Closed Bug 1422578 Opened 7 years ago Closed 7 years ago

Crash in Abort | __delete__()d actor | mozalloc_abort | NS_DebugBreak | mozilla::ipc::LogicError | mozilla::net::PHttpChannel::Transition

Categories

(WebExtensions :: Request Handling, defect, P2)

Unspecified
Windows 10
defect

Tracking

(firefox-esr52 unaffected, firefox57 wontfix, firefox58 fixed)

RESOLVED FIXED
mozilla58
Tracking Status
firefox-esr52 --- unaffected
firefox57 --- wontfix
firefox58 --- fixed

People

(Reporter: evilpie, Assigned: kmag)

References

Details

(Keywords: crash)

Crash Data

This bug was filed from the Socorro interface and is report bp-86f60e97-e473-4fbb-844c-5e5af1171203. ============================================================= Top 10 frames of crashing thread: 0 mozglue.dll mozalloc_abort memory/mozalloc/mozalloc_abort.cpp:33 1 xul.dll NS_DebugBreak xpcom/base/nsDebugImpl.cpp:417 2 xul.dll mozilla::ipc::LogicError ipc/glue/ProtocolUtils.cpp:313 3 xul.dll mozilla::net::PHttpChannel::Transition ipc/ipdl/PHttpChannel.cpp:34 4 xul.dll mozilla::net::PHttpChannelParent::SendAttachStreamFilter ipc/ipdl/PHttpChannelParent.cpp:343 5 xul.dll mozilla::net::nsHttpChannel::AttachStreamFilter netwerk/protocol/http/nsHttpChannel.cpp:6767 6 xul.dll mozilla::extensions::StreamFilterParent::Create toolkit/components/extensions/webrequest/StreamFilterParent.cpp:147 7 xul.dll mozilla::dom::ContentParent::RecvInitStreamFilter dom/ipc/ContentParent.cpp:3317 8 xul.dll mozilla::dom::PContentParent::OnMessageReceived ipc/ipdl/PContentParent.cpp:3538 9 xul.dll mozilla::ipc::MessageChannel::DispatchAsyncMessage ipc/glue/MessageChannel.cpp:2119 ============================================================= Reported on /r/firefox: https://www.reddit.com/r/firefox/comments/7h9017/firefox_crashes_reliably_how_do_i_debug/
I'm getting this crash too...
Looks like the culprit here really is Tampermonkey. Has been reported here too: http://forums.mozillazine.org/viewtopic.php?p=14781704#p14781704 If I open the YouTube-link in this post it immediately crashes with the same signature: https://forum.tampermonkey.net/viewtopic.php?f=17&t=2347 According to the Tampermonkey-dev: "I can reproduce it and also fixed this locally already. A new beta build will be released soon." Still would be nice to know why a Webextension can crash the whole browser...
Knowing the change made might make a permanent fix (and the testing of it) easier, if anyone has those details, it would be appreciated.
The issue appeared when a StreamFilter was attached in onBeforeRequest (just like show at the example code [1]) to a request that was redirected later-on. Not sure if this happens to every redirected request, but a redirect and a ondata listener was necessary to cause the crash. [1] https://developer.mozilla.org/en-US/Add-ons/WebExtensions/API/webRequest/filterResponseData#Examples
Assignee: nobody → kmaglione+bmo
Priority: -- → P2
Status: NEW → RESOLVED
Closed: 7 years ago
Depends on: 1402944
Resolution: --- → FIXED
Target Milestone: --- → mozilla58
Flags: qe-verify-
Product: Toolkit → WebExtensions
You need to log in before you can comment on or make changes to this bug.