Last Comment Bug 753253 - crash in nsAccessible::ScrollTo
: crash in nsAccessible::ScrollTo
: crash
Product: Core
Classification: Components
Component: Disability Access APIs (show other bugs)
: Trunk
: ARM Android
-- critical (vote)
: mozilla15
Assigned To: Marco Zehe (:MarcoZ)
: alexander :surkov
Depends on:
  Show dependency treegraph
Reported: 2012-05-08 23:50 PDT by Scoobidiver (away)
Modified: 2012-05-10 07:37 PDT (History)
1 user (show)
See Also:
Crash Signature:
QA Whiteboard:
Iteration: ---
Points: ---
Has Regression Range: ---
Has STR: ---

IsDefunct check for nsAccessible::ScrollTo (659 bytes, patch)
2012-05-09 05:38 PDT, Marco Zehe (:MarcoZ)
tbsaunde+mozbugs: review+
Details | Diff | Splinter Review

Description User image Scoobidiver (away) 2012-05-08 23:50:34 PDT
There's one crash in 15.0a1/20120508.
It's probably related to bug 753093.

Signature 	nsAccessible::ScrollTo More Reports Search
UUID	10439dc9-636a-4480-aea6-811f32120508
Date Processed	2012-05-08 21:30:13
Uptime	175
Install Age	2.9 minutes since version was first installed.
Install Time	2012-05-08 21:27:01
Product	FennecAndroid
Version	15.0a1
Build ID	20120508055912
Release Channel	nightly
OS	Linux
OS Version	0.0.0 Linux 3.0.8-gda6252b #1 SMP PREEMPT Fri Apr 13 11:35:09 PDT 2012 armv7l
Build Architecture	arm
Build Architecture Info	
Crash Reason	SIGSEGV
Crash Address	0x100
App Notes 	
AdapterVendorID: tuna, AdapterDeviceID: Galaxy Nexus.
AdapterDescription: 'Model: 'Galaxy Nexus', Product: 'yakju', Manufacturer: 'samsung', Hardware: 'tuna''.
samsung Galaxy Nexus
Processor Notes 	This dump is too long and has triggered the automatic truncation routine
EMCheckCompatibility	True

Frame 	Module 	Signature 	Source
0 	nsAccessible::ScrollTo 	accessible/src/base/nsAccessible.cpp:2241
1 	NS_InvokeByIndex_P 	xpcom/reflect/xptcall/src/md/unix/xptcinvoke_arm.cpp:194
2 	XPCWrappedNative::CallMethod 	js/xpconnect/src/XPCWrappedNative.cpp:3102
3 	XPC_WN_CallMethod 	js/xpconnect/src/XPCWrappedNativeJSOps.cpp:1541
4 	js::Interpret 	js/src/jscntxtinlines.h:426
5 	js::RunScript 	js/src/jsinterp.cpp:480
6 	js::Invoke 	js/src/jsinterp.cpp:540
7 	js::ProxyHandler::call 	js/src/jsproxy.cpp:340
8 	js::Wrapper::call 	js/src/jswrapper.cpp:276
9 	js::CrossCompartmentWrapper::call 	js/src/jswrapper.cpp:758
10 	proxy_Call 	js/src/jsproxy.cpp:911
11 	js::Interpret 	js/src/jscntxtinlines.h:426
12 	js::RunScript 	js/src/jsinterp.cpp:480
13 	js::InvokeKernel 	js/src/jsinterp.cpp:540
14 	array_forEach 	js/src/jsinterp.h:172
15 	js::Interpret 	js/src/jscntxtinlines.h:426
16 	js::RunScript 	js/src/jsinterp.cpp:480
17 	js::Invoke 	js/src/jsinterp.cpp:540
18 	JS_CallFunctionValue 	js/src/jsapi.cpp:5429
19 	nsXPCWrappedJSClass::CallMethod 	js/xpconnect/src/XPCWrappedJSClass.cpp:1509
20 	nsXPCWrappedJS::CallMethod 	js/xpconnect/src/XPCWrappedJS.cpp:616
21 	PrepareAndDispatch 	xpcom/reflect/xptcall/src/md/unix/xptcstubs_arm.cpp:138

More reports at:
Comment 1 User image Trevor Saunders (:tbsaunde) 2012-05-09 05:02:52 PDT
similar, but different, ScrollTo() is missing a IsDefunct() check.
Comment 2 User image Marco Zehe (:MarcoZ) 2012-05-09 05:38:48 PDT
Created attachment 622353 [details] [diff] [review]
IsDefunct check for nsAccessible::ScrollTo

Trevor, you mean like this?
Comment 3 User image Trevor Saunders (:tbsaunde) 2012-05-09 06:01:28 PDT
Comment on attachment 622353 [details] [diff] [review]
IsDefunct check for nsAccessible::ScrollTo

it feels a bit like reviewing a patch I wrote, but r=me
Comment 4 User image Marco Zehe (:MarcoZ) 2012-05-09 06:18:27 PDT
Comment 5 User image Ed Morley [:emorley] 2012-05-10 07:37:37 PDT

Note You need to log in before you can comment on or make changes to this bug.