Closed Bug 1490555 Opened 6 years ago Closed 6 years ago

Intermittent GECKO(2396) | ==2396==ERROR: AddressSanitizer: heap-use-after-free on address 0x12bf1969b428 at pc 0x7ffa0ebc7f5d bp 0x00cedc7fd660 sp 0x00cedc7fd6a8

Categories

(Core :: Graphics, defect, P5)

defect

Tracking

()

RESOLVED DUPLICATE of bug 1475594

People

(Reporter: intermittent-bug-filer, Unassigned)

Details

(Keywords: intermittent-failure)

Filed by: btara [at] mozilla.com

https://treeherder.mozilla.org/logviewer.html#?job_id=198761215&repo=mozilla-central

https://queue.taskcluster.net/v1/task/Mj_K5gZcQmuhZR5G3RN9AA/runs/0/artifacts/public/logs/live_backing.log

23:35:20     INFO - TEST-START | toolkit/mozapps/extensions/test/xpinstall/browser_amosigned_trigger_iframe.js
23:35:20     INFO - GECKO(2396) | Sending InstallTriggered
23:35:20     INFO - GECKO(2396) | 1536708920947	addons.xpi	DEBUG	Download started for http://example.com/browser/toolkit/mozapps/extensions/test/xpinstall/amosigned.xpi to file C:\Users\task_1536707542\AppData\Local\Temp\tmp-oln.xpi
23:35:20     INFO - GECKO(2396) | 1536708920951	addons.xpi	DEBUG	Download of http://example.com/browser/toolkit/mozapps/extensions/test/xpinstall/amosigned.xpi completed.
23:35:21     INFO - GECKO(2396) | 1536708920993	addons.repository	DEBUG	cacheAddons: enabled false IDs ["amosigned-xpi@tests.mozilla.org"]
23:35:21     INFO - GECKO(2396) | 1536708921084	addons.xpi	DEBUG	Starting install of amosigned-xpi@tests.mozilla.org from http://example.com/browser/toolkit/mozapps/extensions/test/xpinstall/amosigned.xpi
23:35:21     INFO - GECKO(2396) | _cairo_win32_surface_set_clip_region: The handle is invalid.
23:35:21     INFO - GECKO(2396) | =================================================================
23:35:21    ERROR - GECKO(2396) | ==2396==ERROR: AddressSanitizer: heap-use-after-free on address 0x12bf1969b428 at pc 0x7ffa0ebc7f5d bp 0x00cedc7fd660 sp 0x00cedc7fd6a8
23:35:21     INFO - GECKO(2396) | WRITE of size 8 at 0x12bf1969b428 thread T54
23:35:21     INFO - GECKO(2396) | 1536708921106	addons.xpi	DEBUG	Addon amosigned-xpi@tests.mozilla.org will be installed as a packed xpi
23:35:21     INFO - GECKO(2396) | 1536708921112	addons.xpi	DEBUG	Calling bootstrap method shutdown on amosigned-xpi@tests.mozilla.org version 2.1
23:35:21     INFO - GECKO(2396) |     #0 0x7ffa0ebc7f5c in _cairo_gstate_fini z:\build\build\src\gfx\cairo\cairo\src\cairo-gstate.c:218
23:35:21     INFO - GECKO(2396) |     #1 0x7ffa0ebc89a1 in _cairo_gstate_restore z:\build\build\src\gfx\cairo\cairo\src\cairo-gstate.c:290
23:35:21     INFO - GECKO(2396) |     #2 0x7ffa0ec799ae in _moz_cairo_destroy z:\build\build\src\gfx\cairo\cairo\src\cairo.c:457
23:35:21     INFO - GECKO(2396) |     #3 0x7ffa052241b5 in mozilla::gfx::DrawTargetCairo::~DrawTargetCairo(void) z:\build\build\src\gfx\2d\DrawTargetCairo.cpp:617
23:35:21     INFO - GECKO(2396) |     #4 0x7ffa052953df in mozilla::gfx::DrawTargetCairo::`scalar deleting destructor'(unsigned int) z:\build\build\src\gfx\2d\DrawTargetCairo.cpp:616
23:35:21     INFO - GECKO(2396) |     #5 0x7ffa0599c0f1 in mozilla::layers::BasicCompositor::TryToEndRemoteDrawing(bool) z:\build\build\src\gfx\layers\basic\BasicCompositor.cpp:1060
23:35:21     INFO - GECKO(2396) |     #6 0x7ffa059ae8bc in mozilla::layers::BasicCompositor::EndFrame(void) z:\build\build\src\gfx\layers\basic\BasicCompositor.cpp:1015
23:35:21     INFO - GECKO(2396) |     #7 0x7ffa05afefca in mozilla::layers::LayerManagerComposite::Render(class mozilla::gfx::IntRegionTyped<struct mozilla::gfx::UnknownUnits> const &,class mozilla::gfx::IntRegionTyped<struct mozilla::gfx::UnknownUnits> const &) z:\build\build\src\gfx\layers\composite\LayerManagerComposite.cpp:1005
23:35:21     INFO - GECKO(2396) |     #8 0x7ffa05afa868 in mozilla::layers::LayerManagerComposite::UpdateAndRender(void) z:\build\build\src\gfx\layers\composite\LayerManagerComposite.cpp:544
23:35:21     INFO - GECKO(2396) |     #9 0x7ffa05af89bc in mozilla::layers::LayerManagerComposite::EndTransaction(class mozilla::TimeStamp const &,enum mozilla::layers::LayerManager::EndTransactionFlags) z:\build\build\src\gfx\layers\composite\LayerManagerComposite.cpp:465
23:35:21     INFO - GECKO(2396) |     #10 0x7ffa05baea7a in mozilla::layers::CompositorBridgeParent::CompositeToTarget(class mozilla::gfx::DrawTarget *,struct mozilla::gfx::IntRectTyped<struct mozilla::gfx::UnknownUnits> const *) z:\build\build\src\gfx\layers\ipc\CompositorBridgeParent.cpp:1077
23:35:21     INFO - GECKO(2396) |     #11 0x7ffa05bcbe39 in mozilla::layers::CompositorVsyncScheduler::Composite(class mozilla::TimeStamp) z:\build\build\src\gfx\layers\ipc\CompositorVsyncScheduler.cpp:245
23:35:21     INFO - GECKO(2396) |     #12 0x7ffa05c02391 in mozilla::detail::RunnableMethodImpl<class mozilla::layers::CompositorVsyncScheduler *,void ( mozilla::layers::CompositorVsyncScheduler::*)(class mozilla::TimeStamp),1,1,class mozilla::TimeStamp>::Run(void) z:\build\build\src\obj-firefox\dist\include\nsThreadUtils.h:1229
23:35:21     INFO - GECKO(2396) |     #13 0x7ffa03c9b8f3 in ?DeferOrRunPendingTask@MessageLoop@@IEAA_N$$QEAUPendingTask@1@@Z z:\build\build\src\ipc\chromium\src\base\message_loop.cc:459
23:35:21     INFO - GECKO(2396) |     #14 0x7ffa03c9d0de in MessageLoop::DoWork(void) z:\build\build\src\ipc\chromium\src\base\message_loop.cc:534
23:35:21     INFO - GECKO(2396) |     #15 0x7ffa03c6d702 in base::MessagePumpForUI::DoRunLoop(void) z:\build\build\src\ipc\chromium\src\base\message_pump_win.cc:210
23:35:21     INFO - GECKO(2396) |     #16 0x7ffa03c6fb59 in base::MessagePumpWin::Run(class base::MessagePump::Delegate *) z:\build\build\src\ipc\chromium\src\base\message_pump_win.h:80
23:35:21     INFO - GECKO(2396) |     #17 0x7ffa03c9a67e in MessageLoop::RunHandler(void) z:\build\build\src\ipc\chromium\src\base\message_loop.cc:318
23:35:21     INFO - GECKO(2396) |     #18 0x7ffa03caaec5 in base::Thread::ThreadMain(void) z:\build\build\src\ipc\chromium\src\base\thread.cc:181
23:35:21     INFO - GECKO(2396) |     #19 0x7ffa03c7138a in `anonymous namespace'::ThreadFunc z:\build\build\src\ipc\chromium\src\base\platform_thread_win.cc:34
23:35:21     INFO - GECKO(2396) |     #20 0x7ffa2be3e4c8 in __asan::AsanThread::ThreadStart(unsigned __int64,struct __sanitizer::atomic_uintptr_t *) Z:\task_1536324217\build\src\build\build-clang\build-clang\src\llvm\projects\compiler-rt\lib\asan\asan_thread.cc:262
23:35:21     INFO - GECKO(2396) |     #21 0x7ffa43012773  (C:\Windows\System32\KERNEL32.DLL+0x180012773)
23:35:21     INFO - GECKO(2396) |     #22 0x7ffa38fa75c3 in patched_BaseThreadInitThunk z:\build\build\src\mozglue\build\WindowsDllBlocklist.cpp:662
23:35:21     INFO - GECKO(2396) |     #23 0x7ffa44ef0d60  (C:\Windows\SYSTEM32\ntdll.dll+0x180070d60)
23:35:21     INFO - GECKO(2396) | 0x12bf1969b428 is located 680 bytes inside of 1424-byte region [0x12bf1969b180,0x12bf1969b710)
23:35:21     INFO - GECKO(2396) | freed by thread T0 here:
23:35:21     INFO - GECKO(2396) |     #0 0x7ffa2be33fe0 in free Z:\task_1536324217\build\src\build\build-clang\build-clang\src\llvm\projects\compiler-rt\lib\asan\asan_malloc_win.cc:44
23:35:21     INFO - GECKO(2396) |     #1 0x7ffa0ec79c03 in _moz_cairo_destroy z:\build\build\src\gfx\cairo\cairo\src\cairo.c:485
23:35:21     INFO - GECKO(2396) |     #2 0x7ffa052241b5 in mozilla::gfx::DrawTargetCairo::~DrawTargetCairo(void) z:\build\build\src\gfx\2d\DrawTargetCairo.cpp:617
23:35:21     INFO - GECKO(2396) |     #3 0x7ffa052953df in mozilla::gfx::DrawTargetCairo::`scalar deleting destructor'(unsigned int) z:\build\build\src\gfx\2d\DrawTargetCairo.cpp:616
23:35:21     INFO - GECKO(2396) |     #4 0x7ffa0cb77643 in mozilla::widget::WinCompositorWidget::ClearTransparentWindow(void) z:\build\build\src\widget\windows\WinCompositorWidget.cpp:312
23:35:21     INFO - GECKO(2396) |     #5 0x7ffa0cccfefd in nsWindow::Show(bool) z:\build\build\src\widget\windows\nsWindow.cpp:1638
23:35:21     INFO - GECKO(2396) |     #6 0x7ffa0c9deb01 in nsView::DoResetWidgetBounds(bool,bool) z:\build\build\src\view\nsView.cpp:342
23:35:21     INFO - GECKO(2396) |     #7 0x7ffa0c9ecac7 in nsViewManager::ProcessPendingUpdatesForView(class nsView *,bool) z:\build\build\src\view\nsViewManager.cpp:399
23:35:21     INFO - GECKO(2396) |     #8 0x7ffa0c9f5586 in nsViewManager::UpdateWidgetGeometry(void) z:\build\build\src\view\nsViewManager.cpp:1117
23:35:21     INFO - GECKO(2396) |     #9 0x7ffa0d2b8e42 in mozilla::PresShell::DoFlushPendingNotifications(struct mozilla::ChangesToFlush) z:\build\build\src\layout\base\PresShell.cpp:4364
23:35:21     INFO - GECKO(2396) |     #10 0x7ffa0d234d5d in nsRefreshDriver::Tick(class mozilla::TimeStamp) z:\build\build\src\layout\base\nsRefreshDriver.cpp:1930
23:35:21     INFO - GECKO(2396) |     #11 0x7ffa0d247bbd in mozilla::RefreshDriverTimer::TickRefreshDrivers(class mozilla::TimeStamp,class nsTArray<class RefPtr<class nsRefreshDriver> > &) z:\build\build\src\layout\base\nsRefreshDriver.cpp:300
23:35:21     INFO - GECKO(2396) |     #12 0x7ffa0d24784e in mozilla::RefreshDriverTimer::Tick(class mozilla::TimeStamp) z:\build\build\src\layout\base\nsRefreshDriver.cpp:318
23:35:21     INFO - GECKO(2396) |     #13 0x7ffa0d24ac8a in mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver::TickRefreshDriver(class mozilla::TimeStamp) z:\build\build\src\layout\base\nsRefreshDriver.cpp:672
23:35:21     INFO - GECKO(2396) |     #14 0x7ffa0d24b24b in mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver::ParentProcessVsyncNotifier::Run(void) z:\build\build\src\layout\base\nsRefreshDriver.cpp:513
23:35:21     INFO - GECKO(2396) |     #15 0x7ffa02cae564 in nsThread::ProcessNextEvent(bool,bool *) z:\build\build\src\xpcom\threads\nsThread.cpp:1161
23:35:21     INFO - GECKO(2396) |     #16 0x7ffa02cb6f4e in NS_ProcessNextEvent(class nsIThread *,bool) z:\build\build\src\xpcom\threads\nsThreadUtils.cpp:519
23:35:21     INFO - GECKO(2396) |     #17 0x7ffa03d38f49 in mozilla::ipc::MessagePump::Run(class base::MessagePump::Delegate *) z:\build\build\src\ipc\glue\MessagePump.cpp:97
23:35:21     INFO - GECKO(2396) |     #18 0x7ffa03c9a67e in MessageLoop::RunHandler(void) z:\build\build\src\ipc\chromium\src\base\message_loop.cc:318
23:35:21     INFO - GECKO(2396) |     #19 0x7ffa03c9a406 in MessageLoop::Run(void) z:\build\build\src\ipc\chromium\src\base\message_loop.cc:298
23:35:21     INFO - GECKO(2396) |     #20 0x7ffa0cad024a in nsBaseAppShell::Run(void) z:\build\build\src\widget\nsBaseAppShell.cpp:158
23:35:21     INFO - GECKO(2396) |     #21 0x7ffa0cc52b17 in nsAppShell::Run(void) z:\build\build\src\widget\windows\nsAppShell.cpp:420
23:35:21     INFO - GECKO(2396) |     #22 0x7ffa10b61bbe in nsAppStartup::Run(void) z:\build\build\src\toolkit\components\startup\nsAppStartup.cpp:290
23:35:21     INFO - GECKO(2396) |     #23 0x7ffa10e04158 in XREMain::XRE_mainRun(void) z:\build\build\src\toolkit\xre\nsAppRunner.cpp:4826
23:35:21     INFO - GECKO(2396) |     #24 0x7ffa10e08c74 in XREMain::XRE_main(int,char * * const,struct mozilla::BootstrapConfig const &) z:\build\build\src\toolkit\xre\nsAppRunner.cpp:4971
23:35:21     INFO - GECKO(2396) |     #25 0x7ffa10e0b090 in XRE_main(int,char * * const,struct mozilla::BootstrapConfig const &) z:\build\build\src\toolkit\xre\nsAppRunner.cpp:5063
23:35:21     INFO - GECKO(2396) |     #26 0x7ff708bf1d5d  (Z:\task_1536707542\build\application\firefox\firefox.exe+0x140001d5d)
23:35:21     INFO - GECKO(2396) |     #27 0x7ff708bf14a1  (Z:\task_1536707542\build\application\firefox\firefox.exe+0x1400014a1)
23:35:21     INFO - GECKO(2396) |     #28 0x7ff708cecec7  (Z:\task_1536707542\build\application\firefox\firefox.exe+0x1400fcec7)
23:35:21     INFO - GECKO(2396) |     #29 0x7ffa43012773  (C:\Windows\System32\KERNEL32.DLL+0x180012773)
Component: Add-ons Manager → Graphics
Product: Toolkit → Core
Group: gfx-core-security
Status: NEW → RESOLVED
Closed: 6 years ago
Resolution: --- → DUPLICATE
Group: gfx-core-security
You need to log in before you can comment on or make changes to this bug.