I believe this might still be possible, in particular if the promise resolves very late. We are failing on this line: https://searchfox.org/mozilla-central/rev/b0e929cfaf3994cad2dd02afdac138083ee3fc84/dom/workers/loader/CacheLoadHandler.cpp#263 This was something I was wary about before, and there is an unrelated patch that fixes this on https://bugzilla.mozilla.org/show_bug.cgi?id=1797327 -- I will ping asuth there.
Bug 1794249 Comment 7 Edit History
Note: The actual edited comment in the bug view page will always show the original commenter’s name and original timestamp.
I believe this might still be possible, though I don't know if it is still happening. In particular if the promise resolves very late, then loadContext will be dereferenced. We are failing on this line: https://searchfox.org/mozilla-central/rev/b0e929cfaf3994cad2dd02afdac138083ee3fc84/dom/workers/loader/CacheLoadHandler.cpp#263 This was something I was wary about before, and there is an unrelated patch that fixes this on https://bugzilla.mozilla.org/show_bug.cgi?id=1797327 -- I will ping asuth there.
I believe this might still be possible to trigger in spite of 1792984, though I don't know if it is still happening. In particular if the promise resolves very late, then loadContext will be dereferenced. We are failing on this line: https://searchfox.org/mozilla-central/rev/b0e929cfaf3994cad2dd02afdac138083ee3fc84/dom/workers/loader/CacheLoadHandler.cpp#263 This was something I was wary about before, and there is an unrelated patch that fixes this on https://bugzilla.mozilla.org/show_bug.cgi?id=1797327 -- I will ping asuth there.