1228890 - "Assertion failure: !mSyncLoopTarget" (mozilla::dom::workers::Proxy::Teardown)

Status: RESOLVED DUPLICATE of bug 1588248

(Core :: DOM: Workers, defect, P5)

Description

[Jesse Ruderman]

Attachment: testcase (takes a few seconds/reloads)

Assertion failure: !mSyncLoopTarget, at dom/workers/XMLHttpRequest.cpp:999

Comment 1

[Jesse Ruderman]

Attachment: stack

Comment 2

[Tyson Smith [:tsmith]]

This is a long standing issue that is frequently hit by the fuzzers and can limit their effectiveness.

Please let me know if a Pernosco session can help get this resolved and I will create one.

Comment 3

[Anthony Jones (:ajones, :kentuckyfriedtakahe, :k17e)]

Jens - can I please get some help on this issue. It causes a lot of wasted CPU time when fuzzing DOM APIs.

Comment 4

[Jens Stutte [:jstutte]]

@Tyson: An updated stack trace and if possible an rr recording for Pernosco would be of great help to have someone take a look at it fast. If it is reproducible in an ASAN build, that would be even better.

Comment 5

[Tyson Smith [:tsmith]]

A Pernosco session is available here: https://pernos.co/debug/6zCHnF3ZbvdE93ES-WZexQ/index.html
It will expire in 7 days.

Comment 6

[Tyson Smith [:tsmith]]

Reproduced with m-c:
BuildID=20191023154818
SourceStamp=782f341be605f1a30e8a9bfbfc13ce389e620a24

Assertion failure: !mSyncLoopTarget, at src/dom/xhr/XMLHttpRequestWorker.cpp:864

#0 mozilla::dom::Proxy::Teardown(bool) src/dom/xhr/XMLHttpRequestWorker.cpp:863:3
#1 mozilla::dom::(anonymous namespace)::SyncTeardownRunnable::RunOnMainThread(mozilla::ErrorResult&) src/dom/xhr/XMLHttpRequestWorker.cpp:534:13
#2 mozilla::dom::WorkerThreadProxySyncRunnable::MainThreadRun() src/dom/xhr/XMLHttpRequestWorker.cpp:1257:3
#3 mozilla::dom::WorkerMainThreadRunnable::Run() src/dom/workers/WorkerRunnable.cpp:575:20
#4 mozilla::ThrottledEventQueue::Inner::ExecuteRunnable() src/xpcom/threads/ThrottledEventQueue.cpp:252:22
#5 mozilla::ThrottledEventQueue::Inner::Executor::Run() src/xpcom/threads/ThrottledEventQueue.cpp:80:15
#6 nsThread::ProcessNextEvent(bool, bool*) src/xpcom/threads/nsThread.cpp:1225:14
#7 NS_ProcessNextEvent(nsIThread*, bool) src/xpcom/threads/nsThreadUtils.cpp:486:10
#8 mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) src/ipc/glue/MessagePump.cpp:88:21
#9 MessageLoop::RunInternal() src/ipc/chromium/src/base/message_loop.cc:315:10
#10 MessageLoop::Run() src/ipc/chromium/src/base/message_loop.cc:290:3
#11 nsBaseAppShell::Run() src/widget/nsBaseAppShell.cpp:137:27
#12 XRE_RunAppShell() src/toolkit/xre/nsEmbedFunctions.cpp:934:20
#13 mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*) src/ipc/glue/MessagePump.cpp:238:9
#14 MessageLoop::RunInternal() src/ipc/chromium/src/base/message_loop.cc:315:10
#15 MessageLoop::Run() src/ipc/chromium/src/base/message_loop.cc:290:3
#16 XRE_InitChildProcess(int, char**, XREChildData const*) src/toolkit/xre/nsEmbedFunctions.cpp:769:34
#17 content_process_main(mozilla::Bootstrap*, int, char**) src/browser/app/../../ipc/contentproc/plugin-container.cpp:56:28
#18 main src/browser/app/nsBrowserApp.cpp:272:18