1408239 - stack-overflow in [@ mozilla::a11y::LinkableAccessible::ActionWalk]

Status: RESOLVED WORKSFORME

(Core :: Disability Access APIs, defect, P2)

Description

[Tyson Smith [:tsmith]]

Attachment: test_case.html

The stack contains the following frames repeating:

LinkState /builds/worker/workspace/build/src/obj-firefox/dist/include/mozilla/a11y/Accessible.h:281:22
mozilla::a11y::LinkableAccessible::ActionWalk(bool*, bool*, bool*) /builds/worker/workspace/build/src/accessible/generic/BaseAccessibles.cpp:148
mozilla::a11y::LinkableAccessible::NativeLinkState() const /builds/worker/workspace/build/src/accessible/generic/BaseAccessibles.cpp:89:44

Comment 1

[Tyson Smith [:tsmith]]

Attachment: prefs.js

Comment 2

[Ryan VanderMeulen [:RyanVM]]

I haven't been able to reproduce this so far :(

Comment 3

[Ryan VanderMeulen [:RyanVM]]

I can't get this to crash with a stack overflow (not using ASAN builds here), but I can at least reproduce a pegged CPU in the content process that loads the testcase. That issue goes back well into last year, though, so I don't think this is a recent regression.

Comment 4

[Eitan Isaacson [:eeejay]]

I'm pretty convinced this is a dup of bug 1387308.

Comment 5

[Firefox Bug Husbandry Bot]

https://wiki.mozilla.org/Bug_Triage/Projects/Bug_Handling/Bug_Husbandry#Move_fix-optionals

Comment 6

[Andrei Purice]

Hey Tyson,
Can you still reproduce this issue or should we close it?

Comment 7

[Tyson Smith [:tsmith]]

I cannot reproduce this issue with the attached test case and it was last reported by fuzzer against m-c 20191022-a8089b1fa5c4.