Some Eclipse Foundation services are deprecated, or will be soon. Please ensure you've read this important communication.

Bug 332243

Summary: IE6 & 8 crashing on XP with perspective switch
Product: [RT] RAP Reporter: Chris Fairhall <chris>
Component: RWTAssignee: Project Inbox <rap-inbox>
Status: RESOLVED FIXED QA Contact:
Severity: normal    
Priority: P3 Keywords: needinfo
Version: 1.4   
Target Milestone: 1.5 M4   
Hardware: PC   
OS: Windows XP   
Whiteboard:
Attachments:
Description Flags
rap project to reproduce bug none

Description Chris Fairhall CLA 2010-12-09 14:40:26 EST 
Build Identifier: 20100917-0705

IE6 and 8 running on XP crash when the perspective is switched from one hiding the editorarea to one showing the editor area in the same request as opening an editor that contains an image. Only happens on the 2nd or subsequent editor being opened.

Two workarounds have been found
1: Tell IE8 to render in "Standards Mode" - doesn't stop IE6 crashing
2: Switch perspecitves first then use a display.timerExec() and the UICallback mechanism to open the editor in a second http request. Works 99% of the time. if timerExec is called with 0 or 1 as the time argument, sometimes it is executed in the same request, which crashes IE. I think it happens if some asyncExec's are called after the timerExec that cause the even loop to spin and the timers to be run. Also has side effect of a noticable delay between the perspective switch and the editor opening.


Reproducible: Always

Steps to Reproduce:
1. Run attached code as rab application. Open in IE using servlet name b2
3. Click P2 Action
4. Click P1 Action
5. Click P2 Action
6. Watch IE crash with a memory access violation

Problem will not occur in IE8 using servlet b1. The difference being b1 contains a <meta http-equiv="X-UA-Compatable" content="IE=8" /> head tag that puts IE8 in standards mode, using the new Javascript engine. Without this it defaults back to IE5/6's javascript engine.
Comment 1 Chris Fairhall CLA 2010-12-09 14:41:21 EST 
Created attachment 184891 [details]
rap project to reproduce bug
Comment 2 Chris Fairhall CLA 2010-12-09 14:43:25 EST 
I would have marked this critical as but I have successfully used workarounds.

Doesn't crash Firefox.

The dialog the pops up on the page as its loading is showing the IE "documentMode"
If it shows 8, no crash. If it shows 5, crash.
Comment 3 Ivan Furnadjiev CLA 2010-12-10 03:43:06 EST 
Hi Chris, I've tested your snippet under Windows 7 (IE8) and Windows XP SP3 (IE6) and there are no crashes at all with current RAP version from CVS HEAD. IE8 under Windows 7 shows "5" in the popup, but does not crash after P2 - P1 - P2. IE6 under Windows XP SP3 shows "undefined" in the popup and does not crash too. Do I miss something? How to provoke the crash?
Comment 4 Chris Fairhall CLA 2010-12-10 14:07:28 EST 
I've only tried this on 1.3.0 and 1.3.1
Comment 5 Chris Fairhall CLA 2010-12-10 14:44:27 EST 
Tested on 1.4.0 M3, still crashing IE8 on WinXP SP3.
Doesn't crash IE8 on Windows 7
Comment 6 Ivan Furnadjiev CLA 2010-12-13 03:04:40 EST 
For me, the problem is somewhere in your Win XP environment. I'm still unable to reproduce the crash.
Comment 7 Chris Fairhall CLA 2010-12-13 14:43:50 EST 
(In reply to comment #6)
> For me, the problem is somewhere in your Win XP environment. I'm still unable
> to reproduce the crash.

I thought that after your first comment, as I had only tested it at my work place which is windows xp pro with IE6, recently upgraded to IE8 with coprorate antivirus software etc.

However, I tried it on an old laptop at home with xp home and IE8 and I got the same crashing. My Windows 7 pc doesn't crash
Comment 8 Ivan Furnadjiev CLA 2010-12-14 04:15:44 EST 
OK... Just did a clean install of Windows XP SP3 in a VirtualBox and upgraded the IE to version 8... and your snippet crashes IE8 with RAP from CVS HEAD :-). The error is:
"Faulting application iexplore.exe, version 8.0.6001.18702, faulting module dxtrans.dll, version 8.0.6001.18702, fault address 0x00003076." There are a lot of reports in the web related to crash in DirectX module dxtrans.dll (including some other javascript frameworks as jquery). Updating DirectX to the latest version did not fix the problem. Debugging is almost impossible as there are no javascript errors - just crash.
Comment 9 Ivan Furnadjiev CLA 2011-01-31 07:06:58 EST 
Installing all available updates (KB981332, KB976662 and Security Update for Jscript 5.8 for Windows XP (KB971961)) after the IE upgrade didn't help.
Comment 10 Chris Fairhall CLA 2011-12-28 19:09:49 EST 
Can't seem to reproduce with 1.5 nightly
Comment 11 Ivan Furnadjiev CLA 2011-12-29 02:39:51 EST 
(In reply to comment #10)
> Can't seem to reproduce with 1.5 nightly
I will close it as fixed in this case.
Comment 12 Ivan Furnadjiev CLA 2011-12-29 05:25:55 EST 
Just for the record - probably fixed by the recent changes related to IE rendering (bug 270397) and some bugfixes related to modifying of invisible divs.