Closed Bug 1158418 Opened 10 years ago Closed 10 years ago

Intermittent test_peerConnection_closeDuringIce.html,test_timeout.html,test_waveShaperZeroLengthCurve.html,test_zmedia_cleanup.html | application terminated with exit code 1 after AddressSanitizer: heap-use-after-free

Categories

(Core :: Audio/Video, defect)

40 Branch
Unspecified
Linux
defect
Not set
normal

Tracking

()

RESOLVED DUPLICATE of bug 1194397
Tracking Status
e10s + ---
firefox40 --- affected
firefox41 --- affected
firefox42 --- affected

People

(Reporter: KWierso, Unassigned)

References

(Blocks 1 open bug)

Details

14:39:58 INFO - 3686 INFO TEST-START | dom/media/tests/mochitest/test_zmedia_cleanup.html 14:39:58 INFO - MEMORY STAT vsize after test: 21991797211136 14:39:58 INFO - MEMORY STAT residentFast after test: 1460084736 14:39:58 INFO - 3687 INFO TEST-OK | dom/media/tests/mochitest/test_zmedia_cleanup.html | took 178ms 14:39:59 INFO - ###!!! [Parent][OnMaybeDequeueOne] Error: Channel closing: too late to send/recv, messages will be lost 14:40:00 INFO - ###!!! [Child][MessageChannel] Error: (msgtype=0x20003F,name=PBrowser::Msg___delete__) Channel closing: too late to send/recv, messages will be lost 14:40:00 INFO - ###!!! [Parent][OnMaybeDequeueOne] Error: Channel closing: too late to send/recv, messages will be lost 14:40:00 INFO - 1429911600328 Browser.Experiments.Experiments TRACE Experiments #0::uninit: started 14:40:00 INFO - 1429911600333 Browser.Experiments.Experiments TRACE Experiments #0::uninit: finished with _loadTask 14:40:00 INFO - 1429911600334 Browser.Experiments.Experiments TRACE Experiments #0::uninit: no previous shutdown 14:40:00 INFO - 1429911600335 Browser.Experiments.Experiments TRACE Experiments #0::Unregistering instance with Addon Manager. 14:40:00 INFO - 1429911600335 Browser.Experiments.Experiments TRACE Experiments #0::Removing install listener from add-on manager. 14:40:00 INFO - 1429911600339 Browser.Experiments.Experiments TRACE Experiments #0::Removing addon listener from add-on manager. 14:40:00 INFO - 1429911600342 Browser.Experiments.Experiments TRACE Experiments #0::Finished unregistering with addon manager. 14:40:00 INFO - 1429911600344 Browser.Experiments.Experiments TRACE Experiments #0::Unregistering previous experiment add-on provider. 14:40:00 INFO - 1429911600351 Browser.Experiments.Experiments INFO Experiments #0::Completed uninitialization. 14:40:00 INFO - 1429911600356 Browser.Experiments.Experiments TRACE PreviousExperimentProvider #0::shutdown() 14:40:00 INFO - ###!!! [Parent][OnMaybeDequeueOne] Error: Channel closing: too late to send/recv, messages will be lost 14:40:00 INFO - ###!!! [Parent][OnMaybeDequeueOne] Error: Channel closing: too late to send/recv, messages will be lost 14:40:00 INFO - ###!!! [Parent][OnMaybeDequeueOne] Error: Channel closing: too late to send/recv, messages will be lost 14:40:00 INFO - ================================================================= 14:40:00 INFO - ==25203==ERROR: AddressSanitizer: heap-use-after-free on address 0x61400009ff78 at pc 0x7f3fde2e5647 bp 0x7f3fd5641410 sp 0x7f3fd5641408 14:40:00 INFO - READ of size 8 at 0x61400009ff78 thread T4 (Gecko_IOThread) 14:40:02 INFO - #0 0x7f3fde2e5646 in push_back /tools/gcc-4.7.3-0moz1/lib/gcc/x86_64-unknown-linux-gnu/4.7.3/../../../../include/c++/4.7.3/bits/stl_deque.h:1373 14:40:02 INFO - #1 0x7f3fde2e5646 in push /tools/gcc-4.7.3-0moz1/lib/gcc/x86_64-unknown-linux-gnu/4.7.3/../../../../include/c++/4.7.3/bits/stl_queue.h:212 14:40:02 INFO - #2 0x7f3fde2e5646 in MessageLoop::PostTask_Helper(tracked_objects::Location const&, Task*, int, bool) /builds/slave/m-cen-l64-asan-000000000000000/build/src/ipc/chromium/src/base/message_loop.cc:324 14:40:02 INFO - #3 0x7f3fde352643 in PostErrorNotifyTask /builds/slave/m-cen-l64-asan-000000000000000/build/src/ipc/glue/MessageChannel.cpp:1698 14:40:02 INFO - #4 0x7f3fde352643 in mozilla::ipc::MessageChannel::OnChannelErrorFromLink() /builds/slave/m-cen-l64-asan-000000000000000/build/src/ipc/glue/MessageChannel.cpp:1636 14:40:02 INFO - #5 0x7f3fde356f40 in OnChannelError /builds/slave/m-cen-l64-asan-000000000000000/build/src/ipc/glue/MessageLink.cpp:405 14:40:02 INFO - #6 0x7f3fde356f40 in non-virtual thunk to mozilla::ipc::ProcessLink::OnChannelError() /builds/slave/m-cen-l64-asan-000000000000000/build/src/obj-firefox/ipc/glue/Unified_cpp_ipc_glue0.cpp:406 14:40:02 INFO - #7 0x7f3fde2c34c2 in event_process_active_single_queue /builds/slave/m-cen-l64-asan-000000000000000/build/src/ipc/chromium/src/third_party/libevent/event.c:1350 14:40:02 INFO - #8 0x7f3fde2c34c2 in event_process_active /builds/slave/m-cen-l64-asan-000000000000000/build/src/ipc/chromium/src/third_party/libevent/event.c:1420 14:40:02 INFO - #9 0x7f3fde2c34c2 in event_base_loop /builds/slave/m-cen-l64-asan-000000000000000/build/src/ipc/chromium/src/third_party/libevent/event.c:1621 14:40:02 INFO - #10 0x7f3fde2ea211 in base::MessagePumpLibevent::Run(base::MessagePump::Delegate*) /builds/slave/m-cen-l64-asan-000000000000000/build/src/ipc/chromium/src/base/message_pump_libevent.cc:357 14:40:02 INFO - #11 0x7f3fde2e4cac in RunInternal /builds/slave/m-cen-l64-asan-000000000000000/build/src/ipc/chromium/src/base/message_loop.cc:233 14:40:02 INFO - #12 0x7f3fde2e4cac in RunHandler /builds/slave/m-cen-l64-asan-000000000000000/build/src/ipc/chromium/src/base/message_loop.cc:226 14:40:02 INFO - #13 0x7f3fde2e4cac in MessageLoop::Run() /builds/slave/m-cen-l64-asan-000000000000000/build/src/ipc/chromium/src/base/message_loop.cc:200 14:40:02 INFO - #14 0x7f3fde2fd383 in base::Thread::ThreadMain() /builds/slave/m-cen-l64-asan-000000000000000/build/src/ipc/chromium/src/base/thread.cc:170 14:40:02 INFO - #15 0x7f3fde2fec3c in ThreadFunc(void*) /builds/slave/m-cen-l64-asan-000000000000000/build/src/ipc/chromium/src/base/platform_thread_posix.cc:39 14:40:02 INFO - #16 0x7f3ff8c1ae99 in start_thread (/lib/x86_64-linux-gnu/libpthread.so.0+0x7e99) 14:40:02 INFO - #17 0x7f3ff7d2a2ec (/lib/x86_64-linux-gnu/libc.so.6+0xf42ec) 14:40:02 INFO - ASAN:SIGSEGV 14:40:02 INFO - ==25203==AddressSanitizer: while reporting a bug found another one.Ignoring. 14:40:02 INFO - TEST-INFO | Main app process: killed by SIGHUP 14:40:02 INFO - 3688 INFO TEST-START | Shutdown 14:40:02 INFO - 3689 INFO Passed: 187480 14:40:02 INFO - 3690 INFO Failed: 0 14:40:02 INFO - 3691 INFO Todo: 12803 14:40:02 INFO - 3692 INFO Slowest: 98838ms - /tests/dom/media/test/test_played.html 14:40:02 INFO - 3693 INFO SimpleTest FINISHED 14:40:02 INFO - 3694 INFO TEST-INFO | Ran 1 Loops 14:40:02 INFO - 3695 INFO SimpleTest FINISHED 14:40:02 WARNING - TEST-UNEXPECTED-FAIL | dom/media/tests/mochitest/test_zmedia_cleanup.html | application terminated with exit code 1
Blech, this has morphed to test_waveShaperZeroLengthCurve.html now.
Summary: Intermittent test_zmedia_cleanup.html | application terminated with exit code 1 → Intermittent test_waveShaperZeroLengthCurve.html,test_zmedia_cleanup.html | application terminated with exit code 1
Summary: Intermittent test_waveShaperZeroLengthCurve.html,test_zmedia_cleanup.html | application terminated with exit code 1 → Intermittent test_waveShaperZeroLengthCurve.html,test_zmedia_cleanup.html | application terminated with exit code 1 after AddressSanitizer: heap-use-after-free
Component: Video/Audio → IPC
Summary: Intermittent test_waveShaperZeroLengthCurve.html,test_zmedia_cleanup.html | application terminated with exit code 1 after AddressSanitizer: heap-use-after-free → Intermittent test_timeout.html,test_waveShaperZeroLengthCurve.html,test_zmedia_cleanup.html | application terminated with exit code 1 after AddressSanitizer: heap-use-after-free
Jim, any suggestions for how we can move this forward?
tracking-e10s: --- → ?
Flags: needinfo?(jmathies)
Summary: Intermittent test_timeout.html,test_waveShaperZeroLengthCurve.html,test_zmedia_cleanup.html | application terminated with exit code 1 after AddressSanitizer: heap-use-after-free → Intermittent test_peerConnection_closeDuringIce.html,test_timeout.html,test_waveShaperZeroLengthCurve.html,test_zmedia_cleanup.html | application terminated with exit code 1 after AddressSanitizer: heap-use-after-free
(In reply to Ryan VanderMeulen [:RyanVM UTC-4] from comment #100) > Jim, any suggestions for how we can move this forward? I'm not sure, looks like an unclean shutdown that triggers a memory use error on linux. We could start by moving it to the right component. 04:27:47 INFO - 3850 INFO TEST-OK | dom/media/webspeech/recognition/test/test_timeout.html | took 10262ms 04:27:47 INFO - ###!!! [Parent][OnMaybeDequeueOne] Error: Channel closing: too late to send/recv, messages will be lost 04:27:48 INFO - ###!!! [Child][MessageChannel] Error: (msgtype=0x3A0099,name=PContent::Msg_ConsoleMessage) Channel closing: too late to send/recv, messages will be lost 04:27:48 INFO - ###!!! [Parent][OnMaybeDequeueOne] Error: Channel closing: too late to send/recv, messages will be lost 04:27:49 INFO - JavaScript error: resource://gre/modules/RemoteAddonsParent.jsm, line 388: NS_ERROR_ILLEGAL_VALUE: Component returned failure code: 0x80070057 (NS_ERROR_ILLEGAL_VALUE) [nsIObserverService.removeObserver] 04:27:49 INFO - ###!!! [Parent][OnMaybeDequeueOne] Error: Channel closing: too late to send/recv, messages will be lost 04:27:49 INFO - ###!!! [Parent][OnMaybeDequeueOne] Error: Channel closing: too late to send/recv, messages will be lost 04:27:49 INFO - ###!!! [Parent][OnMaybeDequeueOne] Error: Channel closing: too late to send/recv, messages will be lost 04:27:49 INFO - ================================================================= 04:27:49 INFO - ==4361==ERROR: AddressSanitizer: heap-use-after-free on address 0x6140000dff78 at pc 0x7f485bac2837 bp 0x7f4852d2d410 sp 0x7f4852d2d408 04:27:49 INFO - READ of size 8 at 0x6140000dff78 thread T4 (Gecko_IOThread) 04:27:51 INFO - #0 0x7f485bac2836 in push_back /tools/gcc-4.7.3-0moz1/lib/gcc/x86_64-unknown-linux-gnu/4.7.3/../../../../include/c++/4.7.3/bits/stl_deque.h:1373 04:27:51 INFO - #1 0x7f485bac2836 in push /tools/gcc-4.7.3-0moz1/lib/gcc/x86_64-unknown-linux-gnu/4.7.3/../../../../include/c++/4.7.3/bits/stl_queue.h:212 04:27:51 INFO - #2 0x7f485bac2836 in MessageLoop::PostTask_Helper(tracked_objects::Location const&, Task*, int, bool) /builds/slave/fx-team-l64-asan-0000000000000/build/src/ipc/chromium/src/base/message_loop.cc:327 04:27:51 INFO - #3 0x7f485bb2f773 in PostErrorNotifyTask /builds/slave/fx-team-l64-asan-0000000000000/build/src/ipc/glue/MessageChannel.cpp:1821 04:27:51 INFO - #4 0x7f485bb2f773 in mozilla::ipc::MessageChannel::OnChannelErrorFromLink() /builds/slave/fx-team-l64-asan-0000000000000/build/src/ipc/glue/MessageChannel.cpp:1759 04:27:51 INFO - #5 0x7f485bb342a0 in OnChannelError /builds/slave/fx-team-l64-asan-0000000000000/build/src/ipc/glue/MessageLink.cpp:407 04:27:51 INFO - #6 0x7f485bb342a0 in non-virtual thunk to mozilla::ipc::ProcessLink::OnChannelError() /builds/slave/fx-team-l64-asan-0000000000000/build/src/obj-firefox/ipc/glue/Unified_cpp_ipc_glue0.cpp:408 04:27:51 INFO - #7 0x7f485baa06a2 in event_process_active_single_queue /builds/slave/fx-team-l64-asan-0000000000000/build/src/ipc/chromium/src/third_party/libevent/event.c:1350 04:27:51 INFO - #8 0x7f485baa06a2 in event_process_active /builds/slave/fx-team-l64-asan-0000000000000/build/src/ipc/chromium/src/third_party/libevent/event.c:1420 04:27:51 INFO - #9 0x7f485baa06a2 in event_base_loop /builds/slave/fx-team-l64-asan-0000000000000/build/src/ipc/chromium/src/third_party/libevent/event.c:1621 04:27:51 INFO - #10 0x7f485bac7401 in base::MessagePumpLibevent::Run(base::MessagePump::Delegate*) /builds/slave/fx-team-l64-asan-0000000000000/build/src/ipc/chromium/src/base/message_pump_libevent.cc:357 04:27:51 INFO - #11 0x7f485bac1e9c in RunInternal /builds/slave/fx-team-l64-asan-0000000000000/build/src/ipc/chromium/src/base/message_loop.cc:234 04:27:51 INFO - #12 0x7f485bac1e9c in RunHandler /builds/slave/fx-team-l64-asan-0000000000000/build/src/ipc/chromium/src/base/message_loop.cc:227 04:27:51 INFO - #13 0x7f485bac1e9c in MessageLoop::Run() /builds/slave/fx-team-l64-asan-0000000000000/build/src/ipc/chromium/src/base/message_loop.cc:201 04:27:51 INFO - #14 0x7f485bada573 in base::Thread::ThreadMain() /builds/slave/fx-team-l64-asan-0000000000000/build/src/ipc/chromium/src/base/thread.cc:170 04:27:51 INFO - #15 0x7f485badbe2c in ThreadFunc(void*) /builds/slave/fx-team-l64-asan-0000000000000/build/src/ipc/chromium/src/base/platform_thread_posix.cc:39 04:27:51 INFO - #16 0x7f4877117e99 in start_thread (/lib/x86_64-linux-gnu/libpthread.so.0+0x7e99) 04:27:51 INFO - #17 0x7f48762272ec (/lib/x86_64-linux-gnu/libc.so.6+0xf42ec) 04:27:51 INFO - ASAN:SIGSEGV
Component: IPC → Video/Audio
Flags: needinfo?(jmathies)
Is this happening often enough it should be addressed this cycle?
Blocks: e10s-tests
Status: NEW → RESOLVED
Closed: 10 years ago
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.