1070236 - Intermittent valgrind-test | Invalid write of size 4 at js::GCHelperState::work / js::HelperThread::handleGCHelperWorkload / js::HelperThread::threadLoop / js::HelperThread::ThreadMain

Status: RESOLVED DUPLICATE of bug 1070638

(Core :: JavaScript: GC, defect)

Description

[Wes Kocher (:KWierso) (Not reading bugmail; email directly if needed)]

https://tbpl.mozilla.org/php/getParsedLog.php?id=48492153&tree=Mozilla-Inbound
Linux x86-64 mozilla-inbound valgrind on 2014-09-19 12:56:34 PDT for push 45cac79834c7

slave: bld-linux64-spot-187



+ MOZBUILD_STATE_PATH=.
+ python2.7 /builds/slave/m-in-l64-valgrind-000000000000/src/mach valgrind-test
==25095== Memcheck, a memory error detector
==25095== Copyright (C) 2002-2012, and GNU GPL'd, by Julian Seward et al.
==25095== Using Valgrind-3.8.2.SVN.MOZ-13022-2546 and LibVEX; rerun with -h for copyright info
==25095== Command: /builds/slave/m-in-l64-valgrind-000000000000/src/obj-firefox/dist/bin/firefox http://127.0.0.1:52636/ -profile /tmp/tmpIMN1de
==25095==
==25098==
==25098== HEAP SUMMARY:
==25098==     in use at exit: 220,804 bytes in 788 blocks
==25098==   total heap usage: 1,278 allocs, 490 frees, 254,015 bytes allocated
==25098==
==25098== LEAK SUMMARY:
==25098==    definitely lost: 0 bytes in 0 blocks
==25098==    indirectly lost: 0 bytes in 0 blocks
==25098==      possibly lost: 8,574 bytes in 164 blocks
==25098==    still reachable: 164,439 bytes in 588 blocks
==25098==         suppressed: 47,791 bytes in 36 blocks
==25098== Reachable blocks (those to which a pointer was found) are not shown.
==25098== To see them, rerun with: --leak-check=full --show-reachable=yes
==25098==
==25098== For counts of detected and suppressed errors, rerun with: -v
==25098== ERROR SUMMARY: 0 errors from 0 contexts (suppressed: 7 from 7)
Xlib:  extension "RANDR" missing on display ":2.0".
-*- Webapps.jsm : Saving /tmp/tmpIMN1de/webapps/webapps.json
-*- Webapps.jsm : Saving /tmp/tmpIMN1de/webapps/webapps.json
==25095== Thread 8:

TEST-UNEXPECTED-FAIL | valgrind-test | Invalid write of size 4 at js::GCHelperState::work / js::HelperThread::handleGCHelperWorkload / js::HelperThread::threadLoop / js::HelperThread::ThreadMain

==25095== Invalid write of size 4
==25095==    at 0xA569CCD: js::GCHelperState::work() (jsgc.cpp:3286)
==25095==    by 0xA5CE9B8: js::HelperThread::handleGCHelperWorkload() (HelperThreads.cpp:1200)
==25095==    by 0xA5E36A2: js::HelperThread::threadLoop() (HelperThreads.cpp:1257)
==25095==    by 0xA5E3797: js::HelperThread::ThreadMain(void*) (HelperThreads.cpp:864)
==25095==    by 0x65CEE9D: _pt_root (ptthread.c:212)
==25095==    by 0x4E377F0: start_thread (in /lib64/libpthread-2.12.so)
==25095==    by 0x5CDD92C: clone (in /lib64/libc-2.12.so)
==25095==  Address 0x0 is not stack'd, malloc'd or (recently) free'd
==25095==
{
   <insert_a_suppression_name_here>
   Memcheck:Addr4
   fun:_ZN2js13GCHelperState4workEv
   fun:_ZN2js12HelperThread22handleGCHelperWorkloadEv
   fun:_ZN2js12HelperThread10threadLoopEv
   fun:_ZN2js12HelperThread10ThreadMainEPv
   fun:_pt_root
   fun:start_thread
   fun:clone
}
==25095== Unsupported clone() flags: 0x800600
==25095==
==25095== The only supported clone() uses are:
==25095==  - via a threads library (LinuxThreads or NPTL)
==25095==  - via the implementation of fork or vfork
==25095==
==25095== Valgrind detected that your program requires
==25095== the following unimplemented functionality:
==25095==    Valgrind does not support general clone().
==25095== This may be because the functionality is hard to implement,
==25095== or because no reasonable program would behave this way,
==25095== or because nobody has yet needed it.  In any case, let us know at
==25095== www.valgrind.org and/or try to work around the problem, if you can.
==25095==
==25095== Valgrind has to exit now.  Sorry.  Bye!
==25095==

Comment 1

[Wes Kocher (:KWierso) (Not reading bugmail; email directly if needed)]

https://tbpl.mozilla.org/php/getParsedLog.php?id=48504418&tree=Mozilla-Inbound

Comment 2

[Legacy TBPL/Treeherder Robot]

philor
https://tbpl.mozilla.org/php/getParsedLog.php?id=48543318&tree=Mozilla-Inbound
Linux x86-64 mozilla-inbound valgrind on 2014-09-20 19:28:51
revision: 6cb9a72b4f7b
slave: bld-linux64-spot-337

TEST-UNEXPECTED-FAIL | valgrind-test | Invalid write of size 4 at js::GCHelperState::work / js::HelperThread::handleGCHelperWorkload / js::HelperThread::threadLoop / js::HelperThread::ThreadMain
TEST-UNEXPECTED-FAIL | valgrind-test | non-zero exit code from Valgrind

Comment 3

[Legacy TBPL/Treeherder Robot]

:nigelb
https://tbpl.mozilla.org/php/getParsedLog.php?id=48553523&tree=Mozilla-Inbound
Linux x86-64 mozilla-inbound valgrind on 2014-09-21 15:54:14
revision: 1c49dba274e4
slave: b-linux64-hp-0031

TEST-UNEXPECTED-FAIL | valgrind-test | Invalid write of size 4 at js::GCHelperState::work / js::HelperThread::handleGCHelperWorkload / js::HelperThread::threadLoop / js::HelperThread::ThreadMain
TEST-UNEXPECTED-FAIL | valgrind-test | non-zero exit code from Valgrind

Comment 4

[Jon Coppeard (:jonco)]

This is an invalid write of size 4 to address 0 at jsgc.cpp:3286, which is:

    MOZ_CRASH("GC helper triggered on idle state");

This is probably the same issue as bug 1070638.

Comment 5

[Legacy TBPL/Treeherder Robot]

RyanVM
https://tbpl.mozilla.org/php/getParsedLog.php?id=48591560&tree=Mozilla-Inbound
Linux x86-64 mozilla-inbound valgrind on 2014-09-22 08:31:40
revision: b1d627e9bf5e
slave: bld-linux64-spot-120

TEST-UNEXPECTED-FAIL | valgrind-test | Invalid write of size 4 at js::GCHelperState::work / js::HelperThread::handleGCHelperWorkload / js::HelperThread::threadLoop / js::HelperThread::ThreadMain
TEST-UNEXPECTED-FAIL | valgrind-test | non-zero exit code from Valgrind