[Bug classpath/39359] New: java.awt.FileDialog and addNotify / java.awt.PopupMenu Segmentation Fault

[bugs at cipher dot org dot uk]

=========================
Bug 1) Reliable Crash when using  java.awt.FileDialog and addNotify - Null
pointer dereference !?
=========================

- Has been confirmed using both kaffe and jamvm

Code to replicate :
class test2 { public static void main(String[] args) { (new
java.awt.FileDialog(new java.awt.Frame(),"test")).addNotify();}}

- Kaffe - 
address@hidden:~/test$ kaffe test2
kaffe-bin:
/build/buildd/kaffe-1.1.8/build-tree/kaffe-1.1.8/libraries/javalib/external/classpath/native/jni/classpath/native_state.c:176:
cp_gtk_check_compat: Assertion `(*env)->IsAssignableFrom(env, objclazz,
table->clazz)' failed.
Aborted (core dumped)

- JamVM - 
address@hidden:~/test$ jamvm test2
Segmentation fault (core dumped)

(gdb) bt
#0  0x0805af1b in ?? ()
#1  0xad30ba86 in gtkpeer_get_widget (env=0x806baa0, peer=0x0) at gtkpeer.c:186
#2  0xad2fea1d in Java_gnu_java_awt_peer_gtk_GtkFileDialogPeer_create
(env=0x806baa0, obj=0xafdfc850, parent=0x0, mode=0)
    at gnu_java_awt_peer_gtk_GtkFileDialogPeer.c:103
#3  0x08066805 in ?? ()
#4  0x08052b21 in callJNIWrapper ()
#5  0x080536fc in resolveNativeWrapper ()
#6  0x08056dcb in ?? ()
#7  0x080544bb in ?? ()
#8  0x080545c5 in ?? ()
#9  0x0804a835 in ?? ()
#10 0xb7dd6450 in __libc_start_main () from /lib/tls/i686/cmov/libc.so.6
#11 0x08049c71 in ?? ()

(gdb) up
#1  0xad30ba86 in gtkpeer_get_widget (env=0x806baa0, peer=0x0) at gtkpeer.c:186
186       obj = (*env)->GetObjectField(env, peer, widgetFID);
(gdb) print peer
$1 = (jobject) 0x0





=========================
Bug 2) Reliable crash caused by mishandling of java.lang.NullPointerException
from within the java.awt.PopupMenu class  - Null pointer dereference 
=========================
- Has been confirmed using both kaffe and jamvm

Code to replicate :
class test3 { public static void main(String[] args)  
{ (new java.awt.PopupMenu()).show(new java.awt.Button("a"),1,1);}}

- kaffe - 
address@hidden:~/test$ kaffe test3
kaffe-bin:
/build/buildd/kaffe-1.1.8/build-tree/kaffe-1.1.8/libraries/javalib/external/classpath/native/jni/
classpath/native_state.c:176: cp_gtk_check_compat: Assertion
`(*env)->IsAssignableFrom(env, objclazz, table->clazz)' failed.
Aborted (core dumped)

- JamVM - 
address@hidden:~/test$ jamvm test2
Segmentation fault (core dumped)

(gdb) bt
#0  0x0805af1b in ?? ()
#1  0xad314a86 in gtkpeer_get_widget (env=0x806baa0, peer=0x0) at gtkpeer.c:186
#2  0xad30b352 in Java_gnu_java_awt_peer_gtk_GtkPopupMenuPeer_setupAccelGroup
(env=0x806baa0, obj=0xafde4940, parent=0x0)
    at gnu_java_awt_peer_gtk_GtkPopupMenuPeer.c:94
#3  0x08066805 in ?? ()
#4  0x08052b21 in callJNIWrapper ()
#5  0x080536fc in resolveNativeWrapper ()
#6  0x08056dcb in ?? ()
#7  0x080544bb in ?? ()
#8  0x080545c5 in ?? ()
#9  0x0804a835 in ?? ()
#10 0xb7ddf450 in __libc_start_main () from /lib/tls/i686/cmov/libc.so.6
#11 0x08049c71 in ?? ()
(gdb) up
#1  0xad314a86 in gtkpeer_get_widget (env=0x806baa0, peer=0x0) at gtkpeer.c:186
186       obj = (*env)->GetObjectField(env, peer, widgetFID);
(gdb) print peer
$1 = (jobject) 0x0
(gdb) up
#2  0xad340352 in Java_gnu_java_awt_peer_gtk_GtkPopupMenuPeer_setupAccelGroup
(env=0x806baa0, obj=0xafe19940, parent=0x0)
    at gnu_java_awt_peer_gtk_GtkPopupMenuPeer.c:94
94        ptr2 = gtkpeer_get_widget (env, parent);
(gdb) print parent
$1 = (jobject) 0x0


-- 
           Summary: java.awt.FileDialog and addNotify / java.awt.PopupMenu
                    Segmentation Fault
           Product: classpath
           Version: 0.98
            Status: UNCONFIRMED
          Severity: major
          Priority: P3
         Component: classpath
        AssignedTo: unassigned at gcc dot gnu dot org
        ReportedBy: bugs at cipher dot org dot uk


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=39359