1177312 - OSX crash in SharedMemoryBasic::Map

Status: RESOLVED DUPLICATE of bug 1465667

(Core :: IPC, defect)

Description

[Jan-Ivar Bruaroey [:jib] (needinfo? me)]

Attachment: stacktrace

Happened while running http://mozilla.github.io/webrtc-landing/canvas_swap.html in both e10s AND a non-e10s window at the same time.

(lldb) p str
(const char *) $1 = 0x000000000001cd3f ""
(lldb) up
frame #2: 0x00000001013490df libnss3.dylib`dosprintf(ss=0x000000011c1800d8, fmt=0x0000000107fec324, ap=0x000000011c1802b0) + 5903 at prprf.c:998
   995 	
   996 		  case 's':
   997 		    u.s = nas ? nap->u.s : va_arg(ap, const char*);
-> 998 		    rv = cvt_s(ss, u.s, width, prec, flags);
   999 		    if (rv < 0) {
   1000			return rv;
   1001		    }
up
up
(lldb) up
frame #5: 0x0000000101de0084 XUL`mozilla::ipc::SharedMemoryBasic::Map(this=0x0000000125bf22e0, size=794624) + 340 at SharedMemoryBasic_mach.cpp:554
   551 	  kr = mach_vm_map(mach_task_self(), &address, round_page(size), 0, VM_FLAGS_ANYWHERE,
   552 	                   mPort, 0, false, vmProtection, vmProtection, VM_INHERIT_NONE);
   553 	  if (kr != KERN_SUCCESS) {
-> 554 	    LOG_ERROR("Failed to map shared memory (%zu bytes) into %x, port %x. %s (%x)\n",
   555 	              size, mach_task_self(), mPort, mach_error_string(kr), kr);
   556 	    return false;
   557 	  }

Stack attached.

Code recently changed in http://hg.mozilla.org/mozilla-central/rev/7d6dd2b86d44

Comment 1

[Jan-Ivar Bruaroey [:jib] (needinfo? me)]

(lldb) p kr
(kern_return_t) $6 = 4
(lldb) p size
(size_t) $7 = 794624
(lldb) p mPort
(mach_port_t) $8 = 118079

Forgot frame #1: 0x000000010134b2b8 libnss3.dylib`cvt_s(ss=0x000000011c1800d8, str=0x000000000001cd3f, width=0, prec=-1, flags=0) + 216 at prprf.c:370
   367 		    ;
   368 		slen = s - str;
   369 	    } else {
-> 370 		slen = strlen(str);
   371 	    }
   372 	
   373 	    /* and away we go */