1897034 - Crash in [@ nsCycleCollectingAutoRefCnt::decr]

Status: NEW

(Core :: Cycle Collector, defect)

Description

[BugBot [:suhaib / :marco/ :calixte]]

Crash report: https://crash-stats.mozilla.org/report/index/97d953f3-27ef-4f54-83af-282260240513

Reason: SIGSEGV / SEGV_ACCERR

Top 10 frames of crashing thread:

0  libxul.so  nsCycleCollectingAutoRefCnt::decr  xpcom/base/nsISupportsImpl.h
0  libxul.so  nsCycleCollectingAutoRefCnt::decr  xpcom/base/nsISupportsImpl.h:279
0  libxul.so  nsGlobalWindowInner::Release  dom/base/nsGlobalWindowInner.cpp:1338
0  libxul.so  mozilla::RefPtrTraits<nsGlobalWindowInner>::Release  mfbt/RefPtr.h:49
0  libxul.so  RefPtr<nsGlobalWindowInner>::ConstRemovingRefPtrTraits<nsGlobalWindowInner>::Release  mfbt/RefPtr.h:409
0  libxul.so  RefPtr<nsGlobalWindowInner>::~RefPtr  mfbt/RefPtr.h:80
0  libxul.so  mozilla::dom::Timeout::~Timeout  dom/base/Timeout.h:138
0  libxul.so  mozilla::dom::Timeout::DeleteCycleCollectable  dom/base/Timeout.h:30
0  libxul.so  mozilla::dom::Timeout::cycleCollection::DeleteCycleCollectable  dom/base/Timeout.h:30
1  libxul.so  SnowWhiteKiller::MaybeKillObject  xpcom/base/nsCycleCollector.cpp:2512

By querying Nightly crashes reported within the last 2 months, here are some insights about the signature:

• First crash report: 2024-03-27
• Process type: Content
• Is startup crash: No
• Has user comments: No
• Is null crash: No

Comment 1

[Andrew McCreight [:mccr8]]

The stack in comment 0 is more of a DOM thing, but not really any information either way.