63286 - Listening to DOMAttrChange on all menus causes crash

Status: VERIFIED FIXED

(Core :: DOM: UI Events & Focus Handling, defect, P2)

Description

[Aaron Leventhal]

If you try to add a simple attribute change mutation event listener to all menus
Mozilla crashes with the message /home/moz/mozilla/dist/bin/run-mozilla.sh: line
72:  7531 Segmentation fault      $prog ${1+"$@"}
Debugging with gdb changes the crash message to "Exited normally" so you can't
trace where there error came from.
The crash occurs sometime after the event handler is called the first time, but
before any user input is allowed.

Here's a simple test that reproduces the results:
In navigator.js add these lines to the end of Startup()
  var menunodes=document.getElementsByTagName("menu");
  for (var count=0; count<menunodes.length; count++)
     menunodes[count].addEventListener("DOMAttrModified", handleattributechange,
true);

Then create this function in the same file:
function handleattributechange(evt)
{
  dump("**>> menu changed!!!\n");
}

Also note that the special mutation event properties are not set for the evt
parameter given to the handler.

Comment 1

[Peter Trudelle]

->moz0.8/p2

Comment 2

[Hixie (not reading bugmail)]

Reassigning QA Contact for all open and unverified bugs previously under Lorca's
care to Gerardo as per phone conversation this morning.

Comment 3

[Peter Trudelle]

->moz0.9

Comment 4

[Peter Trudelle]

should no longer be a blocker, ->future

Comment 5

[David Hyatt]

Fixed.

Comment 6

[Madhur Bhatia]

QA contact updated

Comment 7

[jerone]

verified on build 2001-07-24-06-trunk