Closed Bug 1256260 Opened 9 years ago Closed 7 years ago

crash in MustBeAccessible

Categories

(Core :: Disability Access APIs, defect)

Product:
Core
Component:
Disability Access APIs
Platform:
ARM
Linux
Type:
defect
Priority:
Not set
Severity:
blocker

Tracking

()

Status:
RESOLVED WORKSFORME
Tracking Flags:
Tracking Status
firefox48 --- affected

People

(Reporter: chiorean.ioana, Unassigned)

References

Details

(Keywords: crash)

Crash Data

This bug was filed from the Socorro interface and is report bp-87eed1db-f005-4013-bc7b-902ff2160314. Latest Nightly: 48.0a1 03/12 Occurs every 10 mins aprox. Might be because of Bug 1248840 ( as I can see a spike in crashes) https://hg.mozilla.org/mozilla-central/filelog/f0c0480732d36153e8839c7f17394d45f679f87d/accessible/base/nsAccessibilityService.cpp ============================================================= Other reports: bp-180f7f33-ed75-498b-9479-8d5bf2160314 03/14/2016 01:00 PM bp-5bd8b267-8d0f-43f2-aa43-12bbd2160314 03/14/2016 12:54 PM bp-7361c95f-ee39-48cb-b2f8-aa2222160314 03/14/2016 12:32 PM bp-87eed1db-f005-4013-bc7b-902ff2160314 03/14/2016 12:27 PM bp-5131229b-3973-4aea-b4ea-5bb662160314 03/14/2016 12:18 PM bp-8db770bb-4c27-4394-85a3-4db432160314 03/14/2016 12:06 PM bp-41bf7603-8c2d-4697-9936-b4cd62160314 03/14/2016 10:36 AM bp-dd652024-fa68-480d-9c90-536fa2160314 03/14/2016 09:46 AM ============================================================= 0 libxul.so MustBeAccessible accessible/base/nsAccessibilityService.cpp 1 libxul.so nsAccessibilityService::GetOrCreateAccessible(nsINode*, mozilla::a11y::Accessible*, bool*) accessible/base/nsAccessibilityService.cpp 2 libxul.so mozilla::a11y::TreeWalker::AccessibleFor(nsIContent*, unsigned int, bool*) accessible/base/TreeWalker.cpp 3 libxul.so mozilla::a11y::TreeWalker::Next(nsIContent*) accessible/base/TreeWalker.cpp 4 libxul.so mozilla::a11y::Accessible::CacheChildren() accessible/generic/Accessible.cpp 5 libxul.so mozilla::a11y::DocAccessible::UpdateTreeOnInsertion(mozilla::a11y::Accessible*) accessible/generic/Accessible.cpp 6 libxul.so mozilla::a11y::NotificationController::WillRefresh(mozilla::TimeStamp) accessible/base/NotificationController.cpp 7 libxul.so nsRefreshDriver::Tick(long, mozilla::TimeStamp) layout/base/nsRefreshDriver.cpp 8 libxul.so mozilla::InactiveRefreshDriverTimer::TickOne() layout/base/nsRefreshDriver.cpp 9 libxul.so nsTimerImpl::Fire() xpcom/threads/nsTimerImpl.cpp 10 libxul.so nsTimerEvent::Run() xpcom/threads/TimerThread.cpp 11 libxul.so nsThread::ProcessNextEvent(bool, bool*) xpcom/threads/nsThread.cpp 12 libxul.so NS_InvokeByIndex xpcom/reflect/xptcall/md/unix/xptcinvoke_x86_64_unix.cpp 13 libxul.so XPCWrappedNative::CallMethod(XPCCallContext&, XPCWrappedNative::CallMode) js/xpconnect/src/XPCWrappedNative.cpp 14 libxul.so XPC_WN_CallMethod(JSContext*, unsigned int, JS::Value*) js/xpconnect/src/XPCWrappedNativeJSOps.cpp 15 @0x7f21f8a25b36 16 @0x7f2242edb7ef 17 @0x7f2289be484e 18 libxul.so EnterBaseline js/src/jit/BaselineJIT.cpp 19 libxul.so js::jit::EnterBaselineMethod(JSContext*, js::RunState&) js/src/jit/BaselineJIT.cpp 20 libxul.so js::RunScript(JSContext*, js::RunState&) js/src/vm/Interpreter.cpp 21 libxul.so js::Invoke(JSContext*, JS::CallArgs const&, js::MaybeConstruct) js/src/vm/Interpreter.cpp 22 libxul.so js::Invoke(JSContext*, JS::Value const&, JS::Value const&, unsigned int, JS::Value const*, JS::MutableHandle<JS::Value>) js/src/vm/Interpreter.cpp 23 libxul.so js::CrossCompartmentWrapper::call(JSContext*, JS::Handle<JSObject*>, JS::CallArgs const&) const js/src/proxy/DirectProxyHandler.cpp 24 libxul.so js::Proxy::call(JSContext*, JS::Handle<JSObject*>, JS::CallArgs const&) js/src/proxy/Proxy.cpp 25 libxul.so js::proxy_Call(JSContext*, unsigned int, JS::Value*) js/src/proxy/Proxy.cpp 26 libxul.so js::Invoke(JSContext*, JS::CallArgs const&, js::MaybeConstruct) js/src/jscntxtinlines.h 27 libxul.so js::Invoke(JSContext*, JS::Value const&, JS::Value const&, unsigned int, JS::Value const*, JS::MutableHandle<JS::Value>) js/src/vm/Interpreter.cpp 28 libxul.so js::jit::DoCallFallback js/src/jit/BaselineIC.cpp 29 @0x7f2289be59df 30 @0x7f21f351d35f 31 @0x7f2289be484e 32 libxul.so EnterBaseline js/src/jit/BaselineJIT.cpp 33 libxul.so js::jit::EnterBaselineMethod(JSContext*, js::RunState&) js/src/jit/BaselineJIT.cpp 34 libxul.so Interpret js/src/vm/Interpreter.cpp 35 libxul.so js::RunScript(JSContext*, js::RunState&) js/src/vm/Interpreter.cpp 36 libxul.so js::Invoke(JSContext*, JS::CallArgs const&, js::MaybeConstruct) js/src/vm/Interpreter.cpp 37 libxul.so js::Invoke(JSContext*, JS::Value const&, JS::Value const&, unsigned int, JS::Value const*, JS::MutableHandle<JS::Value>) js/src/vm/Interpreter.cpp 38 libxul.so js::CrossCompartmentWrapper::call(JSContext*, JS::Handle<JSObject*>, JS::CallArgs const&) const js/src/proxy/DirectProxyHandler.cpp 39 libxul.so js::Proxy::call(JSContext*, JS::Handle<JSObject*>, JS::CallArgs const&) js/src/proxy/Proxy.cpp 40 libxul.so js::proxy_Call(JSContext*, unsigned int, JS::Value*) js/src/proxy/Proxy.cpp 41 libxul.so js::Invoke(JSContext*, JS::CallArgs const&, js::MaybeConstruct) js/src/jscntxtinlines.h 42 libxul.so Interpret js/src/vm/Interpreter.cpp 43 libxul.so js::RunScript(JSContext*, js::RunState&) js/src/vm/Interpreter.cpp 44 libxul.so js::Invoke(JSContext*, JS::CallArgs const&, js::MaybeConstruct) js/src/vm/Interpreter.cpp 45 libxul.so js::Invoke(JSContext*, JS::Value const&, JS::Value const&, unsigned int, JS::Value const*, JS::MutableHandle<JS::Value>) js/src/vm/Interpreter.cpp 46 libxul.so js::jit::DoCallFallback js/src/jit/BaselineIC.cpp 47 @0x7f2289be59df 48 @0x7f223748ff07 49 @0x7f21eb96b943 50 @0x7f222ea6bd67 51 @0x7f2289be484e 52 libxul.so EnterBaseline js/src/jit/BaselineJIT.cpp 53 libxul.so js::jit::EnterBaselineMethod(JSContext*, js::RunState&) js/src/jit/BaselineJIT.cpp 54 libxul.so js::RunScript(JSContext*, js::RunState&) js/src/vm/Interpreter.cpp 55 libxul.so js::Invoke(JSContext*, JS::CallArgs const&, js::MaybeConstruct) js/src/vm/Interpreter.cpp 56 libxul.so js::Invoke(JSContext*, JS::Value const&, JS::Value const&, unsigned int, JS::Value const*, JS::MutableHandle<JS::Value>) js/src/vm/Interpreter.cpp 57 libxul.so js::CrossCompartmentWrapper::call(JSContext*, JS::Handle<JSObject*>, JS::CallArgs const&) const js/src/proxy/DirectProxyHandler.cpp 58 libxul.so js::Proxy::call(JSContext*, JS::Handle<JSObject*>, JS::CallArgs const&) js/src/proxy/Proxy.cpp 59 libxul.so js::proxy_Call(JSContext*, unsigned int, JS::Value*) js/src/proxy/Proxy.cpp 60 libxul.so js::Invoke(JSContext*, JS::CallArgs const&, js::MaybeConstruct) js/src/jscntxtinlines.h 61 libxul.so js::Invoke(JSContext*, JS::Value const&, JS::Value const&, unsigned int, JS::Value const*, JS::MutableHandle<JS::Value>) js/src/vm/Interpreter.cpp 62 libxul.so js::jit::DoCallFallback js/src/jit/BaselineIC.cpp 63 @0x7f2289be59df 64 @0x7f2214b49587 65 @0x7f2289be484e 66 libxul.so EnterBaseline js/src/jit/BaselineJIT.cpp 67 libxul.so js::jit::EnterBaselineAtBranch(JSContext*, js::InterpreterFrame*, unsigned char*) js/src/jit/BaselineJIT.cpp 68 libxul.so Interpret js/src/vm/Interpreter.cpp 69 libxul.so js::RunScript(JSContext*, js::RunState&) js/src/vm/Interpreter.cpp 70 libxul.so js::Invoke(JSContext*, JS::CallArgs const&, js::MaybeConstruct) js/src/vm/Interpreter.cpp 71 libxul.so js::Invoke(JSContext*, JS::Value const&, JS::Value const&, unsigned int, JS::Value const*, JS::MutableHandle<JS::Value>) js/src/vm/Interpreter.cpp 72 libxul.so js::CrossCompartmentWrapper::call(JSContext*, JS::Handle<JSObject*>, JS::CallArgs const&) const js/src/proxy/DirectProxyHandler.cpp 73 libxul.so js::Proxy::call(JSContext*, JS::Handle<JSObject*>, JS::CallArgs const&) js/src/proxy/Proxy.cpp 74 libxul.so js::proxy_Call(JSContext*, unsigned int, JS::Value*) js/src/proxy/Proxy.cpp 75 libxul.so js::Invoke(JSContext*, JS::CallArgs const&, js::MaybeConstruct) js/src/jscntxtinlines.h 76 libxul.so Interpret js/src/vm/Interpreter.cpp 77 libxul.so js::RunScript(JSContext*, js::RunState&) js/src/vm/Interpreter.cpp 78 libxul.so js::Invoke(JSContext*, JS::CallArgs const&, js::MaybeConstruct) js/src/vm/Interpreter.cpp 79 libxul.so js::Invoke(JSContext*, JS::Value const&, JS::Value const&, unsigned int, JS::Value const*, JS::MutableHandle<JS::Value>) js/src/vm/Interpreter.cpp 80 libxul.so JS_CallFunctionValue(JSContext*, JS::Handle<JSObject*>, JS::Handle<JS::Value>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>) js/src/jsapi.cpp 81 libxul.so nsXPCWrappedJSClass::CallMethod(nsXPCWrappedJS*, unsigned short, XPTMethodDescriptor const*, nsXPTCMiniVariant*) js/xpconnect/src/XPCWrappedJSClass.cpp 82 libxul.so PrepareAndDispatch xpcom/reflect/xptcall/md/unix/xptcstubs_x86_64_linux.cpp 83 libxul.so libxul.so@0xddab32 84 libxul.so mozilla::net::nsHttpChannel::OnDataAvailable(nsIRequest*, nsISupports*, nsIInputStream*, unsigned long, unsigned int) netwerk/protocol/http/nsHttpChannel.cpp 85 libxul.so nsInputStreamPump::OnStateTransfer() netwerk/base/nsInputStreamPump.cpp 86 libxul.so nsInputStreamPump::OnInputStreamReady(nsIAsyncInputStream*) netwerk/base/nsInputStreamPump.cpp 87 libxul.so nsInputStreamReadyEvent::Run() xpcom/io/nsStreamUtils.cpp 88 libxul.so nsThread::ProcessNextEvent(bool, bool*) xpcom/threads/nsThread.cpp 89 libxul.so NS_InvokeByIndex xpcom/reflect/xptcall/md/unix/xptcinvoke_x86_64_unix.cpp
Depends on: 1248840
It looks like something destroys a frame of the content, which is quite bad if so. The crash stack is no longer valid, because of recent patch landings. Let's see if will persists. btw, not sure I see why bug 1248840 was marked dependent on this one.
It was a possible regression from it (in my mind) - I will take it of if not related.. Also - i got this at least 20 times today .. Barely able to use Firefox
No longer depends on: 1248840
(In reply to Ioana Chiorean from comment #2) > It was a possible regression from it (in my mind) - I will take it of if not > related.. It was renaming thing only, it shouldn't affect this way, but it'd be definitely interesting to know regression range and "suspicious" landings. > Also - i got this at least 20 times today .. Barely able to use Firefox do you have steps to reproduce? I wish I could try it myself.
Looks like linux only? Isn't aContent->GetPrimaryFrame() supposed to never fail?
I am still getting this and yes, only on my linux machine.
This is even worst now - due to this error - or related at least my machine freezes and I need to reboot it.
Severity: critical → blocker
all are thunderbird and 52 (wontfix), wfm for everybody else
Status: NEW → RESOLVED
Closed: 7 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.