1515202 - Assertion failure: mBrowsingContext, at src/dom/ipc/WindowGlobalParent.cpp:59

Status: RESOLVED WORKSFORME

(Core :: DOM: Content Processes, defect, P3)

Description

[Tyson Smith [:tsmith]]

Attachment: testcase.html

This is triggered when e10s disabled with the attached test case. The test cases also uses FuzzingFunctions to make reproduction more reliable so a fuzzing build is required.

Assertion failure: mBrowsingContext, at src/dom/ipc/WindowGlobalParent.cpp:59

Crash|SIGSEGV|0x0|0
0|libxul.so|mozilla::dom::WindowGlobalParent::Init(mozilla::dom::WindowGlobalInit const&)|hg:hg.mozilla.org/mozilla-central:dom/ipc/WindowGlobalParent.cpp:edf1f05e9d00d9eb38474d9b33615136b95b57a9|38|0x0
1|libxul.so|mozilla::ipc::InProcessParent::RecvPWindowGlobalConstructor(mozilla::dom::PWindowGlobalParent*, mozilla::dom::WindowGlobalInit const&)|hg:hg.mozilla.org/mozilla-central:ipc/glue/InProcessParent.cpp:edf1f05e9d00d9eb38474d9b33615136b95b57a9|19|0x9
2|libxul.so|mozilla::ipc::PInProcessParent::OnMessageReceived(IPC::Message const&)|s3:gecko-generated-sources:7e4ab0ea0651587076b42d23f89b4c541351571118333f690e7e150a96d03ee29ee79bbd5ca8468b61022a5fff22e96da4c501f59504e51244ba75988fb465b5/ipc/ipdl/PInProcessParent.cpp:|157|0x6
3|libxul.so|mozilla::ipc::MessageChannel::DispatchAsyncMessage(IPC::Message const&)|hg:hg.mozilla.org/mozilla-central:ipc/glue/MessageChannel.cpp:edf1f05e9d00d9eb38474d9b33615136b95b57a9|2159|0x6
4|libxul.so|mozilla::ipc::MessageChannel::DispatchMessage(IPC::Message&&)|hg:hg.mozilla.org/mozilla-central:ipc/glue/MessageChannel.cpp:edf1f05e9d00d9eb38474d9b33615136b95b57a9|2086|0xb
5|libxul.so|mozilla::ipc::MessageChannel::RunMessage(mozilla::ipc::MessageChannel::MessageTask&)|hg:hg.mozilla.org/mozilla-central:ipc/glue/MessageChannel.cpp:edf1f05e9d00d9eb38474d9b33615136b95b57a9|1935|0xb
6|libxul.so|mozilla::ipc::MessageChannel::MessageTask::Run()|hg:hg.mozilla.org/mozilla-central:ipc/glue/MessageChannel.cpp:edf1f05e9d00d9eb38474d9b33615136b95b57a9|1966|0xc
7|libxul.so|nsThread::ProcessNextEvent(bool, bool*)|hg:hg.mozilla.org/mozilla-central:xpcom/threads/nsThread.cpp:edf1f05e9d00d9eb38474d9b33615136b95b57a9|1157|0x11
8|libxul.so|NS_ProcessNextEvent(nsIThread*, bool)|hg:hg.mozilla.org/mozilla-central:xpcom/threads/nsThreadUtils.cpp:edf1f05e9d00d9eb38474d9b33615136b95b57a9|468|0x11
9|libxul.so|mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)|hg:hg.mozilla.org/mozilla-central:ipc/glue/MessagePump.cpp:edf1f05e9d00d9eb38474d9b33615136b95b57a9|88|0xa
10|libxul.so|MessageLoop::RunInternal()|hg:hg.mozilla.org/mozilla-central:ipc/chromium/src/base/message_loop.cc:edf1f05e9d00d9eb38474d9b33615136b95b57a9|314|0x17
11|libxul.so|MessageLoop::Run()|hg:hg.mozilla.org/mozilla-central:ipc/chromium/src/base/message_loop.cc:edf1f05e9d00d9eb38474d9b33615136b95b57a9|307|0x8
12|libxul.so|nsBaseAppShell::Run()|hg:hg.mozilla.org/mozilla-central:widget/nsBaseAppShell.cpp:edf1f05e9d00d9eb38474d9b33615136b95b57a9|137|0xd
13|libxul.so|nsAppStartup::Run()|hg:hg.mozilla.org/mozilla-central:toolkit/components/startup/nsAppStartup.cpp:edf1f05e9d00d9eb38474d9b33615136b95b57a9|271|0xe
14|libxul.so|XREMain::XRE_mainRun()|hg:hg.mozilla.org/mozilla-central:toolkit/xre/nsAppRunner.cpp:edf1f05e9d00d9eb38474d9b33615136b95b57a9|4616|0x11
15|libxul.so|XREMain::XRE_main(int, char**, mozilla::BootstrapConfig const&)|hg:hg.mozilla.org/mozilla-central:toolkit/xre/nsAppRunner.cpp:edf1f05e9d00d9eb38474d9b33615136b95b57a9|4754|0x8
16|libxul.so|XRE_main(int, char**, mozilla::BootstrapConfig const&)|hg:hg.mozilla.org/mozilla-central:toolkit/xre/nsAppRunner.cpp:edf1f05e9d00d9eb38474d9b33615136b95b57a9|4839|0x5
17|firefox-bin|do_main|hg:hg.mozilla.org/mozilla-central:browser/app/nsBrowserApp.cpp:edf1f05e9d00d9eb38474d9b33615136b95b57a9|214|0x22
18|firefox-bin|main|hg:hg.mozilla.org/mozilla-central:browser/app/nsBrowserApp.cpp:edf1f05e9d00d9eb38474d9b33615136b95b57a9|293|0xd

Comment 1

[Intermittent Failures Robot]

1 failures in 2771 pushes (0.0 failures/push) were associated with this bug in the last 7 days.

Repository breakdown:

• autoland: 1

Platform breakdown:

• windows10-64: 1

For more details, see:
https://treeherder.mozilla.org/intermittent-failures.html#/bugdetails?bug=1515202&startday=2019-03-11&endday=2019-03-17&tree=all

Comment 2

[Intermittent Failures Robot]

1 failures in 4182 pushes (0.0 failures/push) were associated with this bug in the last 7 days.

Repository breakdown:

• autoland: 1

Platform breakdown:

• linux64-qr: 1

For more details, see:
https://treeherder.mozilla.org/intermittent-failures.html#/bugdetails?bug=1515202&startday=2019-10-21&endday=2019-10-27&tree=all

Comment 3

[Chris Peterson [:cpeterson]]

Tentatively moving all bugs whose summaries mention "Fission" (or other Fission-related keywords) but are not assigned to a Fission Milestone to the "?" triage milestone.

This will generate a lot of bugmail, so you can filter your bugmail for the following UUID and delete them en masse:

0ee3c76a-bc79-4eb2-8d12-05dc0b68e732

Comment 4

[Neha Kochar [:neha]]

Tyson, can you check if this is still reproducible?

Comment 5

[Tyson Smith [:tsmith]]

The attached testcase no longer reproduces the issue and the fuzzers have not found this issue since Jan 2 2019.