1271645 - Crash in PLDHashTable::Add | mozilla::a11y::AccessibleWrap::GetChildIDFor

Status: RESOLVED WONTFIX

(Core :: Disability Access APIs, defect, P3)

Description

[Karen Rudnitski [:kar]]

This bug was filed from the Socorro interface and is 
report bp-b02dbe3c-72b1-4df2-964c-b54942160510.
=============================================================

Reporting this as Firefox just crashed on me. I was writing a comment in a text field in Aha. I have many tabs open, including GDocs (although not doing anything with them at the time).

I'm on a Windows 10 machine, X1 carbon touch. I'm running nightly, and I just checked - says I'm up to date (49.0a1 2016-05-10)

I'm also not positive if I've added this to the right bugzilla component! The crash report gave me a few different options, so I've just chosen one!

Comment 1

[BugBot [:suhaib / :marco/ :calixte]]

Crash volume for signature 'PLDHashTable::Add | mozilla::a11y::AccessibleWrap::GetChildIDFor':
 - nightly (version 50): 2 crashes from 2016-06-06.
 - aurora  (version 49): 22 crashes from 2016-06-07.
 - beta    (version 48): 30 crashes from 2016-06-06.
 - release (version 47): 0 crash from 2016-05-31.
 - esr     (version 45): 0 crash from 2016-04-07.

Crash volume on the last weeks:
             Week N-1   Week N-2   Week N-3   Week N-4   Week N-5   Week N-6   Week N-7
 - nightly          0          0          0          1          0          0          0
 - aurora           1          2          5          4          4          6          0
 - beta             2          3          0          3          2         12          5
 - release          0          0          0          0          0          0          0
 - esr              0          0          0          0          0          0          0

Affected platform: Windows

Comment 2

[Alice0775 White]

https://hg.mozilla.org/mozilla-central/rev/e78975b53563d80c99ebfbdf8a9fbf6b829a8a48
Mozilla/5.0 (Windows NT 10.0; WOW64; rv:51.0) Gecko/20100101 Firefox/51.0 ID:20160808030441

I encounter crash on Nightly51.0a1 when I test Bug 1293252 Comment#3.

STR
1. Force enable e10s (because, e10s is default disabled due to accessibility)
2. Open the link in background tab (it is a more reproducible if you open the link in 3-5 tabs)
  http://www.cracked.com/article_20276_5-famous-kids-characters-you-didnt-know-were-propaganda.html.

Actual Results:
Browser will crash(probability 50/50)

bp-6914d391-d350-4258-b9e8-50c462160808
bp-71391017-d9ef-4fab-83b3-32f192160808
bp-35ad77fe-3a14-4f59-a43d-c5ff32160808

and different sig.
bp-397b6a48-bd9a-46f2-a70c-3afb42160808
bp-e071feb4-41c3-40d1-b8bc-717d12160808
bp-9bf0ee96-0722-41ca-9df8-2257d2160808

Comment 3

[Trevor Saunders (:tbsaunde)]

So, it looks like FireWinEvent() is called on an accessible where IsProxy() returns true, but DocProxyWrapper() does not.  That would seem to imply either Proxy() returned null, or Proxy()->Document() was null, but neither of those should ever happen.

Comment 4

[alexander :surkov (:asurkov)]

low volume crash, 2 crashes on 57, all other are >=50

Comment 5

[BugBot [:suhaib / :marco/ :calixte]]

Closing because no crashes reported for 12 weeks.

Comment 6

[BugBot [:suhaib / :marco/ :calixte]]

Closing because no crashes reported for 12 weeks.