1260945 - crash in XPCWrappedNativeScope::XPCWrappedNativeScope

Status: RESOLVED FIXED

(Core :: XPConnect, defect)

Description

[Alice0775 White]

This bug was filed frrEMOVom the Socorro interface and is 
report bp-151479bb-b654-4b24-9660-97d952160331.
=============================================================

Reproducible : always

Steps To Reproduce:
1. Install "Remote XUL Manager"( https://addons.mozilla.org/en-US/firefox/addon/remote-xul-manager )
2. Open "Remote XUL Manager"'s option dialog from add-on manager
3. add "https://mozilla.org"(without " marks) and close the dialog
4. Optionally, Remove "Remote XUL Manager"

5. Install Flashblock( https://addons.mozilla.org/en-US/firefox/addon/flashblock/ ) and restart

6. Disable e10s and restart

7. Open https://advocacy.mozilla.org/encrypt/hybrid/4

Actual Results:
Browser crashes

Expected Results:
Not crash

Comment 1

[Alice0775 White]

Attachment: permissions.sqlite

Instead of steps 1-5, you can use permissions.sqlite. copy it to user profile folder.

Comment 2

[Alice0775 White]

Regression window:
https://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=512c7e8f0030&tochange=a6b93cceaf4e

Regressed by: Bug 1185343

Comment 3

[Alice0775 White]

Created attachment 8736535 [details]
permissions.sqlite

Instead of steps 1-4, you can use permissions.sqlite. copy it to user profile folder.

Comment 4

[Alice0775 White]

Attachment: index.html

More simple STR:
1. Save attached html to local folder

2. Start Firefox
3. Create a boolean dom.allow_XUL_XBL_for_file = true in about:config
4. Install Flashblock ( https://addons.mozilla.org/en-US/firefox/addon/flashblock/ )
5. Disable E10s and restart

6. Open the saved local html

Actual Results:
Crash

Comment 5

[Alice0775 White]

(In reply to Alice0775 White from comment #4)
> Created attachment 8736590 [details]
> index.html
> 
> More simple STR:
> 1. Save attached html to local folder
> 
> 2. Start Firefox
> 3. Create a boolean dom.allow_XUL_XBL_for_file = true in about:config
> 4. Install Flashblock (
> https://addons.mozilla.org/en-US/firefox/addon/flashblock/ )
> 5. Disable E10s and restart
> 
> 6. Open the saved local html
> 
> Actual Results:
> Crash


Regression window:
https://hg.mozilla.org/integration/fx-team/pushloghtml?fromchange=570921b6c566&tochange=c6d53703d449

Regressed by:c6d53703d449	Allison Naaktgeboren — Bug 1063156 - Enable e10s shims by default, even when browser.tabs.remote.autostart pref is false.r=billm

Comment 6

[Bill McCloskey [inactive unless it's an emergency] (:billm)]

Attachment: patch

I remember deciding that we wouldn't use compartment-per-addon for non-system compartments, and we have runtime assertions guaranteeing that. But it looks like I missed the check.

Comment 7

[Alice0775 White]

[Tracking Requested - why for this release]: reproducible crash

Comment 8

[Pulsebot]

https://hg.mozilla.org/integration/mozilla-inbound/rev/b79de31a7a1b

Comment 9

[Carsten Book [:Tomcat]]

https://hg.mozilla.org/mozilla-central/rev/b79de31a7a1b

Comment 10

[Sylvestre Ledru [:Sylvestre]]

Small volume...

Comment 11

[Liz Henry (:lizzard) (relman/hg->git project)]

Do you think this is worth uplifting at least to aurora? I don't see any crashes in 48 aurora in the last week with this signature but maybe this fix would catch other crashes as well.

Comment 12

[Bill McCloskey [inactive unless it's an emergency] (:billm)]

It doesn't really seem worth it. If we're not hitting this crash, then nothing is going wrong. And it looks like we're not hitting it.