Closed Bug 1962580 Opened 28 days ago Closed 16 days ago

Crash in [@ nsFaviconService::GetFaviconForPage]

Categories

(Toolkit :: Places, defect, P1)

defect

Tracking

()

RESOLVED FIXED
140 Branch
Tracking Status
firefox-esr115 --- unaffected
firefox-esr128 --- unaffected
firefox137 --- unaffected
firefox138 --- unaffected
firefox139 --- fixed
firefox140 --- fixed

People

(Reporter: mccr8, Assigned: daisuke)

References

(Regression)

Details

(Keywords: crash, regression, topcrash, Whiteboard: [sng])

Crash Data

Crash report: https://crash-stats.mozilla.org/report/index/f4014a0e-dd98-47d2-99d9-7bcf20250424

MOZ_CRASH Reason:

MozPromise::ThenValue created from 'GetFaviconForPage' destroyed without being either disconnected, resolved, or rejected (dispatchRv: not dispatched)

Top 10 frames:

0  XUL  MOZ_CrashSequence(void*, long)  mfbt/Assertions.h:253
0  XUL  MOZ_Crash(char const*, int, char const*)  mfbt/Assertions.h:381
0  XUL  mozilla::MozPromise<nsCOMPtr<nsIFavicon>, nsresult, true>::ThenValueBase::Ass...  xpcom/threads/MozPromise.h:527
1  XUL  mozilla::MozPromise<nsCOMPtr<nsIFavicon>, nsresult, true>::AssertIsDead()  xpcom/threads/MozPromise.h:1253
2  XUL  mozilla::MozPromise<nsCOMPtr<nsIFavicon>, nsresult, true>::~MozPromise()  xpcom/threads/MozPromise.h:1301
3  XUL  mozilla::MozPromise<nsCOMPtr<nsIFavicon>, nsresult, true>::Private::~Private()  xpcom/threads/MozPromise.h:257
3  XUL  mozilla::MozPromise<nsCOMPtr<nsIFavicon>, nsresult, true>::Private::~Private()  xpcom/threads/MozPromise.h:257
3  XUL  mozilla::MozPromise<nsCOMPtr<nsIFavicon>, nsresult, true>::Private::~Private()  xpcom/threads/MozPromise.h:257
4  XUL  mozilla::MozPromiseRefcountable::Release()  xpcom/threads/MozPromise.h:152
4  XUL  mozilla::RefPtrTraits<mozilla::MozPromise<nsCOMPtr<nsIFavicon>, nsresult, tru...  mfbt/RefPtr.h:49

Similar to bug 1962575, but not quite the same error message so I'll leave it separate.

:daisuke, since you are the author of the regressor, bug 1915762, could you take a look? Also, could you set the severity field?

For more information, please visit BugBot documentation.

Flags: needinfo?(daisuke)
Severity: -- → S3
Priority: -- → P1
Whiteboard: [sng]

Set release status flags based on info from the regressing bug 1915762

The bug is linked to a topcrash signature, which matches the following criterion:

  • Top 20 desktop browser crashes on beta

:mak, could you consider increasing the severity of this top-crash bug?

For more information, please visit BugBot documentation.

Flags: needinfo?(mak)
Keywords: topcrash

I think this was addessed by bug 1962575, leaving it open for now to ensure signatures disappear.

Flags: needinfo?(mak)
Assignee: nobody → daisuke
Status: NEW → RESOLVED
Closed: 16 days ago
Depends on: 1962575
Flags: needinfo?(daisuke)
Resolution: --- → FIXED
See Also: 1962575
Target Milestone: --- → 140 Branch
You need to log in before you can comment on or make changes to this bug.