1530838 - Crash in [@ mozilla::dom::UpdateReflectorGlobal]

Status: NEW

(Core :: DOM: Core & HTML, defect, P3)

Description

[Marcia Knous [:marcia]]

This bug is for crash report bp-d8065057-2002-4076-9bd1-9547b0190225.

Seen while reviewing nightly crash stats - this crash started in Build ID 20190224092357: https://bit.ly/2Eyqt3m. 20 crashes/5 installs so far on Windows 7 and Linux.

https://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=6924dd16f7b1e2e6ce71a8eb4cbe330d3e4745dc&tochange=2a82b9a67559d93cd57ff9738b782fb43717afd1 could be a possible regression range based on the Build ID.

Some addon Correlations:

(100.0% in signature vs 00.84% overall) Addon "{de22fd49-c9ab-4359-b722-b3febdc3a0b0}" = true
(71.43% in signature vs 01.38% overall) adapter_device_id = 0x1b81 [100.0% vs 03.74% if adapter_vendor_id = 0x10de]
(71.43% in signature vs 01.79% overall) cpu_microcode_version = 0x12 [100.0% vs 03.42% if CPU Info = family 6 model 60 stepping 3]
(71.43% in signature vs 10.00% overall) CPU Info = family 6 model 60 stepping 3 [100.0% vs 10.94% if platform = Windows NT]
(71.43% in signature vs 00.11% overall) adapter_subsys_id = 119d10de [100.0% vs 07.69% if adapter_device_id = 0x1b81]
(71.43% in signature vs 03.88% overall) Module "mdnsNSP.dll" = true [100.0% vs 14.31% if platform_pretty_version = Windows 7]
(71.43% in signature vs 07.70% overall) Module "nvwgf2umx.dll" = true [100.0% vs 28.71% if platform_version = 6.1.7601 Service Pack 1]
(71.43% in signature vs 05.25% overall) adapter_driver_version = 25.21.14.1917 [100.0% vs 29.59% if adapter_device_id = 0x1b81]
(71.43% in signature vs 05.25% overall) adapter_driver_version_clean = 419.17 [100.0% vs 29.59% if adapter_device_id = 0x1b81]
(71.43% in signature vs 00.29% overall) Addon "{f3bd3dd2-2888-44c5-91a2-2caeb33fb898}" = true
(71.43% in signature vs 00.88% overall) Addon "[e-mail]" = true
(71.43% in signature vs 06.13% overall) Module "bcryptprimitives.dll" = true

Top 10 frames of crashing thread:

0 xul.dll mozilla::dom::UpdateReflectorGlobal dom/bindings/BindingUtils.cpp:2247
1 xul.dll nsHTMLDocument::Open dom/html/nsHTMLDocument.cpp:1456
2 xul.dll nsHTMLDocument::WriteCommon dom/html/nsHTMLDocument.cpp:1692
3 xul.dll static bool mozilla::dom::HTMLDocument_Binding::write dom/bindings/HTMLDocumentBinding.cpp:397
4 xul.dll mozilla::dom::binding_detail::GenericMethod<mozilla::dom::binding_detail::NormalThisPolicy, mozilla::dom::binding_detail::ThrowExceptions> dom/bindings/BindingUtils.cpp:3144
5 xul.dll js::InternalCallOrConstruct js/src/vm/Interpreter.cpp:532
6 xul.dll static bool InternalCall js/src/vm/Interpreter.cpp:587
7 xul.dll js::Call js/src/vm/Interpreter.cpp:603
8 xul.dll js::fun_call js/src/vm/JSFunction.cpp:1150
9 xul.dll js::InternalCallOrConstruct js/src/vm/Interpreter.cpp:532

Comment 1

[Hsin-Yi Tsai (she/her) [:hsinyi]]

UpdateReflectorGlobal was introduced to replace "ReparentWrapper" in bug 1514251.
I got these results when searching crash signature "ReparentWrapper"
https://crash-stats.mozilla.com/signature/?signature=mozilla%3A%3Adom%3A%3AReparentWrapper&date=%3E%3D2018-02-28T22%3A58%3A00.000Z&date=%3C2019-02-26T22%3A58%3A00.000Z&_columns=date&_columns=product&_columns=version&_columns=build_id&_columns=platform&_columns=reason&_columns=address&_columns=install_time&_columns=startup_crash&_sort=-date&page=1#reports

Could this bug be a signature change instead of a regression?

Comment 2

[Boris Zbarsky [:bzbarsky]]

Yes. ReparentWrapper was just renamed to UpdateReflectorGlobal. Is the crash frequency about the same?

Comment 3

[Marcia Knous [:marcia]]

(In reply to Boris Zbarsky [:bzbarsky, bz on IRC] from comment #2)

Yes. ReparentWrapper was just renamed to UpdateReflectorGlobal. Is the crash frequency about the same?

Yes, it appears the frequency is rather small - mostly single installation crashes. Since it started 32 crashes/6 installations.

Comment 4

[BugBot [:suhaib / :marco/ :calixte]]

Since the crash volume is low (less than 5 per week), the severity is downgraded to S3. Feel free to change it back if you think the bug is still critical.

For more information, please visit auto_nag documentation.