1298667 - Crash in mozilla::Maybe<T>::emplace<T> on Windows XP SP3 when logging on pages (redbrickhealth.com, facebook.com)

Status: UNCONFIRMED

(Core :: JavaScript Engine: JIT, defect, P3, critical)

Description

[[e-mail]]

Attachment: FirefoxRegrression2015-12-29.JPG

User Agent: Mozilla/5.0 (Windows NT 5.1; rv:45.0) Gecko/20100101 Firefox/45.0
Build ID: 20160407164938

Steps to reproduce:

https://csc.redbrickhealth.com
When I login, Firefox v48 crashes.
Last good working Release = v45 .

I ran the regression software and narrowed it down to 2015-12-29.
See attached jpg.


Actual results:

Philipp,

Scrap that one.

I think I finally got it to build all the way down.

pushlog_url: https://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=06ab805e14b5e6d8a8a99c7846c8fde163a9e5d7&tochange=3f41d7d0f544ebd98273e39bd945c28878a47427
repo_name: mozilla-central

Does this help?



Expected results:

Should have logged in and displayed page.

Comment 1

[Loic]

The regression range is too large. Do you have a guest account to test? (not sure if it'll crash on Win 7 64b)

Comment 2

[[e-mail]]

It doesn't happen on my W7 box; only XPSP3 box.
Can I rerun the regression test with any special parms?

Comment 3

[[e-mail]]

I don't know if my jpg came through but, the regression test said 2015-12-29 a0dbf1f1 worked, b13bb1b 40e6314f and f8009a75 failed.

Comment 4

[Loic]

The main issue is that we need a testcase or an access to the website to reproduce the crash and eventually fix it.
The regression range is important to know he regressing bug and identify the code part which is faulty but it's not enough without testcase.

Comment 5

[[e-mail]]

OK, I found another.
if you have a personal login on www.facebook.com, once you type in your pw and clock OK, it will crash.

Comment 6

[Loic]

1) Type about:crashes in the location bar and copy some crash report links (bp-...).

2) Is the crash reproducible in safe mode?
https://support.mozilla.org/en-US/kb/troubleshoot-firefox-issues-using-safe-mode

3) With a fresh profile?
https://support.mozilla.org/en-US/kb/profile-manager-create-and-remove-firefox-profiles

Comment 7

[[e-mail]]

1. https://crash-stats.mozilla.com/report/index/bp-76ff5fa7-1f46-443c-8c2a-66d652160828
2. Crashes
3. Crashes

Comment 8

[[e-mail]]

I ran the regression test again 2015-12-28 thru 2015-12-29

CrashURL=https://csc.redbrickhealth.com/

2016-08-28T13:59:53: DEBUG : Using url: https://hg.mozilla.org/mozilla-central/json-pushes?changeset=7c83da46ea740bc14028aca9f9a662f062de5586
2016-08-28T13:59:53: DEBUG : Using url: https://hg.mozilla.org/mozilla-central/json-pushes?fromchange=7c83da46ea740bc14028aca9f9a662f062de5586&tochange=9ddf0da90fb3bc1ae29966dc596013fc54a44bd2
2016-08-28T13:59:53: DEBUG : using taskcluster route 'gecko.v2.mozilla-central.revision.7c83da46ea740bc14028aca9f9a662f062de5586.firefox.win32-opt'
2016-08-28T13:59:53: DEBUG : using taskcluster route 'gecko.v2.mozilla-central.revision.9ddf0da90fb3bc1ae29966dc596013fc54a44bd2.firefox.win32-opt'
2016-08-28T13:59:56: DEBUG : using taskcluster route 'gecko.v2.mozilla-central.revision.7d6ddcd2bbb47871f04edd3c7e10c6e30ad98896.firefox.win32-opt'
2016-08-28T13:59:58: INFO : Running mozilla-central build built on 2015-12-29 11:59:30.717000, revision 7d6ddcd2
2016-08-28T13:59:58: DEBUG : using taskcluster route 'gecko.v2.mozilla-central.revision.51ade5e239fa7a00445412c3c9b952d597e733d2.firefox.win32-opt'
2016-08-28T13:59:59: WARNING : Skipping build 51ade5e239fa: Unable to find build info using the taskcluster route 'gecko.v2.mozilla-central.revision.51ade5e239fa7a00445412c3c9b952d597e733d2.firefox.win32-opt'
2016-08-28T14:00:10: INFO : Launching c:\docume~1\owner\locals~1\temp\tmp4_n83g\firefox\firefox.exe
2016-08-28T14:00:11: INFO : application_buildid: 20151229025539
2016-08-28T14:00:11: INFO : application_changeset: 7d6ddcd2bbb47871f04edd3c7e10c6e30ad98896
2016-08-28T14:00:11: INFO : application_display_name: Nightly
2016-08-28T14:00:11: INFO : application_id: {ec8030f7-c20a-464f-9b0e-13a3a9e97384}
2016-08-28T14:00:11: INFO : application_name: Firefox
2016-08-28T14:00:11: INFO : application_remotingname: firefox
2016-08-28T14:00:11: INFO : application_repository: https://hg.mozilla.org/mozilla-central
2016-08-28T14:00:11: INFO : application_vendor: Mozilla
2016-08-28T14:00:11: INFO : application_version: 46.0a1
2016-08-28T14:00:11: INFO : platform_buildid: 20151229025539
2016-08-28T14:00:11: INFO : platform_changeset: 7d6ddcd2bbb47871f04edd3c7e10c6e30ad98896
2016-08-28T14:00:11: INFO : platform_repository: https://hg.mozilla.org/mozilla-central
2016-08-28T14:00:11: INFO : platform_version: 46.0a1
2016-08-28T14:01:10: INFO : Narrowed inbound regression window from [7c83da46, 9ddf0da9] (3 revisions) to [7d6ddcd2, 9ddf0da9] (2 revisions) (~1 steps left)
2016-08-28T14:01:10: DEBUG : Starting merge handling...
2016-08-28T14:01:10: DEBUG : Using url: https://hg.mozilla.org/mozilla-central/json-pushes?changeset=9ddf0da90fb3bc1ae29966dc596013fc54a44bd2&full=1
2016-08-28T14:01:10: DEBUG : Found commit message:
merge mozilla-inbound to mozilla-central a=merge

2016-08-28T14:01:10: DEBUG : This is a merge from mozilla-inbound
2016-08-28T14:01:10: DEBUG : Using url: https://hg.mozilla.org/integration/mozilla-inbound/json-pushes?changeset=12b0bce41702a4c2c07e0cda01d4ae3290d36759
2016-08-28T14:01:11: DEBUG : Using url: https://hg.mozilla.org/integration/mozilla-inbound/json-pushes?fromchange=12b0bce41702a4c2c07e0cda01d4ae3290d36759&tochange=4cefc9388515592eb7b6a8197226010587cbd62f
2016-08-28T14:01:11: DEBUG : Using url: https://hg.mozilla.org/integration/mozilla-inbound/json-pushes?startID=69552&endID=69572
2016-08-28T14:01:11: INFO : ************* Switching to mozilla-inbound
2016-08-28T14:01:11: DEBUG : End merge handling
2016-08-28T14:01:11: DEBUG : Using url: https://hg.mozilla.org/integration/mozilla-inbound/json-pushes?changeset=210aaacaf2b1a5f51b5d78d17c44197af2956614
2016-08-28T14:01:11: DEBUG : Using url: https://hg.mozilla.org/integration/mozilla-inbound/json-pushes?fromchange=210aaacaf2b1a5f51b5d78d17c44197af2956614&tochange=4cefc9388515592eb7b6a8197226010587cbd62f
2016-08-28T14:01:11: DEBUG : using taskcluster route 'gecko.v2.mozilla-inbound.revision.210aaacaf2b1a5f51b5d78d17c44197af2956614.firefox.win32-opt'
2016-08-28T14:01:11: DEBUG : using taskcluster route 'gecko.v2.mozilla-inbound.revision.4cefc9388515592eb7b6a8197226010587cbd62f.firefox.win32-opt'
2016-08-28T14:01:14: DEBUG : using taskcluster route 'gecko.v2.mozilla-inbound.revision.a0dbf1fe665f1cb98e1c9490e30af443f3618f3f.firefox.win32-opt'
2016-08-28T14:01:16: INFO : Running mozilla-inbound build built on 2015-12-28 21:30:18.007000, revision a0dbf1fe
2016-08-28T14:01:16: DEBUG : using taskcluster route 'gecko.v2.mozilla-inbound.revision.3242bee2d9568ac74d4c095dc7d2fac4798a02ca.firefox.win32-opt'
2016-08-28T14:01:16: WARNING : Skipping build 3242bee2d956: Unable to find build info using the taskcluster route 'gecko.v2.mozilla-inbound.revision.3242bee2d9568ac74d4c095dc7d2fac4798a02ca.firefox.win32-opt'
2016-08-28T14:01:16: DEBUG : using taskcluster route 'gecko.v2.mozilla-inbound.revision.18f2e2c3636fbe89794be06ead60178cca6761ad.firefox.win32-opt'
2016-08-28T14:01:17: WARNING : Skipping build 18f2e2c3636f: Unable to find build info using the taskcluster route 'gecko.v2.mozilla-inbound.revision.18f2e2c3636fbe89794be06ead60178cca6761ad.firefox.win32-opt'
2016-08-28T14:01:17: DEBUG : using taskcluster route 'gecko.v2.mozilla-inbound.revision.f745c6e024a325921801db0394add38c86f34add.firefox.win32-opt'
2016-08-28T14:01:17: WARNING : Skipping build f745c6e024a3: Unable to find build info using the taskcluster route 'gecko.v2.mozilla-inbound.revision.f745c6e024a325921801db0394add38c86f34add.firefox.win32-opt'
2016-08-28T14:01:17: DEBUG : using taskcluster route 'gecko.v2.mozilla-inbound.revision.b1e3bb1b90728c40161baa96b7e79ec7ed426513.firefox.win32-opt'
2016-08-28T14:01:20: DEBUG : using taskcluster route 'gecko.v2.mozilla-inbound.revision.56c56562d06eed2a33d43ea3c27e0238712b4da4.firefox.win32-opt'
2016-08-28T14:01:26: INFO : Launching c:\docume~1\owner\locals~1\temp\tmppjf5ng\firefox\firefox.exe
2016-08-28T14:01:26: INFO : application_buildid: 20151228120722
2016-08-28T14:01:26: INFO : application_changeset: a0dbf1fe665f1cb98e1c9490e30af443f3618f3f
2016-08-28T14:01:26: INFO : application_display_name: Nightly
2016-08-28T14:01:26: INFO : application_id: {ec8030f7-c20a-464f-9b0e-13a3a9e97384}
2016-08-28T14:01:26: INFO : application_name: Firefox
2016-08-28T14:01:26: INFO : application_remotingname: firefox
2016-08-28T14:01:26: INFO : application_repository: https://hg.mozilla.org/integration/mozilla-inbound
2016-08-28T14:01:26: INFO : application_vendor: Mozilla
2016-08-28T14:01:26: INFO : application_version: 46.0a1
2016-08-28T14:01:26: INFO : platform_buildid: 20151228120722
2016-08-28T14:01:26: INFO : platform_changeset: a0dbf1fe665f1cb98e1c9490e30af443f3618f3f
2016-08-28T14:01:26: INFO : platform_repository: https://hg.mozilla.org/integration/mozilla-inbound
2016-08-28T14:01:26: INFO : platform_version: 46.0a1
2016-08-28T14:01:59: WARNING : Process exited with code 1
2016-08-28T14:02:10: INFO : Narrowed inbound regression window from [210aaaca, 4cefc938] (17 revisions) to [210aaaca, a0dbf1fe] (11 revisions) (~3 steps left)
2016-08-28T14:02:10: INFO : Running mozilla-inbound build built on 2015-12-28 13:29:35.634000, revision 56c56562
2016-08-28T14:02:10: DEBUG : using taskcluster route 'gecko.v2.mozilla-inbound.revision.3b79d479b028ba9fe518623f802c9bee232ac26c.firefox.win32-opt'
2016-08-28T14:02:12: DEBUG : using taskcluster route 'gecko.v2.mozilla-inbound.revision.c2dae7647e109d6b57a26ea613e95dfc6425f0da.firefox.win32-opt'
2016-08-28T14:02:20: INFO : Launching c:\docume~1\owner\locals~1\temp\tmppzxc6p\firefox\firefox.exe
2016-08-28T14:02:20: INFO : application_buildid: 20151228041247
2016-08-28T14:02:20: INFO : application_changeset: 56c56562d06eed2a33d43ea3c27e0238712b4da4
2016-08-28T14:02:20: INFO : application_display_name: Nightly
2016-08-28T14:02:20: INFO : application_id: {ec8030f7-c20a-464f-9b0e-13a3a9e97384}
2016-08-28T14:02:20: INFO : application_name: Firefox
2016-08-28T14:02:20: INFO : application_remotingname: firefox
2016-08-28T14:02:20: INFO : application_repository: https://hg.mozilla.org/integration/mozilla-inbound
2016-08-28T14:02:20: INFO : application_vendor: Mozilla
2016-08-28T14:02:20: INFO : application_version: 46.0a1
2016-08-28T14:02:20: INFO : platform_buildid: 20151228041247
2016-08-28T14:02:20: INFO : platform_changeset: 56c56562d06eed2a33d43ea3c27e0238712b4da4
2016-08-28T14:02:20: INFO : platform_repository: https://hg.mozilla.org/integration/mozilla-inbound
2016-08-28T14:02:20: INFO : platform_version: 46.0a1
2016-08-28T14:03:46: INFO : Narrowed inbound regression window from [210aaaca, a0dbf1fe] (11 revisions) to [56c56562, a0dbf1fe] (6 revisions) (~2 steps left)
2016-08-28T14:03:46: INFO : Running mozilla-inbound build built on 2015-12-28 20:01:04.892000, revision 3b79d479
2016-08-28T14:03:46: DEBUG : using taskcluster route 'gecko.v2.mozilla-inbound.revision.bdade94c0fd079f0b0f21566b892455bb0161f8e.firefox.win32-opt'
2016-08-28T14:03:48: DEBUG : using taskcluster route 'gecko.v2.mozilla-inbound.revision.426e2e8f1ff65d63e6690bfe95908d071780a1d1.firefox.win32-opt'
2016-08-28T14:03:54: INFO : Launching c:\docume~1\owner\locals~1\temp\tmp4pws2i\firefox\firefox.exe
2016-08-28T14:03:54: INFO : application_buildid: 20151228104732
2016-08-28T14:03:54: INFO : application_changeset: 3b79d479b028ba9fe518623f802c9bee232ac26c
2016-08-28T14:03:54: INFO : application_display_name: Nightly
2016-08-28T14:03:54: INFO : application_id: {ec8030f7-c20a-464f-9b0e-13a3a9e97384}
2016-08-28T14:03:54: INFO : application_name: Firefox
2016-08-28T14:03:54: INFO : application_remotingname: firefox
2016-08-28T14:03:54: INFO : application_repository: https://hg.mozilla.org/integration/mozilla-inbound
2016-08-28T14:03:54: INFO : application_vendor: Mozilla
2016-08-28T14:03:54: INFO : application_version: 46.0a1
2016-08-28T14:03:54: INFO : platform_buildid: 20151228104732
2016-08-28T14:03:54: INFO : platform_changeset: 3b79d479b028ba9fe518623f802c9bee232ac26c
2016-08-28T14:03:54: INFO : platform_repository: https://hg.mozilla.org/integration/mozilla-inbound
2016-08-28T14:03:54: INFO : platform_version: 46.0a1
2016-08-28T14:04:58: INFO : Narrowed inbound regression window from [56c56562, a0dbf1fe] (6 revisions) to [3b79d479, a0dbf1fe] (3 revisions) (~1 steps left)
2016-08-28T14:04:58: INFO : Running mozilla-inbound build built on 2015-12-28 20:48:35.430000, revision bdade94c
2016-08-28T14:05:06: INFO : Launching c:\docume~1\owner\locals~1\temp\tmpmzf1i5\firefox\firefox.exe
2016-08-28T14:05:07: INFO : application_buildid: 20151228115232
2016-08-28T14:05:07: INFO : application_changeset: bdade94c0fd079f0b0f21566b892455bb0161f8e
2016-08-28T14:05:07: INFO : application_display_name: Nightly
2016-08-28T14:05:07: INFO : application_id: {ec8030f7-c20a-464f-9b0e-13a3a9e97384}
2016-08-28T14:05:07: INFO : application_name: Firefox
2016-08-28T14:05:07: INFO : application_remotingname: firefox
2016-08-28T14:05:07: INFO : application_repository: https://hg.mozilla.org/integration/mozilla-inbound
2016-08-28T14:05:07: INFO : application_vendor: Mozilla
2016-08-28T14:05:07: INFO : application_version: 46.0a1
2016-08-28T14:05:07: INFO : platform_buildid: 20151228115232
2016-08-28T14:05:07: INFO : platform_changeset: bdade94c0fd079f0b0f21566b892455bb0161f8e
2016-08-28T14:05:07: INFO : platform_repository: https://hg.mozilla.org/integration/mozilla-inbound
2016-08-28T14:05:07: INFO : platform_version: 46.0a1
2016-08-28T14:06:12: INFO : Narrowed inbound regression window from [3b79d479, a0dbf1fe] (3 revisions) to [bdade94c, a0dbf1fe] (2 revisions) (~1 steps left)
2016-08-28T14:06:12: DEBUG : Starting merge handling...
2016-08-28T14:06:12: DEBUG : Using url: https://hg.mozilla.org/integration/mozilla-inbound/json-pushes?changeset=a0dbf1fe665f1cb98e1c9490e30af443f3618f3f&full=1
2016-08-28T14:06:12: DEBUG : Found commit message:
Bug 1215479 - Turn on W^X JIT code by default. r=luke

2016-08-28T14:06:12: INFO : The bisection is done.
2016-08-28T14:06:12: INFO : Stopped

----------------------------------------THIS ONE FAILED------------------------------------
app_name: firefox
build_date: 2015-12-28 21:30:18.007000
build_file: C:\Documents and Settings\Owner\.mozilla\mozregression\persist\a0dbf1fe665f--mozilla-inbound--firefox-46.0a1.en-US.win32.zip
build_type: inbound
build_url: https://queue.taskcluster.net/v1/task/NijLDfo8TSyZOSEzoucsUg/runs/0/artifacts/public%2Fbuild%2Ffirefox-46.0a1.en-US.win32.zip
changeset: a0dbf1fe665f1cb98e1c9490e30af443f3618f3f
pushlog_url: https://hg.mozilla.org/integration/mozilla-inbound/pushloghtml?fromchange=210aaacaf2b1a5f51b5d78d17c44197af2956614&tochange=a0dbf1fe665f1cb98e1c9490e30af443f3618f3f
repo_name: mozilla-inbound
repo_url: https://hg.mozilla.org/integration/mozilla-inbound
task_id: NijLDfo8TSyZOSEzoucsUg

Comment 9

[[e-mail]]

Attachment: FirefoxRegrression2015-12-29-2.JPG

Comment 10

[Loic]

Thanks for the answer. Do you get the same regression range when using Facebook login page to crash FF?

For the record, 2 bugs have been opened in the past with the same crash signature: on Win XP (bug 1272963) and on Win 7 (bug 1224595).

It could be a regression of:
Jan de Mooij — Bug 1215479 - Turn on W^X JIT code by default. r=luke

Comment 11

[Loic]

jandem, do you think your patches could be implied in the crash?

reg range:
https://hg.mozilla.org/integration/mozilla-inbound/pushloghtml?fromchange=210aaacaf2b1a5f51b5d78d17c44197af2956614&tochange=a0dbf1fe665f1cb98e1c9490e30af443f3618f3f

Comment 12

[[e-mail]]

Q. Do you get the same regression range when using Facebook login page to crash FF?
A. Yes

Also, this will also fix bug https://bugzilla.mozilla.org/show_bug.cgi?id=1279661

Comment 14

[Loic]

Workaround here: https://bugzilla.mozilla.org/show_bug.cgi?id=1279661#c24

Comment 15

[Chris Peterson [:cpeterson]]

Does this crash only happen on Windows XP? We will stop supporting XP after Firefox 52, but we will continue to support XP in Firefox ESR 52 channel until 2018 Q1 so it would still be worth fixing.

Comment 16

[Jan de Mooij [:jandem]]

Chris, this looks like a very low frequency crash that happens reliably for the bug reporter but not for other users. The most likely explanation for that is probably external software or some hardware thing. I don't think it's worth spending a lot of time on this.