1962576 - Crash in [@ mozilla::places::Database::DispatchToAsyncThread] from nsFaviconService::AsyncGetFaviconForPage

Status: RESOLVED FIXED

(Toolkit :: Places, defect, P1)

Description

[Andrew McCreight [:mccr8]]

Crash report: https://crash-stats.mozilla.org/report/index/73f22b72-958a-480c-a83e-b734e0250424

Reason:

SIGSEGV / SEGV_MAPERR

Top 10 frames:

0  libxul.so  mozilla::places::Database::DispatchToAsyncThread(nsIRunnable*)  toolkit/components/places/Database.h:141
0  libxul.so  nsFaviconService::AsyncGetFaviconForPage(nsIURI*, unsigned short)  toolkit/components/places/nsFaviconService.cpp:475
1  libxul.so  nsFaviconService::GetFaviconForPage(nsIURI*, unsigned short, JSContext*, mozi...  toolkit/components/places/nsFaviconService.cpp:435
2  libxul.so  NS_InvokeByIndex
3  libxul.so  CallMethodHelper::Invoke()  js/xpconnect/src/XPCWrappedNative.cpp:1620
3  libxul.so  CallMethodHelper::Call()  js/xpconnect/src/XPCWrappedNative.cpp:1174
3  libxul.so  XPCWrappedNative::CallMethod(XPCCallContext&, XPCWrappedNative::CallMode)  js/xpconnect/src/XPCWrappedNative.cpp:1120
4  libxul.so  XPC_WN_CallMethod(JSContext*, unsigned int, JS::Value*)  js/xpconnect/src/XPCWrappedNativeJSOps.cpp:966
5  ?  @0x0000014b33e04b64
6  ?  @0x0000014b338215d2

First showed up in the 20250423092127 Nightly build. I'm going to guess this is another regression from bug 1915762.

Comment 1

[Andrew McCreight [:mccr8]]

bug 1962326 and bug 1962409 look like 2 different treeherder versions of this crash.

Comment 2

[BugBot [:suhaib / :marco/ :calixte]]

Set release status flags based on info from the regressing bug 1915762

Comment 3

[BugBot [:suhaib / :marco/ :calixte]]

The bug is linked to a topcrash signature, which matches the following criterion:

• Top 20 desktop browser crashes on beta

:mak, could you consider increasing the severity of this top-crash bug?

For more information, please visit BugBot documentation.

Comment 4

[Marco Bonardo [:mak]]

I think this is fixed already by Bug 1962409, leaving it open for a bit to ensure signature goes away.