1446189 - Assert crash in LinkedList<nsSHistory>::~LinkedList<nsSHistory>()

Status: RESOLVED INCOMPLETE

(Core :: General, defect)

Description

[mozillabugs]

I just experienced a list-not-empty assert in LinkedList<nsSHistory>::~LinkedList<nsSHistory>().

I had simply started FF 58.0.2 debug, went to about:config, set browser.tabs.remote.autostart to |false|, and selected file/exit. The content processes disappeared as usual, then the chrome process crashed with this curious stack in the main thread:

   LinkedList<nsSHistory>::~LinkedList<nsSHistory>()
   [external code]

That's it. No other threads remained in the chrome process.

The list had a single element in it.

I have a dump that I will answer questions about but not upload.

Comment 1

[mozillabugs]

FWIW, the crashing installation contains no addons, and the profile is the default, though it has been used a few times before.

Comment 2

[Marissa (Reese) Wood]

It appears this bug is happening in release 58.  Have you tried the newer releases?

Comment 3

[Marissa (Reese) Wood]

It appears this bug is happening in release 58.  Have you tried the newer releases?

Comment 4

[mozillabugs]

(In reply to Marissa Morris from comment #2)
> It appears this bug is happening in release 58.  Have you tried the newer
> releases?

No, I have not tried newer releases yet.

Comment 5

[Emma Humphries ☕️🎸🧞‍♀️✨ (she/they) [:emceeaich] (Pacific Time) use needinfo]

Please try to reproduce this in the current release of Firefox.

Thank you.

Comment 6

[Marion Daly [:mdaly]]

Waiting for STR for current release.

Comment 7

[mozillabugs]

I've tried the comment 0 steps on 59.0.2 Win64 debug twice, and haven't yet seen the assert. I'll try some more later.

Comment 8

[Marion Daly [:mdaly]]

Waiting for verification on current release.

Comment 9

[Marion Daly [:mdaly]]

No updates, resolving.

Comment 10

[mozillabugs]

I still haven't seen this crash again. I will reopen this bug if I do see it.