1897329 - Crash in [@ mozilla::dom::Document::GetFonts] from nsRefreshDriver

Status: RESOLVED DUPLICATE of bug 1897322

(Core :: Layout, defect)

Description

[Andrew McCreight [:mccr8]]

Crash report: https://crash-stats.mozilla.org/report/index/faf9a0ca-705a-4817-93ad-9fe070240516

Reason: EXCEPTION_ACCESS_VIOLATION_READ

Top 10 frames:

0  xul.dll  RefPtr<mozilla::dom::FontFaceSet>::get() const  mfbt/RefPtr.h:314
0  xul.dll  RefPtr<mozilla::dom::FontFaceSet>::operator mozilla::dom::FontFaceSet*() const  mfbt/RefPtr.h:327
0  xul.dll  mozilla::dom::Document::GetFonts()  dom/base/Document.h:3570
0  xul.dll  mozilla::PresShell::NotifyFontFaceSetOnRefresh()  layout/base/PresShell.cpp:4217
0  xul.dll  nsRefreshDriver::FlushLayoutOnPendingDocsAndFixUpFocus()  layout/base/nsRefreshDriver.cpp:2262
1  xul.dll  nsRefreshDriver::Tick(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType...  layout/base/nsRefreshDriver.cpp:2742
2  xul.dll  mozilla::RefreshDriverTimer::TickDriver(nsRefreshDriver*, mozilla::layers::Ba...  layout/base/nsRefreshDriver.cpp:367
2  xul.dll  mozilla::RefreshDriverTimer::TickRefreshDrivers(mozilla::layers::BaseTransact...  layout/base/nsRefreshDriver.cpp:345
3  xul.dll  mozilla::RefreshDriverTimer::Tick(mozilla::layers::BaseTransactionId<mozilla:...  layout/base/nsRefreshDriver.cpp:361
4  xul.dll  mozilla::VsyncRefreshDriverTimer::RunRefreshDrivers(mozilla::layers::BaseTran...  layout/base/nsRefreshDriver.cpp:951

Only 2 of these, both null derefs, but this signature hasn't happened in the last 6 months otherwise, so maybe this is a regression

Comment 1

[Gregory Pappas [:gregp]]

Maybe bug 1896593?

Comment 2

[BugBot [:suhaib / :marco/ :calixte]]

Set release status flags based on info from the regressing bug 1896593

:emilio, since you are the author of the regressor, bug 1896593, could you take a look? Also, could you set the severity field?

For more information, please visit BugBot documentation.

Comment 3

[Emilio Cobos Álvarez (:emilio)]

Mildly sure this is another version of bug 1897322.

Comment 4

[Emilio Cobos Álvarez (:emilio)]

Let's reopen if that's not the case.