1208767 - Reliable segfault in nsContentUtils::IsCallerChrome() upon launch of Nightly

Status: RESOLVED DUPLICATE of bug 1208758

(Core :: Disability Access APIs, defect)

Description

[Joanmarie Diggs]

Attachment: accessible-event listener: window.py

Steps to reproduce:
1. Launch the attached accessible-event listener in a terminal
2. Launch Firefox Nightly

Expected results: No crash
Actual results: 100% reliable crash (see below)
Impact: Orca users cannot use Nightly

This looks like it might be a dup of bug 1208758, but since this one is accessibility-triggered and happens immediately upon launch, filing just in case.

===============================
Program received signal SIGSEGV, Segmentation fault.
0x00007fffe5d47d77 in nsContentUtils::IsCallerChrome() () from /opt/nightly-firefox/libxul.so

(gdb) bt
#0  0x00007fffe5d47d77 in nsContentUtils::IsCallerChrome() () at /opt/nightly-firefox/libxul.so
#1  0x00007fffe675829e in nsGlobalWindow::GetContentInternal(mozilla::ErrorResult&) () at /opt/nightly-firefox/libxul.so
#2  0x00007fffe6758473 in nsGlobalWindow::GetContent(nsIDOMWindow**) () at /opt/nightly-firefox/libxul.so
#3  0x00007fffe770c403 in mozilla::a11y::RootAccessible::RelationByType(mozilla::a11y::RelationType) ()
    at /opt/nightly-firefox/libxul.so
#4  0x00007fffe76e1b0f in UpdateAtkRelation(mozilla::a11y::RelationType, mozilla::a11y::Accessible*, AtkRelationType, _AtkRelationSet*) () at /opt/nightly-firefox/libxul.so
#5  0x00007fffe76e20f7 in refRelationSetCB () at /opt/nightly-firefox/libxul.so
#6  0x00007ffff2ba845e in impl_GetRelationSet (bus=<optimized out>, message=0x7fffc4f0e8c0, user_data=<optimized out>)
    at accessible-adaptor.c:306
#7  0x00007ffff2ba729a in handle_message (pathstr=0x7fffc55d50d8 "/org/a11y/atspi/accessible/46", member=<optimized out>, iface=0x7fffc55d5110 "org.a11y.atspi.Accessible", path=0x7fffc55dab80, message=0x7fffc4f0e8c0, bus=0x7fffc4811100) at droute.c:553
#8  0x00007ffff2ba729a in handle_message (bus=0x7fffc4811100, message=message@entry=0x7fffc4f0e8c0, user_data=user_data@entry=0x7fffc55dab80) at droute.c:600
#9  0x00007fffee2f2153 in _dbus_object_tree_dispatch_and_unlock (tree=0x7fffc496d140, message=message@entry=0x7fffc4f0e8c0, found_object=found_object@entry=0x7fffffffc488) at ../../dbus/dbus-object-tree.c:1020
#10 0x00007fffee2e36e4 in dbus_connection_dispatch (connection=connection@entry=0x7fffc4811100) at ../../dbus/dbus-connection.c:4744
#11 0x00007fffee52d0c5 in message_queue_dispatch (source=<optimized out>, callback=<optimized out>, user_data=<optimized out>)
    at atspi-gmain.c:89
#12 0x00007ffff1923f0a in g_main_context_dispatch (context=0x7ffff66bb6c0) at gmain.c:3154
#13 0x00007ffff1923f0a in g_main_context_dispatch (context=context@entry=0x7ffff66bb6c0) at gmain.c:3769
#14 0x00007ffff19242a0 in g_main_context_iterate (context=context@entry=0x7ffff66bb6c0, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3840
#15 0x00007ffff192434c in g_main_context_iteration (context=0x7ffff66bb6c0, may_block=1) at gmain.c:3901
#16 0x00007fffe5d84c8f in nsAppShell::ProcessNextNativeEvent(bool) () at /opt/nightly-firefox/libxul.so
#17 0x00007fffe729c3ba in nsBaseAppShell::DoProcessNextNativeEvent(bool) () at /opt/nightly-firefox/libxul.so
#18 0x00007fffe5d83e4a in nsBaseAppShell::OnProcessNextEvent(nsIThreadInternal*, bool) () at /opt/nightly-firefox/libxul.so
#19 0x00007fffe5cc61f8 in nsThread::ProcessNextEvent(bool, bool*) () at /opt/nightly-firefox/libxul.so
#20 0x00007fffe5ccef4e in NS_ProcessNextEvent(nsIThread*, bool) () at /opt/nightly-firefox/libxul.so
#21 0x00007fffe5ce72ef in mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) () at /opt/nightly-firefox/libxul.so
#22 0x00007fffe6255d13 in MessageLoop::Run() () at /opt/nightly-firefox/libxul.so
#23 0x00007fffe729b358 in nsBaseAppShell::Run() () at /opt/nightly-firefox/libxul.so
#24 0x00007fffe7856a8c in nsAppStartup::Run() () at /opt/nightly-firefox/libxul.so
#25 0x00007fffe788d435 in XREMain::XRE_mainRun() () at /opt/nightly-firefox/libxul.so
#26 0x00007fffe788fa84 in XREMain::XRE_main(int, char**, nsXREAppData const*) () at /opt/nightly-firefox/libxul.so
#27 0x00007fffe788fd14 in XRE_main () at /opt/nightly-firefox/libxul.so
#28 0x0000000000413836 in do_main(int, char**, nsIFile*) ()
#29 0x000000000040597e in main ()

Comment 1

[Joanmarie Diggs]

Marking as a duplicate of bug 1208758. I can no longer reproduce this issue.