1320598 - Crash in mozilla::ipc::FatalError | mozilla::dom::PContentParent::OnMessageReceived

Status: RESOLVED WORKSFORME

(Core :: DOM: Content Processes, defect, P5)

Description

[Wayne Mery (:wsmwk)]

This bug was filed from the Socorro interface and is 
report bp-80fa741d-c2a9-47f7-810c-bcfad2161127.

Brower tab was open to a photo album connected to a synology photostation backend. I droped a folder from Windows explorer containing 4 jpg files. Crash.  haven't yet tried to reproduce.

0 	xul.dll	mozilla::ipc::FatalError(char const*, char const*, bool)	ipc/glue/ProtocolUtils.cpp:299
1 	xul.dll	mozilla::dom::PContentParent::OnMessageReceived(IPC::Message const&)	obj-firefox/ipc/ipdl/PContentParent.cpp:6219
2 	xul.dll	mozilla::ipc::MessageChannel::DispatchAsyncMessage(IPC::Message const&)	ipc/glue/MessageChannel.cpp:1743
3 	xul.dll	mozilla::ipc::MessageChannel::DispatchMessageW(IPC::Message&&)	ipc/glue/MessageChannel.cpp:1681
4 	xul.dll	mozilla::ipc::MessageChannel::RunMessage(mozilla::ipc::MessageChannel::MessageTask&)	ipc/glue/MessageChannel.cpp:1572 

At roughly the same time it threw a crash of [@ IPCError-browser | PContent::Msg_PBlobConstructor Value error: message was deserialized, but contained an illegal value ]

bp-34cb9f95-3e24-4d2f-b5eb-e88372161127
 0 	mozglue.dll	arena_run_tree_search	memory/mozjemalloc/jemalloc.c:3250
1 	mozglue.dll	free_impl	memory/build/replace_malloc.c:201
2 	xul.dll	nsProgressNotificationProxy::Release()	image/imgLoader.cpp:410
3 	xul.dll	mozilla::net::HttpBaseChannel::SetNotificationCallbacks(nsIInterfaceRequestor*)	netwerk/protocol/http/HttpBaseChannel.cpp:433
4 	xul.dll	imgRequest::OnStopRequest(nsIRequest*, nsISupports*, nsresult)	image/imgRequest.cpp:811
5 	xul.dll	mozilla::net::HttpChannelChild::DoOnStopRequest(nsIRequest*, nsresult, nsISupports*)	netwerk/protocol/http/HttpChannelChild.cpp:976
6 	xul.dll	mozilla::net::HttpChannelChild::OnStopRequest(nsresult const&, mozilla::net::ResourceTimingStruct const&)	netwerk/protocol/http/HttpChannelChild.cpp:922
7 	xul.dll	mozilla::net::ChannelEventQueue::RunOrEnqueue(mozilla::net::ChannelEvent*, bool)	obj-firefox/dist/include/mozilla/net/ChannelEventQueue.h:133
8 	xul.dll	mozilla::net::HttpChannelChild::RecvOnStopRequest(nsresult const&, mozilla::net::ResourceTimingStruct const&)	netwerk/protocol/http/HttpChannelChild.cpp:829

Comment 1

[Wayne Mery (:wsmwk)]

Also in new profile using today's nightly.  bp-f01e7f46-59ad-45dc-809d-c23032161127

Happens only if I drag a windows FOLDER over the brower tab - the tab then shows 4 files (which is expected)  But it crashes, and the files don't actually get stored. Does not happen if I drop a single file into the browser tab.

Reproduced multiple times.

Comment 2

[BMO Automation]

Per policy at https://wiki.mozilla.org/Bug_Triage/Projects/Bug_Handling/Bug_Husbandry#Inactive_Bugs. If this bug is not an enhancement request or a bug not present in a supported release of Firefox, then it may be reopened.

Comment 3

[BugBot [:suhaib / :marco/ :calixte]]

Closing because no crashes reported for 12 weeks.