Closed Bug 1446213 Opened 6 years ago Closed 6 years ago

Crash in static void core::ptr::drop_in_place<T>

Categories

(Core :: CSS Parsing and Computation, defect)

Unspecified
Windows 10
defect
Not set
critical

Tracking

()

RESOLVED DUPLICATE of bug 1406996

People

(Reporter: mccr8, Unassigned)

Details

(Keywords: crash, regression)

Crash Data

This bug was filed from the Socorro interface and is
report bp-ac5beb1b-2e24-4a3f-a54f-a06a40180314.
=============================================================

Top 10 frames of crashing thread:

0 xul.dll static void core::ptr::drop_in_place<hashglobe::hash_map::HashMap<style::gecko_string_cache::Atom, smallvec::SmallVec<[style::invalidation::element::invalidation_map::Dependency; 1]>, core::hash::BuildHasherDefault<style::selector_map::PrecomputedHasher>>> src/libcore/ptr.rs:59
1 xul.dll static void core::ptr::drop_in_place<style::stylist::CascadeData> src/libcore/ptr.rs:59
2 xul.dll void geckoservo::glue::Servo_StyleSet_Drop servo/ports/geckolib/glue.rs:2604
3 xul.dll mozilla::ServoStyleSet::Shutdown layout/style/ServoStyleSet.cpp:209
4 xul.dll mozilla::StyleSetHandle::Ptr::Shutdown layout/style/StyleSetHandleInlines.h:83
5 xul.dll mozilla::PresShell::Destroy layout/base/PresShell.cpp:1396
6 xul.dll nsDocumentViewer::DestroyPresShell layout/base/nsDocumentViewer.cpp:4614
7 xul.dll nsDocumentViewer::Hide layout/base/nsDocumentViewer.cpp:2264
8 xul.dll nsDocShell::SetVisibility docshell/base/nsDocShell.cpp:6143
9 xul.dll nsFrameLoader::Hide dom/base/nsFrameLoader.cpp:1062

=============================================================

Some kind of crash while tearing down some servo data structures. This crash showed up first in the 20180313100127 build. #7 top crash on Windows for the 3-14 builds.
Any ideas, Emilio?
Flags: needinfo?(emilio)
Keywords: regression
This feels like the long standing hashmap crash...
Yup, probably the signature just changed slightly.
Status: NEW → RESOLVED
Closed: 6 years ago
Flags: needinfo?(emilio)
Resolution: --- → DUPLICATE
Crash Signature: [@ static void core::ptr::drop_in_place<T>]
I guess I'll leave the signature here because most of the other related bugs don't seem to be public.
Crash Signature: [@ static void core::ptr::drop_in_place<T>]
I experience this crash signature when shutting down or restarting Firefox for an update.

Firefox 61.0a1 Crash Report [@ IPCError-browser | ShutDownKill ]
ID: 2008f538-2aba-4033-a32d-6ddbd0180503

Release Channel 	nightly
Version 	61.0a1
Build ID 	20180501220047
OS 	Windows 7

Process Type 	content (web)
Crash Reason 	EXCEPTION_BREAKPOINT
Crash Address 	0x7fec282c250

Signature replaced with an IPC Channel Error, was: "static void core::ptr::drop_in_place<T>"

Crashing Thread (0)
Frame 	Module 	Signature 	Source
0 	xul.dll 	static void core::ptr::drop_in_place<smallvec::SmallVec<[style::stylist::Rule; 1]>>(struct smallvec::SmallVec<[style::stylist::Rule; 1]>*) 	src/libcore/ptr.rs:59
1 	xul.dll 	static void core::ptr::drop_in_place<hashglobe::table::RawTable<style::gecko_string_cache::Atom, smallvec::SmallVec<[style::stylist::Rule; 1]>>>(struct hashglobe::table::RawTable<style::gecko_string_cache::Atom, smallvec::SmallVec<[style::stylist::Rule; 1]>>*) 	src/libcore/ptr.rs:59
2 	xul.dll 	static void core::ptr::drop_in_place<style::stylist::ElementAndPseudoRules>(struct style::stylist::ElementAndPseudoRules*) 	src/libcore/ptr.rs:59
3 	xul.dll 	static void core::ptr::drop_in_place<style::stylist::CascadeData>(struct style::stylist::CascadeData*) 	src/libcore/ptr.rs:59
4 	xul.dll 	void geckoservo::glue::Servo_StyleSet_Drop(struct style::gecko_bindings::sugar::ownership::Owned<style::gecko_bindings::bindings::RawServoStyleSet>) 	servo/ports/geckolib/glue.rs:3224
5 	xul.dll 	mozilla::ServoStyleSet::Shutdown() 	layout/style/ServoStyleSet.cpp:193
6 	xul.dll 	mozilla::PresShell::Destroy() 	layout/base/PresShell.cpp:1389
7 	xul.dll 	nsDocumentViewer::DestroyPresShell() 	layout/base/nsDocumentViewer.cpp:4553
8 	xul.dll 	nsDocumentViewer::Destroy() 	layout/base/nsDocumentViewer.cpp:1772
9 	xul.dll 	nsDocShell::Destroy() 	docshell/base/nsDocShell.cpp:5464
10 	xul.dll 	nsWebBrowser::SetDocShell(nsIDocShell*) 	toolkit/components/browser/nsWebBrowser.cpp:1697
11 	xul.dll 	nsWebBrowser::InternalDestroy() 	toolkit/components/browser/nsWebBrowser.cpp:96
12 	xul.dll 	nsWebBrowser::Destroy() 	toolkit/components/browser/nsWebBrowser.cpp:1291
13 	xul.dll 	mozilla::dom::TabChild::DestroyWindow() 	dom/ipc/TabChild.cpp:1074
14 	xul.dll 	mozilla::dom::TabChild::RecvDestroy() 	dom/ipc/TabChild.cpp:2515
15 	xul.dll 	mozilla::dom::PBrowserChild::OnMessageReceived(IPC::Message const&) 	ipc/ipdl/PBrowserChild.cpp:4390
16 	xul.dll 	mozilla::dom::PContentChild::OnMessageReceived(IPC::Message const&) 	ipc/ipdl/PContentChild.cpp:5080
17 	xul.dll 	mozilla::ipc::MessageChannel::DispatchAsyncMessage(IPC::Message const&) 	ipc/glue/MessageChannel.cpp:2141
18 	xul.dll 	mozilla::ipc::MessageChannel::DispatchMessageW(IPC::Message&&) 	ipc/glue/MessageChannel.cpp:2071
19 	xul.dll 	mozilla::ipc::MessageChannel::RunMessage(mozilla::ipc::MessageChannel::MessageTask&) 	ipc/glue/MessageChannel.cpp:1917
20 	xul.dll 	mozilla::ipc::MessageChannel::MessageTask::Run() 	ipc/glue/MessageChannel.cpp:1950
21 	xul.dll 	mozilla::SchedulerGroup::Runnable::Run() 	xpcom/threads/SchedulerGroup.cpp:337
22 	xul.dll 	nsThread::ProcessNextEvent(bool, bool*) 	xpcom/threads/nsThread.cpp:1090
23 	xul.dll 	mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) 	ipc/glue/MessagePump.cpp:97
24 	xul.dll 	mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*) 	ipc/glue/MessagePump.cpp:301
25 	xul.dll 	MessageLoop::RunHandler() 	ipc/chromium/src/base/message_loop.cc:319
26 	xul.dll 	MessageLoop::Run() 	ipc/chromium/src/base/message_loop.cc:299
27 	xul.dll 	nsBaseAppShell::Run() 	widget/nsBaseAppShell.cpp:157
28 	xul.dll 	nsAppShell::Run() 	widget/windows/nsAppShell.cpp:401
29 	xul.dll 	XRE_RunAppShell() 	toolkit/xre/nsEmbedFunctions.cpp:893
30 	xul.dll 	mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*) 	ipc/glue/MessagePump.cpp:269
31 	xul.dll 	MessageLoop::RunHandler() 	ipc/chromium/src/base/message_loop.cc:319
32 	xul.dll 	MessageLoop::Run() 	ipc/chromium/src/base/message_loop.cc:299
33 	xul.dll 	XRE_InitChildProcess(int, char** const, XREChildData const*) 	toolkit/xre/nsEmbedFunctions.cpp:719
34 	firefox.exe 	content_process_main(mozilla::Bootstrap*, int, char** const) 	ipc/contentproc/plugin-container.cpp:50
35 	firefox.exe 	NS_internal_main(int, char**, char**) 	browser/app/nsBrowserApp.cpp:280
36 	firefox.exe 	wmain 	toolkit/xre/nsWindowsWMain.cpp:129
37 	firefox.exe 	static int __scrt_common_main_seh() 	f:/dd/vctools/crt/vcstartup/src/startup/exe_common.inl:283
38 	kernel32.dll 	BaseThreadInitThunk 	
39 	ntdll.dll 	RtlUserThreadStart
Crash Signature: [@ static void core::ptr::drop_in_place<T>] → [@ static void core::ptr::drop_in_place<T>] [@ IPCError-browser | ShutDownKill ]
You need to log in before you can comment on or make changes to this bug.