1466621 - Crash in mozilla::CycleCollectedJSContext::PerformMicroTaskCheckPoint

Status: RESOLVED WORKSFORME

(Core :: DOM: Core & HTML, defect, P3)

Description

[Mats Palmgren (inactive)]

This bug was filed from the Socorro interface and is
report bp-fa182a01-2eba-4632-b641-7d13b0180602.
=============================================================

MOZ_CRASH Reason:  MOZ_RELEASE_ASSERT(!mDoingStableStates)


Top 10 frames of crashing thread:

0 xul.dll mozilla::CycleCollectedJSContext::PerformMicroTaskCheckPoint xpcom/base/CycleCollectedJSContext.cpp:492
1 xul.dll nsGlobalWindowInner::CallOrCancelDocumentFlushedResolvers<1> dom/base/nsGlobalWindowInner.cpp:7406
2 xul.dll nsGlobalWindowInner::FreeInnerObjects dom/base/nsGlobalWindowInner.cpp:1262
3 xul.dll WindowStateHolder::Release dom/base/nsGlobalWindowOuter.cpp:1429
4 xul.dll nsSHEntryShared::DropPresentationState docshell/shistory/nsSHEntryShared.cpp:131
5 xul.dll nsSHEntryShared::RemoveFromBFCacheSync docshell/shistory/nsSHEntryShared.cpp:185
6 xul.dll nsSHEntryShared::~nsSHEntryShared docshell/shistory/nsSHEntryShared.cpp:66
7 xul.dll nsSHEntryShared::Release docshell/shistory/nsSHEntryShared.cpp:70
8 xul.dll mozilla::SegmentedVector<nsCOMPtr<nsISupports>, 4096, mozilla::MallocAllocPolicy>::PopLastN mfbt/SegmentedVector.h:254
9 xul.dll mozilla::dom::DeferredFinalizerImpl<nsISupports>::DeferredFinalize dom/bindings/BindingUtils.h:2878

=============================================================

Comment 1

[Olli Pettay [:smaug][[e-mail]]]

hmm, this is tricky. The interesting part isn't shown on the stack. Something somewhere underneath stable stuff handling calls JS.
This can be DOM, Media ... anything.

Comment 2

[Andrei Purice]

Marking this as Resolved > Worksforme since there are no more crashes with this signature in the past 6 months.