1346371 - Intermittent test_navigation.py TestBackForwardNavigation.test_frameset_after_navigating_in_frame | application crashed [@ mozilla::dom::ExplicitChildIterator::GetNextChild()]

Status: RESOLVED WORKSFORME

(Core :: DOM: Core & HTML, defect, P5)

Description

[Treeherder Bug Filer]

Filed by: wkocher [at] mozilla.com

https://treeherder.mozilla.org/logviewer.html#?job_id=83028747&repo=mozilla-inbound

https://archive.mozilla.org/pub/firefox/tinderbox-builds/mozilla-inbound-win64-debug/1489144882/mozilla-inbound_win8_64-debug_test-marionette-e10s-bm111-tests1-windows-build301.txt.gz

Comment 1

[Henrik Skupin [:whimboo][⌚️UTC+2]]

04:37:17     INFO -  Operating system: Windows NT
04:37:17     INFO -                    6.2.9200
04:37:17     INFO -  CPU: amd64
04:37:17     INFO -       family 6 model 30 stepping 5
04:37:17     INFO -       8 CPUs
04:37:17     INFO -  GPU: UNKNOWN
04:37:17     INFO -  Crash reason:  EXCEPTION_BREAKPOINT
04:37:17     INFO -  Crash address: 0x7fd4d5afdf1
04:37:17     INFO -  Process uptime: 234 seconds
04:37:17     INFO -  Thread 0 (crashed)
04:37:17     INFO -   0  xul.dll!mozilla::dom::ExplicitChildIterator::GetNextChild() [ChildIterator.cpp:68e6acf47dab : 158 + 0x0]
04:37:17     INFO -      rax = 0x0000008c20a8a8b0   rdx = 0x0000008c20a4a980
04:37:17     INFO -      rcx = 0x0000000000000000   rbx = 0x0000008c0f92d450
04:37:17     INFO -      rsi = 0x0000000000000000   rdi = 0x0000008c0f92d450
04:37:17     INFO -      rbp = 0x0000008c0f92d389   rsp = 0x0000008c0f92d280
04:37:17     INFO -       r8 = 0x0000000000000008    r9 = 0x0000000000000000
04:37:17     INFO -      r10 = 0x0000000000000001   r11 = 0x0000000000000000
04:37:17     INFO -      r12 = 0x0000008c0f92f070   r13 = 0x0000000000000002
04:37:17     INFO -      r14 = 0x0000008c0f92d440   r15 = 0x0000008c1b221438
04:37:17     INFO -      rip = 0x000007fd4d5afdf1
04:37:17     INFO -      Found by: given as instruction pointer in context
04:37:17     INFO -   1  xul.dll!mozilla::dom::AllChildrenIterator::GetNextChild() [ChildIterator.cpp:68e6acf47dab : 423 + 0x8]
04:37:17     INFO -      rbx = 0x0000008c0f92d450   rbp = 0x0000008c0f92d389
04:37:17     INFO -      rsp = 0x0000008c0f92d2d0   r12 = 0x0000008c0f92f070
04:37:17     INFO -      r13 = 0x0000000000000002   r14 = 0x0000008c0f92d440
04:37:17     INFO -      r15 = 0x0000008c1b221438   rip = 0x000007fd4d5afa43
04:37:17     INFO -      Found by: call frame info
04:37:17     INFO -   2  xul.dll!mozilla::a11y::TreeWalker::Next() [TreeWalker.cpp:68e6acf47dab : 161 + 0x8]
04:37:17     INFO -      rbx = 0x0000008c0f92d450   rbp = 0x0000008c0f92d389
04:37:17     INFO -      rsp = 0x0000008c0f92d300   r12 = 0x0000008c0f92f070
04:37:17     INFO -      r13 = 0x0000000000000002   r14 = 0x0000008c0f92d440
04:37:17     INFO -      r15 = 0x0000008c1b221438   rip = 0x000007fd4fce7546
04:37:17     INFO -      Found by: call frame info
04:37:17     INFO -   3  xul.dll!mozilla::a11y::DocAccessible::CacheChildrenInSubtree(mozilla::a11y::Accessible *,mozilla::a11y::Accessible * *) [DocAccessible.cpp:68e6acf47dab : 2268 + 0xa]
04:37:17     INFO -      rbx = 0x0000008c0f92d450   rbp = 0x0000008c0f92d389
04:37:17     INFO -      rsp = 0x0000008c0f92d3f0   r12 = 0x0000008c0f92f070
04:37:17     INFO -      r13 = 0x0000000000000002   r14 = 0x0000008c0f92d440
04:37:17     INFO -      r15 = 0x0000008c1b221438   rip = 0x000007fd4fcf240d
04:37:17     INFO -      Found by: call frame info
04:37:17     INFO -   4  xul.dll!mozilla::a11y::DocAccessible::CacheChildrenInSubtree(mozilla::a11y::Accessible *,mozilla::a11y::Accessible * *) [DocAccessible.cpp:68e6acf47dab : 2277 + 0xe]
04:37:17     INFO -      rbx = 0x0000008c0f92d450   rbp = 0x0000008c0f92d389
04:37:17     INFO -      rsp = 0x0000008c0f92db60   r12 = 0x0000008c0f92f070
04:37:17     INFO -      r13 = 0x0000000000000002   r14 = 0x0000008c0f92d440
04:37:17     INFO -      r15 = 0x0000008c1b221438   rip = 0x000007fd4fcf2403
04:37:17     INFO -      Found by: call frame info
04:37:17     INFO -   5  xul.dll!mozilla::a11y::DocAccessible::CacheChildrenInSubtree(mozilla::a11y::Accessible *,mozilla::a11y::Accessible * *) [DocAccessible.cpp:68e6acf47dab : 2277 + 0xe]
04:37:17     INFO -      rbx = 0x0000008c0f92d450   rbp = 0x0000008c0f92d389
04:37:17     INFO -      rsp = 0x0000008c0f92e2d0   r12 = 0x0000008c0f92f070
04:37:17     INFO -      r13 = 0x0000000000000002   r14 = 0x0000008c0f92d440
04:37:17     INFO -      r15 = 0x0000008c1b221438   rip = 0x000007fd4fcf2403
04:37:17     INFO -      Found by: call frame info

Comment 2

[Joel Maher ( :jmaher ) (UTC -8)]

looking at a bunch of retriggers, it is hard to tell if this happens often or if there are multiple crashes:
https://treeherder.mozilla.org/#/jobs?repo=autoland&filter-searchStr=win%20x64%20debug%20mn&tochange=ab9bdbdc7780b163a722d12d1d927f68b35d030f&fromchange=fe16f26427462c1bb243f401e822b01efa8fba52&selectedJob=83827423

Comment 3

[Henrik Skupin [:whimboo][⌚️UTC+2]]

There are a couple of different crash signatures triggered here. What we could do is to temporarily disable this frame related test, and re-enable it once the underlying a11y crash got fixed.

Comment 4

[Henrik Skupin [:whimboo][⌚️UTC+2]]

We never disabled the test and no more crash has been reported in the last 4 months. Lets go and close this bug as WFM. We can reopen it if the crash happens again.