1637088 - Crash in [@ mozilla::layout::RemoteLayerTreeOwner::AttachLayerManager]

Status: RESOLVED FIXED

(Core :: Layout, defect)

Description

[Darkspirit]

All crashes seem to have Fission enabled. One is mine.

I think a popup tab wanted to open, but was closed again by uBlock Origin? I can't remember. It was a main process crash.

This bug is for crash report bp-88691f84-9134-4d02-87a2-67caa0200511.

Top 10 frames of crashing thread:

0 libxul.so mozilla::layout::RemoteLayerTreeOwner::AttachLayerManager layout/ipc/RemoteLayerTreeOwner.cpp:102
1 libxul.so mozilla::dom::BrowserBridgeParent::RecvShow dom/ipc/BrowserBridgeParent.cpp:136
2 libxul.so mozilla::dom::PBrowserBridgeParent::OnMessageReceived ipc/ipdl/PBrowserBridgeParent.cpp:423
3 libxul.so mozilla::dom::PContentParent::OnMessageReceived ipc/ipdl/PContentParent.cpp:6503
4 libxul.so mozilla::ipc::MessageChannel::DispatchMessage ipc/glue/MessageChannel.cpp:2186
5 libxul.so mozilla::ipc::MessageChannel::MessageTask::Run ipc/glue/MessageChannel.cpp:1989
6 libxul.so nsThread::ProcessNextEvent xpcom/threads/nsThread.cpp:1207
7 libxul.so mozilla::ipc::MessagePump::Run ipc/glue/MessagePump.cpp:87
8 libxul.so MessageLoop::Run ipc/chromium/src/base/message_loop.cc:290
9 libxul.so nsBaseAppShell::Run widget/nsBaseAppShell.cpp:137

Comment 1

[Chris Peterson [:cpeterson]]

Nika says this occurs during process switch, created bridge, but ancestor was discarded. mBrowserParent never gets discarded and channel doesn't get closed.

Comment 2

[Nika Layzell [:nika] (ni? for response)]

Attachment: Bug 1637088 - Delay creating BrowserBridgeChild until after new PBrowser has been created,

Comment 3

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/ff9e48641bc6
Delay creating BrowserBridgeChild until after new PBrowser has been created, r=farre,emilio

Comment 4

[Natalia Csoregi [:nataliaCs]]

https://hg.mozilla.org/mozilla-central/rev/ff9e48641bc6