1474725 - Intermittent SUMMARY: AddressSanitizer: SEGV /builds/worker/workspace/build/src/ipc/glue/MessageChannel.cpp:2548:13 in mozilla::ipc::MessageChannel::OnChannelErrorFromLink()

Status: RESOLVED INCOMPLETE

(Core :: IPC, defect, P5)

Description

[Treeherder Bug Filer]

Filed by: nerli [at] mozilla.com

https://treeherder.mozilla.org/logviewer.html#?job_id=187454634&repo=autoland

https://queue.taskcluster.net/v1/task/SbQbNSiXSfy-QvQdPKqlYw/runs/0/artifacts/public/logs/live_backing.log

[task 2018-07-10T19:44:26.216Z] 19:44:26     INFO -  1531251866215	Marionette	TRACE	1 <- [1,3,null,{"value":null}]
[task 2018-07-10T19:44:26.368Z] 19:44:26     INFO -  [Child 2005, Chrome_ChildThread] WARNING: pipe error: Broken pipe: file /builds/worker/workspace/build/src/ipc/chromium/src/chrome/common/ipc_channel_posix.cc, line 726
[task 2018-07-10T19:44:26.368Z] 19:44:26     INFO -  [Child 2005, Chrome_ChildThread] WARNING: pipe error: Broken pipe: file /builds/worker/workspace/build/src/ipc/chromium/src/chrome/common/ipc_channel_posix.cc, line 726
[task 2018-07-10T19:44:26.368Z] 19:44:26     INFO -  [Child 2005, Chrome_ChildThread] WARNING: pipe error: Broken pipe: file /builds/worker/workspace/build/src/ipc/chromium/src/chrome/common/ipc_channel_posix.cc, line 726
[task 2018-07-10T19:44:26.370Z] 19:44:26     INFO -  [Child 2005, Chrome_ChildThread] WARNING: pipe error: Broken pipe: file /builds/worker/workspace/build/src/ipc/chromium/src/chrome/common/ipc_channel_posix.cc, line 726
[task 2018-07-10T19:44:26.371Z] 19:44:26     INFO -  [Child 2005, Chrome_ChildThread] WARNING: pipe error: Broken pipe: file /builds/worker/workspace/build/src/ipc/chromium/src/chrome/common/ipc_channel_posix.cc, line 726
[task 2018-07-10T19:44:26.371Z] 19:44:26     INFO -  [Child 2005, Chrome_ChildThread] WARNING: pipe error: Broken pipe: file /builds/worker/workspace/build/src/ipc/chromium/src/chrome/common/ipc_channel_posix.cc, line 726
[task 2018-07-10T19:44:26.372Z] 19:44:26     INFO -  [Child 2005, Chrome_ChildThread] WARNING: FileDescriptorSet destroyed with unconsumed descriptors: file /builds/worker/workspace/build/src/ipc/chromium/src/chrome/common/file_descriptor_set_posix.cc, line 22
[task 2018-07-10T19:44:26.372Z] 19:44:26     INFO -  [Child 2005, Chrome_ChildThread] WARNING: FileDescriptorSet destroyed with unconsumed descriptors: file /builds/worker/workspace/build/src/ipc/chromium/src/chrome/common/file_descriptor_set_posix.cc, line 22
[task 2018-07-10T19:44:26.373Z] 19:44:26     INFO -  AddressSanitizer:DEADLYSIGNAL
[task 2018-07-10T19:44:26.373Z] 19:44:26     INFO -  =================================================================
[task 2018-07-10T19:44:26.374Z] 19:44:26    ERROR -  ==2005==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000000 (pc 0x7f3bd0b18ca3 bp 0x7f3bccb5b300 sp 0x7f3bccb5b2e0 T2)
[task 2018-07-10T19:44:26.374Z] 19:44:26     INFO -  ==2005==The signal is caused by a WRITE memory access.
[task 2018-07-10T19:44:26.374Z] 19:44:26     INFO -  ==2005==Hint: address points to the zero page.
[task 2018-07-10T19:44:27.130Z] 19:44:27     INFO -      #0 0x7f3bd0b18ca2 in mozilla::ipc::MessageChannel::OnChannelErrorFromLink() /builds/worker/workspace/build/src/ipc/glue/MessageChannel.cpp:2548:13
[task 2018-07-10T19:44:27.130Z] 19:44:27     INFO -      #1 0x7f3bd0b1dce7 in non-virtual thunk to mozilla::ipc::ProcessLink::OnChannelError() /builds/worker/workspace/build/src/ipc/glue/MessageLink.cpp:393:12
[task 2018-07-10T19:44:27.138Z] 19:44:27     INFO -      #2 0x7f3bd0abedd7 in event_persist_closure /builds/worker/workspace/build/src/ipc/chromium/src/third_party/libevent/event.c:1580:9
[task 2018-07-10T19:44:27.140Z] 19:44:27     INFO -      #3 0x7f3bd0abedd7 in event_process_active_single_queue /builds/worker/workspace/build/src/ipc/chromium/src/third_party/libevent/event.c:1639
[task 2018-07-10T19:44:27.141Z] 19:44:27     INFO -      #4 0x7f3bd0ab6c85 in event_process_active /builds/worker/workspace/build/src/ipc/chromium/src/third_party/libevent/event.c
[task 2018-07-10T19:44:27.143Z] 19:44:27     INFO -      #5 0x7f3bd0ab6c85 in event_base_loop /builds/worker/workspace/build/src/ipc/chromium/src/third_party/libevent/event.c:1961
[task 2018-07-10T19:44:27.143Z] 19:44:27     INFO -      #6 0x7f3bd0a78a63 in base::MessagePumpLibevent::Run(base::MessagePump::Delegate*) /builds/worker/workspace/build/src/ipc/chromium/src/base/message_pump_libevent.cc:373:7
[task 2018-07-10T19:44:27.143Z] 19:44:27     INFO -      #7 0x7f3bd0a72b1c in RunInternal /builds/worker/workspace/build/src/ipc/chromium/src/base/message_loop.cc:325:10
[task 2018-07-10T19:44:27.144Z] 19:44:27     INFO -      #8 0x7f3bd0a72b1c in RunHandler /builds/worker/workspace/build/src/ipc/chromium/src/base/message_loop.cc:318
[task 2018-07-10T19:44:27.145Z] 19:44:27     INFO -      #9 0x7f3bd0a72b1c in MessageLoop::Run() /builds/worker/workspace/build/src/ipc/chromium/src/base/message_loop.cc:298
[task 2018-07-10T19:44:27.162Z] 19:44:27     INFO -      #10 0x7f3bd0a8e213 in base::Thread::ThreadMain() /builds/worker/workspace/build/src/ipc/chromium/src/base/thread.cc:181:16
[task 2018-07-10T19:44:27.162Z] 19:44:27     INFO -      #11 0x7f3bd0a83b0c in ThreadFunc(void*) /builds/worker/workspace/build/src/ipc/chromium/src/base/platform_thread_posix.cc:38:13
[task 2018-07-10T19:44:27.163Z] 19:44:27     INFO -      #12 0x7f3bf0b256b9 in start_thread (/lib/x86_64-linux-gnu/libpthread.so.0+0x76b9)
[task 2018-07-10T19:44:27.225Z] 19:44:27     INFO -      #13 0x7f3befbae41c in clone /build/glibc-Cl5G7W/glibc-2.23/misc/../sysdeps/unix/sysv/linux/x86_64/clone.S:109
[task 2018-07-10T19:44:27.225Z] 19:44:27     INFO -  AddressSanitizer can not provide additional info.
[task 2018-07-10T19:44:27.225Z] 19:44:27     INFO -  SUMMARY: AddressSanitizer: SEGV /builds/worker/workspace/build/src/ipc/glue/MessageChannel.cpp:2548:13 in mozilla::ipc::MessageChannel::OnChannelErrorFromLink()
[task 2018-07-10T19:44:27.226Z] 19:44:27     INFO -  Thread T2 (Chrome_~dThread) created by T0 (Web Content) here:
[task 2018-07-10T19:44:27.247Z] 19:44:27     INFO -      #0 0x4aa8fd in __interceptor_pthread_create /builds/worker/workspace/moz-toolchain/src/llvm/projects/compiler-rt/lib/asan/asan_interceptors.cc:204:3
[task 2018-07-10T19:44:27.247Z] 19:44:27     INFO -      #1 0x7f3bd0a815e1 in CreateThread /builds/worker/workspace/build/src/ipc/chromium/src/base/platform_thread_posix.cc:135:14
[task 2018-07-10T19:44:27.248Z] 19:44:27     INFO -      #2 0x7f3bd0a815e1 in PlatformThread::Create(unsigned long, PlatformThread::Delegate*, unsigned long*) /builds/worker/workspace/build/src/ipc/chromium/src/base/platform_thread_posix.cc:146
[task 2018-07-10T19:44:27.248Z] 19:44:27     INFO -      #3 0x7f3bd0a8dbb3 in base::Thread::StartWithOptions(base::Thread::Options const&) /builds/worker/workspace/build/src/ipc/chromium/src/base/thread.cc:99:8
[task 2018-07-10T19:44:27.249Z] 19:44:27     INFO -      #4 0x7f3bd0a8f98e in Run /builds/worker/workspace/build/src/ipc/chromium/src/chrome/common/child_thread.cc:27:12
[task 2018-07-10T19:44:27.249Z] 19:44:27     INFO -      #5 0x7f3bd0a8f98e in ChildProcess::ChildProcess(ChildThread*) /builds/worker/workspace/build/src/ipc/chromium/src/chrome/common/child_process.cc:20
[task 2018-07-10T19:44:27.249Z] 19:44:27     INFO -      #6 0x7f3bd0b1f837 in mozilla::ipc::ProcessChild::ProcessChild(int) /builds/worker/workspace/build/src/ipc/glue/ProcessChild.cpp:24:5
[task 2018-07-10T19:44:27.251Z] 19:44:27     INFO -      #7 0x7f3bdbaadcbe in ContentProcess /builds/worker/workspace/build/src/obj-firefox/dist/include/mozilla/dom/ContentProcess.h:31:7
[task 2018-07-10T19:44:27.252Z] 19:44:27     INFO -      #8 0x7f3bdbaadcbe in XRE_InitChildProcess(int, char**, XREChildData const*) /builds/worker/workspace/build/src/toolkit/xre/nsEmbedFunctions.cpp:692
[task 2018-07-10T19:44:27.261Z] 19:44:27     INFO -      #9 0x4f1cf4 in content_process_main /builds/worker/workspace/build/src/browser/app/../../ipc/contentproc/plugin-container.cpp:50:30
[task 2018-07-10T19:44:27.262Z] 19:44:27     INFO -      #10 0x4f1cf4 in main /builds/worker/workspace/build/src/browser/app/nsBrowserApp.cpp:287
[task 2018-07-10T19:44:27.262Z] 19:44:27     INFO -      #11 0x7f3befac782f in __libc_start_main /build/glibc-Cl5G7W/glibc-2.23/csu/../csu/libc-start.c:291
[task 2018-07-10T19:44:27.263Z] 19:44:27     INFO -  ==2005==ABORTING

Comment 1

[Jed Davis [:jld] ⟨⏰|UTC-8⟩ ⟦he/him⟧]

This is `MOZ_CRASH("Aborting on channel error.");` and shouldn't that have wound up in the log somewhere?

I *think* this stack means that the parent process unexpectedly exited (or otherwise closed the PContent channel without negotiating shutdown normally), but I don't see any clues about why (and I might be giving the shutdown process too much credit for assuming it won't crash under normal circumstances).

Comment 3

[Intermittent Failures Robot]

2 failures in 623 pushes (0.003 failures/push) were associated with this bug in the last 7 days.    

Repository breakdown:
* mozilla-inbound: 2

Platform breakdown:
* linux64: 2

For more details, see:
https://treeherder.mozilla.org/intermittent-failures.html#/bugdetails?bug=1474725&startday=2018-07-09&endday=2018-07-15&tree=trunk

Comment 4

[Intermittent Failures Robot]

6 failures in 653 pushes (0.009 failures/push) were associated with this bug in the last 7 days.    

Repository breakdown:
* autoland: 6

Platform breakdown:
* linux64: 6

For more details, see:
https://treeherder.mozilla.org/intermittent-failures.html#/bugdetails?bug=1474725&startday=2018-07-16&endday=2018-07-22&tree=trunk

Comment 5

[Firefox Bug Husbandry Bot]

https://wiki.mozilla.org/Bug_Triage#Intermittent_Test_Failure_Cleanup