Closed Bug 1191286 Opened 10 years ago Closed 9 years ago

crash in DocAccessibleParent::RecvShowEvent

Categories

(Core :: Disability Access APIs, defect)

defect
Not set
normal

Tracking

()

RESOLVED WORKSFORME

People

(Reporter: surkov, Unassigned)

References

()

Details

Test: http://oria.github.io/gridx/demos/test_grid.html Stack: 0 XUL 0x0000000106791068 mozilla::a11y::DocAccessibleParent::RecvShowEvent(mozilla::a11y::ShowEventData const&) + 488 1 XUL 0x0000000102d3428d mozilla::a11y::PDocAccessibleParent::OnMessageReceived(IPC::Message const&) + 1501 2 XUL 0x0000000102c26735 mozilla::dom::PContentParent::OnMessageReceived(IPC::Message const&) + 181 3 XUL 0x00000001025e6bc4 mozilla::ipc::MessageChannel::DispatchAsyncMessage(IPC::Message const&) + 292 4 XUL 0x00000001025e5f34 mozilla::ipc::MessageChannel::DispatchMessage(IPC::Message const&) + 500 5 XUL 0x00000001025e1ce9 mozilla::ipc::MessageChannel::OnMaybeDequeueOne() + 393 6 XUL 0x00000001026025e3 void DispatchToMethod<mozilla::ipc::MessageChannel, bool (mozilla::ipc::MessageChannel::*)()>(mozilla::ipc::MessageChannel*, bool (mozilla::ipc::MessageChannel::*)(), Tuple0 const&) + 131 7 XUL 0x00000001026024de RunnableMethod<mozilla::ipc::MessageChannel, bool (mozilla::ipc::MessageChannel::*)(), Tuple0>::Run() + 78 8 XUL 0x0000000102607528 mozilla::ipc::MessageChannel::RefCountedTask::Run() + 40 9 XUL 0x00000001026074f4 mozilla::ipc::MessageChannel::DequeueTask::Run() + 36 10 XUL 0x0000000102556900 MessageLoop::RunTask(Task*) + 96 11 XUL 0x0000000102556e6f MessageLoop::DeferOrRunPendingTask(MessageLoop::PendingTask const&) + 79 12 XUL 0x0000000102557094 MessageLoop::DoWork() + 292 13 XUL 0x00000001025e9d5c mozilla::ipc::DoWorkRunnable::Run() + 140 14 XUL 0x0000000101f212f3 nsThread::ProcessNextEvent(bool, bool*) + 1971 15 XUL 0x0000000101f95e17 NS_ProcessPendingEvents(nsIThread*, unsigned int) + 151 16 XUL 0x0000000105a5e1e6 nsBaseAppShell::NativeEventCallback() + 198 17 XUL 0x0000000105ad43bd nsAppShell::ProcessGeckoEvents(void*) + 445 18 com.apple.CoreFoundation 0x00007fff936eba01 __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ + 17 19 com.apple.CoreFoundation 0x00007fff936ddb8d __CFRunLoopDoSources0 + 269 20 com.apple.CoreFoundation 0x00007fff936dd1bf __CFRunLoopRun + 927 21 com.apple.CoreFoundation 0x00007fff936dcbd8 CFRunLoopRunSpecific + 296 22 com.apple.HIToolbox 0x00007fff9306956f RunCurrentEventLoopInMode + 235 23 com.apple.HIToolbox 0x00007fff930692ea ReceiveNextEventCommon + 431 24 com.apple.HIToolbox 0x00007fff9306912b _BlockUntilNextEventMatchingListInModeWithFilter + 71 25 com.apple.AppKit 0x00007fff8a4058ab _DPSNextEvent + 978 26 com.apple.AppKit 0x00007fff8a404e58 -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 346 27 XUL 0x0000000105ad2e87 -[GeckoNSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 119 28 com.apple.AppKit 0x00007fff8a3faaf3 -[NSApplication run] + 594 29 XUL 0x0000000105ad4db1 nsAppShell::Run() + 177 30 XUL 0x0000000106b252f1 nsAppStartup::Run() + 161 31 XUL 0x0000000106bf00ab XREMain::XRE_mainRun() + 5963 32 XUL 0x0000000106bf09cd XREMain::XRE_main(int, char**, nsXREAppData const*) + 989 33 XUL 0x0000000106bf0e72 XRE_main + 98 34 org.mozilla.nightlydebug 0x0000000100002a0b do_main(int, char**, nsIFile*) + 1819 (nsBrowserApp.cpp:212) 35 org.mozilla.nightlydebug 0x0000000100001ded main + 301 (nsBrowserApp.cpp:399) 36 org.mozilla.nightlydebug 0x0000000100001864 start + 52
Reproducible also on Fedora 22 / latest trunk. FF crashes every 10-20 seconds.
it crashes for me whenever I run facebook on the line MOZ_ASSERT(consumed == aData.NewTree().Length()); in DocAccessibleParent::RecvShowEvent
Please reopen if reappears.
Status: NEW → RESOLVED
Closed: 9 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.