422524 - Crash [@ nsRootAccessible::FireAccessibleFocusEvent]

Status: RESOLVED FIXED

(Core :: Disability Access APIs, defect)

Description

[Steve England [:stevee]]

A user on IRC ("tesat") says they can reproduce this crash on a newly installed firefox with a new profile.

1. Go to http://sparkasse-aachen.de/pages/sparkasse/starkes_unternehmen/geschaeftsstellen/index.php
2. Click on the link "Aachen" in the center of the picture.
3. Then firefox crashes

Although not a topcrash on Firefox 2.0.0.12, it is 149th, with 0.05% of the crashes reported. Maybe these STR will help a dev in reproducing the bug, or the stack will be of use.

Incident ID: 42526679
Stack Signature	nsRootAccessible::FireAccessibleFocusEvent 033a9753
Product ID	Firefox2
Build ID	2008020121
Trigger Time	2008-03-12 09:32:25.0
Platform	Win32
Operating System	Windows NT 5.1 build 2600
Module	firefox.exe + (0043d96d)
URL visited	http://sparkasse-aachen.de/pages/sparkasse/geschaeftsstellen/karten/aachen_ebene2.php
User Comments	I enter the site http://sparkasse-aachen.de/pages/sparkasse/starkes_unternehmen/geschaeftsstellen/index.php and click on the link "Aachen" in the center of the picture. Then firefox crashes
Since Last Crash	107 sec
Total Uptime	1044 sec
Trigger Reason	Access violation
Source File, Line No.	c:/builds/tinderbox/Fx-Mozilla1.8-Release/WINNT_5.2_Depend/mozilla/accessible/src/base/nsRootAccessible.cpp, line 464
Stack Trace 	
nsRootAccessible::FireAccessibleFocusEvent  [mozilla/accessible/src/base/nsRootAccessible.cpp, line 464]
nsRootAccessible::HandleEvent  [mozilla/accessible/src/base/nsRootAccessible.cpp, line 757]
nsRootAccessible::Focus  [mozilla/accessible/src/base/nsRootAccessible.cpp, line 982]
nsEventListenerManager::HandleEvent  [mozilla/content/events/src/nsEventListenerManager.cpp, line 1752]
nsXULDocument::HandleDOMEvent  [mozilla/content/xul/document/src/nsXULDocument.cpp, line 1242]
nsXULElement::HandleDOMEvent  [mozilla/content/xul/content/src/nsXULElement.cpp, line 2216]
nsXULElement::HandleDOMEvent  [mozilla/content/xul/content/src/nsXULElement.cpp, line 2213]
nsXULElement::HandleDOMEvent  [mozilla/content/xul/content/src/nsXULElement.cpp, line 2213]
nsXULElement::HandleDOMEvent  [mozilla/content/xul/content/src/nsXULElement.cpp, line 2213]
nsXULElement::HandleDOMEvent  [mozilla/content/xul/content/src/nsXULElement.cpp, line 2213]
nsXULElement::HandleDOMEvent  [mozilla/content/xul/content/src/nsXULElement.cpp, line 2213]
nsXULElement::HandleDOMEvent  [mozilla/content/xul/content/src/nsXULElement.cpp, line 2213]
nsXULElement::HandleDOMEvent  [mozilla/content/xul/content/src/nsXULElement.cpp, line 2213]
nsXULElement::HandleDOMEvent  [mozilla/content/xul/content/src/nsXULElement.cpp, line 2213]
nsXULElement::HandleChromeEvent  [mozilla/content/xul/content/src/nsXULElement.cpp, line 2899]
nsGlobalWindow::HandleDOMEvent  [mozilla/dom/src/base/nsGlobalWindow.cpp, line 1720]
nsDocument::HandleDOMEvent  [mozilla/content/base/src/nsDocument.cpp, line 4135]
nsGenericElement::HandleDOMEvent  [mozilla/content/base/src/nsGenericElement.cpp, line 2188]
nsGenericElement::HandleDOMEvent  [mozilla/content/base/src/nsGenericElement.cpp, line 2182]
nsGenericElement::HandleDOMEvent  [mozilla/content/base/src/nsGenericElement.cpp, line 2182]
nsGenericElement::HandleDOMEvent  [mozilla/content/base/src/nsGenericElement.cpp, line 2182]
nsGenericElement::HandleDOMEvent  [mozilla/content/base/src/nsGenericElement.cpp, line 2182]
nsGenericElement::HandleDOMEvent  [mozilla/content/base/src/nsGenericElement.cpp, line 2182]
nsGenericElement::HandleDOMEvent  [mozilla/content/base/src/nsGenericElement.cpp, line 2182]
nsGenericElement::HandleDOMEvent  [mozilla/content/base/src/nsGenericElement.cpp, line 2182]
nsGenericElement::HandleDOMEvent  [mozilla/content/base/src/nsGenericElement.cpp, line 2182]
nsGenericElement::HandleDOMEvent  [mozilla/content/base/src/nsGenericElement.cpp, line 2182]
nsGenericElement::HandleDOMEvent  [mozilla/content/base/src/nsGenericElement.cpp, line 2182]
nsGenericElement::HandleDOMEvent  [mozilla/content/base/src/nsGenericElement.cpp, line 2182]
nsGenericElement::HandleDOMEvent  [mozilla/content/base/src/nsGenericElement.cpp, line 2182]
nsGenericElement::HandleDOMEvent  [mozilla/content/base/src/nsGenericElement.cpp, line 2182]
nsGenericElement::HandleDOMEvent  [mozilla/content/base/src/nsGenericElement.cpp, line 2182]
nsGenericElement::HandleDOMEvent  [mozilla/content/base/src/nsGenericElement.cpp, line 2182]
nsGenericElement::HandleDOMEvent  [mozilla/content/base/src/nsGenericElement.cpp, line 2182]
nsGenericElement::HandleDOMEvent  [mozilla/content/base/src/nsGenericElement.cpp, line 2182]
nsGenericElement::HandleDOMEvent  [mozilla/content/base/src/nsGenericElement.cpp, line 2182]
nsGenericElement::HandleDOMEvent  [mozilla/content/base/src/nsGenericElement.cpp, line 2182]
nsGenericElement::HandleDOMEvent  [mozilla/content/base/src/nsGenericElement.cpp, line 2182]
nsGenericHTMLElement::HandleDOMEventForAnchors  [mozilla/content/html/content/src/nsGenericHTMLElement.cpp, line 1587]
nsHTMLAreaElement::HandleDOMEvent  [mozilla/content/html/content/src/nsHTMLAreaElement.cpp, line 180]
nsEventStateManager::SendFocusBlur  [mozilla/content/events/src/nsEventStateManager.cpp, line 4486]
nsEventStateManager::SetContentState  [mozilla/content/events/src/nsEventStateManager.cpp, line 4089]
nsGenericHTMLElement::HandleDOMEventForAnchors  [mozilla/content/html/content/src/nsGenericHTMLElement.cpp, line 1671]
nsHTMLAreaElement::HandleDOMEvent  [mozilla/content/html/content/src/nsHTMLAreaElement.cpp, line 180]
PresShell::HandleEventInternal  [mozilla/layout/base/nsPresShell.cpp, line 6521]
PresShell::HandleEvent  [mozilla/layout/base/nsPresShell.cpp, line 6356]
nsViewManager::HandleEvent  [mozilla/view/src/nsViewManager.cpp, line 2566]
nsViewManager::DispatchEvent  [mozilla/view/src/nsViewManager.cpp, line 2253]
HandleEvent  [mozilla/view/src/nsView.cpp, line 174]
nsWindow::DispatchEvent  [mozilla/widget/src/windows/nsWindow.cpp, line 1319]
nsWindow::DispatchMouseEvent  [mozilla/widget/src/windows/nsWindow.cpp, line 6329]
ChildWindow::DispatchMouseEvent  [mozilla/widget/src/windows/nsWindow.cpp, line 6576]
nsWindow::WindowProc  [mozilla/widget/src/windows/nsWindow.cpp, line 1507]
USER32.dll + 0x8734 (0x7e368734)
USER32.dll + 0x8816 (0x7e368816)
USER32.dll + 0x89cd (0x7e3689cd)
USER32.dll + 0x8a10 (0x7e368a10)
nsAppShell::Run  [mozilla/widget/src/windows/nsAppShell.cpp, line 159]
nsAppStartup::Run  [mozilla/toolkit/components/startup/src/nsAppStartup.cpp, line 152]
main  [mozilla/browser/app/nsBrowserApp.cpp, line 61]
kernel32.dll + 0x16fd7 (0x7c816fd7)

The user says they installed Norton Internet Security in the last few days, which may coincide with the appearance of this crash for them.

The user reports they use no unusual input device and no screen reader.

Comment 1

[Aaron Leventhal]

Thanks. BTW this is fixed in Firefox 3.

For Firefox 2 a simple return if null would be enough.

Comment 2

[Aaron Leventhal]

Unintentionally requested blocking. It's not a 1.9 issue.

Comment 3

[Aaron Leventhal]

No rush on this since we need to focus on FF3 in the short term.

Comment 4

[Daniel Veditz [:dveditz]]

based on that clearing branch blocking request but putting it on the "wanted" list. If you do get around to it we can approve a safe, tested patch even for non-blockers.

Confirming the bug would help...

Comment 5

[Martijn Wargers (dead)]

I just filed bug 488562 (with a testcase), which might be related to this.

Comment 6

[David Bolter [:davidb] (NeedInfo me for attention)]

(In reply to comment #5)
> I just filed bug 488562 (with a testcase), which might be related to this.

Can you cc me on that bug? (I don't have access)

Comment 7

[alexander :surkov (:asurkov)]

(In reply to comment #6)
> (In reply to comment #5)
> > I just filed bug 488562 (with a testcase), which might be related to this.
> 
> Can you cc me on that bug? (I don't have access)

and me as well please

Comment 8

[Jesse Ruderman on Windows]

Since this bug only affected Firefox 2, and Firefox 2 is no longer supported, I'm marking this bug as fixed based on comment 1.