1307352 - Intermittent toolkit/components/telemetry/tests/unit/test_ChildHistograms.js | application crashed [@ mozalloc_abort]

Status: REOPENED

(Core :: Widget: Gtk, defect)

Description

[Treeherder Bug Filer]

Filed by: philringnalda [at] gmail.com

https://treeherder.mozilla.org/logviewer.html#?job_id=36965838&repo=mozilla-inbound

https://archive.mozilla.org/pub/firefox/tinderbox-builds/mozilla-inbound-linux-debug/1475545318/mozilla-inbound_ubuntu32_vm-debug_test-xpcshell-4-bm08-tests1-linux32-build15.txt.gz

Comment 1

[Georg Fritzsche [:gfritzsche]]

While this crashes in a Telemetry test, the code involved is not Telemetry.
The interesting part seems to be a recursive GetService() around here:
https://hg.mozilla.org/mozilla-central/annotate/ea104eeb14cc54da9a06c3766da63f73117723a0/dom/base/nsContentUtils.cpp#l1423

@smaug: seeing you in the reviewers there occasionally, do you know who is good to flag on this?

> \x07[Parent 26762] ###!!! ASSERTION: Recursive GetService!: 'Error', file /builds/slave/m-in-lx-d-00000000000000000000/build/src/xpcom/components/nsComponentManager.cpp, line 1488
> #01: nsComponentManagerImpl::GetServiceByContractID [xpcom/components/nsComponentManager.cpp:1489]
> #02: CallGetService [xpcom/glue/nsComponentManagerUtils.cpp:69]
> #03: nsContentUtils::GetBidiKeyboard [dom/base/nsContentUtils.cpp:1424]
> #04: mozilla::widget::WidgetUtils::SendBidiKeyboardInfoToContent [xpcom/glue/nsCOMPtr.h:456]
> #05: nsBidiKeyboard::Reset [widget/gtk/nsBidiKeyboard.cpp:36]
> #06: nsBidiKeyboardConstructor [mfbt/RefPtr.h:53]
> #07: mozilla::GenericFactory::CreateInstance [xpcom/glue/GenericFactory.cpp:18]
> #08: nsComponentManagerImpl::CreateInstanceByContractID [xpcom/components/nsComponentManager.cpp:1171]
> #09: nsComponentManagerImpl::GetServiceByContractID [xpcom/components/nsComponentManager.cpp:1527]
> #10: CallGetService [xpcom/glue/nsComponentManagerUtils.cpp:69]
> #11: nsContentUtils::GetBidiKeyboard [dom/base/nsContentUtils.cpp:1424]
> #12: mozilla::dom::ContentParent::RecvGetXPCOMProcessAttributes [dom/ipc/ContentParent.cpp:2923]
> #13: mozilla::dom::PContentParent::OnMessageReceived [obj-firefox/ipc/ipdl/PContentParent.cpp:7325]
> #14: mozilla::ipc::MessageChannel::DispatchSyncMessage [ipc/glue/MessageChannel.h:618]
> #15: mozilla::ipc::MessageChannel::DispatchMessage [ipc/glue/MessageChannel.cpp:1602]
> #16: mozilla::ipc::MessageChannel::OnMaybeDequeueOne [ipc/glue/MessageChannel.cpp:1575]

Comment 2

[Olli Pettay [:smaug][[e-mail]]]

I don't understand
> #03: nsContentUtils::GetBidiKeyboard [dom/base/nsContentUtils.cpp:1424]
> #04: mozilla::widget::WidgetUtils::SendBidiKeyboardInfoToContent [xpcom/glue/nsCOMPtr.h:456]
> #05: nsBidiKeyboard::Reset [widget/gtk/nsBidiKeyboard.cpp:36]

Reset doesn't call widgetutils, as far as I see. Is the stack trace busted?

Comment 3

[Andrew McCreight [:mccr8]]

It looks like philor already backed something out for this:
https://hg.mozilla.org/mozilla-central/rev/3935a59efc38

Comment 4

[Andrew McCreight [:mccr8]]

Fixed by backout.

Comment 5

[Narcis Beleuzu [:NarcisB]]

Fail reappeared on inbound.

Log link: https://treeherder.mozilla.org/logviewer.html#?job_id=208982693&repo=mozilla-inbound&lineNumber=7128


13:15:53     INFO -  TEST-START | xpcshell.ini:toolkit/mozapps/extensions/test/xpcshell/test_reinstall_disabled_addon.js
13:15:55     INFO -  mozcrash Saved minidump as /Users/cltbld/tasks/task_1541014959/build/blobber_upload_dir/2F3EFF2E-8129-44C1-A5F7-9BA8CF82A89A.dmp
13:15:55     INFO -  mozcrash Saved app info as /Users/cltbld/tasks/task_1541014959/build/blobber_upload_dir/2F3EFF2E-8129-44C1-A5F7-9BA8CF82A89A.extra
13:15:55  WARNING -  PROCESS-CRASH | toolkit/components/telemetry/tests/unit/test_ChildHistograms.js | application crashed [@ mozalloc_abort]
13:15:55     INFO -  Crash dump filename: /var/folders/th/xkypw35d7pn536j9ltv680vr00000x/T/xpc-other-RjhGzM/2F3EFF2E-8129-44C1-A5F7-9BA8CF82A89A.dmp
13:15:55     INFO -  Operating system: Mac OS X
13:15:55     INFO -                    10.10.5 14F27
13:15:55     INFO -  CPU: amd64
13:15:55     INFO -       family 6 model 69 stepping 1
13:15:55     INFO -       4 CPUs
13:15:55     INFO -  GPU: UNKNOWN
13:15:55     INFO -  Crash reason:  EXC_BAD_ACCESS / KERN_INVALID_ADDRESS
13:15:55     INFO -  Crash address: 0x0
13:15:55     INFO -  Process uptime: 14 seconds
13:15:55     INFO -  Thread 6 (crashed)
13:15:55     INFO -   0  libmozglue.dylib!mozalloc_abort [mozalloc_abort.cpp:25aa97e7d1062b21a84f3acb950859de09f40533 : 35 + 0x0]
13:15:55     INFO -      rax = 0x0000000000000000   rdx = 0x00007fff7cc651f8
13:15:55     INFO -      rcx = 0x0000000000000000   rbx = 0x00007fff7cc65c50
13:15:55     INFO -      rsi = 0x00000c0000000c00   rdi = 0x00000b0000000c03
13:15:55     INFO -      rbp = 0x000000010a209e20   rsp = 0x000000010a209e10
13:15:55     INFO -       r8 = 0x000000010a209dc0    r9 = 0x000000010a20a000
13:15:55     INFO -      r10 = 0x0000000000000000   r11 = 0x0000000000000246
13:15:55     INFO -      r12 = 0x0000000100cb7e01   r13 = 0x00007fff7cc65c50
13:15:55     INFO -      r14 = 0x0000000000000341   r15 = 0x0000000100cbbd99
13:15:55     INFO -      rip = 0x00000001093ec8d9
13:15:55     INFO -      Found by: given as instruction pointer in context

Comment 6

[Intermittent Failures Robot]

1 failures in 2978 pushes (0.0 failures/push) were associated with this bug in the last 7 days.

Repository breakdown:
* mozilla-inbound: 1

Platform breakdown:
* osx-10-10: 1

For more details, see:
https://treeherder.mozilla.org/intermittent-failures.html#/bugdetails?bug=1307352&startday=2018-10-29&endday=2018-11-04&tree=all