1730651 - Crash in [@ nsCoreUtils::IsContentDocument]

Status: RESOLVED DUPLICATE of bug 1730541

(Core :: DOM: Navigation, defect)

Description

[Calixte Denizet (:calixte)]

Maybe Fission related. (DOMFissionEnabled=1)

Crash report: https://crash-stats.mozilla.org/report/index/dfcf9f33-18b9-45e7-b5b2-974190210914

Reason: EXCEPTION_ACCESS_VIOLATION_READ

Top 10 frames of crashing thread:

0 xul.dll static nsCoreUtils::IsContentDocument accessible/base/nsCoreUtils.cpp:363
1 xul.dll mozilla::a11y::DocManager::OnStateChange accessible/base/DocManager.cpp:249
2 xul.dll nsDocLoader::DoFireOnStateChange uriloader/base/nsDocLoader.cpp:1376
3 xul.dll nsDocLoader::doStopDocumentLoad uriloader/base/nsDocLoader.cpp:974
4 xul.dll nsDocLoader::DocLoaderIsEmpty uriloader/base/nsDocLoader.cpp:793
5 xul.dll nsDocLoader::OnStopRequest uriloader/base/nsDocLoader.cpp:676
6 xul.dll nsDocShell::OnStopRequest docshell/base/nsDocShell.cpp:13494
7 xul.dll mozilla::net::nsLoadGroup::NotifyRemovalObservers netwerk/base/nsLoadGroup.cpp:614
8 xul.dll mozilla::net::nsLoadGroup::RemoveRequest netwerk/base/nsLoadGroup.cpp:518
9 xul.dll imgRequestProxy::RemoveFromLoadGroup image/imgRequestProxy.cpp:371

There are 3 crashes (from 3 installations) in nightly 94 with buildid 20210913213224. In analyzing the backtrace, the regression may have been introduced by patch [1] to fix bug 1728413.

[1] https://hg.mozilla.org/mozilla-central/rev?node=0bf41da9f467

Comment 1

[Peter Van der Beken [:peterv]]

(In reply to Calixte Denizet (:calixte) from comment #0)

There are 3 crashes (from 3 installations) in nightly 94 with buildid 20210913213224. In analyzing the backtrace, the regression may have been introduced by patch [1] to fix bug 1728413.

That's most likely not the case, bug 1728413 didn't change the code in nsDocLoader::OnStopRequest.