Closed
Bug 1422578
Opened 7 years ago
Closed 7 years ago
Crash in Abort | __delete__()d actor | mozalloc_abort | NS_DebugBreak | mozilla::ipc::LogicError | mozilla::net::PHttpChannel::Transition
Categories
(WebExtensions :: Request Handling, defect, P2)
Tracking
(firefox-esr52 unaffected, firefox57 wontfix, firefox58 fixed)
RESOLVED
FIXED
mozilla58
Tracking | Status | |
---|---|---|
firefox-esr52 | --- | unaffected |
firefox57 | --- | wontfix |
firefox58 | --- | fixed |
People
(Reporter: evilpie, Assigned: kmag)
References
Details
(Keywords: crash)
Crash Data
This bug was filed from the Socorro interface and is
report bp-86f60e97-e473-4fbb-844c-5e5af1171203.
=============================================================
Top 10 frames of crashing thread:
0 mozglue.dll mozalloc_abort memory/mozalloc/mozalloc_abort.cpp:33
1 xul.dll NS_DebugBreak xpcom/base/nsDebugImpl.cpp:417
2 xul.dll mozilla::ipc::LogicError ipc/glue/ProtocolUtils.cpp:313
3 xul.dll mozilla::net::PHttpChannel::Transition ipc/ipdl/PHttpChannel.cpp:34
4 xul.dll mozilla::net::PHttpChannelParent::SendAttachStreamFilter ipc/ipdl/PHttpChannelParent.cpp:343
5 xul.dll mozilla::net::nsHttpChannel::AttachStreamFilter netwerk/protocol/http/nsHttpChannel.cpp:6767
6 xul.dll mozilla::extensions::StreamFilterParent::Create toolkit/components/extensions/webrequest/StreamFilterParent.cpp:147
7 xul.dll mozilla::dom::ContentParent::RecvInitStreamFilter dom/ipc/ContentParent.cpp:3317
8 xul.dll mozilla::dom::PContentParent::OnMessageReceived ipc/ipdl/PContentParent.cpp:3538
9 xul.dll mozilla::ipc::MessageChannel::DispatchAsyncMessage ipc/glue/MessageChannel.cpp:2119
=============================================================
Reported on /r/firefox: https://www.reddit.com/r/firefox/comments/7h9017/firefox_crashes_reliably_how_do_i_debug/
Looks like the culprit here really is Tampermonkey.
Has been reported here too: http://forums.mozillazine.org/viewtopic.php?p=14781704#p14781704
If I open the YouTube-link in this post it immediately crashes with the same signature:
https://forum.tampermonkey.net/viewtopic.php?f=17&t=2347
According to the Tampermonkey-dev:
"I can reproduce it and also fixed this locally already. A new beta build will be released soon."
Still would be nice to know why a Webextension can crash the whole browser...
Comment 3•7 years ago
|
||
Knowing the change made might make a permanent fix (and the testing of it) easier, if anyone has those details, it would be appreciated.
Comment 4•7 years ago
|
||
The issue appeared when a StreamFilter was attached in onBeforeRequest (just like show at the example code [1]) to a request that was redirected later-on. Not sure if this happens to every redirected request, but a redirect and a ondata listener was necessary to cause the crash.
[1] https://developer.mozilla.org/en-US/Add-ons/WebExtensions/API/webRequest/filterResponseData#Examples
Updated•7 years ago
|
Assignee: nobody → kmaglione+bmo
Priority: -- → P2
Assignee | ||
Updated•7 years ago
|
Updated•7 years ago
|
status-firefox57:
--- → wontfix
status-firefox58:
--- → fixed
status-firefox-esr52:
--- → unaffected
Target Milestone: --- → mozilla58
Updated•7 years ago
|
Flags: qe-verify-
Updated•6 years ago
|
Product: Toolkit → WebExtensions
You need to log in
before you can comment on or make changes to this bug.
Description
•