1825838 - Crash in [@ nsFrameLoader::SetOwnerContent]

Status: NEW

(Core :: DOM: Core & HTML, defect)

Description

[Ryan VanderMeulen [:RyanVM]]

Crash report: https://crash-stats.mozilla.org/report/index/40223119-600a-4505-bcae-32cdd0230331

MOZ_CRASH Reason: MOZ_RELEASE_ASSERT(!she || !she->GetFrameLoader())

Top 10 frames of crashing thread:

0  xul.dll  nsFrameLoader::SetOwnerContent  dom/base/nsFrameLoader.cpp:2122
1  xul.dll  nsFrameLoader::SwapWithOtherLoader  dom/base/nsFrameLoader.cpp:1753
2  xul.dll  mozilla::dom::XULFrameElement::SwapFrameLoaders  dom/xul/XULFrameElement.cpp:146
3  xul.dll  mozilla::dom::XULFrameElement_Binding::swapFrameLoaders  dom/bindings/XULFrameElementBinding.cpp:434
4  xul.dll  mozilla::dom::binding_detail::GenericMethod<mozilla::dom::binding_detail::NormalThisPolicy, mozilla::dom::binding_detail::ThrowExceptions>  dom/bindings/BindingUtils.cpp:3335
5  xul.dll  CallJSNative  js/src/vm/Interpreter.cpp:459
5  xul.dll  js::InternalCallOrConstruct  js/src/vm/Interpreter.cpp:553
5  xul.dll  InternalCall  js/src/vm/Interpreter.cpp:620
5  xul.dll  js::CallFromStack  js/src/vm/Interpreter.cpp:625
5  xul.dll  Interpret  js/src/vm/Interpreter.cpp:3368

Comment 1

[Masayuki Nakano [:masayuki] (he/him)(JST, +0900)]

Smaug: The assertion was introduced by you, could you take a look or set the severity?

Comment 2

[Olli Pettay [:smaug][[e-mail]]]

This is a Nightly only assertion.

So the stack trace in comment 0 could happen if we bfcache in the parent process, I think, but there is https://crash-stats.mozilla.org/report/index/8a226a12-8ec6-4e7b-9cdc-585d00230702 which I don't understand yet.