678888 - Crash @ nsWindow::DispatchMouseEvent

Status: RESOLVED WORKSFORME

(Core :: Widget: Win32, defect, P5)

Description

[Patrick Huy]

User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:6.0) Gecko/20100101 Firefox/6.0
Build ID: 20110811165603

Steps to reproduce:

My Firefox frequently crashes with crash reports similar to this: https://crash-stats.mozilla.com/report/index/bp-2f229321-7989-40af-a1df-f251a2110814#modules

Looking at my crash stats my (Beta Channel) Installation has crashed with this trace 8 times within the last 30 days. I consider that amount quite high.

Unfortunatly I can provide absolutely no information what causes the crash as I have not been able to reliably reproduce it. It seems to happen upon mouse interaction with page content.

If it is of any matter to this Issue: I'm using a Logitech MX Revolution Mouse with the action "Ctrl+Tab" and "Ctrl+Shift+Tab" mapped to the thumb wheel, the main mouse wheel is in free spin mode and I play with it a lot (scrolling the pages). I however have no idea if either of that is related to the issue at hand in any way.


Actual results:

Firefox Crashes


Expected results:

Firefox should not Crash.

Comment 1

[Tim (fmdeveloper)]

Does the issue still occur if you start Firefox in Safe Mode? http://support.mozilla.com/en-US/kb/Safe+Mode

How about with a new, empty profile? http://support.mozilla.com/en-US/kb/Basic%20Troubleshooting#w_8-make-a-new-profile

Comment 2

[Patrick Huy]

As noted I have no way to reproduce this in any reliable way. As a general rule of thumb I currently get one crash with this signature per week, I would not want to run Firefox without addons for a unspecified amount of time.

I will try and create a new profile, but once again I am not willing to use Firefox without addons for an extended amount of time so I will install a similar set of addons in the new profile.

Comment 3

[Marcia Knous [:marcia]]

Confirming based on the presence of crashes in crash stats: https://crash-stats.mozilla.com/report/list?signature=nsWindow::DispatchMouseEvent%28unsigned%20int,%20unsigned%20int,%20long,%20int,%20short,%20unsigned%20short%29.

One comment mentions a right click causing the crash.

Comment 4

[Patrick Huy]

Attachment: Sample html page which causes the crash

One of the comments of crash reports with this signature reads
"Följande kod kraschade FireFox: <select onmouseout="this.blur()"> <option value="test">test</option> </select> När man klickar på Select-elementet och sedan hovrar över alternativen kraschar FireFox //AFSA-teamet"
While I don't understand the language I attached a html page with the comment pasted into it. When clicking the dropdown then hovering the dropdownitem I can make my Firefox (now 7 Beta) crash 95% of the time with this testcase. This also happens with a clean profile and in safe mode.

I hope that helps.

Comment 5

[Tim (fmdeveloper)]

Unable to reproduce on Mozilla/5.0 (Windows NT 5.1; rv:9.0a1) Gecko/20110822 Firefox/9.0a1 ID:20110822111311

Does the issue occur with the latest nightly? http://nightly.mozilla.org/

Comment 6

[Patrick Huy]

Yes it does.
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:9.0a1) Gecko/20110822 Firefox/9.0a1

For me it crashes with the attached testcase on a fresh nightly install and a clean profile (installed, created profile, opened testcase, opened combobox, hovered combobox item, crash)

Crash report in 9.0a1 (from me): https://crash-stats.mozilla.com/report/index/bp-99f5306c-bd52-4164-93bf-4cfc32110822
The crash report shows that I have one Add-on {972ce4c6-7e08-4474-a285-3208198ce6fd}, I however did not install any and the Addon manager does not show any.

Comment 7

[Patrick Huy]

I can also verify at work with a very different Hardware/Software setup: https://crash-stats.mozilla.com/report/index/1b35f606-eb87-452c-80f6-b248e2110829

At work I needed > 6 tries hovering the entry to reproduce the crash. Once again Safe Mode does not seem to make a difference.

Comment 8

[Tim (fmdeveloper)]

Patrick -> Any recent crashes with Firefox 8? Can you provide some updated crash-ids?

Comment 9

[Patrick Huy]

Sure. At work (with Firefox 8) I haven't encountered the problem naturally lately, I can however reproduce it with the attached testcase.
It took me about 40 tries and some wild clicking to do it with extensions enabled: https://crash-stats.mozilla.com/report/index/bp-a565f203-ab0b-404a-a61e-ba4a72111205
And 100+ in safe mode, I'm however unsure if it's related to the extensions, to the fact that I had Firefox running for only a short time or that it was purely a coincidence. https://crash-stats.mozilla.com/report/index/bp-fd47e73f-307e-4dc6-b184-e40832111205

At home (with Firefox 9 beta) I have occasionally hit the crash while browsing normally (a few times with facebook I believe). I can provide some crash-ids for 9 beta when I get home if that helps.

Comment 10

[JFGAGNON]

Just mailed to Tim a copy of my html page which crash ff 7.0.1 and 8.0.1.

Comment 11

[Tim (fmdeveloper)]

Through email discussion we found the crash is caused by forcing the non-compatible Google Toolbar to run on Firefox.

I experienced no crash with the sample page provided.

Comment 12

[Wayne Mery (:wsmwk)]

(In reply to Tim (fmdeveloper) from comment #11)
> Through email discussion we found the crash is caused by forcing the
> non-compatible Google Toolbar to run on Firefox.

are current crashes the same?
bp-bbd4adb2-1965-4978-87ab-3a2662121019 (thunderbird)
bp-782d7b76-1e89-4bb8-bf64-acfae2121006 (has reporter email) FF15
bp-e4b105eb-9bd7-46c5-bb0b-eb8002121020 (has reporter email) FF16


testcase doesn't crash for me using 17.0a2 (2012-10-08), but no toolbar installed.

Comment 13

[Wayne Mery (:wsmwk)]

http://hg.mozilla.org/releases/mozilla-release/annotate/e2f9a0ed50bc/widget/windows/nsWindow.cpp#l4122

hg@1 		4115  else if (aEventType == NS_MOUSE_MOVE && !insideMovementThreshold) {
jmathies@29835 	4116    sLastClickCount = 0;
hg@1 		4117  }
darkdh@273625 	4118  else if (aEventType == NS_MOUSE_EXIT_WIDGET) {
masayuki@164386 4119   event.exit = IsTopLevelMouseExit(mWnd) ?
masayuki@164386 4120                 WidgetMouseEvent::eTopLevel : WidgetMouseEvent::eChild;
reed@12976 	4121 }
jmathies@29835 	4122 event.clickCount = sLastClickCount;

Comment 14

[Wayne Mery (:wsmwk)]

(In reply to Tim (fmdeveloper) from comment #11)

Through email discussion we found the crash is caused by forcing the
non-compatible Google Toolbar to run on Firefox.

Not much going on in crash-stats.
With the google toobar discontinued, is there any reason to believe this issue still exists?

Can anyone still reproduce?

Comment 15

[BugBot [:suhaib / :marco/ :calixte]]

Bugbug thinks this bug is a regression, but please revert this change in case of error.

Comment 16

[Wayne Mery (:wsmwk)]

Not a regression.
I can't make it crash on Windows 10 or Mac