Open Bug 1533603 Opened 6 years ago Updated 3 years ago

Crash in [@ nsGlobalWindowOuter::GetPrincipalForPostMessage]

Categories

(Core :: DOM: Core & HTML, defect, P2)

Unspecified
Windows 10
defect

Tracking

()

Tracking Status
firefox68 --- affected
firefox69 --- affected
firefox70 --- affected

People

(Reporter: mccr8, Unassigned)

Details

(Keywords: crash, testcase-wanted)

Crash Data

This bug is for crash report bp-e8d47311-5f65-435f-9d32-1fecb0190306.

Top 10 frames of crashing thread:

0 xul.dll nsGlobalWindowOuter::GetPrincipalForPostMessage dom/base/nsGlobalWindowOuter.cpp:5987
1 xul.dll nsGlobalWindowOuter::PostMessageMozOuter dom/base/nsGlobalWindowOuter.cpp:6024
2 xul.dll nsGlobalWindowInner::PostMessageMoz dom/base/nsGlobalWindowInner.cpp:3673
3 xul.dll static bool mozilla::dom::Window_Binding::postMessage dom/bindings/WindowBinding.cpp:3682
4 xul.dll mozilla::dom::binding_detail::GenericMethod<mozilla::dom::binding_detail::CrossOriginThisPolicy, mozilla::dom::binding_detail::ThrowExceptions> dom/bindings/BindingUtils.cpp:3144
5 xul.dll js::InternalCallOrConstruct js/src/vm/Interpreter.cpp:532
6 xul.dll static bool InternalCall js/src/vm/Interpreter.cpp:587
7 xul.dll static bool Interpret js/src/vm/Interpreter.cpp:3056
8 xul.dll js::RunScript js/src/vm/Interpreter.cpp:420
9 xul.dll js::ExecuteKernel js/src/vm/Interpreter.cpp:779

A bunch of crashes, all from a single user, on a release assert: MOZ_RELEASE_ASSERT(aSubjectPrincipal.IsSystemPrincipal() || sourceAttrs.EqualsIgnoringFPD(targetAttrs))

The URL for these is Twitter.

I don't know how actionable this is, but I figured I'd file it. It seems like the user has a bunch of extensions installed, so maybe that is related?

Nika and/or Peter might know. Adding them to look into this.

Flags: needinfo?(peterv)
Flags: needinfo?(nika)

Assertion was added in bug 1492607, cc'ing some people from that bug.

Flags: needinfo?(peterv)

(In reply to Peter Van der Beken [:peterv] from comment #2)

Assertion was added in bug 1492607, cc'ing some people from that bug.

Thanks Peter. Switching ni(s) accordingly.

Flags: needinfo?(nika) → needinfo?(amarchesini)
Flags: needinfo?(amarchesini) → needinfo?(tihuang)
Component: DOM → DOM: Core & HTML

Tim Huang is on leave until the end of May.
It seems the crash has gone for a while. Do we still have any action for this bug? Please needinfo me if necessary.

Flags: needinfo?(tihuang)

(In reply to Ethan Tseng [:ethan] from comment #4)

Hi Ethan,
since the assertion is added in bug 1492607, could you find someone who knows this bug and takes a look?

Flags: needinfo?(ettseng)

(In reply to Alphan Chen [:alchen] from comment #5)

Hi Ethan,
since the assertion is added in bug 1492607, could you find someone who knows this bug and takes a look?

Sorry for the delay here.
Thomas, could you look into issue? We can discuss offline if needed.

Flags: needinfo?(ettseng) → needinfo?(tnguyen)

Given the fact that the crash volume is very low and it seems the crashes happened to only one user, we think it's not worthwhile to dig into the issue.
Sylvestre, are you fine with changing the importance as normal or minor?

Flags: needinfo?(tnguyen) → needinfo?(sledru)

Agreed

Severity: critical → normal
Flags: needinfo?(sledru)
Priority: -- → P5

Starting again with the 6-22 Nightly 69 builds, this seems to be happening fairly regularly, with anywhere from 4-14 crashes per build.

Fission Milestone: --- → ?
Fission Milestone: ? → ---

I can reliably reproduce this by going to http://mykzilla.org/

With fission turned on.

Or maybe not it looks like that was from reddit.com/r/videos.

Fission Milestone: --- → M5
Priority: P5 → P2

I've tried to reproduce it on either http://mykzilla.org/ or reddit.com/r/videos and failed.

There's quite a few of these crashes. 94.5% of them are on Focus, with version 71.0a1, so this isn't Fission-specific.

(In reply to Andrew McCreight [:mccr8] from comment #14)

There's quite a few of these crashes. 94.5% of them are on Focus, with version 71.0a1, so this isn't Fission-specific.

In that case, removing Fission milestone.

No longer blocks: fission-dogfooding
Fission Milestone: M5 → ---
Severity: normal → S3
You need to log in before you can comment on or make changes to this bug.