Fail fast when FirstChanceExceptionEventArgs allocation fails

src/coreclr/System.Private.CoreLib/src/System/AppContext.CoreCLR.cs

@@ -53,9 +53,9 @@ internal static unsafe void OnFirstChanceException(Exception* pException, Except
             {
                 OnFirstChanceException(*pException, AppDomain.CurrentDomain);
             }
-            catch (Exception ex)
+            catch
             {
-                *pOutException = ex;
+                // The VM does not expect exceptions to propagate out of this callback
             }
         }
 

src/libraries/System.Private.CoreLib/src/System/AppContext.cs

@@ -130,21 +130,44 @@ internal static void OnUnhandledException(object e)
             }
         }
 
+        [ThreadStatic]
+        private static bool t_deliveringFirstChanceNotification;
+
         private static void OnFirstChanceException(Exception e, object? sender)
         {
             if (FirstChanceException is EventHandler<FirstChanceExceptionEventArgs> handlers)
             {
-                FirstChanceExceptionEventArgs args = new(e);
-                foreach (EventHandler<FirstChanceExceptionEventArgs> handler in Delegate.EnumerateInvocationList(handlers))
+                // Guard against reentrancy. Allocating the event args below or running a
+                // handler may itself throw (e.g. OutOfMemoryException in a low-memory
+                // situation). That exception would trigger another first-chance
+                // notification on this same thread, allocate again, throw again, and
+                // recurse until the stack overflows. Skip nested notifications to break
+                // the recursion.
+                if (t_deliveringFirstChanceNotification)
                 {
-                    try
-                    {
-                        handler(sender, args);
-                    }
-                    catch
+                    return;
+                }
+
+                t_deliveringFirstChanceNotification = true;
+                try
+                {
+                    FirstChanceExceptionEventArgs args = new(e);
+
+                    foreach (EventHandler<FirstChanceExceptionEventArgs> handler in Delegate.EnumerateInvocationList(handlers))
                     {
+                        try
+                        {
+                            handler(sender, args);
+                        }
+                        catch
+                        {
+                        }
                     }
                 }
+                finally
+                {
+                    t_deliveringFirstChanceNotification = false;
+                }
             }
         }
 

src/libraries/System.Runtime/tests/System.Runtime.Extensions.Tests/System/AppDomainTests.cs

@@ -195,6 +195,34 @@ public void FirstChanceException_Called()
             }).Dispose();
         }
 
+        [ConditionalFact(typeof(RemoteExecutor), nameof(RemoteExecutor.IsSupported))]
+        [SkipOnMono("Mono does not suppress reentrant first chance exception notifications")]
+        public void FirstChanceException_HandlerThrows_DoesNotRecurse()
+        {
+            // A handler that throws must not cause the runtime to recursively deliver
+            // first-chance notifications for the exceptions it throws, which would
+            // otherwise recurse until the stack overflows. The handler should be
+            // invoked exactly once for the original exception.
+            RemoteExecutor.Invoke(() => {
+                int count = 0;
+                EventHandler<FirstChanceExceptionEventArgs> handler = (sender, e) =>
+                {
+                    count++;
+                    throw new FirstChanceTestException("from handler");
+                };
+                AppDomain.CurrentDomain.FirstChanceException += handler;
+                try
+                {
+                    throw new FirstChanceTestException("outer");
+                }
+                catch
+                {
+                }
+                AppDomain.CurrentDomain.FirstChanceException -= handler;
+                Assert.Equal(1, count);
+            }).Dispose();
+        }
+
         class FirstChanceTestException : Exception
         {
             public FirstChanceTestException(string message) : base(message)