1423377 - Intermittent SUMMARY: AddressSanitizer: SEGV /builds/worker/workspace/build/src/js/src/gc/ArenaList-inl.h:100:12 in head

Status: RESOLVED DUPLICATE of bug 1421019

(Core :: JavaScript: GC, defect, P5)

Description

[Treeherder Bug Filer]

Filed by: archaeopteryx [at] coole-files.de

https://treeherder.mozilla.org/logviewer.html#?job_id=149950000&repo=autoland

https://queue.taskcluster.net/v1/task/Sbno5ocjQf-zsiOm8uNWFA/runs/0/artifacts/public/logs/live_backing.log

[task 2017-12-05T19:03:41.493Z] TEST-PASS | test262/language/statements/for-in/dstr-array-elem-nested-obj-invalid.js | (args: "") [0.1 s]
[task 2017-12-05T19:03:41.493Z] {"action": "test_start", "pid": 83554, "source": "jstests", "test": "test262/language/statements/for-in/dstr-array-elem-nested-obj-invalid.js", "thread": "main", "time": 1512500621.352155}
[task 2017-12-05T19:03:41.494Z] {"action": "test_end", "extra": {"jitflags": []}, "pid": 83554, "source": "jstests", "status": "PASS", "test": "test262/language/statements/for-in/dstr-array-elem-nested-obj-invalid.js", "thread": "main", "time": 1512500621.493433}
[task 2017-12-05T19:03:41.525Z] ## test262/language/statements/for-in/dstr-obj-prop-elem-init-yield-ident-invalid-strict.js: rc = 1, run time = 0.38802
[task 2017-12-05T19:03:41.525Z] test262/language/statements/for-in/dstr-obj-prop-elem-init-yield-ident-invalid-strict.js:35:14 SyntaxError: yield is a reserved identifier:
[task 2017-12-05T19:03:41.525Z] test262/language/statements/for-in/dstr-obj-prop-elem-init-yield-ident-invalid-strict.js:35:14 for ({ x: x = yield } in [{}]) ;
[task 2017-12-05T19:03:41.525Z] test262/language/statements/for-in/dstr-obj-prop-elem-init-yield-ident-invalid-strict.js:35:14 ..............^
[task 2017-12-05T19:03:41.525Z] ASAN:DEADLYSIGNAL
[task 2017-12-05T19:03:41.525Z] =================================================================
[task 2017-12-05T19:03:41.525Z] ==97131==ERROR: AddressSanitizer: SEGV on unknown address 0x7ffff1903010 (pc 0x00000140e9b0 bp 0x7ffff1d7b3c0 sp 0x7ffff1d7b330 T13)
[task 2017-12-05T19:03:41.525Z] ==97131==The signal is caused by a READ memory access.
[task 2017-12-05T19:03:41.525Z]     #0 0x140e9af in head /builds/worker/workspace/build/src/js/src/gc/ArenaList-inl.h:100:12
[task 2017-12-05T19:03:41.525Z]     #1 0x140e9af in unmarkAll /builds/worker/workspace/build/src/js/src/gc/ArenaList-inl.h:288
[task 2017-12-05T19:03:41.525Z]     #2 0x140e9af in UnmarkCollectedZones(JSRuntime*) /builds/worker/workspace/build/src/js/src/jsgc.cpp:4206
[task 2017-12-05T19:03:41.525Z]     #3 0x188f4c3 in runFromHelperThread /builds/worker/workspace/build/src/js/src/vm/HelperThreads.cpp:1496:9
[task 2017-12-05T19:03:41.525Z]     #4 0x188f4c3 in js::HelperThread::handleGCParallelWorkload(js::AutoLockHelperThreadState&) /builds/worker/workspace/build/src/js/src/vm/HelperThreads.cpp:1528
[task 2017-12-05T19:03:41.525Z]     #5 0x18943d5 in js::HelperThread::threadLoop() /builds/worker/workspace/build/src/js/src/vm/HelperThreads.cpp:2290:13
[task 2017-12-05T19:03:41.525Z]     #6 0x189e9e5 in callMain<0> /builds/worker/workspace/build/src/js/src/threading/Thread.h:242:5
[task 2017-12-05T19:03:41.525Z]     #7 0x189e9e5 in js::detail::ThreadTrampoline<void (&)(void*), js::HelperThread*>::Start(void*) /builds/worker/workspace/build/src/js/src/threading/Thread.h:235
[task 2017-12-05T19:03:41.525Z]     #8 0x7ffff7bc6aa0 in start_thread (/lib64/libpthread.so.0+0x7aa0)
[task 2017-12-05T19:03:41.525Z]     #9 0x7ffff64a6bcc in clone (/lib64/libc.so.6+0xe8bcc)
[task 2017-12-05T19:03:41.525Z] 
[task 2017-12-05T19:03:41.525Z] AddressSanitizer can not provide additional info.
[task 2017-12-05T19:03:41.525Z] SUMMARY: AddressSanitizer: SEGV /builds/worker/workspace/build/src/js/src/gc/ArenaList-inl.h:100:12 in head
[task 2017-12-05T19:03:41.526Z] Thread T13 (JS Helper) created by T0 here:
[task 2017-12-05T19:03:41.526Z]     #0 0x4dcd86 in pthread_create /builds/worker/workspace/moz-toolchain/src/llvm/projects/compiler-rt/lib/asan/asan_interceptors.cc:245:3
[task 2017-12-05T19:03:41.526Z]     #1 0x1607cc6 in js::Thread::create(void* (*)(void*), void*) /builds/worker/workspace/build/src/js/src/threading/posix/Thread.cpp:115:7
[task 2017-12-05T19:03:41.526Z]     #2 0x188c4d8 in bool js::Thread::init<void (&)(void*), js::HelperThread*>(void (&)(void*), js::HelperThread*&&) /builds/worker/workspace/build/src/js/src/threading/Thread.h:124:12
[task 2017-12-05T19:03:41.526Z]     #3 0x18813ff in js::GlobalHelperThreadState::ensureInitialized() /builds/worker/workspace/build/src/js/src/vm/HelperThreads.cpp:959:29
[task 2017-12-05T19:03:41.526Z]     #4 0x1951854 in JSRuntime::init(JSContext*, unsigned int, unsigned int) /builds/worker/workspace/build/src/js/src/vm/Runtime.cpp:206:34
[task 2017-12-05T19:03:41.526Z]     #5 0x12f0eaf in js::NewContext(unsigned int, unsigned int, JSRuntime*) /builds/worker/workspace/build/src/js/src/jscntxt.cpp:165:19
[task 2017-12-05T19:03:41.526Z]     #6 0x536b85 in main /builds/worker/workspace/build/src/js/src/shell/js.cpp:8959:21
[task 2017-12-05T19:03:41.526Z]     #7 0x7ffff63dcd1c in __libc_start_main (/lib64/libc.so.6+0x1ed1c)
[task 2017-12-05T19:03:41.526Z] 
[task 2017-12-05T19:03:41.526Z] ==97131==ABORTING
[task 2017-12-05T19:03:41.526Z] TEST-UNEXPECTED-FAIL | test262/language/statements/for-in/dstr-obj-prop-elem-init-yield-ident-invalid-strict.js | (args: "") [0.4 s]

Comment 2

[Intermittent Failures Robot]

3 failures in 889 pushes (0.003 failures/push) were associated with this bug in the last 7 days.    

Repository breakdown:
* autoland: 2
* try: 1

Platform breakdown:
* linux64: 3

For more details, see:
https://brasstacks.mozilla.com/orangefactor/?display=Bug&bugid=1423377&startday=2017-12-04&endday=2017-12-10&tree=all