Closed Bug 1442892 Opened 6 years ago Closed 6 years ago

Crash in <name omitted> | XPCConvert::NativeInterface2JSObject

Categories

(Core :: DOM: Core & HTML, defect)

Unspecified
Android
defect
Not set
critical

Tracking

()

RESOLVED FIXED
mozilla60
Tracking Status
firefox-esr52 --- unaffected
firefox58 --- unaffected
firefox59 --- unaffected
firefox60 --- fixed

People

(Reporter: calixte, Assigned: bzbarsky)

References

(Blocks 1 open bug)

Details

(Keywords: crash, regression)

Crash Data

This bug was filed from the Socorro interface and is
report bp-13455c14-d4d5-4060-ba92-19b530180302.
=============================================================

Top 10 frames of crashing thread:

0 libxul.so <name omitted> dom/base/nsGlobalWindowInner.h:282
1 libxul.so XPCConvert::NativeInterface2JSObject js/xpconnect/src/XPCConvert.cpp:757
2 libxul.so NativeInterface2JSObject js/xpconnect/src/nsXPConnect.cpp:603
3 libxul.so nsXPConnect::WrapNativeToJSVal js/xpconnect/src/nsXPConnect.cpp:651
4 libxul.so nsContentUtils::WrapNative dom/base/nsContentUtils.cpp:6774
5 libxul.so xpcJSWeakReference::Get dom/base/nsContentUtils.h:2148
6 libxul.so NS_InvokeByIndex xpcom/reflect/xptcall/md/unix/xptcinvoke_arm.cpp:167
7 libxul.so XPCWrappedNative::CallMethod js/xpconnect/src/XPCWrappedNative.cpp:1948
8 libxul.so XPC_WN_CallMethod js/xpconnect/src/XPCWrappedNativeJSOps.cpp:929
9 libxul.so js::InternalCallOrConstruct js/src/vm/JSContext-inl.h:290

=============================================================

There are 3 crashes (from 3 installations) in nightly 60 with buildid 20180302104334. In analyzing the backtrace, the regression may have been introduced by patch [1] to fix bug 1442344.

[1] https://hg.mozilla.org/mozilla-central/rev?node=b89286a88588
Flags: needinfo?(bzbarsky)
Yep, this is why that patch was backed out.  Good to know this happens in real life too, not just in our tests...
Status: NEW → RESOLVED
Closed: 6 years ago
Flags: needinfo?(bzbarsky)
Resolution: --- → FIXED
Assignee: nobody → bzbarsky
Target Milestone: --- → mozilla60
Component: DOM → DOM: Core & HTML
You need to log in before you can comment on or make changes to this bug.