[Webkit-unassigned] [Bug 87426] New: [Win] ASSERTION FAILED !m_ptr under AccessibilityController::winAddNotificationListener

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Thu May 24 13:56:58 PDT 2012


https://bugs.webkit.org/show_bug.cgi?id=87426

           Summary: [Win] ASSERTION FAILED !m_ptr under
                    AccessibilityController::winAddNotificationListener
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: All
        OS/Version: Windows 7
            Status: NEW
          Keywords: LayoutTestFailure, MakingBotsRed, NeedsRadar
          Severity: Normal
          Priority: P2
         Component: Accessibility
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: jberlin at webkit.org
                CC: adele at apple.com, jhoneycutt at apple.com,
                    webkit-bug-importer at group.apple.com


The following tests all 'crash' when running the tests under debug:

accessibility/menu-list-sends-change-notification.html
accessibility/multiselect-list-reports-active-option.html
platform/win/accessibility/detached-object-notification-crash.html

Unhandled exception at 0x73728b2a (DumpRenderTree.dll) in DumpRenderTree.exe: 0xC0000005: Access violation writing location 0xbbadbeef.

>	DumpRenderTree.dll!COMPtr<IAccessible>::operator&()  Line 76 + 0x3a bytes	C++
     DumpRenderTree.dll!WTF::HashTraits<COMPtr<IAccessible> >::constructDeletedValue(COMPtr<IAccessible> & slot={...})  Line 223 + 0x1c bytes    C++
     DumpRenderTree.dll!WTF::PairHashTraits<WTF::HashTraits<COMPtr<IAccessible> >,WTF::HashTraits<OpaqueJSValue *> >::constructDeletedValue(std::pair<COMPtr<IAccessible>,OpaqueJSValue *> & slot=({m_ptr=0xcccccccc },0xcccccccc))  Line 185 + 0xc bytes    C++
     DumpRenderTree.dll!WTF::HashTable<COMPtr<IAccessible>,std::pair<COMPtr<IAccessible>,OpaqueJSValue *>,WTF::PairFirstExtractor<std::pair<COMPtr<IAccessible>,OpaqueJSValue *> >,WTF::PtrHash<COMPtr<IAccessible> >,WTF::HashMapValueTraits<WTF::HashTraits<COMPtr<IAccessible> >,WTF::HashTraits<OpaqueJSValue *> >,WTF::HashTraits<COMPtr<IAccessible> > >::checkKey<WTF::HashMapTranslator<WTF::HashMapValueTraits<WTF::HashTraits<COMPtr<IAccessible> >,WTF::HashTraits<OpaqueJSValue *> >,WTF::PtrHash<COMPtr<IAccessible> > >,COMPtr<IAccessible> >(const COMPtr<IAccessible> & key={...})  Line 502 + 0x9 bytes    C++
     DumpRenderTree.dll!WTF::HashTable<COMPtr<IAccessible>,std::pair<COMPtr<IAccessible>,OpaqueJSValue *>,WTF::PairFirstExtractor<std::pair<COMPtr<IAccessible>,OpaqueJSValue *> >,WTF::PtrHash<COMPtr<IAccessible> >,WTF::HashMapValueTraits<WTF::HashTraits<COMPtr<IAccessible> >,WTF::HashTraits<OpaqueJSValue *> >,WTF::HashTraits<COMPtr<IAccessible> > >::add<WTF::HashMapTranslator<WTF::HashMapValueTraits<WTF::HashTraits<COMPtr<IAccessible> >,WTF::HashTraits<OpaqueJSValue *> >,WTF::PtrHash<COMPtr<IAccessible> > >,COMPtr<IAccessible>,OpaqueJSValue *>(const COMPtr<IAccessible> & key={...}, OpaqueJSValue * const & extra=0x03c016c0)  Line 690    C++
     DumpRenderTree.dll!WTF::HashMap<COMPtr<IAccessible>,OpaqueJSValue *,WTF::PtrHash<COMPtr<IAccessible> >,WTF::HashTraits<COMPtr<IAccessible> >,WTF::HashTraits<OpaqueJSValue *> >::inlineAdd(const COMPtr<IAccessible> & key={...}, OpaqueJSValue * const & mapped=0x03c016c0)  Line 335 + 0x14 bytes    C++
     DumpRenderTree.dll!WTF::HashMap<COMPtr<IAccessible>,OpaqueJSValue *,WTF::PtrHash<COMPtr<IAccessible> >,WTF::HashTraits<COMPtr<IAccessible> >,WTF::HashTraits<OpaqueJSValue *> >::add(const COMPtr<IAccessible> & key={...}, OpaqueJSValue * const & mapped=0x03c016c0)  Line 362 + 0x14 bytes    C++
     DumpRenderTree.dll!AccessibilityController::winAddNotificationListener(COMPtr<IAccessible> element={...}, OpaqueJSValue * functionCallback=0x03c016c0)  Line 329 + 0x17 bytes    C++
     DumpRenderTree.dll!AccessibilityUIElement::addNotificationListener(OpaqueJSValue * functionCallback=0x03c016c0)  Line 622    C++
     DumpRenderTree.dll!addNotificationListenerCallback(const OpaqueJSContext * context=0x036400b0, OpaqueJSValue * function=0x03c01500, OpaqueJSValue * thisObject=0x03c01540, unsigned int argumentCount=1, const OpaqueJSValue * const * arguments=0x001ee434, const OpaqueJSValue * * exception=0x001ee418)  Line 933 + 0x17 bytes    C++
     JavaScriptCore.dll!JSC::JSCallbackFunction::call(JSC::ExecState * exec=0x036400b0)  Line 73 + 0x39 bytes    C++
     JavaScriptCore.dll!cti_op_call_NotJSFunction(void * * args=0x001ee518)  Line 2308 + 0x8 bytes    C++
     JavaScriptCore.dll!@cti_op_create_this at 4()  + 0x16f bytes    C++
     JavaScriptCore.dll!JSC::JITCode::execute(JSC::RegisterFile * registerFile=0x030040a4, JSC::ExecState * callFrame=0x03640038, JSC::JSGlobalData * globalData=0x02fbe198)  Line 127 + 0x2d bytes    C++
     JavaScriptCore.dll!JSC::Interpreter::executeCall(JSC::ExecState * callFrame=0x0135c2b8, JSC::JSObject * function=0x03c01840, JSC::CallType callType=CallTypeJS, const JSC::CallData & callData={...}, JSC::JSValue thisValue={...}, const JSC::ArgList & args={...})  Line 1305 + 0x2a bytes    C++
     JavaScriptCore.dll!JSC::call(JSC::ExecState * exec=0x0135c2b8, JSC::JSValue functionObject={...}, JSC::CallType callType=CallTypeJS, const JSC::CallData & callData={...}, JSC::JSValue thisValue={...}, const JSC::ArgList & args={...})  Line 39 + 0x3c bytes    C++
     WebKit.dll!WebCore::JSMainThreadExecState::call(JSC::ExecState * exec=0x0135c2b8, JSC::JSValue functionObject={...}, JSC::CallType callType=CallTypeJS, const JSC::CallData & callData={...}, JSC::JSValue thisValue={...}, const JSC::ArgList & args={...})  Line 56 + 0x29 bytes    C++
     WebKit.dll!WebCore::ScheduledAction::executeFunctionInContext(JSC::JSGlobalObject * globalObject=0x0135c240, JSC::JSValue thisValue={...}, WebCore::ScriptExecutionContext * context=0x04f2367c)  Line 115 + 0x4c bytes    C++
     WebKit.dll!WebCore::ScheduledAction::execute(WebCore::Document * document=0x04f235c0)  Line 138    C++
     WebKit.dll!WebCore::ScheduledAction::execute(WebCore::ScriptExecutionContext * context=0x04f2367c)  Line 85    C++
     WebKit.dll!WebCore::DOMTimer::fired()  Line 151    C++
     WebKit.dll!WebCore::ThreadTimers::sharedTimerFiredInternal()  Line 115 + 0xf bytes    C++
     WebKit.dll!WebCore::ThreadTimers::sharedTimerFired()  Line 94    C++
     WebKit.dll!WebCore::TimerWindowWndProc(HWND__ * hWnd=0x000505ac, unsigned int message=49583, unsigned int wParam=0, long lParam=0)  Line 103 + 0x8 bytes    C++
     user32.dll!75c26238()     
     [Frames below may be incorrect and/or missing, no symbols loaded for user32.dll]    
     user32.dll!75c268ea()     
     user32.dll!75c26899()     
     user32.dll!75c27d31()     
     user32.dll!75c27dfa()     
     DumpRenderTree.dll!runTest(const std::basic_string<char,std::char_traits<char>,std::allocator<char> > & testPathOrURL="C:\cygwin\home\buildbot\OpenSource\LayoutTests\accessibility\menu-list-sends-change-notification.html")  Line 1053 + 0xf bytes    C++
     DumpRenderTree.dll!dllLauncherEntryPoint(int argc=2, const char * * argv=0x00c72578)  Line 1435 + 0x28 bytes    C++
     DumpRenderTree.exe!main(int argc=2, const char * * argv=0x00c72578)  Line 198 + 0x10 bytes    C++
     DumpRenderTree.exe!__tmainCRTStartup()  Line 597 + 0x17 bytes    C
     kernel32.dll!75103677()     
     ntdll.dll!77989f42()     
     ntdll.dll!77989f15()

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list