1951060 - Crash in nsSHistory::WalkContiguousEntriesInOrder(nsISHEntry, const std::function<void(nsISHEntry*)>&)

Status: RESOLVED FIXED

(Core :: DOM: Navigation, defect)

Description

[Andreas Farre [:farre]]

nsISHEntry::GetShistory() (obj-linux-release/dist/include/nsISHEntry.h:450)
nsSHistory::WalkContiguousEntriesInOrder(nsISHEntry*, std::function<void (nsISHEntry*)> const&) (docshell/shistory/nsSHistory.cpp:625)
mozilla::dom::CanonicalBrowsingContext::GetContiguousSessionHistoryInfos(mozilla::dom::SessionHistoryInfo&) (docshell/base/CanonicalBrowsingContext.cpp:686)
mozilla::dom::ContentParent::RecvGetContiguousSessionHistoryInfos(mozilla::dom::MaybeDiscarded<mozilla::dom::BrowsingContext> const&, mozilla::dom::SessionHistoryInfo&&, std::function<void (mozilla::Span<mozilla::dom::SessionHistoryInfo const, 18446744073709551615ul>)>&&) (dom/ipc/ContentParent.cpp:7731)
mozilla::dom::PContentParent::OnMessageReceived(IPC::Message const&) (obj-linux-release/ipc/ipdl/PContentParent.cpp:7775)
mozilla::ipc::MessageChannel::DispatchAsyncMessage(mozilla::ipc::ActorLifecycleProxy*, IPC::Message const&) (ipc/glue/MessageChannel.cpp:1789)
mozilla::ipc::MessageChannel::DispatchMessage(mozilla::ipc::ActorLifecycleProxy*, mozilla::UniquePtr<IPC::Message, mozilla::DefaultDelete<IPC::Message> >) (ipc/glue/MessageChannel.cpp:1716)
mozilla::ipc::MessageChannel::RunMessage(mozilla::ipc::ActorLifecycleProxy*, mozilla::ipc::MessageChannel::MessageTask&) (ipc/glue/MessageChannel.cpp:1507)
mozilla::ipc::MessageChannel::MessageTask::Run() (ipc/glue/MessageChannel.cpp:1607)
mozilla::RunnableTask::Run() (xpcom/threads/TaskController.cpp:703)
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&) (xpcom/threads/TaskController.cpp:1250)
mozilla::TaskController::ExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&) (xpcom/threads/TaskController.cpp:1073)
mozilla::TaskController::ProcessPendingMTTask(bool) (xpcom/threads/TaskController.cpp:639)
mozilla::TaskController::TaskController()::$_0::operator()() const (xpcom/threads/TaskController.cpp:333)
mozilla::detail::RunnableFunction<mozilla::TaskController::TaskController()::$_0>::Run() (xpcom/threads/nsThreadUtils.h:548)
nsThread::ProcessNextEvent(bool, bool*) (xpcom/threads/nsThread.cpp:1159)
NS_ProcessNextEvent(nsIThread*, bool) (xpcom/threads/nsThreadUtils.cpp:480)
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) (ipc/glue/MessagePump.cpp:85)
MessageLoop::RunInternal() (ipc/chromium/src/base/message_loop.cc:369)
MessageLoop::RunHandler() (ipc/chromium/src/base/message_loop.cc:362)

/navigation-api/navigate-event/navigate-anchor-download.html

Comment 1

[Adam Vandolder [:avandolder]]

The listed test now passes and nsISHEntry::GetShistory is no longer being called from nsSHistory::WalkContiguousEntriesInOrder.