Closed Bug 1561155 Opened 5 years ago Closed 5 years ago

Assertion failure: browsingContext->IsOwnedByProcess(childId), at dom/ipc/WindowGlobalParent.cpp:328

Categories

(Core :: DOM: Content Processes, defect, P2)

defect

Tracking

()

RESOLVED WORKSFORME
Fission Milestone M5

People

(Reporter: hiro, Assigned: jya)

References

(Regression)

Details

(Keywords: regression)

Attachments

(1 obsolete file)

I was bitten by this assertion when I was writing a mochitest for bug 1553012. And it seems that this assertion commonly happens when setting src attribute for iframe.

You can see the assertion by running ./mach test --setpref "fission.autostart=true" dom/base/test/test_bug590870.html.

Summary: Assertion failure: browsingContext->IsOwnedByProcess(childId), at /home/hiro/central/dom/ipc/WindowGlobalParent.cpp:328 → Assertion failure: browsingContext->IsOwnedByProcess(childId), at dom/ipc/WindowGlobalParent.cpp:328

I see this on cnn.com with fission enabled.

No longer blocks: fission
Fission Milestone: --- → M4

The priority flag is not set for this bug.
:jimm, could you have a look please?

For more information, please visit auto_nag documentation.

Flags: needinfo?(jmathies)
Flags: needinfo?(jmathies)
Priority: -- → P3
No longer depends on: 1566538

While ideally we should prevent this condition from ever happening, we can simply reject the promise for now which will abort the pending SessionStore restore.

In the short future, the most common cause for this race will be fixed by not requiring a process switch for each redirect

Assignee: nobody → jyavenard
Status: NEW → ASSIGNED
Priority: P3 → P2
Attachment #9079019 - Attachment description: Bug 1561155 - P1. Handle condition rather than asswer. r?nika → Bug 1561155 - P1. Handle condition rather than assert. r?nika
Attachment #9079019 - Attachment is obsolete: true

Roll some unfixed bugs from Fission Milestone M4 to M5

0ee3c76a-bc79-4eb2-8d12-05dc0b68e732

Fission Milestone: M4 → M5

kmag thinks he fixed this problem. The test_bug590870.html test is not currently skipped on Fission.

@ Matt, can you still reproduce this crash on cnn.com?

Flags: needinfo?(matt.woodrow)

(In reply to Chris Peterson [:cpeterson] from comment #5)

kmag thinks he fixed this problem. The test_bug590870.html test is not currently skipped on Fission.

@ Matt, can you still reproduce this crash on cnn.com?

I was the one who worked on that bug and could reproduce it easily.

The condition of the bug can no longer happen with DocumentChannel as we no longer have the possibility of a race between multiple processes being spawned for a single redirects.

Flags: needinfo?(matt.woodrow)
Status: ASSIGNED → RESOLVED
Closed: 5 years ago
Resolution: --- → WORKSFORME
Has Regression Range: --- → yes
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: