Closed Bug 1663178 Opened 4 years ago Closed 4 years ago

Crash in [@ mozilla::dom::SessionHistoryEntry::AdoptBFCacheEntry]

Categories

(Core :: DOM: Navigation, defect)

Product:
Core
Component:
DOM: Navigation
Platform:
Unspecified
macOS
Type:
defect

Tracking

()

Status:
RESOLVED FIXED
Milestone:
82 Branch
Tracking Flags:
Tracking Status
firefox-esr68 --- unaffected
firefox-esr78 --- disabled
firefox80 --- disabled
firefox81 --- disabled
firefox82 --- fixed

People

(Reporter: sefeng, Assigned: smaug)

Details

(Keywords: crash)

Crash Data

Maybe Fission related. (DOMFissionEnabled=1)

Crash report: https://crash-stats.mozilla.org/report/index/2070d2c5-43f2-428f-80ca-040e20200831

Top 10 frames of crashing thread:

0 XUL mozilla::dom::SessionHistoryEntry::AdoptBFCacheEntry docshell/shistory/SessionHistoryEntry.cpp:910
1 XUL NS_InvokeByIndex 
2 XUL XPCWrappedNative::CallMethod js/xpconnect/src/XPCWrappedNative.cpp:1141
3 XUL XPC_WN_CallMethod js/xpconnect/src/XPCWrappedNativeJSOps.cpp:946
4 XUL js::InternalCallOrConstruct js/src/vm/Interpreter.cpp:599
5 XUL js::jit::DoCallFallback js/src/jit/BaselineIC.cpp:3018
6  @0x25b5f0e4fc27 
7  @0x13339d617 
8  @0x25b5f0e4d49e 
9 XUL js::jit::MaybeEnterJit js/src/jit/Jit.cpp:197

We only got a few crashes from a single installation, so this might not be a big deal. However, the crash reason is a MOZ_CRASH, so filing this incase there's a bug.

The crash reason is MOZ_CRASH(This lives in the child process).

This has been "fixed" already
https://searchfox.org/mozilla-central/rev/dc30fc92f2d02abe716426df7eff0f0bbb907da2/docshell/shistory/SessionHistoryEntry.cpp#910

Status: NEW → RESOLVED
Closed: 4 years ago
Resolution: --- → FIXED
Assignee: nobody → bugs
status-firefox80: --- → disabled
status-firefox81: --- → disabled
status-firefox82: --- → fixed
status-firefox-esr68: --- → unaffected
status-firefox-esr78: --- → disabled
Target Milestone: --- → 82 Branch
You need to log in before you can comment on or make changes to this bug.