966697 - Intermittent browser_bug575561.js | application crashed [@ mozalloc_abort(char const * const)] (ABORT: CRT ERROR HEAP CORRUPTION DETECTED: after Normal block (#3384698) at 0x0C8B0588.)

Status: RESOLVED WORKSFORME

(Core :: JavaScript Engine, defect)

Description

[Ryan VanderMeulen [:RyanVM]]

Quite a few bugs on file for this abort, so what's one more? Marking as s-s since most of the other ones are too.

https://tbpl.mozilla.org/php/getParsedLog.php?id=33958613&tree=Mozilla-Aurora

Windows XP 32-bit mozilla-aurora debug test mochitest-browser-chrome on 2014-02-01 16:52:17 PST for push e9224caee6bb
slave: t-xp32-ix-117

16:56:51     INFO -  TEST-PASS | chrome://mochitests/content/browser/browser/base/content/test/general/browser_bug575561.js | Link should not open in a new tab
16:56:51     INFO -  --DOCSHELL 0C6DE370 == 31 [pid = 3784] [id = 200]
16:56:51     INFO -  --DOCSHELL 0E48B4F0 == 30 [pid = 3784] [id = 199]
16:56:51     INFO -  --DOCSHELL 12DE1428 == 29 [pid = 3784] [id = 197]
16:56:51     INFO -  --DOCSHELL 12DC8388 == 28 [pid = 3784] [id = 196]
16:56:51     INFO -  --DOCSHELL 0E352018 == 27 [pid = 3784] [id = 195]
16:56:51     INFO -  --DOCSHELL 14252580 == 26 [pid = 3784] [id = 194]
16:56:51     INFO -  --DOCSHELL 0E69AEC8 == 25 [pid = 3784] [id = 193]
16:56:51     INFO -  [3784] WARNING: NS_ENSURE_TRUE(mMutable) failed: file c:/builds/moz2_slave/m-aurora-w32-d-000000000000000/build/netwerk/base/src/nsSimpleURI.cpp, line 265
16:56:51     INFO -  ###!!! ABORT: CRT ERROR HEAP CORRUPTION DETECTED: after Normal block (#3384698) at 0x0C8B0588.
16:56:51     INFO -  CRT detected that the application wrote to memory after end of heap buffer.
16:56:51     INFO -  Hit MOZ_CRASH() at c:/builds/moz2_slave/m-aurora-w32-d-000000000000000/build/memory/mozalloc/mozalloc_abort.cpp:30
16:56:51     INFO -  nsStringStats
16:56:51     INFO -   => mAllocCount:         409231
16:56:51     INFO -   => mReallocCount:        35458
16:56:51     INFO -   => mFreeCount:          380682  --  LEAKED 28549 !!!
16:56:51     INFO -   => mShareCount:         619623
16:56:51     INFO -   => mAdoptCount:          28942
16:56:51     INFO -   => mAdoptFreeCount:      28938  --  LEAKED 4 !!!
16:56:51     INFO -   => Process ID: 3784, Thread ID: 3820
16:56:51     INFO -  [548] WARNING: shutting down early because of crash!: file c:/builds/moz2_slave/m-aurora-w32-d-000000000000000/build/dom/plugins/ipc/PluginModuleChild.cpp, line 697
16:56:51     INFO -  [548] WARNING: plugin process _exit()ing: file c:/builds/moz2_slave/m-aurora-w32-d-000000000000000/build/dom/plugins/ipc/PluginModuleChild.cpp, line 662
16:56:51     INFO -  NPP_Destroy
16:56:51     INFO -  NPP_Destroy
16:56:51     INFO -  NPP_Destroy
16:56:51     INFO -  NPP_Destroy
16:56:51     INFO -  NPP_Destroy
16:56:51     INFO -  NPP_Destroy
16:56:51     INFO -  nsStringStats
16:56:51     INFO -   => mAllocCount:            116
16:56:51     INFO -   => mReallocCount:            1
16:56:51     INFO -   => mFreeCount:              45  --  LEAKED 71 !!!
16:56:51     INFO -   => mShareCount:            135
16:56:51     INFO -   => mAdoptCount:              0
16:56:51     INFO -   => mAdoptFreeCount:          0
16:56:51     INFO -   => Process ID: 548, Thread ID: 604
16:56:51  WARNING -  TEST-UNEXPECTED-FAIL | chrome://mochitests/content/browser/browser/base/content/test/general/browser_bug575561.js | application terminated with exit code 2147483651
16:56:51     INFO -  INFO | runtests.py | Application ran for: 0:01:56.330000
16:56:51     INFO -  INFO | zombiecheck | Reading PID log: c:\docume~1\cltbld~1.t-x\locals~1\temp\tmpuq9ec_pidlog
16:56:51     INFO -  ==> process 3784 launched child process 3916 ("C:\slave\test\build\application\firefox\plugin-container.exe" --channel=3784.ef53728.759181535 "c:\docume~1\cltbld~1.t-x\locals~1\temp\tmpzpbrfg\plugins\nptest.dll" -greomni "C:\slave\test\build\application\firefox\omni.ja" -appomni "C:\slave\test\build\application\firefox\browser\omni.ja" -appdir "C:\slave\test\build\application\firefox\browser" - 3784 "\\.\pipe\gecko-crash-server-pipe.3784" plugin)
16:56:51     INFO -  ==> process 3784 launched child process 548 ("C:\slave\test\build\application\firefox\plugin-container.exe" --channel=3784.f363290.770221467 "c:\docume~1\cltbld~1.t-x\locals~1\temp\tmpzpbrfg\plugins\nptest.dll" -greomni "C:\slave\test\build\application\firefox\omni.ja" -appomni "C:\slave\test\build\application\firefox\browser\omni.ja" -appdir "C:\slave\test\build\application\firefox\browser" - 3784 "\\.\pipe\gecko-crash-server-pipe.3784" plugin)
16:56:59  WARNING -  PROCESS-CRASH | chrome://mochitests/content/browser/browser/base/content/test/general/browser_bug575561.js | application crashed [@ mozalloc_abort(char const * const)]
16:56:59     INFO -  Crash dump filename: c:\docume~1\cltbld~1.t-x\locals~1\temp\tmpzpbrfg\minidumps\986539d3-39a3-40d8-9961-79edf3ff53f4.dmp
16:56:59     INFO -  Operating system: Windows NT
16:56:59     INFO -                    5.1.2600 Service Pack 3
16:56:59     INFO -  CPU: x86
16:56:59     INFO -       GenuineIntel family 6 model 30 stepping 5
16:56:59     INFO -       8 CPUs
16:56:59     INFO -  Crash reason:  EXCEPTION_BREAKPOINT
16:56:59     INFO -  Crash address: 0x1371245
16:56:59     INFO -  Thread 6 (crashed)
16:56:59     INFO -   0  mozalloc.dll!mozalloc_abort(char const * const) [mozalloc_abort.cpp:e9224caee6bb : 30 + 0x2c]
16:56:59     INFO -      eip = 0x01371245   esp = 0x049ead78   ebp = 0x049ead80   ebx = 0x10319080
16:56:59     INFO -      esi = 0x10261440   edi = 0x10260670   eax = 0x00000000   ecx = 0xfb434f32
16:56:59     INFO -      edx = 0x10361f48   efl = 0x00000206
16:56:59     INFO -      Found by: given as instruction pointer in context
16:56:59     INFO -   1  xul.dll!MSCRTReportHook [nsAppRunner.cpp:e9224caee6bb : 1413 + 0x8]
16:56:59     INFO -      eip = 0x031839d7   esp = 0x049ead88   ebp = 0x049ead8c
16:56:59     INFO -      Found by: call frame info
16:56:59     INFO -   2  MSVCR100D.dll + 0x11b2a7
16:56:59     INFO -      eip = 0x1031b2a8   esp = 0x049ead94   ebp = 0x049efe18
16:56:59     INFO -      Found by: call frame info
16:56:59     INFO -   3  MSVCR100D.dll + 0x120a31
16:56:59     INFO -      eip = 0x10320a32   esp = 0x049efe20   ebp = 0x049efe38
16:56:59     INFO -      Found by: previous frame's frame pointer
16:56:59     INFO -   4  MSVCR100D.dll + 0x1209ea
16:56:59     INFO -      eip = 0x103209eb   esp = 0x049efe40   ebp = 0x049efe60
16:56:59     INFO -      Found by: previous frame's frame pointer
16:56:59     INFO -   5  MSVCR100D.dll + 0x116cc2
16:56:59     INFO -      eip = 0x10316cc3   esp = 0x049efe68   ebp = 0x049efe8c
16:56:59     INFO -      Found by: previous frame's frame pointer
16:56:59     INFO -   6  MSVCR100D.dll + 0x11696f
16:56:59     INFO -      eip = 0x10316970   esp = 0x049efe94   ebp = 0x049efec4
16:56:59     INFO -      Found by: previous frame's frame pointer
16:56:59     INFO -   7  MSVCR100D.dll + 0x11908f
16:56:59     INFO -      eip = 0x10319090   esp = 0x049efecc   ebp = 0x049efed4
16:56:59     INFO -      Found by: previous frame's frame pointer
16:56:59     INFO -   8  mozjs.dll!js::GCHelperThread::freeElementsAndArray(void * *,void * *) [jsgc.h:e9224caee6bb : 817 + 0x4]
16:56:59     INFO -      eip = 0x00f5849c   esp = 0x049efedc   ebp = 0x049efeec
16:56:59     INFO -      Found by: previous frame's frame pointer

Comment 1

[(Away)]

The build share didn't have full-symbols, so this was the best I could get from the dump:

mozalloc+0x1245
xul+0x16a39d7
MSVCR100D!_VCrtDbgReportA+0x6c8
MSVCR100D!_CrtDbgReportV+0x22
MSVCR100D!_CrtDbgReport+0x2b
MSVCR100D!_free_dbg_nolock+0x313
MSVCR100D!_free_dbg+0x50
MSVCR100D!free+0x10
mozjs+0x38849c
mozjs+0x3a0b00
mozjs+0x3a2d2d
nss3+0x16e32f
nss3+0x173d0f
MSVCR100D!_callthreadstartex+0x53
MSVCR100D!_threadstartex+0x84
kernel32!BaseThreadStart+0x37

Comment 2

[Andrew McCreight [:mccr8]]

This crash is on the GC helper thread, which may just be a red herring.

Comment 3

[Daniel Veditz [:dveditz]]

This is probably more use as a public orange-catcher than as a hidden bug since there's really not much to go on here. If we gather more info we can always hide it again later

Comment 4

[Ryan VanderMeulen [:RyanVM]]

https://tbpl.mozilla.org/php/getParsedLog.php?id=35830148&tree=Fx-Team

Comment 5

[Legacy TBPL/Treeherder Robot]

RyanVM
https://tbpl.mozilla.org/php/getParsedLog.php?id=36843085&tree=Cedar
WINNT 6.2 cedar debug test mochitest-devtools-chrome on 2014-03-27 18:21:58
revision: a0682a0b637c
slave: t-w864-ix-013

Assertion failed: isDelete==0 || isCreate, file c:/builds/moz2_slave/ced-w32-d-00000000000000000000/build/db/sqlite3/src/sqlite3.c, line 35839
###!!! ABORT: CRT ERROR R6010
TEST-UNEXPECTED-FAIL | chrome://mochitests/content/browser/browser/devtools/commandline/test/browser_cmd_appcache_invalid.js | application terminated with exit code 2147483651
PROCESS-CRASH | chrome://mochitests/content/browser/browser/devtools/commandline/test/browser_cmd_appcache_invalid.js | application crashed [@ mozalloc_abort(char const * const)]
Return code: 1

Comment 6

[Legacy TBPL/Treeherder Robot]

RyanVM
https://tbpl.mozilla.org/php/getParsedLog.php?id=37787101&tree=Mozilla-B2g28-v1.3
Windows XP 32-bit mozilla-b2g28_v1_3 debug test mochitest-2 on 2014-04-14 15:19:49
revision: 0b0822ffdbf8
slave: t-xp32-ix-095

8833 ERROR TEST-UNEXPECTED-FAIL | /tests/dom/datastore/tests/test_sync.html | Test timed out.
###!!! ABORT: CRT ERROR HEAP CORRUPTION DETECTED: after Normal block (#14988193) at 0x132E2260.
TEST-UNEXPECTED-FAIL | /tests/dom/encoding/test/test_stringencoding.html | application terminated with exit code 2147483651
PROCESS-CRASH | /tests/dom/encoding/test/test_stringencoding.html | application crashed [@ mozalloc_abort(char const * const)]
Return code: 1

Comment 7

[Ed Morley [:emorley]]

Closing bugs where TBPLbot has previously commented, but have now not been modified for >3 months & do not contain the whiteboard strings for disabled/annotated tests or use the keyword leave-open. Filter on: mass-intermittent-bug-closure-2014-07