1057304 - crash in mozilla::a11y::DocAccessible::ProcessContentInserted(mozilla::a11y::Accessible*, nsTArray<nsCOMPtr<nsIContent> > const*)

Status: RESOLVED FIXED

(Core :: Disability Access APIs, defect)

Description

[Zac C (:zac)]

This crash has popped up in Firefox OS on Gaia-Try.

https://tbpl.mozilla.org/?rev=fb5b1fd69de979c8f3390919264702ec727e99d2&tree=Gaia-Try

There are some existing reports from it on Windows with Gecko 31:
https://crash-stats.mozilla.com/report/list?product=Firefox&signature=mozilla%3A%3Aa11y%3A%3ADocAccessible%3A%3AProcessContentInserted%28mozilla%3A%3Aa11y%3A%3AAccessible*%2C+nsTArray%3CnsCOMPtr%3CnsIContent%3E+%3E+const*%29#tab-reports


I'm going to try and replicate it locally to get a b2g/gecko34 crash report.

Comment 1

[Zac C (:zac)]

I have replicated this locally.
I cannot replicate it with Gaia tip: 92373277084cf33f1a5730c4b735d1e8c29ef58f

but I can replicate it with Wilson's branch.

Comment 2

[Wilson Page [:wilsonpage]]

We're using new platform features like:

- custom-elements
- shadow-dom

I'm guessing one of these is exposing a crash.

Comment 3

[Zac C (:zac)]

OK when I run this locally I get a different crash signature:
https://crash-stats.mozilla.com/report/list?signature=libxul.so%400x19b984a+|+libxul.so%400x199f9f4+|+libxul.so%400x199fdef+|+libnss3.so%400x1c1bee&build_id=20140822010750&product=B2G&query_type=contains&range_unit=weeks&process_type=any&hang_type=any&date=2014-08-22+14%3A00%3A00&range_value=1#tab-reports

Comment 4

[Jason Smith [:jsmith]]

Putting needinfo on Eitan to see if he has any ideas why this crash is occurring.

Comment 5

[Eitan Isaacson [:eeejay]]

Pretty confident that this is a dup of bug 1055004. Not marking it as such, just yet.

Comment 6

[Wilson Page [:wilsonpage]]

Not seeing this after bug 1055004 landed