1625841 - Crash in [@ mozilla::net::Http3Session::Authenticated]

Status: RESOLVED FIXED

(Core :: Networking: HTTP, defect, P1)

Description

[Gabriele Svelto [:gsvelto]]

This bug is for crash report bp-51bc5c7b-d933-4c6f-ad7f-8a80a0200329.

Top 10 frames of crashing thread:

0 xul.dll mozilla::net::Http3Session::Authenticated netwerk/protocol/http/Http3Session.cpp:1291
1 xul.dll mozilla::net::QuicSocketControl::CallAuthenticated netwerk/protocol/http/QuicSocketControl.cpp:53
2 xul.dll mozilla::psm::SSLServerCertVerificationResult::Run security/manager/ssl/SSLServerCertVerification.cpp:1604
3 xul.dll nsThread::ProcessNextEvent xpcom/threads/nsThread.cpp:1220
4 xul.dll NS_ProcessNextEvent xpcom/threads/nsThreadUtils.cpp:481
5 xul.dll mozilla::net::nsSocketTransportService::Run netwerk/base/nsSocketTransportService2.cpp:1135
6 xul.dll nsThread::ProcessNextEvent xpcom/threads/nsThread.cpp:1220
7 xul.dll mozilla::ipc::MessagePumpForNonMainThreads::Run ipc/glue/MessagePump.cpp:332
8 xul.dll MessageLoop::RunHandler ipc/chromium/src/base/message_loop.cc:308
9 xul.dll MessageLoop::Run ipc/chromium/src/base/message_loop.cc:290

Looks like NULL pointer access on the Http3Session object. We've got just two crashes for now - with the earliest being in buildid 20200327215207 - but the stacks and crash reasons are consistent.

Comment 1

[Gabriele Svelto [:gsvelto]]

My mistake, there were earlier crashes with the same stack going all the way back to buildid 20200112220634. Maybe this is a very-hard-to-hit race?

Comment 2

[Dragana Damjanovic [:dragana]]

Thanks!

Comment 3

[Dragana Damjanovic [:dragana]]

Attachment: Bug 1625841 - Check refPtr not weakPtr. r=valentin

Comment 4

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/c5c8bfabe239
Check refPtr not weakPtr. r=valentin

Comment 5

[Oana Pop-Rus]

https://hg.mozilla.org/mozilla-central/rev/c5c8bfabe239