Crash [@ DoDeferredRelease]

RESOLVED DUPLICATE of bug 792226

Status

()

Core
XPConnect
--
critical
RESOLVED DUPLICATE of bug 792226
6 years ago
6 years ago

People

(Reporter: gkw, Assigned: dvander)

Tracking

(Blocks: 1 bug, {sec-critical, testcase})

Trunk
x86_64
Mac OS X
sec-critical, testcase
Points:
---
Bug Flags:
in-testsuite ?

Firefox Tracking Flags

(firefox18 affected)

Details

(Whiteboard: [sg:dupe 792226], crash signature)

Attachments

(2 attachments)

(Reporter)

Description

6 years ago
Created attachment 661908 [details]
stack

The testcase in bug 719114 comment 49 crashes Nightly 2012-09-17 (changeset 3f0587ce1774) at:

bp-4cb2a08a-bfa0-4e32-b0fe-8cdf62120916
bp-ea14df72-d8a9-47e6-a36e-c49112120916
bp-975f5602-eb82-4177-809d-8b9352120916
bp-8c44f300-81f9-4993-8105-4254f2120916
bp-8bc931f6-e12a-4758-ae1f-0cd012120916

Testcase is also available at http://www.straitstimes.com/sites/straitstimes.com/files/ST_20120914_SWIPHONE14_3298937.pdf

Keep dragging in the testcase in a new tab, close the tab, drag it into the same tab, etc. to reproduce.

Jesse has a stack from a debug build.

Locking s-s because bug 789882 is s-s and has a similar stack.
(Reporter)

Updated

6 years ago
See Also: → bug 789882
Bill's apparently out this week, so I'll give this a go. Marking critical due to it being scary looking.
Assignee: nobody → continuation
Keywords: sec-critical
Loading that PDF generates all sorts of crashiness for me on OSX in a local debug build. The stacks are all over the place.
Sounds like a possible dupe of bug 790464, due to the PDJ.JS stuff, and lots of weird stacks.
Created attachment 662259 [details]
ASAN log, IM enabled

:johns is trying this in ASAN. It crashes ASAN, with this log. He's trying it with IM disabled now to see if that affects anything.
It looked okay in ASAN with Ionmonkey disabled, so I'm going to reassign to dvander for triage. Please assign back to me if this is incorrect scapegoating.
Assignee: continuation → dvander
Status: NEW → RESOLVED
Last Resolved: 6 years ago
Resolution: --- → DUPLICATE
Duplicate of bug: 792226
Is it possible to make a testcase for this that will run in our regression testsuite?
Group: core-security
Flags: in-testsuite?
Whiteboard: [sg:dupe 792226]
You need to log in before you can comment on or make changes to this bug.