Closed Bug 83583 Opened 23 years ago Closed 23 years ago

Trunk & M091 crash [@ nsPopupSetFrame::ActivatePopup]

Categories

(Core :: XUL, defect)

x86
All
defect
Not set
normal

Tracking

()

VERIFIED FIXED

People

(Reporter: greer, Assigned: mikepinkerton)

References

()

Details

(Keywords: crash, topcrash)

Crash Data

The signature for this one is in layout, but user comments point to mail problems that are happening on windows and linux. (31125048) Comments: in mail program in MOZILLAdeleted TO address (31106036) Comments: I was composing an email (31092853) Comments: I was addressing an email using LDAP lookup I had entered 'tre' in the to: field and then deleted it after I did not find who I was looking for. When I had deleted all of the characters the app crashed. (31088943) Comments: Leaving the browser for another window. I hear that PopupSet is slated for elimination, but in the meantime, here's a stack trace: nsPopupSetFrame::ActivatePopup() nsPopupSetFrame::HidePopup() nsMenuPopupFrame::HideChain() nsMenuDismissalListener::Rollup() nsWidget::Destroy() nsWindow::Destroy() nsView::~nsView() nsView::Destroy() nsFrame::Destroy() nsContainerFrame::Destroy() nsBoxFrame::Destroy() nsMenuPopupFrame::Destroy() nsFrameList::DestroyFrames() nsPopupSetFrame::Destroy() nsFrameList::DestroyFrames() nsContainerFrame::Destroy() nsBoxFrame::Destroy() nsMenuFrame::Destroy() nsFrameList::DestroyFrame() nsBoxFrame::RemoveFrame() FrameManager::RemoveFrame() nsCSSFrameConstructor::ContentRemoved() StyleSetImpl::ContentRemoved() PresShell::ContentRemoved() nsXULDocument::ContentRemoved() nsXULElement::RemoveChildAt() nsXULElement::RemoveChild() XPTC_InvokeByIndex() XPCWrappedNative::CallMethod() XPC_WN_CallMethod() js_Invoke() js_Interpret() js_Invoke() js_InternalInvoke() JS_CallFunctionValue() nsJSContext::CallEventHandler() nsJSEventListener::HandleEvent() nsEventListenerManager::HandleEventSubType() nsEventListenerManager::HandleEvent() nsXULElement::HandleDOMEvent() nsXULElement::HandleDOMEvent() nsXULElement::HandleDOMEvent() nsGenericElement::HandleDOMEvent() nsHTMLInputElement::HandleDOMEvent() PresShell::HandleEventInternal() PresShell::HandleEvent() nsView::HandleEvent() nsView::HandleEvent() nsView::HandleEvent() nsViewManager::DispatchEvent() HandleEvent() nsWidget::DispatchEvent() nsWidget::DispatchWindowEvent() nsWidget::OnInput() handle_key_press_event() dispatch_superwin_event() handle_gdk_event() libgdk-1.2.so.0 + 0x1716b (0x4033d16b) libglib-1.2.so.0 + 0x10055 (0x4036d055) libglib-1.2.so.0 + 0x10659 (0x4036d659) libglib-1.2.so.0 + 0x107e8 (0x4036d7e8) libgtk-1.2.so.0 + 0x9165b (0x4028265b) nsAppShell::Run() nsAppShellService::Run() main1() main() libc.so.6 + 0x1c177 (0x404ae177)
+crash and topcrash keywords for tracking.
Keywords: crash, topcrash
This bug is a topcrash in M091 Here are some comments from crashes: (31172008) Comments: Mail Compose window: addressing a message in email (31166990) Comments: modifying address on a mail online composed while offline. seems related to lookup on LDAP (31157694) Comments: Editing an email. I finished editing and I "think" I pressed send (31125048) Comments: in mail program in MOZILLAdeleted TO address
Summary: Trunk crash [@ nsPopupSetFrame::ActivatePopup] → Trunk crash & M091 topcrash [@ nsPopupSetFrame::ActivatePopup]
->XPToolkit. Is this something wrong with popupset (like that it's trying to use a view in the process of being destroyed??) or is it related to bug 80203? (It's crashing dereferencing a pointer to a view that it just got from something in its child list of frames.)
Assignee: karnaze → trudelle
Component: Layout → XP Toolkit/Widgets
QA Contact: petersen → aegis
Talkback reports show this last occurring with build 2001060106 on the Trunk...and build 2001053109 on the M091 branch. I guess we should keep an eye out for this crash with the latest builds.
Summary: Trunk crash & M091 topcrash [@ nsPopupSetFrame::ActivatePopup] → Trunk & M091 crash [@ nsPopupSetFrame::ActivatePopup]
Looks (according to the talkback notes) like autocomplete stuff; CC hewitt.
->hyatt
Assignee: trudelle → hyatt
I think pink fixed this already. --> pink
Assignee: hyatt → pinkerton
yeah, i fixed this. are you still seeing it with current builds?
Status: NEW → RESOLVED
Closed: 23 years ago
Resolution: --- → FIXED
Talkback reports from 6/11 show no incidents in builds later than 6/2. Marking verified fixed.
Status: RESOLVED → VERIFIED
Crash Signature: [@ nsPopupSetFrame::ActivatePopup]
You need to log in before you can comment on or make changes to this bug.