287979 - Infinite loop caused by the way we expose native objects as IAccessibles

Status: RESOLVED FIXED

(Core :: Disability Access APIs, defect)

Description

[Aaron Leventhal]

Steps:
Load testcase
Load accessible explorer for MSAA SDK
Trag target over plugin
Infinite loop in tool

Same bug causes Firefox to crash via stack overflow when used with a screen reader.

Comment 1

[Aaron Leventhal]

*** Bug 287978 has been marked as a duplicate of this bug. ***

Comment 2

[Aaron Leventhal]

Attachment: Simple markup to cause crash: <embed type="application/x-mplayer2">

Comment 3

[Aaron Leventhal]

Attachment: 1) The child of the Mozilla plugin window container is the window owning the plugin, 2) Null plugins are no longer native objects, and this solves the infinite loop in a more generic way anyway

Comment 4

[timeless]

does this still support the null plugin? it's still used by some platforms....

Comment 5

[Aaron Leventhal]

This does support the null plugin, but it's a better fix for the original
problem of infinite loops. The new fix takes care of the infinite loops for all
plugins.

Comment 6

[Aaron Leventhal]

Timeless, see comment 5

Comment 7

[Johnny Stenback (:jst)]

Comment on attachment 178763 [details] [diff] [review]
1) The child of the Mozilla plugin window container is the window owning the plugin, 2) Null plugins are no longer native objects, and this solves the infinite loop in a more generic way anyway

sr=jst

Comment 8

[Aaron Leventhal]

Checking in accessible/src/msaa/nsAccessibleWrap.cpp;
/cvsroot/mozilla/accessible/src/msaa/nsAccessibleWrap.cpp,v  <-- 
nsAccessibleWrap.cpp
new revision: 1.23; previous revision: 1.22
done
Checking in accessible/src/msaa/nsHTMLWin32ObjectAccessible.cpp;
/cvsroot/mozilla/accessible/src/msaa/nsHTMLWin32ObjectAccessible.cpp,v  <-- 
nsHTMLWin32ObjectAccessible.cpp
new revision: 1.4; previous revision: 1.3
done

Comment 9

[Firefox Bug Husbandry Bot]

https://bugzilla.mozilla.org/show_bug.cgi?id=1527381