1418185 - stack-overflow in [@ mozilla::a11y::Accessible::SetARIAHidden]

Status: RESOLVED FIXED

(Core :: Disability Access APIs, defect, P2)

Description

[Tyson Smith [:tsmith]]

Attachment: testcase.html

The attached testcase seems to trigger the issues about 50% of the time and any changes seem to make it less reliable.

==75599==ERROR: AddressSanitizer: stack-overflow on address 0x7ffe5ed58ff8 (pc 0x7fba70ed1948 bp 0x7ffe5ed59010 sp 0x7ffe5ed59000 T0)
    #0 0x7fba70ed1947 in mozilla::a11y::Accessible::SetARIAHidden(bool) /src/accessible/generic/Accessible.cpp:2600
    #1 0x7fba70ed1a89 in mozilla::a11y::Accessible::SetARIAHidden(bool) /src/accessible/generic/Accessible.cpp:2608:19
    #2 0x7fba70ed1a89 in mozilla::a11y::Accessible::SetARIAHidden(bool) /src/accessible/generic/Accessible.cpp:2608:19
...

Comment 1

[Marco Zehe (:MarcoZ)]

Now that we're cutting the tree, it is worth retesting this if it still triggers. :)

Comment 2

[Tyson Smith [:tsmith]]

I can no longer reproduce the issue and it looks like it was last hit by the fuzzers around July 2nd. Any idea which bug fixed it?

Comment 3

[alexander :surkov (:asurkov)]

I believe bug 1349223 fixed this one

Comment 4

[Ryan VanderMeulen [:RyanVM]]

Is it worth landing the attached testcase as a crashtest?

Comment 5

[alexander :surkov (:asurkov)]

(In reply to Ryan VanderMeulen [:RyanVM] from comment #4)
> Is it worth landing the attached testcase as a crashtest?

Sure, all stack-overflows is a scary thing, and better to have it covered. I will do the test when I get around, or if anyone is interested, please free to pick up this one.