Closed
Bug 1644452
Opened 5 years ago
Closed 5 years ago
mozilla::dom::DOMArena::Release() should be called on the main thread instead of from ~DocGroup
Categories
(Core :: DOM: Core & HTML, defect, P2)
Core
DOM: Core & HTML
Tracking
()
RESOLVED
FIXED
mozilla79
| Tracking | Status | |
|---|---|---|
| firefox-esr68 | --- | unaffected |
| firefox77 | --- | wontfix |
| firefox78 | --- | fixed |
| firefox79 | --- | fixed |
People
(Reporter: farre, Assigned: farre)
References
(Regression)
Details
(Keywords: regression)
Attachments
(1 file)
|
47 bytes,
text/x-phabricator-request
|
RyanVM
:
approval-mozilla-beta+
|
Details | Review |
DOMArena isn't thread safe, but DocGroup is and hence DOMArena needs to be release on the main thread in the case where DocGroup is destroyed off main thread. This causes assertions like:
Updated•5 years ago
|
Has Regression Range: --- → yes
| Assignee | ||
Updated•5 years ago
|
Assignee: nobody → afarre
Updated•5 years ago
|
Severity: -- → S3
Priority: -- → P2
| Assignee | ||
Comment 1•5 years ago
|
||
| Assignee | ||
Comment 2•5 years ago
|
||
Comment on attachment 9155289 [details]
Bug 1644452 - Release DocGroup::mArena on the DocGroup's event target. r=smaug
Beta/Release Uplift Approval Request
- User impact if declined: Buggy behaviour
- Is this code covered by automated tests?: No
- Has the fix been verified in Nightly?: No
- Needs manual test from QE?: No
- If yes, steps to reproduce:
- List of other uplifts needed: None
- Risk to taking this patch: Low
- Why is the change risky/not risky? (and alternatives if risky): Small change
- String changes made/needed:
Attachment #9155289 -
Flags: approval-mozilla-beta?
Updated•5 years ago
|
status-firefox77:
--- → wontfix
status-firefox78:
--- → affected
status-firefox79:
--- → affected
status-firefox-esr68:
--- → unaffected
Pushed by afarre@mozilla.com:
https://hg.mozilla.org/integration/autoland/rev/3c1d5a016149
Release DocGroup::mArena on the DocGroup's event target. r=smaug
Comment 4•5 years ago
|
||
| bugherder | ||
Status: NEW → RESOLVED
Closed: 5 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla79
Updated•5 years ago
|
Keywords: regression
Comment 5•5 years ago
|
||
Comment on attachment 9155289 [details]
Bug 1644452 - Release DocGroup::mArena on the DocGroup's event target. r=smaug
Correctness fix for a bug causing assertion failures. Approved for 78.0b6.
Attachment #9155289 -
Flags: approval-mozilla-beta? → approval-mozilla-beta+
Comment 6•5 years ago
|
||
| bugherder uplift | ||
You need to log in
before you can comment on or make changes to this bug.
Description
•