1275477 - ==74363==AddressSanitizer CHECK failed: /Library/Caches/com.apple.xbs/Sources/clang/clang-703.0.31/src/projects/compiler-rt/lib/asan/asan_allocator.cc:137 "((m->chunk_state)) == ((CHUNK_QUARANTINE))" (0x0, 0x3)

Status: RESOLVED INVALID

(Core :: Layout, defect)

Description

[Jean-Yves Avenard [:jya]]

==74363==AddressSanitizer CHECK failed: /Library/Caches/com.apple.xbs/Sources/clang/clang-703.0.31/src/projects/compiler-rt/lib/asan/asan_allocator.cc:137 "((m->chunk_state)) == ((CHUNK_QUARANTINE))" (0x0, 0x3)
    #0 0x10012a0ed in __asan::AsanCheckFailed(char const*, int, char const*, unsigned long long, unsigned long long) (libclang_rt.asan_osx_dynamic.dylib+0x520ed)
    #1 0x10012ea21 in __sanitizer::CheckFailed(char const*, int, char const*, unsigned long long, unsigned long long) (libclang_rt.asan_osx_dynamic.dylib+0x56a21)

(lldb) bt
* thread #1: tid = 0x75ee0, 0x0000000100129fd0 libclang_rt.asan_osx_dynamic.dylib`__asan::AsanDie(), queue = 'com.apple.main-thread'
    frame #0: 0x0000000100129fd0 libclang_rt.asan_osx_dynamic.dylib`__asan::AsanDie()
    frame #1: 0x000000010012e775 libclang_rt.asan_osx_dynamic.dylib`__sanitizer::Die() + 85
    frame #2: 0x000000010012a1aa libclang_rt.asan_osx_dynamic.dylib`__asan::AsanCheckFailed(char const*, int, char const*, unsigned long long, unsigned long long) + 282
    frame #3: 0x000000010012ea22 libclang_rt.asan_osx_dynamic.dylib`__sanitizer::CheckFailed(char const*, int, char const*, unsigned long long, unsigned long long) + 50
    frame #4: 0x00000001000dd216 libclang_rt.asan_osx_dynamic.dylib`__asan::QuarantineCallback::Recycle(__asan::AsanChunk*) + 582
    frame #5: 0x00000001000dcf68 libclang_rt.asan_osx_dynamic.dylib`__sanitizer::Quarantine<__asan::QuarantineCallback, __asan::AsanChunk>::DoRecycle(__sanitizer::QuarantineCache<__asan::QuarantineCallback>*, __asan::QuarantineCallback) + 280
    frame #6: 0x00000001000dce39 libclang_rt.asan_osx_dynamic.dylib`__sanitizer::Quarantine<__asan::QuarantineCallback, __asan::AsanChunk>::Recycle(__asan::QuarantineCallback) + 281
    frame #7: 0x0000000100120c4f libclang_rt.asan_osx_dynamic.dylib`wrap_free + 399
    frame #8: 0x000000010b7a46e0 XUL`nsAutoPtr<mozilla::BloomFilter<12u, nsIAtom> >::~nsAutoPtr() [inlined] operator delete(ptr=0x0000621001420900) + 96 at mozalloc.h:217
    frame #9: 0x000000010b7a46d7 XUL`nsAutoPtr<mozilla::BloomFilter<12u, nsIAtom> >::~nsAutoPtr(this=0x00007fff5fbf55d8) + 87 at nsAutoPtr.h:78
    frame #10: 0x000000010b7a4675 XUL`nsAutoPtr<mozilla::BloomFilter<12u, nsIAtom> >::~nsAutoPtr(this=0x00007fff5fbf55d8) + 21 at nsAutoPtr.h:77
  * frame #11: 0x000000010b7a462c XUL`AncestorFilter::~AncestorFilter(this=0x00007fff5fbf55d8) + 76 at nsRuleProcessorData.h:37
    frame #12: 0x000000010b7a4245 XUL`AncestorFilter::~AncestorFilter(this=0x00007fff5fbf55d8) + 21 at nsRuleProcessorData.h:37
    frame #13: 0x000000010b7a41e7 XUL`TreeMatchContext::~TreeMatchContext(this=0x00007fff5fbf5460) + 55 at nsRuleProcessorData.h:100
    frame #14: 0x000000010b785ea5 XUL`TreeMatchContext::~TreeMatchContext(this=0x00007fff5fbf5460) + 21 at nsRuleProcessorData.h:100
    frame #15: 0x00000001121c55d8 XUL`mozilla::ElementRestyler::ComputeStyleChangeFor(aFrame=0x0000625000ea63f8, aChangeList=0x00007fff5fbf5a00, aMinChange=0, aRestyleTracker=0x00006140001dc098, aRestyleHint=eRestyle_Self, aRestyleHintData=0x0000603000249ee8, aContextsToClear=0x00007fff5fbf5b40, aSwappedStructOwners=0x00007fff5fbf5b60) + 2328 at RestyleManager.cpp:4576
    frame #16: 0x00000001121a2b39 XUL`mozilla::RestyleManager::ComputeAndProcessStyleChange(this=0x00006140001dc040, aFrame=0x0000625000ea63f8, aMinChange=0, aRestyleTracker=0x00006140001dc098, aRestyleHint=eRestyle_Self, aRestyleHintData=0x0000603000249ee8) + 665 at RestyleManager.cpp:4974
    frame #17: 0x00000001121a1d68 XUL`mozilla::RestyleManager::RestyleElement(this=0x00006140001dc040, aElement=0x000060d000645840, aPrimaryFrame=0x0000625000ea63f8, aMinHint=0, aRestyleTracker=0x00006140001dc098, aRestyleHint=eRestyle_Self, aRestyleHintData=0x0000603000249ee8) + 1752 at RestyleManager.cpp:1077
    frame #18: 0x0000000112328e69 XUL`mozilla::RestyleTracker::ProcessOneRestyle(this=0x00006140001dc098, aElement=0x000060d000645840, aRestyleHint=eRestyle_Self, aChangeHint=0, aRestyleHintData=0x0000603000249ee8) + 1993 at RestyleTracker.cpp:94
    frame #19: 0x00000001122179e0 XUL`mozilla::RestyleTracker::DoProcessRestyles(this=0x00006140001dc098) + 8080 at RestyleTracker.cpp:262
    frame #20: 0x00000001121e22f2 XUL`mozilla::RestyleManager::ProcessRestyles(this=0x00006140001dc040, aRestyleTracker=0x00006140001dc098) + 274 at RestyleManager.h:536
    frame #21: 0x00000001121a7e5f XUL`mozilla::RestyleManager::ProcessPendingRestyles(this=0x00006140001dc040) + 975 at RestyleManager.cpp:1804
    frame #22: 0x0000000112504637 XUL`mozilla::RestyleManagerHandle::Ptr::ProcessPendingRestyles(this=0x00007fff5fbf8b50) + 55 at RestyleManagerHandleInlines.h:74
    frame #23: 0x0000000112485a32 XUL`PresShell::FlushPendingNotifications(this=0x00006180005c6c80, aFlush=(mFlushType = Flush_InterruptibleLayout, mFlushAnimations = true)) + 3826 at nsPresShell.cpp:4086
    frame #24: 0x00000001124823ef XUL`PresShell::FlushPendingNotifications(this=0x00006180005c6c80, aType=Flush_InterruptibleLayout) + 495 at nsPresShell.cpp:3974
    frame #25: 0x00000001124847b8 XUL`PresShell::HandlePostedReflowCallbacks(this=0x00006180005c6c80, aInterruptible=true) + 952 at nsPresShell.cpp:3942
    frame #26: 0x00000001124715d4 XUL`PresShell::DidDoReflow(this=0x00006180005c6c80, aInterruptible=true) + 340 at nsPresShell.cpp:9399
    frame #27: 0x0000000112486c1f XUL`PresShell::ProcessReflowCommands(this=0x00006180005c6c80, aInterruptible=true) + 1727 at nsPresShell.cpp:9761
    frame #28: 0x0000000112485f63 XUL`PresShell::FlushPendingNotifications(this=0x00006180005c6c80, aFlush=(mFlushType = Flush_InterruptibleLayout, mFlushAnimations = false)) + 5155 at nsPresShell.cpp:4121
    frame #29: 0x000000011210018a XUL`nsRefreshDriver::Tick(this=0x000061800044d480, aNowEpoch=1464151979153518, aNowTime=(mValue = 18334344048806)) + 8490 at nsRefreshDriver.cpp:1786
    frame #30: 0x000000011210e8b0 XUL`mozilla::RefreshDriverTimer::TickDriver(driver=0x000061800044d480, jsnow=1464151979153518, now=(mValue = 18334344048806)) + 496 at nsRefreshDriver.cpp:274
    frame #31: 0x000000011210e593 XUL`mozilla::RefreshDriverTimer::TickRefreshDrivers(this=0x0000607000076920, aJsNow=1464151979153518, aNow=(mValue = 18334344048806), aDrivers=0x0000607000076940) + 627 at nsRefreshDriver.cpp:246
    frame #32: 0x000000011210e1a7 XUL`mozilla::RefreshDriverTimer::Tick(this=0x0000607000076920, jsnow=1464151979153518, now=(mValue = 18334344048806)) + 951 at nsRefreshDriver.cpp:264
    frame #33: 0x000000011211429d XUL`mozilla::VsyncRefreshDriverTimer::RunRefreshDrivers(this=0x0000607000076920, aTimeStamp=(mValue = 18334344048806)) + 669 at nsRefreshDriver.cpp:588
    frame #34: 0x000000011211197a XUL`mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver::TickRefreshDriver(this=0x000060c0000e2300, aVsyncTimestamp=(mValue = 18334344048806)) + 1418 at nsRefreshDriver.cpp:508
    frame #35: 0x000000011211349a XUL`decltype(o=0x000060c0000e2300, m=f0 13 11 12 01 00 00 00 00 00 00 00 00 00 00 00, args=0x0000606000f5e550, (null)=IndexSequence<0> @ 0x00007fff5fbfb338).*fp0(mozilla::Get<0ul>(fp1).PassAsParameter())) nsRunnableMethodArguments<mozilla::TimeStamp>::applyImpl<mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver, void (mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver::*)(mozilla::TimeStamp), StoreCopyPassByValue<mozilla::TimeStamp>, 0ul>(mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver*, void (mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver::*)(mozilla::TimeStamp), mozilla::Tuple<StoreCopyPassByValue<mozilla::TimeStamp> >&, mozilla::IndexSequence<0ul>) + 762 at nsThreadUtils.h:707
    frame #36: 0x00000001121130cf XUL`_ZN25nsRunnableMethodArgumentsIJN7mozilla9TimeStampEEE5applyINS0_23VsyncRefreshDriverTimer26RefreshDriverVsyncObserverEMS5_FvS1_EEEDTcl9applyImplfp_fp0_dtdefpT10mArgumentscvNS0_13IndexSequenceIJLm0EEEE_EEEPT_T0_(this=0x0000606000f5e550, o=0x000060c0000e2300, m=f0 13 11 12 01 00 00 00 00 00 00 00 00 00 00 00) + 671 at nsThreadUtils.h:713
    frame #37: 0x0000000112112ba1 XUL`nsRunnableMethodImpl<void (mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver::*)(mozilla::TimeStamp), true, false, mozilla::TimeStamp>::Run(this=0x0000606000f5e520) + 545 at nsThreadUtils.h:741
    frame #38: 0x0000000106c6095a XUL`nsThread::ProcessNextEvent(this=0x0000611000040500, aMayWait=false, aResult=0x00007fff5fbfbaa0) + 3162 at nsThread.cpp:1025
    frame #39: 0x0000000106daa2b7 XUL`NS_ProcessPendingEvents(aThread=0x0000611000040500, aTimeout=10) + 455 at nsThreadUtils.cpp:232
    frame #40: 0x0000000111777eb9 XUL`nsBaseAppShell::NativeEventCallback(this=0x000060d000047df0) + 681 at nsBaseAppShell.cpp:97
    frame #41: 0x00000001118fb6bd XUL`nsAppShell::ProcessGeckoEvents(aInfo=0x000060d000047df0) + 1933 at nsAppShell.mm:387
    frame #42: 0x00007fff9a7eb881 CoreFoundation`__CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ + 17
    frame #43: 0x00007fff9a7cafbc CoreFoundation`__CFRunLoopDoSources0 + 556
    frame #44: 0x00007fff9a7ca4df CoreFoundation`__CFRunLoopRun + 927
    frame #45: 0x00007fff9a7c9ed8 CoreFoundation`CFRunLoopRunSpecific + 296
    frame #46: 0x00007fff97237935 HIToolbox`RunCurrentEventLoopInMode + 235
    frame #47: 0x00007fff9723776f HIToolbox`ReceiveNextEventCommon + 432
    frame #48: 0x00007fff972375af HIToolbox`_BlockUntilNextEventMatchingListInModeWithFilter + 71
    frame #49: 0x00007fff86ca9df6 AppKit`_DPSNextEvent + 1067
    frame #50: 0x00007fff86ca9226 AppKit`-[NSApplication _nextEventMatchingEventMask:untilDate:inMode:dequeue:] + 454
    frame #51: 0x00000001118f878b XUL`-[GeckoNSApplication nextEventMatchingMask:untilDate:inMode:dequeue:](self=0x000060d000025b20, _cmd="nextEventMatchingMask:untilDate:inMode:dequeue:", mask=18446744073709551615, expiration=4001-01-01 00:00:00 UTC, mode="kCFRunLoopDefaultMode", flag=YES) + 603 at nsAppShell.mm:121
    frame #52: 0x00007fff86c9dd80 AppKit`-[NSApplication run] + 682
    frame #53: 0x00000001118fd045 XUL`nsAppShell::Run(this=0x000060d000047df0) + 581 at nsAppShell.mm:661
    frame #54: 0x000000011479b3b0 XUL`nsAppStartup::Run(this=0x0000607000034f20) + 576 at nsAppStartup.cpp:284
    frame #55: 0x000000011493cf78 XUL`XREMain::XRE_mainRun(this=0x00007fff5fbfe9a0) + 11384 at nsAppRunner.cpp:4369
    frame #56: 0x000000011493f211 XUL`XREMain::XRE_main(this=0x00007fff5fbfe9a0, argc=7, argv=0x00007fff5fbff9b0, aAppData=0x00007fff5fbff150) + 2481 at nsAppRunner.cpp:4473
    frame #57: 0x000000011493fb7f XUL`::XRE_main(argc=7, argv=0x00007fff5fbff9b0, aAppData=0x00007fff5fbff150, aFlags=0) + 303 at nsAppRunner.cpp:4581
    frame #58: 0x0000000100003ec6 firefox`do_main(argc=7, argv=0x00007fff5fbff9b0, envp=0x00007fff5fbff9f0, xreDirectory=0x0000610000000240) + 4070 at nsBrowserApp.cpp:242
    frame #59: 0x0000000100002596 firefox`main(argc=7, argv=0x00007fff5fbff9b0, envp=0x00007fff5fbff9f0) + 1190 at nsBrowserApp.cpp:382
    frame #60: 0x0000000100000ec4 firefox`start + 52
(lldb) 

Seen while attempting to run ASAN for another problem.

Comment 1

[Jean-Yves Avenard [:jya]]

going to mark this as invalid as I encountered this while tracking a double free error somewhere else and that could just be the result of memory corruption