1829548 - Crash in [@ mozilla::BufferList<T>::IterImpl::RemainingInSegment]

Status: NEW

(Core :: IPC, defect)

Description

[Ryan VanderMeulen [:RyanVM]]

Crash report: https://crash-stats.mozilla.org/report/index/cd2c9409-2326-43c7-8c92-3124f0230421

Reason: EXCEPTION_ACCESS_VIOLATION_READ

Top 10 frames of crashing thread:

0  xul.dll  mozilla::BufferList<InfallibleAllocPolicy>::IterImpl::RemainingInSegment const  mfbt/BufferList.h:214
0  xul.dll  mozilla::BufferList<InfallibleAllocPolicy>::IterImpl::HasRoomFor const  mfbt/BufferList.h:208
0  xul.dll  Pickle::IteratorHasRoomFor const  ipc/chromium/src/base/pickle.cc:108
0  xul.dll  Pickle::ReadInt64 const  ipc/chromium/src/base/pickle.cc:295
1  xul.dll  IPC::MessageReader::ReadInt64  ipc/chromium/src/chrome/common/ipc_message_utils.h:153
1  xul.dll  IPC::ParamTraitsFixed<unsigned long long>::Read  ipc/chromium/src/chrome/common/ipc_message_utils.h:670
1  xul.dll  IPC::ReadParam  ipc/chromium/src/chrome/common/ipc_message_utils.h:321
1  xul.dll  IPC::ParamTraits<mozilla::TimeStampValue>::Read  ipc/glue/IPCMessageUtilsSpecializations.h:369
1  xul.dll  IPC::ReadParam  ipc/chromium/src/chrome/common/ipc_message_utils.h:321
1  xul.dll  IPC::ParamTraits<mozilla::TimeStamp>::Read  ipc/glue/IPCMessageUtilsSpecializations.h:353

Comment 1

[Nika Layzell [:nika] (ni? for response)]

Volume is low and the assertion is safe, marking as S3.

Comment 2

[Nika Layzell [:nika] (ni? for response)]

Some of the examples of this crash appear to be null-derefs during the function (not the MOZ_CRASH from the MOZ_RELEASE_ASSERT), and others seem to be actually from the MOZ_CRASH. These may have very different causes.