Closed Bug 1806718 Opened 2 years ago Closed 2 years ago

Crash in [@ nsContentUtils::EnsureAndLoadStringBundle]

Categories

(Core :: DOM: Service Workers, defect)

Unspecified
All
defect

Tracking

()

RESOLVED DUPLICATE of bug 1806064
Tracking Status
firefox-esr102 --- unaffected
firefox108 --- unaffected
firefox109 --- unaffected
firefox110 --- affected

People

(Reporter: cpeterson, Unassigned)

Details

(Keywords: crash, regression, regressionwindow-wanted)

This crash looks like a regression in 110.0a1. Android, Windows, macOS, and Linux are all affected, but 94% of the crash reports are from Android.

I'm marking this bug as a potential security issue because about 40% of the crash addresses are 0x00e5e5e5e5e5e655. The rest look like 0x0000000000000070 or 0x0000003800000071.

Crash report: https://crash-stats.mozilla.org/report/index/1be79436-c845-46ca-b039-97c7b0221220

Reason: SIGSEGV / SEGV_MAPERR

Top 10 frames of crashing thread:

0  libxul.so  nsContentUtils::EnsureAndLoadStringBundle  dom/base/nsContentUtils.cpp:4095
1  libxul.so  mozilla::dom::workerinternals::loader::ScriptLoaderRunnable::Run  dom/workers/ScriptLoader.cpp:1225
2  libxul.so  mozilla::RunnableTask::Run  xpcom/threads/TaskController.cpp:539
2  libxul.so  mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal  xpcom/threads/TaskController.cpp:852
2  libxul.so  mozilla::TaskController::ExecuteNextTaskOnlyMainThreadInternal  xpcom/threads/TaskController.cpp:684
2  libxul.so  mozilla::TaskController::ProcessPendingMTTask  xpcom/threads/TaskController.cpp:462
3  libxul.so  mozilla::TaskController::InitializeInternal const  xpcom/threads/TaskController.cpp:191
3  libxul.so  mozilla::detail::RunnableFunction<mozilla::TaskController::InitializeInternal  xpcom/threads/nsThreadUtils.h:546
4  libxul.so  nsThread::ProcessNextEvent  xpcom/threads/nsThread.cpp:1204
4  libxul.so  NS_ProcessNextEvent  xpcom/threads/nsThreadUtils.cpp:474

This bug is a dupe of bug 1806064.

The earliest crashing build ID is 20221215092759. Here's the pushlog for the day before, which points to worker bug 1247687:

https://hg.mozilla.org/integration/autoland/pushloghtml?fromchange=7c1415829dcee8814c161503d0f32a438fed118a&tochange=061ba69417ebfdcb275f01049f09a893004c5587

Status: NEW → RESOLVED
Closed: 2 years ago
Duplicate of bug: 1806064
Resolution: --- → DUPLICATE
Crash Signature: [@ nsContentUtils::EnsureAndLoadStringBundle]
Group: core-security
You need to log in before you can comment on or make changes to this bug.