366710 - Crash while entering text in New Address Book dialog [@ nsAccessNode::QueryInterface]

Status: RESOLVED WORKSFORME

(Core :: Disability Access APIs, defect)

Description

[Lynn Monsanto]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.1) Gecko/20060601 Firefox/2.0.0.1 (Ubuntu-edgy)
Build Identifier: version 3 alpha 1 (20070111)

Thunderbird crashes when I enter text into the New Address Book text field.
Accessibility is enabled on the desktop

Reproducible: Always

Steps to Reproduce:
1. Enable accessibility on the desktop.
2. Launch the Thunderbird Address Book 
3. Select File -> New -> Address Book
4. Enter text in the text field.  
Actual Results:  
See above

Expected Results:  
Should not crash 

Incident ID: 28261166
Stack Signature	0x00000000 cdbddd16
Product ID	ThunderbirdTrunk
Build ID	2007011104
Trigger Time	2007-01-11 10:55:35.0
Platform	LinuxIntel
Operating System	Linux 2.6.17-10-generic
Module	
URL visited	
User Comments	Typed into new Address Book dialog text field. Accessibility enabled.
Since Last Crash	0 sec
Total Uptime	0 sec
Trigger Reason	SIGSEGV: Segmentation Fault: (signal 11)
Source File, Line No.	N/A
Stack Trace 	
0x00000000
nsAccessNode::QueryInterface()  [mozilla/accessible/src/base/nsAccessNode.cpp, line 99]
nsAccessible::QueryInterface()  [mozilla/accessible/src/base/nsAccessible.cpp, line 205]
nsQueryInterface::operator()  [mozilla/xpcom/build/nsCOMPtr.cpp, line 47]
nsCOMPtr_base::assign_from_qi()  [mozilla/xpcom/build/nsCOMPtr.cpp, line 96]
nsHyperTextAccessible::DOMPointToOffset()  [mozilla/accessible/src/html/nsHyperTextAccessible.cpp, line 909]
nsHyperTextAccessible::DidInsertText()  [mozilla/accessible/src/html/nsHyperTextAccessible.cpp, line 1236]
nsEditor::InsertTextIntoTextNodeImpl()  [mozilla/editor/libeditor/base/nsEditor.cpp, line 169]
nsEditor::InsertTextImpl()  [mozilla/editor/libeditor/base/nsEditor.cpp, line 2540]
nsTextEditRules::WillInsertText()  [mozilla/editor/libeditor/text/nsTextEditRules.cpp, line 1338]
nsTextEditRules::WillDoAction()  [mozilla/editor/libeditor/text/nsTextEditRules.cpp, line 308]
nsPlaintextEditor::InsertText()  [mozilla/editor/libeditor/text/nsPlaintextEditor.cpp, line 760]
nsPlaintextEditor::TypedText()  [mozilla/editor/libeditor/text/nsPlaintextEditor.cpp, line 423]
nsPlaintextEditor::HandleKeyPress()  [mozilla/editor/libeditor/text/nsPlaintextEditor.cpp, line 402]
nsTextEditorKeyListener::KeyPress()  [mozilla/editor/libeditor/text/nsEditorEventListeners.cpp, line 165]
DispatchToInterface(nsIDOMEvent*, nsIDOMEventListener*, unsigned (nsIDOMEventListener::*)()  [mozilla/content/events/src/nsEventListenerManager.cpp, line 153]
nsEventListenerManager::HandleEvent()  [mozilla/content/events/src/nsEventListenerManager.cpp, line 1055]
nsEventTargetChainItem::HandleEvent()  [mozilla/content/events/src/nsEventDispatcher.cpp, line 1038]
nsEventTargetChainItem::HandleEventTargetChain()  [mozilla/content/events/src/nsEventDispatcher.cpp, line 433]
nsEventTargetChainItem::HandleEventTargetChain()  [mozilla/content/events/src/nsEventDispatcher.cpp, line 482]
nsEventDispatcher::Dispatch()  [mozilla/content/events/src/nsEventDispatcher.cpp, line 636]
PresShell::HandleEventInternal()  [mozilla/layout/base/nsPresShell.cpp, line 955]
PresShell::HandleEvent()  [mozilla/layout/base/nsPresShell.cpp, line 5599]
nsViewManager::HandleEvent()  [mozilla/view/src/nsViewManager.cpp, line 1665]
nsViewManager::DispatchEvent()  [mozilla/view/src/nsViewManager.cpp, line 1623]
HandleEvent()  [mozilla/view/src/nsView.cpp, line 228]
nsCommonWidget::DispatchEvent()  [mozilla/widget/src/gtk2/nsCommonWidget.cpp, line 216]
nsWindow::OnKeyPressEvent()  [mozilla/widget/src/gtk2/nsWindow.cpp, line 2177]
key_press_event_cb()  [mozilla/widget/src/gtk2/nsWindow.cpp, line 4436]
libgtk-x11-2.0.so.0 + 0x13cb00 (0xb7ae4b00)
libgobject-2.0.so.0 + 0x979b (0xb787279b)
libgobject-2.0.so.0 + 0x19b93 (0xb7882b93)
libgobject-2.0.so.0 + 0x1ae7f (0xb7883e7f)
libgobject-2.0.so.0 + 0x1b279 (0xb7884279)
libgtk-x11-2.0.so.0 + 0x2505f8 (0xb7bf85f8)
libgtk-x11-2.0.so.0 + 0x260677 (0xb7c08677)
libgtk-x11-2.0.so.0 + 0x2636dc (0xb7c0b6dc)
libgtk-x11-2.0.so.0 + 0x13cb00 (0xb7ae4b00)
libgobject-2.0.so.0 + 0x7fb9 (0xb7870fb9)
libgobject-2.0.so.0 + 0x979b (0xb787279b)
libgobject-2.0.so.0 + 0x1a1e3 (0xb78831e3)
libgobject-2.0.so.0 + 0x1ae7f (0xb7883e7f)
libgobject-2.0.so.0 + 0x1b279 (0xb7884279)
libgtk-x11-2.0.so.0 + 0x2505f8 (0xb7bf85f8)
libgtk-x11-2.0.so.0 + 0x135f2a (0xb7addf2a)
libgtk-x11-2.0.so.0 + 0x1370f7 (0xb7adf0f7)
libgdk-x11-2.0.so.0 + 0x447ea (0xb794e7ea)
libglib-2.0.so.0 + 0x2b802 (0xb7802802)
libglib-2.0.so.0 + 0x2e7df (0xb78057df)
libglib-2.0.so.0 + 0x2ed45 (0xb7805d45)
nsBaseAppShell::DoProcessNextNativeEvent()  [mozilla/widget/src/xpwidgets/nsBaseAppShell.cpp, line 137]
nsBaseAppShell::OnProcessNextEvent()  [mozilla/widget/src/xpwidgets/nsBaseAppShell.cpp, line 231]
nsThread::ProcessNextEvent()  [mozilla/xpcom/threads/nsThread.cpp, line 496]
NS_ProcessNextEvent_P()  [mozilla/xpcom/build/nsThreadUtils.cpp, line 225]
nsXULWindow::ShowModal()  [mozilla/xpfe/appshell/src/nsXULWindow.cpp, line 402]
nsContentTreeOwner::ShowAsModal()  [mozilla/xpfe/appshell/src/nsContentTreeOwner.cpp, line 503]
nsWindowWatcher::OpenWindowJSInternal()  [mozilla/embedding/components/windowwatcher/src/nsWindowWatcher.cpp, line 618]
nsWindowWatcher::OpenWindowJS()  [mozilla/embedding/components/windowwatcher/src/nsWindowWatcher.cpp, line 481]
nsGlobalWindow::OpenInternal()  [mozilla/dom/src/base/nsGlobalWindow.cpp, line 846]
nsGlobalWindow::OpenDialog()  [mozilla/dom/src/base/nsGlobalWindow.cpp, line 840]
NS_InvokeByIndex()
XPCWrappedNative::CallMethod(XPCCallContext&, XPCWrappedNative::CallMode)()  [mozilla/js/src/xpconnect/src/xpcwrappednative.cpp, line 3212]
XPC_WN_CallMethod()  [mozilla/js/src/xpconnect/src/xpcwrappednativejsops.cpp, line 1455]
js_Invoke()  [mozilla/js/src/jsinterp.c, line 1348]
js_Interpret()  [mozilla/js/src/jsinterp.c, line 4071]
js_Invoke()  [mozilla/js/src/jsinterp.c, line 1367]
js_InternalInvoke()  [mozilla/js/src/jsinterp.c, line 1442]
JS_CallFunctionValue()  [mozilla/js/src/jsapi.c, line 4375]
nsJSContext::CallEventHandler()  [mozilla/dom/src/base/nsJSEnvironment.cpp, line 1776]
nsJSEventListener::HandleEvent()  [mozilla/dom/src/events/nsJSEventListener.cpp, line 846]
nsEventListenerManager::HandleEventSubType()  [mozilla/content/events/src/nsEventListenerManager.cpp, line 1280]
nsEventListenerManager::HandleEvent()  [mozilla/content/events/src/nsEventListenerManager.cpp, line 1055]
nsEventTargetChainItem::HandleEvent()  [mozilla/content/events/src/nsEventDispatcher.cpp, line 1038]
nsEventTargetChainItem::HandleEventTargetChain()  [mozilla/content/events/src/nsEventDispatcher.cpp, line 433]
nsEventDispatcher::Dispatch()  [mozilla/content/events/src/nsEventDispatcher.cpp, line 636]
PresShell::HandleDOMEventWithTarget()  [mozilla/layout/base/nsPresShell.cpp, line 5856]
nsMenuFrame::Execute()  [mozilla/layout/xul/base/src/nsMenuFrame.cpp, line 2070]
nsMenuFrame::HandleEvent()  [mozilla/layout/xul/base/src/nsMenuFrame.cpp, line 481]
nsPresShellEventCB::HandleEvent()
nsEventTargetChainItem::HandleEventTargetChain()  [mozilla/content/events/src/nsEventDispatcher.cpp, line 1030]
nsEventDispatcher::Dispatch()  [mozilla/content/events/src/nsEventDispatcher.cpp, line 636]
PresShell::HandleEventInternal()  [mozilla/layout/base/nsPresShell.cpp, line 955]
PresShell::HandlePositionedEvent()  [mozilla/layout/base/nsPresShell.cpp, line 5702]
PresShell::HandleEvent()  [mozilla/layout/base/nsPresShell.cpp, line 5530]
nsViewManager::HandleEvent()  [mozilla/view/src/nsViewManager.cpp, line 1665]
nsViewManager::DispatchEvent()  [mozilla/view/src/nsViewManager.cpp, line 1623]
HandleEvent()  [mozilla/view/src/nsView.cpp, line 228]
nsCommonWidget::DispatchEvent()  [mozilla/widget/src/gtk2/nsCommonWidget.cpp, line 216]
nsWindow::OnButtonReleaseEvent()  [mozilla/widget/src/gtk2/nsWindow.cpp, line 1650]
button_release_event_cb()  [mozilla/widget/src/gtk2/nsWindow.cpp, line 4297]
libgtk-x11-2.0.so.0 + 0x13cb00 (0xb7ae4b00)
libgobject-2.0.so.0 + 0x979b (0xb787279b)
libgobject-2.0.so.0 + 0x19b93 (0xb7882b93)
libgobject-2.0.so.0 + 0x1ae7f (0xb7883e7f)
libgobject-2.0.so.0 + 0x1b279 (0xb7884279)
libgtk-x11-2.0.so.0 + 0x2505f8 (0xb7bf85f8)
libgtk-x11-2.0.so.0 + 0x135ef3 (0xb7addef3)
libgtk-x11-2.0.so.0 + 0x1370f7 (0xb7adf0f7)
libgdk-x11-2.0.so.0 + 0x447ea (0xb794e7ea)
libglib-2.0.so.0 + 0x2b802 (0xb7802802)

Comment 1

[Mark Banner (:standard8)]

(In reply to comment #0)
> Steps to Reproduce:
> 1. Enable accessibility on the desktop.
> 2. Launch the Thunderbird Address Book 
> 3. Select File -> New -> Address Book
> 4. Enter text in the text field.  

Does this crash occur without accessibility enabled?

Comment 2

[Evan Yan]

I can't reproduce it.
Does thunderbird crash just when inputting some text? Could you provide more specific information?

Comment 3

[Aaron Leventhal]

Assigning to David Bolter who has a grant to work on Thunderbird accessibility.

Comment 4

[Lynn Monsanto]

I cannot reproduce this bug, too.  The bug occurred when when I was entering text.

Comment 5

[Firefox Bug Husbandry Bot]

https://bugzilla.mozilla.org/show_bug.cgi?id=1527381