1170042 - crash in free_impl | mozilla::places::PageData::~PageData()

Status: RESOLVED WONTFIX

(Toolkit :: Places, defect, P3)

Description

[Mats Palmgren (inactive)]

This bug was filed from the Socorro interface and is 
report bp-a9dae3a8-9332-4a05-bae8-a35422150526.
=============================================================

This signature is #43 in Top Crashers for Firefox 41.0a1.

The issue might be that the NotifyIconObservers ctor copies
the 'pageData' member strings so that there is a race condition
on freeing the the underlying string buffers between the two
threads involved?

http://hg.mozilla.org/mozilla-central/annotate/b6623a27fa64/toolkit/components/places/AsyncFaviconHelpers.cpp#l907


Stack:

free_impl
mozilla::places::PageData::~PageData()
mozilla::places::AsyncGetFaviconDataForPage::Run()
nsThread::ProcessNextEvent(bool, bool*)
NS_ProcessNextEvent(nsIThread*, bool)
mozilla::ipc::MessagePumpForNonMainThreads::Run(base::MessagePump::Delegate*)
MessageLoop::RunHandler()
MessageLoop::Run()
nsThread::ThreadFunc(void*)
PR_NativeRunThread

Comment 1

[Sylvestre Ledru [:Sylvestre]]

Closing because no crash reported since 12 weeks.