Closed Bug 1311748 Opened 8 years ago Closed 8 years ago

Crash in mozilla::mscom::MainThreadHandoff::OnWalkInterface

Categories

(Core :: IPC, defect)

x86
Windows 10
defect
Not set
critical

Tracking

()

RESOLVED FIXED
mozilla52
Tracking Status
firefox52 --- fixed

People

(Reporter: davidb, Assigned: bugzilla)

References

Details

(Keywords: crash, Whiteboard: aes+)

Crash Data

Attachments

(1 file)

Aaron ping.
Flags: needinfo?(aklotz)
According to that first crash report, we blew up while processing the result of IAccessible2::get_relations. There might be some problems with the code that resolves that array.
Flags: needinfo?(aklotz)
Whiteboard: aes+
I'm seeing this constantly in 52.0a1 (2016-11-02) (32-bit). STR: 1. With NVDA running, open any page. This will do: data:text/html,a 2. Wait about a second. Crash! Reports: bp-95eba00e-88a1-44aa-bf6d-ec4c82161102 bp-13038116-6bc3-448e-ac1f-26a302161102 bp-b7a24606-fbc7-4976-867b-e09dc2161102 ... Plenty more where those came from. :)
And... now it's behaving. These seemed to be caused by having AccProbe running... but I wasn't actually doing anything (no event monitoring, etc.) in AccProbe; I just left it running. As soon as I exit AccProbe, it behaves. If I start AccProbe again, bam! Crashes.
Comment on attachment 8807225 [details] Bug 1311748: Remove extra pointer dereference from MainThreadHandoff::FixArrayElements; https://reviewboard.mozilla.org/r/90448/#review90218
Attachment #8807225 - Flags: review?(jmathies) → review+
Pushed by aklotz@mozilla.com: https://hg.mozilla.org/integration/autoland/rev/58eb286fe327 Remove extra pointer dereference from MainThreadHandoff::FixArrayElements; r=jimm
Status: NEW → RESOLVED
Closed: 8 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla52
Assignee: nobody → aklotz
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: