Closed Bug 1816025 Opened 2 years ago Closed 2 years ago

Crash in [@ mozilla::dom::BrowsingContextGroup::EnsureHostProcess::<T>::operator()]

Categories

(Core :: DOM: Navigation, defect)

Product:
Core
Component:
DOM: Navigation
Platform:
x86
Windows 7
Type:
defect

Tracking

()

Status:
RESOLVED FIXED
Milestone:
112 Branch
Tracking Flags:
Tracking Status
firefox-esr102 --- unaffected
firefox110 --- unaffected
firefox111 --- disabled
firefox112 --- fixed

People

(Reporter: mccr8, Assigned: jstutte)

References

(Regression)

Details

(Keywords: crash, regression, topcrash)

Crash Data

Attachments

(1 file)

Bug 1816025 - Downgrade diagnostic assertion in BrowsingContextGroup::EnsureHostProcess. r?smaug
48 bytes, text/x-phabricator-request
Details | Review

Crash report: https://crash-stats.mozilla.org/report/index/2e46a164-6d0e-4fab-9df7-135560230209

MOZ_CRASH Reason: MOZ_DIAGNOSTIC_ASSERT(entry.Data() == aProcess) (There's already another host process for this remote type)

Top 10 frames of crashing thread:

0  xul.dll  mozilla::dom::BrowsingContextGroup::EnsureHostProcess::<lambda_28>::operator const  docshell/base/BrowsingContextGroup.cpp:143
0  xul.dll  nsBaseHashtable<nsCStringHashKey, RefPtr<mozilla::dom::ContentParent>, mozilla::dom::ContentParent*, nsDefaultConverter<RefPtr<mozilla::dom::ContentParent>, mozilla::dom::ContentParent*> >::WithEntryHandle<`lambda at /builds/worker/checkouts/gecko/docshell/base/BrowsingContextGroup.cpp:141:57'>::<lambda_1>::operator const  xpcom/ds/nsBaseHashtable.h:836
0  xul.dll  nsTHashtable<nsBaseHashtableET<nsCStringHashKey, RefPtr<mozilla::dom::ContentParent> > >::WithEntryHandle<`lambda at /builds/worker/workspace/obj-build/dist/include/nsBaseHashtable.h:835:15'>::<lambda_1>::operator const  xpcom/ds/nsTHashtable.h:437
0  xul.dll  PLDHashTable::WithEntryHandle<`lambda at /builds/worker/workspace/obj-build/dist/include/nsTHashtable.h:436:9'>  xpcom/ds/PLDHashTable.h:603
1  xul.dll  nsTHashtable<nsBaseHashtableET<nsCStringHashKey, RefPtr<mozilla::dom::ContentParent> > >::WithEntryHandle  xpcom/ds/nsTHashtable.h:434
1  xul.dll  nsBaseHashtable<nsCStringHashKey, RefPtr<mozilla::dom::ContentParent>, mozilla::dom::ContentParent*, nsDefaultConverter<RefPtr<mozilla::dom::ContentParent>, mozilla::dom::ContentParent*> >::WithEntryHandle  xpcom/ds/nsBaseHashtable.h:834
1  xul.dll  mozilla::dom::BrowsingContextGroup::EnsureHostProcess  docshell/base/BrowsingContextGroup.cpp:140
2  xul.dll  mozilla::dom::ContentParent::GetNewOrUsedLaunchingBrowserProcess  dom/ipc/ContentParent.cpp:1115
3  xul.dll  mozilla::dom::CanonicalBrowsingContext::ChangeRemoteness  docshell/base/CanonicalBrowsingContext.cpp:2072
4  xul.dll  mozilla::net::DocumentLoadListener::TriggerProcessSwitch  netwerk/ipc/DocumentLoadListener.cpp:1976

Another signature with the same crash reason: bp-7f25c9d3-64fe-4391-8be5-43e1c0230209

Looks new in 111, as of a few days ago.

Crash Signature: [@ mozilla::dom::BrowsingContextGroup::EnsureHostProcess::<T>::operator()] → [@ mozilla::dom::BrowsingContextGroup::EnsureHostProcess::<T>::operator()] [@ mozilla::dom::BrowsingContextGroup::EnsureHostProcess::$::operator()<T> ]
status-firefox111: --- → affected
Keywords: regression

I guess there was at least one crash like this in December, so maybe this is an older issue that we just had a weird cluster of recently. bp-0d86de3f-2f35-4efa-bcb9-dcb440230103

This bug has been marked as a regression. Setting status flag for Nightly to affected.

status-firefox112: --- → affected

Oh, this is a common one now. My guess is some of the recent shutdown patches have changed behavior here, but I've lost track on those changes.
(I think jstutte should be back tomorrow)

Flags: needinfo?(jstutte)
Flags: needinfo?(jstutte)
Regressed by: 1814603
Depends on: 1815480

As bug 1811746 comment 3 assumed, after the paper over check from bug 1814603 we can now try to create a new host process when we shouldn't. Or maybe actually we should but just throw away the reference to the (presumably already dying) old process earlier?

Set release status flags based on info from the regressing bug 1814603

status-firefox110: --- → unaffected
status-firefox-esr102: --- → unaffected

:jstutte can you give us an update on this from comment 5 or if it can be assigned for investigation?

Flags: needinfo?(jstutte)

(In reply to Donal Meehan [:dmeehan] from comment #7)

:jstutte can you give us an update on this from comment 5 or if it can be assigned for investigation?

It depends on bug 1815480 (which still needs an assignee, too, but has a ni? to follow up).

Flags: needinfo?(jstutte)

The bug is linked to a topcrash signature, which matches the following criterion:

  • Top 5 desktop browser crashes on Mac on beta

:farre, could you consider increasing the severity of this top-crash bug?

For more information, please visit auto_nag documentation.

Flags: needinfo?(afarre)
Keywords: topcrash
Severity: -- → S2
Flags: needinfo?(afarre)
Duplicate of this bug: 1818642

Copying crash signatures from duplicate bugs.

Crash Signature: [@ mozilla::dom::BrowsingContextGroup::EnsureHostProcess::<T>::operator()] [@ mozilla::dom::BrowsingContextGroup::EnsureHostProcess::$::operator()<T> ] → [@ mozilla::dom::BrowsingContextGroup::EnsureHostProcess::<T>::operator()] [@ mozilla::dom::BrowsingContextGroup::EnsureHostProcess::$::operator()<T> ] [@ mozilla::dom::BrowsingContextGroup::EnsureHostProcess]

Hey Jens, what's the status here? it looks like the linked bug (bug 1815480) isn't currently assigned to anyone and has been drifting for a bit.

What do you think the timeline might be for a fix here?

Crash Signature: [@ mozilla::dom::BrowsingContextGroup::EnsureHostProcess::<T>::operator()] [@ mozilla::dom::BrowsingContextGroup::EnsureHostProcess::$::operator()<T> ] [@ mozilla::dom::BrowsingContextGroup::EnsureHostProcess] → [@ mozilla::dom::BrowsingContextGroup::EnsureHostProcess::<T>::operator()] [@ mozilla::dom::BrowsingContextGroup::EnsureHostProcess::$::operator()<T> ] [@ mozilla::dom::BrowsingContextGroup::EnsureHostProcess]
Flags: needinfo?(jstutte)
Assignee: nobody → jstutte
Status: NEW → ASSIGNED

(In reply to Jared Hirsch [:jhirsch] (he/him) (Needinfo please) from comment #12)

Hey Jens, what's the status here? it looks like the linked bug (bug 1815480) isn't currently assigned to anyone and has been drifting for a bit.

What do you think the timeline might be for a fix here?

We think we can get away with a small change here for now and will get to bug 1815480 later.

No longer depends on: 1815480
Flags: needinfo?(jstutte)
See Also: → 1815480
Pushed by jstutte@mozilla.com: https://hg.mozilla.org/integration/autoland/rev/6b47f8d493b3 Downgrade diagnostic assertion in BrowsingContextGroup::EnsureHostProcess. r=smaug

Backed out for causing high frequency assertion failures.

[task 2023-03-02T16:46:44.434Z] 16:46:44     INFO - PID 21681 | Assertion failure: !HasEntry(), at /builds/worker/workspace/obj-build/dist/include/nsTHashtable.h:414
[task 2023-03-02T16:46:44.436Z] 16:46:44     INFO - PID 21681 | #01: ???[/builds/worker/workspace/build/application/firefox/libxul.so +0x1820f366]
[task 2023-03-02T16:46:44.446Z] 16:46:44     INFO - PID 21681 | #02: ???[/builds/worker/workspace/build/application/firefox/libxul.so +0x1809a933]
[task 2023-03-02T16:46:44.446Z] 16:46:44     INFO - PID 21681 | #03: ???[/builds/worker/workspace/build/application/firefox/libxul.so +0x18099d7d]
[task 2023-03-02T16:46:44.446Z] 16:46:44     INFO - PID 21681 | #04: ???[/builds/worker/workspace/build/application/firefox/libxul.so +0x1352e9f6]
[task 2023-03-02T16:46:44.446Z] 16:46:44     INFO - PID 21681 | #05: ???[/builds/worker/workspace/build/application/firefox/libxul.so +0x13794211]
[task 2023-03-02T16:46:44.446Z] 16:46:44     INFO - PID 21681 | #06: ???[/builds/worker/workspace/build/application/firefox/libxul.so +0xd484ca0]
[task 2023-03-02T16:46:44.446Z] 16:46:44     INFO - PID 21681 | #07: ???[/builds/worker/workspace/build/application/firefox/libxul.so +0xd4826a6]
[task 2023-03-02T16:46:44.446Z] 16:46:44     INFO - PID 21681 | #08: ???[/builds/worker/workspace/build/application/firefox/libxul.so +0xd483002]
[task 2023-03-02T16:46:44.446Z] 16:46:44     INFO - PID 21681 | #09: ???[/builds/worker/workspace/build/application/firefox/libxul.so +0xd483d6f]
[task 2023-03-02T16:46:44.446Z] 16:46:44     INFO - PID 21681 | #10: ???[/builds/worker/workspace/build/application/firefox/libxul.so +0xbdcd2da]
[task 2023-03-02T16:46:44.446Z] 16:46:44     INFO - PID 21681 | #11: ???[/builds/worker/workspace/build/application/firefox/libxul.so +0xbdc33ed]
[task 2023-03-02T16:46:44.446Z] 16:46:44     INFO - PID 21681 | #12: ???[/builds/worker/workspace/build/application/firefox/libxul.so +0xbdc0669]
[task 2023-03-02T16:46:44.446Z] 16:46:44     INFO - PID 21681 | #13: ???[/builds/worker/workspace/build/application/firefox/libxul.so +0xbdc0d91]
[task 2023-03-02T16:46:44.446Z] 16:46:44     INFO - PID 21681 | #14: ???[/builds/worker/workspace/build/application/firefox/libxul.so +0xbdd37b2]
[task 2023-03-02T16:46:44.446Z] 16:46:44     INFO - PID 21681 | #15: ???[/builds/worker/workspace/build/application/firefox/libxul.so +0xbdf805f]
[task 2023-03-02T16:46:44.446Z] 16:46:44     INFO - PID 21681 | #16: ???[/builds/worker/workspace/build/application/firefox/libxul.so +0xbe025d5]
[task 2023-03-02T16:46:44.447Z] 16:46:44     INFO - PID 21681 | #17: ???[/builds/worker/workspace/build/application/firefox/libxul.so +0xd48afc9]
[task 2023-03-02T16:46:44.447Z] 16:46:44     INFO - PID 21681 | #18: ???[/builds/worker/workspace/build/application/firefox/libxul.so +0xd326388]
[task 2023-03-02T16:46:44.447Z] 16:46:44     INFO - PID 21681 | #19: ???[/builds/worker/workspace/build/application/firefox/libxul.so +0x1430ebba]
[task 2023-03-02T16:46:44.447Z] 16:46:44     INFO - PID 21681 | #20: ???[/builds/worker/workspace/build/application/firefox/libxul.so +0x18de042c]
[task 2023-03-02T16:46:44.447Z] 16:46:44     INFO - PID 21681 | #21: ???[/builds/worker/workspace/build/application/firefox/libxul.so +0x190409fc]
[task 2023-03-02T16:46:44.447Z] 16:46:44     INFO - PID 21681 | #22: ???[/builds/worker/workspace/build/application/firefox/libxul.so +0x1904256a]
[task 2023-03-02T16:46:44.447Z] 16:46:44     INFO - PID 21681 | #23: ???[/builds/worker/workspace/build/application/firefox/libxul.so +0x190432fc]
[task 2023-03-02T16:46:44.447Z] 16:46:44     INFO - PID 21681 | #24: ???[/builds/worker/workspace/build/application/firefox/firefox +0x1c834f]
[task 2023-03-02T16:46:44.447Z] 16:46:44     INFO - PID 21681 | #25: __libc_start_main[/lib/x86_64-linux-gnu/libc.so.6 +0x21b97]
[task 2023-03-02T16:46:44.447Z] 16:46:44     INFO - PID 21681 | #26: ???[/builds/worker/workspace/build/application/firefox/firefox +0x106369]
[task 2023-03-02T16:46:44.447Z] 16:46:44     INFO - PID 21681 | #27: ??? (???:???)
[task 2023-03-02T16:46:44.448Z] 16:46:44     INFO - PID 21681 | AddressSanitizer:DEADLYSIGNAL
[task 2023-03-02T16:46:44.448Z] 16:46:44     INFO - PID 21681 | =================================================================
[task 2023-03-02T16:46:44.449Z] 16:46:44    ERROR - PID 21681 | ==21681==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000001 (pc 0x7f818b276393 bp 0x7fff681f6670 sp 0x7fff681f65c0 T0)
[task 2023-03-02T16:46:44.450Z] 16:46:44     INFO - PID 21681 | ==21681==The signal is caused by a WRITE memory access.
[task 2023-03-02T16:46:44.450Z] 16:46:44     INFO - PID 21681 | ==21681==Hint: address points to the zero page.
[task 2023-03-02T16:46:45.118Z] 16:46:45     INFO - PID 21600 | -----------------------------------------------------
[task 2023-03-02T16:46:45.118Z] 16:46:45     INFO - PID 21600 | Suppressions used:
[task 2023-03-02T16:46:45.118Z] 16:46:45     INFO - PID 21600 |   count      bytes template
[task 2023-03-02T16:46:45.118Z] 16:46:45     INFO - PID 21600 |       1         32 nsComponentManagerImpl
[task 2023-03-02T16:46:45.119Z] 16:46:45     INFO - PID 21600 |     633      18115 libfontconfig.so
[task 2023-03-02T16:46:45.119Z] 16:46:45     INFO - PID 21600 |       2      16393 libglib-2.0.so
[task 2023-03-02T16:46:45.119Z] 16:46:45     INFO - PID 21600 |       1         32 XPCWrappedNativeJSOps
[task 2023-03-02T16:46:45.119Z] 16:46:45     INFO - PID 21600 | -----------------------------------------------------
[task 2023-03-02T16:46:45.202Z] 16:46:45     INFO - Browser exited with return code 0
[task 2023-03-02T16:46:45.203Z] 16:46:45     INFO - Closing logging queue
[task 2023-03-02T16:46:45.203Z] 16:46:45     INFO - queue closed
[task 2023-03-02T16:46:45.219Z] 16:46:45     INFO - INFO | runtests.py | ASan using symbolizer at /builds/worker/workspace/build/application/firefox/llvm-symbolizer
[task 2023-03-02T16:46:45.239Z] 16:46:45     INFO - LSan enabled.
[task 2023-03-02T16:46:45.239Z] 16:46:45     INFO - INFO | runtests.py | ASan running in default memory configuration
[task 2023-03-02T16:46:45.239Z] 16:46:45     INFO - UBSan enabled.
[task 2023-03-02T16:46:45.239Z] 16:46:45     INFO - Application command: /builds/worker/workspace/build/application/firefox/firefox --marionette about:blank -profile /tmp/tmpnm7w0l9d
[task 2023-03-02T16:46:45.252Z] 16:46:45     INFO - Starting runner
[task 2023-03-02T16:46:46.019Z] 16:46:46     INFO - PID 21681 |     #0 0x7f818b276393 in void nsTHashtable<nsBaseHashtableET<nsCStringHashKey, RefPtr<mozilla::dom::ContentParent>>>::EntryHandle::InsertInternal<already_AddRefed<mozilla::dom::ContentParent>>(already_AddRefed<mozilla::dom::ContentParent>&&) /builds/worker/workspace/obj-build/dist/include/nsTHashtable.h:414:7
[task 2023-03-02T16:46:46.021Z] 16:46:46     INFO - PID 21681 |     #1 0x7f818b101932 in Insert<already_AddRefed<mozilla::dom::ContentParent> > /builds/worker/workspace/obj-build/dist/include/nsBaseHashtable.h:695:13
[task 2023-03-02T16:46:46.022Z] 16:46:46     INFO - PID 21681 |     #2 0x7f818b101932 in operator()<nsBaseHashtable<nsCStringHashKey, RefPtr<mozilla::dom::ContentParent>, mozilla::dom::ContentParent *, nsDefaultConverter<RefPtr<mozilla::dom::ContentParent>, mozilla::dom::ContentParent *> >::EntryHandle> /builds/worker/checkouts/gecko/docshell/base/BrowsingContextGroup.cpp:161:15
[task 2023-03-02T16:46:46.023Z] 16:46:46     INFO - PID 21681 |     #3 0x7f818b101932 in operator()<nsTHashtable<nsBaseHashtableET<nsCStringHashKey, RefPtr<mozilla::dom::ContentParent> > >::EntryHandle> /builds/worker/workspace/obj-build/dist/include/nsBaseHashtable.h:836:18
[task 2023-03-02T16:46:46.024Z] 16:46:46     INFO - PID 21681 |     #4 0x7f818b101932 in operator()<PLDHashTable::EntryHandle> /builds/worker/workspace/obj-build/dist/include/nsTHashtable.h:437:18
[task 2023-03-02T16:46:46.025Z] 16:46:46     INFO - PID 21681 |     #5 0x7f818b101932 in WithEntryHandle<(lambda at /builds/worker/workspace/obj-build/dist/include/nsTHashtable.h:436:9)> /builds/worker/workspace/obj-build/dist/include/PLDHashTable.h:603:12
[task 2023-03-02T16:46:46.026Z] 16:46:46     INFO - PID 21681 |     #6 0x7f818b101932 in WithEntryHandle<(lambda at /builds/worker/workspace/obj-build/dist/include/nsBaseHashtable.h:835:15)> /builds/worker/workspace/obj-build/dist/include/nsTHashtable.h:434:25
[task 2023-03-02T16:46:46.032Z] 16:46:46     INFO - PID 21681 |     #7 0x7f818b101932 in WithEntryHandle<(lambda at /builds/worker/checkouts/gecko/docshell/base/BrowsingContextGroup.cpp:145:57)> /builds/worker/workspace/obj-build/dist/include/nsBaseHashtable.h:834:18
[task 2023-03-02T16:46:46.032Z] 16:46:46     INFO - PID 21681 |     #8 0x7f818b101932 in mozilla::dom::BrowsingContextGroup::EnsureHostProcess(mozilla::dom::ContentParent*) /builds/worker/checkouts/gecko/docshell/base/BrowsingContextGroup.cpp:145:14
[task 2023-03-02T16:46:46.032Z] 16:46:46     INFO - PID 21681 |     #9 0x7f818b100d7c in mozilla::dom::BrowsingContext::CreateFromIPC(mozilla::dom::BrowsingContext::IPCInitializer&&, mozilla::dom::BrowsingContextGroup*, mozilla::dom::ContentParent*) /builds/worker/checkouts/gecko/docshell/base/BrowsingContext.cpp:528:13
[task 2023-03-02T16:46:46.032Z] 16:46:46     INFO - PID 21681 |     #10 0x7f81865959f5 in mozilla::dom::ContentParent::RecvCreateBrowsingContext(unsigned long, mozilla::dom::BrowsingContext::IPCInitializer&&) /builds/worker/checkouts/gecko/dom/ipc/ContentParent.cpp:7264:3
[task 2023-03-02T16:46:46.033Z] 16:46:46     INFO - PID 21681 |     #11 0x7f81867fb210 in mozilla::dom::PContentParent::OnMessageReceived(IPC::Message const&) /builds/worker/workspace/obj-build/ipc/ipdl/PContentParent.cpp:15730:81
[task 2023-03-02T16:46:46.034Z] 16:46:46     INFO - PID 21681 |     #12 0x7f81804ebc9f in mozilla::ipc::MessageChannel::DispatchAsyncMessage(mozilla::ipc::ActorLifecycleProxy*, IPC::Message const&) /builds/worker/checkouts/gecko/ipc/glue/MessageChannel.cpp:1800:25
[task 2023-03-02T16:46:46.034Z] 16:46:46     INFO - PID 21681 |     #13 0x7f81804e96a5 in mozilla::ipc::MessageChannel::DispatchMessage(mozilla::ipc::ActorLifecycleProxy*, mozilla::UniquePtr<IPC::Message, mozilla::DefaultDelete<IPC::Message>>) /builds/worker/checkouts/gecko/ipc/glue/MessageChannel.cpp:1725:9
[task 2023-03-02T16:46:46.035Z] 16:46:46     INFO - PID 21681 |     #14 0x7f81804ea001 in mozilla::ipc::MessageChannel::RunMessage(mozilla::ipc::ActorLifecycleProxy*, mozilla::ipc::MessageChannel::MessageTask&) /builds/worker/checkouts/gecko/ipc/glue/MessageChannel.cpp:1525:3
[task 2023-03-02T16:46:46.036Z] 16:46:46     INFO - PID 21681 |     #15 0x7f81804ead6e in mozilla::ipc::MessageChannel::MessageTask::Run() /builds/worker/checkouts/gecko/ipc/glue/MessageChannel.cpp:1623:14
[task 2023-03-02T16:46:46.037Z] 16:46:46     INFO - PID 21681 |     #16 0x7f817ee342d9 in mozilla::RunnableTask::Run() /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:541:16
[task 2023-03-02T16:46:46.038Z] 16:46:46     INFO - PID 21681 |     #17 0x7f817ee2a3ec in mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&) /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:855:26
[task 2023-03-02T16:46:46.038Z] 16:46:46     INFO - PID 21681 |     #18 0x7f817ee27668 in mozilla::TaskController::ExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&) /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:686:15
[task 2023-03-02T16:46:46.039Z] 16:46:46     INFO - PID 21681 |     #19 0x7f817ee27d90 in mozilla::TaskController::ProcessPendingMTTask(bool) /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:464:36
[task 2023-03-02T16:46:46.040Z] 16:46:46     INFO - PID 21681 |     #20 0x7f817ee3a7b1 in operator() /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:188:37
[task 2023-03-02T16:46:46.041Z] 16:46:46     INFO - PID 21681 |     #21 0x7f817ee3a7b1 in mozilla::detail::RunnableFunction<mozilla::TaskController::InitializeInternal()::$_2>::Run() /builds/worker/workspace/obj-build/dist/include/nsThreadUtils.h:547:5
[task 2023-03-02T16:46:46.042Z] 16:46:46     INFO - PID 21681 |     #22 0x7f817ee5f05e in nsThread::ProcessNextEvent(bool, bool*) /builds/worker/checkouts/gecko/xpcom/threads/nsThread.cpp:1239:16
[task 2023-03-02T16:46:46.043Z] 16:46:46     INFO - PID 21681 |     #23 0x7f817ee695d4 in NS_ProcessNextEvent(nsIThread*, bool) /builds/worker/checkouts/gecko/xpcom/threads/nsThreadUtils.cpp:477:10
[task 2023-03-02T16:46:46.044Z] 16:46:46     INFO - PID 21681 |     #24 0x7f81804f1fc8 in mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) /builds/worker/checkouts/gecko/ipc/glue/MessagePump.cpp:85:21
[task 2023-03-02T16:46:46.044Z] 16:46:46     INFO - PID 21681 |     #25 0x7f818038d387 in RunInternal /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:381:10
[task 2023-03-02T16:46:46.045Z] 16:46:46     INFO - PID 21681 |     #26 0x7f818038d387 in RunHandler /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:374:3
[task 2023-03-02T16:46:46.046Z] 16:46:46     INFO - PID 21681 |     #27 0x7f818038d387 in MessageLoop::Run() /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:356:3
[task 2023-03-02T16:46:46.047Z] 16:46:46     INFO - PID 21681 |     #28 0x7f8187375bb9 in nsBaseAppShell::Run() /builds/worker/checkouts/gecko/widget/nsBaseAppShell.cpp:148:27
[task 2023-03-02T16:46:46.047Z] 16:46:46     INFO - PID 21681 |     #29 0x7f818be4742b in nsAppStartup::Run() /builds/worker/checkouts/gecko/toolkit/components/startup/nsAppStartup.cpp:295:30
[task 2023-03-02T16:46:46.048Z] 16:46:46     INFO - PID 21681 |     #30 0x7f818c0a79fb in XREMain::XRE_mainRun() /builds/worker/checkouts/gecko/toolkit/xre/nsAppRunner.cpp:5651:22
[task 2023-03-02T16:46:46.049Z] 16:46:46     INFO - PID 21681 |     #31 0x7f818c0a9569 in XREMain::XRE_main(int, char**, mozilla::BootstrapConfig const&) /builds/worker/checkouts/gecko/toolkit/xre/nsAppRunner.cpp:5851:8
[task 2023-03-02T16:46:46.049Z] 16:46:46     INFO - PID 21681 |     #32 0x7f818c0aa2fb in XRE_main(int, char**, mozilla::BootstrapConfig const&) /builds/worker/checkouts/gecko/toolkit/xre/nsAppRunner.cpp:5907:21
[task 2023-03-02T16:46:46.050Z] 16:46:46     INFO - PID 21681 |     #33 0x5612b29a934e in do_main /builds/worker/checkouts/gecko/browser/app/nsBrowserApp.cpp:226:22
[task 2023-03-02T16:46:46.051Z] 16:46:46     INFO - PID 21681 |     #34 0x5612b29a934e in main /builds/worker/checkouts/gecko/browser/app/nsBrowserApp.cpp:423:16
[task 2023-03-02T16:46:46.051Z] 16:46:46     INFO - PID 21681 |     #35 0x7f81a0ce5b96 in __libc_start_main /tmp/glibc/csu/../csu/libc-start.c:310
[task 2023-03-02T16:46:46.052Z] 16:46:46     INFO - PID 21681 |     #36 0x5612b28e7368 in _start (/builds/worker/workspace/build/application/firefox/firefox+0x106368) (BuildId: 165f96b3f57549ff642d882485bd4f81048cf72f)
[task 2023-03-02T16:46:46.053Z] 16:46:46     INFO - PID 21681 | AddressSanitizer can not provide additional info.
[task 2023-03-02T16:46:46.053Z] 16:46:46     INFO - PID 21681 | SUMMARY: AddressSanitizer: SEGV /builds/worker/workspace/obj-build/dist/include/nsTHashtable.h:414:7 in void nsTHashtable<nsBaseHashtableET<nsCStringHashKey, RefPtr<mozilla::dom::ContentParent>>>::EntryHandle::InsertInternal<already_AddRefed<mozilla::dom::ContentParent>>(already_AddRefed<mozilla::dom::ContentParent>&&)
[task 2023-03-02T16:46:46.054Z] 16:46:46     INFO - PID 21681 | ==21681==ABORTING
Flags: needinfo?(jstutte)

Ah, sure, hash table is very strict in asserting if something already exists.

Flags: needinfo?(jstutte)

BTW, this confirms that the case we see here is:

  • BCG->mHosts contains a host process for the requested remote type that is already shutting down but still there.
  • ContentParent::RecvCreateBrowsingContext is proposing itself as a new process to the same BCG/remote type pair

And the fact we see this happening here on (slow) ASAN is probably indicating that there is some race we should consider in bug 1815480.

Pushed by jstutte@mozilla.com: https://hg.mozilla.org/integration/autoland/rev/c2f00ececa48 Downgrade diagnostic assertion in BrowsingContextGroup::EnsureHostProcess. r=smaug

https://hg.mozilla.org/mozilla-central/rev/c2f00ececa48

Status: ASSIGNED → RESOLVED
Closed: 2 years ago
status-firefox112: affected → fixed
Resolution: --- → FIXED
Target Milestone: --- → 112 Branch

The patch landed in nightly and beta is affected.
:jstutte, is this bug important enough to require an uplift?

  • If yes, please nominate the patch for beta approval.
  • If no, please set status-firefox111 to wontfix.

For more information, please visit auto_nag documentation.

Flags: needinfo?(jstutte)

(In reply to Release mgmt bot [:suhaib / :marco/ :calixte] from comment #21)

The patch landed in nightly and beta is affected.
:jstutte, is this bug important enough to require an uplift?

  • If yes, please nominate the patch for beta approval.
  • If no, please set status-firefox111 to wontfix.

For more information, please visit auto_nag documentation.

This is just a diagnostic assert and disabled now for 111 (late beta).

status-firefox111: affected → disabled
Flags: needinfo?(jstutte)
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: