1136773 - Intermittent test_aboutmemory5.xul | application crashed [@ ntdll.dll + 0xf47c0][@ base::ObjectWatcher::`scalar deleting destructor'(unsigned int)]

Status: RESOLVED WORKSFORME

(Core :: Security: Process Sandboxing, defect)

Description

[Ryan VanderMeulen [:RyanVM]]

Starting with sandboxing based on the stack, but feel free to move it elsewhere if needed.

03:20:48 INFO - 1855 INFO TEST-START | toolkit/components/aboutmemory/tests/test_aboutmemory5.xul
03:20:48 INFO - ###!!! [Child][MessageChannel::SendAndWait] Error: Channel error: cannot send/recv
03:20:48 INFO - [Child 576] ###!!! ABORT: constructor for actor failed: file c:\builds\moz2_slave\fx-team-w64-000000000000000000\build\obj-firefox\ipc\ipdl\PContentChild.cpp, line 1189
03:20:48 INFO - ###!!! [Child][MessageChannel::SendAndWait] Error: Channel error: cannot send/recv
03:20:48 INFO - [Child 2628] ###!!! ABORT: constructor for actor failed: file c:\builds\moz2_slave\fx-team-w64-000000000000000000\build\obj-firefox\ipc\ipdl\PContentChild.cpp, line 1189
03:20:48 INFO - [NPAPI 3788] ###!!! ABORT: Aborting on channel error.: file c:\builds\moz2_slave\fx-team-w64-000000000000000000\build\ipc\glue\MessageChannel.cpp, line 1584
03:20:49 INFO - TEST-INFO | Main app process: exit status 1
03:20:49 INFO - 1856 ERROR TEST-UNEXPECTED-FAIL | toolkit/components/aboutmemory/tests/test_aboutmemory5.xul | application terminated with exit code 1 
03:20:55 WARNING - PROCESS-CRASH | toolkit/components/aboutmemory/tests/test_aboutmemory5.xul | application crashed [@ ntdll.dll + 0xf47c0]
03:20:55 INFO - Crash dump filename: c:\users\cltbld~1.t-w\appdata\local\temp\tmpcokij8.mozrunner\minidumps\9a8da79c-690a-461c-b65c-774dfd69a106.dmp
03:20:55 INFO - Operating system: Windows NT
03:20:55 INFO - 6.2.9200
03:20:55 INFO - CPU: amd64
03:20:55 INFO - family 6 model 30 stepping 5
03:20:55 INFO - 8 CPUs
03:20:55 INFO - Crash reason: 0xc000070a / 0x00000001
03:20:55 INFO - Crash address: 0x7fffceb47c0
03:20:55 INFO - Thread 4 (crashed)
03:20:55 INFO - 0 ntdll.dll + 0xf47c0
03:20:55 INFO - rbx = 0x0000001100712e40 r12 = 0x0000000000000000
03:20:55 INFO - r13 = 0x0000001100404f60 r14 = 0x0000000000000000
03:20:55 INFO - r15 = 0x0000000000000000 rip = 0x000007fffceb47c0
03:20:55 INFO - rsp = 0x000000116f3df050 rbp = 0x00000011685d79c0
03:20:55 INFO - Found by: given as instruction pointer in context
03:20:55 INFO - 1 ntdll.dll + 0xf47bf
03:20:55 INFO - rip = 0x000007fffceb47c0 rsp = 0x000000116f3df088
03:20:55 INFO - Found by: stack scanning
03:20:55 INFO - 2 xul.dll!base::ObjectWatcher::`scalar deleting destructor'(unsigned int) + 0x2f
03:20:55 INFO - rip = 0x000007ffe01b3eac rsp = 0x000000116f3df0b8
03:20:55 INFO - Found by: stack scanning
03:20:55 INFO - 3 0x1100712e3f
03:20:55 INFO - rip = 0x0000001100712e40 rsp = 0x000000116f3df0e8
03:20:55 INFO - Found by: call frame info
03:20:55 INFO - 4 ntdll.dll + 0x76b0f
03:20:55 INFO - rip = 0x000007fffce36b10 rsp = 0x000000116f3df108
03:20:55 INFO - Found by: stack scanning
03:20:55 INFO - 5 sandboxbroker.dll!sandbox::BrokerServicesBase::SpawnTarget(wchar_t const *,wchar_t const *,sandbox::TargetPolicy *,_PROCESS_INFORMATION *) [broker_services.cc:46be8d043c5a : 526 + 0xb]
03:20:55 INFO - rip = 0x000007ffe713b8b7 rsp = 0x000000116f3df110
03:20:55 INFO - Found by: stack scanning
03:20:55 INFO - 6 xul.dll!base::ObjectWatcher::StartWatching(void *,base::ObjectWatcher::Delegate *) [object_watcher.cc:46be8d043c5a : 61 + 0x2f]
03:20:55 INFO - rip = 0x000007ffe01b3fe7 rsp = 0x000000116f3df2d0
03:20:55 INFO - Found by: call frame info
03:20:55 INFO - 7 xul.dll!mozilla::ipc::GeckoChildProcessHost::PerformAsyncLaunchInternal(std::vector<std::basic_string<char,std::char_traits<char>,std::allocator<char> >,std::allocator<std::basic_string<char,std::char_traits<char>,std::allocator<char> > > > &,base::ProcessArchitecture) [GeckoChildProcessHost.cpp:46be8d043c5a : 906 + 0x7]
03:20:55 INFO - rip = 0x000007ffe01c6e35 rsp = 0x000000116f3df330
03:20:55 INFO - Found by: call frame info
03:20:55 INFO - 8 xul.dll!mozilla::ipc::GeckoChildProcessHost::PerformAsyncLaunch(std::vector<std::basic_string<char,std::char_traits<char>,std::allocator<char> >,std::allocator<std::basic_string<char,std::char_traits<char>,std::allocator<char> > > >,base::ProcessArchitecture) [GeckoChildProcessHost.cpp:46be8d043c5a : 447 + 0xd]
03:20:55 INFO - rip = 0x000007ffe01c6474 rsp = 0x000000116f3df780
03:20:55 INFO - Found by: call frame info
03:20:55 INFO - 9 xul.dll!mozilla::ipc::GeckoChildProcessHost::RunPerformAsyncLaunch(std::vector<std::basic_string<char,std::char_traits<char>,std::allocator<char> >,std::allocator<std::basic_string<char,std::char_traits<char>,std::allocator<char> > > >,base::ProcessArchitecture) [GeckoChildProcessHost.cpp:46be8d043c5a : 485 + 0x53]
03:20:55 INFO - rip = 0x000007ffe01c7016 rsp = 0x000000116f3df840
03:20:55 INFO - Found by: call frame info
03:20:55 INFO - 10 xul.dll!DispatchToMethod<mozilla::ipc::GeckoChildProcessHost,bool ( mozilla::ipc::GeckoChildProcessHost::*)(std::vector<std::basic_string<char,std::char_traits<char>,std::allocator<char> >,std::allocator<std::basic_string<char,std::char_traits<char>,std::allocator<char> > > >,base::ProcessArchitecture),std::vector<std::basic_string<char,std::char_traits<char>,std::allocator<char> >,std::allocator<std::basic_string<char,std::char_traits<char>,std::allocator<char> > > >,base::ProcessArchitecture>(mozilla::ipc::GeckoChildProcessHost *,bool ( mozilla::ipc::GeckoChildProcessHost::*)(std::vector<std::basic_string<char,std::char_traits<char>,std::allocator<char> >,std::allocator<std::basic_string<char,std::char_traits<char>,std::allocator<char> > > >,base::ProcessArchitecture),Tuple2<std::vector<std::basic_string<char,std::char_traits<char>,std::allocator<char> >,std::allocator<std::basic_string<char,std::char_traits<char>,std::allocator<char> > > >,base::ProcessArchitecture> const &) [tuple.h:46be8d043c5a : 400 + 0x35]
03:20:55 INFO - rip = 0x000007ffe01c56bb rsp = 0x000000116f3df890
03:20:55 INFO - Found by: call frame info

Comment 1

[Legacy TBPL/Treeherder Robot]

log: https://treeherder.mozilla.org/logviewer.html#?repo=fx-team&job_id=2096028
repository: fx-team
start_time: 2015-02-25T03:09:52
who: rvandermeulen[at]mozilla[dot]com
machine: t-w864-ix-062
buildname: Windows 8 64-bit fx-team opt test mochitest-other
revision: 46be8d043c5a

[Child 576] ###!!! ABORT: constructor for actor failed: file c:\builds\moz2_slave\fx-team-w64-000000000000000000\build\obj-firefox\ipc\ipdl\PContentChild.cpp, line 1189
[Child 2628] ###!!! ABORT: constructor for actor failed: file c:\builds\moz2_slave\fx-team-w64-000000000000000000\build\obj-firefox\ipc\ipdl\PContentChild.cpp, line 1189
[NPAPI 3788] ###!!! ABORT: Aborting on channel error.: file c:\builds\moz2_slave\fx-team-w64-000000000000000000\build\ipc\glue\MessageChannel.cpp, line 1584
1856 ERROR TEST-UNEXPECTED-FAIL | toolkit/components/aboutmemory/tests/test_aboutmemory5.xul | application terminated with exit code 1
PROCESS-CRASH | toolkit/components/aboutmemory/tests/test_aboutmemory5.xul | application crashed [@ ntdll.dll + 0xf47c0]
Return code: 1
No tests run or test summary not found
Return code: 1
Return code: 1

Comment 2

[Bob Owen (:bobowen)]

Hmm, another one for 64-bit. :-(

The stack looks a bit odd to me, I have no idea where that base::ObjectWatcher::StartWatching in frame 6 is coming from.

Comment 3

[Legacy TBPL/Treeherder Robot]

log: https://treeherder.mozilla.org/logviewer.html#?repo=try&job_id=5241082
repository: try
start_time: 2015-02-26T12:27:58
who: ddamjanovic[at]mozilla[dot]com
machine: t-w732-ix-081
buildname: Windows 7 32-bit try debug test mochitest-other
revision: 269a976094ad

[NPAPI 3236] ###!!! ABORT: Aborting on channel error.: file c:\builds\moz2_slave\try-w32-d-00000000000000000000\build\src\ipc\glue\MessageChannel.cpp, line 1584
1865 ERROR TEST-UNEXPECTED-FAIL | toolkit/components/aboutmemory/tests/test_aboutmemory5.xul | application terminated with exit code 1
PROCESS-CRASH | toolkit/components/aboutmemory/tests/test_aboutmemory5.xul | application crashed [@ 0xa5a5a5a5]
TEST-UNEXPECTED-FAIL | leakcheck | default process: missing output line for total leaks!
TEST-UNEXPECTED-FAIL | leakcheck | plugin process: missing output line for total leaks!
Return code: 1
No tests run or test summary not found
Return code: 1
Return code: 1

Comment 4

[Legacy TBPL/Treeherder Robot]

log: https://treeherder.mozilla.org/logviewer.html#?repo=mozilla-inbound&job_id=7210428
repository: mozilla-inbound
start_time: 2015-03-04T10:09:16
who: rvandermeulen[at]mozilla[dot]com
machine: t-w864-ix-040
buildname: Windows 8 64-bit mozilla-inbound opt test mochitest-1
revision: 96f0f798d03f

[Child 340] ###!!! ABORT: Aborting on channel error.: file c:\builds\moz2_slave\m-in-w64-000000000000000000000\build\ipc\glue\MessageChannel.cpp, line 1584
1536 ERROR TEST-UNEXPECTED-FAIL | dom/browser-element/mochitest/test_browserElement_oop_OpenWindowRejected.html | application terminated with exit code 1
PROCESS-CRASH | dom/browser-element/mochitest/test_browserElement_oop_OpenWindowRejected.html | application crashed [@ ntdll.dll + 0xf47c0]
Return code: 1
No tests run or test summary not found

Comment 6

[Bob Owen (:bobowen)]

As I said in bug 1117078, I'm pretty sure these were being caused by having the NPAPI sandbox turned on as they stopped when it was turned off and are possibly to do with the killing of some of the test NPAPI processes.

As we're not looking to use any NPAPI sandboxing at the moment I won't look into this any further at the moment.

Comment 7

[Ed Morley [:emorley]]

Inactive; closing (see bug 1180138).