Hello together!
I have an application that creates modal forms that contain a menu and
when playing around with that application long enough, I get either a
bus error or an access violation.
The backtrace looks like this:
MENUS_TMENUITEM_$__GETCOUNT$$LONGINT + 24 in section .text
WINCEWSMENUS_CESETMENU$LONGWORD$LONGWORD$TMENU + 516 in section .text
WINCEINT_TWINCEWIDGETSET_$__SETMENU$LONGWORD$LONGWORD$$BOOLEAN + 208 in
section .text
LCLINTF_SETMENU$LONGWORD$LONGWORD$$BOOLEAN + 64 in section .text
MENUS_TMAINMENU_$__SETWINDOWHANDLE$LONGWORD + 104 in section .text
FORMS_TCUSTOMFORM_$__UPDATEMENU + 192 in section .text
FORMS_TCUSTOMFORM_$__CREATEWND + 72 in section .text
FORMS_TFORM_$__CREATEWND + 64 in section .text
CONTROLS_TWINCONTROL_$__CREATEHANDLE + 64 in section .text
CONTROLS_TWINCONTROL_$__HANDLENEEDED + 184 in section .text
CONTROLS_TWINCONTROL_$_DOALLAUTOSIZE_CHECKHANDLEALLOCATED$TWINCONTROL$$BOOLEAN
+ 88 in section .text
CONTROLS_TWINCONTROL_$__DOALLAUTOSIZE + 192 in section .text
CONTROLS_TCONTROL_$__ENABLEAUTOSIZING + 312 in section .text
CONTROLS_TCONTROL_$__SETVISIBLE$BOOLEAN + 476 in section .text
FORMS_TCUSTOMFORM_$__SETVISIBLE$BOOLEAN + 184 in section .text
FORMS_TCUSTOMFORM_$__SHOW + 48 in section .text
FORMS_TCUSTOMFORM_$__SHOWMODAL$$LONGINT + 616 in section .text
I have checked the error location and my current conclusion is that the
LCLMenu parameter given to CeSetMenu contains a freed object. In
TWinCEWidgetSet.SetMenu the value of the parameter is calculated by
checking two lists MenuLCLObjectList (containing TMenu entries) and
MenuHandleList (containing HMENU entries). I see that those two lists
are filled in TWinCEWSMenu.CreateHandle, but they don't appear to be
emptied anywhere. So my assumption is that CreateMenu (which is called
in TWinCEWSMenu.CreateHandle) might return a HMENU value that was
already inserted into MenuHandleList, but of which the menu was already
freed (because not needed anymore), so the search in
TWinCEWidgetSet.SetMenu will return the old entry (linear search...)
which can already be overwriten => access violation / bus error when
accessing the Items property.
Is my assumption valid and I should thus open a bug report?
Regards,
Sven
--
_______________________________________________
Lazarus mailing list
[email protected]
http://lists.lazarus.freepascal.org/mailman/listinfo/lazarus
