Closed Bug 807596 Opened 7 years ago Closed 7 years ago

Permanent Orange: TEST-UNEXPECTED-FAIL | Crash during Thunderbird message-header MozMill tests [@ Accessible::GetActionRule()]

Categories

(Core :: Disability Access APIs, defect, critical)

19 Branch
defect
Not set
critical

Tracking

()

RESOLVED FIXED
mozilla19

People

(Reporter: standard8, Assigned: surkov)

References

Details

(4 keywords)

Crash Data

Attachments

(1 file)

I believe that since bug 612830 we've been seeing this crash on the Thunderbird Mozmill tinderboxes during our message-header test.

Note I also saw various other assertions in that file that appeared to relate to accessibility issues.

https://tbpl.mozilla.org/php/getParsedLog.php?id=16651698&full=1&branch=comm-central#error0

###!!! ABORT: You can't dereference a NULL nsCOMPtr with operator->().: 'mRawPtr != 0', file ../../dist/include/nsCOMPtr.h, line 781
TEST-UNEXPECTED-FAIL | Disconnect Error: Application unexpectedly closed
INFO Passed: 20
INFO Failed: 1
INFO Skipped: 0
Downloading symbols from: http://ftp.mozilla.org/pub/mozilla.org/thunderbird/tinderbox-builds/comm-central-linux64-debug/1351754632/thunderbird-19.0a1.en-US.linux-x86_64.crashreporter-symbols.zip
PROCESS-CRASH | message-header | application crashed (minidump found)
Crash dump filename: /home/cltbld/talos-slave/test/build/mozmill/mozmillprofile/minidumps/4a53f707-2dbf-d0ac-20e64602-64d821bd.dmp
Operating system: Linux
                  0.0.0 Linux 2.6.31.5-127.fc12.x86_64 #1 SMP Sat Nov 7 21:11:14 EST 2009 x86_64
CPU: amd64
     family 6 model 23 stepping 10
     2 CPUs

Crash reason:  SIGSEGV
Crash address: 0x0

Thread 0 (crashed)
 0  libmozalloc.so!mozalloc_abort(char const*) [mozalloc_abort.cpp : 23 + 0x0]
    rbx = 0x00000034d3172d78   r12 = 0x00007fff8e3d8530
    r13 = 0x00000034d3172d78   r14 = 0x00007fff8e3d8530
    r15 = 0x00007f43a691c0b6   rip = 0x00007f43a852b08a
    rsp = 0x00007fff8e3d84f0   rbp = 0x00007fff8e3d8500
    Found by: given as instruction pointer in context
 1  libxul.so!NS_DebugBreak_P [nsDebugImpl.cpp : 423 + 0x4]
    rbx = 0x00007fff8e3d8920   r12 = 0x00007fff8e3d8530
    r13 = 0x00000034d3172d78   r14 = 0x00007fff8e3d8530
    r15 = 0x00007f43a691c0b6   rip = 0x00007f43a5f7fb33
    rsp = 0x00007fff8e3d8510   rbp = 0x00007fff8e3d8960
    Found by: call frame info
 2  libxul.so!nsCOMPtr<nsIContent>::operator->() const [comm-central::ef2f71cb3b85 : 781 + 0x24]
    rbx = 0x0000000006969458   r12 = 0x0000000006969458
    r13 = 0x0000000080004005   r14 = 0x0000000007a81e10
    r15 = 0x0000000006969440   rip = 0x00007f43a4ea4527
    rsp = 0x00007fff8e3d8970   rbp = 0x00007fff8e3d8980
    Found by: call frame info
 3  libxul.so!Accessible::GetActionRule() [Accessible.cpp : 3095 + 0xb]
    rbx = 0x0000000006969440   r12 = 0x0000000006969458
    r13 = 0x0000000080004005   r14 = 0x0000000007a81e10
    r15 = 0x0000000006969440   rip = 0x00007f43a5a3c613
    rsp = 0x00007fff8e3d8990   rbp = 0x00007fff8e3d89a0
    Found by: call frame info
 4  libxul.so!Accessible::ActionCount() [Accessible.cpp : 1764 + 0x4]
    rbx = 0x0000000006969440   r12 = 0x0000000006969440
    r13 = 0x0000000080004005   r14 = 0x0000000007a81e10
    r15 = 0x0000000006969440   rip = 0x00007f43a5a3c691
    rsp = 0x00007fff8e3d89b0   rbp = 0x00007fff8e3d89b0
    Found by: call frame info
 5  libxul.so!AccessibleWrap::CreateMaiInterfaces() [AccessibleWrap.cpp : 376 + 0x8]
    rbx = 0x0000000006969440   r12 = 0x0000000006969440
    r13 = 0x0000000080004005   r14 = 0x0000000007a81e10
    r15 = 0x0000000006969440   rip = 0x00007f43a5a624e9
    rsp = 0x00007fff8e3d89c0   rbp = 0x00007fff8e3d8a00
    Found by: call frame info
 6  libxul.so!AccessibleWrap::GetNativeInterface(void**) [AccessibleWrap.cpp : 332 + 0x7]
    rbx = 0x0000000006969440   r12 = 0x00007fff8e3d8a68
    r13 = 0x0000000080004005   r14 = 0x0000000007a81e10
    r15 = 0x0000000006969440   rip = 0x00007f43a5a6283f
    rsp = 0x00007fff8e3d8a10   rbp = 0x00007fff8e3d8a50
    Found by: call frame info
 7  libxul.so!AccessibleWrap::GetAtkObject(nsIAccessible*) [AccessibleWrap.cpp : 362 + 0x9]
    rbx = 0x0000000007a81e10   r12 = 0x0000000006969440
    r13 = 0x0000000006969440   r14 = 0x0000000007a81e10
    r15 = 0x0000000006969440   rip = 0x00007f43a5a6018b
    rsp = 0x00007fff8e3d8a60   rbp = 0x00007fff8e3d8a70
    Found by: call frame info
 8  libxul.so!AccessibleWrap::FirePlatformEvent(AccEvent*) [AccessibleWrap.cpp : 969 + 0x4]
    rbx = 0x0000000007a81e10   r12 = 0x0000000006969440
    r13 = 0x0000000006969440   r14 = 0x0000000007a81e10
    r15 = 0x0000000006969440   rip = 0x00007f43a5a61646
    rsp = 0x00007fff8e3d8a80   rbp = 0x00007fff8e3d8c30
    Found by: call frame info
 9  libxul.so!nsEventShell::FireEvent(AccEvent*) [nsEventShell.cpp : 29 + 0xf]
    rbx = 0x0000000007a81e10   r12 = 0x0000000006969440
    r13 = 0x00007fff8e3d8c70   r14 = 0x0000000000000000
    r15 = 0x0000000000000000   rip = 0x00007f43a5a3472e
    rsp = 0x00007fff8e3d8c40   rbp = 0x00007fff8e3d8c50
    Found by: call frame info
10  libxul.so!DocAccessible::ProcessLoad() [DocAccessible.cpp : 1598 + 0x8]
    rbx = 0x0000000006969440   r12 = 0x0000000007a81e10
    r13 = 0x00007fff8e3d8c70   r14 = 0x0000000000000000
    r15 = 0x0000000000000000   rip = 0x00007f43a5a48162
    rsp = 0x00007fff8e3d8c60   rbp = 0x00007fff8e3d8ca0
    Found by: call frame info
11  libxul.so!NotificationController::WillRefresh(mozilla::TimeStamp) [NotificationController.cpp : 276 + 0xf]
    rbx = 0x0000000003980370   r12 = 0x0000000003980390
    r13 = 0x0000000000000000   r14 = 0x0000000000000000
    r15 = 0x0000000000000000   rip = 0x00007f43a5a282f3
    rsp = 0x00007fff8e3d8cb0   rbp = 0x00007fff8e3d8d40
    Found by: call frame info
12  libxul.so!nsRefreshDriver::Notify(nsITimer*) [nsRefreshDriver.cpp : 344 + 0x14]
    rbx = 0x0000000007d2b370   r12 = 0x00007fff8e3d8f00
    r13 = 0x00007fff8e3d8ed0   r14 = 0x0000000000000002
    r15 = 0x0000000007d2b3a0   rip = 0x00007f43a4f325d0
    rsp = 0x00007fff8e3d8d50   rbp = 0x00007fff8e3d8f70
    Found by: call frame info
Attached patch patchSplinter Review
Assignee: nobody → surkov.alexander
Status: NEW → ASSIGNED
Attachment #677363 - Flags: review?(trev.saunders)
Duplicate of this bug: 807642
Crash Signature: [@ Accessible::GetActionRule()]
Keywords: crash
Version: Trunk → 19 Branch
Comment on attachment 677363 [details] [diff] [review]
patch

I provided a similar patch for a duplicate.

r+ by me
Attachment #677363 - Flags: review+
(In reply to Hub Figuiere [:hub] from comment #6)
> Comment on attachment 677363 [details] [diff] [review]
> patch
> 
> I provided a similar patch for a duplicate.

I saw it.

> r+ by me

You added (vs replaced) review. Do you think Trevor should take a look?
I'm not sure we need to wait for Trevor to check this in. This is a serious crasher for me.
(In reply to Hub Figuiere [:hub] from comment #8)
> I'm not sure we need to wait for Trevor to check this in. This is a serious
> crasher for me.

Ok, I'll land it.

Trev, if you have comments please do.
Attachment #677363 - Flags: review?(trev.saunders)
Crash Signature: [@ Accessible::GetActionRule()] → [@ Accessible::GetActionRule()] [@ nsIContent::IsXUL()]
OS: Linux → All
https://hg.mozilla.org/mozilla-central/rev/cc21ea546a26
Status: ASSIGNED → RESOLVED
Closed: 7 years ago
Flags: in-testsuite+
Resolution: --- → FIXED
Target Milestone: --- → mozilla19
Keywords: topcrash
Whiteboard: [tb-orange]
You need to log in before you can comment on or make changes to this bug.