Closed Bug 1087990 Opened 10 years ago Closed 9 years ago

Intermittent sessionrestore_no_auto_restore | application crashed [@ releaseMemArray]

Categories

(Toolkit :: Storage, defect)

Product:
Toolkit
Component:
Storage
Version:
35 Branch
Platform:
x86_64
Linux
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED WORKSFORME
Tracking Flags:
Tracking Status
firefox35 --- unaffected
firefox36 --- affected
firefox37 --- affected
firefox-esr31 --- unaffected

People

(Reporter: RyanVM, Unassigned)

Details

(Keywords: crash, intermittent-failure) 

Not sure what component this belongs in, but it looks scary.

https://treeherder.mozilla.org/ui/logviewer.html#?job_id=342695&repo=mozilla-aurora

builder 	Ubuntu HW 12.04 x64 mozilla-aurora pgo talos other_l64
buildid 	20141023004001
builduid 	098eea6419cd40dbb83797cd3ad92bc1
results 	failure (2)
revision 	c7e986f4ec72
slave 		talos-linux64-ix-002
starttime 	Thu Oct 23 2014 07:29:18 GMT-0400 (Eastern Standard Time)

04:35:56 INFO - Running test sessionrestore_no_auto_restore:
04:35:56 INFO - Started Thu, 23 Oct 2014 04:35:56
04:35:56 INFO - DEBUG : operating with platform_type : linux_
04:35:56 INFO - DEBUG : created profile
04:35:56 INFO - DEBUG : command line: /builds/slave/talos-slave/test-pgo/build/application/firefox/firefox -profile /tmp/tmp2VnaF6/profile http://localhost/getInfo.html
04:36:05 INFO - DEBUG : initialized firefox
04:36:05 INFO - DEBUG : Reinstalling /home/cltbld/talos-slave/test/build/venv/lib/python2.7/site-packages/talos/startup_test/sessionrestore/profile/sessionstore.js on top of /tmp/tmp2VnaF6/profile/sessionstore.js
04:36:05 INFO - DEBUG : command line: /builds/slave/talos-slave/test-pgo/build/application/firefox/firefox -profile /tmp/tmp2VnaF6/profile http://localhost/startup_test/sessionrestore/index.html
04:36:07 INFO - INFO : Browser exited with error code: 2816
04:36:12 INFO - DEBUG : Terminating: firefox, plugin-container, crashreporter
04:36:12 INFO - mozcrash INFO | Downloading symbols from: https://ftp-ssl.mozilla.org/pub/mozilla.org/firefox/tinderbox-builds/mozilla-aurora-linux64/1414050001/firefox-35.0a2.en-US.linux-x86_64.crashreporter-symbols.zip
04:36:17 INFO - __browserInfo
04:36:17 INFO - browser_name:Firefox
04:36:17 INFO - browser_version:35.0a2
04:36:17 INFO - buildID:20141023004001
04:36:17 INFO - __browserInfo__metrics Screen width/height:1600/1200
04:36:17 INFO - colorDepth:24
04:36:17 INFO - Browser inner width/height: 1151/783
04:36:17 INFO - __metrics
04:36:17 INFO - JavaScript error: resource://app/modules/WebappManager.jsm, line 43: NS_ERROR_FAILURE: Component returned failure code: 0x80004005 (NS_ERROR_FAILURE) [nsIObserverService.removeObserver]
04:36:17 INFO - JavaScript error: resource://gre/modules/SimpleServiceDiscovery.jsm, line 188: NS_NOINTERFACE: Component does not have requested interface [nsIConsoleService.logStringMessage]
04:36:17 INFO - browser_name:Firefox
04:36:17 INFO - browser_version:35.0a2
04:36:17 INFO - buildID:20141023004001
04:36:17 INFO - __start_report779__end_report
04:36:17 INFO - __startTimestamp1414064166828__endTimestamp
04:36:17 INFO - PROCESS-CRASH | sessionrestore_no_auto_restore | application crashed [@ releaseMemArray]
04:36:17 INFO - Crash dump filename: /tmp/tmp2VnaF6/profile/minidumps/0cc92a1a-e21e-6241-63daffe2-0ddf5b22.dmp
04:36:17 INFO - Operating system: Linux
04:36:17 INFO - 0.0.0 Linux 3.2.0-38-generic #61-Ubuntu SMP Tue Feb 19 12:18:21 UTC 2013 x86_64
04:36:17 INFO - CPU: amd64
04:36:17 INFO - family 6 model 30 stepping 5
04:36:17 INFO - 8 CPUs
04:36:17 INFO - Crash reason: SIGSEGV
04:36:17 INFO - Crash address: 0x0
04:36:17 INFO - Thread 37 (crashed)
04:36:17 INFO - 0 libmozsqlite3.so!releaseMemArray [sqlite3.c:c7e986f4ec72 : 63444 + 0x0]
04:36:17 INFO - rbx = 0x5a5a5a5a5a5a5a5a r12 = 0x0000000000000001
04:36:17 INFO - r13 = 0x0000000000000001 r14 = 0x00007fd976aaeab0
04:36:17 INFO - r15 = 0x00007fd969717a80 rip = 0x00007fd98f0ea1b1
04:36:17 INFO - rsp = 0x00007fd968cfeae0 rbp = 0x5a5a5a5a5a5a5a5a
04:36:17 INFO - Found by: given as instruction pointer in context
04:36:17 INFO - 1 libmozsqlite3.so!sqlite3VdbeClearObject [sqlite3.c:c7e986f4ec72 : 63442 + 0x15]
04:36:17 INFO - rbx = 0x00007fd96f5abda0 r12 = 0x0000000000000001
04:36:17 INFO - r13 = 0x0000000000000001 r14 = 0x00007fd976aaeab0
04:36:17 INFO - r15 = 0x00007fd969717a80 rip = 0x00007fd98f09f181
04:36:17 INFO - rsp = 0x00007fd968cfeb20 rbp = 0x5a5a5a5a5a5a5a5a
04:36:17 INFO - Found by: call frame info
04:36:17 INFO - 2 libmozsqlite3.so!sqlite3VdbeDelete [sqlite3.c:c7e986f4ec72 : 64915 + 0xa]
04:36:17 INFO - rbx = 0x00007fd96f5abda0 r12 = 0x0000000000000001
04:36:17 INFO - r13 = 0x0000000000000001 r14 = 0x00007fd976aaeab0
04:36:17 INFO - r15 = 0x00007fd969717a80 rip = 0x00007fd98f09f49e
04:36:17 INFO - rsp = 0x00007fd968cfeb50 rbp = 0x5a5a5a5a5a5a5a5a
04:36:17 INFO - Found by: call frame info
04:36:17 INFO - 3 libmozsqlite3.so!sqlite3VdbeFinalize [sqlite3.c:c7e986f4ec72 : 64837 + 0x7]
04:36:17 INFO - rbx = 0x00007fd96f5abda0 r12 = 0x0000000000000001
04:36:17 INFO - r13 = 0x0000000000000001 r14 = 0x00007fd976aaeab0
04:36:17 INFO - r15 = 0x00007fd969717a80 rip = 0x00007fd98f10e9a2
04:36:17 INFO - rsp = 0x00007fd968cfeb80 rbp = 0x0000000000000000
04:36:17 INFO - Found by: call frame info
04:36:17 INFO - 4 libmozsqlite3.so!sqlite3_finalize [sqlite3.c:c7e986f4ec72 : 66321 + 0x7]
04:36:17 INFO - rbx = 0x00007fd979174c00 r12 = 0x0000000000000001
04:36:17 INFO - r13 = 0x0000000000000001 r14 = 0x00007fd976aaeab0
04:36:17 INFO - r15 = 0x00007fd969717a80 rip = 0x00007fd98f10eb37
04:36:17 INFO - rsp = 0x00007fd968cfeba0 rbp = 0x00007fd96f5abda0
04:36:17 INFO - Found by: call frame info
04:36:17 INFO - 5 libxul.so!mozilla::storage::Statement::internalFinalize(bool) [mozStorageStatement.cpp:c7e986f4ec72 : 386 + 0x8]
04:36:17 INFO - rbx = 0x00007fd967618f60 r12 = 0x0000000000000001
04:36:17 INFO - r13 = 0x0000000000000001 r14 = 0x00007fd976aaeab0
04:36:17 INFO - r15 = 0x00007fd969717a80 rip = 0x00007fd98b890fee
04:36:17 INFO - rsp = 0x00007fd968cfebd0 rbp = 0x0000000000000000
04:36:17 INFO - Found by: call frame info
04:36:17 INFO - 6 libxul.so!mozilla::storage::Statement::~Statement() [mozStorageStatement.cpp:c7e986f4ec72 : 246 + 0x4]
04:36:17 INFO - rbx = 0x00007fd967618f60 r12 = 0x00007fd98e87bdb8
04:36:17 INFO - r13 = 0x0000000000000001 r14 = 0x00007fd976aaeab0
04:36:17 INFO - r15 = 0x00007fd969717a80 rip = 0x00007fd98b8915ce
04:36:17 INFO - rsp = 0x00007fd968cfec10 rbp = 0x00007fd98e974dd0
04:36:17 INFO - Found by: call frame info
04:36:17 INFO - 7 libxul.so!mozilla::storage::Statement::Release() [mozStorageStatement.cpp:c7e986f4ec72 : 253 + 0xd]
04:36:17 INFO - rbx = 0x00007fd967618f60 r12 = 0x00007fd98e87bdb8
04:36:17 INFO - r13 = 0x0000000000000001 r14 = 0x00007fd976aaeab0
04:36:17 INFO - r15 = 0x00007fd969717a80 rip = 0x00007fd98b89167d
04:36:17 INFO - rsp = 0x00007fd968cfec20 rbp = 0x00007fd98e974dd0
04:36:17 INFO - Found by: call frame info
04:36:17 INFO - 8 libxul.so!mozilla::storage::Connection::initializeClone(mozilla::storage::Connection*, bool) [nsCOMPtr.h:c7e986f4ec72 : 427 + 0x5]
04:36:17 INFO - rbx = 0x00007fd98e87bd88 r12 = 0x00007fd98e87bdb8
04:36:17 INFO - r13 = 0x0000000000000001 r14 = 0x00007fd976aaeab0
04:36:17 INFO - r15 = 0x00007fd969717a80 rip = 0x00007fd98b8886f6
04:36:17 INFO - rsp = 0x00007fd968cfec40 rbp = 0x00007fd98e974dd0
04:36:17 INFO - Found by: call frame info
04:36:17 INFO - 9 libxul.so!mozilla::storage::::AsyncInitializeClone::Run [mozStorageConnection.cpp:c7e986f4ec72 : 417 + 0xc]
04:36:17 INFO - rbx = 0x00007fd9697ddb80 r12 = 0x0000000000000001
04:36:17 INFO - r13 = 0x0000000000000000 r14 = 0x0000000000000000
04:36:17 INFO - r15 = 0x0000000000000000 rip = 0x00007fd98b888879
04:36:17 INFO - rsp = 0x00007fd968cfed00 rbp = 0x00007fd968cfed90
04:36:17 INFO - Found by: call frame info
04:36:17 INFO - 10 libxul.so!nsThread::ProcessNextEvent(bool, bool*) [nsThread.cpp:c7e986f4ec72 : 830 + 0x5]
04:36:17 INFO - rbx = 0x00007fd969717be0 r12 = 0x0000000000000001
04:36:17 INFO - r13 = 0x0000000000000000 r14 = 0x0000000000000000
04:36:17 INFO - r15 = 0x0000000000000000 rip = 0x00007fd98b2110cd
04:36:17 INFO - rsp = 0x00007fd968cfed10 rbp = 0x00007fd968cfed90
04:36:17 INFO - Found by: call frame info
Component: General → Storage
Product: Core → Toolkit
Version: Trunk → 35 Branch
I assume this has only been seen on Aurora
Well, it's somewhere in mozStorage, that's all I can tell from the stack.
Flags: needinfo?(mak77)
I don't have very good ideas about this.

I'm cc-ing Dan from Sqlite team in case they have some insight regarding Sqlite code.

On my side I must admit our finalization code is not crystal clear. Here we are releasing a statement on the helper thread, likely one of these

http://mxr.mozilla.org/mozilla-central/source/storage/src/mozStorageConnection.cpp#1233
Flags: needinfo?(mak77)
We (the SQLite team) have spent some time looking into this.  The only explanation we have been able to come up with so far is external heap corruption.  If you come up with additional information, and especially anything that contradicts our hypothesis or a reproducible test case, then by all means let us know straight away.
Inactive; closing (see bug 1180138).
Status: NEW → RESOLVED
Closed: 9 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.