Closed Bug 1130088 Opened 9 years ago Closed 9 years ago

Intermittent TEST-UNEXPECTED-ERROR | toolkit/xre/test/test_fpuhandler.html | This test left crash dumps behind, but we weren't expecting it to! | application crashed [@ moz_abort]

Categories

(Toolkit :: General, defect)

Product:
Toolkit
Component:
General
Platform:
x86
Windows XP
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED FIXED
Milestone:
mozilla38
Tracking Flags:
Tracking Status
firefox36 --- unaffected
firefox37 --- unaffected
firefox38 --- fixed
firefox-esr31 --- unaffected

People

(Reporter: RyanVM, Assigned: n.nethercote)

References

Details

(Keywords: crash, intermittent-failure) 

10:53:02 INFO - 1671 INFO TEST-START | toolkit/xre/test/test_fpuhandler.html
10:53:02 INFO - [Child 3608] WARNING: NS_ENSURE_TRUE(mDocShell) failed: file c:\builds\moz2_slave\m-in-w32-d-0000000000000000000\build\src\embedding\browser\nsWebBrowser.cpp, line 332
10:53:02 INFO - [Child 3608] WARNING: NS_ENSURE_TRUE(mDocShell) failed: file c:\builds\moz2_slave\m-in-w32-d-0000000000000000000\build\src\embedding\browser\nsWebBrowser.cpp, line 332
10:53:02 INFO - [Child 3608] WARNING: NS_ENSURE_TRUE(domWindow) failed: file c:\builds\moz2_slave\m-in-w32-d-0000000000000000000\build\src\embedding\browser\nsDocShellTreeOwner.cpp, line 86
10:53:02 INFO - [Child 3608] WARNING: NS_ENSURE_TRUE(inBrowser) failed: file c:\builds\moz2_slave\m-in-w32-d-0000000000000000000\build\src\embedding\browser\nsDocShellTreeOwner.cpp, line 82
10:53:02 INFO - --DOMWINDOW == 2 (083EB400) [pid = 3608] [serial = 1] [outer = 00000000] [url = data:text/html,<!DOCTYPE%20HTML><html><body></body></html>]
10:53:02 INFO - --DOMWINDOW == 1 (0833BC00) [pid = 3608] [serial = 2] [outer = 00000000] [url = about:blank]
10:53:02 INFO - --DOMWINDOW == 0 (08992800) [pid = 3608] [serial = 3] [outer = 00000000] [url = data:text/html,<!DOCTYPE%20HTML><html><body></body></html>]
10:53:02 INFO - [Child 3608] WARNING: '!mMainThread', file c:\builds\moz2_slave\m-in-w32-d-0000000000000000000\build\src\xpcom\threads\nsThreadManager.cpp, line 404
10:53:02 INFO - [Child 3608] WARNING: '!mMainThread', file c:\builds\moz2_slave\m-in-w32-d-0000000000000000000\build\src\xpcom\threads\nsThreadManager.cpp, line 404
10:53:02 INFO - [Child 3608] WARNING: '!mMainThread', file c:\builds\moz2_slave\m-in-w32-d-0000000000000000000\build\src\xpcom\threads\nsThreadManager.cpp, line 404
10:53:02 INFO - [Child 3608] WARNING: Exiting child process early!: file c:\builds\moz2_slave\m-in-w32-d-0000000000000000000\build\src\xpcom\build\XPCOMInit.cpp, line 976
10:53:02 INFO - c:/builds/moz2_slave/m-in-w32-d-0000000000000000000/build/src/memory/mozjemalloc/jemalloc.c:3256: Failed assertion: "rbp_right_get(arena_chunk_map_t, link, rbp_r_xp) == (node)"
10:53:02 INFO - Hit MOZ_CRASH() at c:/builds/moz2_slave/m-in-w32-d-0000000000000000000/build/src/memory/build/jemalloc_config.c:50
10:53:02 INFO - ++DOMWINDOW == 54 (0F3E1000) [pid = 4032] [serial = 6002] [outer = 14D5B800]
10:53:02 INFO - [Parent 4032] WARNING: Performance Entry buffer size maximum reached!: file c:\builds\moz2_slave\m-in-w32-d-0000000000000000000\build\src\dom\base\nsPerformance.cpp, line 553
10:53:02 INFO - 1672 INFO TEST-PASS | toolkit/xre/test/test_fpuhandler.html | Undefined division-by-zero doesn't crash
10:53:02 INFO - 1673 INFO TEST-PASS | toolkit/xre/test/test_fpuhandler.html | No special code to set the FPU bit in the testplugin.
10:53:02 INFO - 1674 INFO MEMORY STAT vsize after test: 702386176
10:53:02 INFO - 1675 INFO MEMORY STAT vsizeMaxContiguous after test: 569376768
10:53:02 INFO - 1676 INFO MEMORY STAT residentFast after test: 307322880
10:53:02 INFO - 1677 INFO MEMORY STAT heapAllocated after test: 64614368
10:53:02 INFO - 1678 INFO TEST-UNEXPECTED-ERROR | toolkit/xre/test/test_fpuhandler.html | This test left crash dumps behind, but we weren't expecting it to!
10:53:02 INFO - TEST-INFO took 216ms
10:53:02 INFO - 1679 INFO TEST-OK | toolkit/xre/test/test_fpuhandler.html |
10:53:02 INFO - 1680 INFO TEST-UNEXPECTED-FAIL | toolkit/xre/test/test_fpuhandler.html | undefined assertion name - Result logged after SimpleTest.finish() 
10:53:33 WARNING - PROCESS-CRASH | Main app process exited normally | application crashed [@ moz_abort]
10:53:33 INFO - Crash dump filename: c:\docume~1\cltbld~1.t-x\locals~1\temp\tmp9dpvwg.mozrunner\minidumps\919e3756-402a-498e-ac20-026932ad63c1.dmp
10:53:33 INFO - Operating system: Windows NT
10:53:33 INFO - 5.1.2600 Service Pack 3
10:53:33 INFO - CPU: x86
10:53:33 INFO - GenuineIntel family 6 model 30 stepping 5
10:53:33 INFO - 8 CPUs
10:53:33 INFO - Crash reason: EXCEPTION_BREAKPOINT
10:53:33 INFO - Crash address: 0x3a3058
10:53:33 INFO - Assertion: Unknown assertion type 0x00000000
10:53:33 INFO - Thread 0 (crashed)
10:53:33 INFO - 0 mozglue.dll!moz_abort [jemalloc_config.c:40adc4e99343 : 50 + 0x34]
10:53:33 INFO - eip = 0x003a3058 esp = 0x0012f594 ebp = 0x0012f610 ebx = 0x00000001
10:53:33 INFO - esi = 0x08300730 edi = 0x0830094c eax = 0x00000000 ecx = 0x00970ad9
10:53:33 INFO - edx = 0x00a30ea0 efl = 0x00000212
10:53:33 INFO - Found by: given as instruction pointer in context
10:53:33 INFO - 1 mozglue.dll!arena_avail_tree_remove [jemalloc.c:40adc4e99343 : 3256 + 0x14f]
10:53:33 INFO - eip = 0x003a39f3 esp = 0x0012f598 ebp = 0x0012f610
10:53:33 INFO - Found by: call frame info
10:53:33 INFO - 2 mozglue.dll!arena_run_dalloc [jemalloc.c:40adc4e99343 : 3872 + 0x16]
10:53:33 INFO - eip = 0x003a62b4 esp = 0x0012f618 ebp = 0x0012f634
10:53:33 INFO - Found by: call frame info
10:53:33 INFO - 3 mozglue.dll!arena_dalloc_small [jemalloc.c:40adc4e99343 : 4616 + 0x8]
10:53:33 INFO - eip = 0x003a506f esp = 0x0012f63c ebp = 0x0012f658
10:53:33 INFO - Found by: call frame info
10:53:33 INFO - 4 mozglue.dll!arena_dalloc [jemalloc.c:40adc4e99343 : 4719 + 0xc]
10:53:33 INFO - eip = 0x003a4f25 esp = 0x0012f660 ebp = 0x0012f6cc
10:53:33 INFO - Found by: call frame info
10:53:33 INFO - 5 mozglue.dll!je_free [jemalloc.c:40adc4e99343 : 6459 + 0x6]
10:53:33 INFO - eip = 0x003a9e7a esp = 0x0012f6d4 ebp = 0x0012f6dc
10:53:33 INFO - Found by: call frame info
10:53:33 INFO - 6 xul.dll!PLDHashTable::Finish() [pldhash.cpp:40adc4e99343 : 303 + 0x8]
10:53:33 INFO - eip = 0x00e23558 esp = 0x0012f6e4 ebp = 0x0012f70c
10:53:33 INFO - Found by: call frame info
10:53:33 INFO - 7 xul.dll!nsTHashtable<nsBaseHashtableET<nsPtrHashKey<PRThread>,nsRefPtr<nsThread> > >::~nsTHashtable<nsBaseHashtableET<nsPtrHashKey<PRThread>,nsRefPtr<nsThread> > >() [nsTHashtable.h:40adc4e99343 : 419 + 0x5]
10:53:33 INFO - eip = 0x00df3ea9 esp = 0x0012f6f0 ebp = 0x0012f70c
10:53:33 INFO - Found by: call frame info
10:53:33 INFO - 8 xul.dll!_CRT_INIT [crtdll.c : 414 + 0x1]
10:53:33 INFO - eip = 0x03678450 esp = 0x0012f6f8 ebp = 0x0012f70c
10:53:33 INFO - Found by: call frame info
10:53:33 INFO - 9 xul.dll!__DllMainCRTStartup [crtdll.c : 522 + 0xb]
10:53:33 INFO - eip = 0x03678678 esp = 0x0012f714 ebp = 0x0012f750
10:53:33 INFO - Found by: call frame info
10:53:33 INFO - 10 xul.dll!_DllMainCRTStartup [crtdll.c : 472 + 0xd]
10:53:33 INFO - eip = 0x036785a2 esp = 0x0012f758 ebp = 0x0012f764
10:53:33 INFO - Found by: call frame info
Another hashtable-y crash.  This time in some jemalloc assertion, which sounds sketchy.
PLDHashTable::Finish():303 is the |free(mEntryStore);| line, so it's some kind of bad free (bogus pointer or double-free, perhaps). Looking at the code I can't see how this would happen, because |mEntryStore| is only ever set to |nullptr| or the result of a malloc() call, and in the one place where it gets freed it immediately gets nulled again. Hmm.
Bug 1050035 has been backed out, so I think closing this is reasonable.
Status: NEW → RESOLVED
Closed: 9 years ago
Resolution: --- → FIXED
Assignee: nobody → n.nethercote
Blocks: 1050035
status-firefox36: --- → unaffected
status-firefox37: --- → unaffected
status-firefox38: --- → fixed
status-firefox-esr31: --- → unaffected
Target Milestone: --- → mozilla38
You need to log in before you can comment on or make changes to this bug.