1908813 - Crash in [@ js::ObjectWrapperMap::lookup]

Status: NEW

(Core :: DOM: Core & HTML, defect)

Description

[BugBot [:suhaib / :marco/ :calixte]]

Crash report: https://crash-stats.mozilla.org/report/index/25783c7e-e5f3-4557-aa5a-453890240623

Reason: EXCEPTION_ACCESS_VIOLATION_READ

Top 10 frames of crashing thread:

0  xul.dll  js::ObjectWrapperMap::lookup const  js/src/vm/Compartment.h:168
1  xul.dll  JS::Compartment::lookupWrapper const  js/src/vm/Compartment.h:381
1  xul.dll  js::RemapAllWrappersForObject  js/src/proxy/CrossCompartmentWrapper.cpp:594
2  xul.dll  JS_RefreshCrossCompartmentWrappers  js/src/jsapi.cpp:816
2  xul.dll  nsGlobalWindowOuter::SetNewDocument  dom/base/nsGlobalWindowOuter.cpp:2205
3  xul.dll  nsDocumentViewer::InitInternal  layout/base/nsDocumentViewer.cpp:899
4  xul.dll  nsDocumentViewer::Init  layout/base/nsDocumentViewer.cpp:677
5  xul.dll  nsDocShell::SetupNewViewer  docshell/base/nsDocShell.cpp:7995
5  xul.dll  nsDocShell::Embed  docshell/base/nsDocShell.cpp:5502
6  xul.dll  nsDocShell::CreateDocumentViewer  docshell/base/nsDocShell.cpp:7825

By querying Nightly crashes reported within the last 2 months, here are some insights about the signature:

• First crash report: 2024-06-23
• Process type: Multiple distinct types
• Is startup crash: No
• Has user comments: No
• Is null crash: Yes - 2 out of 3 crashes happened on null or near null memory address