Closed Bug 1778916 Opened 3 years ago Closed 4 months ago

Intermittent org.mozilla.geckoview.test.AccessibilityTest#testAriaComboBoxesMovingByControl | application crashed [@ mozilla::a11y::SessionAccessibility::UnregisterAccessible]

Categories

(Core :: Disability Access APIs, defect)

All
Android
defect

Tracking

()

RESOLVED INCOMPLETE

People

(Reporter: intermittent-bug-filer, Unassigned)

References

Details

(Keywords: crash, intermittent-failure)

Crash Data

Filed by: smolnar [at] mozilla.com
Parsed log: https://treeherder.mozilla.org/logviewer?job_id=383913374&repo=autoland
Full log: https://firefox-ci-tc.services.mozilla.com/api/queue/v1/task/f__uwBhVSYawFebcb2WXSg/runs/0/artifacts/public/logs/live_backing.log


INFO -  TEST-START | org.mozilla.geckoview.test.AccessibilityTest#testAriaComboBoxesMovingByControl
[task 2022-07-10T22:27:47.884Z] 22:27:47     INFO -  org.mozilla.geckoview.test | INSTRUMENTATION_RESULT: shortMsg=Process crashed.
[task 2022-07-10T22:27:47.884Z] 22:27:47     INFO -  org.mozilla.geckoview.test | INSTRUMENTATION_CODE: 0
[task 2022-07-10T22:27:47.894Z] 22:27:47     INFO -  Passed: 29
[task 2022-07-10T22:27:47.894Z] 22:27:47     INFO -  Failed: 0
[task 2022-07-10T22:27:47.894Z] 22:27:47     INFO -  Todo: 0
[task 2022-07-10T22:27:47.894Z] 22:27:47  WARNING -  TEST-UNEXPECTED-FAIL | runjunit.py | Some tests did not run (probably due to a crash in the harness)
[task 2022-07-10T22:27:47.894Z] 22:27:47     INFO -  SUITE-END | took 23s
[task 2022-07-10T22:27:47.987Z] 22:27:47     INFO -  mozcrash Downloading symbols from: https://firefox-ci-tc.services.mozilla.com/api/queue/v1/task/c0AVlcWARZal4_5npOhu-Q/artifacts/public/build/target.crashreporter-symbols.zip
[task 2022-07-10T22:27:57.589Z] 22:27:57     INFO -  mozcrash Copy/paste: /builds/worker/fetches/minidump-stackwalk/minidump-stackwalk --symbols-url=https://symbols.mozilla.org/ --human /tmp/tmpjwh80xa9/6f1f579a-19a3-4562-e1df-613376d7cf66.dmp /tmp/tmp8j4thh7t
[task 2022-07-10T22:28:03.712Z] 22:28:03     INFO -  mozcrash Saved minidump as /builds/worker/workspace/build/blobber_upload_dir/6f1f579a-19a3-4562-e1df-613376d7cf66.dmp
[task 2022-07-10T22:28:03.712Z] 22:28:03     INFO -  mozcrash Saved app info as /builds/worker/workspace/build/blobber_upload_dir/6f1f579a-19a3-4562-e1df-613376d7cf66.extra
[task 2022-07-10T22:28:03.714Z] 22:28:03  WARNING -  PROCESS-CRASH | org.mozilla.geckoview.test.AccessibilityTest#testAriaComboBoxesMovingByControl | application crashed [@ mozilla::a11y::SessionAccessibility::UnregisterAccessible(mozilla::a11y::Accessible*)]
[task 2022-07-10T22:28:03.715Z] 22:28:03     INFO -  Mozilla crash reason: MOZ_ASSERT(sessionAcc) (Need SessionAccessibility to unregister Accessible!)
[task 2022-07-10T22:28:03.715Z] 22:28:03     INFO -  Crash dump filename: /tmp/tmpjwh80xa9/6f1f579a-19a3-4562-e1df-613376d7cf66.dmp
[task 2022-07-10T22:28:03.715Z] 22:28:03     INFO -  Operating system: Android
[task 2022-07-10T22:28:03.715Z] 22:28:03     INFO -                    0.0.0 Linux 3.10.0+ #260 SMP PREEMPT Fri May 19 12:48:14 PDT 2017 x86_64
[task 2022-07-10T22:28:03.715Z] 22:28:03     INFO -  CPU: amd64
[task 2022-07-10T22:28:03.715Z] 22:28:03     INFO -       family 6 model 6 stepping 3
[task 2022-07-10T22:28:03.715Z] 22:28:03     INFO -       4 CPUs
[task 2022-07-10T22:28:03.715Z] 22:28:03     INFO -  Crash reason:  SIGSEGV / SEGV_MAPERR
[task 2022-07-10T22:28:03.715Z] 22:28:03     INFO -  Crash address: 0x0
[task 2022-07-10T22:28:03.715Z] 22:28:03     INFO -  Process uptime: not available
[task 2022-07-10T22:28:03.715Z] 22:28:03     INFO -  Thread 15 Gecko (crashed)
[task 2022-07-10T22:28:03.715Z] 22:28:03     INFO -   0  libxul.so!mozilla::a11y::SessionAccessibility::UnregisterAccessible(mozilla::a11y::Accessible*) [SessionAccessibility.cpp:29c11e7045427efa7cd69d69d2fb9201093822a1 : 1045 + 0x29]
[task 2022-07-10T22:28:03.716Z] 22:28:03     INFO -       rax = 0x000072629dbcbed9    rdx = 0x0000000000000004
[task 2022-07-10T22:28:03.716Z] 22:28:03     INFO -       rcx = 0x00007262a12ead10    rbx = 0x00000000ffffffff
[task 2022-07-10T22:28:03.716Z] 22:28:03     INFO -       rsi = 0x00007262a1bee430    rdi = 0x000000000000001b
[task 2022-07-10T22:28:03.716Z] 22:28:03     INFO -       rbp = 0x00007262a1bef580    rsp = 0x00007262a1bef550
[task 2022-07-10T22:28:03.716Z] 22:28:03     INFO -        r8 = 0x000000000000ffff     r9 = 0x0000000000000000
[task 2022-07-10T22:28:03.716Z] 22:28:03     INFO -       r10 = 0x00007262be7d53d0    r11 = 0x0000000000000246
[task 2022-07-10T22:28:03.716Z] 22:28:03     INFO -       r12 = 0x000000000000005e    r13 = 0x00007262864505e0
[task 2022-07-10T22:28:03.716Z] 22:28:03     INFO -       r14 = 0x00007262864505e0    r15 = 0x00007262a1bef558
[task 2022-07-10T22:28:03.716Z] 22:28:03     INFO -       rip = 0x0000726299a28bfd
[task 2022-07-10T22:28:03.716Z] 22:28:03     INFO -      Found by: given as instruction pointer in context
INFO -   1  libxul.so!mozilla::a11y::DocAccessibleParent::Destroy() [DocAccessibleParent.cpp:29c11e7045427efa7cd69d69d2fb9201093822a1 : 992 + 0x7]
[task 2022-07-10T22:28:03.717Z] 22:28:03     INFO -       rbx = 0x00007262864505e0    rbp = 0x00007262a1bef610
[task 2022-07-10T22:28:03.717Z] 22:28:03     INFO -       rsp = 0x00007262a1bef590    r12 = 0x000000000000005e
[task 2022-07-10T22:28:03.717Z] 22:28:03     INFO -       r13 = 0x00007262864505e0    r14 = 0x00007262a1bef5b0
[task 2022-07-10T22:28:03.717Z] 22:28:03     INFO -       r15 = 0x00007262a1bef5b0    rip = 0x0000726299a95696
[task 2022-07-10T22:28:03.717Z] 22:28:03     INFO -      Found by: call frame info
[task 2022-07-10T22:28:03.717Z] 22:28:03     INFO -   2  libxul.so!mozilla::dom::BrowserParent::DestroyInternal() [BrowserParent.cpp:29c11e7045427efa7cd69d69d2fb9201093822a1 : 625 + 0x7]
[task 2022-07-10T22:28:03.717Z] 22:28:03     INFO -       rbx = 0x000072628671af00    rbp = 0x00007262a1bef640
[task 2022-07-10T22:28:03.717Z] 22:28:03     INFO -       rsp = 0x00007262a1bef620    r12 = 0xaaaaaaaaaaaaaaaa
[task 2022-07-10T22:28:03.717Z] 22:28:03     INFO -       r13 = 0x0000000000000001    r14 = 0x00007262864505e0
[task 2022-07-10T22:28:03.717Z] 22:28:03     INFO -       r15 = 0x00007262a03f9150    rip = 0x00007262986354d3
[task 2022-07-10T22:28:03.717Z] 22:28:03     INFO -      Found by: call frame info
[task 2022-07-10T22:28:03.718Z] 22:28:03     INFO -   3  libxul.so!mozilla::dom::BrowserParent::Destroy() [BrowserParent.cpp:29c11e7045427efa7cd69d69d2fb9201093822a1 : 644 + 0x7]
[task 2022-07-10T22:28:03.718Z] 22:28:03     INFO -       rbx = 0x000072628671af00    rbp = 0x00007262a1bef660
[task 2022-07-10T22:28:03.718Z] 22:28:03     INFO -       rsp = 0x00007262a1bef650    r12 = 0xaaaaaaaaaaaaaaaa
[task 2022-07-10T22:28:03.718Z] 22:28:03     INFO -       r13 = 0x0000000000000001    r14 = 0x0000726286718928
[task 2022-07-10T22:28:03.718Z] 22:28:03     INFO -       r15 = 0x00007262a1bef6c8    rip = 0x0000726298622349
[task 2022-07-10T22:28:03.718Z] 22:28:03     INFO -      Found by: call frame info
[task 2022-07-10T22:28:03.718Z] 22:28:03     INFO -   4  libxul.so!nsFrameLoader::DestroyDocShell() [nsFrameLoader.cpp:29c11e7045427efa7cd69d69d2fb9201093822a1 : 2029 + 0xd]
[task 2022-07-10T22:28:03.718Z] 22:28:03     INFO -       rbx = 0x0000726286e176b0    rbp = 0x00007262a1bef690
[task 2022-07-10T22:28:03.718Z] 22:28:03     INFO -       rsp = 0x00007262a1bef670    r12 = 0xaaaaaaaaaaaaaaaa
[task 2022-07-10T22:28:03.718Z] 22:28:03     INFO -       r13 = 0x0000000000000001    r14 = 0x0000726286718928
[task 2022-07-10T22:28:03.718Z] 22:28:03     INFO -       r15 = 0x00007262a1bef6c8    rip = 0x0000726296ec9d1f
[task 2022-07-10T22:28:03.719Z] 22:28:03     INFO -      Found by: call frame info
[task 2022-07-10T22:28:03.719Z] 22:28:03     INFO -   5  libxul.so!nsFrameLoaderDestroyRunnable::Run() [nsFrameLoader.cpp:29c11e7045427efa7cd69d69d2fb9201093822a1 : 1978 + 0x13]
[task 2022-07-10T22:28:03.719Z] 22:28:03     INFO -       rbx = 0x0000726286718900    rbp = 0x00007262a1bef6b0
[task 2022-07-10T22:28:03.719Z] 22:28:03     INFO -       rsp = 0x00007262a1bef6a0    r12 = 0xaaaaaaaaaaaaaaaa
[task 2022-07-10T22:28:03.719Z] 22:28:03     INFO -       r13 = 0x0000000000000001    r14 = 0x0000726286718928
[task 2022-07-10T22:28:03.719Z] 22:28:03     INFO -       r15 = 0x00007262a1bef6c8    rip = 0x0000726296ec9c8f
[task 2022-07-10T22:28:03.719Z] 22:28:03     INFO -      Found by: call frame info
[task 2022-07-10T22:28:03.719Z] 22:28:03     INFO -   6  libxul.so!mozilla::dom::Document::MaybeInitializeFinalizeFrameLoaders() [Document.cpp:29c11e7045427efa7cd69d69d2fb9201093822a1 : 9384 + 0x1b]
INFO -       rbx = 0x0000000000000000    rbp = 0x00007262a1bef700
[task 2022-07-10T22:28:03.719Z] 22:28:03     INFO -       rsp = 0x00007262a1bef6c0    r12 = 0xaaaaaaaaaaaaaaaa
[task 2022-07-10T22:28:03.719Z] 22:28:03     INFO -       r13 = 0x0000000000000001    r14 = 0x00007262a1bef6c0
[task 2022-07-10T22:28:03.720Z] 22:28:03     INFO -       r15 = 0x00007262a1bef6c8    rip = 0x0000726296dbf80b
[task 2022-07-10T22:28:03.720Z] 22:28:03     INFO -      Found by: call frame info
[task 2022-07-10T22:28:03.720Z] 22:28:03     INFO -   7  libxul.so!mozilla::detail::RunnableMethodImpl<mozilla::dom::Document*, void (mozilla::dom::Document::*)(), true, (mozilla::RunnableKind)0, >::Run() [nsThreadUtils.h:29c11e7045427efa7cd69d69d2fb9201093822a1 : 1200 + 0x16]
[task 2022-07-10T22:28:03.720Z] 22:28:03     INFO -       rbx = 0x00007262a1bef738    rbp = 0x00007262a1bef710
[task 2022-07-10T22:28:03.720Z] 22:28:03     INFO -       rsp = 0x00007262a1bef710    r12 = 0x0000000000000001
[task 2022-07-10T22:28:03.720Z] 22:28:03     INFO -       r13 = 0x0000000000000002    r14 = 0x0000000000000003
[task 2022-07-10T22:28:03.720Z] 22:28:03     INFO -       r15 = 0x00007262a1bef740    rip = 0x0000726296e0e4a3
[task 2022-07-10T22:28:03.720Z] 22:28:03     INFO -      Found by: call frame info
[task 2022-07-10T22:28:03.720Z] 22:28:03     INFO -   8  libxul.so!nsContentUtils::RemoveScriptBlocker() [nsContentUtils.cpp:29c11e7045427efa7cd69d69d2fb9201093822a1 : 5758 + 0x10]
[task 2022-07-10T22:28:03.720Z] 22:28:03     INFO -       rbx = 0x00007262a1bef738    rbp = 0x00007262a1bef7d0
[task 2022-07-10T22:28:03.721Z] 22:28:03     INFO -       rsp = 0x00007262a1bef720    r12 = 0x0000000000000001
[task 2022-07-10T22:28:03.721Z] 22:28:03     INFO -       r13 = 0x0000000000000002    r14 = 0x0000000000000003
[task 2022-07-10T22:28:03.721Z] 22:28:03     INFO -       r15 = 0x00007262a1bef740    rip = 0x0000726296cb5bc5
[task 2022-07-10T22:28:03.721Z] 22:28:03     INFO -      Found by: call frame info
[task 2022-07-10T22:28:03.721Z] 22:28:03     INFO -   9  libxul.so!nsDocumentViewer::Destroy() [nsDocumentViewer.cpp:29c11e7045427efa7cd69d69d2fb9201093822a1 : 1788 + 0x4]
<...>

I guess the DocAccessibleParent gets destroyed after the RootAccessible here. We either need to get rid of the assertion, check for the SessionAccessibility first or forceably destroy any DocAccessibleParents when the RootAccessible gets destroyed. The third solution would probably also solve bug 1778585.

Flags: needinfo?(eitan)
Component: General → Disability Access APIs
Product: GeckoView → Core
Status: NEW → RESOLVED
Closed: 3 years ago
Resolution: --- → DUPLICATE

I don't think this is a duplicate of bug 1778585. There indeed the problem is that the DocAccessibleParent is unregistered (because the root shut down), but is not destroyed itself and therefore can allow show events.

This case is more troubling because it suggests that the DocAccessibleParent failed to unregister in the bulk-unregister that should have happened when the root went away.

Flags: needinfo?(eitan)
Status: RESOLVED → REOPENED
Resolution: DUPLICATE → ---
Crash Signature: [@ mozilla::a11y::SessionAccessibility::UnregisterAccessible(mozilla::a11y::Accessible*)] → [@ mozilla::a11y::SessionAccessibility::UnregisterAccessible]
Summary: Intermittent org.mozilla.geckoview.test.AccessibilityTest#testAriaComboBoxesMovingByControl | application crashed [@ mozilla::a11y::SessionAccessibility::UnregisterAccessible(mozilla::a11y::Accessible*)] → Intermittent org.mozilla.geckoview.test.AccessibilityTest#testAriaComboBoxesMovingByControl | application crashed [@ mozilla::a11y::SessionAccessibility::UnregisterAccessible]
Status: REOPENED → RESOLVED
Closed: 3 years ago4 months ago
Resolution: --- → INCOMPLETE
You need to log in before you can comment on or make changes to this bug.