1746846 - Crash in [@ js::NewStringCopyN<T>]

Status: RESOLVED FIXED

(Core :: Networking: HTTP, defect)

Description

[Calixte Denizet (:calixte)]

Maybe Fission related. (DOMFissionEnabled=1)

Crash report: https://crash-stats.mozilla.org/report/index/6a4c26f5-d668-44ff-bbe4-3cb0f0211219

Reason: EXCEPTION_ACCESS_VIOLATION_READ

Top 10 frames of crashing thread:

0 xul.dll js::NewStringCopyN<js::CanGC, unsigned char> js/src/vm/StringType.cpp:1667
1 xul.dll mozilla::net::PACDnsResolve netwerk/base/ProxyAutoConfig.cpp:562
2 xul.dll Interpret js/src/vm/Interpreter.cpp:3243
3 xul.dll js::Call js/src/vm/Interpreter.cpp:552
4 xul.dll JS_CallFunctionName js/src/vm/CallAndConstruct.cpp:101
5 xul.dll mozilla::net::ProxyAutoConfig::GetProxyForURI netwerk/base/ProxyAutoConfig.cpp:932
6 xul.dll mozilla::net::ProxyAutoConfigChild::RecvGetProxyForURI netwerk/ipc/ProxyAutoConfigChild.cpp:183
7 xul.dll mozilla::net::PProxyAutoConfigChild::OnMessageReceived ipc/ipdl/PProxyAutoConfigChild.cpp:213
8 xul.dll mozilla::ipc::MessageChannel::DispatchMessage ipc/glue/MessageChannel.cpp:1968
9 xul.dll mozilla::ipc::MessageChannel::MessageTask::Run ipc/glue/MessageChannel.cpp:1855

There are 3 crashes (from 3 installations) in nightly 97 starting with buildid 20211218213109. In analyzing the backtrace, the regression may have been introduced by patch [1] to fix bug 1746300.

[1] https://hg.mozilla.org/mozilla-central/rev?node=3086ed65de58

Comment 1

[Kershaw Chang [:kershaw]]

This should be fixed by backing out bug 1745385.