Closed Bug 1717059 Opened 4 months ago Closed 4 months ago

Crash in [@ nsTSubstring<T>::Finalize] from mozilla::UntrustedModulesProcessor::ProcessModuleLoadQueue()

Categories

(Firefox :: Launcher Process, defect)

Unspecified
Windows 10
defect

Tracking

()

RESOLVED FIXED
91 Branch
Tracking Status
firefox-esr78 --- unaffected
firefox89 --- unaffected
firefox90 --- unaffected
firefox91 --- fixed

People

(Reporter: aryx, Unassigned)

References

(Regression)

Details

(Keywords: crash, regression)

Crash Data

10 crashes from 6 installations so far.

Crash report: https://crash-stats.mozilla.org/report/index/94fa3471-17df-493a-ba4f-4def60210617

Reason: EXCEPTION_ACCESS_VIOLATION_READ

Top 10 frames of crashing thread:

0 xul.dll nsTSubstring<char16_t>::Finalize xpcom/string/nsTSubstring.cpp:270
1 xul.dll mozilla::UntrustedModulesProcessor::ProcessModuleLoadQueue toolkit/xre/UntrustedModulesProcessor.cpp:571
2 xul.dll mozilla::UntrustedModulesProcessor::BackgroundProcessModuleLoadQueue toolkit/xre/UntrustedModulesProcessor.cpp:451
3 xul.dll mozilla::detail::RunnableMethodImpl<D3DVsyncSource::D3DVsyncDisplay*, void  xpcom/threads/nsThreadUtils.h:1203
4 xul.dll nsThread::ProcessNextEvent xpcom/threads/nsThread.cpp:1156
5 xul.dll mozilla::ipc::MessagePumpForNonMainThreads::Run ipc/glue/MessagePump.cpp:330
6 xul.dll MessageLoop::RunHandler ipc/chromium/src/base/message_loop.cc:328
7 xul.dll MessageLoop::Run ipc/chromium/src/base/message_loop.cc:310
8 xul.dll static nsThread::ThreadFunc xpcom/threads/nsThread.cpp:398
9 nss3.dll _PR_NativeRunThread nsprpub/pr/src/threads/combined/pruthr.c:399
Severity: -- → S2
Flags: needinfo?(tkikuchi)
Crash Signature: [@ nsTSubstring<T>::Finalize] → [@ nsTSubstring<T>::Finalize] [@ RtlpFreeHeapInternal | RtlFreeHeap | mozilla::UntrustedModulesProcessor::ProcessModuleLoadQueue]
Crash Signature: [@ nsTSubstring<T>::Finalize] [@ RtlpFreeHeapInternal | RtlFreeHeap | mozilla::UntrustedModulesProcessor::ProcessModuleLoadQueue] → [@ nsTSubstring<T>::Assign | mozilla::UntrustedModulesProcessor::ProcessModuleLoadQueue] [@ nsTSubstring<T>::Finalize] [@ RtlpFreeHeapInternal | RtlFreeHeap | mozilla::UntrustedModulesProcessor::ProcessModuleLoadQueue]

Bug 1713415 got backed out from mozilla-central.

Status: NEW → RESOLVED
Closed: 4 months ago
Resolution: --- → FIXED
Target Milestone: --- → 91 Branch
Flags: needinfo?(tkikuchi)
You need to log in before you can comment on or make changes to this bug.