Open
Bug 1449593
Opened 7 years ago
Updated 2 years ago
Assertion failure: aChildDoc->mChildDocs.Length() == 0, at /home/worker/workspace/build/src/accessible/ipc/DocAccessibleParent.h:117
Categories
(Core :: Disability Access APIs, defect, P3)
Tracking
()
NEW
People
(Reporter: jkratzer, Unassigned)
References
(Blocks 1 open bug)
Details
(Keywords: assertion, testcase)
Attachments
(2 files)
Testcase found while fuzzing esr52 rev d61516b059c1.
Firefox must be launched using the GNOME_ACCESSIBILITY env variable.
rax = 0x0000000000628e10 rdx = 0x0000000000000000
rcx = 0x00007faf02049755 rbx = 0x00007faecee9a3e0
rsi = 0x00007faf0ef95770 rdi = 0x00007faf0ef94540
rbp = 0x00007ffc09307750 rsp = 0x00007ffc09307740
r8 = 0x00007faf0ef95770 r9 = 0x00007faf10060740
r10 = 0x000000000000003a r11 = 0x0000000000000000
r12 = 0x00007faed039e840 r13 = 0x00007faecd060828
r14 = 0x00007ffc09307801 r15 = 0x00007ffc09307844
rip = 0x00007faf007b42c2
OS|Linux|0.0.0 Linux 4.4.0-116-generic #140-Ubuntu SMP Mon Feb 12 21:23:04 UTC 2018 x86_64
CPU|amd64|family 6 model 78 stepping 3|1
GPU|||
Crash|SIGSEGV|0x0|0
0|0|libxul.so|mozilla::a11y::DocAccessibleParent::RemoveChildDoc|hg:hg.mozilla.org/releases/mozilla-esr52:accessible/ipc/DocAccessibleParent.h:d61516b059c1|117|0x0
0|1|libxul.so|mozilla::a11y::ProxyAccessibleBase<mozilla::a11y::ProxyAccessible>::Shutdown|hg:hg.mozilla.org/releases/mozilla-esr52:accessible/ipc/DocAccessibleParent.h:d61516b059c1|80|0x8
0|2|libxul.so|mozilla::a11y::DocAccessibleParent::RecvHideEvent|hg:hg.mozilla.org/releases/mozilla-esr52:accessible/ipc/DocAccessibleParent.cpp:d61516b059c1|180|0x8
0|3|libxul.so|mozilla::a11y::PDocAccessibleParent::OnMessageReceived|hg:hg.mozilla.org/releases/mozilla-esr52:obj-firefox/ipc/ipdl/PDocAccessibleParent.cpp:d61516b059c1|6730|0x12
0|4|libxul.so|mozilla::ipc::MessageChannel::DispatchAsyncMessage|hg:hg.mozilla.org/releases/mozilla-esr52:ipc/glue/MessageChannel.cpp:d61516b059c1|1743|0x6
0|5|libxul.so|mozilla::ipc::MessageChannel::DispatchMessage|hg:hg.mozilla.org/releases/mozilla-esr52:ipc/glue/MessageChannel.cpp:d61516b059c1|1681|0xb
0|6|libxul.so|mozilla::ipc::MessageChannel::RunMessage|hg:hg.mozilla.org/releases/mozilla-esr52:ipc/glue/MessageChannel.cpp:d61516b059c1|1572|0xb
0|7|libxul.so|mozilla::ipc::MessageChannel::MessageTask::Run|hg:hg.mozilla.org/releases/mozilla-esr52:ipc/glue/MessageChannel.cpp:d61516b059c1|1597|0xc
0|8|libxul.so|nsThread::ProcessNextEvent|hg:hg.mozilla.org/releases/mozilla-esr52:xpcom/threads/nsThread.cpp:d61516b059c1|1216|0x11
0|9|libxul.so|NS_ProcessNextEvent|hg:hg.mozilla.org/releases/mozilla-esr52:xpcom/glue/nsThreadUtils.cpp:d61516b059c1|361|0xd
0|10|libxul.so|mozilla::ipc::MessagePump::Run|hg:hg.mozilla.org/releases/mozilla-esr52:ipc/glue/MessagePump.cpp:d61516b059c1|124|0xd
0|11|libxul.so|MessageLoop::RunInternal|hg:hg.mozilla.org/releases/mozilla-esr52:ipc/chromium/src/base/message_loop.cc:d61516b059c1|232|0x17
0|12|libxul.so|MessageLoop::Run|hg:hg.mozilla.org/releases/mozilla-esr52:ipc/chromium/src/base/message_loop.cc:d61516b059c1|225|0x8
0|13|libxul.so|nsBaseAppShell::Run|hg:hg.mozilla.org/releases/mozilla-esr52:widget/nsBaseAppShell.cpp:d61516b059c1|156|0xd
0|14|libxul.so|nsAppStartup::Run|hg:hg.mozilla.org/releases/mozilla-esr52:toolkit/components/startup/nsAppStartup.cpp:d61516b059c1|283|0x6
0|15|libxul.so|XREMain::XRE_mainRun|hg:hg.mozilla.org/releases/mozilla-esr52:toolkit/xre/nsAppRunner.cpp:d61516b059c1|4488|0x11
0|16|libxul.so|XREMain::XRE_main|hg:hg.mozilla.org/releases/mozilla-esr52:toolkit/xre/nsAppRunner.cpp:d61516b059c1|4621|0x5
0|17|libxul.so|XRE_main|hg:hg.mozilla.org/releases/mozilla-esr52:toolkit/xre/nsAppRunner.cpp:d61516b059c1|4712|0x5
0|18|firefox|do_main|hg:hg.mozilla.org/releases/mozilla-esr52:browser/app/nsBrowserApp.cpp:d61516b059c1|282|0x6
0|19|firefox|main|hg:hg.mozilla.org/releases/mozilla-esr52:browser/app/nsBrowserApp.cpp:d61516b059c1|415|0x12
0|20|libc-2.23.so||||0x20830
0|21|firefox|MOZ_ReportAssertionFailure|hg:hg.mozilla.org/releases/mozilla-esr52:mfbt/Assertions.h:d61516b059c1|170|0x5
Flags: in-testsuite?
|
Reporter | |
Comment 1•7 years ago
|
||
|
||
Updated•7 years ago
|
Priority: -- → P3
| Comment hidden (Intermittent Failures Robot) |
|
||
Updated•2 years ago
|
Severity: normal → S3
You need to log in
before you can comment on or make changes to this bug.
Description
•