1580191 - [Fission] Crash in [@ nsDocShell::GetSameTypeParentIgnoreBrowserBoundaries]

Status: RESOLVED DUPLICATE of bug 1580194

(Core :: DOM: Navigation, defect, P2)

Description

[Vlad Lucaci, Desktop QA (:vlucaci)]

Attachment: crash with fission on.gif

This bug is for crash report bp-3ff0e5d9-ff9c-4fb5-babf-c385d0190910.

Top 10 frames of crashing thread:

0 XUL non-virtual thunk to nsDocShell::GetSameTypeParentIgnoreBrowserBoundaries docshell/base/nsDocShell.cpp
1 XUL nsGlobalWindowOuter::GetInProcessScriptableParent dom/base/nsGlobalWindowOuter.cpp:2952
2 XUL nsGlobalWindowOuter::TabGroupOuter dom/base/nsGlobalWindowOuter.cpp:7731
3 XUL nsGlobalWindowOuter::TabGroupOuter dom/base/nsGlobalWindowOuter.cpp:7739
4 XUL nsGlobalWindowOuter::TabGroupOuter dom/base/nsGlobalWindowOuter.cpp:7739
5 XUL nsGlobalWindowOuter::TabGroupOuter dom/base/nsGlobalWindowOuter.cpp:7739
6 XUL nsGlobalWindowOuter::TabGroupOuter dom/base/nsGlobalWindowOuter.cpp:7739
7 XUL nsGlobalWindowOuter::TabGroupOuter dom/base/nsGlobalWindowOuter.cpp:7739
8 XUL nsGlobalWindowOuter::TabGroupOuter dom/base/nsGlobalWindowOuter.cpp:7739
9 XUL nsGlobalWindowOuter::TabGroupOuter dom/base/nsGlobalWindowOuter.cpp:7739

Affected versions

• 71.0a1 (2019-09-09)

Affected platforms

• macOS 10.14.6

Steps to reproduce

1. Launch FF.
2. Go to about:config.
3. Search for fission.autostart and toggle it to True.
4. Go to the following link https://tinyurl.com/y6h7yrzp.
5. Once the page has loaded, right click the opened image and select View.

Expected result

• The image is opened and the tab does not crash.

Actual result

• When selecting the View Image from the context menu, the tab crashes.

Regression range

• Not a regression.

Additional notes

• This crash occurs only once per profile per session. Once it is occurred, following the same steps will not render another crash.

Comment 1

[Kris Maglione [:kmag]]

This is caused by infinite recursion when we try to initialize the TabGroup for a window whose opener is set to itself after a process switch. It should be solved by the upcoming removal of TabGroups.

Comment 2

[Neha Kochar [:neha]]

The STR do not reproduce the crash for me and I see that the reports for this are on Fx70 or earlier. Closing as WFM. Please reopen if it reproduces for you.

Comment 3

[BugBot [:suhaib / :marco/ :calixte]]

Bugbug thinks this bug is a regression, but please revert this change in case of error.