Crash @ nsWindow::DispatchMouseEvent




8 years ago
3 years ago


(Reporter: frz, Unassigned)


({crash, testcase})

8 Branch
Windows 7
crash, testcase

Firefox Tracking Flags

(Not tracked)


(Whiteboard: [tbird crash][rare][tpi:+], crash signature)


(1 attachment)



8 years ago
User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:6.0) Gecko/20100101 Firefox/6.0
Build ID: 20110811165603

Steps to reproduce:

My Firefox frequently crashes with crash reports similar to this:

Looking at my crash stats my (Beta Channel) Installation has crashed with this trace 8 times within the last 30 days. I consider that amount quite high.

Unfortunatly I can provide absolutely no information what causes the crash as I have not been able to reliably reproduce it. It seems to happen upon mouse interaction with page content.

If it is of any matter to this Issue: I'm using a Logitech MX Revolution Mouse with the action "Ctrl+Tab" and "Ctrl+Shift+Tab" mapped to the thumb wheel, the main mouse wheel is in free spin mode and I play with it a lot (scrolling the pages). I however have no idea if either of that is related to the issue at hand in any way.

Actual results:

Firefox Crashes

Expected results:

Firefox should not Crash.

Comment 1

8 years ago
Does the issue still occur if you start Firefox in Safe Mode?

How about with a new, empty profile?
Severity: normal → critical
Crash Signature: [@ nsWindow::DispatchMouseEvent(unsigned int, unsigned int, long, int, short, unsigned short) ]

Comment 2

8 years ago
As noted I have no way to reproduce this in any reliable way. As a general rule of thumb I currently get one crash with this signature per week, I would not want to run Firefox without addons for a unspecified amount of time.

I will try and create a new profile, but once again I am not willing to use Firefox without addons for an extended amount of time so I will install a similar set of addons in the new profile.
Confirming based on the presence of crashes in crash stats:,%20unsigned%20int,%20long,%20int,%20short,%20unsigned%20short%29.

One comment mentions a right click causing the crash.
Ever confirmed: true

Comment 4

8 years ago
Created attachment 554903 [details]
Sample html page which causes the crash

One of the comments of crash reports with this signature reads
"Följande kod kraschade FireFox: <select onmouseout="this.blur()"> <option value="test">test</option> </select> När man klickar på Select-elementet och sedan hovrar över alternativen kraschar FireFox //AFSA-teamet"
While I don't understand the language I attached a html page with the comment pasted into it. When clicking the dropdown then hovering the dropdownitem I can make my Firefox (now 7 Beta) crash 95% of the time with this testcase. This also happens with a clean profile and in safe mode.

I hope that helps.


8 years ago
Attachment #554903 - Attachment mime type: text/plain → text/html

Comment 5

8 years ago
Unable to reproduce on Mozilla/5.0 (Windows NT 5.1; rv:9.0a1) Gecko/20110822 Firefox/9.0a1 ID:20110822111311

Does the issue occur with the latest nightly?
Keywords: crash, crashreportid

Comment 6

8 years ago
Yes it does.
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:9.0a1) Gecko/20110822 Firefox/9.0a1

For me it crashes with the attached testcase on a fresh nightly install and a clean profile (installed, created profile, opened testcase, opened combobox, hovered combobox item, crash)

Crash report in 9.0a1 (from me):
The crash report shows that I have one Add-on {972ce4c6-7e08-4474-a285-3208198ce6fd}, I however did not install any and the Addon manager does not show any.

Comment 7

8 years ago
I can also verify at work with a very different Hardware/Software setup:

At work I needed > 6 tries hovering the entry to reproduce the crash. Once again Safe Mode does not seem to make a difference.

Comment 8

7 years ago
Patrick -> Any recent crashes with Firefox 8? Can you provide some updated crash-ids?

Comment 9

7 years ago
Sure. At work (with Firefox 8) I haven't encountered the problem naturally lately, I can however reproduce it with the attached testcase.
It took me about 40 tries and some wild clicking to do it with extensions enabled:
And 100+ in safe mode, I'm however unsure if it's related to the extensions, to the fact that I had Firefox running for only a short time or that it was purely a coincidence.

At home (with Firefox 9 beta) I have occasionally hit the crash while browsing normally (a few times with facebook I believe). I can provide some crash-ids for 9 beta when I get home if that helps.


7 years ago
Keywords: crashreportid
Version: 6 Branch → 8 Branch

Comment 10

7 years ago
Just mailed to Tim a copy of my html page which crash ff 7.0.1 and 8.0.1.
Through email discussion we found the crash is caused by forcing the non-compatible Google Toolbar to run on Firefox.

I experienced no crash with the sample page provided.
(In reply to Tim (fmdeveloper) from comment #11)
> Through email discussion we found the crash is caused by forcing the
> non-compatible Google Toolbar to run on Firefox.

are current crashes the same?
bp-bbd4adb2-1965-4978-87ab-3a2662121019 (thunderbird)
bp-782d7b76-1e89-4bb8-bf64-acfae2121006 (has reporter email) FF15
bp-e4b105eb-9bd7-46c5-bb0b-eb8002121020 (has reporter email) FF16

testcase doesn't crash for me using 17.0a2 (2012-10-08), but no toolbar installed.
Component: General → Widget: Win32
Keywords: testcase
Product: Firefox → Core
Whiteboard: [tbird crash]


3 years ago
Crash Signature: [@ nsWindow::DispatchMouseEvent(unsigned int, unsigned int, long, int, short, unsigned short) ] → [@ nsWindow::DispatchMouseEvent(unsigned int, unsigned int, long, int, short, unsigned short) ] [@ nsWindow::DispatchMouseEvent ]

hg@1 		4115  else if (aEventType == NS_MOUSE_MOVE && !insideMovementThreshold) {
jmathies@29835 	4116    sLastClickCount = 0;
hg@1 		4117  }
darkdh@273625 	4118  else if (aEventType == NS_MOUSE_EXIT_WIDGET) {
masayuki@164386 4119   event.exit = IsTopLevelMouseExit(mWnd) ?
masayuki@164386 4120                 WidgetMouseEvent::eTopLevel : WidgetMouseEvent::eChild;
reed@12976 	4121 }
jmathies@29835 	4122 event.clickCount = sLastClickCount;
Whiteboard: [tbird crash] → [tbird crash][rare]


3 years ago
Priority: -- → P5
Whiteboard: [tbird crash][rare] → [tbird crash][rare][tpi:+]
You need to log in before you can comment on or make changes to this bug.