Closed Bug 1720692 Opened 3 years ago Closed 3 years ago

Crash in [@ mozilla::dom::ScriptLoadRequestList::AppendElement]

Categories

(Core :: DOM: Core & HTML, defect)

defect

Tracking

()

RESOLVED FIXED
92 Branch
Tracking Status
firefox-esr78 --- unaffected
firefox90 --- unaffected
firefox91 --- unaffected
firefox92 --- fixed

People

(Reporter: aryx, Assigned: jonco)

References

(Regression)

Details

(Keywords: crash, regression)

Crash Data

Attachments

(1 file)

4 crashes from 4 different installations.

Maybe Fission related. (DOMFissionEnabled=1)

Crash report: https://crash-stats.mozilla.org/report/index/eff0b013-0218-4afb-9aca-ca22c0210713

Reason: EXCEPTION_BREAKPOINT

Top 10 frames of crashing thread:

0 xul.dll mozilla::dom::ScriptLoadRequestList::AppendElement dom/script/ScriptLoadRequest.h:368
1 xul.dll mozilla::dom::ScriptElement::MaybeProcessScript dom/script/ScriptElement.cpp:119
2 xul.dll mozilla::dom::HTMLScriptElement::BindToTree dom/html/HTMLScriptElement.cpp:52
3 xul.dll nsINode::ReplaceOrInsertBefore dom/base/nsINode.cpp:2712
4 xul.dll mozilla::dom::Node_Binding::insertBefore dom/bindings/NodeBinding.cpp:929
5 xul.dll mozilla::dom::binding_detail::GenericMethod<mozilla::dom::binding_detail::NormalThisPolicy, mozilla::dom::binding_detail::ThrowExceptions> dom/bindings/BindingUtils.cpp:3297
6 xul.dll js::InternalCallOrConstruct js/src/vm/Interpreter.cpp:511
7 xul.dll Interpret js/src/vm/Interpreter.cpp:3226
8 xul.dll js::InternalCallOrConstruct js/src/vm/Interpreter.cpp:543
9 xul.dll js::jit::InvokeFromInterpreterStub js/src/jit/VMFunctions.cpp:784
Severity: -- → S2
Component: JavaScript Engine → DOM: Core & HTML

When a preload request is used, it might be being compiled off-thread.
Currently this is handled for defer and async requests in AddDeferRequest and
AddAsyncRequest but not for XSLT or other kinds of requests. The patch handles
this whenever we use a preload request.

I don't know for sure that this is what's causing the crash but it seems likely
given the assertion.

Depends on D120072

Assignee: nobody → jcoppeard
Status: NEW → ASSIGNED
Pushed by jcoppeard@mozilla.com:
https://hg.mozilla.org/integration/autoland/rev/fbb89c5b851b
Remove all preload requests from the off-thread compiling requests list when the preload request is used r=dpalmeiro

Relanding. It was a wrongful backout

Flags: needinfo?(jcoppeard)
Pushed by abutkovits@mozilla.com:
https://hg.mozilla.org/integration/autoland/rev/765b2ecc3cb9
Remove all preload requests from the off-thread compiling requests list when the preload request is used r=dpalmeiro
Status: ASSIGNED → RESOLVED
Closed: 3 years ago
Resolution: --- → FIXED
Target Milestone: --- → 92 Branch
Has Regression Range: --- → yes
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: