Closed Bug 1685216 Opened 4 years ago Closed 3 years ago

Assertion failure: IsInProcess(), at src/docshell/base/BrowsingContext.cpp:240

Categories

(Core :: DOM: Navigation, defect, P2)

defect

Tracking

()

RESOLVED FIXED
Fission Milestone M6c
Tracking Status
firefox-esr78 --- unaffected
firefox85 --- unaffected
firefox86 --- wontfix
firefox87 --- fixed

People

(Reporter: tsmith, Assigned: kmag)

References

(Blocks 1 open bug)

Details

(Keywords: assertion, testcase, Whiteboard: [bugmon:confirmed])

Attachments

(2 files)

Attached file testcase.html

Assertion failure: IsInProcess(), at src/docshell/base/BrowsingContext.cpp:240

#0 0x7f773a9748cf in mozilla::dom::BrowsingContext::SameOriginWithTop() src/docshell/base/BrowsingContext.cpp:240:3
#1 0x7f773a9d05b0 in SameOriginWithTop src/docshell/base/WindowContext.cpp:98:28
#2 0x7f773a9d05b0 in operator() src/docshell/base/nsDocShell.cpp:9929:44
#3 0x7f773a9d05b0 in operator() src/docshell/base/nsDocShell.cpp:9928:36
#4 0x7f773a9d05b0 in nsDocShell::DoURILoad(nsDocShellLoadState*, mozilla::Maybe<unsigned int>, nsIRequest**) src/docshell/base/nsDocShell.cpp:9921:35
#5 0x7f773a9814d0 in nsDocShell::InternalLoad(nsDocShellLoadState*, mozilla::Maybe<unsigned int>) src/docshell/base/nsDocShell.cpp:9381:8
#6 0x7f773a9a4d0d in nsDocShell::LoadURI(nsDocShellLoadState*, bool, bool) src/docshell/base/nsDocShell.cpp:873:8
#7 0x7f773a97eebd in mozilla::dom::BrowsingContext::LoadURI(nsDocShellLoadState*, bool) src/docshell/base/BrowsingContext.cpp:1762:23
#8 0x7f7739157e8b in mozilla::dom::ContentChild::RecvLoadURI(mozilla::dom::MaybeDiscarded<mozilla::dom::BrowsingContext> const&, nsDocShellLoadState*, bool, std::function<void (bool const&)>&&) src/dom/ipc/ContentChild.cpp:4136:12
#9 0x7f7735b5cb3d in mozilla::dom::PContentChild::OnMessageReceived(IPC::Message const&) /builds/worker/workspace/obj-build/ipc/ipdl/PContentChild.cpp:13154:56
#10 0x7f77359ca1ee in mozilla::ipc::MessageChannel::DispatchAsyncMessage(mozilla::ipc::ActorLifecycleProxy*, IPC::Message const&) src/ipc/glue/MessageChannel.cpp:2153:25
#11 0x7f77359c67ed in mozilla::ipc::MessageChannel::DispatchMessage(IPC::Message&&) src/ipc/glue/MessageChannel.cpp:2077:9
#12 0x7f77359c7c96 in mozilla::ipc::MessageChannel::RunMessage(mozilla::ipc::MessageChannel::MessageTask&) src/ipc/glue/MessageChannel.cpp:1925:3
#13 0x7f77359c89db in mozilla::ipc::MessageChannel::MessageTask::Run() src/ipc/glue/MessageChannel.cpp:1956:13
#14 0x7f77350ad35f in mozilla::RunnableTask::Run() src/xpcom/threads/TaskController.cpp:459:16
#15 0x7f77350ab95a in mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&) src/xpcom/threads/TaskController.cpp:739:26
#16 0x7f77350aaa04 in mozilla::TaskController::ExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&) src/xpcom/threads/TaskController.cpp:598:15
#17 0x7f77350aabb7 in mozilla::TaskController::ProcessPendingMTTask(bool) src/xpcom/threads/TaskController.cpp:382:36
#18 0x7f77350b0c06 in operator() src/xpcom/threads/TaskController.cpp:123:37
#19 0x7f77350b0c06 in mozilla::detail::RunnableFunction<mozilla::TaskController::InitializeInternal()::$_3>::Run() /builds/worker/workspace/obj-build/dist/include/nsThreadUtils.h:534:5
#20 0x7f77350c21f5 in nsThread::ProcessNextEvent(bool, bool*) src/xpcom/threads/nsThread.cpp:1200:14
#21 0x7f77350c82aa in NS_ProcessNextEvent(nsIThread*, bool) src/xpcom/threads/nsThreadUtils.cpp:548:10
#22 0x7f77359cfac6 in mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) src/ipc/glue/MessagePump.cpp:87:21
#23 0x7f773593bc83 in MessageLoop::RunInternal() src/ipc/chromium/src/base/message_loop.cc:334:10
#24 0x7f773593bb9d in RunHandler src/ipc/chromium/src/base/message_loop.cc:327:3
#25 0x7f773593bb9d in MessageLoop::Run() src/ipc/chromium/src/base/message_loop.cc:309:3
#26 0x7f77396b5df8 in nsBaseAppShell::Run() src/widget/nsBaseAppShell.cpp:137:27
#27 0x7f773aebeb53 in XRE_RunAppShell() src/toolkit/xre/nsEmbedFunctions.cpp:902:20
#28 0x7f77359d09a9 in mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*) src/ipc/glue/MessagePump.cpp:237:9
#29 0x7f773593bc83 in MessageLoop::RunInternal() src/ipc/chromium/src/base/message_loop.cc:334:10
#30 0x7f773593bb9d in RunHandler src/ipc/chromium/src/base/message_loop.cc:327:3
#31 0x7f773593bb9d in MessageLoop::Run() src/ipc/chromium/src/base/message_loop.cc:309:3
#32 0x7f773aebe738 in XRE_InitChildProcess(int, char**, XREChildData const*) src/toolkit/xre/nsEmbedFunctions.cpp:733:34
#33 0x558ff4850e07 in content_process_main src/browser/app/../../ipc/contentproc/plugin-container.cpp:57:28
#34 0x558ff4850e07 in main src/browser/app/nsBrowserApp.cpp:305:18
Flags: in-testsuite?
Attached file prefs.js
Keywords: bugmon

Bugmon Analysis:
Unable to reproduce bug using the following builds:

mozilla-central 20210106035126-1e323e0a130c
mozilla-central 20210106035126-1e323e0a130c
Removing bugmon keyword as no further action possible.
Please review the bug and re-add the keyword for further analysis.

Keywords: bugmon
Whiteboard: [bugmon:confirmed]

I wasn't able to reproduce this locally, either, on a build from 1/4, though I just manually enabled Fission and WebRender and didn't use the full prefs. Tyson, would it be possible to get bugmon to bisect a fix or something? Thanks.

Flags: needinfo?(twsmith)

Fission is enabled in the prefs, and the stack looks related to docshell stuff, so we probably want to track this for Fission.

Fission Milestone: --- → ?

I have a Pernosco session from the same test case but the stack is a bit different: https://pernos.co/debug/7FfXsdXZmrT-u-suMdWOkQ/index.html

Flags: needinfo?(twsmith)

Great! That stack has HasValidTransientUserGestureActivation at the top, so this might be same issue as bug 1685106.

Blocks: 1685106
Flags: needinfo?(nika)
Flags: needinfo?(emilio)

assigning to kmag

M6c

Assignee: nobody → kmaglione+bmo
Fission Milestone: ? → M6c
Severity: -- → S3
Priority: -- → P2
Flags: needinfo?(nika)
Flags: needinfo?(emilio)

see https://bugzilla.mozilla.org/show_bug.cgi?id=1685106#c2 for Nika's suggestion of the fix.

(Note: Patch for this is in bug 1685106)

Status: NEW → RESOLVED
Closed: 3 years ago
Resolution: --- → FIXED

:kmag, since this bug contains a bisection range, could you fill (if possible) the regressed_by field?
For more information, please visit auto_nag documentation.

Flags: needinfo?(kmaglione+bmo)

Sorry, bug in the bot.

Flags: needinfo?(kmaglione+bmo)
No longer blocks: 1685106
Depends on: 1685106
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: