1221551 - crash in mozilla::a11y::ProxyAccessible::Shutdown

Status: RESOLVED FIXED

(Core :: Disability Access APIs, defect)

Description

[David Bolter [:davidb] (NeedInfo me for attention)]

This bug was filed from the Socorro interface and is 
report bp-7b847c7c-e403-40c0-b7fa-77eaa2151031.
=============================================================

Crashing here: MOZ_CRASH("outer doc doesn't own adoc!");

I thought we had a bug filed for this but can't find it...

More here: https://crash-stats.mozilla.com/report/list?product=Firefox&signature=mozilla%3A%3Aa11y%3A%3AProxyAccessible%3A%3AShutdown

Comment 1

[Trevor Saunders (:tbsaunde)]

Attachment: unbind child documents before rebinding them

It seems possible that a child document could be bound to a parent document
without first being unbound.  Some evidence for this being possible is that
OuterDocAccessible::InsertChildAt() explicitly checks for this and does
something similar if it already has a child.

Comment 2

[Pulsebot]

https://hg.mozilla.org/integration/mozilla-inbound/rev/13be87aa74c9

Comment 3

[Carsten Book [:Tomcat]]

https://hg.mozilla.org/mozilla-central/rev/13be87aa74c9

Comment 4

[Karen Rudnitski [:kar]]

FYI, going into about:crashes and seeing 'related bugs', this bug popped up when Firefox just crashed on me today (Nov 16) using the latest build (b45 Nov 15). 

I was on the google drive page, created a folder, and when I double-clicked the newly-created folder, that's when Firefox closed down.

Crash ID https://crash-stats.mozilla.com/report/index/c129f60c-4cdd-4f9c-88d9-a58892151116