Open Bug 1388987 Opened 7 years ago Updated 2 years ago

Assertion failure: moved (Failed to put child back.) [@ mozilla::a11y::DocAccessible::PutChildrenBack]

Categories

(Core :: Disability Access APIs, defect, P2)

56 Branch
defect

Tracking

()

Tracking Status
firefox-esr52 --- wontfix
firefox-esr78 --- affected
firefox56 --- wontfix
firefox57 --- wontfix
firefox58 --- wontfix
firefox88 --- wontfix
firefox89 --- wontfix
firefox90 --- wontfix
firefox91 --- wontfix

People

(Reporter: tsmith, Unassigned)

References

(Blocks 1 open bug, Regression)

Details

(Keywords: assertion, regression, testcase, Whiteboard: a11y:crash-tree:aria-owns)

Attachments

(1 file)

Attached file test_case.html
Assertion failure: moved (Failed to put child back.), at src/accessible/generic/DocAccessible.cpp:2233

#0 0x7f700760f48b in mozilla::a11y::DocAccessible::PutChildrenBack(nsTArray<RefPtr<mozilla::a11y::Accessible> >*, unsigned int) src/accessible/generic/DocAccessible.cpp:2233:7
#1 0x7f700760e136 in mozilla::a11y::DocAccessible::DoARIAOwnsRelocation(mozilla::a11y::Accessible*) src/accessible/generic/DocAccessible.cpp:2172:3
#2 0x7f70075b5742 in mozilla::a11y::NotificationController::WillRefresh(mozilla::TimeStamp) src/accessible/base/NotificationController.cpp:811:18
#3 0x7f7004ec614e in nsRefreshDriver::Tick(long, mozilla::TimeStamp) src/layout/base/nsRefreshDriver.cpp:1856:12
#4 0x7f7004ecf5fe in mozilla::RefreshDriverTimer::TickRefreshDrivers(long, mozilla::TimeStamp, nsTArray<RefPtr<nsRefreshDriver> >&) src/layout/base/nsRefreshDriver.cpp:300:7
#5 0x7f7004ecf3cd in mozilla::RefreshDriverTimer::Tick(long, mozilla::TimeStamp) src/layout/base/nsRefreshDriver.cpp:321:5
#6 0x7f7004ed29d5 in mozilla::VsyncRefreshDriverTimer::RunRefreshDrivers(mozilla::TimeStamp) src/layout/base/nsRefreshDriver.cpp:763:5
#7 0x7f7004ed1a76 in mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver::TickRefreshDriver(mozilla::TimeStamp) src/layout/base/nsRefreshDriver.cpp:676:35
#8 0x7f7004ecd9a7 in mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver::ParentProcessVsyncNotifier::Run() src/layout/base/nsRefreshDriver.cpp:522:20
#9 0x7f6fff679010 in nsThread::ProcessNextEvent(bool, bool*) src/xpcom/threads/nsThread.cpp:1446:14
#10 0x7f6fff67ec50 in NS_ProcessNextEvent(nsIThread*, bool) src/xpcom/threads/nsThreadUtils.cpp:480:10
#11 0x7f70001e2a85 in mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) src/ipc/glue/MessagePump.cpp:97:21
#12 0x7f7000133b17 in MessageLoop::RunInternal() src/ipc/chromium/src/base/message_loop.cc:326:10
#13 0x7f70001339a9 in MessageLoop::Run() src/ipc/chromium/src/base/message_loop.cc:299:3
#14 0x7f70049c49ea in nsBaseAppShell::Run() src/widget/nsBaseAppShell.cpp:156:27
#15 0x7f7007b7d2f1 in nsAppStartup::Run() src/toolkit/components/startup/nsAppStartup.cpp:287:30
#16 0x7f7007cdecb2 in XREMain::XRE_mainRun() src/toolkit/xre/nsAppRunner.cpp:4632:22
#17 0x7f7007ce08fa in XREMain::XRE_main(int, char**, mozilla::BootstrapConfig const&) src/toolkit/xre/nsAppRunner.cpp:4796:8
#18 0x7f7007ce17e8 in XRE_main(int, char**, mozilla::BootstrapConfig const&) src/toolkit/xre/nsAppRunner.cpp:4891:21
#19 0x4ecb38 in do_main(int, char**, char**) src/browser/app/nsBrowserApp.cpp:236:22
#20 0x4ec450 in main src/browser/app/nsBrowserApp.cpp:309:16
#21 0x7f701e4a082f in __libc_start_main /build/glibc-bfm8X4/glibc-2.23/csu/../csu/libc-start.c:291
#22 0x41e184 in _start (/home/user/workspace/browsers/m-c-1502318887-asan-debug/firefox+0x41e184)
Flags: in-testsuite?
INFO: Last good revision: 647d1f09980c266021fc040cba63690c693f4265
INFO: First bad revision: 7faa02d1a6e235009e284fd3e5a7411305689a8a
INFO: Pushlog:
https://hg.mozilla.org/integration/mozilla-inbound/pushloghtml?fromchange=647d1f09980c266021fc040cba63690c693f4265&tochange=7faa02d1a6e235009e284fd3e5a7411305689a8a

Having a hard time thinking this would be worth fixing on ESR52, so just calling that wontfix now.
Has Regression Range: --- → yes
Version: Trunk → 56 Branch
Whiteboard: a11y:crash-tree:aria-owns

(In reply to Tyson Smith [:tsmith] from comment #2)

A Pernosco session is available here: https://pernos.co/debug/KN8J-Zq6hIBHz76dDAn8Zg/index.html

Eitan, there is a Pernosco session available for debugging this.

No longer blocks: CVE-2017-7818
Flags: needinfo?(eitan)
Regressed by: CVE-2017-7818

One year has passed, I guess the needinfo isn't going to get answered :)

Flags: needinfo?(eitan)
Severity: normal → S3
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: