Closed Bug 1743214 Opened 4 years ago Closed 4 years ago

ThreadSanitizer: data race [@ free] vs. [@ memcpy]

Categories

(Core :: DOM: File, defect)

Product:
Core
Component:
DOM: File
Type:
defect

Tracking

()

Status:
RESOLVED DUPLICATE of bug 1740797

People

(Reporter: tsmith, Unassigned)

References

(Blocks 2 open bugs)

Details

(Keywords: csectype-race, sec-high, testcase, Whiteboard: [bugmon:confirm])

Attachments

(1 file)

testcase.html
333 bytes, text/html
Details

Found while fuzzing m-c 20211124-77e540295ce5 (--enable-thread-sanitizer --enable-fuzzing)

WARNING: ThreadSanitizer: data race (pid=15934)
  Write of size 8 at 0x7fb623563000 by main thread (mutexes: write M196323350237494672):
    #0 free /builds/worker/fetches/llvm-project/llvm/projects/compiler-rt/lib/tsan/rtl/tsan_interceptors_posix.cpp:714:3 (firefox+0x5cb0a)
    #1 mozilla::dom::MemoryBlobImpl::DataOwner::~DataOwner() src/dom/file/MemoryBlobImpl.h:90:7 (libxul.so+0x3b62ffa)
    #2 Release src/dom/file/MemoryBlobImpl.h:67:5 (libxul.so+0x3b61233)
    #3 Release /builds/worker/workspace/obj-build/dist/include/mozilla/RefPtr.h:50:40 (libxul.so+0x3b61233)
    #4 Release /builds/worker/workspace/obj-build/dist/include/mozilla/RefPtr.h:381:36 (libxul.so+0x3b61233)
    #5 ~RefPtr /builds/worker/workspace/obj-build/dist/include/mozilla/RefPtr.h:81:7 (libxul.so+0x3b61233)
    #6 ~MemoryBlobImpl src/dom/file/MemoryBlobImpl.h:165:29 (libxul.so+0x3b61233)
    #7 mozilla::dom::MemoryBlobImpl::~MemoryBlobImpl() src/dom/file/MemoryBlobImpl.h:165:29 (libxul.so+0x3b61233)
    #8 Release src/dom/file/BlobImpl.cpp:97:1 (libxul.so+0x3b51047)
    #9 mozilla::dom::StreamBlobImpl::Release() src/dom/file/StreamBlobImpl.cpp:17:1 (libxul.so+0x3b51047)
    #10 Release /builds/worker/workspace/obj-build/dist/include/mozilla/RefPtr.h:50:40 (libxul.so+0x3b6182b)
    #11 Release /builds/worker/workspace/obj-build/dist/include/mozilla/RefPtr.h:381:36 (libxul.so+0x3b6182b)
    #12 ~RefPtr /builds/worker/workspace/obj-build/dist/include/mozilla/RefPtr.h:81:7 (libxul.so+0x3b6182b)
    #13 Destruct /builds/worker/workspace/obj-build/dist/include/nsTArray.h:642:45 (libxul.so+0x3b6182b)
    #14 DestructRange /builds/worker/workspace/obj-build/dist/include/nsTArray.h:2403:7 (libxul.so+0x3b6182b)
    #15 ClearAndRetainStorage /builds/worker/workspace/obj-build/dist/include/nsTArray.h:1479:5 (libxul.so+0x3b6182b)
    #16 ~nsTArray_Impl /builds/worker/workspace/obj-build/dist/include/nsTArray.h:1034:7 (libxul.so+0x3b6182b)
    #17 mozilla::dom::MultipartBlobImpl::~MultipartBlobImpl() src/dom/file/MultipartBlobImpl.h:94:32 (libxul.so+0x3b6182b)
    #18 mozilla::dom::MultipartBlobImpl::~MultipartBlobImpl() src/dom/file/MultipartBlobImpl.h:94:32 (libxul.so+0x3b618e5)
    #19 Release src/dom/file/BlobImpl.cpp:97:1 (libxul.so+0x3b51047)
    #20 mozilla::dom::StreamBlobImpl::Release() src/dom/file/StreamBlobImpl.cpp:17:1 (libxul.so+0x3b51047)
    #21 Release /builds/worker/workspace/obj-build/dist/include/mozilla/RefPtr.h:50:40 (libxul.so+0x27c289b)
    #22 Release /builds/worker/workspace/obj-build/dist/include/mozilla/RefPtr.h:381:36 (libxul.so+0x27c289b)
    #23 ~RefPtr /builds/worker/workspace/obj-build/dist/include/mozilla/RefPtr.h:81:7 (libxul.so+0x27c289b)
    #24 Destruct /builds/worker/workspace/obj-build/dist/include/nsTArray.h:642:45 (libxul.so+0x27c289b)
    #25 DestructRange /builds/worker/workspace/obj-build/dist/include/nsTArray.h:2403:7 (libxul.so+0x27c289b)
    #26 ClearAndRetainStorage /builds/worker/workspace/obj-build/dist/include/nsTArray.h:1479:5 (libxul.so+0x27c289b)
    #27 ~nsTArray_Impl /builds/worker/workspace/obj-build/dist/include/nsTArray.h:1034:7 (libxul.so+0x27c289b)
    #28 mozilla::dom::StructuredCloneHolder::~StructuredCloneHolder() src/dom/base/StructuredCloneHolder.cpp:341:1 (libxul.so+0x27c289b)
    #29 mozilla::dom::ipc::StructuredCloneData::~StructuredCloneData() src/dom/ipc/StructuredCloneData.cpp:58:43 (libxul.so+0x47d7186)
    #30 ~nsStructuredCloneContainer src/dom/base/nsStructuredCloneContainer.cpp:44:57 (libxul.so+0x2877423)
    #31 nsStructuredCloneContainer::Release() src/dom/base/nsStructuredCloneContainer.cpp:33:1 (libxul.so+0x2877423)
    #32 ~nsCOMPtr_base /builds/worker/workspace/obj-build/dist/include/nsCOMPtr.h:328:7 (libxul.so+0x26a5bad)
    #33 mozilla::dom::Document::~Document() src/dom/base/Document.cpp:2284:1 (libxul.so+0x26a5bad)
    #34 ~nsHTMLDocument src/dom/html/nsHTMLDocument.cpp:138:33 (libxul.so+0x3cce285)
    #35 mozilla::dom::XMLDocument::~XMLDocument() src/dom/html/nsHTMLDocument.cpp:138:33 (libxul.so+0x3cce285)
    #36 mozilla::MediaDecoderStateMachine::AccurateSeekingState::HandleVideoCanceled() /builds/worker/workspace/obj-build/ipc/ipdl/_ipdlheaders/mozilla/net/PHttpChannelParent.h:251:33 (libxul.so+0x1576e61)
    #37 mozilla::dom::Document::cycleCollection::DeleteCycleCollectable(void*) src/dom/base/Document.h:597:3 (libxul.so+0x2724af1)
    #38 MaybeKillObject src/xpcom/base/nsCycleCollector.cpp:2419:29 (libxul.so+0xe2cf84)
    #39 SnowWhiteKiller::Visit(nsPurpleBuffer&, nsPurpleBufferEntry*) src/xpcom/base/nsCycleCollector.cpp:2444:9 (libxul.so+0xe2cf84)
    #40 void nsPurpleBuffer::VisitEntries<SnowWhiteKiller>(SnowWhiteKiller&) src/xpcom/base/nsCycleCollector.cpp:939:23 (libxul.so+0xe1e481)
    #41 nsCycleCollector::FreeSnowWhiteWithBudget(js::SliceBudget&) src/xpcom/base/nsCycleCollector.cpp:2612:14 (libxul.so+0xe1ef96)
    #42 nsCycleCollector_doDeferredDeletionWithBudget(js::SliceBudget&) src/xpcom/base/nsCycleCollector.cpp:3888:28 (libxul.so+0xe24888)
    #43 AsyncFreeSnowWhite::Run() src/js/xpconnect/src/XPCJSRuntime.cpp:149:9 (libxul.so+0x1d9e689)
    #44 IdleRunnableWrapper::Run() src/xpcom/threads/nsThreadUtils.cpp:311:22 (libxul.so+0xf06244)
    #45 mozilla::RunnableTask::Run() src/xpcom/threads/TaskController.cpp:468:16 (libxul.so+0xf07147)
    #46 mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&) src/xpcom/threads/TaskController.cpp:771:26 (libxul.so+0xee434d)
    #47 mozilla::TaskController::ExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&) src/xpcom/threads/TaskController.cpp:649:15 (libxul.so+0xee2bc8)
    #48 mozilla::TaskController::ProcessPendingMTTask(bool) src/xpcom/threads/TaskController.cpp:391:36 (libxul.so+0xee2d02)
    #49 operator() src/xpcom/threads/TaskController.cpp:124:37 (libxul.so+0xf0aa97)
    #50 mozilla::detail::RunnableFunction<mozilla::TaskController::InitializeInternal()::$_0>::Run() src/xpcom/threads/nsThreadUtils.h:531:5 (libxul.so+0xf0aa97)
    #51 nsThread::ProcessNextEvent(bool, bool*) src/xpcom/threads/nsThread.cpp:1183:16 (libxul.so+0xef67b3)
    #52 NS_ProcessNextEvent(nsIThread*, bool) src/xpcom/threads/nsThreadUtils.cpp:467:10 (libxul.so+0xefd412)
    #53 mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) src/ipc/glue/MessagePump.cpp:85:21 (libxul.so+0x1818bdd)
    #54 mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*) src/ipc/glue/MessagePump.cpp:268:30 (libxul.so+0x18193db)
    #55 RunInternal src/ipc/chromium/src/base/message_loop.cc:331:10 (libxul.so+0x179b03c)
    #56 RunHandler src/ipc/chromium/src/base/message_loop.cc:324:3 (libxul.so+0x179b03c)
    #57 MessageLoop::Run() src/ipc/chromium/src/base/message_loop.cc:306:3 (libxul.so+0x179b03c)
    #58 nsBaseAppShell::Run() src/widget/nsBaseAppShell.cpp:137:27 (libxul.so+0x4bddaa6)
    #59 XRE_RunAppShell() src/toolkit/xre/nsEmbedFunctions.cpp:864:20 (libxul.so+0x6ac2269)
    #60 mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*) src/ipc/glue/MessagePump.cpp:235:9 (libxul.so+0x181938d)
    #61 RunInternal src/ipc/chromium/src/base/message_loop.cc:331:10 (libxul.so+0x179b03c)
    #62 RunHandler src/ipc/chromium/src/base/message_loop.cc:324:3 (libxul.so+0x179b03c)
    #63 MessageLoop::Run() src/ipc/chromium/src/base/message_loop.cc:306:3 (libxul.so+0x179b03c)
    #64 XRE_InitChildProcess(int, char**, XREChildData const*) src/toolkit/xre/nsEmbedFunctions.cpp:701:34 (libxul.so+0x6ac1f69)
    #65 mozilla::BootstrapImpl::XRE_InitChildProcess(int, char**, XREChildData const*) src/toolkit/xre/Bootstrap.cpp:67:12 (libxul.so+0x6ac9da2)
    #66 content_process_main src/browser/app/../../ipc/contentproc/plugin-container.cpp:57:28 (firefox+0xce4a8)
    #67 main src/browser/app/nsBrowserApp.cpp:327:18 (firefox+0xce4a8)

  Previous read of size 8 at 0x7fb623563000 by thread T72:
    #0 memcpy /builds/worker/fetches/llvm-project/llvm/projects/compiler-rt/lib/tsan/../sanitizer_common/sanitizer_common_interceptors.inc:827:5 (firefox+0x677a0)
    #1 memcpy /builds/worker/fetches/sysroot-x86_64-linux-gnu/usr/include/x86_64-linux-gnu/bits/string3.h:51:10 (libxul.so+0xea81b2)
    #2 nsReadFromRawBuffer(nsIOutputStream*, void*, char*, unsigned int, unsigned int, unsigned int*) src/xpcom/io/nsPipe3.cpp:1726:3 (libxul.so+0xea81b2)
    #3 nsPipeOutputStream::WriteSegments(nsresult (*)(nsIOutputStream*, void*, char*, unsigned int, unsigned int, unsigned int*), void*, unsigned int, unsigned int*) src/xpcom/io/nsPipe3.cpp:1695:12 (libxul.so+0xea7f21)
    #4 nsPipeOutputStream::Write(char const*, unsigned int, unsigned int*) src/xpcom/io/nsPipe3.cpp:1734:10 (libxul.so+0xea8161)
    #5 nsStreamCopierIB::ConsumeInputBuffer(nsIInputStream*, void*, char const*, unsigned int, unsigned int, unsigned int*) src/xpcom/io/nsStreamUtils.cpp:501:33 (libxul.so+0xeb4603)
    #6 nsStringInputStream::ReadSegments(nsresult (*)(nsIInputStream*, void*, char const*, unsigned int, unsigned int, unsigned int*), void*, unsigned int, unsigned int*) src/xpcom/io/nsStringStream.cpp:316:17 (libxul.so+0xeb02e8)
    #7 nsStreamCopierIB::DoCopy(nsresult*, nsresult*) src/xpcom/io/nsStreamUtils.cpp:519:18 (libxul.so+0xeb41ee)
    #8 nsAStreamCopier::Process() src/xpcom/io/nsStreamUtils.cpp:302:22 (libxul.so+0xeb497b)
    #9 Run src/xpcom/io/nsStreamUtils.cpp:418:5 (libxul.so+0xeb2a01)
    #10 non-virtual thunk to nsAStreamCopier::Run() src/xpcom/io/nsStreamUtils.cpp (libxul.so+0xeb2a01)
    #11 nsThreadPool::Run() src/xpcom/threads/nsThreadPool.cpp:305:14 (libxul.so+0xeffa3d)
    #12 nsThread::ProcessNextEvent(bool, bool*) src/xpcom/threads/nsThread.cpp:1177:16 (libxul.so+0xef69d3)
    #13 NS_ProcessNextEvent(nsIThread*, bool) src/xpcom/threads/nsThreadUtils.cpp:467:10 (libxul.so+0xefd412)
    #14 mozilla::ipc::MessagePumpForNonMainThreads::Run(base::MessagePump::Delegate*) src/ipc/glue/MessagePump.cpp:300:20 (libxul.so+0x18194ce)
    #15 RunInternal src/ipc/chromium/src/base/message_loop.cc:331:10 (libxul.so+0x179b03c)
    #16 RunHandler src/ipc/chromium/src/base/message_loop.cc:324:3 (libxul.so+0x179b03c)
    #17 MessageLoop::Run() src/ipc/chromium/src/base/message_loop.cc:306:3 (libxul.so+0x179b03c)
    #18 nsThread::ThreadFunc(void*) src/xpcom/threads/nsThread.cpp:391:10 (libxul.so+0xef2ab5)
    #19 _pt_root src/nsprpub/pr/src/pthreads/ptthread.c:201:5 (libnspr4.so+0x4407d)

  Mutex M196323350237494672 is already destroyed.

  Thread T72 'StreamTrans #3' (tid=18533, running) created by main thread at:
    #0 pthread_create /builds/worker/fetches/llvm-project/llvm/projects/compiler-rt/lib/tsan/rtl/tsan_interceptors_posix.cpp:977:3 (firefox+0x5dbed)
    #1 _PR_CreateThread src/nsprpub/pr/src/pthreads/ptthread.c:458:14 (libnspr4.so+0x3b295)
    #2 PR_CreateThread src/nsprpub/pr/src/pthreads/ptthread.c:533:12 (libnspr4.so+0x2fe55)
    #3 nsThread::Init(nsTSubstring<char> const&) src/xpcom/threads/nsThread.cpp:615:18 (libxul.so+0xef4115)
    #4 nsThreadManager::NewNamedThread(nsTSubstring<char> const&, unsigned int, nsIThread**) src/xpcom/threads/nsThreadManager.cpp:581:12 (libxul.so+0xefc588)
    #5 NS_NewNamedThread(nsTSubstring<char> const&, nsIThread**, already_AddRefed<nsIRunnable>, unsigned int) src/xpcom/threads/nsThreadUtils.cpp:163:57 (libxul.so+0xf033e4)
    #6 NS_NewNamedThread src/xpcom/threads/nsThreadUtils.cpp:155:10 (libxul.so+0xefeedc)
    #7 nsThreadPool::PutEvent(already_AddRefed<nsIRunnable>, unsigned int) src/xpcom/threads/nsThreadPool.cpp:120:17 (libxul.so+0xefeedc)
    #8 nsThreadPool::Dispatch(already_AddRefed<nsIRunnable>, unsigned int) src/xpcom/threads/nsThreadPool.cpp:357:5 (libxul.so+0xf003c7)
    #9 non-virtual thunk to nsThreadPool::Dispatch(already_AddRefed<nsIRunnable>, unsigned int) src/xpcom/threads/nsThreadPool.cpp (libxul.so+0xf00ae8)
    #10 mozilla::net::nsStreamTransportService::Dispatch(already_AddRefed<nsIRunnable>, unsigned int) src/netwerk/base/nsStreamTransportService.cpp:308:16 (libxul.so+0x1105e56)
    #11 non-virtual thunk to mozilla::net::nsStreamTransportService::Dispatch(already_AddRefed<nsIRunnable>, unsigned int) src/netwerk/base/nsStreamTransportService.cpp (libxul.so+0x1105f18)
    #12 mozilla::NonBlockingAsyncInputStream::AsyncWait(nsIInputStreamCallback*, unsigned int, unsigned int, nsIEventTarget*) src/xpcom/io/NonBlockingAsyncInputStream.cpp:316:26 (libxul.so+0xe8203d)
    #13 nsInputStreamPump::EnsureWaiting() src/netwerk/base/nsInputStreamPump.cpp:110:33 (libxul.so+0x1098c73)
    #14 nsInputStreamPump::OnInputStreamReady(nsIAsyncInputStream*) src/netwerk/base/nsInputStreamPump.cpp:426:21 (libxul.so+0x1099d16)
    #15 non-virtual thunk to nsInputStreamPump::OnInputStreamReady(nsIAsyncInputStream*) src/netwerk/base/nsInputStreamPump.cpp (libxul.so+0x109af29)
    #16 RunAsyncWaitCallback src/xpcom/io/NonBlockingAsyncInputStream.cpp:397:13 (libxul.so+0xe8177c)
    #17 mozilla::NonBlockingAsyncInputStream::AsyncWaitRunnable::Run() src/xpcom/io/NonBlockingAsyncInputStream.cpp:33:14 (libxul.so+0xe8177c)
    #18 mozilla::SchedulerGroup::Runnable::Run() src/xpcom/threads/SchedulerGroup.cpp:144:20 (libxul.so+0xedbb5f)
    #19 mozilla::RunnableTask::Run() src/xpcom/threads/TaskController.cpp:468:16 (libxul.so+0xf07147)
    #20 mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&) src/xpcom/threads/TaskController.cpp:771:26 (libxul.so+0xee434d)
    #21 mozilla::TaskController::ExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&) src/xpcom/threads/TaskController.cpp:607:15 (libxul.so+0xee2a26)
    #22 mozilla::TaskController::ProcessPendingMTTask(bool) src/xpcom/threads/TaskController.cpp:391:36 (libxul.so+0xee2d02)
    #23 operator() src/xpcom/threads/TaskController.cpp:124:37 (libxul.so+0xf0aa97)
    #24 mozilla::detail::RunnableFunction<mozilla::TaskController::InitializeInternal()::$_0>::Run() src/xpcom/threads/nsThreadUtils.h:531:5 (libxul.so+0xf0aa97)
    #25 nsThread::ProcessNextEvent(bool, bool*) src/xpcom/threads/nsThread.cpp:1183:16 (libxul.so+0xef67b3)
    #26 NS_ProcessNextEvent(nsIThread*, bool) src/xpcom/threads/nsThreadUtils.cpp:467:10 (libxul.so+0xefd412)
    #27 mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) src/ipc/glue/MessagePump.cpp:85:21 (libxul.so+0x1818bdd)
    #28 mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*) src/ipc/glue/MessagePump.cpp:268:30 (libxul.so+0x18193db)
    #29 RunInternal src/ipc/chromium/src/base/message_loop.cc:331:10 (libxul.so+0x179b03c)
    #30 RunHandler src/ipc/chromium/src/base/message_loop.cc:324:3 (libxul.so+0x179b03c)
    #31 MessageLoop::Run() src/ipc/chromium/src/base/message_loop.cc:306:3 (libxul.so+0x179b03c)
    #32 nsBaseAppShell::Run() src/widget/nsBaseAppShell.cpp:137:27 (libxul.so+0x4bddaa6)
    #33 XRE_RunAppShell() src/toolkit/xre/nsEmbedFunctions.cpp:864:20 (libxul.so+0x6ac2269)
    #34 mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*) src/ipc/glue/MessagePump.cpp:235:9 (libxul.so+0x181938d)
    #35 RunInternal src/ipc/chromium/src/base/message_loop.cc:331:10 (libxul.so+0x179b03c)
    #36 RunHandler src/ipc/chromium/src/base/message_loop.cc:324:3 (libxul.so+0x179b03c)
    #37 MessageLoop::Run() src/ipc/chromium/src/base/message_loop.cc:306:3 (libxul.so+0x179b03c)
    #38 XRE_InitChildProcess(int, char**, XREChildData const*) src/toolkit/xre/nsEmbedFunctions.cpp:701:34 (libxul.so+0x6ac1f69)
    #39 mozilla::BootstrapImpl::XRE_InitChildProcess(int, char**, XREChildData const*) src/toolkit/xre/Bootstrap.cpp:67:12 (libxul.so+0x6ac9da2)
    #40 content_process_main src/browser/app/../../ipc/contentproc/plugin-container.cpp:57:28 (firefox+0xce4a8)
    #41 main src/browser/app/nsBrowserApp.cpp:327:18 (firefox+0xce4a8)

Is there a testcase for this?

Severity: -- → S2
Flags: needinfo?(twsmith)
Attached file testcase.html —
Flags: needinfo?(twsmith)
Flags: in-testsuite?
Keywords: bugmon, testcase

The stacks look very similar to bug 1740797. Maybe this is the same issue manifesting in a slightly different way (TSan vs ASan)?

Component: DOM: Core & HTML → DOM: File
See Also: → 1740797

Tyson, could you verify that this is a dupe of bug 1740797? It can wait until after that lands. Thanks.

Also, I noticed there are some large-ish arguments being passed into the array constructors. Was this something that is getting fuzzed now only because bug 1707642 got fixed?

Nika said that the way some of this code (serialization?) works changes with bigger values (>32kb maybe?) so it makes sense that larger values would expose some issues, and the code might not be very well tested with larger values. She was thinking maybe we could have a chaos mode that uses it more aggressively. I was thinking maybe a pref or something could work for fuzzing but maybe that would be weird.

Flags: needinfo?(twsmith)

(In reply to Andrew McCreight [:mccr8] from comment #4)

Tyson, could you verify that this is a dupe of bug 1740797? It can wait until after that lands. Thanks.

Of course!

Also, I noticed there are some large-ish arguments being passed into the array constructors. Was this something that is getting fuzzed now only because bug 1707642 got fixed?

Yes it is.

Nika said that the way some of this code (serialization?) works changes with bigger values (>32kb maybe?) so it makes sense that larger values would expose some issues, and the code might not be very well tested with larger values. She was thinking maybe we could have a chaos mode that uses it more aggressively. I was thinking maybe a pref or something could work for fuzzing but maybe that would be weird.

Is this needed now that the fuzzers are using large values again? My worry here would be reproducibility if a pref, etc.. is required. I am open to the idea, we could have it randomly toggled in PrefPicker if we add a pref.

Depends on: 1740797
Keywords: sec-high
Whiteboard: might be fixed by bug 1740797, but leave open until we can test

Let's see now that bug 1740797 is fixed.

Whiteboard: might be fixed by bug 1740797, but leave open until we can test → [bugmon:confirm]

Bugmon Analysis
Unable to reproduce bug 1743214 using build mozilla-central 20211124035313-77e540295ce5. Without a baseline, bugmon is unable to analyze this bug.
Removing bugmon keyword as no further action possible. Please review the bug and re-add the keyword for further analysis.

Keywords: bugmon

It seems, bug bug 1740797 fixed this, too. Should we just close this as duplicate?

Flags: needinfo?(twsmith) → needinfo?(dveditz)

We should confirm that it is a duplicate. The build used in comment 7 is from November 24, before the patch in bug 1740797 landed.

Flags: needinfo?(dveditz) → needinfo?(twsmith)

Verified with m-c 20211208-72b6de9deab7.

Status: NEW → RESOLVED
Closed: 4 years ago
Flags: needinfo?(twsmith)
Resolution: --- → DUPLICATE

Thanks Tyson.

Group: dom-core-security
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: