store.steampowered.com mozjs.dll crash

[Theresnothinghere]

Pale Moon frequently crashes with mozjs.dll error when browsing it's the Steam store.
From the debug log is kinda seems like it's trying to connect to the Steam app on the local computer (there isn't even one running on my computer) but it cannot due to security restrictions - that's good, but it shouldn't crash the browser, just silently fail without disturbing it.
It may as well be that this happens earlier and is not related tho.

I'm created a memory dump with windbg, I know that it's a bit weird platform - Windows 8.0 and the AVX2 build, but I've been able to reproduce on Windows 8.1 AVX (standard), also Nvidia graphics vs AMD, so I think it may be mostly universal.
Pale Moon version 34.3.0.1 x64

windbg.PNG

How to reproduce:

1. I've changed my profile to a new one in about:profiles
2. Search Steam on DDG and open the store
3. I've opened the Cyberpunk 2077 page on the the store home screen and it just crashed, but sometimes you may have to browse the Steam store for a few minutes before this crash happens

Just uploaded the crash dump.

[Moonchild]

I don't have the symbols for third party builds. If you want to share a dump for investigation, please do so against the official builds.

[Theresnothinghere]

Alright, makes sense

I've managed to reproduce the bug on the 7-zipped official build from the download page, this time I had a few steam tabs opened
btw I don't think it's related to this localhost connection attempt, cause it can definitely happen well before the crash, it was just the last thing that was logged.

Code: Select all

(1014.dec): Access violation - code c0000005 (first chance)
First chance exceptions are reported before any exception handling.
This exception may be expected and handled.
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for C:\palemoon\palemoon-34.3.0.1.win64\palemoon\mozjs.dll - 
mozjs!JS::TraceEdge+0x33ac:
000007f8`941d239c 8b4018          mov     eax,dword ptr [rax+18h] ds:00000000`00000018=????????
0:000> .dump /ma c:\mydumps\palemoon-crash.dmp
Creating c:\mydumps\palemoon-crash.dmp - mini user dump
Dump successfully written

Dump uploaded, the correct one has a name starting with "ok-", you can delete the other two.

[Moonchild]

Thank you.

Looks like a crash pretty deep in the garbage collector; not pointing to anything in particular, seems to be a near-null crash. Ton of weak references (over 3700) so a very heavy page, for sure.

[Moonchild]

I've tried very hard to reproduce the error on the current master tree and I'm unable to
So that makes it a lot harder to get to the bottom of it.

Are there any specific steps you take that lead to a crash?

[Theresnothinghere]

No unfortunately,
These are just random crashes that may or may not occur when browsing the steam store, it usually takes a few minutes of browsing but I also had it crash almost immediately.
So it's kinda like those crashes with GitHub but more often.

EDIT:
Ok I've been able to reproduce on Windows 11 VM in vmware, uploading the crash dump soon, this time it crashed when I opened a promotional image of one of the games.

Code: Select all

00007ffe`3322239c 8b4018          mov     eax,dword ptr [rax+18h] ds:00000000`00000018=????????

Dump uploaded, if you can't reproduce on the current tree, maybe it was already fixed by some surrounding changes, I can try this out again on the next PM release and use a different browser for steam for now.

[Gemmaugr]

I was hoping there was a way to reproduce it, because I've been trying to do just that since version 34.3.0 RC. No luck. It is truly random it seems, but only on steam, so I've been unable to catch anything. At least I know I'm not the only one.

[Theresnothinghere]

34.3.1 still crashing on Steam, same mozjs.dll error