1580198 - [Fission] Crash in [@ PLDHashTable::Search | mozilla::dom::BrowsingContext::GetOpener]

Status: RESOLVED DUPLICATE of bug 1580194

(Core :: DOM: Navigation, defect, P2)

Description

[Vlad Lucaci, Thunderbird QA (:vlucaci)]

Attachment: crash with fission on.gif

This bug is for crash report bp-5fc95d2e-f223-4fdc-8428-15a140190910.

Top 10 frames of crashing thread:

0 xul.dll PLDHashTable::Search xpcom/ds/PLDHashTable.cpp:501
1  @0x1ad0804117 
2 xul.dll mozilla::dom::BrowsingContext::GetOpener docshell/base/BrowsingContext.h:213
3 xul.dll nsGlobalWindowOuter::TabGroupOuter dom/base/nsGlobalWindowOuter.cpp:7729
4 xul.dll nsGlobalWindowOuter::TabGroupOuter dom/base/nsGlobalWindowOuter.cpp
5 xul.dll nsGlobalWindowOuter::TabGroupOuter dom/base/nsGlobalWindowOuter.cpp
6 xul.dll nsGlobalWindowOuter::TabGroupOuter dom/base/nsGlobalWindowOuter.cpp
7 xul.dll nsGlobalWindowOuter::TabGroupOuter dom/base/nsGlobalWindowOuter.cpp
8 xul.dll nsGlobalWindowOuter::TabGroupOuter dom/base/nsGlobalWindowOuter.cpp
9 xul.dll nsGlobalWindowOuter::TabGroupOuter dom/base/nsGlobalWindowOuter.cpp

Affected versions

• 71.0a1 (2019-09-09)

Affected platforms

• Windows 10x64

Steps to reproduce

1. Launch FF.
2. Go to about:config.
3. Search for fission.autostart and toggle it to True.
4. Go to the following link https://tinyurl.com/y6h7yrzp.
5. Once the page has loaded, right click the opened image and select View.

Expected result

• The image is opened and the tab does not crash.

Actual result

• When selecting the View Image from the context menu, the tab crashes.

Regression range

• Not a regression.

Additional notes

• This crash occurs only once per profile per session. Once it is occurred, following the same steps will not render another crash.