1685216 - Assertion failure: IsInProcess(), at src/docshell/base/BrowsingContext.cpp:240

Status: RESOLVED FIXED

(Core :: DOM: Navigation, defect, P2)

Description

[Tyson Smith [:tsmith]]

Attachment: testcase.html

Assertion failure: IsInProcess(), at src/docshell/base/BrowsingContext.cpp:240

#0 0x7f773a9748cf in mozilla::dom::BrowsingContext::SameOriginWithTop() src/docshell/base/BrowsingContext.cpp:240:3
#1 0x7f773a9d05b0 in SameOriginWithTop src/docshell/base/WindowContext.cpp:98:28
#2 0x7f773a9d05b0 in operator() src/docshell/base/nsDocShell.cpp:9929:44
#3 0x7f773a9d05b0 in operator() src/docshell/base/nsDocShell.cpp:9928:36
#4 0x7f773a9d05b0 in nsDocShell::DoURILoad(nsDocShellLoadState*, mozilla::Maybe<unsigned int>, nsIRequest**) src/docshell/base/nsDocShell.cpp:9921:35
#5 0x7f773a9814d0 in nsDocShell::InternalLoad(nsDocShellLoadState*, mozilla::Maybe<unsigned int>) src/docshell/base/nsDocShell.cpp:9381:8
#6 0x7f773a9a4d0d in nsDocShell::LoadURI(nsDocShellLoadState*, bool, bool) src/docshell/base/nsDocShell.cpp:873:8
#7 0x7f773a97eebd in mozilla::dom::BrowsingContext::LoadURI(nsDocShellLoadState*, bool) src/docshell/base/BrowsingContext.cpp:1762:23
#8 0x7f7739157e8b in mozilla::dom::ContentChild::RecvLoadURI(mozilla::dom::MaybeDiscarded<mozilla::dom::BrowsingContext> const&, nsDocShellLoadState*, bool, std::function<void (bool const&)>&&) src/dom/ipc/ContentChild.cpp:4136:12
#9 0x7f7735b5cb3d in mozilla::dom::PContentChild::OnMessageReceived(IPC::Message const&) /builds/worker/workspace/obj-build/ipc/ipdl/PContentChild.cpp:13154:56
#10 0x7f77359ca1ee in mozilla::ipc::MessageChannel::DispatchAsyncMessage(mozilla::ipc::ActorLifecycleProxy*, IPC::Message const&) src/ipc/glue/MessageChannel.cpp:2153:25
#11 0x7f77359c67ed in mozilla::ipc::MessageChannel::DispatchMessage(IPC::Message&&) src/ipc/glue/MessageChannel.cpp:2077:9
#12 0x7f77359c7c96 in mozilla::ipc::MessageChannel::RunMessage(mozilla::ipc::MessageChannel::MessageTask&) src/ipc/glue/MessageChannel.cpp:1925:3
#13 0x7f77359c89db in mozilla::ipc::MessageChannel::MessageTask::Run() src/ipc/glue/MessageChannel.cpp:1956:13
#14 0x7f77350ad35f in mozilla::RunnableTask::Run() src/xpcom/threads/TaskController.cpp:459:16
#15 0x7f77350ab95a in mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&) src/xpcom/threads/TaskController.cpp:739:26
#16 0x7f77350aaa04 in mozilla::TaskController::ExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&) src/xpcom/threads/TaskController.cpp:598:15
#17 0x7f77350aabb7 in mozilla::TaskController::ProcessPendingMTTask(bool) src/xpcom/threads/TaskController.cpp:382:36
#18 0x7f77350b0c06 in operator() src/xpcom/threads/TaskController.cpp:123:37
#19 0x7f77350b0c06 in mozilla::detail::RunnableFunction<mozilla::TaskController::InitializeInternal()::$_3>::Run() /builds/worker/workspace/obj-build/dist/include/nsThreadUtils.h:534:5
#20 0x7f77350c21f5 in nsThread::ProcessNextEvent(bool, bool*) src/xpcom/threads/nsThread.cpp:1200:14
#21 0x7f77350c82aa in NS_ProcessNextEvent(nsIThread*, bool) src/xpcom/threads/nsThreadUtils.cpp:548:10
#22 0x7f77359cfac6 in mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) src/ipc/glue/MessagePump.cpp:87:21
#23 0x7f773593bc83 in MessageLoop::RunInternal() src/ipc/chromium/src/base/message_loop.cc:334:10
#24 0x7f773593bb9d in RunHandler src/ipc/chromium/src/base/message_loop.cc:327:3
#25 0x7f773593bb9d in MessageLoop::Run() src/ipc/chromium/src/base/message_loop.cc:309:3
#26 0x7f77396b5df8 in nsBaseAppShell::Run() src/widget/nsBaseAppShell.cpp:137:27
#27 0x7f773aebeb53 in XRE_RunAppShell() src/toolkit/xre/nsEmbedFunctions.cpp:902:20
#28 0x7f77359d09a9 in mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*) src/ipc/glue/MessagePump.cpp:237:9
#29 0x7f773593bc83 in MessageLoop::RunInternal() src/ipc/chromium/src/base/message_loop.cc:334:10
#30 0x7f773593bb9d in RunHandler src/ipc/chromium/src/base/message_loop.cc:327:3
#31 0x7f773593bb9d in MessageLoop::Run() src/ipc/chromium/src/base/message_loop.cc:309:3
#32 0x7f773aebe738 in XRE_InitChildProcess(int, char**, XREChildData const*) src/toolkit/xre/nsEmbedFunctions.cpp:733:34
#33 0x558ff4850e07 in content_process_main src/browser/app/../../ipc/contentproc/plugin-container.cpp:57:28
#34 0x558ff4850e07 in main src/browser/app/nsBrowserApp.cpp:305:18

Comment 1

[Tyson Smith [:tsmith]]

Attachment: prefs.js

Comment 2

[Bugmon [:jkratzer for issues]]

Bugmon Analysis:
Unable to reproduce bug using the following builds:

mozilla-central 20210106035126-1e323e0a130c
mozilla-central 20210106035126-1e323e0a130c
Removing bugmon keyword as no further action possible.
Please review the bug and re-add the keyword for further analysis.

Comment 3

[Andrew McCreight [:mccr8]]

I wasn't able to reproduce this locally, either, on a build from 1/4, though I just manually enabled Fission and WebRender and didn't use the full prefs. Tyson, would it be possible to get bugmon to bisect a fix or something? Thanks.

Comment 4

[Andrew McCreight [:mccr8]]

Fission is enabled in the prefs, and the stack looks related to docshell stuff, so we probably want to track this for Fission.

Comment 5

[Tyson Smith [:tsmith]]

I have a Pernosco session from the same test case but the stack is a bit different: https://pernos.co/debug/7FfXsdXZmrT-u-suMdWOkQ/index.html

Comment 6

[Andrew McCreight [:mccr8]]

Great! That stack has HasValidTransientUserGestureActivation at the top, so this might be same issue as bug 1685106.

Comment 7

[Chris Peterson [:cpeterson]]

assigning to kmag

M6c

Comment 8

[Neha Kochar [:neha]]

see https://bugzilla.mozilla.org/show_bug.cgi?id=1685106#c2 for Nika's suggestion of the fix.

Comment 9

[Kris Maglione [:kmag]]

(Note: Patch for this is in bug 1685106)

Comment 10

[BugBot [:suhaib / :marco/ :calixte]]

:kmag, since this bug contains a bisection range, could you fill (if possible) the regressed_by field?
For more information, please visit auto_nag documentation.

Comment 11

[Marco Castelluccio [:marco]]

Sorry, bug in the bot.