68632 - Right-clicking on bookmark while in-line editing causes crash

Status: VERIFIED WORKSFORME

(SeaMonkey :: Bookmarks & History, defect, P1)

Description

[Thomas Kho]

I open the bookmark manager and double click on a folder/bookmark to edit its 
name. When I right click on this edit box, mozilla crashes. This is 2/11 build 
on win2k pro.

Comment 1

[Boris Zbarsky [:bzbarsky]]

Worksforme, 2001-02-11 build on Linux, but crashes for Fabian on win95.  setting
status to new, adding keyword, adding dependency.

Comment 2

[Gilles Durys]

Same on 2001021204 win98
See TB26216417G

Comment 3

[Stephen Walker]

nsPopupSetFrame::MarkAsGenerated(nsIContent * 0x03ac3990) line 517 + 25 bytes
nsPopupSetFrame::CreatePopup(nsPopupSetFrame * const 0x03aa1764, nsIContent * 
0x03ab82a0, nsIContent * 0x03ac3990, int 137, int 112, const nsString & {...}, 
const nsString & {...}, const nsString & {...}) line 472
nsPopupSetBoxObject::CreatePopup(nsPopupSetBoxObject * const 0x03ac2d08, 
nsIDOMElement * 0x03ab82a4, nsIDOMElement * 0x03ac3994, int 137, int 112, const 
unsigned short * 0x0012e454, const unsigned short * 0x0012e2d4, const unsigned 
short * 0x0012e224) line 139 + 109 bytes
XULPopupListenerImpl::LaunchPopup(int 137, int 112) line 798
XULPopupListenerImpl::LaunchPopup(nsIDOMEvent * 0x03ac2c94) line 645 + 19 bytes
XULPopupListenerImpl::PreLaunchPopup(nsIDOMEvent * 0x03ac2c94) line 353
XULPopupListenerImpl::MouseUp(nsIDOMEvent * 0x03ac2c94) line 257 + 15 bytes
nsEventListenerManager::HandleEvent(nsIPresContext * 0x0389ae68, nsEvent * 
0x0012f7f8, nsIDOMEvent * * 0x0012f424, nsIDOMEventTarget * 0x03ab82a8, 
unsigned int 2, nsEventStatus * 0x0012f6f0) line 910 + 23 bytes
nsXULElement::HandleDOMEvent(nsXULElement * const 0x03ab82a0, nsIPresContext * 
0x0389ae68, nsEvent * 0x0012f7f8, nsIDOMEvent * * 0x0012f424, unsigned int 2, 
nsEventStatus * 0x0012f6f0) line 3455
nsXULElement::HandleDOMEvent(nsXULElement * const 0x03ac3480, nsIPresContext * 
0x0389ae68, nsEvent * 0x0012f7f8, nsIDOMEvent * * 0x0012f424, unsigned int 2, 
nsEventStatus * 0x0012f6f0) line 3472 + 39 bytes
nsGenericElement::HandleDOMEvent(nsGenericElement * const 0x03ac3678, 
nsIPresContext * 0x0389ae68, nsEvent * 0x0012f7f8, nsIDOMEvent * * 0x0012f424, 
unsigned int 2, nsEventStatus * 0x0012f6f0) line 1445 + 39 bytes
nsHTMLInputElement::HandleDOMEvent(nsHTMLInputElement * const 0x03ac3678, 
nsIPresContext * 0x0389ae68, nsEvent * 0x0012f7f8, nsIDOMEvent * * 0x0012f424, 
unsigned int 2, nsEventStatus * 0x0012f6f0) line 1031 + 29 bytes
nsGenericElement::HandleDOMEvent(nsGenericElement * const 0x03ace2b8, 
nsIPresContext * 0x0389ae68, nsEvent * 0x0012f7f8, nsIDOMEvent * * 0x0012f424, 
unsigned int 1, nsEventStatus * 0x0012f6f0) line 1445 + 39 bytes
PresShell::HandleEventInternal(nsEvent * 0x0012f7f8, nsIView * 0x03ad1118, 
unsigned int 1, nsEventStatus * 0x0012f6f0) line 4907 + 41 bytes
PresShell::HandleEvent(PresShell * const 0x03868b44, nsIView * 0x03ad1118, 
nsGUIEvent * 0x0012f7f8, nsEventStatus * 0x0012f6f0, int 0, int & 1) line 4836 
+ 25 bytes
nsView::HandleEvent(nsView * const 0x03ad1118, nsGUIEvent * 0x0012f7f8, 
unsigned int 8, nsEventStatus * 0x0012f6f0, int 0, int & 1) line 372
nsView::HandleEvent(nsView * const 0x03ad0af8, nsGUIEvent * 0x0012f7f8, 
unsigned int 8, nsEventStatus * 0x0012f6f0, int 0, int & 1) line 345
nsView::HandleEvent(nsView * const 0x03a39cd0, nsGUIEvent * 0x0012f7f8, 
unsigned int 8, nsEventStatus * 0x0012f6f0, int 0, int & 1) line 345
nsView::HandleEvent(nsView * const 0x03a394c8, nsGUIEvent * 0x0012f7f8, 
unsigned int 8, nsEventStatus * 0x0012f6f0, int 0, int & 1) line 345
nsView::HandleEvent(nsView * const 0x03868640, nsGUIEvent * 0x0012f7f8, 
unsigned int 28, nsEventStatus * 0x0012f6f0, int 1, int & 1) line 345
nsViewManager2::DispatchEvent(nsViewManager2 * const 0x03868428, nsGUIEvent * 
0x0012f7f8, nsEventStatus * 0x0012f6f0) line 1424
HandleEvent(nsGUIEvent * 0x0012f7f8) line 68
nsWindow::DispatchEvent(nsWindow * const 0x03a39584, nsGUIEvent * 0x0012f7f8, 
nsEventStatus & nsEventStatus_eIgnore) line 687 + 10 bytes
nsWindow::DispatchWindowEvent(nsGUIEvent * 0x0012f7f8) line 708
nsWindow::DispatchMouseEvent(unsigned int 320, nsPoint * 0x00000000) line 3949 
+ 21 bytes
ChildWindow::DispatchMouseEvent(unsigned int 320, nsPoint * 0x00000000) line 
4159
nsWindow::ProcessMessage(unsigned int 517, unsigned int 0, long 3014789, long * 
0x0012fbc0) line 3014 + 24 bytes
nsWindow::WindowProc(HWND__ * 0x00710510, unsigned int 517, unsigned int 0, 
long 3014789) line 923 + 27 bytes
USER32! 77e148dc()
USER32! 77e14aa7()
USER32! 77e266fd()
nsAppShellService::Run(nsAppShellService * const 0x00b906b8) line 408
main1(int 2, char * * 0x004b77a0, nsISupports * 0x00000000) line 978 + 32 bytes
main(int 2, char * * 0x004b77a0) line 1272 + 37 bytes
mainCRTStartup() line 338 + 17 bytes
KERNEL32! 77e992a6()

Comment 4

[Keyser Sose]

*** Bug 68775 has been marked as a duplicate of this bug. ***

Comment 5

[Håkan Waara]

I believe this was fixed when hyatt fixed his XBL stuff. I remember that he had
*lots* of bugs like this!

Anyway, it worksforme and I think it's fixed. Does anyone wanna take a shot at
resolving this wfm? Reporter, are you still running into this with a recent nightly?

Comment 6

[Stephen Walker]

i'm still seeing this with the 2001030205 nightly on win2k.

Comment 7

[Gilles Durys]

wfm 2001030205 win98

Comment 8

[Claudius Gayle]

just to be careful, I'd like to see this wfm on Win2k with a current-ish build b4 I resolve it as WFM.

Comment 9

[Claudius Gayle]

couldn't get it to crash with 2001030608 Win2k or 2001030810 WIn98 builds.
Resolving WFM

Comment 10

[Stephen Walker]

reopening, i'm still seeing this crash with the 2001030804 nightly on win2k.

Steps to reproduce:
1. Ctrl+B to open bookmark manager
2. Select folder or bookmark
3. Click Rename on the bookmarks toolbar
4. Right-click in the textfield of the folder or bookmark that is to be renamed

Comment 11

[Paul Chen]

Updated summary to better reflect new test case, "Right-clicking on bookmark
while in-line editing causes crash." Marking nsbeta1+, p1, mozilla0.9

Comment 12

[Claudius Gayle]

Good catch, i must've missed something b/c those certainly weren't the repro steps i was trying.
I've reproduced this on Win98 builds as well now (linux remains fine)

Comment 13

[Ben Goodger (use ben at mozilla dot org for email)]

flavour of the month is an assertion saying 'popup is attached to an element 
that isn't XUL'

This is a textfield... some HTML document stuff? looks like the QI to 
nsIXULDocument is failing in the popup listener's LaunchPopup method. 

I've seen this happen most of the time, but not all of the time (sometimes the 
appropriate context menu is displayed

pink?

Comment 14

[Mike Pinkerton (not reading bugmail)]

i can't dupe this on mac 4/10/01 build. i always get the context menu. i'll try 
win32 tomorrow.

Comment 15

[Mike Pinkerton (not reading bugmail)]

pull from 4/10/01, wfm on mac and win32.

Comment 16

[Claudius Gayle]

VERIFY WFm on all 20010410 builds (linux, Win, Mac)