[Mono-bugs] [Bug 378902] New: Poker - crashes with js alerts

[bugzilla_noreply at novell.com]

https://bugzilla.novell.com/show_bug.cgi?id=378902


           Summary: Poker - crashes with js alerts
           Product: Moonlight
           Version: 1.0.0
          Platform: Other
        OS/Version: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: engine
        AssignedTo: mono-bugs at lists.ximian.com
        ReportedBy: rkvinge at novell.com
         QAContact: mono-bugs at lists.ximian.com
          Found By: ---


Steps to reproduce:
 - http://home.people.net.au/~chriso/poker/poker.php
 - short audio tune plays
 - game is enabled
 - click on the up arrow to increase your bid
 - click on the down arrow to decrease your bid until the bid is 0
 - A js alert now shows: "No Bet", click OK, and then it crashes:

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0xb6f626d0 (LWP 904)]
0xb20b899a in EventObject::GetType (this=0x9776980) at
./src/dependencyobject.h:120
120                     return Type::Find (GetObjectType ());
(gdb) bt
#0  0xb20b899a in EventObject::GetType (this=0x9776980) at
./src/dependencyobject.h:120
#1  0xb1af3c0a in EventObject::Emit (this=0x9776980, event_id=4,
calldata=0x9c0bba0) at dependencyobject.cpp:373
#2  0xb1b4d2a8 in UIElement::EmitMouseLeftButtonUp (this=0x9776980,
event=0x89c1068) at uielement.cpp:421
#3  0xb1b2cda8 in emit_MouseLeftButtonUp (element=0x9776980, event=0x89c1068)
at runtime.cpp:1178
#4  0xb1b2ccc2 in Surface::EmitEventOnList (this=0x99af900, emitter=0xb1b2cd84
<emit_MouseLeftButtonUp>, list=0x92c4468, event=0x89c1068, end_idx=2) at
runtime.cpp:1283
#5  0xb1b2d387 in Surface::HandleMouseEvent (this=0x99af900, emitter=0xb1b2cd84
<emit_MouseLeftButtonUp>, emit_leave=true, emit_enter=true, force_emit=true,
event=0x89c1068) at runtime.cpp:1431
#6  0xb1b2f182 in Surface::button_release_callback (widget=0x89c1248,
button=0x89c11f8, data=0x99af900) at runtime.cpp:1476
#7  0xb7b1a8a4 in ?? () from /usr/lib/libgtk-x11-2.0.so.0
#8  0x089c1248 in ?? ()
#9  0x089c11f8 in ?? ()
#10 0x099af900 in ?? ()
#11 0xb784fff4 in ?? () from /usr/lib/libgobject-2.0.so.0
#12 0xb7b1a840 in ?? () from /usr/lib/libgtk-x11-2.0.so.0
#13 0x09b45a10 in ?? ()
#14 0xbf967bd8 in ?? ()
#15 0xb781f919 in g_closure_invoke () from /usr/lib/libgobject-2.0.so.0
Backtrace stopped: frame did not save the PC
(gdb) up
#1  0xb1af3c0a in EventObject::Emit (this=0x9776980, event_id=4,
calldata=0x9c0bba0) at dependencyobject.cpp:373
373             if (GetType()->GetEventCount() <= 0) {
(gdb) print *this
$1 = {_vptr.EventObject = 0x0, static objects_created = 1451, static
objects_destroyed = 1199, static objects_alive = 0x9ac6ea0, id = 33, weak_refs
= 0x9bbd090, static DestroyedEvent = 0, surface = 0x9a1ac18,
  refcount = 0, events = 0x0}
(gdb)


-- 
Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.
You are the assignee for the bug.