Closed
Bug 1660011
Opened 6 years ago
Closed 6 years ago
Crash in [@ nsTArray_base<T>::SwapArrayElements<T> | mozilla::ipc::(anonymous namespace)::ActivateAndCleanupIPCStream]
Categories
(Core :: IPC, defect)
Core
IPC
Tracking
()
RESOLVED
DUPLICATE
of bug 1653463
People
(Reporter: sg, Unassigned)
Details
(Keywords: crash, csectype-uaf)
Crash Data
This bug is for crash report bp-1e2c7918-85a7-40c1-8d3f-493160200819.
Top 10 frames of crashing thread:
0 libxul.so nsTArrayInfallibleAllocator::ResultTypeProxy nsTArray_base<nsTArrayInfallibleAllocator, nsTArray_RelocateUsingMemutils>::SwapArrayElements<nsTArrayInfallibleAllocator, nsTArrayInfallibleAllocator> xpcom/ds/nsTArray-inl.h:416
1 libxul.so mozilla::ipc:: ipc/glue/IPCStreamUtils.cpp:222
2 libxul.so mozilla::ipc::AutoIPCStream::~AutoIPCStream ipc/glue/IPCStreamUtils.cpp
3 libxul.so mozilla::ipc::HoldIPCStream::Release ipc/glue/IPCStreamUtils.h:201
4 libxul.so detail::ProxyReleaseEvent<mozilla::ipc::HoldIPCStream>::Run xpcom/threads/nsProxyRelease.h:34
5 libxul.so nsThread::ProcessNextEvent xpcom/threads/nsThread.cpp:1234
6 libxul.so NS_ProcessNextEvent xpcom/threads/nsThreadUtils.cpp:504
7 libxul.so mozilla::ipc::MessagePumpForNonMainThreads::Run ipc/glue/MessagePump.cpp:302
8 libxul.so MessageLoop::Run ipc/chromium/src/base/message_loop.cc:291
9 libxul.so nsThread::ThreadFunc xpcom/threads/nsThread.cpp:447
|
Reporter | |
Comment 1•6 years ago
|
||
Note that there are not too many crashes, and the majority of crashes is on Android.
|
||
Updated•6 years ago
|
Status: NEW → RESOLVED
Closed: 6 years ago
Resolution: --- → DUPLICATE
|
||
Updated•2 years ago
|
Group: core-security → core-security-release
|
||
Updated•2 years ago
|
Keywords: keep-hidden
Whiteboard: (keep this hidden for now; see bug 1824501)
|
|
||
Updated•2 years ago
|
Group: core-security-release
Keywords: keep-hidden
Whiteboard: (keep this hidden for now; see bug 1824501)
You need to log in
before you can comment on or make changes to this bug.
Description
•