615998 - Firefox 4.0b8pre crash in [@ nsEventStateManager::GetContentState(nsIContent*, int) ]

Status: RESOLVED WORKSFORME

(Core :: DOM: UI Events & Focus Handling, defect)

Description

[Marcia Knous [:marcia]]

Low volume crash which started showing up using 2010112400 builds. http://tinyurl.com/3xg46f7 links to all the recent crashes.

Frame	Module	Signature [Expand]	Source
0	xul.dll	nsEventStateManager::GetContentState	content/events/src/nsEventStateManager.cpp:4189
1	xul.dll	nsNativeTheme::GetContentState	widget/src/xpwidgets/nsNativeTheme.cpp:95
2	xul.dll	nsNativeThemeWin::ClassicGetThemePartAndState	widget/src/windows/nsNativeThemeWin.cpp:2687
3	xul.dll	nsNativeThemeWin::ClassicGetWidgetBorder	widget/src/windows/nsNativeThemeWin.cpp:2396
4	xul.dll	nsNativeThemeWin::GetWidgetBorder	widget/src/windows/nsNativeThemeWin.cpp:1597
5	xul.dll	nsIFrame::GetUsedBorder	layout/generic/nsFrame.cpp:639
6	xul.dll	nsDisplayBorder::ComputeVisibility	layout/base/nsDisplayList.cpp:1096
7	xul.dll	nsDisplayList::ComputeVisibilityForSublist	layout/base/nsDisplayList.cpp:359
8	xul.dll	nsDisplayClip::ComputeVisibility	layout/base/nsDisplayList.cpp:1531
9	xul.dll	nsDisplayList::ComputeVisibilityForSublist	layout/base/nsDisplayList.cpp:359
10	xul.dll	nsLayoutUtils::PaintFrame	layout/base/nsLayoutUtils.cpp:1409
11	xul.dll	PresShell::Paint	layout/base/nsPresShell.cpp:6092
12	xul.dll	nsViewManager::RenderViews	view/src/nsViewManager.cpp:447
13	xul.dll	nsViewManager::Refresh	view/src/nsViewManager.cpp:413
14	xul.dll	nsViewManager::DispatchEvent	view/src/nsViewManager.cpp:912
15	xul.dll	AttachedHandleEvent	view/src/nsView.cpp:193
16	xul.dll	nsWindow::DispatchEvent	widget/src/windows/nsWindow.cpp:3562
17	xul.dll	nsWindow::DispatchWindowEvent	widget/src/windows/nsWindow.cpp:3590
18	xul.dll	nsWindow::OnPaint	widget/src/windows/nsWindowGfx.cpp:483
19	xul.dll	nsWindow::ProcessMessage	widget/src/windows/nsWindow.cpp:4811
20	xul.dll	nsWindow::WindowProcInternal	widget/src/windows/nsWindow.cpp:4399
21	MSCTF.dll	SysGetMsgProc	
22		@0xcefa9a8d	
23	xul.dll	nsWindow::DealWithPopups	widget/src/windows/nsWindow.cpp:8288
24	xul.dll	xul.dll@0x35b82d	
25	user32.dll	InternalCallWinProc	
26	xul.dll	nsWindow::DealWithPopups	widget/src/windows/nsWindow.cpp:8288
27	xul.dll	nsWindow::DealWithPopups	widget/src/windows/nsWindow.cpp:8288
28	user32.dll	UserCallWinProcCheckWow	
29	xul.dll	nsWindow::DealWithPopups	widget/src/windows/nsWindow.cpp:8288
30	MSCTF.dll	SysGetMsgProc	
31	user32.dll	NtUserGetClipboardFormatName	
32	user32.dll	UserCallWinProcCheckWow	
33	user32.dll	DispatchClientMessage	
34	xul.dll	nsWindow::DealWithPopups	widget/src/windows/nsWindow.cpp:8288
35	user32.dll	__fnHkINLPMSG	
36	user32.dll	__fnHkINLPMSG	
37	user32.dll	NtUserGetClipboardFormatName	
38	user32.dll	DispatchClientMessage	
39	user32.dll	__fnDWORD	
40	ntdll.dll	KiUserCallbackDispatcher	
41	xul.dll	nsWindow::DealWithPopups	widget/src/windows/nsWindow.cpp:8288
42	user32.dll	DispatchMessageW	
43	xul.dll	nsBaseAppShell::OnProcessNextEvent	widget/src/xpwidgets/nsBaseAppShell.cpp:315
44	xul.dll	nsTArray_base<nsTArrayDefaultAllocator>::ShiftData	obj-firefox/dist/include/nsTArray-inl.h:169
45	xul.dll	MessageLoop::DeferOrRunPendingTask	ipc/chromium/src/base/message_loop.cc:351
46	nspr4.dll	_MD_CURRENT_THREAD	nsprpub/pr/src/threads/combined/prulock.c:404
47	nspr4.dll	_MD_CURRENT_THREAD	nsprpub/pr/src/threads/combined/prulock.c:404
48	xul.dll	mozilla::ipc::MessagePump::Run	ipc/glue/MessagePump.cpp:110
49	xul.dll	MessageLoop::RunHandler	ipc/chromium/src/base/message_loop.cc:202
50	xul.dll	MessageLoop::Run	ipc/chromium/src/base/message_loop.cc:176
51	xul.dll	nsBaseAppShell::Run	widget/src/xpwidgets/nsBaseAppShell.cpp:192
52	xul.dll	xul.dll@0xb0fd33	
53	xul.dll	nsAppStartup::Run	toolkit/components/startup/src/nsAppStartup.cpp:191
54	xul.dll	XRE_main	toolkit/xre/nsAppRunner.cpp:3691
55	firefox.exe	wmain	toolkit/xre/nsWindowsWMain.cpp:128
56	firefox.exe	__tmainCRTStartup	obj-firefox/memory/jemalloc/crtsrc/crtexe.c:591
57	kernel32.dll	BaseProcessStart

Comment 1

[Olli Pettay [:smaug][[e-mail]]]

Mounir, seems like you touched the code recently.

Comment 2

[Olli Pettay [:smaug][[e-mail]]]

...But this could be totally unrelated to those changes.

Comment 3

[Mounir Lamouri (:mounir)]

I doubt this is linked to my change which is changing PRInt32 to nsEventStates.
Could esm be null here?

Comment 4

[Marcia Knous [:marcia]]

http://tinyurl.com/2ddk7bd indicates about 46 crashes in the last week, so not terribly high volume.

Comment 5

[Wayne Mery (:wsmwk)]

all crashes with nsEventStateManager::GetContentState(nsIContent*, int) are version 3.x and 4.x.
no crashes for current versions for signatures containing nsEventStateManager::GetContentState