572599 - content/xbl/crashtests/336960-1.html crashes sometimes with bug 130078

Status: RESOLVED FIXED

(Core :: Web Painting, defect)

Description

[Timothy Nikkel (:tnikkel)]

content/xbl/crashtests/336960-1.html crashes sometimes with bug 130078 on Linux (perhaps elsewhere too). We get a mouse move over a popup widget (even though it has 0 width and height), PresShell::HandleEvent calls nsLayoutUtils::GetEventCoordinatesRelativeTo. It gets the view for the root frame of the root document. And for some reason when we crash that view does not have a widget and we crash. The views and frame trees look okay.

Comment 1

[Timothy Nikkel (:tnikkel)]

The problem is actually one test before: content/xbl/crashtests/336744-1.html

It opens up a popup, and then after the view gets unlinked there is an OS generated mouse leave events for the popup widget. We try to get the coordinates of that event relative to the widget of the root document root frame. The root document root frame is the root frame of the content document because its view was disconnected. It doesn't have a widget, and we crash because we assume it does.

Comment 2

[Timothy Nikkel (:tnikkel)]

Attachment: patch

Comment 3

[Timothy Nikkel (:tnikkel)]

http://hg.mozilla.org/mozilla-central/rev/5ca1e06cedf1