu functions. 

Reproducible: Always

Steps to Reproduce:
1.Select right-click menu inside table-cell
2.Choose either a/ Select Row (nsHTMLEditor::SelectTableRow), b/ Select-Column (nsHTMLEditor::SelectTableColumn), c/ Select-All-Cells (nsHTMLEditor::SelectAllTableCells).
3.Instant crash
Actual Results:  
1/ My latest crash =
http://crash-stats.mozilla.com/report/index/de5eb414-a471-11dd-8f24-001a4bd43e5c?p=1
2/ m.s.seamonkey message-ID <[e-mail]> Dominique, reports Mmmm, it works for me !!! 
(SM-2.0a2pre, WinXP fully patched, and only adblock as extension..)
3/ m.s.seamonkey message-ID <[e-mail]> Jens Hatlak:-
Confirming with Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1b2pre) Gecko/20081027 SeaMonkey/2.0a2pre / GTK version 2.12.11. Please file a bug.
BTW: I get the following on the command line when it crashes but I'm not sure whether this is from the Crash Reporter itself:
(crashreporter:6831): Gtk-CRITICAL **: gtk_widget_set_sensitive: assertion `GTK_IS_WIDGET (widget)' failed.

 

Expected Results:  
Other nsHTMLEditor::Select Mouse-menu items work fine:-
Select-Table, Select-Cell,Delete-Column,Insert-Column-after,Insert-Column-before,Delete-Row,Insert-Row-after,Insert-Row-before,Delete-Cell, Insert-Cell-after, Insert-Cell-before.

Workaround is to simply highlight the required-selection, and perform the needed action, (including merge/split-cells via the mouse-menu). 

Workaround is to simply highlight the required-selection, and perform the needed action, (including merge/split-cells via the mouse-menu).

I do not get a GTK error-report.

Comment 1

[timeless]

Signature	@0x83028b0c
UUID	de5eb414-a471-11dd-8f24-001a4bd43e5c
Time	2008-10-27 14:54:35-07
Uptime	2961
Product	SeaMonkey
Version	2.0a2pre
Build ID	20081027000444
OS	Linux
OS Version	0.0.0 Linux 2.6.24.7-desktop586-1mnb #1 SMP Mon Jul 28 15:01:18 EDT 2008 i686 GNU/Linux
CPU	x86
CPU Info	GenuineIntel family 2 model 2 stepping 4
Crash Reason	SIGSEGV
Crash Address	0x83028b0c
Comments	
Crashing Thread
Frame 	Module 	Signature 	Source
0 		@0x83028b0c 	
1 	libgklayout.so 	nsHTMLEditor::SelectAllTableCells 	editor/libeditor/html/nsTableEditor.cpp:1675
2 	libxpcom_core.so 	libxpcom_core.so@0x652f0 	
3 	libxpconnect.so 	libxpconnect.so@0x30b97 	
4 	libxpconnect.so 	libxpconnect.so@0x3644a 	
5 	libmozjs.so 	js_Invoke 	js/src/jsinvoke.cpp:1306
6 	libmozjs.so 	js_Interpret 	js/src/jsinterp.cpp:5011
7 	libmozjs.so 	js_Invoke 	js/src/jsinvoke.cpp:1324
8 	libxpconnect.so 	libxpconnect.so@0x2e667 	
9 	libxpconnect.so 	libxpconnect.so@0x29be6 	
10 	libxpcom_core.so 	libxpcom_core.so@0x65e04 	
11 	libembedcomponents.so 	libembedcomponents.so@0x1f05d 	
12 	libembedcomponents.so 	libembedcomponents.so@0x1c615 	
13 	libxpcom_core.so 	libxpcom_core.so@0x652f0 	
14 	libxpconnect.so 	libxpconnect.so@0x30b97 	
15 	libxpconnect.so 	libxpconnect.so@0x3644a 	
16 	libmozjs.so 	js_Invoke 	js/src/jsinvoke.cpp:1306
17 	libmozjs.so 	js_Interpret 	js/src/jsinterp.cpp:5011
18 	libmozjs.so 	js_Invoke 	js/src/jsinvoke.cpp:1324
19 	libmozjs.so 	js_InternalInvoke 	js/src/jsinvoke.cpp:1381
20 	libmozjs.so 	JS_CallFunctionValue 	js/src/jsapi.cpp:5146
21 	libgklayout.so 	nsJSContext::CallEventHandler 	dom/src/base/nsJSEnvironment.cpp:1979
22 	libgklayout.so 	nsJSEventListener::HandleEvent 	dom/src/events/nsJSEventListener.cpp:247
23 	libgklayout.so 	nsEventListenerManager::HandleEventSubType 	content/events/src/nsEventListenerManager.cpp:1091
24 	libgklayout.so 	nsEventListenerManager::HandleEvent 	content/events/src/nsEventListenerManager.cpp:1196
25 	libgklayout.so 	nsEventTargetChainItem::HandleEvent 	content/events/src/nsEventDispatcher.cpp:236
26 	libgklayout.so 	nsEventTargetChainItem::HandleEventTargetChain 	content/events/src/nsEventDispatcher.cpp:300
27 	libgklayout.so 	nsEventDispatcher::Dispatch 	content/events/src/nsEventDispatcher.cpp:514
28 	libgklayout.so 	PresShell::HandleDOMEventWithTarget 	layout/base/nsPresShell.cpp:5978
29 	libgklayout.so 	nsXULMenuCommandEvent::Run 	layout/xul/base/src/nsXULPopupManager.cpp:2076
30 	libxpcom_core.so 	libxpcom_core.so@0x58ca7 	
31 	libxpcom_core.so 	libxpcom_core.so@0x27342 	
32 	libwidget_gtk2.so 	nsBaseAppShell::Run 	widget/src/xpwidgets/nsBaseAppShell.cpp:170
33 	libtoolkitcomps.so 	nsAppStartup::Run 	toolkit/components/startup/src/nsAppStartup.cpp:182
34 	libxul.so 	XRE_main 	
35 	seamonkey-bin 	main 	nsSuiteApp.cpp:103
36 	libc-2.7.so 	libc-2.7.so@0x1638f

Comment 2

[Bernd]

I would work on this if this happens also within content editable and test case would be helpfull.

Comment 3

[Barry Edwin GIlmour]

Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1b4pre) Gecko/20090327 Lightning/1.0pre SeaMonkey/2.0b1pre ID:20090327000544

After having this bug crash "select row, column, all-cells", in every SM2 nightly in the period Gecko-1.9.1b2pre - 1.9.1b4pre 2008-10-27 to 2009-03-26, I can report it has-been fixed in this 2009-03-27 nightly, but I can't find how it has been fixed.
The OS was updated to Mdv-2008.1 Linux localhost 2.6.24.7-desktop-2mnb #1 SMP Thu Oct 30 18:03:14 EDT 2008 i686 Intel(R) Pentium(R) 4 CPU 2.53GHz GNU/Linux, but no-change was made to the hardware.

Comment 4

[Jens Hatlak (:InvisibleSmiley)]

Confirming that it's fixed. Also the range Barry provided is correct; it was broken up until the 2009-03-26 nightly and is fixed since the 2009-03-27 one. The latter states it was built from mozilla-1.9.1 changeset 3c4e7b8a6562 so I guess the fix was changeset 242950431852 (bug 471642).

Nice, I already feared this won't make SM2.