Closed Bug 1694397 Opened 5 years ago Closed 4 years ago

MOZ_CRASH(IPC message size is too large) when drag & dropping a large image

Categories

(Core :: IPC, defect)

defect

Tracking

()

RESOLVED WORKSFORME
Tracking Status
firefox-esr78 --- wontfix
firefox-esr91 --- wontfix
firefox89 --- wontfix
firefox90 --- wontfix
firefox91 --- wontfix
firefox99 --- unaffected
firefox100 --- unaffected
firefox101 --- unaffected

People

(Reporter: mayankleoboy1, Unassigned)

Details

(Keywords: crash, Whiteboard: [not-a-fission-bug])

Crash Data

Crash report: https://crash-stats.mozilla.org/report/index/9a31b749-6a53-4029-af86-59ec00210223

MOZ_CRASH Reason: MOZ_CRASH(IPC message size is too large)

Top 10 frames of crashing thread:

0 xul.dll mozilla::ipc::MessageChannel::Send ipc/glue/MessageChannel.cpp:968
1 xul.dll mozilla::ipc::IProtocol::ChannelSend ipc/glue/ProtocolUtils.cpp:508
2 xul.dll mozilla::dom::PBrowserChild::SendInvokeDragSession ipc/ipdl/PBrowserChild.cpp:3225
3 xul.dll nsDragServiceProxy::InvokeDragSessionImpl widget/nsDragServiceProxy.cpp:81
4 xul.dll nsBaseDragService::InvokeDragSession widget/nsBaseDragService.cpp:321
5 xul.dll nsBaseDragService::InvokeDragSessionWithImage widget/nsBaseDragService.cpp:376
6 xul.dll mozilla::EventStateManager::DoDefaultDragStart dom/events/EventStateManager.cpp:2310
7 xul.dll mozilla::EventStateManager::GenerateDragGesture dom/events/EventStateManager.cpp:2078
8 xul.dll mozilla::EventStateManager::PreHandleEvent dom/events/EventStateManager.cpp:686
9 xul.dll mozilla::PresShell::EventHandler::DispatchEvent layout/base/PresShell.cpp:8233

STR:

  1. Go to https://summerstyle.github.io/summer/
  2. Download this image to your local disc: https://firefoxux.github.io/people/smartell/quantum/firefox-quantum_launch-poster_24x36.jpg
  3. drag and drop the downloaded image in the page
  4. Click OK

Crash, but not always.

Also the profile for another run where the tab didnt crash : https://share.firefox.dev/3pLCw1x

This is not a Fission bug, even though we see this crash signature in Fission's Beta 90 experiment.

Crash Signature: [@ mozilla::ipc::MessageChannel::Send | mozilla::ipc::IProtocol::ChannelSend | IPC_Message_Name=PBrowser::Msg_InvokeDragSession] → [@ mozilla::ipc::IProtocol::ChannelSend | IPC_Message_Name=PBrowser::Msg_InvokeDragSession] [@ mozilla::ipc::IProtocol::ChannelSend | IPC_Message_Name=PContent::Msg_InvokeDragSession] [@ mozilla::ipc::ProcessLink::SendMessage | IPC_Message_Name=PContent…
OS: Windows 10 → All
Hardware: Unspecified → All
Whiteboard: [not-a-fission-bug]
Crash Signature: IPC_Message_Name=PContent::Msg_InvokeDragSession] [@ mozilla::ipc::MessageChannel::Send | mozilla::ipc::IProtocol::ChannelSend | IPC_Message_Name=PBrowser::Msg_InvokeDragSession] [@ mozilla::ipc::MessageChannel::SendMessageToLink | mozilla::ipc::Messag… → IPC_Message_Name=PContent::Msg_InvokeDragSession] [@ mozilla::ipc::MessageChannel::Send | mozilla::ipc::IProtocol::ChannelSend | IPC_Message_Name=PBrowser::Msg_InvokeDragSession] [@ mozilla::ipc::MessageChannel::Send | mozilla::ipc::IProtocol::ChannelS…
Severity: -- → S2
Summary: Crash in [@ mozilla::ipc::MessageChannel::Send | mozilla::ipc::IProtocol::ChannelSend | IPC_Message_Name=PBrowser::Msg_InvokeDragSession] → MOZ_CRASH(IPC message size is too large) when drag & dropping a large image

Closing because no crashes reported for 12 weeks.

Status: NEW → RESOLVED
Closed: 4 years ago
Resolution: --- → WORKSFORME

(In reply to Release mgmt bot [:suhaib / :marco/ :calixte] from comment #4)

Closing because no crashes reported for 12 weeks.

I can no longer repro this crash. Looks like the crash reports stopped on 2022-01-12, which is when Firefox 96 was released. Presumably this crash was fixed in 96.

You need to log in before you can comment on or make changes to this bug.