Closed Bug 555041 Opened 15 years ago Closed 12 years ago

[Mac] Crash in [@ XUL@0x5f7fdb ] while holding down Ctrl key and selecting a video with Flash beta

Categories

(Core :: Web Painting, defect)

Product:
Core
Component:
Web Painting
Platform:
x86
macOS
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED WORKSFORME

People

(Reporter: marcia, Unassigned)

References

(
URL
)

Details

(Keywords: crash)

Crash Data

Seen while running Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-US; rv:1.9.3a4pre) Gecko/20100325 Minefield/3.7a4pre STR: 1. Visit youtube.com and select a video to play 2. While watching the video, hold down the Ctrl key and repeatedly click on one of the "Related Video" on the right hand side. Eventually you will crash. Crash report: http://crash-stats.mozilla.com/report/index/bp-156e75d0-32bf-4119-9e2c-828e42100325 smichaud: Can you help me get this into the right component? Flash version is: Version: 10.1.51.95
I added the URL where I first experienced the crash.
URL: http://www.youtube.com/watch?v=ewufRw...
Not able to reproduce this on Windows, so adding [Mac] to the summary.
Summary: Crash in [@ XUL@0x5f7fdb ] while holding down Ctrl key and selecting a video → [Mac] Crash in [@ XUL@0x5f7fdb ] while holding down Ctrl key and selecting a video
From Marcia's breakpad report: Obj-C Exception data: NSInternalInconsistencyException: Invalid parameter not satisfying: NSEventMaskFromType(type) & (MouseMask|NSMouseMovedMask)
Here's another identical stack from almost the same time, presumably also yours: bp-e0114334-0df1-43bc-af77-1cb092100325 On the face of it, these look like a layout bug, so I'm provisionally calling it that. But there are a couple of things that are very puzzling: 1) The top two lines are just XUL@[address], and don't reference source code. 2) The bug report contains the following "Obj-C exception data": NSInternalInconsistencyException: Invalid parameter not satisfying: NSEventMaskFromType(type) & (MouseMask|NSMouseMovedMask) Which seems to indicate an error processing a mouse event. But there's no indication in the stacks that there's a mouse event being processed. I can't reproduce this bug from your STR (testing with today's Minefield nightly on OS X 10.6.2). But step 2 (from comment #0) is a little vague, and this may be why. You're also running a lot of extensions. Does running in Safe Mode make the problem go away?
Component: General → Layout: View Rendering
Product: Firefox → Core
QA Contact: general → layout.view-rendering
I will try next with a fresh profile and see if I can reproduce. I did notice when perusing crash stats that I have seen a few stacks that seen to have XUL at the top in the Mac crash stats - one example is https://crash-stats.mozilla.com/report/index/847e3f85-d301-4972-9c97-3e0382100324 although the stack is slightly different.
I was just able to repro with a fresh profile - http://crash-stats.mozilla.com/report/index/bp-b4758b60-4dec-4e34-aeaa-c38ee2100325 is the report. I know my STR are a bit vague. Sometimes I have to hold down the Ctrl Key and keep trying to select the Related Video. Each time that happens I get a context menu. If I do that enough times it eventually crashes. The first time I triggered the time in the crash it was as simple as holding the Ctrl key and then selecting the top video in the Related Videos list.
Some info from the console: 3/25/10 2:29:39 PM firefox-bin[621] *** Assertion failure in +[NSEvent mouseEventWithType:location:modifierFlags:timestamp:windowNumber:context:eventNumber:clickCount:pressure:], /SourceCache/AppKit/AppKit-1038.25/AppKit.subproj/NSEvent.m:477 3/25/10 2:29:39 PM firefox-bin[621] Mozilla has caught an Obj-C exception [NSInternalInconsistencyException: Invalid parameter not satisfying: NSEventMaskFromType(type) & (MouseMask|NSMouseMovedMask)] 3/25/10 2:29:39 PM [0x0-0x50050].org.mozilla.firefox 2010-03-25 14:29:39.007 firefox-bin[621:903] *** Assertion failure in +[NSEvent mouseEventWithType:location:modifierFlags:timestamp:windowNumber:context:eventNumber:clickCount:pressure:], /SourceCache/AppKit/AppKit-1038.25/AppKit.subproj/NSEvent.m:477 3/25/10 2:29:39 PM [0x0-0x50050].org.mozilla.firefox 2010-03-25 14:29:39.007 firefox-bin[621:903] Mozilla has caught an Obj-C exception [NSInternalInconsistencyException: Invalid parameter not satisfying: NSEventMaskFromType(type) & (MouseMask|NSMouseMovedMask)]
By "selecting the video" do you mean clicking on the video's "picture"?
Yes I click on the middle of the picture, repeatedly, often using brute force :) (In reply to comment #8) > By "selecting the video" do you mean clicking on the video's "picture"?
(In reply to comment #7) Interesting! We no longer crash on Objective-C exceptions, so "Mozilla has caught an Obj-C exception" just shows the browser logging the exception. This exception is presumably something that leads up to the crash -- not its direct cause. But you've provided additional information about the exception, not logged by the browser -- the assertion which shows that the exception happens during a call to [NSEvent mouseEventWithType:...]. I'll bet the call that triggers the error is from NS_NPAPI_ShowCocoaContextMenu() in layout/generic/nsPluginUtilsOSX.mm.
> Flash version is: Version: 10.1.51.95 And I'll bet this is the key. You appear to be running a Flash beta that supports the Cocoa event model. Most people (including me) run Flash v10.0 r42 (as provided by Apple), which uses the Carbon event model. That's probably why I can't (yet) reproduce your crashes.
I'll bet the exception is (indirectly) due to NS_NPAPI_ShowCocoaContextMenu(void* menu, nsIWidget* widget, NPCocoaEvent* event) being called with an 'event' that isn't a mouse event.
If my guesses are right, this is a plugins bug.
*Probably* a plugins bug :-)
Summary: [Mac] Crash in [@ XUL@0x5f7fdb ] while holding down Ctrl key and selecting a video → [Mac] Crash in [@ XUL@0x5f7fdb ] while holding down Ctrl key and selecting a video with Flash beta
To be clear we are talking about CTRL+Click to invoke the context menu? If so does this happen with right clicking too?
Is this only on Mindfield or can this repro on 3.6.x?
Charles: Will try to get you answers to Comments 15 and 16. Usually today's nightly Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-US; rv:1.9.3a4pre) Gecko/20100330 Minefield/3.7a4pre I have not yet been able to reproduce on my laptop but did file this from the Intel Mac lab machine so I will try there. My best recollection is that I could not reproduce this using 3.6.2, but I will double check that.
While trying to repo this bug I crashed in a different stack: https://bugzilla.mozilla.org/show_bug.cgi?id=556079 - and as Steven notes in that bug it may be the same bug.
This was a early beta of Flash Player 10.1. Please confirm if you can reproduce on Flash Player 10.1 RC7
Crash Signature: [@ XUL@0x5f7fdb ]
(In reply to Marcia Knous [:marcia] from comment #18) > While trying to repo this bug I crashed in a different stack: > https://bugzilla.mozilla.org/show_bug.cgi?id=556079 - and as Steven notes in > that bug it may be the same bug. Marcia, can you still reproduce this and bug 556079?
Flags: needinfo?(mozillamarcia.knous)
Resolving as WFM, this is an old bug and the signature no longer shows up.
Status: NEW → RESOLVED
Closed: 12 years ago
Flags: needinfo?(mozillamarcia.knous)
Resolution: --- → WORKSFORME
Component: Layout: View Rendering → Layout: Web Painting
You need to log in before you can comment on or make changes to this bug.