906589 - crash in nsIContent::HasAttr(int, nsIAtom*)

Status: VERIFIED FIXED

(Core :: Disability Access APIs, defect)

Description

[Marco Zehe (:MarcoZ)]

This bug was filed from the Socorro interface and is 
report bp-8b16695d-3383-4fbd-9bc6-873042130809 .
 ============================================================= 

This was reported to me by a community member.

Comment 1

[alexander :surkov (:asurkov)]

Maybe add a null check and assert for hyperTextElm (http://hg.mozilla.org/releases/mozilla-aurora/annotate/4ea223de889c/accessible/src/base/TextAttrs.cpp#l70), no other ideas. Trev?

Comment 2

[Marco Zehe (:MarcoZ)]

I just saw this crash again. I had hit Refresh, but had lost my WiFi connection. I restored that, and after that refresh process, the crash occurred.
https://crash-stats.mozilla.com/report/index/d29d6b16-6202-4731-9f82-d58fc2140417

Comment 3

[alexander :surkov (:asurkov)]

Attachment: testcase

click the button and obtain text attributes on document

Comment 4

[alexander :surkov (:asurkov)]

Attachment: patch

Comment 5

[alexander :surkov (:asurkov)]

http://hg.mozilla.org/integration/mozilla-inbound/rev/40cc7a7f6cc0

Comment 6

[Ryan VanderMeulen [:RyanVM]]

https://hg.mozilla.org/mozilla-central/rev/40cc7a7f6cc0

Comment 7

[Bogdan Maris, Desktop QA]

Tried to reproduce the crash on an old Nightly with the attached testcase but with no success.
No crashes are recorded by Socorro in the last 2 weeks on Firefox 34.0a1, 33.0a2, 32.0b with signature: @nsIContent::HasAttr(int, nsIAtom*)

https://crash-stats.mozilla.com/query/?product=Firefox&version=Firefox%3A32.0b&platform=win&platform=mac&platform=lin&range_value=2&range_unit=weeks&date=07%2F30%2F2014+06%3A00%3A00&query_search=signature&query_type=contains&query=nsIContent%3A%3AHasAttr%28int%2C+nsIAtom*&reason=&release_channels=&build_id=&process_type=any&hang_type=any

Based on this results I`m marking this as verified fixed.