Open Bug 1945018 Opened 10 months ago Updated 27 days ago

Assertion failure: false (MOZ_ASSERT_UNREACHABLE: Could not get main thread; leaking an object!), at /builds/worker/workspace/obj-build/dist/include/nsProxyRelease.h:181

Categories

(Core :: DOM: Networking, defect, P3)

Product:
Core
Component:
DOM: Networking
Type:
defect

Tracking

()

Tracking Flags:
Tracking Status
firefox136 --- affected

People

(Reporter: tsmith, Unassigned)

References

(Blocks 1 open bug,
URL
)

Details

(Keywords: assertion, pernosco, Whiteboard: [necko-triaged])

Found with m-c 20250106-dd9f5a143dd2 (--enable-debug --enable-fuzzing)

This was found by visiting a live website with a debug build.

STR:

Assertion failure: false (MOZ_ASSERT_UNREACHABLE: Could not get main thread; leaking an object!), at /builds/worker/workspace/obj-build/dist/include/nsProxyRelease.h:181

#0 0x7fffe7639ada in void NS_ReleaseOnMainThread<nsIUrlClassifierGetCacheCallback>(char const*, already_AddRefed<nsIUrlClassifierGetCacheCallback>, bool) /builds/worker/workspace/obj-build/dist/include/nsProxyRelease.h:181:7
#1 0x7fffeb3229a1 in mozilla::dom::JSStreamConsumer::~JSStreamConsumer() /builds/worker/checkouts/gecko/dom/fetch/FetchUtil.cpp:402:7
#2 0x7fffeb3228ed in mozilla::dom::JSStreamConsumer::Release() /builds/worker/checkouts/gecko/dom/fetch/FetchUtil.cpp:655:1
#3 0x7fffefb365fa in Release /builds/worker/workspace/obj-build/dist/include/mozilla/RefPtr.h:49:40
#4 0x7fffefb365fa in Release /builds/worker/workspace/obj-build/dist/include/mozilla/RefPtr.h:409:36
#5 0x7fffefb365fa in assign_assuming_AddRef /builds/worker/workspace/obj-build/dist/include/mozilla/RefPtr.h:68:7
#6 0x7fffefb365fa in operator= /builds/worker/workspace/obj-build/dist/include/mozilla/RefPtr.h:180:5
#7 0x7fffefb365fa in js::wasm::Module::CompleteTier2GeneratorTaskImpl::~CompleteTier2GeneratorTaskImpl() /builds/worker/checkouts/gecko/js/src/wasm/WasmModule.cpp:106:37
#8 0x7fffefb36374 in js_delete<js::wasm::Module::CompleteTier2GeneratorTaskImpl> /builds/worker/workspace/obj-build/dist/include/js/Utility.h:581:9
#9 0x7fffefb36374 in js::wasm::Module::CompleteTier2GeneratorTaskImpl::runHelperThreadTask(js::AutoLockHelperThreadState&) /builds/worker/checkouts/gecko/js/src/wasm/WasmModule.cpp:142:5
#10 0x7fffee40aa6f in js::GlobalHelperThreadState::runTaskLocked(JS::HelperThreadTask*, js::AutoLockHelperThreadState&) /builds/worker/checkouts/gecko/js/src/vm/HelperThreads.cpp:668:11
#11 0x7fffee40a78b in runOneTask /builds/worker/checkouts/gecko/js/src/vm/HelperThreads.cpp:624:3
#12 0x7fffee40a78b in JS::RunHelperThreadTask(JS::HelperThreadTask*) /builds/worker/checkouts/gecko/js/src/vm/HelperThreads.cpp:613:23
#13 0x7fffe84785dc in HelperThreadTaskHandler::Run() /builds/worker/checkouts/gecko/js/xpconnect/src/XPCJSContext.cpp:1130:5
#14 0x7fffe77115d7 in mozilla::TaskController::RunPoolThread(mozilla::PoolThread*) /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:443:23
#15 0x7ffff79e89df in _pt_root /builds/worker/checkouts/gecko/nsprpub/pr/src/pthreads/ptthread.c:191:3
#16 0x7ffff7a85ac2 in start_thread nptl/pthread_create.c:442:8
#17 0x7ffff7b1784f  misc/../sysdeps/unix/sysv/linux/x86_64/clone3.S:81

I've tried multiple times with a local debug/fuzzing build, with no luck.

Sounds like a shutdown timing issue.

Severity: -- → S4
Flags: needinfo?(smayya)
Priority: -- → P3
Whiteboard: [necko-triaged][necko-priority-new]
Whiteboard: [necko-triaged][necko-priority-new] → [necko-triaged]

Hey Tyson, could you please share a pernosco session if it's not too much to ask?

Flags: needinfo?(smayya) → needinfo?(twsmith)

A Pernosco session is available here: https://pernos.co/debug/X2lqnfv2dzXfIMwSC8rJ-A/index.html

Flags: needinfo?(twsmith)
Keywords: pernosco
You need to log in before you can comment on or make changes to this bug.