1247853 - APPLICATION_FAULT_4000001f_xul.dll!js::AutoEnterOOMUnsafeRegion::crash

Status: RESOLVED INCOMPLETE

(Core :: JavaScript: GC, defect)

Description

[Ferko]

Attachment: firefox.exe_160211_211444.dmp.txt - analyze+uniq_stack_with_and_without_mozilla_symbols

User Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:44.0) Gecko/20100101 Firefox/44.0
Build ID: 20160210153822

Steps to reproduce:

I have run python script what use selenium driver to access web sites.
Script is accessing web sites in a loop. There is always open only one tab.
After around 2000 accessed web sites procdump created dump, because FF consumed all the memory.


Python script:
print "Staring Firefox"
fp = webdriver.FirefoxProfile('C:\\Users\\Administrator\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\t95uldh5.default')
driver = webdriver.Firefox(fp)
driver.implicitly_wait(30)
driver.set_page_load_timeout(30)
driver.get("https://www.google.com")
count = 0
for web_site in list_of_web_sites:
    try:
        driver.get(web_site)
        count += 1
        try:
            WebDriverWait(driver, 1).until(EC.alert_is_present(),
                                           'Timed out waiting for PA creation ' + 'confirmation popup to appear.')
            alert = driver.switch_to.alert.dismiss()
        except TimeoutException, e:
            pass
    except Exception, e:
        pass
driver.close()


Actual results:

firefox.exe_160211_211444.dmp
FAULTING_IP: 
xul!js::AutoEnterOOMUnsafeRegion::crash+60 [c:\builds\moz2_slave\rel-m-rel-w32_bld-000000000000\build\js\src\jscntxt.cpp @ 1225]
6e1a256d cc              int     3

EXCEPTION_RECORD:  ffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 6e1a256d (xul!js::AutoEnterOOMUnsafeRegion::crash+0x00000060)
   ExceptionCode: 4000001f (WOW64 breakpoint)
  ExceptionFlags: 00000000
NumberParameters: 1
   Parameter[0]: 00000000

BUGCHECK_STR:  4000001f

DEFAULT_BUCKET_ID:  APPLICATION_FAULT

PROCESS_NAME:  firefox.exe

ERROR_CODE: (NTSTATUS) 0x4000001f - Stavov  k d v jimky pou

EXCEPTION_CODE: (Win32) 0x4000001f (1073741855) - <Unable to get error code text>

EXCEPTION_PARAMETER1:  00000000

NTGLOBALFLAG:  0

APPLICATION_VERIFIER_FLAGS:  0

FAULTING_THREAD:  00001024

LAST_CONTROL_TRANSFER:  from 6e20cf45 to 6e1a256d

STACK_TEXT:  
0a7ff16c 6e20cf45 6f8ed1e0 0a7ff220 0aa02ed0 xul!js::AutoEnterOOMUnsafeRegion::crash+0x60 [c:\builds\moz2_slave\rel-m-rel-w32_bld-000000000000\build\js\src\jscntxt.cpp @ 1225]
0a7ff19c 6dc51200 0ab52380 0aa02ed0 0000001b xul!js::TenuringTracer::moveSlotsToTenured+0x5bb851 [c:\builds\moz2_slave\rel-m-rel-w32_bld-000000000000\build\js\src\gc\marking.cpp @ 2217]
0a7ff1fc 6dc518cd 0a7ff220 0ab169d0 6f82a508 xul!js::TenuringTracer::traverse<JSObject>+0x110 [c:\builds\moz2_slave\rel-m-rel-w32_bld-000000000000\build\js\src\gc\marking.cpp @ 1916]
0a7ff218 6dc50f35 0aa02ed0 1d4d3a50 00000000 xul!js::TenuringTracer::traceSlots+0x51 [c:\builds\moz2_slave\rel-m-rel-w32_bld-000000000000\build\js\src\gc\marking.cpp @ 2139]
0a7ff258 6dc506b6 0a7ff3dc 0a7ff460 0a88e208 xul!js::Nursery::collectToFixedPoint+0x255 [c:\builds\moz2_slave\rel-m-rel-w32_bld-000000000000\build\js\src\gc\marking.cpp @ 2079]
0a7ff614 6dc5f6aa 0a88e000 0000002e 00000000 xul!js::Nursery::collect+0x382 [c:\builds\moz2_slave\rel-m-rel-w32_bld-000000000000\build\js\src\gc\nursery.cpp @ 485]
0a7ff640 6dc5f615 0000002e 00000000 0a88e308 xul!js::gc::GCRuntime::minorGCImpl+0x39 [c:\builds\moz2_slave\rel-m-rel-w32_bld-000000000000\build\js\src\jsgc.cpp @ 6577]
0a7ff664 6dc60a19 0000002e 0000002e 0a88e308 xul!js::gc::GCRuntime::evictNursery+0x26 [c:\builds\moz2_slave\rel-m-rel-w32_bld-000000000000\build\js\src\gc\gcruntime.h @ 612]
0a7ff6b4 6dc60cb4 00000001 0a7ff748 0000002e xul!js::gc::GCRuntime::gcCycle+0x12 [c:\builds\moz2_slave\rel-m-rel-w32_bld-000000000000\build\js\src\jsgc.cpp @ 6166]
0a7ff738 6dc61357 00000001 0000002e ffffffff xul!js::gc::GCRuntime::collect+0xee [c:\builds\moz2_slave\rel-m-rel-w32_bld-000000000000\build\js\src\jsgc.cpp @ 6339]
0a7ff790 6db9b65e 00000001 0000002e 0a5af510 xul!js::gc::GCRuntime::gc+0x54 [c:\builds\moz2_slave\rel-m-rel-w32_bld-000000000000\build\js\src\jsgc.cpp @ 6402]
0a7ff7ac 6e11ec8f 0a5af510 00000001 00000000 xul!mozilla::dom::workers::WorkerPrivate::GarbageCollectInternal+0x3c [c:\builds\moz2_slave\rel-m-rel-w32_bld-000000000000\build\dom\workers\workerprivate.cpp @ 6222]
0a7ff7c0 6ddf9ad9 0a5af510 08f0ec00 0a882be0 xul!`anonymous namespace'::GarbageCollectRunnable::WorkerRun+0x18 [c:\builds\moz2_slave\rel-m-rel-w32_bld-000000000000\build\dom\workers\workerprivate.cpp @ 1456]
0a7ff8c8 6db9bc21 0a882be0 08f0ee64 0a1e4d10 xul!mozilla::dom::workers::WorkerRunnable::Run+0x185 [c:\builds\moz2_slave\rel-m-rel-w32_bld-000000000000\build\dom\workers\workerrunnable.cpp @ 363]
0a7ff8f8 6db9b17b 0a5af510 08f71000 08f6d700 xul!mozilla::dom::workers::WorkerPrivate::ProcessAllControlRunnablesLocked+0xa5 [c:\builds\moz2_slave\rel-m-rel-w32_bld-000000000000\build\dom\workers\workerprivate.cpp @ 4975]
0a7ff944 6dd8a02e 0a5af510 09f358b0 00000000 xul!mozilla::dom::workers::WorkerPrivate::DoRunLoop+0xb1 [c:\builds\moz2_slave\rel-m-rel-w32_bld-000000000000\build\dom\workers\workerprivate.cpp @ 4443]
0a7ffa5c 6dd307a9 08f6d700 09c2d680 0a7ffb01 xul!`anonymous namespace'::WorkerThreadPrimaryRunnable::Run+0xff [c:\builds\moz2_slave\rel-m-rel-w32_bld-000000000000\build\dom\workers\runtimeservice.cpp @ 2755]
0a7ffb6c 6dfd5ebb 09f358b0 0a7ffb01 0a7ffb87 xul!nsThread::ProcessNextEvent+0x633 [c:\builds\moz2_slave\rel-m-rel-w32_bld-000000000000\build\xpcom\threads\nsthread.cpp @ 964]
0a7ffb88 6dfd5e4e 09c2d680 70aeaa90 09c2d680 xul!NS_ProcessNextEvent+0x1a [c:\builds\moz2_slave\rel-m-rel-w32_bld-000000000000\build\xpcom\glue\nsthreadutils.cpp @ 297]
0a7ffbac 6dd2eb81 09c2d680 14c0eded 09f358b0 xul!mozilla::ipc::MessagePumpForNonMainThreads::Run+0xb0 [c:\builds\moz2_slave\rel-m-rel-w32_bld-000000000000\build\ipc\glue\messagepump.cpp @ 356]
0a7ffbe4 6dd2ebbc 09c2d680 00000001 09f35800 xul!MessageLoop::RunHandler+0x20 [c:\builds\moz2_slave\rel-m-rel-w32_bld-000000000000\build\ipc\chromium\src\base\message_loop.cc @ 228]
0a7ffc04 6dfd602f 00806350 09ecef30 09ecef30 xul!MessageLoop::Run+0x19 [c:\builds\moz2_slave\rel-m-rel-w32_bld-000000000000\build\ipc\chromium\src\base\message_loop.cc @ 202]
0a7ffc24 70aea359 09f358b0 72e8bfb4 02750920 xul!nsThread::ThreadFunc+0xa3 [c:\builds\moz2_slave\rel-m-rel-w32_bld-000000000000\build\xpcom\threads\nsthread.cpp @ 378]
0a7ffc40 70ae9c23 09ecef30 72e8c01d 09ecef30 nss3!_PR_NativeRunThread+0x9a [c:\builds\moz2_slave\rel-m-rel-w32_bld-000000000000\build\nsprpub\pr\src\threads\combined\pruthr.c @ 419]
0a7ffc48 72e8c01d 09ecef30 0c2cc0d0 72e8bfb4 nss3!pr_root+0xb [c:\builds\moz2_slave\rel-m-rel-w32_bld-000000000000\build\nsprpub\pr\src\md\windows\w95thred.c @ 90]
0a7ffc80 72e8c001 72e8bfb4 0a7ffca0 753a7c04 msvcr120!_callthreadstartex+0x1b [f:\dd\vctools\crt\crtw32\startup\threadex.c @ 376]
0a7ffc8c 753a7c04 0274f270 753a7be0 0be772fc msvcr120!_threadstartex+0x7c [f:\dd\vctools\crt\crtw32\startup\threadex.c @ 354]
0a7ffca0 7774ab8f 0274f270 09d10feb 00000000 kernel32!BaseThreadInitThunk+0x24
0a7ffce8 7774ab5a ffffffff 7772ffe8 00000000 ntdll!__RtlUserThreadStart+0x2f
0a7ffcf8 00000000 72e8bfb4 0274f270 00000000 ntdll!_RtlUserThreadStart+0x1b


FOLLOWUP_IP: 
xul!js::AutoEnterOOMUnsafeRegion::crash+60 [c:\builds\moz2_slave\rel-m-rel-w32_bld-000000000000\build\js\src\jscntxt.cpp @ 1225]
6e1a256d cc              int     3

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  xul!js::AutoEnterOOMUnsafeRegion::crash+60

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: xul

IMAGE_NAME:  xul.dll

DEBUG_FLR_IMAGE_TIMESTAMP:  56b55a4f

STACK_COMMAND:  ~30s; .ecxr ; kb

BUCKET_ID:  4000001f_xul!js::AutoEnterOOMUnsafeRegion::crash+60

FAILURE_BUCKET_ID:  APPLICATION_FAULT_4000001f_xul.dll!js::AutoEnterOOMUnsafeRegion::crash

WATSON_STAGEONE_URL:  http://watson.microsoft.com/StageOne/firefox_exe/44_0_1_5879/56b54c20/xul_dll/44_0_1_5879/56b55a4f/4000001f/006a256d.htm?Retriage=1

Followup: MachineOwner
---------

firefox.exe_160211_180714.dmp
--------------------------------------------------------------------------------

*** ERROR: Symbol file could not be found.  Defaulted to export symbols for xul.dll - 

FAULTING_IP: 
mozglue!mozalloc_abort+2c [c:\builds\moz2_slave\rel-m-rel-w32_bld-000000000000\build\memory\mozalloc\mozalloc_abort.cpp @ 33]
72f5ef7b cc              int     3

EXCEPTION_RECORD:  ffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 72f5ef7b (mozglue!mozalloc_abort+0x0000002c)
   ExceptionCode: 80000003 (Break instruction exception)
  ExceptionFlags: 00000000
NumberParameters: 1
   Parameter[0]: 00000000

DEFAULT_BUCKET_ID:  STATUS_BREAKPOINT

PROCESS_NAME:  firefox.exe

ERROR_CODE: (NTSTATUS) 0x80000003 - {V JIMKA}  Zar

EXCEPTION_CODE: (HRESULT) 0x80000003 (2147483651) - Jeden nebo v ce argument  nen  platn ch

EXCEPTION_PARAMETER1:  00000000

NTGLOBALFLAG:  0

APPLICATION_VERIFIER_FLAGS:  0

FAULTING_THREAD:  00000328

PRIMARY_PROBLEM_CLASS:  STATUS_BREAKPOINT

BUGCHECK_STR:  APPLICATION_FAULT_STATUS_BREAKPOINT

LAST_CONTROL_TRANSFER:  from 72f5eff2 to 72f5ef7b

STACK_TEXT:  
004fc420 72f5eff2 004fc438 00001000 0a5690b0 mozglue!mozalloc_abort+0x2c [c:\builds\moz2_slave\rel-m-rel-w32_bld-000000000000\build\memory\mozalloc\mozalloc_abort.cpp @ 33]
004fc470 72f5c586 00001000 004fc7ec 004fc87c mozglue!mozalloc_handle_oom+0x5c [c:\builds\moz2_slave\rel-m-rel-w32_bld-000000000000\build\memory\mozalloc\mozalloc_oom.cpp @ 46]
00000000 00000000 00000000 00000000 00000000 mozglue!moz_xmalloc+0x9586 [c:\builds\moz2_slave\rel-m-rel-w32_bld-000000000000\build\memory\mozalloc\mozalloc.cpp @ 85]


STACK_COMMAND:  ~0s; .ecxr ; kb

FOLLOWUP_IP: 
mozglue!mozalloc_abort+2c [c:\builds\moz2_slave\rel-m-rel-w32_bld-000000000000\build\memory\mozalloc\mozalloc_abort.cpp @ 33]
72f5ef7b cc              int     3

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  mozglue!mozalloc_abort+2c

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: mozglue

IMAGE_NAME:  mozglue.dll

DEBUG_FLR_IMAGE_TIMESTAMP:  56b54c1b

FAILURE_BUCKET_ID:  STATUS_BREAKPOINT_80000003_mozglue.dll!mozalloc_abort

BUCKET_ID:  APPLICATION_FAULT_STATUS_BREAKPOINT_mozglue!mozalloc_abort+2c

WATSON_STAGEONE_URL:  http://watson.microsoft.com/StageOne/firefox_exe/44_0_1_5879/56b54c20/mozglue_dll/44_0_1_5879/56b54c1b/80000003/0000ef7b.htm?Retriage=1

Followup: MachineOwner
---------



Expected results:

open web site, close it

Comment 1

[Neil Deakin]

Please don't move random unrelated bugs into the xul component.

Comment 2

[Gary Kwong [:gkw] [:nth10sd] (NOT official MoCo now)]

Iain, will there be anything actionable here?

Comment 3

[Iain Ireland [:iain]]

No, there's nothing actionable here. As of three years ago, we apparently had a memory leak on at least one page -- but there's no way to know which page it was, because the bug description does not include the contents of "list_of_web_sites". 

(Actually, I'm not completely sure there was even a memory leak. The bug description claims that only one tab is opened at a time, but the script looks like it just keeps opening new pages.)

Closing as incomplete.