1329447 - Crash in FileClose

Status: RESOLVED DUPLICATE of bug 1328642

(Core :: General, defect)

Description

[[:philipp]]

This bug was filed from the Socorro interface and is 
report bp-ddc51def-f390-4fb1-b211-262fd2170107.
=============================================================

Crashing Thread (70)
Frame 	Module 	Signature 	Source
0 	nss3.dll 	FileClose 	nsprpub/pr/src/io/prfile.c:210
1 	nss3.dll 	PR_Close 	nsprpub/pr/src/io/priometh.c:104
2 	xul.dll 	nsFileStreamBase::Close() 	netwerk/base/nsFileStreams.cpp:177
3 	xul.dll 	nsFileInputStream::Close() 	netwerk/base/nsFileStreams.cpp:491
4 	xul.dll 	mozilla::dom::cache::ReadStream::Inner::Close() 	dom/cache/ReadStream.cpp:273
5 	xul.dll 	mozilla::dom::cache::StreamControl::CloseAllReadStreams() 	dom/cache/StreamControl.cpp:69
6 	xul.dll 	mozilla::dom::cache::CacheWorkerHolder::Notify(mozilla::dom::workers::Status) 	dom/cache/CacheWorkerHolder.cpp:86
7 	xul.dll 	mozilla::dom::workers::WorkerPrivate::NotifyHolders(JSContext*, mozilla::dom::workers::Status) 	dom/workers/WorkerPrivate.cpp:5248
8 	xul.dll 	mozilla::dom::workers::WorkerPrivate::NotifyInternal(JSContext*, mozilla::dom::workers::Status) 	dom/workers/WorkerPrivate.cpp:5739
9 	xul.dll 	mozilla::dom::workers::WorkerRunnable::Run() 	dom/workers/WorkerRunnable.cpp:375
10 	xul.dll 	mozilla::dom::workers::WorkerPrivate::ProcessAllControlRunnablesLocked() 	dom/workers/WorkerPrivate.cpp:5048
11 	xul.dll 	mozilla::dom::workers::WorkerPrivate::DoRunLoop(JSContext*) 	dom/workers/WorkerPrivate.cpp:4461
12 	xul.dll 	`anonymous namespace'::WorkerThreadPrimaryRunnable::Run 	dom/workers/RuntimeService.cpp:2861
13 	xul.dll 	nsThread::ProcessNextEvent(bool, bool*) 	xpcom/threads/nsThread.cpp:1067
14 	xul.dll 	NS_ProcessNextEvent(nsIThread*, bool) 	xpcom/glue/nsThreadUtils.cpp:311
15 	xul.dll 	mozilla::ipc::MessagePumpForNonMainThreads::Run(base::MessagePump::Delegate*) 	ipc/glue/MessagePump.cpp:338
16 	xul.dll 	MessageLoop::RunHandler() 	ipc/chromium/src/base/message_loop.cc:225
17 	xul.dll 	MessageLoop::Run() 	ipc/chromium/src/base/message_loop.cc:205
18 	xul.dll 	nsThread::ThreadFunc(void*) 	xpcom/threads/nsThread.cpp:465
19 	nss3.dll 	_PR_NativeRunThread 	nsprpub/pr/src/threads/combined/pruthr.c:397
20 	nss3.dll 	pr_root 	nsprpub/pr/src/md/windows/w95thred.c:95
21 	ucrtbase.dll 	_o__CIpow 	
22 	kernel32.dll 	BaseThreadInitThunk 	
23 	ntdll.dll 	__RtlUserThreadStart 	
24 	ntdll.dll 	_RtlUserThreadStart

this has been around for a while as a low- to mid-level crash on windows but it is slowly increasing in volume over the past months.

some of the users indicate that a crash with this signature is occurring when they start firefox for the first time after booting the pc:
* It's not about a specific website, it just happen alot recently, once I open firefox it just close few seconds later! https://crash-stats.mozilla.com/report/index/023ac2ad-fc31-43ad-9130-80f752161204
* This seems to happen on the first time I open Firefox after starting my computer. The crash logs probably say something else but this is just my $0.02. https://crash-stats.mozilla.com/report/index/28879585-3683-46bf-bc8c-349d62160924
* Monday start of day, opening for the first time after power up. https://crash-stats.mozilla.com/report/index/d8685042-9286-46ea-969d-3437e2161212
* Everyday it crash once opened. https://crash-stats.mozilla.com/report/index/54649473-fe67-435e-9e4d-4d17c2161205

three other commenters mentioned that they were on weather.com once the crash happened.

(the address indicates a use-after-free situation in around 40% of the cases, therefore i'm marking this as security sensitive as a precaution.)