1996024 - Crash in [@ arena_dalloc | nsPipeEvents::~nsPipeEvents]

Status: NEW

(Core :: Widget: Gtk, defect, P3)

Description

[Sebastian Hengst [:aryx] (needinfo me if it's about an intermittent or backout)]

Crash signature new for Firefox 144.0. 151 crashes from 81 installs on Linux, maybe only on OpenSuse and derivatives.

Crash report: https://crash-stats.mozilla.org/report/index/54276718-3739-4d90-8966-a38060251023

Reason:

SIGSEGV / SEGV_MAPERR

Top 10 frames:

0  firefox  arena_dalloc(void*, unsigned long, arena_t*)
1  libxul.so  nsPipeEvents::~nsPipeEvents()
2  libxul.so  nsPipe::OnPipeException(nsresult, bool)
3  libxul.so  nsPipe::OnInputStreamException(nsPipeInputStream*, nsresult)
4  libxul.so  nsPipeInputStream::CloseWithStatus(nsresult)
5  libxul.so  nsInputStreamPump::OnStateStop()
6  libxul.so  nsInputStreamPump::OnInputStreamReady(nsIAsyncInputStream*)
7  libxul.so  NS_NewCancelableRunnableFunction<CallbackHolder::CallbackHolder(nsIAsyncInput...
8  libxul.so  mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::det...
9  libxul.so  mozilla::TaskController::ExecuteNextTaskOnlyMainThreadInternal(mozilla::detai...

Comment 1

[Martin Stránský [:stransky] (ni? me)]

Looks like we're hitting a kind of assert or so.

Comment 2

[Jens Stutte [:jstutte]]

I think I've seen that ~nsPipeEvents() also at bug 1990430 and IIUC all crashes here come from distributions that may use GCC?