815055 - crash in nsCoreUtils::IsTabDocument

Status: RESOLVED FIXED

(Core :: Disability Access APIs, defect)

Description

[Marco Zehe (:MarcoZ)]

This bug was filed from the Socorro interface and is 
report bp-e9476848-1d9d-400d-81fc-ab96e2121124 .
============================================================= 

It was sent to me by a community member who I met in London on Thursday and Friday last week. She experiences this with JAWS 14. Appears to happen randomly, no definite STR.

Comment 1

[alexander :surkov (:asurkov)]

CC'ing Boris to check that our assumptions aren't correct (i.e. no document container or no docshell tree item is valid scenario for destroying presshell).

Comment 2

[Boris Zbarsky [:bzbarsky]]

I can't figure out what comment 1 is asking.

The crash seems to be happening because GetContainer returns null, right?  That can certainly happen for various reasons on a document in the middle of teardown, though I'm a little surprised it would happen for a document in the middle of its presshell being destroyed...

Comment 3

[Trevor Saunders (:tbsaunde)]

(In reply to Boris Zbarsky (:bz) from comment #2)
> I can't figure out what comment 1 is asking.

neither can I, but I believed you sort of answered it.  I think it was something along the lines of should a11y deal with the case that GetContainer() returns null, or should we investigate why that happens.

> The crash seems to be happening because GetContainer returns null, right? 

that would be my theory

> That can certainly happen for various reasons on a document in the middle of
> teardown, though I'm a little surprised it would happen for a document in
> the middle of its presshell being destroyed...

suprised enough someone should investigate why the document has no docshell at that point?

Comment 4

[Boris Zbarsky [:bzbarsky]]

Not sure I am, since it was a bfcached document...

Comment 5

[alexander :surkov (:asurkov)]

Yes, you answered it, I wondered whether the problem on a11y side or not.

Comment 6

[alexander :surkov (:asurkov)]

Attachment: patch

Comment 7

[alexander :surkov (:asurkov)]

http://hg.mozilla.org/integration/mozilla-inbound/rev/a6ae2af96c8b

Comment 8

[(no longer active)]

https://hg.mozilla.org/mozilla-central/rev/a6ae2af96c8b