1992580 - Fenix Crash in [@ mozilla::dom::BrowsingContext::LoadURI] after MOZ_DIAGNOSTIC_ASSERT(sourceBC)

Status: NEW

(Core :: DOM: Core & HTML, defect)

Description

[Ryan VanderMeulen [:RyanVM]]

Fission-related possibly?

Crash report: https://crash-stats.mozilla.org/report/index/2cce1d2d-3339-4891-9a9c-7fc230251004

MOZ_CRASH Reason:

MOZ_DIAGNOSTIC_ASSERT(sourceBC)

Top 10 frames:

0  libxul.so  MOZ_CrashSequence(void*, long)  mfbt/Assertions.h:242
0  libxul.so  mozilla::dom::BrowsingContext::LoadURI(nsDocShellLoadState*, bool)  docshell/base/BrowsingContext.cpp:2255
1  libxul.so  mozilla::dom::BrowsingContext::Navigate(nsIURI*, nsIPrincipal&, mozilla::Erro...  docshell/base/BrowsingContext.cpp:2499
2  libxul.so  mozilla::dom::LocationBase::SetURI(nsIURI*, nsIPrincipal&, mozilla::ErrorResu...  dom/base/LocationBase.cpp:33
2  libxul.so  mozilla::dom::LocationBase::SetHrefWithBase(nsTSubstring<char> const&, nsIURI...  dom/base/LocationBase.cpp:97
3  libxul.so  mozilla::dom::Location_Binding::set_href(JSContext*, JS::Handle<JSObject*>, v...  dom/bindings/LocationBinding.cpp:0
4  libxul.so  mozilla::dom::binding_detail::GenericSetter<mozilla::dom::binding_detail::Cro...  dom/bindings/BindingUtils.cpp:3255
5  libxul.so  CallJSNative(JSContext*, bool (*)(JSContext*, unsigned int, JS::Value*), js::...  js/src/vm/Interpreter.cpp:490
5  libxul.so  js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstru...  js/src/vm/Interpreter.cpp:586
5  libxul.so  InternalCall(JSContext*, js::AnyInvokeArgs const&, js::CallReason)  js/src/vm/Interpreter.cpp:653

Comment 1

[BugBot [:suhaib / :marco/ :calixte]]

The severity field is not set for this bug.
:jimm, could you have a look please?

For more information, please visit BugBot documentation.

Comment 2

[Henri Sivonen (:hsivonen)]

S3 due to the low crash volume.

farre, recent changes in this area, perhaps?

Comment 3

[BugBot [:suhaib / :marco/ :calixte]]

The bug is linked to a topcrash signature, which matches the following criterion:

• Top 10 AArch64 and ARM crashes on beta

:edgar, could you consider increasing the severity of this top-crash bug?

For more information, please visit BugBot documentation.

Comment 4

[Andrew McCreight [:mccr8]]

This looks related to the Navigation API work.

Comment 5

[Edgar Chen [:edgar]]

(Bumped to S2 due to the topcrash)