1881936 - Crash in [@ mozilla::dom::WebIDLGlobalNameHash::ResolveForSystemGlobal]

Status: ASSIGNED

(Core :: DOM: Bindings (WebIDL), defect)

Description

[BugBot [:suhaib / :marco/ :calixte]]

Crash report: https://crash-stats.mozilla.org/report/index/8a9e7ea2-b01e-488d-bee7-380fd0240222

Reason: EXCEPTION_ACCESS_VIOLATION_READ

Top 10 frames of crashing thread:

0  xul.dll  mozilla::dom::WebIDLGlobalNameHash::ResolveForSystemGlobal  dom/bindings/WebIDLGlobalNameHash.cpp:233
0  xul.dll  BackstagePass::Resolve  js/xpconnect/src/XPCRuntimeService.cpp:71
1  xul.dll  XPC_WN_Helper_Resolve  js/xpconnect/src/XPCWrappedNativeJSOps.cpp:836
2  xul.dll  js::CallResolveOp  js/src/vm/NativeObject-inl.h:681
2  xul.dll  js::NativeLookupOwnPropertyInline  js/src/vm/NativeObject-inl.h:793
2  xul.dll  js::NativeLookupPropertyInline  js/src/vm/NativeObject-inl.h:824
2  xul.dll  js::LookupProperty  js/src/vm/JSObject.cpp:1566
3  xul.dll  js::LookupName  js/src/vm/JSObject.cpp:1578
4  xul.dll  js::GetEnvironmentName  js/src/vm/Interpreter-inl.h:191
4  xul.dll  GetNameOperation  js/src/vm/Interpreter.cpp:256

By querying Nightly crashes reported within the last 2 months, here are some insights about the signature:

• First crash report: 2023-12-20
• Process type: Content
• Is startup crash: No
• Has user comments: No
• Is null crash: Yes - all crashes happened on null or near null memory address

Comment 1

[Andreas Farre [:farre]]

Peter, is this something that you know the cause for?

Comment 2

[Peter Van der Beken [:peterv]]

Attachment: Bug 1881936 - Crash in [@ mozilla::dom::WebIDLGlobalNameHash::ResolveForSystemGlobal]. r?farre!

Comment 3

[Peter Van der Beken [:peterv]]

Attachment: Diff of the generated binding code

Comment 4

[Peter Van der Beken [:peterv]]

We have no way to reproduce this. Attachment 9390515 [details] is a guess at a fix, but I have no idea if that will fix it.

Comment 5

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/5547325bcf00
Crash in [@ mozilla::dom::WebIDLGlobalNameHash::ResolveForSystemGlobal]. r=farre

Comment 6

[Iulian Moraru]

https://hg.mozilla.org/mozilla-central/rev/5547325bcf00

Comment 7

[Peter Van der Beken [:peterv]]

Well, that didn't fix it.

Comment 8

[BugBot [:suhaib / :marco/ :calixte]]

The leave-open keyword is there and there is no activity for 6 months.
:peterv, maybe it's time to close this bug?
For more information, please visit BugBot documentation.