1532323 - Crash in [@ mozilla::net::TLSFilterTransaction::OnReadSegment]

Status: RESOLVED DUPLICATE of bug 1578136

(Core :: Networking: HTTP, defect, P2)

Description

[Marcia Knous [:marcia]]

This bug is for crash report bp-64236cca-e3dd-4d9f-af26-e9f4f0190303.

This signature was present in Bug 1515459 , but there are still crashes after the fix landed in 66 and one recent Mac crash in 67: https://bit.ly/2VxhXHj. I discussed with Liz on IRC and we thought it prudent to open a new bug.

Top 10 frames of crashing thread:

0 xul.dll nsresult mozilla::net::TLSFilterTransaction::OnReadSegment netwerk/protocol/http/TunnelUtils.cpp:228
1 xul.dll mozilla::net::WebSocketChannel::OnOutputStreamReady netwerk/protocol/websocket/WebSocketChannel.cpp:3960
2 xul.dll nsresult mozilla::net::OutboundEnqueuer::Run netwerk/protocol/websocket/WebSocketChannel.cpp:1095
3 xul.dll nsThread::ProcessNextEvent xpcom/threads/nsThread.cpp:1166
4 xul.dll NS_ProcessNextEvent xpcom/threads/nsThreadUtils.cpp:482
5 xul.dll nsresult mozilla::net::nsSocketTransportService::Run netwerk/base/nsSocketTransportService2.cpp:1013
6 xul.dll nsThread::ProcessNextEvent xpcom/threads/nsThread.cpp:1166
7 xul.dll NS_ProcessNextEvent xpcom/threads/nsThreadUtils.cpp:482
8 xul.dll mozilla::ipc::MessagePumpForNonMainThreads::Run ipc/glue/MessagePump.cpp:333
9 xul.dll MessageLoop::RunHandler ipc/chromium/src/base/message_loop.cc:308

Comment 1

[Liz Henry (:lizzard) (relman/hg->git project)]

Dragana, fyi here are the remaining crashes from bug 1515459.

Comment 2

[Daniel Veditz [:dveditz]]

These look like safe crashes from a security POV

Comment 3

[Marcia Knous [:marcia]]

Adding 68 as affected. A few crashes in the 3-27 nightly build.

Comment 4

[Honza Bambas (:mayhemer)]

We may want to fix this for the sec proxy.

Comment 5

[Valentin Gosu [:valentin] (he/him)]

Here Connection() seems to be null:
https://hg.mozilla.org/mozilla-central/annotate/997e98493dbcd55c95b4a6eb4a44f563cd6174e9/netwerk/protocol/http/TunnelUtils.cpp#l228

Comment 7

[Honza Bambas (:mayhemer)]

(Not working on this one now)