Closed Bug 1777496 Opened 2 years ago Closed 2 years ago

Crash in [@ mozilla::dom::HTMLLinkElement::TryDNSPrefetchOrPreconnectOrPrefetchOrPreloadOrPrerender]

Categories

(Core :: JavaScript Engine, defect, P1)

Unspecified
All
defect

Tracking

()

RESOLVED FIXED
104 Branch
Tracking Status
firefox-esr91 --- unaffected
firefox-esr102 --- unaffected
firefox102 --- unaffected
firefox103 --- unaffected
firefox104 --- fixed

People

(Reporter: aryx, Assigned: allstars.chh)

References

(Regression)

Details

(Keywords: crash, regression)

Crash Data

Attachments

(1 file)

9 crashes from 6 installations of Firefox 104.0a1, crash stack points to bug 1774175 as regressing change.

Crash report: https://crash-stats.mozilla.org/report/index/6e8b96d6-02c4-4f60-b033-672ed0220630

Reason: EXCEPTION_ACCESS_VIOLATION_WRITE

Top 10 frames of crashing thread:

0 xul.dll mozilla::dom::HTMLLinkElement::TryDNSPrefetchOrPreconnectOrPrefetchOrPreloadOrPrerender dom/html/HTMLLinkElement.cpp:495
1 xul.dll mozilla::dom::HTMLLinkElement::BindToTree dom/html/HTMLLinkElement.cpp:89
2 xul.dll nsINode::InsertChildBefore dom/base/nsINode.cpp:1579
3 xul.dll static nsINode::CloneAndAdopt dom/base/nsINode.cpp:3211
4 xul.dll static nsINode::CloneAndAdopt dom/base/nsINode.cpp:3382
5 xul.dll static nsINode::CloneAndAdopt dom/base/nsINode.cpp:3382
6 xul.dll static nsINode::CloneAndAdopt dom/base/nsINode.cpp:3382
7 xul.dll mozilla::dom::Document::CreateStaticClone dom/base/Document.cpp:13240
8 xul.dll nsGlobalWindowOuter::Print dom/base/nsGlobalWindowOuter.cpp:5222
9 xul.dll nsGlobalWindowOuter::PrintOuter dom/base/nsGlobalWindowOuter.cpp:5071
Flags: needinfo?(allstars.chh)

Set release status flags based on info from the regressing bug 1774175

Assignee: nobody → allstars.chh
Flags: needinfo?(allstars.chh)

The crash is because ModuleLoader is null, so calling SetAcquiringImportMaps(false) will have SEGV Fault, I'll check why the ModuleLoader is null when trying to print the document.

Blocks: 1774175
Priority: -- → P1

For the print preview documents, they are cloned from the original document in
Document::CreateStaticClone1. But the cloned document isn't attched to any
nsIContentViewer yet so it won't have any global object. The document is
attached to the nsIContentViewer later when the cloning is done2.

Also, the script elements from the cloned document are also cloned from
the original document, so they won't be processed in the cloned document.

Therefore we simply bail out if the module loader isn't initialized yet.

Pushed by allstars.chh@gmail.com: https://hg.mozilla.org/integration/autoland/rev/635806b9356c Check if ModuleLoader exists before calling SetAcquiringImportMaps. r=smaug
Status: NEW → RESOLVED
Closed: 2 years ago
Resolution: --- → FIXED
Target Milestone: --- → 104 Branch
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: