80940 - M09 topcrash [@ nsPopupSetFrame::MarkAsGenerated()]

Status: VERIFIED DUPLICATE of bug 77125

(SeaMonkey :: Bookmarks & History, defect, P2)

Description

[greer]

This M09 topcrasher does not appear to be happening in the Trunk but is turning 
up frequently in the M09 reports.

Here are some comments and a stack trace from the May 15th report:

(30378649) Comments: i was in bookmark manager when i click on folder
(30358805) Comments: Edited bookmarks.New folder and tried to rename it by 
clicking on its node in the tree
(30290666) Comments: Right clicked on an entry in "Manage Bookmarks".
(30273854) Comments: renaming a newly created folder in the bookmark manager
(30265234) Comments: i was moving to bookmarks into a new folder i had jus 
created
(30259277) Comments: Tried to delete a bookmark from Personal Toolbar Folder 
without going into the Manage bookmarks thingie.
(30200019) Comments: Managing bookmarks by cutting and pasting bookmarks onto 
folders.
(30171627) Comments: Trying to manage bookmarks.  Right-clicked several times on 
a new folder.
(30168256) Comments: had just selected a bookmark folder (2 or 3 branches deep) 
and had right-clicked on it to create a new sub-folder
     (30139080) Comments: Editing bookmarks via the bookmark editor

nsPopupSetFrame::MarkAsGenerated()
         nsPopupSetFrame::CreatePopup()
         nsPopupSetBoxObject::CreatePopup()
         XULPopupListenerImpl::LaunchPopup()
         XULPopupListenerImpl::LaunchPopup()
         XULPopupListenerImpl::PreLaunchPopup()
         XULPopupListenerImpl::ContextMenu()
         nsEventListenerManager::HandleEvent()
         nsXULElement::HandleDOMEvent()
         nsXULElement::HandleDOMEvent()
         nsGenericElement::HandleDOMEvent()
         nsHTMLInputElement::HandleDOMEvent()
         nsGenericElement::HandleDOMEvent()
         nsGenericDOMDataNode::HandleDOMEvent()
         nsTextNode::HandleDOMEvent()
         PresShell::HandleEventInternal()
         PresShell::HandleEvent()
         nsView::HandleEvent()
         nsView::HandleEvent()
         nsView::HandleEvent()
         nsView::HandleEvent()
         nsView::HandleEvent()
         nsViewManager::DispatchEvent()
         HandleEvent()
         nsWidget::DispatchEvent()
         nsWidget::DispatchWindowEvent()
         nsWidget::DispatchMouseEvent()
         nsWidget::OnButtonPressSignal()
         nsWindow::HandleGDKEvent()
         dispatch_superwin_event()
         handle_gdk_event()
         libgdk-1.2.so.0 + 0x1753b (0x406cf53b)
         libglib-1.2.so.0 + 0x10186 (0x406fc186)
         libglib-1.2.so.0 + 0x10751 (0x406fc751)
         libglib-1.2.so.0 + 0x108f1 (0x406fc8f1)
         libgtk-1.2.so.0 + 0x8c7b9 (0x406247b9)
         nsAppShell::Run()
         nsAppShellService::Run()
         main1()
         main()
         libc.so.6 + 0x189cb (0x401e99cb

Comment 1

[greer]

Adding crash and topcrash keywords. Also qawanted until we get repro steps.

Comment 2

[Viswanath Ramachandran]

sounds like a XPToolkit issue, sending to peter for triage. Since a topcrash, is 
this a beta stopper. 

Comment 3

[Peter Trudelle]

We have no steps to reproduce, and no reports of it happening in trunk builds? 
Not a beta stopper candidate yet. Need reproducible case in recent build.  cc aegis.

Comment 4

[Peter Trudelle]

->pink, cc hyatt

Comment 5

[Ben Goodger (use ben at mozilla dot org for email)]

Steps to reproduce:

1) Open Navigator
2) Right click on a personal toolbar bookmark
3) Choose "Rename" from the context menu
(An inline edit field will appear)
4) right click on the edit field (theoretically this should invoke context menu 
for an edit field)
5) Crash.

crash in nsPopupSetFrame::MarkAsGenerated is because nsPopupSetFrame's mContent 
member is null. I can look at this but would need to talk to pink anyway for 
some clues. 

Interesting circumstances:
- input field is an *anonymous* XUL textbox which itself has an anonymous 
popupset with anonymous popup. 

Comment 6

[Peter Trudelle]

targetting 0.9.1/p2/critical

Comment 7

[Mike Pinkerton (not reading bugmail)]

*** This bug has been marked as a duplicate of 77125 ***

Comment 8

[Chad Austin]

verified dups