NVDA causes firefox to crash in nsAccUtils::GetHeaderCellsFor

[aleksey_s]

I reported it on the mailing list, but i've found recently that it is also reproduceable on my system.
site:  http://vkontakte.ru
related crash IDS:
friend's system: bp-db2ec6e1-7506-4da4-95ab-472282100804
My laptop: bp-3ab9959e-dc34-4be6-bfe8-b0d392100804

[aleksey_s]

It doesn't occur with 2010.2.

[jteh]

This is a bug in Mozilla, which I reported yesterday. See  MozillaBug:583952. I don't want to revert this code in NVDA because it will eventually be fixed in Firefox, and if we revert it now, we'll lose it for 2010.2 altogether.

[aleksey_s]

This one is definitely a show-stopper for 2010.2. Too many sites where it crashes.

[jteh]

 MozillaBug:583952 is now fixed in the latest Firefox 4 nightly. I'd appreciate it if people could test this with various sites that crashed.

Lex, I was never able to reproduce it on the site you provided, but perhaps it appears differently on my system due to locale.

This fix isn't yet backported to Firefox 3.6.x. If the fix isn't in a final Firefox 3.6.x release by the time we want to release NVDA 2010.2, I'll still have to find a work around on our side. Leaving open until this gets resolved one way or another for 3.6.x.

[jteh]

This fix will be in Firefox 3.6.10. Not sure when that will be available to users.

[jteh]

We need to work around this because 3.6.10 will not be out before 2010.2beta1 comes out.

Unfortunately, the only thing we can do is completely disable fetching of table headers for Gecko <= 1.9.2.9. We can do this by querying the toolkit version from IAccessibleApplication.

[jteh]

Done in changeset:main,3833.

[jteh]

Unfortunately, this fix won't be in Firefox 3.6.10 after all, but will instead be deferred until 3.6.11. changeset:releases,2010.2,3840 updates the code to handle this.