1682854 - Crash in [@ JSStructuredCloneWriter::startWrite]

Status: NEW

(Core :: JavaScript Engine, defect, P2)

Description

[Simon Giesecke [:sg] [he/him]]

Maybe Fission related. (DOMFissionEnabled=1)

Crash report: https://crash-stats.mozilla.org/report/index/85a9a3fa-81bd-4628-b467-73e790201211

Reason: EXCEPTION_ACCESS_VIOLATION_READ

Top 9 frames of crashing thread:

0 xul.dll JSStructuredCloneWriter::startWrite js/src/vm/StructuredClone.cpp:1760
1 xul.dll WriteStructuredClone js/src/vm/StructuredClone.cpp:684
2 xul.dll JSAutoStructuredCloneBuffer::write js/src/vm/StructuredClone.cpp:3446
3 xul.dll mozilla::dom::StructuredCloneHolderBase::Write dom/base/StructuredCloneHolder.cpp:265
4 xul.dll mozilla::dom::StructuredCloneHolder::Write dom/base/StructuredCloneHolder.cpp:352
5 xul.dll mozilla::dom::StructuredCloneHolder::Write dom/base/StructuredCloneHolder.cpp:345
6 xul.dll static mozilla::dom::StructuredCloneBlob::Constructor dom/base/StructuredCloneBlob.cpp:70
7 xul.dll mozilla::dom::StructuredCloneHolder_Binding::_constructor dom/bindings/StructuredCloneHolderBinding.cpp:230
8  @0x16fb85e065c 

Several of the reports in Nightly are from various extensions.

Comment 1

[Jason Orendorff [:jorendorff]]

Steve, would you mind taking a look? Can we release-assert something here...?

Comment 2

[Nicolas B. Pierron [:nbp]]

The volume of this bug sounds really low at the moment, and except for the weirdness of the spikes on Feb 12, Feb 26, Mar 12 and Mar 29, I would suggest to close this bug.

What do you think Steve? Should we keep this bug open with a lower priority/severity or attempt to fix it soon-ish?

Comment 3

[BugBot [:suhaib / :marco/ :calixte]]

Since the crash volume is low (less than 5 per week), the severity is downgraded to S3. Feel free to change it back if you think the bug is still critical.

For more information, please visit auto_nag documentation.