787037 - ASSERTION: More UnblockOnload() calls than BlockOnload() calls; dropping call: 'Not Reached' loading Youtube

Status: NEW

(Core :: General, defect)

Description

[(mostly gone) XtC4UaLL [:xtc4uall]]

Using a Win32 Debug Build (http://ftp.mozilla.org/pub/mozilla.org/firefox/nightly/2012-08-30-mozilla-central-debug/) I get an Assertion

###!!! ASSERTION: More UnblockOnload() calls than BlockOnload() calls; dropping call: 'Not Reached', file e:/builds/moz2_slave/m-cen-w32-dbg/build/content/base/src/nsDocument.cpp, line 7145

and a Crash (bp-997684e0-d938-40af-9752-29e0e2120830) when opening YouTube.com.

I know the Crash Report is useless without Symbols, but how to get proper Symbols/Stacks with provided Debug Builds? Looking for a Solution not involving local Building. Didn't find any Docs in MDN/MozWiki about this :-/

FWIW, https://bugzilla.mozilla.org/buglist.cgi?bug_id=430568,500847,773163 list the same Assertion.

Comment 1

[Kyle Huey (Exited; not receiving bugmail, old account, do not use)]

Based on my local build I think the regression range is http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=fcc533f691e9&tochange=a21fd4d085ad, but nothing in there jumps out at me.  Alice, can you bisect this?

Comment 2

[Mats Palmgren (inactive)]

Just loading http://www.youtube.com I get a bunch of assertions, but no crash,
(on Linux64):

###!!! ASSERTION: Double UnblockOnload!?: 'mCurrentRequestFlags & REQUEST_BLOCKS_ONLOAD', file content/base/src/nsImageLoadingContent.cpp, line 526
###!!! ASSERTION: More UnblockOnload() calls than BlockOnload() calls; dropping call: 'Not Reached', file content/base/src/nsDocument.cpp, line 6853

Comment 3

[Alex Keybl [:akeybl]]

Not a top crash, so no need to track for release.

Comment 4

[Alex Keybl [:akeybl]]

(of course, given this is a regression, we would strongly consider an uplift)

Comment 5

[(mostly gone) XtC4UaLL [:xtc4uall]]

Correction to the Range in Comment 1 after some digging:

Central Debug: 
good: 20120814175101
http://hg.mozilla.org/mozilla-central/rev/86ee4deea55b
bad: 20120815183801
http://hg.mozilla.org/mozilla-central/rev/50e4ff05741e

=> http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=86ee4deea55b&tochange=50e4ff05741e

Inbound Debug:
good: 20120815004159
http://hg.mozilla.org/integration/mozilla-inbound/rev/104388bbcab2
bad: 20120816020800
http://hg.mozilla.org/integration/mozilla-inbound/rev/2759cfa65dc5

=> http://hg.mozilla.org/integration/mozilla-inbound/pushloghtml?fromchange=104388bbcab2&tochange=2759cfa65dc5

Somebody (else) has to look at the Intersection of those two Ranges and/or bisect further using local Builds.

Comment 6

[Ioana (away)]

I bisected further on Central and the bug starts reproducing with this push:  http://hg.mozilla.org/mozilla-central/rev/62bb2e74fe67.

FYI: none of the builds crashed for me, but I did get a lot of the assertion in the summary on the builds with the bug.

Comment 7

[Kyle Huey (Exited; not receiving bugmail, old account, do not use)]

(In reply to Ioana Budnar, QA [:ioana] from comment #6)
> I bisected further on Central and the bug starts reproducing with this push:
> http://hg.mozilla.org/mozilla-central/rev/62bb2e74fe67.
> 
> FYI: none of the builds crashed for me, but I did get a lot of the assertion
> in the summary on the builds with the bug.

That's the revision that introduced these assertions so it's not surprising.