1703978 - Assertion failure: false (mScheduledDelayedRunnables.RemoveElement(aRunnable)), at src/xpcom/threads/ThreadEventTarget.cpp:154

Status: RESOLVED FIXED

(Core :: XPCOM, defect)

Description

[Tyson Smith [:tsmith] (PTO)]

This was found while trying to reproduce another issue using m-c 20210408-83a21ab93aff.

No test case is available but I will attach a Pernosco session shortly.

Assertion failure: false (mScheduledDelayedRunnables.RemoveElement(aRunnable)), at src/xpcom/threads/ThreadEventTarget.cpp:154

#0 0x52ee1296a8fe in mozilla::ThreadEventTarget::OnDelayedRunnableRan(mozilla::DelayedRunnable*) src/xpcom/threads/ThreadEventTarget.cpp:154:3
#1 0x52ee12940ac6 in mozilla::DelayedRunnable::Notify(nsITimer*) src/xpcom/threads/DelayedRunnable.cpp:61:16
#2 0x52ee1296cf26 in nsTimerImpl::Fire(int) src/xpcom/threads/nsTimerImpl.cpp:565:39
#3 0x52ee1296c98f in nsTimerEvent::Run() src/xpcom/threads/TimerThread.cpp:252:11
#4 0x52ee1299a75e in mozilla::RunnableTask::Run() src/xpcom/threads/TaskController.cpp:470:16
#5 0x52ee12965b30 in mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&) src/xpcom/threads/TaskController.cpp:754:26
#6 0x52ee12964279 in mozilla::TaskController::ExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&) src/xpcom/threads/TaskController.cpp:609:15
#7 0x52ee12964501 in mozilla::TaskController::ProcessPendingMTTask(bool) src/xpcom/threads/TaskController.cpp:393:36
#8 0x52ee129880ca in mozilla::TaskController::InitializeInternal()::$_0::operator()() const src/xpcom/threads/TaskController.cpp:133:37
#9 0x52ee1298803d in mozilla::detail::RunnableFunction<mozilla::TaskController::InitializeInternal()::$_0>::Run() src/objdir-ff-debug/dist/include/nsThreadUtils.h:534:5
#10 0x52ee1297727c in nsThread::ProcessNextEvent(bool, bool*) src/xpcom/threads/nsThread.cpp:1159:16
#11 0x52ee1297d636 in NS_ProcessNextEvent(nsIThread*, bool) src/xpcom/threads/nsThreadUtils.cpp:548:10
#12 0x52ee13ba232e in mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) src/ipc/glue/MessagePump.cpp:87:21
#13 0x52ee13a26e16 in MessageLoop::RunInternal() src/ipc/chromium/src/base/message_loop.cc:335:10
#14 0x52ee13a26d94 in MessageLoop::RunHandler() src/ipc/chromium/src/base/message_loop.cc:328:3
#15 0x52ee13a26d52 in MessageLoop::Run() src/ipc/chromium/src/base/message_loop.cc:310:3
#16 0x52ee1a241fe0 in nsBaseAppShell::Run() src/widget/nsBaseAppShell.cpp:137:27
#17 0x52ee1d5652df in nsAppStartup::Run() src/toolkit/components/startup/nsAppStartup.cpp:273:30
#18 0x52ee1d75c9be in XREMain::XRE_mainRun() src/toolkit/xre/nsAppRunner.cpp:5348:22
#19 0x52ee1d75d990 in XREMain::XRE_main(int, char**, mozilla::BootstrapConfig const&) src/toolkit/xre/nsAppRunner.cpp:5539:8
#20 0x52ee1d75dcb8 in XRE_main(int, char**, mozilla::BootstrapConfig const&) src/toolkit/xre/nsAppRunner.cpp:5598:21
#21 0x52ee1d7784a6 in mozilla::BootstrapImpl::XRE_main(int, char**, mozilla::BootstrapConfig const&) src/toolkit/xre/Bootstrap.cpp:45:12
#22 0x56229b6f5756 in do_main(int, char**, char**) src/browser/app/nsBrowserApp.cpp:220:22
#23 0x56229b6f50ec in main src/browser/app/nsBrowserApp.cpp:347:16

Comment 1

[Tyson Smith [:tsmith] (PTO)]

A Pernosco session is available here: https://pernos.co/debug/tNHzuC03zrV6H050CJ1Wxw/index.html

Comment 2

[Julien Cristau [:jcristau]]

Regressing bug backed out of beta for 89: https://hg.mozilla.org/releases/mozilla-beta/rev/21a23370449e01dcb4388f99bcd3778923db3def

Comment 3

[Julien Cristau [:jcristau]]

Regressor backed out of beta again for 90:
https://hg.mozilla.org/releases/mozilla-beta/rev/3dabe43c4982a4759af9195a9eaf02d1062304eb

Comment 4

[Pascal Chevrel:pascalc]

Tyson, is that still a problem in 91 and 92?

Comment 5

[Tyson Smith [:tsmith] (PTO)]

It does not appear to be. Last report from fuzzers was with build m-c 20210527-b1d195d012a4.

Comment 6

[Kris Wright :KrisWright]

I'm fairly certain we removed the related assertion to this bug in bug 1704887.

Comment 7

[Pascal Chevrel:pascalc]

Thanks, marking fixed then.