Comment #19 on issue 23869 by [email protected]: Renderer Crash In -  
WebPopupMenuImpl::KeyEvent(WebKit::WebKeyboardEvent const&)
http://code.google.com/p/chromium/issues/detail?id=23869

Here's the code that I think is triggering the crash, from
render_widget_host_view_mac.mm:

   // Display the menu.
   scoped_nsobject<WebMenuRunner> menu_runner;
   menu_runner.reset([[WebMenuRunner alloc] initWithItems:items]);

   [menu_runner runMenuInView:parent_view_
                   withBounds:position
                 initialIndex:selected_item];

   int window_num = [[parent_view_ window] windowNumber];
   NSEvent* event =
       webkit_glue::EventWithMenuAction([menu_runner menuItemWasChosen],
                                        window_num, item_height,
                                        [menu_runner indexOfSelectedItem],
                                        position, view_rect);

   if ([menu_runner menuItemWasChosen]) {
     // Simulate a menu selection event.
     const WebMouseEvent& mouse_event =
         WebInputEventFactory::mouseEvent(event, cocoa_view_);
     render_widget_host_->ForwardMouseEvent(mouse_event);
   } else {
     // Simulate a menu dismiss event.
     NativeWebKeyboardEvent keyboard_event(event);
     render_widget_host_->ForwardKeyboardEvent(keyboard_event);
   }

If the renderer navigated to another page while runMenuInView: is running a  
run
loop, the renderer is confused by the synthesized key/mouse event. I need  
to check
how the renderer deals with this in the internal popup case. Ideally, the  
renderer
could just ignore these input events.

--
You received this message because you are listed in the owner
or CC fields of this issue, or because you starred this issue.
You may adjust your issue notification preferences at:
http://code.google.com/hosting/settings

-- 
Automated mail from issue updates at http://crbug.com/
Subscription options: http://groups.google.com/group/chromium-bugs

Reply via email to