Open Bug 2013379 Opened 18 hours ago Updated 18 hours ago

Crash in [@ mozilla::dom::ClientHandle::Control] - replit.com follow-up to bug 1910011

Categories

(Core :: DOM: Service Workers, defect, P2)

Unspecified
Windows 11
defect

Tracking

()

ASSIGNED
Tracking Status
firefox-esr140 --- affected
firefox147 --- affected
firefox148 --- affected
firefox149 --- affected

People

(Reporter: asuth, Assigned: asuth)

References

(Regression)

Details

(Keywords: crash, regression)

The fix in bug 1910011 fixed the first discovered crash from the replit.com reproduction discussed in https://bugzilla.mozilla.org/show_bug.cgi?id=1910011#c10 wherein an ABB -> ABA redirect caused a ClientHandle::Control crash due to a mismatch on the foreign bit of the partition key. However, while the fix there was sufficient to address the crash re-created by the reproducing test, the test apparently did not fully reproduce what's going on with replit.com so we are spinning off this follow-up because the fix there is good and we still want it but there clearly needs to be an additional fix, and it would be needlessly confusing for release-management purposes to have the follow-up fix also exist on that bug.

Set release status flags based on info from the regressing bug 1876575

You need to log in before you can comment on or make changes to this bug.