Closed Bug 1304130 Opened 8 years ago Closed 8 years ago

Crash in InvalidArrayIndex_CRASH | mozilla::a11y::DocAccessibleChildBase::SetMsaaIds

Categories

(Core :: Disability Access APIs, defect)

Product:
Core
Component:
Disability Access APIs
Version:
52 Branch
Platform:
Unspecified
Windows 10
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED FIXED
Tracking Flags:
Tracking Status
e10s + ---
firefox52 --- fixed

People

(Reporter: kats, Unassigned)

References

(Blocks 1 open bug)

Details

(Keywords: crash)

Crash Data

This bug was filed from the Socorro interface and is 
report bp-dfe164ce-2fb4-41a8-ba25-e13fc2160920.
=============================================================

Start nightly on a Windows touch device. Set browser.tabs.remote.force-enable=true and restart the browser so it comes up in e10s mode. In the search box, type "peach" and hit enter. If the google results page loads, click on the first result (to wikipedia). I have tried this a number of times now and I get crashes every time:


bp-e50c550b-04c9-4175-80ab-25f1e2160920	9/20/2016	2:58 PM
bp-2c0009fc-b3b9-4e78-be7f-5ecab2160920	9/20/2016	2:58 PM
bp-87532064-9a70-4c45-aabd-00d6c2160920	9/20/2016	2:58 PM
bp-5d9f82b6-0718-4344-b6c1-72f412160920	9/20/2016	2:58 PM
bp-e27af2be-d36c-48a1-94fa-6e6192160920	9/20/2016	2:56 PM
bp-203a65a6-bf74-4e19-ad61-d0e0c2160920	9/20/2016	2:55 PM
bp-91c7f335-0214-4285-971f-d5c6c2160920	9/20/2016	2:55 PM
bp-f64ea109-51d9-498d-8e49-e8c9d2160920	9/20/2016	2:55 PM
bp-452613ab-6698-43f4-bf9c-94c112160920	9/20/2016	2:54 PM
bp-dfe164ce-2fb4-41a8-ba25-e13fc2160920	9/20/2016	2:54 PM
Version: 51 Branch → 52 Branch
I've also just encountered this crash in Gmail while trying to compose a message. Hit a different bug there, which is not a crash, but when trying to tab to the Discard Draft option, the tab crashed on me.

bp-f6249c06-6963-4f47-99e1-0ef622160921
For those of you looking at the statistics: Don't be alarmed, I am producing a lot of these currently just by testing Firefox with NVDA. I see them frequently when viewing Gmail threads, I get immediate crashes of the tabs when opening Facebook etc. I try to comment each one of those so you know that it was me, but may not think of doing it on each crash. :-)
This will go away with the landing of bug 1304449.
Crash volume for signature 'InvalidArrayIndex_CRASH | mozilla::a11y::DocAccessibleChildBase::SetMsaaIds':
 - nightly (version 52): 1466 crashes from 2016-09-19.
 - aurora  (version 51): 0 crashes from 2016-09-19.
 - beta    (version 50): 0 crashes from 2016-09-20.
 - release (version 49): 0 crashes from 2016-09-05.
 - esr     (version 45): 0 crashes from 2016-06-01.

Crash volume on the last weeks (Week N is from 10-03 to 10-09):
            W. N-1  W. N-2
 - nightly     648     818
 - aurora        0       0
 - beta          0       0
 - release       0       0
 - esr           0       0

Affected platform: Windows

Crash rank on the last 7 days:
             Browser Content     Plugin
 - nightly           #3
 - aurora
 - beta
 - release
 - esr
status-firefox52: --- → affected
I am alarmed that this is causing Firefox nightly on a surface (pro|book) to crash loading every Google result page. This makes nightly basically unusable for me. David, while we're waiting on bug 1304449 are there prefs or backouts that could get nightly back to usable?
Flags: needinfo?(dbolter)
As per email, we are less concerned while this affects only people who flip a pref. Bug 1304449 landing is very close.
Flags: needinfo?(dbolter)
STR in comment 0 don't work any more for me on the Oct 5 nightly (which AFAICT doesn't even have the fix for bug 1304449). I can load the wikipedia page fine. Not sure what changed, or if it's just intermittent.
No longer blocks: 1299305
The code in question is now gone with the landing of bug 1304449. Marking FIXED.
Status: NEW → RESOLVED
Closed: 8 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.