1395778 - Crash in pages_commit

Status: RESOLVED DUPLICATE of bug 1229384

(Core :: Memory Allocator, defect)

Description

[Marcia Knous [:marcia]]

This bug was filed from the Socorro interface and is 
report bp-5eec4421-0b39-4a74-9120-eaecc0170901.
=============================================================

Seen while looking at crash stats: http://bit.ly/2emUlle. Crashes started using 20170831100258. 31 crashes/12 installs.

Possible regression from Bug 1395063?

Comment 1

[Mike Hommey [:glandium]]

As mentioned in the commit message in bug 1395063, it changed the crash signatures, so instead of having crashes in moz_abort that come from page_commit, you now have crashes in page_commit directly.

Comment 2

[Mike Hommey [:glandium]]

IOW, it's equivalent to:
https://crash-stats.mozilla.com/signature/?_sort=-date&signature=moz_abort%20%7C%20pages_commit&date=%3E%3D2017-08-25T01%3A05%3A00.000Z&date=%3C2017-09-01T01%3A05%3A00.000Z

Comment 3

[Nicholas Nethercote [inactive]]

See also bug 1395805.

glandium, is this likely to be generic heap corruption?

Comment 4

[Mike Hommey [:glandium]]

More like OOM. (VirtualAlloc failing)

Comment 5

[Nicholas Nethercote [inactive]]

I looked at a few of the crashes. Some of them have very low "Available Page File" values, e.g.:

https://crash-stats.mozilla.com/report/index/6daaf648-4acf-43d5-936c-2b3f50170910
https://crash-stats.mozilla.com/report/index/23e134f3-2d5e-4578-ac15-8024a0170909
https://crash-stats.mozilla.com/report/index/8eb5b355-d078-49ae-a208-d0f4a0170909

But some of them have plenty of virtual memory, physical memory, and page file:

https://crash-stats.mozilla.com/report/index/0faa0af6-89f3-4350-a7d8-4a4c80170910
https://crash-stats.mozilla.com/report/index/59fce851-8070-4a1c-96b2-4828d0170909

Comment 6

[Andrew McCreight [:mccr8]]

I'll file a bug to get something added to the Socorro prefix list so these different overcommit crashes don't end up in a single bucket, like they were before.

Comment 7

[Andrew McCreight [:mccr8]]

(In reply to Andrew McCreight [:mccr8] from comment #6)
> I'll file a bug to get something added to the Socorro prefix list so these
> different overcommit crashes don't end up in a single bucket, like they were
> before.

Well, I guess that doesn't make too much sense. I didn't realize the old signature also wasn't going very far on the prefix list. I'll just dupe this over to the old bug for this signature, and add the signature.

Comment 9

[Intermittent Failures Robot]

1 failures in 943 pushes (0.001 failures/push) were associated with this bug in the last 7 days.    

Repository breakdown:
* mozilla-beta: 1

Platform breakdown:
* windows7-32-stylo-disabled: 1

For more details, see:
https://brasstacks.mozilla.com/orangefactor/?display=Bug&bugid=1395778&startday=2017-09-18&endday=2017-09-24&tree=all