Closed Bug 1904668 Opened 1 year ago Closed 1 year ago

ThreadSanitizer: data race [@ maybePinExistingAtom] vs. [@ js::jit::MCompare::tryFoldCharCompare]

Categories

(Core :: JavaScript Engine, defect)

Product:
Core
Component:
JavaScript Engine
Type:
defect

Tracking

()

Status:
RESOLVED DUPLICATE of bug 1825621
Tracking Flags:
Tracking Status
firefox129 --- affected

People

(Reporter: tsmith, Unassigned)

Details

(Keywords: csectype-race)

Found with m-c 20240624-1d8072354f40 (--enable-thread-sanitizer --enable-fuzzing)

This was a one off report while trying to update tests in CI. My guess is that it is related to a gc zeal option that was randomly selected. There wasn't any fuzzing going on during the test, just opening and closing "empty" tabs.

WARNING: ThreadSanitizer: data race (pid=162)
  Atomic write of size 8 at 0x7fbc73d61e40 by main thread:
    #0 setAtomic /builds/worker/checkouts/gecko/js/src/gc/Cell.h:90:5 (libxul.so+0x9783178) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #1 set /builds/worker/checkouts/gecko/js/src/gc/Cell.h:112:5 (libxul.so+0x9783178)
    #2 setHeaderFlagBit /builds/worker/checkouts/gecko/js/src/gc/Cell.h:643:13 (libxul.so+0x9783178)
    #3 setFlagBit /builds/worker/checkouts/gecko/js/src/vm/StringType.h:818:36 (libxul.so+0x9783178)
    #4 setPinned /builds/worker/checkouts/gecko/js/src/vm/StringType.h:1528:5 (libxul.so+0x9783178)
    #5 maybePinExistingAtom /builds/worker/checkouts/gecko/js/src/vm/JSAtomUtils.cpp:756:9 (libxul.so+0x9783178)
    #6 js::PinAtom(JSContext*, JSAtom*) /builds/worker/checkouts/gecko/js/src/vm/JSAtomUtils.cpp:742:33 (libxul.so+0x9783178)
    #7 JS_AtomizeAndPinStringN /builds/worker/checkouts/gecko/js/src/jsapi.cpp:3210:17 (libxul.so+0x9a30493) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #8 JS_AtomizeAndPinString(JSContext*, char const*) /builds/worker/checkouts/gecko/js/src/jsapi.cpp:3200:10 (libxul.so+0x9a30493)
    #9 init /builds/worker/workspace/obj-build/dist/include/mozilla/dom/PinnedStringId.h:31:21 (libxul.so+0x55b9b38) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #10 mozilla::dom::UpdateSessionStoreData::InitIds(JSContext*, mozilla::dom::UpdateSessionStoreDataAtoms*) /builds/worker/workspace/obj-build/dom/bindings/./BrowserSessionStoreBinding.cpp:157:32 (libxul.so+0x55b9b38)
    #11 mozilla::dom::UpdateSessionStoreData::ToObjectInternal(JSContext*, JS::MutableHandle<JS::Value>) const /builds/worker/workspace/obj-build/dom/bindings/./BrowserSessionStoreBinding.cpp:175:8 (libxul.so+0x55b9bfd) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #12 ToJSValue<mozilla::dom::UpdateSessionStoreData> /builds/worker/workspace/obj-build/dist/include/mozilla/dom/ToJSValue.h:287:20 (libxul.so+0x9342871) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #13 DoSessionStoreUpdate /builds/worker/checkouts/gecko/toolkit/components/sessionstore/SessionStoreParent.cpp:92:8 (libxul.so+0x9342871)
    #14 mozilla::dom::SessionStoreParent::RecvSessionStoreUpdate(mozilla::Maybe<nsTString<char>> const&, mozilla::Maybe<bool> const&, mozilla::Maybe<std::tuple<float, unsigned int, unsigned int>> const&, bool, unsigned int const&) /builds/worker/checkouts/gecko/toolkit/components/sessionstore/SessionStoreParent.cpp:188:3 (libxul.so+0x9342871)
    #15 mozilla::dom::PSessionStoreParent::OnMessageReceived(IPC::Message const&) /builds/worker/workspace/obj-build/ipc/ipdl/PSessionStoreParent.cpp:240:86 (libxul.so+0x934dcb3) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #16 mozilla::dom::PContentParent::OnMessageReceived(IPC::Message const&) /builds/worker/workspace/obj-build/ipc/ipdl/PContentParent.cpp:6436:32 (libxul.so+0x7f3d4e6) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #17 mozilla::ipc::MessageChannel::DispatchAsyncMessage(mozilla::ipc::ActorLifecycleProxy*, IPC::Message const&) /builds/worker/checkouts/gecko/ipc/glue/MessageChannel.cpp:1820:25 (libxul.so+0x4074c7f) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #18 mozilla::ipc::MessageChannel::DispatchMessage(mozilla::ipc::ActorLifecycleProxy*, mozilla::UniquePtr<IPC::Message, mozilla::DefaultDelete<IPC::Message>>) /builds/worker/checkouts/gecko/ipc/glue/MessageChannel.cpp:1739:9 (libxul.so+0x4073558) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #19 mozilla::ipc::MessageChannel::RunMessage(mozilla::ipc::ActorLifecycleProxy*, mozilla::ipc::MessageChannel::MessageTask&) /builds/worker/checkouts/gecko/ipc/glue/MessageChannel.cpp:1530:3 (libxul.so+0x4073b5e) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #20 mozilla::ipc::MessageChannel::MessageTask::Run() /builds/worker/checkouts/gecko/ipc/glue/MessageChannel.cpp:1630:14 (libxul.so+0x4074307) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #21 mozilla::RunnableTask::Run() /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:580:16 (libxul.so+0x3598652) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #22 mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&) /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:907:26 (libxul.so+0x358d149) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #23 mozilla::TaskController::ExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&) /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:730:15 (libxul.so+0x358b976) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #24 mozilla::TaskController::ProcessPendingMTTask(bool) /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:516:36 (libxul.so+0x358bcaf) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #25 operator() /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:234:37 (libxul.so+0x359b424) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #26 mozilla::detail::RunnableFunction<mozilla::TaskController::TaskController()::$_0>::Run() /builds/worker/checkouts/gecko/xpcom/threads/nsThreadUtils.h:548:5 (libxul.so+0x359b424)
    #27 nsThread::ProcessNextEvent(bool, bool*) /builds/worker/checkouts/gecko/xpcom/threads/nsThread.cpp:1204:16 (libxul.so+0x35aeb0a) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #28 NS_ProcessNextEvent(nsIThread*, bool) /builds/worker/checkouts/gecko/xpcom/threads/nsThreadUtils.cpp:480:10 (libxul.so+0x35b4fe4) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #29 mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) /builds/worker/checkouts/gecko/ipc/glue/MessagePump.cpp:85:21 (libxul.so+0x4078aae) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #30 RunInternal /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:370:10 (libxul.so+0x3ff7278) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #31 RunHandler /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:363:3 (libxul.so+0x3ff7278)
    #32 MessageLoop::Run() /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:345:3 (libxul.so+0x3ff7278)
    #33 nsBaseAppShell::Run() /builds/worker/checkouts/gecko/widget/nsBaseAppShell.cpp:148:27 (libxul.so+0x84fa293) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #34 nsAppShell::Run() /builds/worker/checkouts/gecko/widget/gtk/nsAppShell.cpp:469:33 (libxul.so+0x85e248c) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #35 nsAppStartup::Run() /builds/worker/checkouts/gecko/toolkit/components/startup/nsAppStartup.cpp:296:30 (libxul.so+0x935abc2) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #36 XREMain::XRE_mainRun() /builds/worker/checkouts/gecko/toolkit/xre/nsAppRunner.cpp:5780:22 (libxul.so+0x94a0786) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #37 XREMain::XRE_main(int, char**, mozilla::BootstrapConfig const&) /builds/worker/checkouts/gecko/toolkit/xre/nsAppRunner.cpp:5992:8 (libxul.so+0x94a1410) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #38 XRE_main(int, char**, mozilla::BootstrapConfig const&) /builds/worker/checkouts/gecko/toolkit/xre/nsAppRunner.cpp:6049:21 (libxul.so+0x94a1ac1) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #39 mozilla::BootstrapImpl::XRE_main(int, char**, mozilla::BootstrapConfig const&) /builds/worker/checkouts/gecko/toolkit/xre/Bootstrap.cpp:49:12 (libxul.so+0x94b0762) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #40 do_main /builds/worker/checkouts/gecko/browser/app/nsBrowserApp.cpp:230:22 (firefox-bin+0x151d48) (BuildId: 1249d811058524880ed448f7952218fe421de3d4)
    #41 main /builds/worker/checkouts/gecko/browser/app/nsBrowserApp.cpp:448:16 (firefox-bin+0x151d48)

  Previous read of size 8 at 0x7fbc73d61e40 by thread T26:
    #0 get /builds/worker/checkouts/gecko/js/src/gc/Cell.h:106:23 (libxul.so+0xa301114) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #1 headerLengthField /builds/worker/checkouts/gecko/js/src/gc/Cell.h:636:29 (libxul.so+0xa301114)
    #2 length /builds/worker/checkouts/gecko/js/src/vm/StringType.h:208:34 (libxul.so+0xa301114)
    #3 js::jit::MCompare::tryFoldCharCompare(js::jit::TempAllocator&) /builds/worker/checkouts/gecko/js/src/jit/MIR.cpp:4714:31 (libxul.so+0xa301114)
    #4 js::jit::MCompare::foldsTo(js::jit::TempAllocator&) /builds/worker/checkouts/gecko/js/src/jit/MIR.cpp:4905:29 (libxul.so+0xa3023c0) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #5 simplified /builds/worker/checkouts/gecko/js/src/jit/ValueNumbering.cpp:591:15 (libxul.so+0x9ebf216) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #6 js::jit::ValueNumberer::visitDefinition(js::jit::MDefinition*) /builds/worker/checkouts/gecko/js/src/jit/ValueNumbering.cpp:748:22 (libxul.so+0x9ebf216)
    #7 js::jit::ValueNumberer::visitBlock(js::jit::MBasicBlock*) /builds/worker/checkouts/gecko/js/src/jit/ValueNumbering.cpp:1021:10 (libxul.so+0x9ec001c) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #8 js::jit::ValueNumberer::visitDominatorTree(js::jit::MBasicBlock*) /builds/worker/checkouts/gecko/js/src/jit/ValueNumbering.cpp:1075:12 (libxul.so+0x9ec0624) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #9 visitGraph /builds/worker/checkouts/gecko/js/src/jit/ValueNumbering.cpp:1114:12 (libxul.so+0x9ec0ffc) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #10 js::jit::ValueNumberer::run(js::jit::ValueNumberer::UpdateAliasAnalysisFlag) /builds/worker/checkouts/gecko/js/src/jit/ValueNumbering.cpp:1282:10 (libxul.so+0x9ec0ffc)
    #11 js::jit::OptimizeMIR(js::jit::MIRGenerator*) /builds/worker/checkouts/gecko/js/src/jit/Ion.cpp:1216:14 (libxul.so+0xa23c569) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #12 js::jit::CompileBackEnd(js::jit::MIRGenerator*, js::jit::WarpSnapshot*) /builds/worker/checkouts/gecko/js/src/jit/Ion.cpp:1631:8 (libxul.so+0xa247f52) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #13 runTask /builds/worker/checkouts/gecko/js/src/jit/IonCompileTask.cpp:52:24 (libxul.so+0xa260a78) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #14 js::jit::IonCompileTask::runHelperThreadTask(js::AutoLockHelperThreadState&) /builds/worker/checkouts/gecko/js/src/jit/IonCompileTask.cpp:30:5 (libxul.so+0xa260a78)
    #15 runTaskLocked /builds/worker/checkouts/gecko/js/src/vm/HelperThreads.cpp:1735:11 (libxul.so+0x97621c5) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #16 runOneTask /builds/worker/checkouts/gecko/js/src/vm/HelperThreads.cpp:1691:3 (libxul.so+0x97621c5)
    #17 JS::RunHelperThreadTask(JS::HelperThreadTask*) /builds/worker/checkouts/gecko/js/src/vm/HelperThreads.cpp:1680:23 (libxul.so+0x97621c5)
    #18 HelperThreadTaskHandler::Run() /builds/worker/checkouts/gecko/js/xpconnect/src/XPCJSContext.cpp:1128:5 (libxul.so+0x41a8ecf) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #19 mozilla::TaskController::RunPoolThread() /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:370:33 (libxul.so+0x358a09b) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #20 mozilla::ThreadFuncPoolThread(void*) /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:222:26 (libxul.so+0x35897ce) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #21 _pt_root /builds/worker/checkouts/gecko/nsprpub/pr/src/pthreads/ptthread.c:201:5 (libnspr4.so+0x4aef8) (BuildId: 5a9f781a7e01ee4438de6f1fad8e0e007cc4e1aa)

  Thread T26 'TaskCon~ller #4' (tid=193, running) created by main thread at:
    #0 pthread_create /builds/worker/fetches/llvm-project/compiler-rt/lib/tsan/rtl/tsan_interceptors_posix.cpp:1023:3 (firefox-bin+0xd33ab) (BuildId: 1249d811058524880ed448f7952218fe421de3d4)
    #1 _PR_CreateThread /builds/worker/checkouts/gecko/nsprpub/pr/src/pthreads/ptthread.c:458:14 (libnspr4.so+0x4219e) (BuildId: 5a9f781a7e01ee4438de6f1fad8e0e007cc4e1aa)
    #2 PR_CreateThread /builds/worker/checkouts/gecko/nsprpub/pr/src/pthreads/ptthread.c:533:12 (libnspr4.so+0x374a4) (BuildId: 5a9f781a7e01ee4438de6f1fad8e0e007cc4e1aa)
    #3 mozilla::TaskController::InitializeThreadPool() /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:271:10 (libxul.so+0x358aae9) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #4 mozilla::TaskController::AddTask(already_AddRefed<mozilla::Task>&&) /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:436:7 (libxul.so+0x358b505) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #5 DispatchOffThreadTask(JS::HelperThreadTask*) /builds/worker/checkouts/gecko/js/xpconnect/src/XPCJSContext.cpp:1144:26 (libxul.so+0x41910cc) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #6 js::AutoHelperTaskQueue::dispatchQueuedTasks() /builds/worker/checkouts/gecko/js/src/vm/HelperThreads.cpp:1762:5 (libxul.so+0x976249f) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #7 ~AutoHelperTaskQueue /builds/worker/checkouts/gecko/js/src/vm/HelperThreads.h:75:28 (libxul.so+0xa261347) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #8 js::AutoLockHelperThreadState::~AutoLockHelperThreadState() /builds/worker/checkouts/gecko/js/src/vm/HelperThreads.h:89:16 (libxul.so+0xa261347)
    #9 IonCompile /builds/worker/checkouts/gecko/js/src/jit/Ion.cpp:1756:3 (libxul.so+0xa249031) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #10 js::jit::Compile(JSContext*, JS::Handle<JSScript*>, js::jit::BaselineFrame*, unsigned char*) /builds/worker/checkouts/gecko/js/src/jit/Ion.cpp:1916:24 (libxul.so+0xa249031)
    #11 BaselineCanEnterAtBranch /builds/worker/checkouts/gecko/js/src/jit/Ion.cpp:2117:25 (libxul.so+0xa24975e) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #12 IonCompileScriptForBaseline(JSContext*, js::jit::BaselineFrame*, unsigned char*) /builds/worker/checkouts/gecko/js/src/jit/Ion.cpp:2169:12 (libxul.so+0xa24975e)
    #13 js::jit::IonCompileScriptForBaselineOSR(JSContext*, js::jit::BaselineFrame*, unsigned int, unsigned char*, js::jit::IonOsrTempData**) /builds/worker/checkouts/gecko/js/src/jit/Ion.cpp:2281:8 (libxul.so+0xa249a83) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #14 <null> <null> (0x7fbc81a8e0ab)
    #15 js::Interpret(JSContext*, js::RunState&) /builds/worker/checkouts/gecko/js/src/vm/Interpreter.cpp:2089:17 (libxul.so+0x963056f) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #16 MaybeEnterInterpreterTrampoline /builds/worker/checkouts/gecko/js/src/vm/Interpreter.cpp:401:10 (libxul.so+0x962b1e7) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #17 js::RunScript(JSContext*, js::RunState&) /builds/worker/checkouts/gecko/js/src/vm/Interpreter.cpp:459:13 (libxul.so+0x962b1e7)
    #18 js::ExecuteKernel(JSContext*, JS::Handle<JSScript*>, JS::Handle<JSObject*>, js::AbstractFramePtr, JS::MutableHandle<JS::Value>) /builds/worker/checkouts/gecko/js/src/vm/Interpreter.cpp:846:13 (libxul.so+0x962d9fe) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #19 js::Execute(JSContext*, JS::Handle<JSScript*>, JS::Handle<JSObject*>, JS::MutableHandle<JS::Value>) /builds/worker/checkouts/gecko/js/src/vm/Interpreter.cpp:878:10 (libxul.so+0x962dba1) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #20 js::ModuleObject::execute(JSContext*, JS::Handle<js::ModuleObject*>) /builds/worker/checkouts/gecko/js/src/builtin/ModuleObject.cpp:1420:10 (libxul.so+0x967ade5) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #21 InnerModuleEvaluation(JSContext*, JS::Handle<js::ModuleObject*>, JS::MutableHandle<JS::GCVector<js::ModuleObject*, 0ul, js::SystemAllocPolicy>>, unsigned long, unsigned long*) /builds/worker/checkouts/gecko/js/src/vm/Modules.cpp:1752:10 (libxul.so+0x981e3d0) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #22 ModuleEvaluate /builds/worker/checkouts/gecko/js/src/vm/Modules.cpp:1523:13 (libxul.so+0x97fbbe0) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #23 JS::ModuleEvaluate(JSContext*, JS::Handle<JSObject*>, JS::MutableHandle<JS::Value>) /builds/worker/checkouts/gecko/js/src/vm/Modules.cpp:214:10 (libxul.so+0x97fbbe0)
    #24 JS::loader::ModuleLoaderBase::EvaluateModuleInContext(JSContext*, JS::loader::ModuleLoadRequest*, JS::ModuleErrorBehaviour) /builds/worker/checkouts/gecko/js/loader/ModuleLoaderBase.cpp:1319:13 (libxul.so+0x4127caa) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #25 mozJSModuleLoader::ImportESModule(JSContext*, nsTSubstring<char> const&, JS::MutableHandle<JSObject*>, mozilla::loader::SkipCheckForBrokenURLOrZeroSized) /builds/worker/checkouts/gecko/js/xpconnect/loader/mozJSModuleLoader.cpp:2115:23 (libxul.so+0x4149a97) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #26 ConstructJSMOrESMComponent<(mozilla::xpcom::ComponentType)1> /builds/worker/workspace/obj-build/xpcom/components/StaticComponents.cpp:2026:5 (libxul.so+0x356ef9b) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #27 mozilla::xpcom::ConstructESModuleComponent(nsTSubstring<char> const&, char const*, nsISupports**) /builds/worker/workspace/obj-build/xpcom/components/StaticComponents.cpp:2054:10 (libxul.so+0x356ef9b)
    #28 mozilla::xpcom::CreateInstanceImpl(mozilla::xpcom::ModuleID, nsID const&, void**) /builds/worker/workspace/obj-build/xpcom/components/StaticComponents.cpp (libxul.so+0x356eded) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #29 mozilla::xpcom::StaticModule::CreateInstance(nsID const&, void**) const /builds/worker/workspace/obj-build/xpcom/components/StaticComponents.cpp:13057:10 (libxul.so+0x357105a) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #30 CreateInstance /builds/worker/checkouts/gecko/xpcom/components/nsComponentManager.cpp:189:46 (libxul.so+0x357b45c) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #31 nsComponentManagerImpl::GetServiceLocked(mozilla::Maybe<mozilla::detail::BaseMonitorAutoLock<mozilla::Monitor>>&, (anonymous namespace)::EntryWrapper&, nsID const&, void**) /builds/worker/checkouts/gecko/xpcom/components/nsComponentManager.cpp:987:17 (libxul.so+0x357b45c)
    #32 nsComponentManagerImpl::GetServiceByContractID(char const*, nsID const&, void**) /builds/worker/checkouts/gecko/xpcom/components/nsComponentManager.cpp:1176:10 (libxul.so+0x357c0da) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #33 CallGetService /builds/worker/checkouts/gecko/xpcom/components/nsComponentManagerUtils.cpp:63:43 (libxul.so+0x3577ba8) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #34 operator() /builds/worker/checkouts/gecko/xpcom/components/nsComponentManagerUtils.cpp:240:21 (libxul.so+0x3577ba8)
    #35 assign_from_gs_contractid /builds/worker/workspace/obj-build/dist/include/nsCOMPtr.h:871:7 (libxul.so+0x3577ba8)
    #36 nsCOMPtr /builds/worker/workspace/obj-build/dist/include/nsCOMPtr.h:513:5 (libxul.so+0x3577ba8)
    #37 NS_CreateServicesFromCategory(char const*, nsISupports*, char const*, char16_t const*) /builds/worker/checkouts/gecko/xpcom/components/nsCategoryManager.cpp:660:38 (libxul.so+0x3577ba8)
    #38 XREMain::XRE_mainRun() /builds/worker/checkouts/gecko/toolkit/xre/nsAppRunner.cpp:5524:5 (libxul.so+0x94a01e6) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #39 XREMain::XRE_main(int, char**, mozilla::BootstrapConfig const&) /builds/worker/checkouts/gecko/toolkit/xre/nsAppRunner.cpp:5992:8 (libxul.so+0x94a1410) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #40 XRE_main(int, char**, mozilla::BootstrapConfig const&) /builds/worker/checkouts/gecko/toolkit/xre/nsAppRunner.cpp:6049:21 (libxul.so+0x94a1ac1) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #41 mozilla::BootstrapImpl::XRE_main(int, char**, mozilla::BootstrapConfig const&) /builds/worker/checkouts/gecko/toolkit/xre/Bootstrap.cpp:49:12 (libxul.so+0x94b0762) (BuildId: 2d4262b64b2baadf1d9b92bd52ced9aa89712998)
    #42 do_main /builds/worker/checkouts/gecko/browser/app/nsBrowserApp.cpp:230:22 (firefox-bin+0x151d48) (BuildId: 1249d811058524880ed448f7952218fe421de3d4)
    #43 main /builds/worker/checkouts/gecko/browser/app/nsBrowserApp.cpp:448:16 (firefox-bin+0x151d48)

This is another instance of bug 1825621.

Status: NEW → RESOLVED
Closed: 1 year ago
Duplicate of bug: 1825621
Resolution: --- → DUPLICATE
Group: javascript-core-security
You need to log in before you can comment on or make changes to this bug.