1534843 - stack-overflow in [@mozilla::a11y::filters::GetRow]

Status: RESOLVED FIXED

(Core :: Disability Access APIs, defect, P3)

Description

[Tyson Smith [:tsmith]]

Attachment: testcase.html

==9486==ERROR: AddressSanitizer: stack-overflow on address 0x7fff80103fa8 (pc 0x55ec6da16d2f bp 0x7fff801047f0 sp 0x7fff80103fa0 T0)
    ...
    #6 0x7f9bb438cfc2 in mozilla::a11y::ARIAGridAccessible::CellAt(unsigned int, unsigned int) src/accessible/generic/ARIAGridAccessible.cpp:83
    #7 0x7f9bb441e038 in mozilla::a11y::HTMLTableHeaderCellAccessible::NativeRole() const src/accessible/html/HTMLTableAccessible.cpp:288:29
    #8 0x7f9bb430dffe in Role src/accessible/generic/Accessible-inl.h:24:30
    #9 0x7f9bb430dffe in mozilla::a11y::filters::GetRow(mozilla::a11y::Accessible*) src/accessible/base/Filters.cpp:32
    #10 0x7f9bb42f1d59 in mozilla::a11y::AccIterator::Next() src/accessible/base/AccIterator.cpp:46:23
    #11 0x7f9bb438cfca in RowAt src/accessible/generic/TableAccessible.cpp:245:29
    #12 0x7f9bb438cfca in mozilla::a11y::ARIAGridAccessible::CellAt(unsigned int, unsigned int) src/accessible/generic/ARIAGridAccessible.cpp:83
    #13 0x7f9bb441e038 in mozilla::a11y::HTMLTableHeaderCellAccessible::NativeRole() const src/accessible/html/HTMLTableAccessible.cpp:288:29
    #14 0x7f9bb430dffe in Role src/accessible/generic/Accessible-inl.h:24:30
    #15 0x7f9bb430dffe in mozilla::a11y::filters::GetRow(mozilla::a11y::Accessible*) src/accessible/base/Filters.cpp:32
    #16 0x7f9bb42f1d59 in mozilla::a11y::AccIterator::Next() src/accessible/base/AccIterator.cpp:46:23
    #17 0x7f9bb438cfca in RowAt src/accessible/generic/TableAccessible.cpp:245:29
    ...

Comment 1

[James Teh [:Jamie]]

ARIAGridAccessible and Filters::GetRow no longer exist, so this can no longer occur.