48277 - Beta2 Crashes at nsEventStateManager::PostHandleEvent()

Status: VERIFIED DUPLICATE of bug 50006

(Core :: DOM: UI Events & Focus Handling, defect, P1)

Description

[Shiva Thirumazhusai]

This crash seems to happen when scrolling and Loading two pages simultaneously.

Stack Trace: 
nsEventStateManager::PostHandleEvent()
PresShell::HandleEventInternal()
PresShell::HandleEvent()
nsView::HandleEvent()
nsView::HandleEvent()
nsView::HandleEvent()
nsView::HandleEvent()
nsViewManager2::DispatchEvent()
HandleEvent()
nsWidget::DispatchEvent()
nsWidget::DispatchWindowEvent()
nsWidget::OnButtonPressSignal()
nsWindow::HandleGDKEvent()
dispatch_superwin_event()
handle_gdk_event()
libgdk-1.2.so.0 + 0x1753b (0x4073253b)
libglib-1.2.so.0 + 0x10186 (0x40762186)
libglib-1.2.so.0 + 0x10751 (0x40762751)
libglib-1.2.so.0 + 0x108f1 (0x407628f1)
libgtk-1.2.so.0 + 0x8c8e9 (0x406878e9)
nsAppShell::Run()
nsAppShellService::Run()
main1()
main()
libc.so.6 + 0x189cb (0x4024e9cb)


Following are the list of useful user comments :-

        Build: 2000080712 CrashDate: 2000-08-07 UptimeMinutes: 3  Total: 3 
        OS: Windows 98  4.10 build 67766446
        Comment: changing my channel boxs'

        Build: 2000080712 CrashDate: 2000-08-07 UptimeMinutes: 3  Total: 10 
        OS: Windows 98  4.10 build 67766446
        URL: http://my.netscape.com
        Comment: i was customizing my netscape start up page

        Build: 2000080712 CrashDate: 2000-08-07 UptimeMinutes: 6  Total: 10 
        OS: Windows 98  4.90 build 73010104
        URL: http://www.vstore.com/cgi-bin/admin/overview.html
        Comment: I was trying to access my vstore account.

        Build: 2000080712 CrashDate: 2000-08-08 UptimeMinutes: 247  Total: 247 
        OS: Windows NT  5.0 build 2195
        URL: www.drugkorea.com  and  www.hancast.com
        Comment: 1. browser fail and close

        Build: 2000080712 CrashDate: 2000-08-08 UptimeMinutes: 80  Total: 80 
        OS: Linux 2.2.14-15mdksmp
        URL: anandtech.com
        Comment: two active windows loading

        Build: 2000080712 CrashDate: 2000-08-08 UptimeMinutes: 117  Total: 117 
        OS: Linux 2.2.16
        URL: real.com
        Comment: went to download real player 8 page and started using the 
mousewheel to scroll down.  program crashed at that point

        Build: 2000080712 CrashDate: 2000-08-08 UptimeMinutes: 27  Total: 27 
        OS: Linux 2.2.16
        URL: Yeah
        Comment:  there are some bugs

        Build: 2000080712 CrashDate: 2000-08-08 UptimeMinutes: 62  Total: 62 
        OS: Linux 2.2.14
        URL: www.techdata.com
        Comment: 

        Build: 2000080712 CrashDate: 2000-08-08 UptimeMinutes: 21  Total: 21 
        OS: Linux 2.4.0-test4
        URL: http://www.theregister.co.uk
        Comment: Opened a new window pointing to http://slashdot.org then - 
boom.

        Build: 2000080712 CrashDate: 2000-08-08 UptimeMinutes: 24  Total: 24 
        OS: Windows 98  4.10 build 67766446
        URL: http://www.zend.com
        Comment: I don't remember the exact url

        Build: 2000080712 CrashDate: 2000-08-08 UptimeMinutes: 100  Total: 100 
        OS: Windows 98  4.10 build 67766446
        URL: Customizing Weather panel
        Comment: I was attempting to customize the weather.com panel.


        Build: 2000080712 CrashDate: 2000-08-08 UptimeMinutes: 16  Total: 16 
        OS: Windows 98  4.10 build 67766446
        URL: 
        Comment: I was browseing the web. Nothing special.

        Build: 2000080712 CrashDate: 2000-08-08 UptimeMinutes: 4  Total: 9 
        OS: Windows 98  4.10 build 67766222
        URL: 
        Comment: since I changed to netscape 6 ver. 2 My instant messanger 
doesn't work and I can't open webmail

        Build: 2000080712 CrashDate: 2000-08-08 UptimeMinutes: 67  Total: 67 
        OS: Linux 2.2.14-5.0
        URL: http://www.meerschaum.com/
        Comment: Clicking on the "Order" link off the "Catalog" page (which 
sends you

        Build: 2000080712 CrashDate: 2000-08-08 UptimeMinutes: 62  Total: 62 
        OS: Linux 2.2.16
        URL: 
        Comment: Scrolling mouse wheel

        Build: 2000080712 CrashDate: 2000-08-08 UptimeMinutes: 51  Total: 51 
        OS: Windows 98  4.10 build 67766222
        URL: www.mcmastercar.com
        Comment: It just crashed and stop working generl protection error 

        Build: 2000080712 CrashDate: 2000-08-08 UptimeMinutes: 0  Total: 101 
        OS: Windows 98  4.10 build 67766446
        URL: Customizing Weather panel
        Comment: 

        Build: 2000080712 CrashDate: 2000-08-08 UptimeMinutes: 43  Total: 43 
        OS: Windows NT  4.0 build 1381
        URL: http://www.keyes2000.org/
        Comment: Using the wheel on a Kensington mouse to scroll up.

        Build: 2000080712 CrashDate: 2000-08-08 UptimeMinutes: 40  Total: 40 
        OS: Windows 95  4.0 build 67306684
        URL: http://www.inmatrix.com
        Comment: checking a site

        Build: 2000080712 CrashDate: 2000-08-08 UptimeMinutes: 79  Total: 83 
        OS: Linux 2.3.99-pre9
        URL: http://www.hotscripts.com/PHP/Web_Sites/more4.html
        Comment: waiting for the page to load

        Build: 2000080712 CrashDate: 2000-08-08 UptimeMinutes: 3  Total: 3 
        OS: Windows NT  4.0 build 1381
        URL: projectnet.cephren.com
        Comment: trying to login

        Build: 2000080712 CrashDate: 2000-08-08 UptimeMinutes: 75  Total: 75 
        OS: Windows 98  4.10 build 67766446
        URL: http://www.mozilla.org
        Comment: 1 browser window had http://www.everything2.com parsed and 
loaded

        Build: 2000080712 CrashDate: 2000-08-08 UptimeMinutes: 162  Total: 198 
        OS: Linux 2.2.16
        URL: http://www.freshmeat.net
        Comment: I just entered a search for 'check' book. The search returned 
and

        Build: 2000080712 CrashDate: 2000-08-08 UptimeMinutes: 42  Total: 42 
        OS: Windows 98  4.10 build 67766222
        URL: www.grooveradio.com
        Comment: I wanted to listen to the radio live broadcast. i chose real 
player stream fromt he home page. netscape error message said it did not support 
the file I was about to receive. then my system crashed.

        Build: 2000080712 CrashDate: 2000-08-08 UptimeMinutes: 20  Total: 256 
        OS: Windows NT  5.0 build 2195
        URL: http://www.goo.ne.jp/
        Comment: 

        Build: 2000080712 CrashDate: 2000-08-08 UptimeMinutes: 82  Total: 108 
        OS: Windows 98  4.10 build 67766446
        URL: 
        Comment: I was trying to update mynetscape homepage

        Build: 2000080712 CrashDate: 2000-08-08 UptimeMinutes: 30  Total: 30 
        OS: Windows 98  4.10 build 67766222
        URL: 
        Comment: I was in the "My Netscape" window

        Build: 2000080712 CrashDate: 2000-08-08 UptimeMinutes: 7  Total: 7 
        OS: Windows 98  4.10 build 67766446
        URL: 
        Comment: After signing in to My Netscape

        Build: 2000080712 CrashDate: 2000-08-08 UptimeMinutes: 717  Total: 717 
        OS: Linux 2.4.0-test5
        URL: 
        Comment: Un-window shaded browser window and hit PageDown to scroll

        Build: 2000080712 CrashDate: 2000-08-08 UptimeMinutes: 14  Total: 14 
        OS: Windows 98  4.10 build 67766222
        URL: 
        Comment: using the netscape calendar and adding an appointment

        Build: 2000080712 CrashDate: 2000-08-08 UptimeMinutes: 94  Total: 387 
        OS: Windows NT  5.0 build 2195
        URL: my.netscape.com
        Comment: I don't konw. On reloading browser was closed...

        Build: 2000080712 CrashDate: 2000-08-08 UptimeMinutes: 15  Total: 15 
        OS: Windows 98  4.10 build 67766222
        URL: 
        Comment: Trying to set up my portfoilo

        Build: 2000080712 CrashDate: 2000-08-08 UptimeMinutes: 25  Total: 25 
        OS: Windows NT  4.0 build 1381
        URL: www.octopus.com/home.htm
        Comment: clicked on the "I want to..." button at the top of the page.

        Build: 2000080712 CrashDate: 2000-08-08 UptimeMinutes: 104  Total: 104 
        OS: Windows 98  4.10 build 67766446
        URL: 
        Comment: klick on a link

        Build: 2000080712 CrashDate: 2000-08-08 UptimeMinutes: 0  Total: 0 
        OS: Linux 2.2.15-4mdk
        URL: my.netscape.com
        Comment: Trying to use the wheel.

        Build: 2000080712 CrashDate: 2000-08-08 UptimeMinutes: 13  Total: 13 
        OS: Windows 98  4.10 build 67766222
        URL: www.ebay.com
        Comment: I switched from the new Theme to the Classic Theme; after that 
it didn't seem to properly load websites.  I went to Ebay and tried to log in 
but it wouldn't display the login page and crashed instead.  It also would not 
display the Hotmail website after switching themes.  It said at the bottom: 
"Done (.71 secs)"
        

Source Information :-         
http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/layout/events/src/nsEventSta
teManager.cpp
line 977


Source Code :-

 969                           if (treeFrame) {
 970                             PRInt32 scrollIndex, visibleRows;
 971                             
treeFrame->GetIndexOfFirstVisibleRow(&scrollIndex);
 972                             
treeFrame->GetNumberOfVisibleRows(&visibleRows);
 973                 
 974                             if (action == MOUSE_SCROLL_N_LINES)
 975                               scrollIndex += numLines;
 976                             else
 977                               scrollIndex += ((numLines > 0) ? visibleRows 
: -visibleRows);
 978                 
 979                             if (scrollIndex < 0)
 980                               scrollIndex = 0;
 981                             else {
 982 bryner    1.181               PRInt32 numRows, lastPageTopRow;
 983                               treeFrame->GetRowCount(&numRows);
 984                               lastPageTopRow = numRows - visibleRows;
 985                               if (scrollIndex > lastPageTopRow)
 986                                 scrollIndex = lastPageTopRow;
 987                             }
 988                 
 989                             treeFrame->ScrollToIndex(scrollIndex);
 990                             break;
 991                           }

Comment 1

[Shiva Thirumazhusai]

Adding keywords crash, nsbeta3 and topcrash .

Comment 2

[Heikki Toivonen (remove -bugzilla when emailing directly)]

I am the virtual joki.

Comment 3

[Heikki Toivonen (remove -bugzilla when emailing directly)]

Per discusion with Nisheeth, marking nsbeta3+. Will email ekrock to verify.

Comment 4

[Heikki Toivonen (remove -bugzilla when emailing directly)]

I am unable to reproduce this. Could you come up with a reliable repro scenario
for me?

The source line below does not make sense for this crash. There is nothing there
that could cause a crash.

In principle this bug should not even be possible. Netlib is multithreaded, but
UI is single thread (multithreaded UI would would explain the strange source
code reference, but probably not the same place every time).

One possible reason for the crash might be that events get somehow passed to
wrong place, but even in that case the crash should happen elsewhere (accessing
bogus/null pointer).

Comment 5

[Heikki Toivonen (remove -bugzilla when emailing directly)]

I am still unable to reproduce this bug, have also tried some of the sites the 
talkback reports were using. Adding keywords to get help.

Questions to reporter: how do you know this bug happens whan scrolling (one 
page?) and loading 2 pages at the same time? And how do you know the source 
line? Does talkback tell all this? Where do I see the complete data?

Comment 6

[Shiva Thirumazhusai]

>how do you know this bug happens whan scrolling (one page?) 
>and loading 2 pages at the same time? 
The comments are received via talkback system.
>And how do you know the source line? 
>Does talkback tell all this? 
>Where do I see the complete data?
Yes source line is provided by Talkback System. For more information goto
http://climate/ and search using BBID.

Comment 7

[David Baron :dbaron: (⌚️UTC-4, no longer working on Mozilla)]

The source section pasted in was wrong because it wasn't from the branch.  See
my comments on bug 50006, which bryner fixed last night (we think).

*** This bug has been marked as a duplicate of 50006 ***

Comment 8

[Jan Carpenter]

verified dup