1422313 - Crash in nsGlobalWindowInner::ClearDocumentDependentSlots

Status: RESOLVED DUPLICATE of bug 1405521

(Core :: DOM: Core & HTML, defect)

Description

[Marcia Knous [:marcia]]

This bug was filed from the Socorro interface and is
report bp-72c32d42-83ad-43b3-a555-8bdbe0171126.
=============================================================

Seen while looking at nightly crash stats: http://bit.ly/2nlYnl6. Crashes started using 20171116100106. Code was touched in the fix for Bug 1416384 which is in that range. ni on :mystor. 39 crashes/15 installs so far.

Top 10 frames of crashing thread:

0 xul.dll nsGlobalWindowInner::ClearDocumentDependentSlots dom/base/nsGlobalWindowInner.cpp:7369
1 xul.dll nsGlobalWindowInner::InnerSetNewDocument dom/base/nsGlobalWindowInner.cpp:1506
2 xul.dll nsGlobalWindowOuter::SetNewDocument dom/base/nsGlobalWindowOuter.cpp:1937
3 xul.dll nsDocumentViewer::InitInternal layout/base/nsDocumentViewer.cpp:928
4 xul.dll nsDocumentViewer::Init layout/base/nsDocumentViewer.cpp:659
5 xul.dll nsDocShell::SetupNewViewer docshell/base/nsDocShell.cpp:9572
6 xul.dll nsDocShell::Embed docshell/base/nsDocShell.cpp:7396
7 xul.dll nsDocShell::CreateAboutBlankContentViewer docshell/base/nsDocShell.cpp:8270
8 xul.dll nsDocShell::EnsureContentViewer docshell/base/nsDocShell.cpp:8128
9 xul.dll nsDocShell::GetDocument docshell/base/nsDocShell.cpp:4647

=============================================================

Comment 1

[Nika Layzell [:nika] (ni? for response)]

This is actually bug 1405521. The patch I made simply caused the signature of this crash to change because I moved the function into a different class.

The changes I made didn't change the code in question at all (https://dxr.mozilla.org/mozilla-release/rev/3702966a64c80e17d01f613b0a464f92695524fc/dom/base/nsGlobalWindow.cpp#14557-14567).

Comment 2

[Liz Henry (:lizzard) (relman/hg->git project)]

Tracking this in the duplicate bug.