Closed Bug 1437700 Opened 7 years ago Closed 5 years ago

stack-overflow in [@ AppendFromAccessibleChildren]

Categories

(Core :: Disability Access APIs, defect, P2)

Product:
Core
Component:
Disability Access APIs
Version:
60 Branch
Type:
defect

Tracking

()

Status:
RESOLVED WORKSFORME
Tracking Flags:
Tracking Status
firefox60 --- wontfix
firefox61 --- wontfix

People

(Reporter: tsmith, Unassigned)

References

(Blocks 2 open bugs)

Details

(Keywords: crash, testcase, Whiteboard: a11y:crash-tree:aria-owns)

Attachments

(2 files)

testcase.html
(deleted), text/html
Details
prefs.js
(deleted), application/x-javascript
Details
Attached file testcase.html (deleted) —
==51928==ERROR: AddressSanitizer: stack-overflow on address 0x7ffe2210df18 (pc 0x0000004c132e bp 0x7ffe2210e770 sp 0x7ffe2210df20 T0) #0 0x4c132d in __asan_memset /src/llvm/projects/compiler-rt/lib/asan/asan_interceptors_memintrinsics.cc:27:3 #1 0x7f87ff3cdf3a in mozilla::a11y::RelatedAccIterator::RelatedAccIterator(mozilla::a11y::DocAccessible*, nsIContent*, nsAtom*) /src/accessible/base/AccIterator.cpp:81:3 #2 0x7f87ff3ce7f2 in mozilla::a11y::HTMLLabelIterator::HTMLLabelIterator(mozilla::a11y::DocAccessible*, mozilla::a11y::Accessible const*, mozilla::a11y::HTMLLabelIterator::LabelFilter) /src/accessible/base/AccIterator.cpp:133:3 #3 0x7f87ff46ae25 in mozilla::a11y::Accessible::NativeName(nsTString<char16_t>&) /src/accessible/generic/Accessible.cpp:2002:23 #4 0x7f87ff4a0959 in mozilla::a11y::HyperTextAccessible::NativeName(nsTString<char16_t>&) /src/accessible/generic/HyperTextAccessible.cpp:1862:45 #5 0x7f87ff4563e8 in mozilla::a11y::Accessible::Name(nsTString<char16_t>&) /src/accessible/generic/Accessible.cpp:150:29 #6 0x7f87ff444cbb in nsTextEquivUtils::AppendFromAccessible(mozilla::a11y::Accessible*, nsTSubstring<char16_t>*) /src/accessible/base/nsTextEquivUtils.cpp:203:20 #7 0x7f87ff444e54 in AppendFromAccessibleChildren /src/accessible/base/nsTextEquivUtils.cpp:179:10 #8 0x7f87ff444e54 in nsTextEquivUtils::AppendFromAccessible(mozilla::a11y::Accessible*, nsTSubstring<char16_t>*) /src/accessible/base/nsTextEquivUtils.cpp:219 #9 0x7f87ff444e54 in AppendFromAccessibleChildren /src/accessible/base/nsTextEquivUtils.cpp:179:10 #10 0x7f87ff444e54 in nsTextEquivUtils::AppendFromAccessible(mozilla::a11y::Accessible*, nsTSubstring<char16_t>*) /src/accessible/base/nsTextEquivUtils.cpp:219 #11 0x7f87ff444e54 in AppendFromAccessibleChildren /src/accessible/base/nsTextEquivUtils.cpp:179:10 #12 0x7f87ff444e54 in nsTextEquivUtils::AppendFromAccessible(mozilla::a11y::Accessible*, nsTSubstring<char16_t>*) /src/accessible/base/nsTextEquivUtils.cpp:219 #13 0x7f87ff444e54 in AppendFromAccessibleChildren /src/accessible/base/nsTextEquivUtils.cpp:179:10 #14 0x7f87ff444e54 in nsTextEquivUtils::AppendFromAccessible(mozilla::a11y::Accessible*, nsTSubstring<char16_t>*) /src/accessible/base/nsTextEquivUtils.cpp:219 ...
Flags: in-testsuite?
Attached file prefs.js (deleted) —
status-firefox61: --- → affected
Blocks: ariaowns
Priority: -- → P2
Whiteboard: a11y:crash-tree:aria-owns

This is no longer reproducible.

Status: NEW → RESOLVED
Closed: 5 years ago
Resolution: --- → FIXED
status-firefox60: affected → wontfix
status-firefox61: affected → wontfix
Resolution: FIXED → WORKSFORME
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: