1513096 - Crash in mozilla::ipc::ProcessLink::SendMessageW | IPC_Message_Name=PContent::Msg_InitBlobURLs

Status: RESOLVED WORKSFORME

(Core :: DOM: Content Processes, defect, P3)

Description

[Emma Mason]

This bug was filed from the Socorro interface and is
report bp-6708b4a6-01cf-4e76-a82c-cc6660181206.
=============================================================

Top 10 frames of crashing thread:

0 xul.dll mozilla::ipc::ProcessLink::SendMessageW ipc/glue/MessageLink.cpp:168
1 xul.dll mozilla::ipc::MessageChannel::Send ipc/glue/MessageChannel.cpp:1032
2 xul.dll mozilla::dom::PContentParent::SendInitBlobURLs ipc/ipdl/PContentParent.cpp:2048
3 xul.dll void mozilla::dom::ContentParent::InitInternal dom/ipc/ContentParent.cpp:2673
4 xul.dll bool mozilla::dom::ContentParent::LaunchSubprocess dom/ipc/ContentParent.cpp:2274
5 xul.dll mozilla::dom::ContentParent::GetNewOrUsedBrowserProcess dom/ipc/ContentParent.cpp:888
6 xul.dll mozilla::dom::ContentParent::CreateBrowser dom/ipc/ContentParent.cpp:1211
7 xul.dll nsFrameLoader::TryRemoteBrowser dom/base/nsFrameLoader.cpp:2672
8 xul.dll nsFrameLoader::ShowRemoteFrame dom/base/nsFrameLoader.cpp:927
9 xul.dll nsFrameLoader::Show dom/base/nsFrameLoader.cpp:784

=============================================================

From https://www.reddit.com/r/firefox/comments/a4yvod/is_this_what_firefox_has_become/

Comment 1

[Emma Mason]

36 crashes, all on Windows on amd64 and x86.

Comment 2

[Jed Davis [:jld] ⟨⏰|UTC-7⟩ ⟦he/him⟧]

> MOZ_CRASH(IPC message size is too large)

Which means the total message is over 256MiB[1].  So there are a lot of blob URLs[2] and they're being broadcast to all content processes (which is… not ideal for several reasons), which includes sending a snapshot of all the blobs to each newly created process in a single message, and this has broken.


[1] https://searchfox.org/mozilla-central/rev/fd62b95c187a40b328d9e7fd9d848833a6942b57/ipc/chromium/src/chrome/common/ipc_channel.h#50
[2] https://developer.mozilla.org/en-US/docs/Web/API/URL/createObjectURL

Comment 3

[BugBot [:suhaib / :marco/ :calixte]]

Closing because no crashes reported for 12 weeks.