This bug was filed from the Socorro interface and is report bp-08b2cd32-a6ec-41c8-9f4e-71de82160217. ============================================================= This is the #27 top crash for e10s and doesn't show up in non-e10s
I don't think this is graphics related.
Patrick are you guys looking at this?
This looks like the same issue as 1247982
The first report I found for this was: https://crash-stats.mozilla.com/report/index/a8c9036f-1099-4903-86d7-36e9e2151102 Version:43.0a2 Build ID:20151020004123 All of the 1138 reports are on windows - it may be windows only or it may that we don't have any reports for other platforms yet. From what I can tell, this is a memory corruption. When replacing mRequestHead, it clears mHeaders, it calls to nsTArray::DestructRange(). In order to execute that code Length() will be non-zero, so either nsTArray's mHdr pointer is corrupted, or or its value. (I suspect it's the pointer).
It sounds like we have no idea how to fix this, then?