1872210 - Crash in [@ mozilla::dmd::TaggedPtr<T>::Set]

Status: NEW

(Core :: XPCOM, defect)

Description

[BugBot [:suhaib / :marco/ :calixte]]

Crash report: https://crash-stats.mozilla.org/report/index/71f6f97c-4bb6-4945-b928-eebd10231226

Reason: SIGSEGV / SEGV_ACCERR

Top 10 frames of crashing thread:

0  firefox-bin  mozilla::dmd::TaggedPtr<mozilla::dmd::StackTrace const*>::Set  memory/replace/dmd/DMD.cpp:712
0  firefox-bin  mozilla::dmd::LiveBlock::Report const  memory/replace/dmd/DMD.cpp:809
0  firefox-bin  mozilla::dmd::ReportHelper  memory/replace/dmd/DMD.cpp:1407
1  libxul.so  mozilla::dmd::ReportOnAlloc  memory/replace/dmd/DMD.h:119
1  libxul.so  mozilla::CountingAllocatorBase<ICUReporter>::MallocSizeOfOnAlloc  xpcom/base/CountingAllocatorBase.h:152
1  libxul.so  mozilla::CountingAllocatorBase<ICUReporter>::CountingRealloc  xpcom/base/CountingAllocatorBase.h:73
1  libxul.so  ICUReporter::Realloc  xpcom/build/XPCOMInit.cpp:178
2  libxul.so  icu_73::UVector::ensureCapacity  intl/icu/source/common/uvector.cpp:348
3  libxul.so  icu_73::UVector::sortedInsert  intl/icu/source/common/uvector.cpp:461
4  libxul.so  icu_73::UVector::sortedInsert  intl/icu/source/common/uvector.cpp:439

By querying Nightly crashes reported within the last 2 months, here are some insights about the signature:

• First crash report: 2023-11-16
• Process type: Multiple distinct types
• Is startup crash: No
• Has user comments: No
• Is null crash: No

Comment 1

[Andrew McCreight [:mccr8]]

Low volume crashes inside CountingAllocatorBase.

Comment 2

[Henrik Skupin [:whimboo][⌚️UTC+2]]

This happens on MacOS as well and I just trapped into it.

Comment 3

[Mayank Bansal]

Just got two crashes while logging-into reddit:
https://crash-stats.mozilla.org/report/index/d43012d7-258d-479f-8c1a-0d69a0250209#tab-bugzilla
https://crash-stats.mozilla.org/report/index/5d8d3c9f-e713-48bd-aecc-733c50250209