Closed
Bug 1476674
Opened 6 years ago
Closed 6 years ago
Crash in nsNavHistory::RecalculateOriginFrecencyStats
Categories
(Toolkit :: Places, defect, P1)
Tracking
()
RESOLVED
FIXED
mozilla63
Tracking | Status | |
---|---|---|
firefox-esr52 | --- | unaffected |
firefox-esr60 | --- | unaffected |
firefox61 | --- | unaffected |
firefox62 | --- | fixed |
firefox63 | --- | fixed |
People
(Reporter: philipp, Assigned: adw)
References
Details
(Keywords: crash, regression, Whiteboard: [fxsearch])
Crash Data
Attachments
(2 files)
(deleted),
text/x-phabricator-request
|
mak
:
review+
|
Details |
(deleted),
patch
|
lizzard
:
approval-mozilla-beta+
|
Details | Diff | Splinter Review |
This bug was filed from the Socorro interface and is
report bp-d5647c12-1610-4fba-98fa-c09780180717.
=============================================================
Top 10 frames of crashing thread:
0 xul.dll nsNavHistory::RecalculateOriginFrecencyStats toolkit/components/places/nsNavHistory.cpp:617
1 xul.dll static nsresult mozilla::places::`anonymous namespace'::MigrateV52OriginFrecenciesRunnable::Run toolkit/components/places/Database.cpp:2599
2 xul.dll nsThread::ProcessNextEvent xpcom/threads/nsThread.cpp:1051
3 xul.dll NS_ProcessNextEvent xpcom/threads/nsThreadUtils.cpp:519
4 xul.dll static bool mozilla::SpinEventLoopUntil<1, <lambda_c1e220acbaa4d185d2d1800aa1daa0b2> > xpcom/threads/nsThreadUtils.h:324
5 xul.dll mozilla::storage::Connection::SpinningSynchronousClose storage/mozStorageConnection.cpp:1385
6 xul.dll mozilla::places::Database::BackupAndReplaceDatabaseFile toolkit/components/places/Database.cpp:874
7 xul.dll mozilla::places::Database::EnsureConnection toolkit/components/places/Database.cpp:665
8 xul.dll mozilla::places::History::GetDBConn toolkit/components/places/History.cpp:2692
9 xul.dll mozilla::places::History::VisitURI toolkit/components/places/History.cpp:2872
=============================================================
this signature is newly appearing on 63.0a1 and 62.0b9 after uplifting bug 1467627. crashes appear to be happening during browser startup according to one comment and the uptime field in crash reports.
Flags: needinfo?(adw)
Comment 1•6 years ago
|
||
Looks like the eventTarget is not there, that means the connection has been shutdown or has not ever been there. We're not null checking the conn, nor the eventTarget.
Updated•6 years ago
|
Priority: -- → P1
Whiteboard: [fxsearch]
Assignee | ||
Updated•6 years ago
|
Assignee: nobody → adw
Status: NEW → ASSIGNED
Flags: needinfo?(adw)
Assignee | ||
Comment 2•6 years ago
|
||
Assignee | ||
Comment 3•6 years ago
|
||
This changes the MOZ_ASSERT(target) to NS_ENSURE_STATE(target).
While I'm here, I also simplified the target assignment slightly by getting the connection and calling do_GetInterface() in one line instead of two. I didn't know whether passing null to do_GetInterface() was OK, so I tried hardcoding passing nullptr to it (instead of mDB->MainConn()) and as expected the NS_ENSURE_STATE failed and there wasn't a crash.
Comment 4•6 years ago
|
||
Comment on attachment 8993156 [details]
Bug 1476674 - Fix crash in nsNavHistory::RecalculateOriginFrecencyStats
Marco Bonardo [::mak] has approved the revision.
https://phabricator.services.mozilla.com/D2232
Attachment #8993156 -
Flags: review+
Pushed by dwillcoxon@mozilla.com:
https://hg.mozilla.org/integration/autoland/rev/522e7b9b6899
Fix crash in nsNavHistory::RecalculateOriginFrecencyStats r=mak
Comment 6•6 years ago
|
||
bugherder |
Status: ASSIGNED → RESOLVED
Closed: 6 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla63
Assignee | ||
Comment 7•6 years ago
|
||
Approval Request Comment
[Feature/Bug causing the regression]:
Autofill improvements in bug 1467627
[User impact if declined]:
Possible crash on startup
[Is this code covered by automated tests?]:
Yes, but obviously it didn't catch this bug (hard to reproduce)
[Has the fix been verified in Nightly?]:
No
[Needs manual test from QE? If yes, steps to reproduce]:
No
[List of other uplifts needed for the feature/fix]:
None
[Is the change risky?]:
No
[Why is the change risky/not risky?]:
Small simple fix that simply returns from a method early if a pointer is null
[String changes made/needed]:
None
Attachment #8993544 -
Flags: approval-mozilla-beta?
Comment on attachment 8993544 [details] [diff] [review]
Beta/62 patch
Crash fix, let's uplift for beta 11.
Attachment #8993544 -
Flags: approval-mozilla-beta? → approval-mozilla-beta+
Comment 9•6 years ago
|
||
bugherder uplift |
You need to log in
before you can comment on or make changes to this bug.
Description
•