Closed Bug 1446213 Opened 8 years ago Closed 8 years ago

Crash in static void core::ptr::drop_in_place<T>

Categories

(Core :: CSS Parsing and Computation, defect)

Product:
Core
Component:
CSS Parsing and Computation
Platform:
Unspecified
Windows 10
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED DUPLICATE of bug 1406996

People

(Reporter: mccr8, Unassigned)

Details

(Keywords: crash, regression)

Crash Data

This bug was filed from the Socorro interface and is report bp-ac5beb1b-2e24-4a3f-a54f-a06a40180314. ============================================================= Top 10 frames of crashing thread: 0 xul.dll static void core::ptr::drop_in_place<hashglobe::hash_map::HashMap<style::gecko_string_cache::Atom, smallvec::SmallVec<[style::invalidation::element::invalidation_map::Dependency; 1]>, core::hash::BuildHasherDefault<style::selector_map::PrecomputedHasher>>> src/libcore/ptr.rs:59 1 xul.dll static void core::ptr::drop_in_place<style::stylist::CascadeData> src/libcore/ptr.rs:59 2 xul.dll void geckoservo::glue::Servo_StyleSet_Drop servo/ports/geckolib/glue.rs:2604 3 xul.dll mozilla::ServoStyleSet::Shutdown layout/style/ServoStyleSet.cpp:209 4 xul.dll mozilla::StyleSetHandle::Ptr::Shutdown layout/style/StyleSetHandleInlines.h:83 5 xul.dll mozilla::PresShell::Destroy layout/base/PresShell.cpp:1396 6 xul.dll nsDocumentViewer::DestroyPresShell layout/base/nsDocumentViewer.cpp:4614 7 xul.dll nsDocumentViewer::Hide layout/base/nsDocumentViewer.cpp:2264 8 xul.dll nsDocShell::SetVisibility docshell/base/nsDocShell.cpp:6143 9 xul.dll nsFrameLoader::Hide dom/base/nsFrameLoader.cpp:1062 ============================================================= Some kind of crash while tearing down some servo data structures. This crash showed up first in the 20180313100127 build. #7 top crash on Windows for the 3-14 builds.
Any ideas, Emilio?
Flags: needinfo?(emilio)
Keywords: regression
This feels like the long standing hashmap crash...
Yup, probably the signature just changed slightly.
Status: NEW → RESOLVED
Closed: 8 years ago
Flags: needinfo?(emilio)
Resolution: --- → DUPLICATE
Crash Signature: [@ static void core::ptr::drop_in_place<T>]
I guess I'll leave the signature here because most of the other related bugs don't seem to be public.
Crash Signature: [@ static void core::ptr::drop_in_place<T>]
I experience this crash signature when shutting down or restarting Firefox for an update. Firefox 61.0a1 Crash Report [@ IPCError-browser | ShutDownKill ] ID: 2008f538-2aba-4033-a32d-6ddbd0180503 Release Channel nightly Version 61.0a1 Build ID 20180501220047 OS Windows 7 Process Type content (web) Crash Reason EXCEPTION_BREAKPOINT Crash Address 0x7fec282c250 Signature replaced with an IPC Channel Error, was: "static void core::ptr::drop_in_place<T>" Crashing Thread (0) Frame Module Signature Source 0 xul.dll static void core::ptr::drop_in_place<smallvec::SmallVec<[style::stylist::Rule; 1]>>(struct smallvec::SmallVec<[style::stylist::Rule; 1]>*) src/libcore/ptr.rs:59 1 xul.dll static void core::ptr::drop_in_place<hashglobe::table::RawTable<style::gecko_string_cache::Atom, smallvec::SmallVec<[style::stylist::Rule; 1]>>>(struct hashglobe::table::RawTable<style::gecko_string_cache::Atom, smallvec::SmallVec<[style::stylist::Rule; 1]>>*) src/libcore/ptr.rs:59 2 xul.dll static void core::ptr::drop_in_place<style::stylist::ElementAndPseudoRules>(struct style::stylist::ElementAndPseudoRules*) src/libcore/ptr.rs:59 3 xul.dll static void core::ptr::drop_in_place<style::stylist::CascadeData>(struct style::stylist::CascadeData*) src/libcore/ptr.rs:59 4 xul.dll void geckoservo::glue::Servo_StyleSet_Drop(struct style::gecko_bindings::sugar::ownership::Owned<style::gecko_bindings::bindings::RawServoStyleSet>) servo/ports/geckolib/glue.rs:3224 5 xul.dll mozilla::ServoStyleSet::Shutdown() layout/style/ServoStyleSet.cpp:193 6 xul.dll mozilla::PresShell::Destroy() layout/base/PresShell.cpp:1389 7 xul.dll nsDocumentViewer::DestroyPresShell() layout/base/nsDocumentViewer.cpp:4553 8 xul.dll nsDocumentViewer::Destroy() layout/base/nsDocumentViewer.cpp:1772 9 xul.dll nsDocShell::Destroy() docshell/base/nsDocShell.cpp:5464 10 xul.dll nsWebBrowser::SetDocShell(nsIDocShell*) toolkit/components/browser/nsWebBrowser.cpp:1697 11 xul.dll nsWebBrowser::InternalDestroy() toolkit/components/browser/nsWebBrowser.cpp:96 12 xul.dll nsWebBrowser::Destroy() toolkit/components/browser/nsWebBrowser.cpp:1291 13 xul.dll mozilla::dom::TabChild::DestroyWindow() dom/ipc/TabChild.cpp:1074 14 xul.dll mozilla::dom::TabChild::RecvDestroy() dom/ipc/TabChild.cpp:2515 15 xul.dll mozilla::dom::PBrowserChild::OnMessageReceived(IPC::Message const&) ipc/ipdl/PBrowserChild.cpp:4390 16 xul.dll mozilla::dom::PContentChild::OnMessageReceived(IPC::Message const&) ipc/ipdl/PContentChild.cpp:5080 17 xul.dll mozilla::ipc::MessageChannel::DispatchAsyncMessage(IPC::Message const&) ipc/glue/MessageChannel.cpp:2141 18 xul.dll mozilla::ipc::MessageChannel::DispatchMessageW(IPC::Message&&) ipc/glue/MessageChannel.cpp:2071 19 xul.dll mozilla::ipc::MessageChannel::RunMessage(mozilla::ipc::MessageChannel::MessageTask&) ipc/glue/MessageChannel.cpp:1917 20 xul.dll mozilla::ipc::MessageChannel::MessageTask::Run() ipc/glue/MessageChannel.cpp:1950 21 xul.dll mozilla::SchedulerGroup::Runnable::Run() xpcom/threads/SchedulerGroup.cpp:337 22 xul.dll nsThread::ProcessNextEvent(bool, bool*) xpcom/threads/nsThread.cpp:1090 23 xul.dll mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) ipc/glue/MessagePump.cpp:97 24 xul.dll mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*) ipc/glue/MessagePump.cpp:301 25 xul.dll MessageLoop::RunHandler() ipc/chromium/src/base/message_loop.cc:319 26 xul.dll MessageLoop::Run() ipc/chromium/src/base/message_loop.cc:299 27 xul.dll nsBaseAppShell::Run() widget/nsBaseAppShell.cpp:157 28 xul.dll nsAppShell::Run() widget/windows/nsAppShell.cpp:401 29 xul.dll XRE_RunAppShell() toolkit/xre/nsEmbedFunctions.cpp:893 30 xul.dll mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*) ipc/glue/MessagePump.cpp:269 31 xul.dll MessageLoop::RunHandler() ipc/chromium/src/base/message_loop.cc:319 32 xul.dll MessageLoop::Run() ipc/chromium/src/base/message_loop.cc:299 33 xul.dll XRE_InitChildProcess(int, char** const, XREChildData const*) toolkit/xre/nsEmbedFunctions.cpp:719 34 firefox.exe content_process_main(mozilla::Bootstrap*, int, char** const) ipc/contentproc/plugin-container.cpp:50 35 firefox.exe NS_internal_main(int, char**, char**) browser/app/nsBrowserApp.cpp:280 36 firefox.exe wmain toolkit/xre/nsWindowsWMain.cpp:129 37 firefox.exe static int __scrt_common_main_seh() f:/dd/vctools/crt/vcstartup/src/startup/exe_common.inl:283 38 kernel32.dll BaseThreadInitThunk 39 ntdll.dll RtlUserThreadStart
Crash Signature: [@ static void core::ptr::drop_in_place<T>] → [@ static void core::ptr::drop_in_place<T>] [@ IPCError-browser | ShutDownKill ]
You need to log in before you can comment on or make changes to this bug.