693655 - Firefox 10.0a1 Crash [@ nsDocAccessible::AnchorJump() ]

Status: RESOLVED FIXED

(Core :: Disability Access APIs, defect)

Description

[Marcia Knous [:marcia]]

Seen while looking at recent trunk crash data. Crashes started showing up using the 20111010 build. https://crash-stats.mozilla.com/report/list?signature=nsDocAccessible::AnchorJump%28%29

One comment mentions using Adblock Plus.

Possible pushlog regression range: http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=b4da2d439cbc&tochange=e9c620a5c85f

https://crash-stats.mozilla.com/report/index/f5b8f312-0379-4e5b-a74c-f048d2111011

Frame 	Module 	Signature [Expand] 	Source
0 	xul.dll 	nsDocAccessible::AnchorJump 	accessible/src/base/nsDocAccessible.h:211
1 	xul.dll 	mozilla::a11y::FocusManager::ProcessFocusEvent 	accessible/src/base/FocusManager.cpp:343
2 	xul.dll 	NotificationController::WillRefresh 	accessible/src/base/NotificationController.cpp:321
3 	xul.dll 	nsRefreshDriver::Notify 	layout/base/nsRefreshDriver.cpp:326
4 	xul.dll 	nsTimerImpl::Fire 	xpcom/threads/nsTimerImpl.cpp:427
5 	xul.dll 	nsTimerEvent::Run 	xpcom/threads/nsTimerImpl.cpp:520
6 	xul.dll 	nsThread::ProcessNextEvent 	xpcom/threads/nsThread.cpp:631
7 	nspr4.dll 	PR_Unlock 	nsprpub/pr/src/threads/combined/prulock.c:347
8 	xul.dll 	MessageLoop::RunHandler 	ipc/chromium/src/base/message_loop.cc:201
9 	xul.dll 	_SEH_epilog4 	
10 	xul.dll 	MessageLoop::Run 	ipc/chromium/src/base/message_loop.cc:175
11 	xul.dll 	nsWindowSH::GetProperty 	dom/base/nsDOMClassInfo.cpp:5173
12 	xul.dll 	nsBaseAppShell::Run 	widget/src/xpwidgets/nsBaseAppShell.cpp:189
13 		@0x65726965

Comment 1

[alexander :surkov (:asurkov)]

should be fixed by bug 506206

Comment 2

[James Teh [:Jamie]]

I suspect there are multiple ways to reproduce this, but in case it's useful, here are some str:
1. Open any web page.
2. Press control+d to bookmark it.
3. Press the "Show all the bookmarks folders" button.
Result: Crash!
bp-3e68a0a9-ca3f-4854-b8b3-f770d2111011

Comment 3

[alexander :surkov (:asurkov)]

fixed by bug 506206