Closed Bug 49835 Opened 25 years ago Closed 25 years ago

Crashing at nsBrowserInstance::GetContentAreaDocShell

Categories

(SeaMonkey :: General, defect, P3)

Product:
SeaMonkey
Component:
General
Type:
defect

Tracking

(Not tracked)

Status:
VERIFIED FIXED

People

(Reporter: asa, Assigned: hyatt)

Details

(Keywords: crash, smoketest, Whiteboard: [dogfood+])

build 082209 crashes with this output when I click on almost anything. Calling chain using A6/R1 links Back chain ISA Caller 00000000 PPC 1F432490 0EE0E340 PPC 1F41CED8 main+00130 0EE0E2E0 PPC 1F41C29C main1(int, char**, nsISupports*)+00C0C 0EE0DFE0 PPC 1F2551C4 nsAppShellService::Run()+00018 0EE0DFA0 PPC 1BF6D970 nsAppShell::Run()+00048 0EE0DF50 PPC 1BF6E0AC nsMacMessagePump::DoMessagePump()+0003C 0EE0DF00 PPC 1BF6E6B4 nsMacMessagePump::DispatchEvent(int, EventRecord*)+ 00174 0EE0DEB0 PPC 1BF8413C Repeater::DoRepeaters(const EventRecord&)+00030 0EE0DE70 PPC 1BF4B208 nsMacNSPREventQueueHandler::RepeatAction(const EventRecord&)+000 0C 0EE0DE30 PPC 1BF4B320 nsMacNSPREventQueueHandler::ProcessPLEventQueue()+ 000B0 0EE0DDC0 PPC 1D885644 nsEventQueueImpl::ProcessPendingEvents()+00038 0EE0DD50 PPC 1D8E5100 PL_ProcessPendingEvents+0004C 0EE0DD10 PPC 1D8E51E8 PL_HandleEvent+00020 0EE0DCD0 PPC 1EF9C0F0 nsStreamListenerEvent::HandlePLEvent(PLEvent*)+00024 0EE0DC80 PPC 1EF9D340 nsOnDataAvailableEvent::HandleEvent()+00068 0EE0DC30 PPC 1F01A518 nsHTTPServerListener::OnDataAvailable(nsIChannel*, nsISupports*, nsIInputStream*, unsigned int, unsigned int)+00C3C 0EE0D980 PPC 1EFF9D1C nsHTTPChunkConv::OnDataAvailable(nsIChannel*, nsISupports*, nsII nputStream*, unsigned int, unsigned int)+00370 0EE0D870 PPC 1EFD0214 InterceptStreamListener::OnDataAvailable(nsIChannel* , nsISupport s*, nsIInputStream*, unsigned int, unsigned int)+00060 0EE0D820 PPC 1F01BE80 nsHTTPFinalListener::OnDataAvailable(nsIChannel*, nsISupports*, nsIInputStream*, unsigned int, unsigned int)+00094 0EE0D7C0 PPC 1C066C48 nsDocumentOpenInfo::OnDataAvailable(nsIChannel*, nsISupports*, n sIInputStream*, unsigned int, unsigned int)+00068 0EE0D760 PPC 1EFEEBF0 nsMultiMixedConv::OnDataAvailable(nsIChannel*, nsISupports*, nsI InputStream*, unsigned int, unsigned int)+00328 0EE0D6F0 PPC 1EFEFBC8 nsMultiMixedConv::SendStart(nsIChannel*)+0038C 0EE0D5E0 PPC 1C066A9C nsDocumentOpenInfo::OnStartRequest(nsIChannel*, nsISupports*)+00 0EC 0EE0D560 PPC 1C0671F0 nsDocumentOpenInfo::DispatchContent(nsIChannel*, nsISupports*)+0 041C 0EE0D370 PPC 1F1C2734 nsBrowserInstance::DoContent(const char*, int, const char*, nsIC hannel*, nsIStreamListener**, int*)+00028 0EE0D300 PPC 1F1BB914 nsBrowserInstance::GetContentAreaDocShell()+0011C Closing log Steps to reproduce: 1launch mozilla 2click home on personal toolbar (or almost any ui item including bookmarks menu items, other personal toolbar defualt items, etc) Results: crash Expected:....
cc:'ing hyatt and danm in case one of them knows what's happening. Adding smoketest keyword.
Keywords: smoketest
adding self to cc. this will hold the tree.
I've been seeing this stack trace a lot with the classic skin. See bug 49822. Which skin were you using?
This was tested on a completely clean Installer install with defualt modern skin. I just tested on a sea.bin version and default modern skin and I get the same crash. I've completely blown away mozilla and all old profiles, registry files, etc and launched mozilla for the first time, clicking on personal toolbar bookmark for mozilla.org crashes me.
same crash if I switch to classic skin as well.
Never mind. My stack trace was a bit different.
Yes I see this on todays 2000-08-22-06 builds also on commercial..blocker! Talkback screen popped up the disappeared. Could not send in blackbox.
Whiteboard: [dogfood+]
Updating summary, removing moz mozilla since on commercial bits too. twalker was able to get a stack trace. I crashed just clicking on a link in a browser window. His trace for "crashed while opening new window in composer" is: .__ptr_glue nsBrowserInstance::GetContentAreaDocShell() [nsBrowserInstance.cpp, line 419] nsBrowserInstance::CanHandleContent() [nsBrowserInstance.cpp, line 1678] nsURILoader::ShouldHandleContent() [nsURILoader.cpp, line 747] nsURILoader::DispatchContent() [nsURILoader.cpp, line 815] nsDocumentOpenInfo::DispatchContent() [nsURILoader.cpp, line 296] nsDocumentOpenInfo::OnStartRequest() [nsURILoader.cpp, line 233] nsCachedChromeChannel::HandleStartLoadEvent() [nsChromeProtocolHandler.cpp, line 513] PL_HandleEvent() [plevent.c, line 587] PL_ProcessPendingEvents() [plevent.c, line 528] nsEventQueueImpl::ProcessPendingEvents() [nsEventQueue.cpp, line 356] nsEventQueueImpl::ProcessPendingEvents() [nsEventQueue.cpp, line 362] nsMacNSPREventQueueHandler::ProcessPLEventQueue() [nsToolkit.cpp, line 134] nsMacNSPREventQueueHandler::RepeatAction() [nsToolkit.cpp, line 99] Repeater::DoRepeaters() [nsRepeater.cpp, line 119] nsMacMessagePump::DispatchEvent() [nsMacMessagePump.cpp, line 413] nsMacMessagePump::DoMessagePump() [nsMacMessagePump.cpp, line 245] nsAppShell::Run() [nsAppShell.cpp, line 110] nsAppShellService::Run() [nsAppShellService.cpp, line 377] main1() [nsAppRunner.cpp, line 946] main() [nsAppRunner.cpp, line 1126] .__start
Summary: mac mozilla crashing at nsBrowserInstance::GetContentAreaDocShell → Crashing at nsBrowserInstance::GetContentAreaDocShell
twalker also got the same stack trace as directly above when he "crashed when goign to open my email inbox"
I just crashed with similar stack by clicking on a link in the sidebar, using N6 on Mac OS 8.6
cc valeski & hyatt, as saari says they may know of recent changes that affect this.
[ack, mid-air collision. reposting --my mac trace is v.similar to leger's] i've seen this on commercial builds --moreover, on both Mac and Linux builds [2000.08.22.08]. updated the summary, platform... on linux i had started out with a profile in which i had switched to the classic skin; on mac, i didn't switch the skin at all (still modern). annoyingly, i cannot seem to reproduce this reliably, but here are the steps i took (on both mac and linux) before i got the crash: 1. i was in the URLbar, and after *something* (alas, i don't remember the particular steps here; dunno if it was skin switching, really, since i had switch skins on the mac --weird) the urlbar would no longer respond after hitting the enter key, ie, the page wouldn't load. on linux, i got the following console error: JavaScript error: chrome://navigator/content/sessionHistoryUI.js line 126: gURLBar is not defined 2. so, giving up on the urlbar, i select File > Open Web Location. 3. in the OWL dialog, i type in my url (eg, www.mozilla.org), then hit the Enter key. result: crash (tho' not repro). here's the linux talkback info: nsBrowserInstance::ReinitializeContentVariables() nsBrowserInstance::GetContentAreaDocShell() nsBrowserInstance::LoadUrl() XPTC_InvokeByIndex() nsXPCWrappedNativeClass::CallWrappedMethod() WrappedNative_CallMethod() libmozjs.so + 0x2ac4f (0x40117c4f) libmozjs.so + 0x31562 (0x4011e562) libmozjs.so + 0x2ac9d (0x40117c9d) libmozjs.so + 0x2ae90 (0x40117e90) libmozjs.so + 0x11d7f (0x400fed7f) nsJSContext::CallEventHandler() nsJSEventListener::HandleEvent() nsEventListenerManager::HandleEventSubType() nsEventListenerManager::HandleEvent() nsXULElement::HandleDOMEvent() nsXULKeyListenerImpl::HandleEventUsingKeyset() nsXULKeyListenerImpl::LocateAndExecuteKeyBinding() nsXULKeyListenerImpl::DoKey() nsXULKeyListenerImpl::KeyPress() nsEventListenerManager::HandleEvent() nsXULDocument::HandleDOMEvent() nsXULElement::HandleDOMEvent() nsXULElement::HandleDOMEvent() nsXULElement::HandleDOMEvent() nsXULElement::HandleDOMEvent() nsXULElement::HandleDOMEvent() nsXULElement::HandleDOMEvent() nsGenericElement::HandleDOMEvent() nsHTMLInputElement::HandleDOMEvent() PresShell::HandleEventInternal() PresShell::HandleEvent() nsView::HandleEvent() nsViewManager2::DispatchEvent() HandleEvent() nsWidget::DispatchEvent() nsWidget::DispatchWindowEvent() nsWidget::OnInput() handle_key_press_event() dispatch_superwin_event() handle_gdk_event() libgdk-1.2.so.0 + 0x174db (0x407374db) libglib-1.2.so.0 + 0x10186 (0x40767186) libglib-1.2.so.0 + 0x10751 (0x40767751) libglib-1.2.so.0 + 0x10804 (0x40767804) nsAppShell::DispatchNativeEvent() nsXULWindow::ShowModal() nsWebShellWindow::ShowModal() nsChromeTreeOwner::ShowModal() GlobalWindowImpl::OpenInternal() GlobalWindowImpl::OpenDialog() WindowOpenDialog() libmozjs.so + 0x2ac4f (0x40117c4f) libmozjs.so + 0x31562 (0x4011e562) libmozjs.so + 0x2ac9d (0x40117c9d) libmozjs.so + 0x2ae90 (0x40117e90) libmozjs.so + 0x11d7f (0x400fed7f) nsJSContext::CallEventHandler() nsJSEventListener::HandleEvent() nsEventListenerManager::HandleEventSubType() nsEventListenerManager::HandleEvent() nsXULElement::HandleDOMEvent() PresShell::HandleDOMEventWithTarget() nsMenuFrame::Execute() nsMenuFrame::HandleEvent() PresShell::HandleEventInternal() PresShell::HandleEvent() nsView::HandleEvent() nsView::HandleEvent() nsView::HandleEvent() nsView::HandleEvent() nsViewManager2::DispatchEvent() HandleEvent() nsWidget::DispatchEvent() nsWidget::DispatchWindowEvent() nsWidget::DispatchMouseEvent() nsWidget::OnButtonReleaseSignal() nsWindow::HandleGDKEvent() dispatch_superwin_event() handle_gdk_event() libgdk-1.2.so.0 + 0x174db (0x407374db) libglib-1.2.so.0 + 0x10186 (0x40767186) libglib-1.2.so.0 + 0x10751 (0x40767751) libglib-1.2.so.0 + 0x108f1 (0x407678f1) libgtk-1.2.so.0 + 0x8c5b9 (0x4068c5b9) nsAppShell::Run() nsAppShellService::Run() main1() main() libc.so.6 + 0x189cb (0x4024d9cb) ...and here's the mac trace info: .__ptr_glue nsBrowserInstance::GetContentAreaDocShell() [nsBrowserInstance.cpp, line 419] nsBrowserInstance::LoadUrl() [nsBrowserInstance.cpp, line 570] CODE.10 XPTC_InvokeByIndex() [xptcinvoke_mac.cpp, line 129] nsXPCWrappedNativeClass::CallWrappedMethod() [xpcwrappednativeclass.cpp, line 909] WrappedNative_CallMethod() [xpcwrappednativejsops.cpp, line 224] js_Invoke() [jsinterp.c, line 714] js_Interpret() [jsinterp.c, line 2517] js_Invoke() [jsinterp.c, line 732] js_InternalInvoke() [jsinterp.c, line 804] JS_CallFunctionValue() [jsapi.c, line 3146] DOM_DLL + 0xe8a8 (0x0585d858) DOM_DLL + 0x6dd94 (0x058bcd44) nsEventListenerManager::HandleEventSubType() [nsEventListenerManager.cpp, line 788] nsEventListenerManager::HandleEvent() [nsEventListenerManager.cpp, line 1666]
dan and I are looking at it.
Assignee: asa → hyatt
--> danm
Assignee: hyatt → danm
From what I'm seeing, the reason for the crash is in nsBrowserInstance::ReinitializeContextVariables(), on the line 'mDOMWindow->Get_content(getter_AddRefs(content));'. The problem is that mDOMWindow is NULL, whoops.
warren- is this caused by your check in ? The first stack trace show OnDataAvailable on the stack.
add warren to the cc list since he change stream listener yesterday and stream listener is on the first stack
Conrad says this is his.
whoops, previous comment was for another bug. Never mind.
I have old source in my tree, the mDOMWindow is set by nsBrowserIntance::SetWebShellWindow when I open a new browser window. hyatt said nsBrowserIntance::SetWebShellWindow didn't get called. And he also see some JavaScript error there about window._content cannot be found
bluh, i fergot to add the kw's after that collision. doing so now...
Keywords: crash, nsbeta3
Hardware: Macintosh → All
have a fix. coding it now.
.
Assignee: danm → hyatt
Fixed.
Status: NEW → RESOLVED
Closed: 25 years ago
Resolution: --- → FIXED
I'm fairly certain this bug is no longer there. I'll mark verified. Cleaning up old resolved smoketest bugs.
Status: RESOLVED → VERIFIED
OS: All
Product: Browser → Seamonkey
You need to log in before you can comment on or make changes to this bug.