Closed Bug 1709390 Opened 4 years ago Closed 4 years ago

VoiceOver Crash in [@ objc_msgSend | -[NSAccessibilityAttributeAccessorInfo _getAttributeValueForObject:]]

Categories

(Firefox :: Disability Access, defect, P1)

Firefox 90
Unspecified
macOS
defect

Tracking

()

VERIFIED FIXED
90 Branch
Tracking Status
firefox-esr78 --- unaffected
firefox88 --- unaffected
firefox89 --- unaffected
firefox90 blocking verified
firefox91 --- verified

People

(Reporter: dveditz, Unassigned)

References

(Regression)

Details

(Keywords: crash, regression, Whiteboard: [not-a-fission-bug])

Crash Data

I've his this crash twice now, and all the crashes with this signature in socorro are from today's build. Once I was trying to enter emoji into a tweet (plausibly accessibility related?) and the second crash I was in another app entirely and Firefox went down on its own. I've also experienced whole-app flickers in this build, but that might be an unrelated web render issue.

From Socorro:

Maybe Fission related. (DOMFissionEnabled=1)

Crash report: https://crash-stats.mozilla.org/report/index/ed019f47-3749-4d5f-aaa5-96e4e0210504

Reason: EXC_BAD_ACCESS / EXC_I386_GPFLT

Top 10 frames of crashing thread:

0 libobjc.A.dylib objc_msgSend 
1 AppKit -[NSAccessibilityAttributeAccessorInfo _getAttributeValueForObject:] 
2 AppKit -[NSAccessibilityAttributeAccessorInfo getAttributeValue:forObject:] 
3 AppKit ___NSAccessibilityEntryPointValueForAttribute_block_invoke.811 
4 AppKit NSAccessibilityPerformEntryPointObject 
5 AppKit _NSAccessibilityEntryPointValueForAttribute 
6 AppKit -[NSObject _accessibilityValueForAttribute:clientError:] 
7 AppKit CopyAppKitUIElementAttributeValueNoCatch 
8 AppKit CopyAttributeValue 
9 HIServices _AXXMIGCopyAttributeValue 

Morgan, could this be from bug 1706910?

Flags: needinfo?(mreschenberg)

The only accessibility change I see yesterday is Part 25 of bug 1694865, but that's all in the /windows/ subdirectory
[update: completely missed bug 1706910 -- thanks Sebastian, that seems more plausible]

Flags: needinfo?(mreschenberg)

Hmm possibly related to the first, I don' think its part of the windows changes. Adding eitan to CC so he can investigate too

Severity: -- → S1
Priority: -- → P1

marking p1s1 because this causes firefox to crash on startup with VoiceOver enabled :(

Regressed by: 1706910
Has Regression Range: --- → yes
Crash Signature: [@ objc_msgSend | -[NSAccessibilityAttributeAccessorInfo _getAttributeValueForObject:]] → [@ libobjc.A.dylib@0x681d] [@ libobjc.A.dylib@0x6829] [@ objc_msgSend | -[NSAccessibilityAttributeAccessorInfo _getAttributeValueForObject:]]
Summary: Crash in [@ objc_msgSend | -[NSAccessibilityAttributeAccessorInfo _getAttributeValueForObject:]] → VoiceOver Crash in [@ objc_msgSend | -[NSAccessibilityAttributeAccessorInfo _getAttributeValueForObject:]]
Whiteboard: [not-a-fission-bug]

Fixed by backout of bug 1706910.

Status: NEW → RESOLVED
Closed: 4 years ago
Resolution: --- → FIXED
Target Milestone: --- → 90 Branch

Reproduced the crash on Firefox 90.0a1 (2021-05-04) under macOS 10.15.7.

The crash is no longer occurring on Firefox 90.0b4 and Firefox 91.0a1 (2021-06-07) on the same machine.

Status: RESOLVED → VERIFIED
Flags: qe-verify+
You need to log in before you can comment on or make changes to this bug.