1835468 - Crash in [@ JS::loader::ModuleLoaderBase::RemoveFetchedModule]

Status: RESOLVED DUPLICATE of bug 1803984

(Core :: JavaScript Engine, defect)

Description

[Sebastian Hengst [:aryx] (needinfo me if it's about an intermittent or backout)]

From the assertion added in bug 1803984. Crashes from 2 installations so far with the only build which contains the code at the moment: Nightly 115.0a1 20230526215433

Crash report: https://crash-stats.mozilla.org/report/index/f9b4b83c-43e7-4bdb-b7a0-727270230527

MOZ_CRASH Reason: MOZ_DIAGNOSTIC_ASSERT(false) (mFetchedModules.Get(aURL, getter_AddRefs(ms)))

Top 10 frames of crashing thread:

0  xul.dll  JS::loader::ModuleLoaderBase::RemoveFetchedModule  js/loader/ModuleLoaderBase.cpp:459
1  xul.dll  mozilla::dom::ScriptLoader::ProcessExternalScript  dom/script/ScriptLoader.cpp:1004
1  xul.dll  mozilla::dom::ScriptLoader::ProcessScriptElement  dom/script/ScriptLoader.cpp:940
1  xul.dll  mozilla::dom::ScriptElement::MaybeProcessScript  dom/script/ScriptElement.cpp:107
2  xul.dll  nsIScriptElement::AttemptToExecute  dom/script/nsIScriptElement.h:221
2  xul.dll  nsHtml5TreeOpExecutor::RunScript  parser/html/nsHtml5TreeOpExecutor.cpp:935
3  xul.dll  nsHtml5TreeOperation::Perform::TreeOperationMatcher::operator  parser/html/nsHtml5TreeOperation.cpp:965
3  xul.dll  mozilla::detail::VariantImplementation<unsigned char, 21, opRunScriptAsyncDefer, opPreventScriptExecution, opDoneAddingChildren, opDoneCreatingElement, opUpdateCharsetSource, opCharsetSwitchTo, opUpdateStyleSheet, opProcessOfflineManifest, opMarkMalformedIfScript, opStreamEnded, opSetStyleLineNumber, opSetScriptLineAndColumnNumberAndFreeze, opSvgLoad, opMaybeComplainAboutCharset, opMaybeComplainAboutDeepTree, opAddClass, opAddViewSourceHref, opAddViewSourceBase, opAddErrorType, opAddLineNumberId, opStartLayout, opEnableEncodingMenu>::match  mfbt/Variant.h:266
3  xul.dll  mozilla::detail::VariantImplementation<unsigned char, 20, opRunScript, opRunScriptAsyncDefer, opPreventScriptExecution, opDoneAddingChildren, opDoneCreatingElement, opUpdateCharsetSource, opCharsetSwitchTo, opUpdateStyleSheet, opProcessOfflineManifest, opMarkMalformedIfScript, opStreamEnded, opSetStyleLineNumber, opSetScriptLineAndColumnNumberAndFreeze, opSvgLoad, opMaybeComplainAboutCharset, opMaybeComplainAboutDeepTree, opAddClass, opAddViewSourceHref, opAddViewSourceBase, opAddErrorType, opAddLineNumberId, opStartLayout, opEnableEncodingMenu>::match  mfbt/Variant.h:279
3  xul.dll  mozilla::detail::VariantImplementation<unsigned char, 19, opMarkAsBroken, opRunScript, opRunScriptAsyncDefer, opPreventScriptExecution, opDoneAddingChildren, opDoneCreatingElement, opUpdateCharsetSource, opCharsetSwitchTo, opUpdateStyleSheet, opProcessOfflineManifest, opMarkMalformedIfScript, opStreamEnded, opSetStyleLineNumber, opSetScriptLineAndColumnNumberAndFreeze, opSvgLoad, opMaybeComplainAboutCharset, opMaybeComplainAboutDeepTree, opAddClass, opAddViewSourceHref, opAddViewSourceBase, opAddErrorType, opAddLineNumberId, opStartLayout, opEnableEncodingMenu>::match  mfbt/Variant.h:279

Comment 1

[Cosmin Sabou [:CosminS]]

Should be fixed by https://bugzilla.mozilla.org/show_bug.cgi?id=1803984#c28

Comment 2

[BugBot [:suhaib / :marco/ :calixte]]

The bug is marked as tracked for firefox115 (nightly). We have limited time to fix this, the soft freeze is in 3 days. However, the bug still isn't assigned.

:sdetar, could you please find an assignee for this tracked bug? Given that it is a regression and we know the cause, we could also simply backout the regressor. If you disagree with the tracking decision, please talk with the release managers.

For more information, please visit BugBot documentation.

Comment 3

[Yoshi Cheng-Hao Huang [:allstars.chh][:allstarschh][:yoshi]]

The crash is caused by Bug 1803984, which has been backout.