1555047 - Crash in [@ PLDHashTable::Iterator::Next | mozilla::PresShell::DoFlushPendingNotifications]

Status: RESOLVED WORKSFORME

(Core :: Layout, defect)

Description

[Marcia Knous [:marcia]]

This bug is for crash report bp-b5007beb-a332-408c-b0b2-71a5e0190526.

New top crash in 67 - almost 100% correlation to de builds: https://bit.ly/2QxtrcD. Crash was present in 66 as well but seems higher so far in 67. Half of the crashes happened after startup.

91.69% in signature vs 08.90% overall) Module "caches.sqlite-shm" = true
(99.28% in signature vs 19.17% overall) useragent_locale = de

Top 10 frames of crashing thread:

0 libxul.so PLDHashTable::Iterator::Next xpcom/ds/PLDHashTable.cpp:781
1 libxul.so mozilla::PresShell::DoFlushPendingNotifications layout/base/PresShell.cpp:2566
2 libxul.so nsIPresShell::DidDoReflow layout/base/PresShell.cpp:3916
3 libxul.so mozilla::PresShell::DoFlushPendingNotifications layout/base/PresShell.cpp:9331
4 libxul.so mozilla::dom::Document::FlushPendingNotifications dom/base/Document.cpp:7105
5 libxul.so mozilla::AccessibleCaretManager::FlushLayout dom/base/Document.cpp:7036
6 libxul.so mozilla::AccessibleCaretManager::UpdateCarets layout/base/AccessibleCaretManager.cpp:177
7 libxul.so mozilla::AccessibleCaretManager::OnSelectionChanged mfbt/EnumSet.h
8 libxul.so mozilla::AccessibleCaretEventHub::OnSelectionChange layout/base/AccessibleCaretEventHub.cpp:661
9 libxul.so mozilla::dom::Selection::NotifySelectionListeners dom/base/Selection.cpp:3232

Comment 1

[Marcia Knous [:marcia]]

Apparently this spike was correlated to a specific German website (web.de) and that the spike is now gone. Thanks to philipp for clarifying this during today's channel meeting.