857346 - crash in mozilla::a11y::XULTreeGridCellAccessible::CellInvalidated

Status: RESOLVED WORKSFORME

(Core :: Disability Access APIs, defect, P3)

Description

[Wayne Mery (:wsmwk)]

This bug was filed from the Socorro interface and is 
report bp-370461a9-835a-4cfe-b888-8961d2130311 .
============================================================= 
0 	xul.dll 	mozilla::a11y::XULTreeGridCellAccessible::CellInvalidated 	accessible/src/xul/XULTreeGridAccessible.cpp:928
1 	xul.dll 	mozilla::a11y::XULTreeGridRowAccessible::RowInvalidated 	accessible/src/xul/XULTreeGridAccessible.cpp:445
2 	xul.dll 	mozilla::a11y::XULTreeAccessible::TreeViewInvalidated 	accessible/src/xul/XULTreeAccessible.cpp:657
3 	xul.dll 	mozilla::a11y::RootAccessible::HandleTreeInvalidatedEvent 	accessible/src/generic/RootAccessible.cpp:723
4 	xul.dll 	mozilla::a11y::RootAccessible::ProcessDOMEvent 	accessible/src/generic/RootAccessible.cpp:324
5 	xul.dll 	NotificationController::HandleNotification<DocAccessible,nsIContent> 	accessible/src/base/NotificationController.h:143
6 	xul.dll 	DocAccessible::HandleNotification<mozilla::a11y::RootAccessible,nsIDOMEvent> 	accessible/src/generic/DocAccessible-inl.h:28
7 	xul.dll 	mozilla::a11y::RootAccessible::HandleEvent 	accessible/src/generic/RootAccessible.cpp:281
8 	xul.dll 	nsEventListenerManager::HandleEventSubType 	content/events/src/nsEventListenerManager.cpp:811

Comment 1

[Trevor Saunders (:tbsaunde)]

it looks like the root cause here is the same as bug 857344 null mColumn

Comment 2

[alexander :surkov (:asurkov)]

only one thing: gridcell accessible was cycle collected (I can see only one path how mColumn can become a null), so cycle collection traversal stuff should include mTreeView as well.

Comment 3

[alexander :surkov (:asurkov)]

(In reply to alexander :surkov from comment #2)
> only one thing: gridcell accessible was cycle collected (I can see only one
> path how mColumn can become a null), so cycle collection traversal stuff
> should include mTreeView as well.

traversal -> unlink I guess

Comment 4

[alexander :surkov (:asurkov)]

52 thunderbird is a last guy who was seeing it [1], let's keep an eye on it for a bit longer.

[1] https://crash-stats.mozilla.com/signature/?signature=mozilla%3A%3Aa11y%3A%3AXULTreeGridCellAccessible%3A%3ACellInvalidated&date=%3E%3D2018-02-06T08%3A11%3A03.000Z&date=%3C2018-02-13T08%3A11%3A03.000Z&_columns=date&_columns=product&_columns=version&_columns=build_id&_columns=platform&_columns=reason&_columns=address&_columns=install_time&_sort=-date&page=1#reports

Comment 5

[Wayne Mery (:wsmwk)]

FWIW in past month, 3-4 crashes. Still not very much.  (No user comments or email addresses.)

Comment 6

[alexander :surkov (:asurkov)]

low 52 crashes, I guess we could mark it wontfix for 52, and worksforme for others.