Found with m-c 20240824-4da5ac911a89 (--enable-debug --enable-fuzzing) This was found by visiting a live website with a debug build. STR: - Launch browser and visit site This issue was triggered by visiting `http://accurence.com/`. Unfortunately I have not been able to reproduce the issue. Hit MOZ_CRASH(nsWeakReference not thread-safe) at /builds/worker/checkouts/gecko/xpcom/base/nsISupportsImpl.cpp:43 ``` #0 0x77bdf3dddb04 in EndWriteOp /builds/worker/checkouts/gecko/xpcom/ds/PLDHashTable.h:151:5 #1 0x77bdf3dddb04 in PLDHashTable::EntryHandle::~EntryHandle() /builds/worker/checkouts/gecko/xpcom/ds/PLDHashTable.cpp:707:20 #2 0x77bdf88277b9 in ~EntryHandle /builds/worker/workspace/obj-build/dist/include/nsTHashtable.h:384:28 #3 0x77bdf88277b9 in operator()<nsTHashtable<nsBaseHashtableET<nsIntegralHashKey<unsigned long, 0>, mozilla::NotNull<mozilla::dom::indexedDB::FileInfo<mozilla::dom::indexedDB::DatabaseFileManager> *> > >::EntryHandle> /builds/worker/workspace/obj-build/dist/include/nsBaseHashtable.h:836:11 #4 0x77bdf88277b9 in operator()<PLDHashTable::EntryHandle> /builds/worker/workspace/obj-build/dist/include/nsTHashtable.h:437:18 #5 0x77bdf88277b9 in WithEntryHandle<(lambda at /builds/worker/workspace/obj-build/dist/include/nsTHashtable.h:436:9)> /builds/worker/workspace/obj-build/dist/include/PLDHashTable.h:605:12 #6 0x77bdf88277b9 in WithEntryHandle<(lambda at /builds/worker/workspace/obj-build/dist/include/nsBaseHashtable.h:835:15)> /builds/worker/workspace/obj-build/dist/include/nsTHashtable.h:434:25 #7 0x77bdf88277b9 in WithEntryHandle<(lambda at /builds/worker/workspace/obj-build/dist/include/nsBaseHashtable.h:464:34)> /builds/worker/workspace/obj-build/dist/include/nsBaseHashtable.h:834:18 #8 0x77bdf88277b9 in InsertOrUpdate<mozilla::NotNull<mozilla::dom::indexedDB::FileInfo<mozilla::dom::indexedDB::DatabaseFileManager> *> &> /builds/worker/workspace/obj-build/dist/include/nsBaseHashtable.h:464:12 #9 0x77bdf88277b9 in mozilla::dom::indexedDB::FileInfoManager<mozilla::dom::indexedDB::DatabaseFileManager>::CreateFileInfo()::'lambda'()::operator()() const /builds/worker/checkouts/gecko/dom/indexedDB/FileInfoManager.h:62:18 #10 0x77bdf88275e9 in operator() /builds/worker/checkouts/gecko/dom/indexedDB/FileInfoManager.h:112:34 #11 0x77bdf88275e9 in mozilla::SafeRefPtr<mozilla::dom::indexedDB::FileInfo<mozilla::dom::indexedDB::DatabaseFileManager>> mozilla::dom::indexedDB::FileInfoManager<mozilla::dom::indexedDB::DatabaseFileManager>::AcquireFileInfo<mozilla::dom::indexedDB::FileInfoManager<mozilla::dom::indexedDB::DatabaseFileManager>::CreateFileInfo()::'lambda'()>(mozilla::dom::indexedDB::FileInfoManager<mozilla::dom::indexedDB::DatabaseFileManager>::CreateFileInfo()::'lambda'() const&) const /builds/worker/checkouts/gecko/dom/indexedDB/FileInfoManager.h:109:21 #12 0x77bdf880b65d in CreateFileInfo /builds/worker/checkouts/gecko/dom/indexedDB/FileInfoManager.h:53:12 #13 0x77bdf880b65d in mozilla::dom::indexedDB::(anonymous namespace)::Database::AllocPBackgroundIDBDatabaseFileParent(mozilla::dom::IPCBlob const&) /builds/worker/checkouts/gecko/dom/indexedDB/ActorsParent.cpp:9559:30 #14 0x77bdf8916cf1 in mozilla::dom::indexedDB::PBackgroundIDBDatabaseParent::OnMessageReceived(IPC::Message const&) /builds/worker/workspace/obj-build/ipc/ipdl/PBackgroundIDBDatabaseParent.cpp:558:63 #15 0x77bdf4a53c86 in mozilla::ipc::PBackgroundParent::OnMessageReceived(IPC::Message const&) /builds/worker/workspace/obj-build/ipc/ipdl/PBackgroundParent.cpp:2144:32 #16 0x77bdf49f2bef in mozilla::ipc::MessageChannel::DispatchAsyncMessage(mozilla::ipc::ActorLifecycleProxy*, IPC::Message const&) /builds/worker/checkouts/gecko/ipc/glue/MessageChannel.cpp:1785:25 #17 0x77bdf49efb72 in mozilla::ipc::MessageChannel::DispatchMessage(mozilla::ipc::ActorLifecycleProxy*, mozilla::UniquePtr<IPC::Message, mozilla::DefaultDelete<IPC::Message>>) /builds/worker/checkouts/gecko/ipc/glue/MessageChannel.cpp:1712:9 #18 0x77bdf49f07f2 in mozilla::ipc::MessageChannel::RunMessage(mozilla::ipc::ActorLifecycleProxy*, mozilla::ipc::MessageChannel::MessageTask&) /builds/worker/checkouts/gecko/ipc/glue/MessageChannel.cpp:1503:3 #19 0x77bdf49f193f in mozilla::ipc::MessageChannel::MessageTask::Run() /builds/worker/checkouts/gecko/ipc/glue/MessageChannel.cpp:1603:14 #20 0x77bdf3e92f56 in nsThread::ProcessNextEvent(bool, bool*) /builds/worker/checkouts/gecko/xpcom/threads/nsThread.cpp:1149:16 #21 0x77bdf3e99a3f in NS_ProcessNextEvent(nsIThread*, bool) /builds/worker/checkouts/gecko/xpcom/threads/nsThreadUtils.cpp:480:10 #22 0x77bdf49f9965 in mozilla::ipc::MessagePumpForNonMainThreads::Run(base::MessagePump::Delegate*) /builds/worker/checkouts/gecko/ipc/glue/MessagePump.cpp:329:5 #23 0x77bdf4950771 in RunHandler /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:363:3 #24 0x77bdf4950771 in MessageLoop::Run() /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:345:3 #25 0x77bdf3e8e483 in nsThread::ThreadFunc(void*) /builds/worker/checkouts/gecko/xpcom/threads/nsThread.cpp:366:10 #26 0x77be085876ef in _pt_root /builds/worker/checkouts/gecko/nsprpub/pr/src/pthreads/ptthread.c:201:5 #27 0x77be08641ac2 in start_thread nptl/pthread_create.c:442:8 #28 0x77be086d384f misc/../sysdeps/unix/sysv/linux/x86_64/clone3.S:81 ```
Bug 1915008 Comment 0 Edit History
Note: The actual edited comment in the bug view page will always show the original commenter’s name and original timestamp.
Found with m-c 20240824-4da5ac911a89 (--enable-debug --enable-fuzzing) This was found by visiting a live website with a debug build. STR: - Launch browser and visit site This issue was triggered by visiting `http://accurence.com/`. Unfortunately I have not been able to reproduce the issue. Hit MOZ_CRASH(nsWeakReference not thread-safe) at /builds/worker/checkouts/gecko/xpcom/base/nsISupportsImpl.cpp:43 ``` 68|0|xul.dll|nsWeakReference::Release()|hg:hg.mozilla.org/mozilla-central:xpcom/base/nsWeakReference.cpp:4da5ac911a894efbdc6b548ee9c61181825d7b1b|123|0x105 68|1|xul.dll|mozilla::net::QuicSocketControl::~QuicSocketControl()|hg:hg.mozilla.org/mozilla-central:netwerk/protocol/http/QuicSocketControl.h:4da5ac911a894efbdc6b548ee9c61181825d7b1b|53|0x53 68|2|xul.dll|CommonSocketControl::Release()|hg:hg.mozilla.org/mozilla-central:security/manager/ssl/CommonSocketControl.cpp:4da5ac911a894efbdc6b548ee9c61181825d7b1b|28|0x63 68|3|xul.dll|mozilla::net::QuicSocketControl::Release()|hg:hg.mozilla.org/mozilla-central:netwerk/protocol/http/QuicSocketControl.h:4da5ac911a894efbdc6b548ee9c61181825d7b1b|30|0xd 68|4|xul.dll|mozilla::psm::SSLServerCertVerificationResult::`vector deleting destructor'(unsigned int)|||0x16 68|5|xul.dll|mozilla::Runnable::Release()|hg:hg.mozilla.org/mozilla-central:xpcom/threads/nsThreadUtils.cpp:4da5ac911a894efbdc6b548ee9c61181825d7b1b|66|0x5b 68|6|xul.dll|mozilla::psm::SSLServerCertVerificationJob::~SSLServerCertVerificationJob()|hg:hg.mozilla.org/mozilla-central:security/manager/ssl/SSLServerCertVerification.h:4da5ac911a894efbdc6b548ee9c61181825d7b1b|98|0x3d 68|7|xul.dll|mozilla::psm::SSLServerCertVerificationJob::~SSLServerCertVerificationJob()|hg:hg.mozilla.org/mozilla-central:security/manager/ssl/SSLServerCertVerification.h:4da5ac911a894efbdc6b548ee9c61181825d7b1b|98|0xf 68|8|xul.dll|mozilla::Runnable::Release()|hg:hg.mozilla.org/mozilla-central:xpcom/threads/nsThreadUtils.cpp:4da5ac911a894efbdc6b548ee9c61181825d7b1b|66|0x5b 68|9|xul.dll|nsThreadPool::Run()|hg:hg.mozilla.org/mozilla-central:xpcom/threads/nsThreadPool.cpp:4da5ac911a894efbdc6b548ee9c61181825d7b1b|458|0x995 68|10|xul.dll|nsThread::ProcessNextEvent(bool, bool*)|hg:hg.mozilla.org/mozilla-central:xpcom/threads/nsThread.cpp:4da5ac911a894efbdc6b548ee9c61181825d7b1b|1149|0x968 68|11|xul.dll|NS_ProcessNextEvent(nsIThread*, bool)|hg:hg.mozilla.org/mozilla-central:xpcom/threads/nsThreadUtils.cpp:4da5ac911a894efbdc6b548ee9c61181825d7b1b|480|0x6c 68|12|xul.dll|mozilla::ipc::MessagePumpForNonMainThreads::Run(base::MessagePump::Delegate*)|hg:hg.mozilla.org/mozilla-central:ipc/glue/MessagePump.cpp:4da5ac911a894efbdc6b548ee9c61181825d7b1b|299|0xad 68|13|xul.dll|MessageLoop::RunHandler()|hg:hg.mozilla.org/mozilla-central:ipc/chromium/src/base/message_loop.cc:4da5ac911a894efbdc6b548ee9c61181825d7b1b|363|0x4c 68|14|xul.dll|MessageLoop::Run()|hg:hg.mozilla.org/mozilla-central:ipc/chromium/src/base/message_loop.cc:4da5ac911a894efbdc6b548ee9c61181825d7b1b|345|0x6e 68|15|xul.dll|nsThread::ThreadFunc(void*)|hg:hg.mozilla.org/mozilla-central:xpcom/threads/nsThread.cpp:4da5ac911a894efbdc6b548ee9c61181825d7b1b|366|0x15a 68|16|nss3.dll|_PR_NativeRunThread(void*)|hg:hg.mozilla.org/mozilla-central:nsprpub/pr/src/threads/combined/pruthr.c:4da5ac911a894efbdc6b548ee9c61181825d7b1b|399|0x120 68|17|nss3.dll|pr_root(void*)|hg:hg.mozilla.org/mozilla-central:nsprpub/pr/src/md/windows/w95thred.c:4da5ac911a894efbdc6b548ee9c61181825d7b1b|139|0x10 68|18|ucrtbase.dll|||| 68|19|KERNELBASE.dll|||| 68|20|ucrtbase.dll|||| 68|21|ucrtbase.dll|||| 68|22|mozglue.dll|patched_BaseThreadInitThunk(int, void*, void*)|hg:hg.mozilla.org/mozilla-central:toolkit/xre/dllservices/mozglue/WindowsDllBlocklist.cpp:4da5ac911a894efbdc6b548ee9c61181825d7b1b|562|0x8a 68|23|ntdll.dll|||| 68|24|KERNELBASE.dll|||| 68|25|xul.dll|js::jit::MacroAssembler::branchTestObjectNeedsProxyResultValidation(js::jit::AssemblerX86Shared::Condition, js::jit::Register, js::jit::Register, js::jit::Label*)|hg:hg.mozilla.org/mozilla-central:js/src/jit/MacroAssembler.cpp:4da5ac911a894efbdc6b548ee9c61181825d7b1b|5404|0x126 ```