1909494 - Crash in [@ mozilla::ipc::FatalError | mozilla::ipc::IProtocol::HandleFatalError | IPC::WriteSequenceParam<T> | IPC::ParamTraits<nsTSubstring<T> >::Write | mozilla::net::PHttpBackgroundChannelParent::SendOnTransportAndData]

Status: NEW

(Core :: IPC, defect)

Description

[Liz Henry (:lizzard) (relman/hg->git project)]

This signature is showing up in Nightly 130 in a moderate volume. I'm not exactly sure where to put it but it looks possibly fetch related.

Crash report: https://crash-stats.mozilla.org/report/index/3b5e3037-0e2a-4861-b074-dfa6c0240722

MOZ_CRASH Reason: MOZ_CRASH(IPC FatalError in the parent process!)

Top 10 frames:

0  libxul.so  mozilla::ipc::FatalError(char const*, bool)  ipc/glue/ProtocolUtils.cpp:203
1  libxul.so  mozilla::ipc::IProtocol::HandleFatalError(char const*)  ipc/glue/ProtocolUtils.cpp:403
2  libxul.so  IPC::WriteSequenceParam<char const&>(IPC::MessageWriter*, std::remove_referen...  ipc/chromium/src/chrome/common/ipc_message_utils.h:592
2  libxul.so  IPC::ParamTraits<nsTSubstring<char> >::Write(IPC::MessageWriter*, nsTSubstrin...  ipc/glue/IPCMessageUtilsSpecializations.h:92
2  libxul.so  IPC::WriteParam<nsTSubstring<char> const&>(IPC::MessageWriter*, nsTSubstring<...  ipc/chromium/src/chrome/common/ipc_message_utils.h:445
2  libxul.so  mozilla::net::PHttpBackgroundChannelParent::SendOnTransportAndData(nsresult c...  ipc/ipdl/PHttpBackgroundChannelParent.cpp:170
2  libxul.so  mozilla::net::HttpBackgroundChannelParent::OnTransportAndData(nsresult const&...  netwerk/protocol/http/HttpBackgroundChannelParent.cpp:229
2  libxul.so  std::_Function_handler<bool (nsTDependentSubstring<char> const&, unsigned lon...  /builds/worker/fetches/sysroot-x86_64-linux-gnu/usr/include/c++/8/bits/std_function.h:282
3  libxul.so  std::function<bool (nsTDependentSubstring<char> const&, unsigned long, unsign...  /builds/worker/fetches/sysroot-x86_64-linux-gnu/usr/include/c++/8/bits/std_function.h:687
3  libxul.so  mozilla::net::nsHttp::SendDataInChunks<nsTDependentSubstring<char> >(nsTStrin...  netwerk/protocol/http/nsHttp.h:316

Comment 1

[Kershaw Chang [:kershaw]]

This seems to be an IPC bug to me.

Comment 3

[BugBot [:suhaib / :marco/ :calixte]]

The bug is linked to a topcrash signature, which matches the following criterion:

• Top 5 desktop browser crashes on Linux on beta

For more information, please visit BugBot documentation.

Comment 4

[mix5003]

i have step to reproduce this bug. but it too extrem for normal user, so it may not same root cause

step to reproduce

1. install extension from https://web.archive.org/web/20230621101556/https://addons.mozilla.org/en-US/firefox/addon/videos-hls-m3u8-mp4-downloader/ (i think it must use 1.x only)
2. go to https://tmp.ishare.in.th/tmp/bug-1909494/
3. click "Next" 4 times.
4. use extension to download 5 videos. (i think it should not use your network too much i crast m3u8 to use same files 1000 times and hopefully it use cache)
5. wait until it crash

video for step to reproduce: https://youtu.be/3gSlUcSeMSk

and as you see in video when i click restart it still crash again after restart idk why

Comment 5

[BugBot [:suhaib / :marco/ :calixte]]

Based on the topcrash criteria, the crash signature linked to this bug is not a topcrash signature anymore.

For more information, please visit BugBot documentation.

Comment 6

[BugBot [:suhaib / :marco/ :calixte]]

The severity field for this bug is set to S3. However, the following bug duplicate has higher severity:

• Bug 1908797: S2

:jld, could you consider increasing the severity of this bug to S2?

For more information, please visit BugBot documentation.

Comment 7

[Andrew McCreight [:mccr8]]

I think it was S2 due to a crash spike, but that's gone.