Intermittent browser_bug655270.js | application crashed [@ mozilla::image::SourceBuffer::AppendFromInputStream(nsIInputStream*, unsigned int)] (Assertion failure: bytesRead == aCount || rv == NS_ERROR_OUT_OF_MEMORY)

NEW
Unassigned

Status

()

Core
ImageLib
P3
normal
2 years ago
2 years ago

People

(Reporter: RyanVM, Unassigned)

Tracking

({assertion, crash, intermittent-failure})

Trunk
Unspecified
Mac OS X
assertion, crash, intermittent-failure
Points:
---

Firefox Tracking Flags

(firefox47 affected)

Details

(Whiteboard: [gfx-noted])

(Reporter)

Description

2 years ago
Hit while testing OSX e10s on Try.

https://treeherder.mozilla.org/logviewer.html#?job_id=17522217&repo=try

23:31:18     INFO -  Assertion failure: bytesRead == aCount || rv == NS_ERROR_OUT_OF_MEMORY (AppendToSourceBuffer should consume everything unless we run out of memory), at image/SourceBuffer.cpp:389
23:31:18     INFO -  #01: imgRequest::OnDataAvailable(nsIRequest*, nsISupports*, nsIInputStream*, unsigned long long, unsigned int) [image/imgRequest.cpp:1106]
23:31:18     INFO -  #02: mozilla::net::nsHttpChannel::OnDataAvailable(nsIRequest*, nsISupports*, nsIInputStream*, unsigned long long, unsigned int) [netwerk/protocol/http/nsHttpChannel.cpp:6238]
23:31:18     INFO -  #03: nsInputStreamPump::OnStateTransfer() [netwerk/base/nsInputStreamPump.cpp:601]
23:31:18     INFO -  #04: nsInputStreamPump::OnInputStreamReady(nsIAsyncInputStream*) [netwerk/base/nsInputStreamPump.cpp:427]
23:31:18     INFO -  #05: nsInputStreamReadyEvent::Run() [xpcom/glue/nsCOMPtr.h:375]
23:31:18     INFO -  #06: nsThread::ProcessNextEvent(bool, bool*) [xpcom/glue/nsCOMPtr.h:403]
23:31:18     INFO -  #07: NS_ProcessNextEvent(nsIThread*, bool) [xpcom/glue/nsThreadUtils.cpp:297]
23:31:18     INFO -  #08: mozilla::ipc::MessagePumpForNonMainThreads::Run(base::MessagePump::Delegate*) [ipc/glue/MessagePump.cpp:355]
23:31:18     INFO -  #09: MessageLoop::Run() [ipc/chromium/src/base/message_loop.cc:520]
23:31:18     INFO -  #10: nsThread::ThreadFunc(void*) [xpcom/threads/nsThread.cpp:398]
23:31:18     INFO -  #11: _pt_root [nsprpub/pr/src/pthreads/ptthread.c:219]
23:31:18     INFO -  #12: libSystem.B.dylib + 0x39fd6
23:31:18     INFO -  [Child 1153] ###!!! ABORT: Aborting on channel error.: file ipc/glue/MessageChannel.cpp, line 1824
23:31:18     INFO -  #01: mozilla::ipc::ProcessLink::OnChannelError() [xpcom/glue/Monitor.h:36]
23:31:18     INFO -  #02: IPC::Channel::ChannelImpl::OnFileCanReadWithoutBlocking(int) [ipc/chromium/src/chrome/common/ipc_channel_posix.cc:894]
23:31:18     INFO -  #03: event_base_loop [ipc/chromium/src/third_party/libevent/event.c:1355]
23:31:18     INFO -  #04: base::MessagePumpLibevent::Run(base::MessagePump::Delegate*) [ipc/chromium/src/base/message_pump_libevent.cc:362]
23:31:18     INFO -  #05: MessageLoop::Run() [ipc/chromium/src/base/message_loop.cc:520]
23:31:18     INFO -  #06: base::Thread::ThreadMain() [ipc/chromium/src/base/thread.cc:175]
23:31:18     INFO -  #07: ThreadFunc [ipc/chromium/src/base/platform_thread_posix.cc:36]
23:31:18     INFO -  #08: libSystem.B.dylib + 0x39fd6
23:31:18     INFO -  [Child 1153] ###!!! ABORT: Aborting on channel error.: file ipc/glue/MessageChannel.cpp, line 1824
23:31:18     INFO -  Hit MOZ_CRASH() at memory/mozalloc/mozalloc_abort.cpp:33
23:31:18     INFO -  TEST-INFO | Main app process: exit 1

23:31:35  WARNING -  PROCESS-CRASH | docshell/test/browser/browser_bug655270.js | application crashed [@ mozilla::image::SourceBuffer::AppendFromInputStream(nsIInputStream*, unsigned int)]
23:31:35     INFO -  Crash dump filename: /var/folders/ln/lnOFxzkfFjuvnq2BcEFF1E+++-k/-Tmp-/tmpQClXo6.mozrunner/minidumps/23E3FE6C-504B-470E-8889-4A05BFDFA1AF.dmp
23:31:35     INFO -  Operating system: Mac OS X
23:31:35     INFO -                    10.6.8 10K549
23:31:35     INFO -  CPU: amd64
23:31:35     INFO -       family 6 model 23 stepping 10
23:31:35     INFO -       2 CPUs
23:31:35     INFO -  Crash reason:  EXC_BAD_ACCESS / KERN_INVALID_ADDRESS
23:31:35     INFO -  Crash address: 0x0
23:31:35     INFO -  Process uptime: 49 seconds
23:31:35     INFO -  Thread 36 (crashed)
23:31:35     INFO -   0  XUL!mozilla::image::SourceBuffer::AppendFromInputStream(nsIInputStream*, unsigned int) [SourceBuffer.cpp:8f45b49276ee : 387 + 0x0]
23:31:35     INFO -      rax = 0x0000000000000000   rdx = 0x0000000000000000
23:31:35     INFO -      rcx = 0x0000000000000001   rbx = 0x00007fff710992f8
23:31:35     INFO -      rsi = 0x0000000000000000   rdi = 0x00000001067e2df2
23:31:35     INFO -      rbp = 0x000000012d980920   rsp = 0x000000012d980900
23:31:35     INFO -       r8 = 0x00007fff7109ca60    r9 = 0x000000000000023f
23:31:35     INFO -      r10 = 0x0000000006039e7c   r11 = 0x000000012d97fe20
23:31:35     INFO -      r12 = 0x0000000122773f80   r13 = 0x0000000000000000
23:31:35     INFO -      r14 = 0x000000000000057e   r15 = 0x0000000000000001
23:31:35     INFO -      rip = 0x0000000102bfdb7c
23:31:35     INFO -      Found by: given as instruction pointer in context
23:31:35     INFO -   1  XUL!mozilla::image::RasterImage::OnImageDataAvailable(nsIRequest*, nsISupports*, nsIInputStream*, unsigned long long, unsigned int) [RasterImage.cpp:8f45b49276ee : 1068 + 0xb]
23:31:35     INFO -      rbx = 0x00000001228c5310   rbp = 0x000000012d980940
23:31:35     INFO -      rsp = 0x000000012d980930   r12 = 0x0000000122773f80
23:31:35     INFO -      r13 = 0x0000000000000000   r14 = 0x0000000122773f80
23:31:35     INFO -      r15 = 0x0000000000000001   rip = 0x0000000102bc6d65
23:31:35     INFO -      Found by: call frame info
23:31:35     INFO -   2  XUL!imgRequest::OnDataAvailable(nsIRequest*, nsISupports*, nsIInputStream*, unsigned long long, unsigned int) [imgRequest.cpp:8f45b49276ee : 1106 + 0x30]
23:31:35     INFO -      rbx = 0x00000001228c5310   rbp = 0x000000012d980b00
23:31:35     INFO -      rsp = 0x000000012d980950   r12 = 0x0000000122773f80
23:31:35     INFO -      r13 = 0x0000000000000000   r14 = 0x00000001221a0fb0
23:31:35     INFO -      r15 = 0x0000000000000001   rip = 0x0000000102bde896
23:31:35     INFO -      Found by: call frame info
23:31:35     INFO -   3  XUL!mozilla::net::nsHttpChannel::OnDataAvailable(nsIRequest*, nsISupports*, nsIInputStream*, unsigned long long, unsigned int) [nsHttpChannel.cpp:8f45b49276ee : 6238 + 0xd]
23:31:35     INFO -      rbx = 0x0000000000000000   rbp = 0x000000012d980c40
23:31:35     INFO -      rsp = 0x000000012d980b10   r12 = 0x0000000000000000
23:31:35     INFO -      r13 = 0x0000000121423800   r14 = 0x000000000000057e
23:31:35     INFO -      r15 = 0x00000001299d9580   rip = 0x0000000101fc9a44
23:31:35     INFO -      Found by: call frame info
23:31:35     INFO -   4  XUL!nsInputStreamPump::OnStateTransfer() [nsInputStreamPump.cpp:8f45b49276ee : 601 + 0x9]
23:31:35     INFO -      rbx = 0x000000000000057e   rbp = 0x000000012d980cc0
23:31:35     INFO -      rsp = 0x000000012d980c50   r12 = 0x00000000ffffffff
23:31:35     INFO -      r13 = 0x000000000000057e   r14 = 0x00000001228bab80
23:31:35     INFO -      r15 = 0x00000001228bac10   rip = 0x0000000101d912dd
23:31:35     INFO -      Found by: call frame info
23:31:35     INFO -   5  XUL!nsInputStreamPump::OnInputStreamReady(nsIAsyncInputStream*) [nsInputStreamPump.cpp:8f45b49276ee : 430 + 0x8]
23:31:35     INFO -      rbx = 0x0000000125f64fa8   rbp = 0x000000012d980d20
23:31:35     INFO -      rsp = 0x000000012d980cd0   r12 = 0x0000000000000000
23:31:35     INFO -      r13 = 0x00000001228bab80   r14 = 0x0000000101d90e3c
23:31:35     INFO -      r15 = 0x000000012d980d80   rip = 0x0000000101d90b88
23:31:35     INFO -      Found by: call frame info
23:31:35     INFO -   6  XUL!nsInputStreamReadyEvent::Run() [nsStreamUtils.cpp:8f45b49276ee : 94 + 0x9]
23:31:35     INFO -      rbx = 0x0000000125f64fa8   rbp = 0x000000012d980d40
23:31:35     INFO -      rsp = 0x000000012d980d30   r12 = 0x0000000000000000
23:31:35     INFO -      r13 = 0x0000000000000001   r14 = 0x00000001228bab88
23:31:35     INFO -      r15 = 0x000000012d980d80   rip = 0x0000000101c9b7e9
23:31:35     INFO -      Found by: call frame info
23:31:35     INFO -   7  XUL!nsThread::ProcessNextEvent(bool, bool*) [nsThread.cpp:8f45b49276ee : 994 + 0x6]
23:31:35     INFO -      rbx = 0x0000000129f87b00   rbp = 0x000000012d980de0
23:31:35     INFO -      rsp = 0x000000012d980d50   r12 = 0x0000000000000000
23:31:35     INFO -      r13 = 0x0000000000000001   r14 = 0x0000000000000000
23:31:35     INFO -      r15 = 0x000000012d980d80   rip = 0x0000000101cb9b20
23:31:35     INFO -      Found by: call frame info
23:31:35     INFO -   8  XUL!NS_ProcessNextEvent(nsIThread*, bool) [nsThreadUtils.cpp:8f45b49276ee : 297 + 0xd]
23:31:35     INFO -      rbx = 0x0000000000000001   rbp = 0x000000012d980e00
23:31:35     INFO -      rsp = 0x000000012d980df0   r12 = 0x0000000129fc6aa0
23:31:35     INFO -      r13 = 0x000000000000bb00   r14 = 0x0000000129fc6a80
23:31:35     INFO -      r15 = 0x000000012d980e00   rip = 0x0000000101cfa253
23:31:35     INFO -      Found by: call frame info
23:31:35     INFO -   9  XUL!mozilla::ipc::MessagePumpForNonMainThreads::Run(base::MessagePump::Delegate*) [MessagePump.cpp:8f45b49276ee : 355 + 0xa]
23:31:35     INFO -      rbx = 0x0000000129f91690   rbp = 0x000000012d980e70
23:31:35     INFO -      rsp = 0x000000012d980e10   r12 = 0x0000000129fc6aa0
23:31:35     INFO -      r13 = 0x000000000000bb00   r14 = 0x0000000129fc6a80
23:31:35     INFO -      r15 = 0x000000012d980e00   rip = 0x000000010211291f
23:31:35     INFO -      Found by: call frame info
23:31:35     INFO -  10  XUL!MessageLoop::Run() [message_loop.cc:8f45b49276ee : 227 + 0x5]
23:31:35     INFO -      rbx = 0x0000000129f87b00   rbp = 0x000000012d980ea0
23:31:35     INFO -      rsp = 0x000000012d980e80   r12 = 0x0000000000000000
23:31:35     INFO -      r13 = 0x000000000000bb03   r14 = 0x0000000129f87b20
23:31:35     INFO -      r15 = 0x0000000129f91690   rip = 0x00000001020d308c
23:31:35     INFO -      Found by: call frame info
Whiteboard: [gfx-noted]

Comment 1

2 years ago
Bulk assigning P3 to all open intermittent bugs without a priority set in Firefox components per bug 1298978.
Priority: -- → P3
You need to log in before you can comment on or make changes to this bug.