1973138 - Crash in [@ mozilla::dom::Event::WidgetEventPtr] with family 6 model 183 stepping 1

Status: NEW

(Core :: DOM: Bindings (WebIDL), defect)

Description

[BugBot [:suhaib / :marco/ :calixte]]

Crash report: https://crash-stats.mozilla.org/report/index/c63e8e7d-e710-459e-9877-889ff0250530

Reason: EXCEPTION_ACCESS_VIOLATION_READ

Top 6 frames of crashing thread:

0  xul.dll  mozilla::dom::Event::WidgetEventPtr  dom/events/Event.cpp:618
0  xul.dll  mozilla::EventDispatcher::DispatchDOMEvent  dom/events/EventDispatcher.cpp:1386
0  xul.dll  nsINode::DispatchEvent  dom/base/nsINode.cpp:1540
1  xul.dll  mozilla::dom::EventTarget_Binding::dispatchEvent  dom/bindings/EventTargetBinding.cpp:1084
2  xul.dll  mozilla::dom::binding_detail::GenericMethod<mozilla::dom::binding_detail::MaybeCrossOriginObjectThisPolicy, mozilla::dom::binding_detail::ThrowExceptions>  dom/bindings/BindingUtils.cpp:3306
3  ?  @0x00000000f06f441b  

By querying Nightly crashes reported within the last 2 months, here are some insights about the signature:

• First crash report: 2025-04-17
• Process type: Multiple distinct types
• Is startup crash: No
• Has user comments: No
• Is null crash: Yes - all crashes happened on null or near null memory address

Comment 1

[BugBot [:suhaib / :marco/ :calixte]]

The Bugbug bot thinks this bug should belong to the 'Core::DOM: Events' component, and is moving the bug to that component. Please correct in case you think the bot is wrong.

Comment 2

[Andrew McCreight [:mccr8]]

93% of the crashes in the last 3 months with this signature are family 6 model 183 stepping 1, so this feels like it is probably a CPU bug.

Comment 3

[Masayuki Nakano [:masayuki] (he/him)(JST, +0900)(sick)]

The Event comes as a reference from the bindings. So, this check didn't work in the environments.

Comment 4

[Masayuki Nakano [:masayuki] (he/him)(JST, +0900)(sick)]

Anyway, this is a crash bug, so, setting to S2...

Family 6 Model 183 steeping 1 is Raptor Lake-S Stepping B0 such as Core i9 14900K and 13900K. Well, they are new enough, but they are known as having some troubles.

Comment 5

[Kagami Rosylight [:saschanaz] (they/them)]

So many raptor lake issues on the meta bug tree that maybe worth a sub-meta bug 😅 https://bugzilla.mozilla.org/showdependencytree.cgi?id=1896406&hide_resolved=1

Comment 6

[Masayuki Nakano [:masayuki] (he/him)(JST, +0900)(sick)]

Yeah, I filed bug 1975808.

Comment 7

[Hsin-Yi Tsai (she/her) [:hsinyi]]

S3, in alignment with other "family 6 model 183 stepping 1" bugs.