903570 - crash in nsEventTargetChainItem::HandleEventTargetChain

Status: RESOLVED FIXED

(Core :: DOM: Events, defect)

Description

[Scoobidiver (away)]

It first showed up in 26.0a1/20130809 and is currently #1 in this build without counting crash signatures from a single user. The regression window is:
http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=fd4cf30428b0&tochange=e33c2011643e
It might be a regression from bug 902481.

A comment says: "Moved a mouse cursor across a Gmail message."

Signature 	nsEventTargetChainItem::HandleEventTargetChain(nsEventChainPostVisitor&, nsDispatchingCallback*, ELMCreationDetector&, nsCxPusher*) More Reports Search
UUID 	8758d5c5-ef36-49df-ad8c-4acb82130809
Date Processed	2013-08-09 19:00:28.657037
Uptime	32
Last Crash	44 seconds before submission
Install Age 	10360 since version was first installed.
Install Time 	2013-08-09 16:07:59
Product 	Firefox
Version 	26.0a1
Build ID 	20130809030203
Release Channel 	nightly
OS 	Windows NT
OS Version 	6.1.7601 Service Pack 1
Build Architecture 	x86
Build Architecture Info 	GenuineIntel family 6 model 23 stepping 10 | 2
Crash Reason 	EXCEPTION_ACCESS_VIOLATION_EXEC
Crash Address 	0xffffffff8557f08b
App Notes 	
AdapterVendorID: 0x10de, AdapterDeviceID: 0x06e4, AdapterSubsysID: 00000000, AdapterDriverVersion: 9.18.13.1106
D2D? D2D+ DWrite? DWrite+ D3D10 Layers? D3D10 Layers+ 

Frame 	Module 	Signature 	Source
0 		@0x8557f08b 	
1 	xul.dll 	nsEventTargetChainItem::HandleEventTargetChain(nsEventChainPostVisitor &,nsDispatchingCallback *,ELMCreationDetector &,nsCxPusher *) 	content/events/src/nsEventDispatcher.cpp
2 	xul.dll 	nsEventDispatcher::Dispatch(nsISupports *,nsPresContext *,nsEvent *,nsIDOMEvent *,nsEventStatus *,nsDispatchingCallback *,nsCOMArray<mozilla::dom::EventTarget> *) 	content/events/src/nsEventDispatcher.cpp
3 	xul.dll 	nsEventStateManager::DispatchMouseEvent(nsGUIEvent *,unsigned int,nsIContent *,nsIContent *) 	content/events/src/nsEventStateManager.cpp
4 	xul.dll 	nsEventStateManager::NotifyMouseOver(nsGUIEvent *,nsIContent *) 	content/events/src/nsEventStateManager.cpp
5 	xul.dll 	nsEventStateManager::GenerateMouseEnterExit(nsGUIEvent *) 	content/events/src/nsEventStateManager.cpp
6 	xul.dll 	nsEventStateManager::PreHandleEvent(nsPresContext *,nsEvent *,nsIFrame *,nsEventStatus *) 	content/events/src/nsEventStateManager.cpp
7 	xul.dll 	PresShell::HandleEventInternal(nsEvent *,nsEventStatus *) 	layout/base/nsPresShell.cpp
8 	xul.dll 	PresShell::HandlePositionedEvent(nsIFrame *,nsGUIEvent *,nsEventStatus *) 	layout/base/nsPresShell.cpp
9 	xul.dll 	PresShell::HandleEvent(nsIFrame *,nsGUIEvent *,bool,nsEventStatus *) 	layout/base/nsPresShell.cpp
10 	xul.dll 	nsViewManager::DispatchEvent(nsGUIEvent *,nsView *,nsEventStatus *) 	view/src/nsViewManager.cpp
11 	xul.dll 	PresShell::DispatchSynthMouseMove(nsGUIEvent *,bool) 	layout/base/nsPresShell.cpp
12 	xul.dll 	PresShell::ProcessSynthMouseMoveEvent(bool) 	layout/base/nsPresShell.cpp
13 	xul.dll 	PresShell::nsSynthMouseMoveEvent::WillRefresh(mozilla::TimeStamp) 	layout/base/nsPresShell.h
14 	xul.dll 	nsRefreshDriver::Tick(__int64,mozilla::TimeStamp) 	layout/base/nsRefreshDriver.cpp
15 	xul.dll 	mozilla::RefreshDriverTimer::Tick() 	layout/base/nsRefreshDriver.cpp
16 	xul.dll 	nsTimerImpl::Fire() 	xpcom/threads/nsTimerImpl.cpp
17 	nss3.dll 	PR_IntervalNow 	nsprpub/pr/src/misc/prinrval.c
18 	xul.dll 	nsThread::ProcessNextEvent(bool,bool *) 	xpcom/threads/nsThread.cpp
19 	xul.dll 	NS_ProcessNextEvent(nsIThread *,bool) 	obj-firefox/xpcom/build/nsThreadUtils.cpp
20 	xul.dll 	mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate *) 	ipc/glue/MessagePump.cpp
21 	xul.dll 	MessageLoop::RunHandler() 	ipc/chromium/src/base/message_loop.cc
22 	xul.dll 	MessageLoop::Run() 	ipc/chromium/src/base/message_loop.cc
23 	xul.dll 	nsBaseAppShell::Run() 	widget/xpwidgets/nsBaseAppShell.cpp
24 	xul.dll 	nsAppShell::Run() 	widget/windows/nsAppShell.cpp
25 	xul.dll 	nsAppStartup::Run() 	toolkit/components/startup/nsAppStartup.cpp
26 	xul.dll 	XREMain::XRE_mainRun() 	toolkit/xre/nsAppRunner.cpp
27 	xul.dll 	XREMain::XRE_main(int,char * * const,nsXREAppData const *) 	toolkit/xre/nsAppRunner.cpp
28 	xul.dll 	XRE_main 	toolkit/xre/nsAppRunner.cpp
29 	firefox.exe 	do_main 	browser/app/nsBrowserApp.cpp

More reports at:
https://crash-stats.mozilla.com/report/list?product=Firefox&signature=nsEventTargetChainItem%3A%3AHandleEventTargetChain%28nsEventChainPostVisitor%26%2C+nsDispatchingCallback*%2C+ELMCreationDetector%26%2C+nsCxPusher*%29
https://crash-stats.mozilla.com/report/list?product=Firefox&signature=%400x0+|+nsEventTargetChainItem%3A%3AHandleEvent%28nsEventChainPostVisitor%26%2C+ELMCreationDetector%26%2C+nsCxPusher*%29

Comment 1

[Scoobidiver (away)]

Reports also at:
https://crash-stats.mozilla.com/report/list?product=Firefox&signature=nsEventTargetChainItem%3A%3AHandleEvent%28nsEventChainPostVisitor%26%2C+ELMCreationDetector%26%2C+nsCxPusher*%29
https://crash-stats.mozilla.com/report/list?product=Firefox&signature=nsEventTargetChainItem%3A%3APostHandleEvent%28nsEventChainPostVisitor%26%2C+nsCxPusher*%29

Comment 2

[Olli Pettay [:smaug][[e-mail]]]

Uh, probably bug 902481 indeed. I'll back it out tomorrow unless it hasn't been backed out before that.

Comment 3

[Olli Pettay [:smaug][[e-mail]]]

Just about to back out bug 902481

Comment 4

[Olli Pettay [:smaug][[e-mail]]]

Sorry.