Closed
Bug 1490555
Opened 6 years ago
Closed 6 years ago
Intermittent GECKO(2396) | ==2396==ERROR: AddressSanitizer: heap-use-after-free on address 0x12bf1969b428 at pc 0x7ffa0ebc7f5d bp 0x00cedc7fd660 sp 0x00cedc7fd6a8
Categories
(Core :: Graphics, defect, P5)
Core
Graphics
Tracking
()
RESOLVED
DUPLICATE
of bug 1475594
People
(Reporter: intermittent-bug-filer, Unassigned)
Details
(Keywords: intermittent-failure)
Filed by: btara [at] mozilla.com https://treeherder.mozilla.org/logviewer.html#?job_id=198761215&repo=mozilla-central https://queue.taskcluster.net/v1/task/Mj_K5gZcQmuhZR5G3RN9AA/runs/0/artifacts/public/logs/live_backing.log 23:35:20 INFO - TEST-START | toolkit/mozapps/extensions/test/xpinstall/browser_amosigned_trigger_iframe.js 23:35:20 INFO - GECKO(2396) | Sending InstallTriggered 23:35:20 INFO - GECKO(2396) | 1536708920947 addons.xpi DEBUG Download started for http://example.com/browser/toolkit/mozapps/extensions/test/xpinstall/amosigned.xpi to file C:\Users\task_1536707542\AppData\Local\Temp\tmp-oln.xpi 23:35:20 INFO - GECKO(2396) | 1536708920951 addons.xpi DEBUG Download of http://example.com/browser/toolkit/mozapps/extensions/test/xpinstall/amosigned.xpi completed. 23:35:21 INFO - GECKO(2396) | 1536708920993 addons.repository DEBUG cacheAddons: enabled false IDs ["amosigned-xpi@tests.mozilla.org"] 23:35:21 INFO - GECKO(2396) | 1536708921084 addons.xpi DEBUG Starting install of amosigned-xpi@tests.mozilla.org from http://example.com/browser/toolkit/mozapps/extensions/test/xpinstall/amosigned.xpi 23:35:21 INFO - GECKO(2396) | _cairo_win32_surface_set_clip_region: The handle is invalid. 23:35:21 INFO - GECKO(2396) | ================================================================= 23:35:21 ERROR - GECKO(2396) | ==2396==ERROR: AddressSanitizer: heap-use-after-free on address 0x12bf1969b428 at pc 0x7ffa0ebc7f5d bp 0x00cedc7fd660 sp 0x00cedc7fd6a8 23:35:21 INFO - GECKO(2396) | WRITE of size 8 at 0x12bf1969b428 thread T54 23:35:21 INFO - GECKO(2396) | 1536708921106 addons.xpi DEBUG Addon amosigned-xpi@tests.mozilla.org will be installed as a packed xpi 23:35:21 INFO - GECKO(2396) | 1536708921112 addons.xpi DEBUG Calling bootstrap method shutdown on amosigned-xpi@tests.mozilla.org version 2.1 23:35:21 INFO - GECKO(2396) | #0 0x7ffa0ebc7f5c in _cairo_gstate_fini z:\build\build\src\gfx\cairo\cairo\src\cairo-gstate.c:218 23:35:21 INFO - GECKO(2396) | #1 0x7ffa0ebc89a1 in _cairo_gstate_restore z:\build\build\src\gfx\cairo\cairo\src\cairo-gstate.c:290 23:35:21 INFO - GECKO(2396) | #2 0x7ffa0ec799ae in _moz_cairo_destroy z:\build\build\src\gfx\cairo\cairo\src\cairo.c:457 23:35:21 INFO - GECKO(2396) | #3 0x7ffa052241b5 in mozilla::gfx::DrawTargetCairo::~DrawTargetCairo(void) z:\build\build\src\gfx\2d\DrawTargetCairo.cpp:617 23:35:21 INFO - GECKO(2396) | #4 0x7ffa052953df in mozilla::gfx::DrawTargetCairo::`scalar deleting destructor'(unsigned int) z:\build\build\src\gfx\2d\DrawTargetCairo.cpp:616 23:35:21 INFO - GECKO(2396) | #5 0x7ffa0599c0f1 in mozilla::layers::BasicCompositor::TryToEndRemoteDrawing(bool) z:\build\build\src\gfx\layers\basic\BasicCompositor.cpp:1060 23:35:21 INFO - GECKO(2396) | #6 0x7ffa059ae8bc in mozilla::layers::BasicCompositor::EndFrame(void) z:\build\build\src\gfx\layers\basic\BasicCompositor.cpp:1015 23:35:21 INFO - GECKO(2396) | #7 0x7ffa05afefca in mozilla::layers::LayerManagerComposite::Render(class mozilla::gfx::IntRegionTyped<struct mozilla::gfx::UnknownUnits> const &,class mozilla::gfx::IntRegionTyped<struct mozilla::gfx::UnknownUnits> const &) z:\build\build\src\gfx\layers\composite\LayerManagerComposite.cpp:1005 23:35:21 INFO - GECKO(2396) | #8 0x7ffa05afa868 in mozilla::layers::LayerManagerComposite::UpdateAndRender(void) z:\build\build\src\gfx\layers\composite\LayerManagerComposite.cpp:544 23:35:21 INFO - GECKO(2396) | #9 0x7ffa05af89bc in mozilla::layers::LayerManagerComposite::EndTransaction(class mozilla::TimeStamp const &,enum mozilla::layers::LayerManager::EndTransactionFlags) z:\build\build\src\gfx\layers\composite\LayerManagerComposite.cpp:465 23:35:21 INFO - GECKO(2396) | #10 0x7ffa05baea7a in mozilla::layers::CompositorBridgeParent::CompositeToTarget(class mozilla::gfx::DrawTarget *,struct mozilla::gfx::IntRectTyped<struct mozilla::gfx::UnknownUnits> const *) z:\build\build\src\gfx\layers\ipc\CompositorBridgeParent.cpp:1077 23:35:21 INFO - GECKO(2396) | #11 0x7ffa05bcbe39 in mozilla::layers::CompositorVsyncScheduler::Composite(class mozilla::TimeStamp) z:\build\build\src\gfx\layers\ipc\CompositorVsyncScheduler.cpp:245 23:35:21 INFO - GECKO(2396) | #12 0x7ffa05c02391 in mozilla::detail::RunnableMethodImpl<class mozilla::layers::CompositorVsyncScheduler *,void ( mozilla::layers::CompositorVsyncScheduler::*)(class mozilla::TimeStamp),1,1,class mozilla::TimeStamp>::Run(void) z:\build\build\src\obj-firefox\dist\include\nsThreadUtils.h:1229 23:35:21 INFO - GECKO(2396) | #13 0x7ffa03c9b8f3 in ?DeferOrRunPendingTask@MessageLoop@@IEAA_N$$QEAUPendingTask@1@@Z z:\build\build\src\ipc\chromium\src\base\message_loop.cc:459 23:35:21 INFO - GECKO(2396) | #14 0x7ffa03c9d0de in MessageLoop::DoWork(void) z:\build\build\src\ipc\chromium\src\base\message_loop.cc:534 23:35:21 INFO - GECKO(2396) | #15 0x7ffa03c6d702 in base::MessagePumpForUI::DoRunLoop(void) z:\build\build\src\ipc\chromium\src\base\message_pump_win.cc:210 23:35:21 INFO - GECKO(2396) | #16 0x7ffa03c6fb59 in base::MessagePumpWin::Run(class base::MessagePump::Delegate *) z:\build\build\src\ipc\chromium\src\base\message_pump_win.h:80 23:35:21 INFO - GECKO(2396) | #17 0x7ffa03c9a67e in MessageLoop::RunHandler(void) z:\build\build\src\ipc\chromium\src\base\message_loop.cc:318 23:35:21 INFO - GECKO(2396) | #18 0x7ffa03caaec5 in base::Thread::ThreadMain(void) z:\build\build\src\ipc\chromium\src\base\thread.cc:181 23:35:21 INFO - GECKO(2396) | #19 0x7ffa03c7138a in `anonymous namespace'::ThreadFunc z:\build\build\src\ipc\chromium\src\base\platform_thread_win.cc:34 23:35:21 INFO - GECKO(2396) | #20 0x7ffa2be3e4c8 in __asan::AsanThread::ThreadStart(unsigned __int64,struct __sanitizer::atomic_uintptr_t *) Z:\task_1536324217\build\src\build\build-clang\build-clang\src\llvm\projects\compiler-rt\lib\asan\asan_thread.cc:262 23:35:21 INFO - GECKO(2396) | #21 0x7ffa43012773 (C:\Windows\System32\KERNEL32.DLL+0x180012773) 23:35:21 INFO - GECKO(2396) | #22 0x7ffa38fa75c3 in patched_BaseThreadInitThunk z:\build\build\src\mozglue\build\WindowsDllBlocklist.cpp:662 23:35:21 INFO - GECKO(2396) | #23 0x7ffa44ef0d60 (C:\Windows\SYSTEM32\ntdll.dll+0x180070d60) 23:35:21 INFO - GECKO(2396) | 0x12bf1969b428 is located 680 bytes inside of 1424-byte region [0x12bf1969b180,0x12bf1969b710) 23:35:21 INFO - GECKO(2396) | freed by thread T0 here: 23:35:21 INFO - GECKO(2396) | #0 0x7ffa2be33fe0 in free Z:\task_1536324217\build\src\build\build-clang\build-clang\src\llvm\projects\compiler-rt\lib\asan\asan_malloc_win.cc:44 23:35:21 INFO - GECKO(2396) | #1 0x7ffa0ec79c03 in _moz_cairo_destroy z:\build\build\src\gfx\cairo\cairo\src\cairo.c:485 23:35:21 INFO - GECKO(2396) | #2 0x7ffa052241b5 in mozilla::gfx::DrawTargetCairo::~DrawTargetCairo(void) z:\build\build\src\gfx\2d\DrawTargetCairo.cpp:617 23:35:21 INFO - GECKO(2396) | #3 0x7ffa052953df in mozilla::gfx::DrawTargetCairo::`scalar deleting destructor'(unsigned int) z:\build\build\src\gfx\2d\DrawTargetCairo.cpp:616 23:35:21 INFO - GECKO(2396) | #4 0x7ffa0cb77643 in mozilla::widget::WinCompositorWidget::ClearTransparentWindow(void) z:\build\build\src\widget\windows\WinCompositorWidget.cpp:312 23:35:21 INFO - GECKO(2396) | #5 0x7ffa0cccfefd in nsWindow::Show(bool) z:\build\build\src\widget\windows\nsWindow.cpp:1638 23:35:21 INFO - GECKO(2396) | #6 0x7ffa0c9deb01 in nsView::DoResetWidgetBounds(bool,bool) z:\build\build\src\view\nsView.cpp:342 23:35:21 INFO - GECKO(2396) | #7 0x7ffa0c9ecac7 in nsViewManager::ProcessPendingUpdatesForView(class nsView *,bool) z:\build\build\src\view\nsViewManager.cpp:399 23:35:21 INFO - GECKO(2396) | #8 0x7ffa0c9f5586 in nsViewManager::UpdateWidgetGeometry(void) z:\build\build\src\view\nsViewManager.cpp:1117 23:35:21 INFO - GECKO(2396) | #9 0x7ffa0d2b8e42 in mozilla::PresShell::DoFlushPendingNotifications(struct mozilla::ChangesToFlush) z:\build\build\src\layout\base\PresShell.cpp:4364 23:35:21 INFO - GECKO(2396) | #10 0x7ffa0d234d5d in nsRefreshDriver::Tick(class mozilla::TimeStamp) z:\build\build\src\layout\base\nsRefreshDriver.cpp:1930 23:35:21 INFO - GECKO(2396) | #11 0x7ffa0d247bbd in mozilla::RefreshDriverTimer::TickRefreshDrivers(class mozilla::TimeStamp,class nsTArray<class RefPtr<class nsRefreshDriver> > &) z:\build\build\src\layout\base\nsRefreshDriver.cpp:300 23:35:21 INFO - GECKO(2396) | #12 0x7ffa0d24784e in mozilla::RefreshDriverTimer::Tick(class mozilla::TimeStamp) z:\build\build\src\layout\base\nsRefreshDriver.cpp:318 23:35:21 INFO - GECKO(2396) | #13 0x7ffa0d24ac8a in mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver::TickRefreshDriver(class mozilla::TimeStamp) z:\build\build\src\layout\base\nsRefreshDriver.cpp:672 23:35:21 INFO - GECKO(2396) | #14 0x7ffa0d24b24b in mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver::ParentProcessVsyncNotifier::Run(void) z:\build\build\src\layout\base\nsRefreshDriver.cpp:513 23:35:21 INFO - GECKO(2396) | #15 0x7ffa02cae564 in nsThread::ProcessNextEvent(bool,bool *) z:\build\build\src\xpcom\threads\nsThread.cpp:1161 23:35:21 INFO - GECKO(2396) | #16 0x7ffa02cb6f4e in NS_ProcessNextEvent(class nsIThread *,bool) z:\build\build\src\xpcom\threads\nsThreadUtils.cpp:519 23:35:21 INFO - GECKO(2396) | #17 0x7ffa03d38f49 in mozilla::ipc::MessagePump::Run(class base::MessagePump::Delegate *) z:\build\build\src\ipc\glue\MessagePump.cpp:97 23:35:21 INFO - GECKO(2396) | #18 0x7ffa03c9a67e in MessageLoop::RunHandler(void) z:\build\build\src\ipc\chromium\src\base\message_loop.cc:318 23:35:21 INFO - GECKO(2396) | #19 0x7ffa03c9a406 in MessageLoop::Run(void) z:\build\build\src\ipc\chromium\src\base\message_loop.cc:298 23:35:21 INFO - GECKO(2396) | #20 0x7ffa0cad024a in nsBaseAppShell::Run(void) z:\build\build\src\widget\nsBaseAppShell.cpp:158 23:35:21 INFO - GECKO(2396) | #21 0x7ffa0cc52b17 in nsAppShell::Run(void) z:\build\build\src\widget\windows\nsAppShell.cpp:420 23:35:21 INFO - GECKO(2396) | #22 0x7ffa10b61bbe in nsAppStartup::Run(void) z:\build\build\src\toolkit\components\startup\nsAppStartup.cpp:290 23:35:21 INFO - GECKO(2396) | #23 0x7ffa10e04158 in XREMain::XRE_mainRun(void) z:\build\build\src\toolkit\xre\nsAppRunner.cpp:4826 23:35:21 INFO - GECKO(2396) | #24 0x7ffa10e08c74 in XREMain::XRE_main(int,char * * const,struct mozilla::BootstrapConfig const &) z:\build\build\src\toolkit\xre\nsAppRunner.cpp:4971 23:35:21 INFO - GECKO(2396) | #25 0x7ffa10e0b090 in XRE_main(int,char * * const,struct mozilla::BootstrapConfig const &) z:\build\build\src\toolkit\xre\nsAppRunner.cpp:5063 23:35:21 INFO - GECKO(2396) | #26 0x7ff708bf1d5d (Z:\task_1536707542\build\application\firefox\firefox.exe+0x140001d5d) 23:35:21 INFO - GECKO(2396) | #27 0x7ff708bf14a1 (Z:\task_1536707542\build\application\firefox\firefox.exe+0x1400014a1) 23:35:21 INFO - GECKO(2396) | #28 0x7ff708cecec7 (Z:\task_1536707542\build\application\firefox\firefox.exe+0x1400fcec7) 23:35:21 INFO - GECKO(2396) | #29 0x7ffa43012773 (C:\Windows\System32\KERNEL32.DLL+0x180012773)
Updated•6 years ago
|
Component: Add-ons Manager → Graphics
Product: Toolkit → Core
Updated•6 years ago
|
Group: gfx-core-security
Status: NEW → RESOLVED
Closed: 6 years ago
Resolution: --- → DUPLICATE
Updated•2 years ago
|
Group: gfx-core-security
You need to log in
before you can comment on or make changes to this bug.
Description
•