1396371 - Crash in OOM | large | NS_ABORT_OOM | nsAString::SetCapacity

Status: RESOLVED WORKSFORME

(Core :: IPC, defect, P3)

Description

[[:philipp]]

This bug was filed from the Socorro interface and is 
report bp-851a5df3-57ef-411c-83bc-2295b0170902.
=============================================================
Crashing Thread (27), Name: IPDL Background
Frame 	Module 	Signature 	Source
0 	xul.dll 	NS_ABORT_OOM(unsigned int) 	xpcom/base/nsDebugImpl.cpp:610
1 	xul.dll 	nsAString::SetCapacity(unsigned int) 	xpcom/string/nsTSubstring.cpp:674
2 	xul.dll 	mozilla::ipc::PBackgroundParent::OnMessageReceived(IPC::Message const&) 	obj-firefox/ipc/ipdl/PBackgroundParent.cpp:1323
3 	xul.dll 	mozilla::ipc::MessageChannel::DispatchAsyncMessage(IPC::Message const&) 	ipc/glue/MessageChannel.cpp:2092
4 	xul.dll 	mozilla::ipc::MessageChannel::DispatchMessageW(IPC::Message&&) 	ipc/glue/MessageChannel.cpp:2018
5 	xul.dll 	mozilla::ipc::MessageChannel::RunMessage(mozilla::ipc::MessageChannel::MessageTask&) 	ipc/glue/MessageChannel.cpp:1887
6 	xul.dll 	mozilla::ipc::MessageChannel::MessageTask::Run() 	ipc/glue/MessageChannel.cpp:1920
7 	xul.dll 	nsThread::ProcessNextEvent(bool, bool*) 	xpcom/threads/nsThread.cpp:1446
8 	xul.dll 	NS_ProcessNextEvent(nsIThread*, bool) 	xpcom/threads/nsThreadUtils.cpp:480
9 	xul.dll 	mozilla::ipc::MessagePumpForNonMainThreads::Run(base::MessagePump::Delegate*) 	ipc/glue/MessagePump.cpp:369
10 	xul.dll 	MessageLoop::RunHandler() 	ipc/chromium/src/base/message_loop.cc:319
11 	xul.dll 	MessageLoop::Run() 	ipc/chromium/src/base/message_loop.cc:299
12 	xul.dll 	nsThread::ThreadFunc(void*) 	xpcom/threads/nsThread.cpp:506
13 	nss3.dll 	_PR_NativeRunThread 	nsprpub/pr/src/threads/combined/pruthr.c:397
14 	nss3.dll 	pr_root 	nsprpub/pr/src/md/windows/w95thred.c:95
15 	ucrtbase.dll 	_o__CIpow 	
16 	kernel32.dll 	BaseThreadInitThunk 	
17 	mozglue.dll 	patched_BaseThreadInitThunk 	mozglue/build/WindowsDllBlocklist.cpp:815
18 	ntdll.dll 	__RtlUserThreadStart 	
19 	ntdll.dll 	_RtlUserThreadStart

these OOM crashes started showing up in firefox 55, but they get more frequent during the 56.0b cycle.

Comment 1

[Andrew McCreight [:mccr8]]

nsAString::SetCapacity should get added to the prefix list, so this single signature is split out by protocol.

It looks like these are mostly, but not entirely, PBackground and PBackgroundStorage.

Comment 2

[Maire Reavy [:mreavy]]

The OOM sizes all seem to be large, not surprisingly: 2.5M, 3M, 4 and 8MB are all common.

Comment 3

[BugBot [:suhaib / :marco/ :calixte]]

Closing because no crashes reported for 12 weeks.