Found while fuzzing m-c 20220823-6e9bca1b5d0f (--enable-debug --enable-fuzzing)

To reproduce via Grizzly Replay:

$ pip install fuzzfetch grizzly-framework
$ python -m fuzzfetch -d --fuzzing -n firefox
$ python -m grizzly.replay ./firefox/firefox testcase.html

Assertion failure: false (NS_SUCCEEDED(CookieCommons::GetBaseDomain(mTLDService, uri, baseDomain, requireAHostMatch))), at /builds/worker/checkouts/gecko/netwerk/cookie/CookieServiceParent.cpp:139

#0 0x7f92874ca60c in mozilla::net::CookieServiceParent::UpdateCookieInContentList(nsIURI*, mozilla::OriginAttributes const&) /gecko/netwerk/cookie/CookieServiceParent.cpp:138:3
#1 0x7f92874c9e6b in mozilla::net::CookieServiceParent::TrackCookieLoad(nsIChannel*) /gecko/netwerk/cookie/CookieServiceParent.cpp:116:3
#2 0x7f928eb2f48e in mozilla::dom::ContentParent::AboutToLoadHttpFtpDocumentForChild(nsIChannel*, bool*) /gecko/dom/ipc/ContentParent.cpp:6211:5
#3 0x7f9287eecb33 in mozilla::net::HttpChannelParent::OnStartRequest(nsIRequest*) /gecko/netwerk/protocol/http/HttpChannelParent.cpp:1073:43
#4 0x7f92882d0f30 in operator() /gecko/netwerk/ipc/DocumentLoadListener.cpp:1334:27
#5 0x7f92882d0f30 in decltype(auto) mozilla::detail::VariantImplementation<unsigned char, 0ul, mozilla::net::DocumentLoadListener::OnStartRequestParams, mozilla::net::DocumentLoadListener::OnDataAvailableParams, mozilla::net::DocumentLoadListener::OnStopRequestParams, mozilla::net::DocumentLoadListener::OnAfterLastPartParams>::matchN<mozilla::Variant<mozilla::net::DocumentLoadListener::OnStartRequestParams, mozilla::net::DocumentLoadListener::OnDataAvailableParams, mozilla::net::DocumentLoadListener::OnStopRequestParams, mozilla::net::DocumentLoadListener::OnAfterLastPartParams>&, mozilla::net::DocumentLoadListener::ResumeSuspendedChannel(nsIStreamListener*)::$_14, mozilla::net::DocumentLoadListener::ResumeSuspendedChannel(nsIStreamListener*)::$_15, mozilla::net::DocumentLoadListener::ResumeSuspendedChannel(nsIStreamListener*)::$_16, mozilla::net::DocumentLoadListener::ResumeSuspendedChannel(nsIStreamListener*)::$_17>(mozilla::Variant<mozilla::net::DocumentLoadListener::OnStartRequestParams, mozilla::net::DocumentLoadListener::OnDataAvailableParams, mozilla::net::DocumentLoadListener::OnStopRequestParams, mozilla::net::DocumentLoadListener::OnAfterLastPartParams>&, mozilla::net::DocumentLoadListener::ResumeSuspendedChannel(nsIStreamListener*)::$_14&&, mozilla::net::DocumentLoadListener::ResumeSuspendedChannel(nsIStreamListener*)::$_15&&, mozilla::net::DocumentLoadListener::ResumeSuspendedChannel(nsIStreamListener*)::$_16&&, mozilla::net::DocumentLoadListener::ResumeSuspendedChannel(nsIStreamListener*)::$_17&&) /builds/worker/workspace/obj-build/dist/include/mozilla/Variant.h:309:16
#6 0x7f928829acda in match<(lambda at /builds/worker/checkouts/gecko/netwerk/ipc/DocumentLoadListener.cpp:1333:9), (lambda at /builds/worker/checkouts/gecko/netwerk/ipc/DocumentLoadListener.cpp:1339:9), (lambda at /builds/worker/checkouts/gecko/netwerk/ipc/DocumentLoadListener.cpp:1358:9), (lambda at /builds/worker/checkouts/gecko/netwerk/ipc/DocumentLoadListener.cpp:1366:9)> /builds/worker/workspace/obj-build/dist/include/mozilla/Variant.h:857:12
#7 0x7f928829acda in mozilla::net::DocumentLoadListener::ResumeSuspendedChannel(nsIStreamListener*) /gecko/netwerk/ipc/DocumentLoadListener.cpp:1332:13
#8 0x7f9288298e63 in mozilla::net::DocumentLoadListener::FinishReplacementChannelSetup(nsresult) /gecko/netwerk/ipc/DocumentLoadListener.cpp:1245:8
#9 0x7f92882995b4 in ReadyToVerify /gecko/netwerk/ipc/DocumentLoadListener.cpp:1197:3
#10 0x7f92882995b4 in non-virtual thunk to mozilla::net::DocumentLoadListener::ReadyToVerify(nsresult) /gecko/netwerk/ipc/DocumentLoadListener.cpp
#11 0x7f9287eeb514 in mozilla::net::HttpChannelParent::ContinueVerification(nsIAsyncVerifyRedirectReadyCallback*) /gecko/netwerk/protocol/http/HttpChannelParent.cpp:877:16
#12 0x7f9287eebae4 in non-virtual thunk to mozilla::net::HttpChannelParent::ContinueVerification(nsIAsyncVerifyRedirectReadyCallback*) /gecko/netwerk/protocol/http/HttpChannelParent.cpp
#13 0x7f928829873a in mozilla::net::DocumentLoadListener::RedirectToRealChannelFinished(nsresult) /gecko/netwerk/ipc/DocumentLoadListener.cpp:1192:22
#14 0x7f92882fe012 in mozilla::MozPromise<nsresult, mozilla::ipc::ResponseRejectReason, true>::ThenValue<mozilla::net::DocumentLoadListener::TriggerRedirectToRealChannel(mozilla::Maybe<mozilla::dom::ContentParent*> const&, nsTArray<mozilla::net::StreamFilterRequest>)::$_25, mozilla::net::DocumentLoadListener::TriggerRedirectToRealChannel(mozilla::Maybe<mozilla::dom::ContentParent*> const&, nsTArray<mozilla::net::StreamFilterRequest>)::$_26>::DoResolveOrRejectInternal(mozilla::MozPromise<nsresult, mozilla::ipc::ResponseRejectReason, true>::ResolveOrRejectValue&) /builds/worker/workspace/obj-build/dist/include/mozilla/MozPromise.h
#15 0x7f92882e3d5e in mozilla::MozPromise<nsresult, mozilla::ipc::ResponseRejectReason, true>::ThenValueBase::ResolveOrRejectRunnable::Run() /builds/worker/workspace/obj-build/dist/include/mozilla/MozPromise.h:487:21
#16 0x7f9286fed62b in mozilla::SimpleTaskQueue::DrainTasks() /builds/worker/workspace/obj-build/dist/include/mozilla/TaskDispatcher.h:44:10
#17 0x7f928700ab02 in nsThread::DrainDirectTasks() /gecko/xpcom/threads/nsThread.cpp:1409:16
#18 0x7f9287008f23 in nsThread::ProcessNextEvent(bool, bool*) /gecko/xpcom/threads/nsThread.cpp:1227:3
#19 0x7f9287013234 in NS_ProcessNextEvent(nsIThread*, bool) /gecko/xpcom/threads/nsThreadUtils.cpp:465:10
#20 0x7f92887a2d3f in mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) /gecko/ipc/glue/MessagePump.cpp:85:21
#21 0x7f9288621bb1 in RunInternal /gecko/ipc/chromium/src/base/message_loop.cc:381:10
#22 0x7f9288621bb1 in RunHandler /gecko/ipc/chromium/src/base/message_loop.cc:374:3
#23 0x7f9288621bb1 in MessageLoop::Run() /gecko/ipc/chromium/src/base/message_loop.cc:356:3
#24 0x7f928f8ad1c7 in nsBaseAppShell::Run() /gecko/widget/nsBaseAppShell.cpp:150:27
#25 0x7f929467ab47 in nsAppStartup::Run() /gecko/toolkit/components/startup/nsAppStartup.cpp:295:30
#26 0x7f92948a755e in XREMain::XRE_mainRun() /gecko/toolkit/xre/nsAppRunner.cpp:5725:22
#27 0x7f92948a92de in XREMain::XRE_main(int, char**, mozilla::BootstrapConfig const&) /gecko/toolkit/xre/nsAppRunner.cpp:5919:8
#28 0x7f92948aa05b in XRE_main(int, char**, mozilla::BootstrapConfig const&) /gecko/toolkit/xre/nsAppRunner.cpp:5975:21
#29 0x559bdd283d86 in do_main(int, char**, char**) /gecko/browser/app/nsBrowserApp.cpp:229:22
#30 0x559bdd283027 in main /gecko/browser/app/nsBrowserApp.cpp:433:16
#31 0x7f92aee3e082 in __libc_start_main /build/glibc-SzIz7B/glibc-2.31/csu/../csu/libc-start.c:308:16
#32 0x559bdd1c2f39 in _start (/home/worker/builds/m-c-20220823214727-fuzzing-asan-opt/firefox+0x79f39) (BuildId: 6552a0ed6c81f80b347e3c75935156e867d85446)

A Pernosco session is available here: https://pernos.co/debug/lQVmCtW0212lO-m9Ze9r_w/index.html

Bugmon Analysis
Verified bug as reproducible on mozilla-central 20220825222149-58735c4baea3.
The bug appears to have been introduced in the following build range:

Start: fe25d4f35ef8fecc1d98d667ab991b64bc483e97 (20220823173406)
End: 1b47a682b2f6ee5c4dfa1eb5c71bf857eec20fa0 (20220823190128)
Pushlog: https://hg.mozilla.org/integration/autoland/pushloghtml?fromchange=fe25d4f35ef8fecc1d98d667ab991b64bc483e97&tochange=1b47a682b2f6ee5c4dfa1eb5c71bf857eec20fa0

Set release status flags based on info from the regressing bug 1713203

No valid actions for resolution (DUPLICATE).
Removing bugmon keyword as no further action possible. Please review the bug and re-add the keyword for further analysis.