Closed Bug 1452460 Opened 7 years ago Closed 7 years ago

Crash in arena_dalloc | je_free | DefaultFreeEntry

Categories

(Core :: Security: PSM, defect)

59 Branch
All
Windows
defect
Not set
critical

Tracking

()

RESOLVED DUPLICATE of bug 1319454
Tracking Status
firefox60 --- affected
firefox61 --- ?

People

(Reporter: philipp, Unassigned)

References

Details

(Keywords: crash)

Crash Data

This bug was filed from the Socorro interface and is report bp-8e08fdad-5736-4fcd-83d2-584ef0180408. ============================================================= Top 10 frames of crashing thread: 0 mozglue.dll arena_dalloc memory/build/mozjemalloc.cpp:3504 1 mozglue.dll je_free memory/build/malloc_decls.h:40 2 nss3.dll DefaultFreeEntry nsprpub/lib/ds/plhash.c:55 3 nss3.dll PL_HashTableDestroy nsprpub/lib/ds/plhash.c:115 4 nss3.dll SECOID_Shutdown security/nss/lib/util/secoid.c:2258 5 nss3.dll nss_Shutdown security/nss/lib/nss/nssinit.c:1159 6 nss3.dll NSS_Shutdown security/nss/lib/nss/nssinit.c:1221 7 xul.dll mozilla::ShutdownXPCOM xpcom/build/XPCOMInit.cpp:1017 8 xul.dll ScopedXPCOMStartup::~ScopedXPCOMStartup toolkit/xre/nsAppRunner.cpp:1511 9 xul.dll mozilla::UniquePtr<ScopedXPCOMStartup, mozilla::DefaultDelete<ScopedXPCOMStartup> >::operator= mfbt/UniquePtr.h:313 ============================================================= crashes with this signature show up in firefox 60 with "MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?)" that was added in bug 1439474.
Flags: needinfo?(mh+mozilla)
This is a dupe of a number of other bugs.
Group: dom-core-security
Flags: needinfo?(mh+mozilla)
This particular crash looks like bug 1319454.
Group: dom-core-security → crypto-core-security
Status: NEW → RESOLVED
Closed: 7 years ago
Resolution: --- → DUPLICATE
Component: Memory Allocator → Security: PSM
Group: crypto-core-security
You need to log in before you can comment on or make changes to this bug.