Closed Bug 1718062 Opened 3 years ago Closed 3 years ago

Crash in [@ mozilla::detail::nsTStringRepr<T>::Last | mozilla::SandboxBroker::Policy::FixRecursivePermissions]

Categories

(Core :: Security: Process Sandboxing, defect)

Product:
Core
Component:
Security: Process Sandboxing
Type:
defect

Tracking

()

Status:
RESOLVED DUPLICATE of bug 1717599

People

(Reporter: sefeng, Unassigned)

Details

(Keywords: crash)

Crash Data

Maybe Fission related. (DOMFissionEnabled=1)

Crash report: https://crash-stats.mozilla.org/report/index/6a4e3a28-9eb6-4d0d-a8bd-39c7f0210622

MOZ_CRASH Reason: MOZ_RELEASE_ASSERT(this->mLength > 0) (|Last()| called on an empty string)

Top 10 frames of crashing thread:

0 libxul.so mozilla::detail::nsTStringRepr<char>::Last const xpcom/string/nsTSubstring.cpp:974
1 libxul.so mozilla::SandboxBroker::Policy::FixRecursivePermissions security/sandbox/linux/broker/SandboxBroker.cpp:310
2 libxul.so mozilla::SandboxBrokerPolicyFactory::GetContentPolicy security/sandbox/linux/broker/SandboxBrokerPolicyFactory.cpp:696
3 libxul.so mozilla::dom::ContentParent::LaunchSubprocessResolve dom/ipc/ContentParent.cpp:2632
4 libxul.so mozilla::dom::ContentParent::GetNewOrUsedBrowserProcess dom/ipc/ContentParent.cpp:1136
5 libxul.so mozilla::dom::ContentParent::CreateBrowser dom/ipc/ContentParent.cpp:1501
6 libxul.so nsFrameLoader::TryRemoteBrowserInternal dom/base/nsFrameLoader.cpp:2684
7 libxul.so nsFrameLoader::ShowRemoteFrame dom/base/nsFrameLoader.cpp:1097
8 libxul.so nsFrameLoader::Show dom/base/nsFrameLoader.cpp:974
9 libxul.so nsSubDocumentFrame::ShowViewer layout/generic/nsSubDocumentFrame.cpp:196
Severity: -- → S2
Status: NEW → RESOLVED
Closed: 3 years ago
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.