Closed Bug 1925778 Opened 1 year ago Closed 1 year ago

Crash in [@ mozilla::dom::Document::GetInnerWindow]

Categories

(Core :: CSS Parsing and Computation, defect)

defect

Tracking

()

RESOLVED FIXED
133 Branch
Tracking Status
firefox-esr128 --- unaffected
firefox131 --- unaffected
firefox132 --- unaffected
firefox133 --- fixed

People

(Reporter: RyanVM, Assigned: arai)

References

(Regression)

Details

(Keywords: crash, regression)

Crash Data

Attachments

(1 file)

Timing and stack seems to fit bug 1899734.

Crash report: https://crash-stats.mozilla.org/report/index/8cb44a86-42dd-473b-8844-323070241018

Reason:

EXC_BAD_ACCESS / KERN_INVALID_ADDRESS

Top 10 frames:

0  XUL  mozilla::dom::Document::GetInnerWindow() const  dom/base/Document.h:1758
0  XUL  mozilla::SharedSubResourceCacheUtils::AddPerformanceEntryForCache(nsTString<c...  layout/style/SharedSubResourceCache.cpp:38
1  XUL  mozilla::css::Loader::AddPerformanceEntryForCachedSheet(mozilla::css::SheetLo...  layout/style/Loader.cpp:1720
2  XUL  mozilla::css::Loader::NotifyObservers(mozilla::css::SheetLoadData&, nsresult)  layout/style/Loader.cpp:1730
3  XUL  mozilla::SharedStyleSheetCache::LoadCompleted(mozilla::SharedStyleSheetCache*...  layout/style/SharedStyleSheetCache.cpp:68
4  XUL  mozilla::css::SheetLoadData::VerifySheetReadyToParse(nsresult, nsTSubstring<c...  layout/style/Loader.cpp:0
5  XUL  mozilla::css::StreamLoader::OnStopRequest(nsIRequest*, nsresult)  layout/style/StreamLoader.cpp:159
6  XUL  mozilla::net::HttpChannelChild::DoOnStopRequest(nsIRequest*, nsresult)  netwerk/protocol/http/HttpChannelChild.cpp:1254
6  XUL  mozilla::net::HttpChannelChild::OnStopRequest(nsresult const&, mozilla::net::...  netwerk/protocol/http/HttpChannelChild.cpp:1069
6  XUL  mozilla::net::HttpChannelChild::ProcessOnStopRequest(nsresult const&, mozilla...  netwerk/protocol/http/HttpChannelChild.cpp:933
Component: Audio/Video → CSS Parsing and Computation

Set release status flags based on info from the regressing bug 1899734

:arai, since you are the author of the regressor, bug 1899734, could you take a look? Also, could you set the severity field?

For more information, please visit BugBot documentation.

Assignee: nobody → arai.unmht
Status: NEW → ASSIGNED
Flags: needinfo?(arai.unmht)
Pushed by arai_a@mac.com: https://hg.mozilla.org/integration/autoland/rev/647445b4bf05 Do not add performance entry when the CSS loader is already dropped from the document. r=emilio
Status: ASSIGNED → RESOLVED
Closed: 1 year ago
Resolution: --- → FIXED
Target Milestone: --- → 133 Branch
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: