Open Bug 1427811 Opened 5 years ago Updated 3 months ago

[triggered by accessibility] Assertion failure: mRawPtr != nullptr (You can't dereference a NULL nsCOMPtr with operator->().), at /builds/worker/workspace/build/src/obj-firefox/dist/include/nsCOMPtr.h:801

Categories

(Core :: Disability Access APIs, defect, P3)

59 Branch
defect

Tracking

()

REOPENED
94 Branch
Tracking Status
firefox-esr78 --- unaffected
firefox-esr91 --- unaffected
firefox59 --- wontfix
firefox92 --- unaffected
firefox93 --- unaffected
firefox94 --- affected

People

(Reporter: jkratzer, Assigned: Jamie)

References

(Blocks 1 open bug, Regression)

Details

(4 keywords, Whiteboard: [retriggered][stockwell unknown])

Attachments

(2 files)

Testcase found while fuzzing mozilla-central rev ac93fdadf102.  On Linux, the testcase requires the GNOME_ACCESSIBILITY=1 env variable in order to reproduce the issue.  Further, the fuzzPriv extension is also required in order to reproduce the issue.

The fuzzPriv extension can be found at the following URL:
https://github.com/MozillaSecurity/fuzzpriv

rax = 0x0000000000000000   rdx = 0x0000000000000000
rcx = 0x00007f68a217b2ad   rbx = 0x0000000000000001
rsi = 0x00007f68a244a770   rdi = 0x00007f68a2449540
rbp = 0x00007fff0af9c690   rsp = 0x00007fff0af9c690
r8 = 0x00007f68a244a770    r9 = 0x00007f68a3730740
r10 = 0x0000000000000039   r11 = 0x0000000000000000
r12 = 0x00007fff0af9c6e0   r13 = 0x00007f68763610c0
r14 = 0x00007f687ea0fa10   r15 = 0x00007f687fefb160
rip = 0x00007f68915bcae6
OS|Linux|0.0.0 Linux 4.4.0-104-generic #127-Ubuntu SMP Mon Dec 11 12:16:42 UTC 2017 x86_64
CPU|amd64|family 6 model 78 stepping 3|1
GPU|||
Crash|SIGSEGV|0x0|0
0|0|libxul.so|nsCOMPtr<nsINode>::operator->|hg:hg.mozilla.org/mozilla-central:xpcom/base/nsCOMPtr.h:ac93fdadf102|800|0x5
0|1|libxul.so|mozilla::a11y::RootAccessible::ProcessDOMEvent|hg:hg.mozilla.org/mozilla-central:accessible/generic/RootAccessible.cpp:ac93fdadf102|285|0xc
0|2|libxul.so|mozilla::a11y::NotificationController::WillRefresh|hg:hg.mozilla.org/mozilla-central:accessible/base/NotificationController.cpp:ac93fdadf102|838|0x5
0|3|libxul.so|nsRefreshDriver::Tick|hg:hg.mozilla.org/mozilla-central:layout/base/nsRefreshDriver.cpp:ac93fdadf102|1862|0xd
0|4|libxul.so|mozilla::RefreshDriverTimer::TickRefreshDrivers|hg:hg.mozilla.org/mozilla-central:layout/base/nsRefreshDriver.cpp:ac93fdadf102|306|0xf
0|5|libxul.so|mozilla::RefreshDriverTimer::Tick|hg:hg.mozilla.org/mozilla-central:layout/base/nsRefreshDriver.cpp:ac93fdadf102|328|0x12
0|6|libxul.so|mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver::TickRefreshDriver|hg:hg.mozilla.org/mozilla-central:layout/base/nsRefreshDriver.cpp:ac93fdadf102|769|0x5
0|7|libxul.so|mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver::NotifyVsync|hg:hg.mozilla.org/mozilla-central:layout/base/nsRefreshDriver.cpp:ac93fdadf102|583|0xc
0|8|libxul.so|mozilla::layout::VsyncChild::RecvNotify|hg:hg.mozilla.org/mozilla-central:layout/ipc/VsyncChild.cpp:ac93fdadf102|68|0x9
0|9|libxul.so|mozilla::layout::PVsyncChild::OnMessageReceived|s3:gecko-generated-sources:06086093ccb59dd5a99cf8c9f9fb7f4860fd8ddbfd516af5e5b3508be62029679421dcf2abdf6b1c945b6a054050bd403c9574aad49f857cb4a31d3f4cf56b9a/ipc/ipdl/PVsyncChild.cpp:|155|0xf
0|10|libxul.so|mozilla::ipc::MessageChannel::DispatchAsyncMessage|hg:hg.mozilla.org/mozilla-central:ipc/glue/MessageChannel.cpp:ac93fdadf102|2110|0x6
0|11|libxul.so|mozilla::ipc::MessageChannel::DispatchMessage|hg:hg.mozilla.org/mozilla-central:ipc/glue/MessageChannel.cpp:ac93fdadf102|2040|0xb
0|12|libxul.so|mozilla::ipc::MessageChannel::RunMessage|hg:hg.mozilla.org/mozilla-central:ipc/glue/MessageChannel.cpp:ac93fdadf102|1886|0xb
0|13|libxul.so|mozilla::ipc::MessageChannel::MessageTask::Run|hg:hg.mozilla.org/mozilla-central:ipc/glue/MessageChannel.cpp:ac93fdadf102|1919|0xc
0|14|libxul.so|nsThread::ProcessNextEvent|hg:hg.mozilla.org/mozilla-central:xpcom/threads/nsThread.cpp:ac93fdadf102|1039|0x15
0|15|libxul.so|NS_ProcessNextEvent|hg:hg.mozilla.org/mozilla-central:xpcom/threads/nsThreadUtils.cpp:ac93fdadf102|510|0x11
0|16|libxul.so|mozilla::ipc::MessagePump::Run|hg:hg.mozilla.org/mozilla-central:ipc/glue/MessagePump.cpp:ac93fdadf102|97|0xa
0|17|libxul.so|MessageLoop::RunInternal|hg:hg.mozilla.org/mozilla-central:ipc/chromium/src/base/message_loop.cc:ac93fdadf102|326|0x17
0|18|libxul.so|MessageLoop::Run|hg:hg.mozilla.org/mozilla-central:ipc/chromium/src/base/message_loop.cc:ac93fdadf102|319|0x8
0|19|libxul.so|nsBaseAppShell::Run|hg:hg.mozilla.org/mozilla-central:widget/nsBaseAppShell.cpp:ac93fdadf102|157|0xd
0|20|libxul.so|XRE_RunAppShell|hg:hg.mozilla.org/mozilla-central:toolkit/xre/nsEmbedFunctions.cpp:ac93fdadf102|875|0x11
0|21|libxul.so|mozilla::ipc::MessagePumpForChildProcess::Run|hg:hg.mozilla.org/mozilla-central:ipc/glue/MessagePump.cpp:ac93fdadf102|269|0x5
0|22|libxul.so|MessageLoop::RunInternal|hg:hg.mozilla.org/mozilla-central:ipc/chromium/src/base/message_loop.cc:ac93fdadf102|326|0x17
0|23|libxul.so|MessageLoop::Run|hg:hg.mozilla.org/mozilla-central:ipc/chromium/src/base/message_loop.cc:ac93fdadf102|319|0x8
0|24|libxul.so|XRE_InitChildProcess|hg:hg.mozilla.org/mozilla-central:toolkit/xre/nsEmbedFunctions.cpp:ac93fdadf102|701|0x8
0|25|firefox|content_process_main|hg:hg.mozilla.org/mozilla-central:ipc/contentproc/plugin-container.cpp:ac93fdadf102|63|0x14
0|26|firefox|main|hg:hg.mozilla.org/mozilla-central:browser/app/nsBrowserApp.cpp:ac93fdadf102|280|0x11
0|27|libc-2.23.so||||0x20830
0|28|firefox|MOZ_ReportAssertionFailure|hg:hg.mozilla.org/mozilla-central:mfbt/Assertions.h:ac93fdadf102|165|0x5
Flags: in-testsuite?
Jason, you forgot to attach a test case eventually?
Flags: needinfo?(jkratzer)
Priority: -- → P3
Attached file trigger.html
Apologies for the delay.  Testcase attached.
Flags: needinfo?(jkratzer)

Recent failure log: https://treeherder.mozilla.org/logviewer.html#/jobs?job_id=310121668&repo=mozilla-central&lineNumber=2461

[task 2020-07-17T04:03:52.111Z] 04:03:52 INFO - TEST-START | docshell/test/navigation/test_load_history_entry.html
[task 2020-07-17T04:03:52.208Z] 04:03:52 INFO - GECKO(1707) | Assertion failure: mRawPtr != nullptr (You can't dereference a NULL nsCOMPtr with operator->().), at /builds/worker/workspace/obj-build/dist/include/nsCOMPtr.h:859
[task 2020-07-17T04:03:52.245Z] 04:03:52 INFO - Initializing stack-fixing for the first stack frame, this may take a while...
[task 2020-07-17T04:04:07.925Z] 04:04:07 INFO - GECKO(1707) | #01: nsFocusManager::WindowHidden(mozIDOMWindowProxy*) [dom/base/nsFocusManager.cpp:1034]
[task 2020-07-17T04:04:07.926Z] 04:04:07 INFO - GECKO(1707) | #02: <name omitted> [dom/base/nsGlobalWindowInner.cpp:4196]
[task 2020-07-17T04:04:07.926Z] 04:04:07 INFO - GECKO(1707) | #03: nsDocumentViewer::PageHide(bool) [layout/base/nsDocumentViewer.cpp:1380]
[task 2020-07-17T04:04:07.927Z] 04:04:07 INFO - GECKO(1707) | #04: nsDocShell::FirePageHideNotificationInternal(bool, bool) [docshell/base/nsDocShell.cpp:1006]
[task 2020-07-17T04:04:07.927Z] 04:04:07 INFO - GECKO(1707) | #05: nsDocShell::Destroy() [docshell/base/nsDocShell.cpp:4151]
[task 2020-07-17T04:04:07.927Z] 04:04:07 INFO - GECKO(1707) | #06: nsWebBrowser::SetDocShell(nsDocShell*) [toolkit/components/browser/nsWebBrowser.cpp:1133]
[task 2020-07-17T04:04:07.928Z] 04:04:07 INFO - GECKO(1707) | #07: nsWebBrowser::InternalDestroy() [toolkit/components/browser/nsWebBrowser.cpp:176]
[task 2020-07-17T04:04:07.928Z] 04:04:07 INFO - GECKO(1707) | #08: non-virtual thunk to nsWebBrowser::Destroy() [toolkit/components/browser/nsWebBrowser.cpp:0]
[task 2020-07-17T04:04:07.928Z] 04:04:07 INFO - GECKO(1707) | #09: mozilla::dom::BrowserChild::DestroyWindow() [dom/ipc/BrowserChild.cpp:896]
[task 2020-07-17T04:04:07.929Z] 04:04:07 INFO - GECKO(1707) | #10: mozilla::dom::BrowserChild::RecvDestroy() [dom/ipc/BrowserChild.cpp:2346]
[task 2020-07-17T04:04:07.929Z] 04:04:07 INFO - GECKO(1707) | #11: mozilla::dom::PBrowserChild::OnMessageReceived(IPC::Message const&) [s3:gecko-generated-sources:0737fcecc4282a40df0487e3cfc7ca0eccaaff3e238412e1f2c776bbb3d298d4a3755eac0386df40d4ccae91eb3b483577226feb38e095ceb3965ea5db46ed38/ipc/ipdl/PBrowserChild.cpp::0]
[task 2020-07-17T04:04:07.929Z] 04:04:07 INFO - GECKO(1707) | #12: mozilla::dom::PContentChild::OnMessageReceived(IPC::Message const&) [s3:gecko-generated-sources:bbc325dab19b6b2653ee83a8c5783aff36c158d7a8e40888719e8eb3a8941e4793999a3f6e3cb9ca42af455cbb375f753c229a5c76ab4f4f404654cb7ac501c3/ipc/ipdl/PContentChild.cpp::8383]
[task 2020-07-17T04:04:07.930Z] 04:04:07 INFO - GECKO(1707) | #13: mozilla::ipc::MessageChannel::DispatchAsyncMessage(mozilla::ipc::ActorLifecycleProxy*, IPC::Message const&) [ipc/glue/MessageChannel.cpp:2151]
[task 2020-07-17T04:04:07.931Z] 04:04:07 INFO - GECKO(1707) | #14: mozilla::ipc::MessageChannel::DispatchMessage(IPC::Message&&) [ipc/glue/MessageChannel.cpp:2077]
[task 2020-07-17T04:04:07.931Z] 04:04:07 INFO - GECKO(1707) | #15: mozilla::ipc::MessageChannel::RunMessage(mozilla::ipc::MessageChannel::MessageTask&) [ipc/glue/MessageChannel.cpp:0]
[task 2020-07-17T04:04:07.932Z] 04:04:07 INFO - GECKO(1707) | #16: mozilla::ipc::MessageChannel::MessageTask::Run() [ipc/glue/MessageChannel.cpp:1955]
[task 2020-07-17T04:04:07.932Z] 04:04:07 INFO - GECKO(1707) | #17: mozilla::RunnableTask::Run() [xpcom/threads/TaskController.cpp:245]
[task 2020-07-17T04:04:07.933Z] 04:04:07 INFO - GECKO(1707) | #18: mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&) [xpcom/threads/TaskController.cpp:499]
[task 2020-07-17T04:04:07.934Z] 04:04:07 INFO - GECKO(1707) | #19: mozilla::TaskController::ExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&) [xpcom/threads/TaskController.cpp:0]
[task 2020-07-17T04:04:07.934Z] 04:04:07 INFO - GECKO(1707) | #20: mozilla::TaskController::ProcessPendingMTTask(bool) [xpcom/threads/TaskController.cpp:164]
[task 2020-07-17T04:04:07.935Z] 04:04:07 INFO - GECKO(1707) | #21: mozilla::detail::RunnableFunction<mozilla::TaskController::InitializeInternal()::$_5>::Run() [xpcom/threads/nsThreadUtils.h:578]
[task 2020-07-17T04:04:07.935Z] 04:04:07 INFO - GECKO(1707) | #22: nsThread::ProcessNextEvent(bool, bool*) [xpcom/threads/nsThread.cpp:1236]
[task 2020-07-17T04:04:07.936Z] 04:04:07 INFO - GECKO(1707) | #23: NS_ProcessNextEvent(nsIThread*, bool) [xpcom/threads/nsThreadUtils.cpp:513]
[task 2020-07-17T04:04:07.937Z] 04:04:07 INFO - GECKO(1707) | #24: mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) [ipc/glue/MessagePump.cpp:0]
[task 2020-07-17T04:04:07.941Z] 04:04:07 INFO - GECKO(1707) | #25: MessageLoop::RunInternal() [ipc/chromium/src/base/message_loop.cc:334]
[task 2020-07-17T04:04:07.945Z] 04:04:07 INFO - GECKO(1707) | #26: MessageLoop::Run() [ipc/chromium/src/base/message_loop.cc:310]
[task 2020-07-17T04:04:07.949Z] 04:04:07 INFO - GECKO(1707) | #27: nsBaseAppShell::Run() [widget/nsBaseAppShell.cpp:139]
[task 2020-07-17T04:04:07.952Z] 04:04:07 INFO - GECKO(1707) | #28: XRE_RunAppShell() [toolkit/xre/nsEmbedFunctions.cpp:913]
[task 2020-07-17T04:04:07.955Z] 04:04:07 INFO - GECKO(1707) | #29: mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*) [ipc/glue/MessagePump.cpp:237]
[task 2020-07-17T04:04:07.958Z] 04:04:07 INFO - GECKO(1707) | #30: MessageLoop::RunInternal() [ipc/chromium/src/base/message_loop.cc:334]
[task 2020-07-17T04:04:07.961Z] 04:04:07 INFO - GECKO(1707) | #31: MessageLoop::Run() [ipc/chromium/src/base/message_loop.cc:310]
[task 2020-07-17T04:04:07.963Z] 04:04:07 INFO - GECKO(1707) | #32: XRE_InitChildProcess(int, char**, XREChildData const*) [toolkit/xre/nsEmbedFunctions.cpp:744]
[task 2020-07-17T04:04:08.021Z] 04:04:08 INFO - GECKO(1707) | #33: content_process_main(mozilla::Bootstrap*, int, char**) [ipc/contentproc/plugin-container.cpp:57]
[task 2020-07-17T04:04:08.029Z] 04:04:08 INFO - GECKO(1707) | #34: main [browser/app/nsBrowserApp.cpp:303]
[task 2020-07-17T04:04:08.033Z] 04:04:08 INFO - fix-stacks error: failed to read breakpad symbols dir /builds/worker/workspace/build/symbols/libc.so.6 for /lib/x86_64-linux-gnu/libc.so.6
[task 2020-07-17T04:04:08.037Z] 04:04:08 INFO - fix-stacks note: this is expected and harmless for system libraries on debug automation runs
[task 2020-07-17T04:04:08.037Z] 04:04:08 INFO - GECKO(1707) | #35: __libc_start_main [/lib/x86_64-linux-gnu/libc.so.6 + 0x21b97]
[task 2020-07-17T04:04:08.038Z] 04:04:08 INFO - GECKO(1707) | #36: ??? [/builds/worker/workspace/build/application/firefox/firefox-bin + 0x10ac9]
[task 2020-07-17T04:04:08.038Z] 04:04:08 INFO - GECKO(1707) | #37: ??? (???:???)
[task 2020-07-17T04:04:08.038Z] 04:04:08 INFO - GECKO(1707) | [Parent 1707, Breakpad Server] WARNING: Resource acquired is being released in non-LIFO order; why?
[task 2020-07-17T04:04:08.039Z] 04:04:08 INFO - GECKO(1707) | : file /builds/worker/checkouts/gecko/xpcom/threads/BlockingResourceBase.cpp, line 292
[task 2020-07-17T04:04:08.039Z] 04:04:08 INFO - GECKO(1707) | --- Mutex : dumpSafetyLock (currently acquired)
[task 2020-07-17T04:04:08.039Z] 04:04:08 INFO - GECKO(1707) | calling context
[task 2020-07-17T04:04:08.040Z] 04:04:08 INFO - GECKO(1707) | [stack trace unavailable]
[task 2020-07-17T04:04:08.040Z] 04:04:08 ERROR - GECKO(1707) | A content process crashed and MOZ_CRASHREPORTER_SHUTDOWN is set, shutting down
[task 2020-07-17T04:04:08.040Z] 04:04:08 INFO - GECKO(1707) | [Parent 1707, Main Thread] WARNING: IPC message discarded: actor cannot send: file /builds/worker/checkouts/gecko/ipc/glue/ProtocolUtils.cpp, line 470
[task 2020-07-17T04:04:08.041Z] 04:04:08 INFO - GECKO(1707) | [Parent 1707, Main Thread] WARNING: IPC message discarded: actor cannot send: file /builds/worker/checkouts/gecko/ipc/glue/ProtocolUtils.cpp, line 470
[task 2020-07-17T04:04:08.041Z] 04:04:08 INFO - GECKO(1707) | [Parent 1707, Main Thread] WARNING: IPC message discarded: actor cannot send: file /builds/worker/checkouts/gecko/ipc/glue/ProtocolUtils.cpp, line 470
[task 2020-07-17T04:04:08.041Z] 04:04:08 INFO - GECKO(1707) | [Parent 1707, Main Thread] WARNING: IPC message discarded: actor cannot send: file /builds/worker/checkouts/gecko/ipc/glue/ProtocolUtils.cpp, line 470
[task 2020-07-17T04:04:08.041Z] 04:04:08 INFO - GECKO(1707) | [Parent 1707, Main Thread] WARNING: IPC message discarded: actor cannot send: file /builds/worker/checkouts/gecko/ipc/glue/ProtocolUtils.cpp, line 470
[task 2020-07-17T04:04:08.042Z] 04:04:08 INFO - GECKO(1707) | [Parent 1707, Main Thread] WARNING: IPC message discarded: actor cannot send: file /builds/worker/checkouts/gecko/ipc/glue/ProtocolUtils.cpp, line 470
[task 2020-07-17T04:04:08.042Z] 04:04:08 INFO - GECKO(1707) | [Parent 1707, Main Thread] WARNING: IPC message discarded: actor cannot send: file /builds/worker/checkouts/gecko/ipc/glue/ProtocolUtils.cpp, line 470
[task 2020-07-17T04:04:08.044Z] 04:04:08 INFO - GECKO(1707) | [Parent 1707, Main Thread] WARNING: IPC message discarded: actor cannot send: file /builds/worker/checkouts/gecko/ipc/glue/ProtocolUtils.cpp, line 470
[task 2020-07-17T04:04:08.045Z] 04:04:08 INFO - GECKO(1707) | [Parent 1707, Main Thread] WARNING: IPC message discarded: actor cannot send: file /builds/worker/checkouts/gecko/ipc/glue/ProtocolUtils.cpp, line 470
[task 2020-07-17T04:04:08.045Z] 04:04:08 INFO - GECKO(1707) | [Parent 1707, Main Thread] WARNING: IPC message discarded: actor cannot send: file /builds/worker/checkouts/gecko/ipc/glue/ProtocolUtils.cpp, line 470
[task 2020-07-17T04:04:08.045Z] 04:04:08 INFO - GECKO(1707) | [Parent 1707, Main Thread] WARNING: IPC message discarded: actor cannot send: file /builds/worker/checkouts/gecko/ipc/glue/ProtocolUtils.cpp, line 470
[task 2020-07-17T04:04:08.045Z] 04:04:08 INFO - GECKO(1707) | [Parent 1707, URL Classifier] WARNING: 'NS_FAILED(rv)', file /builds/worker/checkouts/gecko/netwerk/url-classifier/AsyncUrlChannelClassifier.cpp, line 243
[task 2020-07-17T04:04:08.052Z] 04:04:08 INFO - GECKO(1707) | [Parent 1707, URL Classifier] WARNING: 'NS_FAILED(rv)', file /builds/worker/checkouts/gecko/netwerk/url-classifier/AsyncUrlChannelClassifier.cpp, line 243
[task 2020-07-17T04:04:08.052Z] 04:04:08 INFO - GECKO(1707) | [Parent 1707, URL Classifier] WARNING: 'NS_FAILED(rv)', file /builds/worker/checkouts/gecko/netwerk/url-classifier/AsyncUrlChannelClassifier.cpp, line 243
[task 2020-07-17T04:04:08.052Z] 04:04:08 INFO - GECKO(1707) | [Parent 1707, URL Classifier] WARNING: 'NS_FAILED(rv)', file /builds/worker/checkouts/gecko/netwerk/url-classifier/AsyncUrlChannelClassifier.cpp, line 243
[task 2020-07-17T04:04:08.053Z] 04:04:08 INFO - GECKO(1707) | [Parent 1707, URL Classifier] WARNING: 'NS_FAILED(rv)', file /builds/worker/checkouts/gecko/netwerk/url-classifier/AsyncUrlChannelClassifier.cpp, line 243
[task 2020-07-17T04:04:08.053Z] 04:04:08 INFO - GECKO(1707) | [Parent 1707, URL Classifier] WARNING: 'NS_FAILED(rv)', file /builds/worker/checkouts/gecko/netwerk/url-classifier/AsyncUrlChannelClassifier.cpp, line 243
[task 2020-07-17T04:04:08.053Z] 04:04:08 INFO - GECKO(1707) | [Parent 1707, URL Classifier] WARNING: 'NS_FAILED(rv)', file /builds/worker/checkouts/gecko/netwerk/url-classifier/AsyncUrlChannelClassifier.cpp, line 243
[task 2020-07-17T04:04:08.053Z] 04:04:08 INFO - GECKO(1707) | [Parent 1707, URL Classifier] WARNING: 'NS_FAILED(rv)', file /builds/worker/checkouts/gecko/netwerk/url-classifier/AsyncUrlChannelClassifier.cpp, line 243
[task 2020-07-17T04:04:08.053Z] 04:04:08 INFO - GECKO(1707) | [Parent 1707, URL Classifier] WARNING: 'NS_FAILED(rv)', file /builds/worker/checkouts/gecko/netwerk/url-classifier/AsyncUrlChannelClassifier.cpp, line 243
[task 2020-07-17T04:04:08.053Z] 04:04:08 INFO - GECKO(1707) | [Parent 1707, URL Classifier] WARNING: 'NS_FAILED(rv)', file /builds/worker/checkouts/gecko/netwerk/url-classifier/AsyncUrlChannelClassifier.cpp, line 243
[task 2020-07-17T04:04:08.053Z] 04:04:08 INFO - GECKO(1707) | [GPU 1745, Compositor] WARNING: Possibly dropping task posted to updater thread: file /builds/worker/checkouts/gecko/gfx/layers/apz/src/APZUpdater.cpp, line 370
[task 2020-07-17T04:04:08.053Z] 04:04:08 INFO - GECKO(1707) | ###!!! [Parent][RunMessage] Error: Channel closing: too late to send/recv, messages will be lost

The crash from comment 6 is in no way related to this bug.

Flags: needinfo?(kmaglione+bmo)
No longer regressed by: 1646542

James can you please assign someone to take a look?

Flags: needinfo?(jteh)
Whiteboard: [retriggered] → [retriggered][stockwell needswork:owner]

The crash in comment 6 (which I assume is the same crash in the other intermittent failures on CI) is not related to accessibility. That is, even though it's the same assertion, the code path is very different to comment 0. This bug is about an assertion triggered by accessibility, whereas comment 6 (the intermittent failures) is an assertion triggered by something else (DOM?). I think a separate bug should be filed for those intermittents.

Flags: needinfo?(jteh)

Filed bug 1655011.
Will close this as worksforme so it doesn't get suggested anymore.
Thank you.

Status: NEW → RESOLVED
Closed: 3 years ago
Resolution: --- → WORKSFORME

This a11y bug is still valid, even though it's not causing intermittent failures. So, I don't think it should be closed. Is there some way we can leave it open without it becoming a suggestion for the unrelated intermittent failures?

Flags: needinfo?(apavel)

(In reply to James Teh [:Jamie] from comment #15)

This a11y bug is still valid, even though it's not causing intermittent failures. So, I don't think it should be closed. Is there some way we can leave it open without it becoming a suggestion for the unrelated intermittent failures?

Will see if these changes help. If not, we'll update the summary again. Thanks!

Status: RESOLVED → REOPENED
Flags: needinfo?(apavel)
Resolution: WORKSFORME → ---
Summary: Assertion failure: mRawPtr != nullptr (You can't dereference a NULL nsCOMPtr with operator->().), at /builds/worker/workspace/build/src/obj-firefox/dist/include/nsCOMPtr.h:801 → [triggered by accessibility] Assertion failure: mRawPtr != nullptr (You can't dereference a NULL nsCOMPtr with operator->().), at /builds/worker/workspace/build/src/obj-firefox/dist/include/nsCOMPtr.h:801
Flags: needinfo?(nika)

here have been 73 total failures in the last 7 days, recent failure log.
Affected platforms are:

  • linux1804-64-qr
  • macosx1015-64-qr
  • windows10-64-2004-qr

This stack seems to be missing some useful frames. :( Is there some reason a Document would now return null for GetDocumentURI() or GetDocShell() while calling OnStateChange listeners during nsDocLoader::doStopDocumentLoad when it didn't return null before?

(In reply to James Teh [:Jamie] from comment #25)

This stack seems to be missing some useful frames. :( Is there some reason a Document would now return null for GetDocumentURI() or GetDocShell() while calling OnStateChange listeners during nsDocLoader::doStopDocumentLoad when it didn't return null before?

The triggering bug caused some slight timing changes which may have had this impact, though I don't know enough about how this situation is encountered to know for sure.

Flags: needinfo?(nika)
Assignee: nobody → jteh

It's worth noting that this new spike is different again to the fuzzing issue described in comment 0. I'm putting the patch here because this is where the intermittents are being tracked, but assuming this fixes the spike, the issue in comment 0 still isn't fixed.

Pushed by archaeopteryx@coole-files.de:
https://hg.mozilla.org/integration/autoland/rev/185a799962ec
Add null checks to some a11y document logging functions. r=eeejay
Status: REOPENED → RESOLVED
Closed: 3 years ago2 years ago
Resolution: --- → FIXED
Target Milestone: --- → 94 Branch

Reopening this because the issue found by fuzzing described in comment 0 still isn't fixed. Unfortunately, this signature is broad enough that intermittents keep landing here for other instances of this assertion.

Status: RESOLVED → REOPENED
Resolution: FIXED → ---
Has Regression Range: --- → yes
Severity: normal → S3
You need to log in before you can comment on or make changes to this bug.