1236401 - crash in mozilla::dom::BroadcastChannelBinding::GetConstructorObjectHandle

Status: RESOLVED DUPLICATE of bug 1236338

(Core :: DOM: Workers, defect)

Description

[Mats Palmgren (inactive)]

This bug was filed from the Socorro interface and is 
report bp-e36a07e6-4ce2-4a4b-968c-2b4122160101.
=============================================================

This signature is #6 in Top Crashers for Firefox 46.0a1 for the past 7 days.
It appears to be a startup crash.  All reported crashes are on Windows so far.

Stack:
@0x142cc140
mozilla::dom::BroadcastChannelBinding::GetConstructorObjectHandle(JSContext*, JS::Handle<JSObject*>, bool)
mozilla::dom::RegisterWorkerBindings(JSContext*, JS::Handle<JSObject*>)
mozilla::dom::workers::WorkerPrivate::RegisterBindings(JSContext*, JS::Handle<JSObject*>)
mozilla::dom::workers::WorkerPrivate::GetOrCreateGlobalScope(JSContext*)
`anonymous namespace'::ScriptExecutorRunnable::WorkerRun(JSContext*, mozilla::dom::workers::WorkerPrivate*)
mozilla::dom::workers::WorkerRunnable::Run()
nsThread::ProcessNextEvent(bool, bool*)
NS_ProcessNextEvent(nsIThread*, bool)
mozilla::dom::workers::WorkerPrivate::RunCurrentSyncLoop()
mozilla::dom::workers::AutoSyncLoopHolder::Run()
`anonymous namespace'::LoadAllScripts(JSContext*, mozilla::dom::workers::WorkerPrivate*, nsTArray<`anonymous namespace'::ScriptLoadInfo>&, bool, mozilla::dom::workers::WorkerScriptType, mozilla::ErrorResult&)
mozilla::dom::workers::scriptloader::LoadMainScript(JSContext*, nsAString_internal const&, mozilla::dom::workers::WorkerScriptType, mozilla::ErrorResult&)
`anonymous namespace'::CompileScriptRunnable::WorkerRun(JSContext*, mozilla::dom::workers::WorkerPrivate*)
mozilla::dom::workers::WorkerRunnable::Run()
nsThread::ProcessNextEvent(bool, bool*)
NS_ProcessNextEvent(nsIThread*, bool)
mozilla::dom::workers::WorkerPrivate::DoRunLoop(JSContext*)
...

Comment 1

[Mats Palmgren (inactive)]

The crashes seems to have started in build 20151217030207.

Comment 3

[Boris Zbarsky [:bzbarsky]]

Those crash reports seem to be fingering line 584 in BroadcastChannelBinding.cpp, which is:

    CreateInterfaceObjects(aCx, aGlobal, protoAndIfaceCache, aDefineOnGlobal);

There's nothing obvious to crash there...

Comment 4

[Lawrence Mandel [:lmandel] (use needinfo)]

Clearing status on dup.