1840198 - Assertion failure: aEnd >= aBegin in HyperTextAccessible::SetSelectionRange with Narrator enabled

Status: NEW

(Core :: Disability Access APIs, defect)

Description

[Nathan LaPré]

In trying to test some UIA stuff on Windows with Narrator on, I hit this assertion while navigating around google.com while running a debug build. I'm not sure of the specific steps to get this to assert, but it asserts consistently for me just navigating around the page. You might encounter one of the see-also asserts instead, but I encountered all three. It doesn't seem to cause an actual crash (I can't get the debug-disabled Nightly build to crash), but does assert, which seems worth logging. It's particularly interesting to me since it comes from the UIA DLL.

Here's the call stack:

Assertion failure: aEnd >= aBegin (End value should be larger than begin value), at C:/mozilla-source/mozilla-unified/obj-x86_64-pc-windows-msvc/dist/include\mozilla/IntegerRange.h:186
#01: mozilla::a11y::HyperTextAccessible::SetSelectionRange (C:\mozilla-source\mozilla-unified\accessible\generic\HyperTextAccessible.cpp:567)
#02: mozilla::a11y::HyperTextAccessible::SetCaretOffset (C:\mozilla-source\mozilla-unified\accessible\generic\HyperTextAccessible-inl.h:25)
#03: mozilla::a11y::ia2AccessibleText::setCaretOffset (C:\mozilla-source\mozilla-unified\accessible\windows\ia2\ia2AccessibleText.cpp:350)
#04: WindowPattern_WaitForInputIdle[C:\WINDOWS\SYSTEM32\UIAutomationCore.DLL +0x19d772]
#05: WindowPattern_WaitForInputIdle[C:\WINDOWS\SYSTEM32\UIAutomationCore.DLL +0x26236d]
#06: WindowPattern_WaitForInputIdle[C:\WINDOWS\SYSTEM32\UIAutomationCore.DLL +0x26f348]
#07: UiaRaiseTextEditTextChangedEvent[C:\WINDOWS\SYSTEM32\UIAutomationCore.DLL +0x1228a6]
#08: WindowPattern_WaitForInputIdle[C:\WINDOWS\SYSTEM32\UIAutomationCore.DLL +0x1d2783]
#09: UiaReturnRawElementProvider[C:\WINDOWS\SYSTEM32\UIAutomationCore.DLL +0x607c6]
#10: UiaReturnRawElementProvider[C:\WINDOWS\SYSTEM32\UIAutomationCore.DLL +0x5f2d3]
#11: UiaReturnRawElementProvider[C:\WINDOWS\SYSTEM32\UIAutomationCore.DLL +0x378d2]
#12: UiaReturnRawElementProvider[C:\WINDOWS\SYSTEM32\UIAutomationCore.DLL +0x3749a]
#13: SystemParametersInfoW[C:\WINDOWS\System32\user32.dll +0x22a80]
#14: GetClassLongW[C:\WINDOWS\System32\user32.dll +0x2305d]
#15: KiUserCallbackDispatcher[C:\WINDOWS\SYSTEM32\ntdll.dll +0xa2c94]
#16: NtUserPeekMessage[C:\WINDOWS\System32\win32u.dll +0x14d4]
#17: PeekMessageW[C:\WINDOWS\System32\user32.dll +0x21b7f]
#18: PeekMessageW[C:\WINDOWS\System32\user32.dll +0x21a4c]
#19: TF_CreateThreadMgr[C:\WINDOWS\System32\MSCTF.dll +0x48734]
#20: nsAppShell::ProcessNextNativeEvent (C:\mozilla-source\mozilla-unified\widget\windows\nsAppShell.cpp:717)
#21: nsBaseAppShell::OnProcessNextEvent (C:\mozilla-source\mozilla-unified\widget\nsBaseAppShell.cpp:267)
#22: nsThread::ProcessNextEvent (C:\mozilla-source\mozilla-unified\xpcom\threads\nsThread.cpp:1117)
#23: NS_ProcessNextEvent (C:\mozilla-source\mozilla-unified\xpcom\threads\nsThreadUtils.cpp:479)
#24: mozilla::ipc::MessagePump::Run (C:\mozilla-source\mozilla-unified\ipc\glue\MessagePump.cpp:107)
#25: MessageLoop::RunHandler (C:\mozilla-source\mozilla-unified\ipc\chromium\src\base\message_loop.cc:364)
#26: MessageLoop::Run (C:\mozilla-source\mozilla-unified\ipc\chromium\src\base\message_loop.cc:346)
#27: nsBaseAppShell::Run (C:\mozilla-source\mozilla-unified\widget\nsBaseAppShell.cpp:150)
#28: nsAppShell::Run (C:\mozilla-source\mozilla-unified\widget\windows\nsAppShell.cpp:615)
#29: nsAppStartup::Run (C:\mozilla-source\mozilla-unified\toolkit\components\startup\nsAppStartup.cpp:296)
#30: XREMain::XRE_mainRun (C:\mozilla-source\mozilla-unified\toolkit\xre\nsAppRunner.cpp:5659)
#31: XREMain::XRE_main (C:\mozilla-source\mozilla-unified\toolkit\xre\nsAppRunner.cpp:5860)
#32: XRE_main (C:\mozilla-source\mozilla-unified\toolkit\xre\nsAppRunner.cpp:5916)
#33: NS_internal_main (C:\mozilla-source\mozilla-unified\browser\app\nsBrowserApp.cpp:445)
#34: wmain (C:\mozilla-source\mozilla-unified\toolkit\xre\nsWindowsWMain.cpp:167)
#35: __scrt_common_main_seh (D:\a\_work\1\s\src\vctools\crt\vcstartup\src\startup\exe_common.inl:288)
#36: BaseThreadInitThunk[C:\WINDOWS\System32\KERNEL32.DLL +0x126ad]
#37: RtlUserThreadStart[C:\WINDOWS\SYSTEM32\ntdll.dll +0x5a9f8]