1181212 - crash in mozilla::AsyncEventDispatcher::AsyncEventDispatcher coming from nsDocument::ExitFullscreen

Status: RESOLVED FIXED

(Core :: DOM: Core & HTML, defect)

Description

[Robert Kaiser]

This bug was filed from the Socorro interface and is 
report bp-278a0c06-b4eb-4717-87dd-f5b2a2150707.
=============================================================

Frames:
0 	xul.dll 	nsCOMPtr<nsIInterfaceInfo>::nsCOMPtr<nsIInterfaceInfo>(nsIInterfaceInfo*) 	xpcom/glue/nsCOMPtr.h
1 	xul.dll 	mozilla::AsyncEventDispatcher::AsyncEventDispatcher(nsINode*, nsAString_internal const&, bool, bool) 	dom/events/AsyncEventDispatcher.h
2 	xul.dll 	ExitFullscreenInDocTree 	dom/base/nsDocument.cpp
3 	xul.dll 	nsDocument::ExitFullscreen(nsIDocument*) 	dom/base/nsDocument.cpp
4 	xul.dll 	nsDocument::OnPageHide(bool, mozilla::dom::EventTarget*) 	dom/base/nsDocument.cpp
5 	xul.dll 	nsDocShell::FirePageHideNotification(bool) 	docshell/base/nsDocShell.cpp
6 	xul.dll 	nsDocShell::FirePageHideNotification(bool) 	docshell/base/nsDocShell.cpp
7 	xul.dll 	nsDocShell::CreateContentViewer(nsACString_internal const&, nsIRequest*, nsIStreamListener**) 	docshell/base/nsDocShell.cpp
8 	xul.dll 	nsDSURIContentListener::DoContent(nsACString_internal const&, bool, nsIRequest*, nsIStreamListener**, bool*) 	docshell/base/nsDSURIContentListener.cpp
9 	xul.dll 	nsDocumentOpenInfo::TryContentListener(nsIURIContentListener*, nsIChannel*) 	uriloader/base/nsURILoader.cpp
10 	xul.dll 	nsDocumentOpenInfo::DispatchContent(nsIRequest*, nsISupports*) 	uriloader/base/nsURILoader.cpp
11 	xul.dll 	nsDocumentOpenInfo::OnStartRequest(nsIRequest*, nsISupports*) 	uriloader/base/nsURILoader.cpp
12 	xul.dll 	mozilla::net::nsHttpChannel::CallOnStartRequest() 	netwerk/protocol/http/nsHttpChannel.cpp
13 	xul.dll 	mozilla::net::nsHttpChannel::ContinueOnStartRequest2(nsresult) 	netwerk/protocol/http/nsHttpChannel.cpp

This is the #3 crash in Firefox 40 Beta 1 with 2% of all crashes. Judging from comments and URLs, the fullscreen content in question is videos mainly (but I guess that's the case for fullscreen in general).

Comment 1

[(Away)]

http://hg.mozilla.org/releases/mozilla-beta/annotate/7161d42ed30d/dom/base/nsDocument.cpp#l11238

changed.LastElement is some bogus value (often 0x80000008).

Comment 2

[Xidorn Quan [:xidorn] UTC+11]

This crash has been fixed in bug 1179123. I have requested uplifting there.

Comment 3

[Robert Kaiser]

[Tracking Requested - why for this release]:
This is ~1% of 40.0b2 crashes.

Comment 4

[Ritu Kothari (:ritu) (Inactive, please n-i to RyanVM, jcristau, or pascal)]

Adding a tracking flag for FF40 based on comment 3.

Comment 5

[Xidorn Quan [:xidorn] UTC+11]

The patch in bug 1179123 has been uplifted to aurora and beta. Mark this bug fixed.

Comment 6

[Kate Glazko]

Updating status to reflect fix, see Comment 5.