Bug 106711 – Flaky crash in AXObjectCache::notificationPostTimerFired running svg/as-image/img-relative-height.html

• Status: RESOLVED
• Resolution: DUPLICATE
• Component: Accessibility

[Stephanie Lewis]

Occurs most often on Mountain Lion Debug WK1. Due to flakiness I'm not sure if it affects other platforms, or when it started.
Occurs running svg/as-image/img-relative-height.html.

Exception Type:  EXC_BAD_ACCESS (SIGSEGV)
Exception Codes: KERN_INVALID_ADDRESS at 0x0000000000000018

VM Regions Near 0x18:
--> 
    __TEXT                 0000000105e71000-0000000105ed0000 [  380K] r-x/rwx SM=COW  /Volumes/VOLUME/*

Application Specific Information:
CRASHING TEST: svg/as-image/img-relative-height.html

Thread 0 Crashed:: Dispatch queue: com.apple.main-thread
0   com.apple.WebCore             	0x0000000106858f77 WebCore::AXObjectCache::notificationPostTimerFired(WebCore::Timer<WebCore::AXObjectCache>*) + 71 (AXObjectCache.cpp:615)
1   com.apple.WebCore             	0x00000001075421df WebCore::ThreadTimers::sharedTimerFiredInternal() + 159 (ThreadTimers.cpp:119)
2   com.apple.WebCore             	0x00000001073cbc23 WebCore::timerFired(__CFRunLoopTimer*, void*) + 51 (SharedTimerMac.mm:167)
3   com.apple.CoreFoundation      	0x00007fff9396bda4 __CFRUNLOOP_IS_CALLING_OUT_TO_A_TIMER_CALLBACK_FUNCTION__ + 20
4   com.apple.CoreFoundation      	0x00007fff9396b8bd __CFRunLoopDoTimer + 557
5   com.apple.CoreFoundation      	0x00007fff93951099 __CFRunLoopRun + 1513
6   com.apple.CoreFoundation      	0x00007fff939506b2 CFRunLoopRunSpecific + 290
7   com.apple.Foundation          	0x00007fff8892489e -[NSRunLoop(NSRunLoop) runMode:beforeDate:] + 268
8   DumpRenderTree                	0x0000000105e7eb10 runTest(std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&) + 1639 (DumpRenderTree.mm:1383)
9   DumpRenderTree                	0x0000000105e7e28c dumpRenderTree(int, char const**) + 1855 (DumpRenderTree.mm:847)
10  DumpRenderTree                	0x0000000105e7ee79 main + 86 (DumpRenderTree.mm:932)
11  libdyld.dylib                 	0x00007fff8a4277e1 start + 1

[Stephanie Lewis]

Created attachment 182435 [details]
crash log

[Stephanie Lewis]

just crashed on Lion Release WK1.

[Alexey Proskuryakov]

In bug 105601, another test is crashing with the same stack trace. But since it's a timer, this could also be a single test causing crashes in subsequent ones.

[chris fleizach]

yea definitely a dup

*** This bug has been marked as a duplicate of bug 105601 ***

[Ryosuke Niwa]

*** This bug has been marked as a duplicate of bug 106106 ***