1289075 - Crash in IsAboutToBeFinalizedInternal<T>

Status: RESOLVED WORKSFORME

(Core :: JavaScript: GC, defect, P5)

Description

[Avinash Chaurasia]

Attachment: crash.png

This bug was filed from the Socorro interface and is 
report bp-b6d8abb5-d386-4f42-aaf6-41cc22160725.
=============================================================
Firefox crashes frequently. It is almost not at all useful to me as of now.

Comment 1

[Avinash Chaurasia]

Just after submitting, it crashed thrice with in a minute.

Comment 2

[:Gijs (he/him)]

(In reply to Avinash Chaurasia from comment #1)
> Just after submitting, it crashed thrice with in a minute.

Can you provide the crash report IDs for all of those crashes? It's going to be useful if we know if they're the same type / location, or not.

Comment 3

[Avinash Chaurasia]

Crash ids are: 
b6d8abb5-d386-4f42-aaf6-41cc22160725
c16e6428-05bf-4d3d-a768-22ebe2160725
a98671c6-6333-4203-9d1d-1f6732160704
ceac8db2-d02c-47a6-a970-74cf52160726

Comment 4

[Avinash Chaurasia]

I did a fresh installation of ubuntu 16.04 x86_64. And firefox crashed again and again in the fresh installation as well. here is the ID
1f3edc97-a580-4b15-8495-8cdfc2160728

Comment 5

[Marco Castelluccio [:marco]]

Have you always experienced this crash with Firefox on this machine? Or did an earlier version of Firefox work?

Comment 6

[BugBot [:suhaib / :marco/ :calixte]]

Crash volume for signature 'IsAboutToBeFinalizedInternal<T>':
 - nightly (version 52): 39 crashes from 2016-09-19.
 - aurora  (version 51): 57 crashes from 2016-09-19.
 - beta    (version 50): 1412 crashes from 2016-09-20.
 - release (version 49): 4750 crashes from 2016-09-05.
 - esr     (version 45): 409 crashes from 2016-07-25.

Crash volume on the last weeks (Week N is from 10-17 to 10-23):
            W. N-1  W. N-2  W. N-3  W. N-4
 - nightly       8      16       5       5
 - aurora       15      13      22       3
 - beta        371     384     380     100
 - release    1397    1357    1233     304
 - esr          40      55      41      38

Affected platforms: Windows, Linux

Crash rank on the last 7 days:
           Browser   Content     Plugin
 - nightly #254      #61
 - aurora  #152      #82
 - beta    #33       #30
 - release #51       #24
 - esr     #241

Comment 7

[BugBot [:suhaib / :marco/ :calixte]]

Crash volume for signature 'IsAboutToBeFinalizedInternal<T>':
 - nightly (version 53): 79 crashes from 2016-11-14.
 - aurora  (version 52): 115 crashes from 2016-11-14.
 - beta    (version 51): 2246 crashes from 2016-11-14.
 - release (version 50): 11708 crashes from 2016-11-01.
 - esr     (version 45): 1078 crashes from 2016-07-06.

Crash volume on the last weeks (Week N is from 01-02 to 01-08):
            W. N-1  W. N-2  W. N-3  W. N-4  W. N-5  W. N-6  W. N-7
 - nightly       8      15      10       9      15      12       9
 - aurora       24      23      15      15      19      14       0
 - beta        245     244     289     428     435     433      96
 - release    1755    1843    1886    1939    1722    1481     519
 - esr          40      54      45      37      48      39      54

Affected platforms: Windows, Linux

Crash rank on the last 7 days:
           Browser   Content   Plugin
 - nightly #189      #82
 - aurora  #217      #79
 - beta    #43       #31
 - release #43       #22
 - esr     #254

Comment 8

[BugBot [:suhaib / :marco/ :calixte]]

Crash volume for signature 'IsAboutToBeFinalizedInternal<T>':
 - nightly (version 54): 14 crashes from 2017-01-23.
 - aurora  (version 53): 4 crashes from 2017-01-23.
 - beta    (version 52): 284 crashes from 2017-01-23.
 - release (version 51): 559 crashes from 2017-01-16.
 - esr     (version 45): 1162 crashes from 2016-08-03.

Crash volume on the last weeks (Week N is from 01-30 to 02-05):
            W. N-1  W. N-2  W. N-3  W. N-4  W. N-5  W. N-6  W. N-7
 - nightly       9
 - aurora        2
 - beta        154
 - release     253       0
 - esr          64      63      79      53      40      54      45

Affected platforms: Windows, Linux

Crash rank on the last 7 days:
           Browser   Content   Plugin
 - nightly #192      #43
 - aurora  #353      #65
 - beta    #36       #30
 - release #77       #36
 - esr     #245

Comment 9

[Julien Cristau [:jcristau]]

Too late for firefox 52, mass-wontfix.

Comment 10

[Tyson Smith [:tsmith]]

Attachment: asan_log.txt

Comment 11

[Tyson Smith [:tsmith]]

Marking as s-s until the new ASan log can be reviewed.

Comment 12

[Andrew McCreight [:mccr8]]

Jon, can you take a look at the ASan log? "buffer overflow" sometimes really means a use after free in these logs.

Comment 13

[Tyson Smith [:tsmith]]

BTW, the ASan log came from a long running fuzz job. No test cases are available.
Found using m-c:
BuildID=20170714164113
SourceStamp=2908b6171cb8df85fc1f0985e2bf94ce3b04a522

Comment 14

[Kartikaya Gupta (email:[e-mail])]

A user on #developers reported hitting this problem a lot while browsing youtube. Some details can be found in the discussion at https://mozilla.logbot.info/developers/20171210#c13999622 including a link to a pastebin of his about:suppport.

Comment 15

[Wayne Mery (:wsmwk)]

~25% are Thunderbird 60.x

Comment 16

[Wayne Mery (:wsmwk)]

No crashes for versions of Firefox or Thunderbird newer than 60