Closed Bug 1120464 Opened 9 years ago Closed 9 years ago

Win7+ 64bit crash in nsTArray_Impl<nsINode*, nsTArrayInfallibleAllocator>::Clear() called by mozilla::a11y::ProxyAccessible::SetChildDoc

Categories

(Core :: Disability Access APIs, defect)

All
Windows NT
defect
Not set
critical

Tracking

()

RESOLVED DUPLICATE of bug 1120285

People

(Reporter: kairo, Unassigned)

Details

(Keywords: crash)

Crash Data

This bug was filed from the Socorro interface and is 
report bp-af2e8429-cfea-4840-9a2a-6f7a52150110.
=============================================================

Top frames:
0 	xul.dll 	nsTArray_Impl<nsINode*, nsTArrayInfallibleAllocator>::Clear() 	xpcom/glue/nsTArray.h
1 	xul.dll 	mozilla::a11y::ProxyAccessible::SetChildDoc(mozilla::a11y::DocAccessibleParent*) 	accessible/ipc/ProxyAccessible.cpp
2 	xul.dll 	mozilla::a11y::DocAccessibleParent::RemoveChildDoc(mozilla::a11y::DocAccessibleParent*) 	accessible/ipc/DocAccessibleParent.h
3 	xul.dll 	mozilla::dom::PContentParent::DestroySubtree(mozilla::ipc::IProtocolManager<mozilla::ipc::IProtocol>::ActorDestroyReason) 	obj-firefox/ipc/ipdl/PContentParent.cpp
4 	xul.dll 	mozilla::dom::PContentParent::OnChannelError() 	obj-firefox/ipc/ipdl/PContentParent.cpp
5 	xul.dll 	mozilla::dom::ContentParent::OnChannelError() 	dom/ipc/ContentParent.cpp
6 	xul.dll 	mozilla::ipc::MessageChannel::NotifyMaybeChannelError() 	ipc/glue/MessageChannel.cpp
7 	xul.dll 	mozilla::ipc::MessageChannel::OnNotifyMaybeChannelError() 	ipc/glue/MessageChannel.cpp
8 	xul.dll 	RunnableMethod<mozilla::ipc::MessageChannel, void ( mozilla::ipc::MessageChannel::*)(void), Tuple0>::Run() 	ipc/chromium/src/base/task.h
9 	xul.dll 	MessageLoop::DoWork() 	ipc/chromium/src/base/message_loop.cc
[...]

This started with the 2015-01-10 Nightly 36 build on Win64 builds only and Win7+ and is a top 10 crash on Nightly since then.
Summary: Win7+ 64bit crash in nsTArray_Impl<nsINode*, nsTArrayInfallibleAllocator>::Clear() → Win7+ 64bit crash in nsTArray_Impl<nsINode*, nsTArrayInfallibleAllocator>::Clear() called by mozilla::a11y::ProxyAccessible::SetChildDoc
(In reply to David Bolter [:davidb] from comment #1)
> Bug 1088148 again?

NO, THIS IS DIFFERENT SOMETHING GOES WRONG SHUTING A DOC DOWN, INSTEAD OF CREATING IT.  hOWEVER THIS IS JUST BUG 1120285 WITH DIFFERENT INLINING AND STUFF.
Status: NEW → RESOLVED
Closed: 9 years ago
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.