662984 - Firefox crashes with X_ChangeWindowAttributes: BadPixmap on drag and drop

Status: RESOLVED INCOMPLETE

(Core :: Widget: Gtk, defect)

Description

[lameventanas]

User-Agent:       Mozilla/5.0 (X11; Linux i686; rv:2.0.1) Gecko/20100101 Firefox/4.0.1
Build Identifier: Mozilla/5.0 (X11; Linux i686; rv:2.0.1) Gecko/20100101 Firefox/4.0.1

Firefox crashes whenever I try to drag and drop any element of the page: text or pictures

Reproducible: Always

Steps to Reproduce:
1. Visit a website
2. Select any text
3. Drag it and drop it anywhere in the browser window

Actual Results:  
Crash

Expected Results:  
No crash

Comment 1

[Tyler Downer [He/Him]]

https://developer.mozilla.org/En/How_to_get_a_stacktrace_for_a_bug_report please give us a stacktrace. What website are you going to, and were are you dragging this text exactly?

Comment 2

[lameventanas]

Ok, maybe I was not clear enough.  I meant dragging ANYTHING produces the crash.
For example, dragging a tab to a different position crashes the beast.

Sorry but I can't produce a stack trace because everything in my system is built with -O2 -fomit-frame-pointer and then stripped.

By the way, this bug might be in a library (Eg: gtk), I have noticed it for many different versions of Firefox, at least since 3.x, but all this time I was too lazy to create a bugzilla account, as I have been disappointed with other projects treatment of bug reports in the past.

Comment 3

[Matthias Versen [:Matti]]

Well, we can't do anything without a stacktrace/crash ID. We can only wait if someone else comes up with a stacktrace ......

Could you try a binary Mozilla.org build and use the integrated crash reporter to generate a crash ID ?

Comment 4

[lameventanas]

By the way, I forgot to mention that starting in safe mode doesn't make any difference.
I downloaded the mozilla.org build, but I can't generate a stacktrace with this, and I don't get any crash reporter either.

But I do get this in standard error:

*** e = [Exception... "Component returned failure code: 0x80570016 (NS_ERROR_XPC_GS_RETURNED_FAILURE) [nsIJSCID.getService]"  nsresult: "0x80570016 (NS_ERROR_XPC_GS_RETURNED_FAILURE)"  location: "JS frame :: chrome://browser/content/utilityOverlay.js :: getShellService :: line 339"  data: no]                                                                                                                       
###!!! ABORT: X_ChangeWindowAttributes: BadPixmap (invalid Pixmap parameter); 4 requests ago: file nsX11ErrorHandler.cpp, line 203
###!!! ABORT: X_ChangeWindowAttributes: BadPixmap (invalid Pixmap parameter); 4 requests ago: file nsX11ErrorHandler.cpp, line 203
Aborted

Comment 5

[lameventanas]

After rebuilding firefox, here is the trace:

bash$ gdb /usr/lib/firefox/firefox-bin
GNU gdb (GDB) 7.2
Copyright (C) 2010 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "i686-pc-linux-gnu".
For bug reporting instructions, please see:
<http://www.gnu.org/software/gdb/bugs/>...
Reading symbols from /usr/lib/firefox/firefox-bin...done.
(gdb) run
Starting program: /usr/lib/firefox/firefox-bin
[Thread debugging using libthread_db enabled]
[New Thread 0xb4bffb70 (LWP 24827)]
[New Thread 0xb43feb70 (LWP 24828)]
[New Thread 0xb38ffb70 (LWP 24829)]
[New Thread 0xb30feb70 (LWP 24830)]
[New Thread 0xb28fdb70 (LWP 24831)]
[New Thread 0xb19f7b70 (LWP 24832)]
GConf Error: Failed to contact configuration server; some possible causes are that you need to enable TCP/IP networking for ORBit, or you have stale NFS locks due to a system crash. See http://projects.gnome.org/gconf/ for information. (Details -  1: Failed to get connection to session: Failed to connect to socket /tmp/dbus-iabT6OVjsi: Connection refused)
[New Thread 0xafd2ab70 (LWP 24833)]
[New Thread 0xaf1ffb70 (LWP 24834)]
[New Thread 0xadb9eb70 (LWP 24835)]
[New Thread 0xad39db70 (LWP 24836)]
[New Thread 0xacb9cb70 (LWP 24837)]
###!!! ABORT: X_ChangeWindowAttributes: BadPixmap (invalid Pixmap parameter); 4 requests ago: file nsX11ErrorHandler.cpp, line 203
###!!! ABORT: X_ChangeWindowAttributes: BadPixmap (invalid Pixmap parameter); 4 requests ago: file nsX11ErrorHandler.cpp, line 203

Program received signal SIGABRT, Aborted.
0xb7ffd424 in __kernel_vsyscall ()
(gdb) bt
#0  0xb7ffd424 in __kernel_vsyscall ()
#1  0xb55fc6a0 in raise () from /lib/libc.so.6
#2  0xb572cff4 in ?? () from /lib/libc.so.6
#3  0xb76d0e54 in Abort (
    aMsg=0xbfffd61c "###!!! ABORT: X_ChangeWindowAttributes: BadPixmap (invalid Pixmap parameter); 4 requests ago: file nsX11ErrorHandler.cpp, line 203") at nsDebugImpl.cpp:393
#4  0xb76d0d78 in NS_DebugBreak_P (aSeverity=3,
    aStr=0xadceec18 "X_ChangeWindowAttributes: BadPixmap (invalid Pixmap parameter); 4 requests ago", aExpr=0x0,
    aFile=0xb7b41886 "nsX11ErrorHandler.cpp", aLine=203) at nsDebugImpl.cpp:350
#5  0xb660e26a in X11Error (display=0xb4e3f000, event=0xbfffe350) at nsX11ErrorHandler.cpp:203
#6  0xb58b08bb in _XError () from /usr/lib/libX11.so.6
#7  0xadd04000 in ?? ()

Comment 6

[lameventanas]

After testing with the latest mayor release (firefox 5.0), the problem is still there.

Comment 7

[lameventanas]

I have found that building GTK without -fomit-frame-pointer prevents the crashes.

I tested GIMP using GTK built with -fomit-frame-pointer, and dragging layers doesn't crash the application, which was unexpected.

Comment 8

[gregounours]

I have the same problem. I am running 10.0.02 on Mac os X Snow Leopard.
Reproduction: Everytime I try to drag drop something (tab, address ...)
Remark: This is new I don'rt remember this happening in FF 8.

Comment 9

[Wayne Mery (:wsmwk)]

Can you still reproduce this?

Comment 10

[Phoenix]

Resolved per whiteboard