Closed Bug 1747961 Opened 4 years ago Closed 3 years ago

Double-free crash in [@ je_free | nsBufferedInputStream::Close]

Categories

(Core :: XPCOM, defect)

Unspecified
Windows 10
defect

Tracking

()

RESOLVED WORKSFORME

People

(Reporter: jesup, Unassigned)

Details

(Keywords: crash)

Crash Data

Appears to have started in 94 (first crash was 94b9)

Crash report: https://crash-stats.mozilla.org/report/index/1480ebeb-71e7-45fa-bec8-b593d0211229

MOZ_CRASH Reason: MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?)

Top 10 frames of crashing thread:

0 mozglue.dll je_free memory/build/malloc_decls.h:54
1 xul.dll nsBufferedInputStream::Close netwerk/base/nsBufferedStreams.cpp:371
2 xul.dll nsMultiplexInputStream::Close xpcom/io/nsMultiplexInputStream.cpp:295
3 xul.dll nsAStreamCopier::Run xpcom/io/nsStreamUtils.cpp:418
4 xul.dll nsThreadPool::Run xpcom/threads/nsThreadPool.cpp:305
5 xul.dll nsThread::ProcessNextEvent xpcom/threads/nsThread.cpp:1169
6 xul.dll mozilla::ipc::MessagePumpForNonMainThreads::Run ipc/glue/MessagePump.cpp:300
7 xul.dll MessageLoop::RunHandler ipc/chromium/src/base/message_loop.cc:324
8 xul.dll MessageLoop::Run ipc/chromium/src/base/message_loop.cc:306
9 xul.dll static nsThread::ThreadFunc xpcom/threads/nsThread.cpp:391

Closing because no crashes reported for 12 weeks.

Status: NEW → RESOLVED
Closed: 3 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.