Closed Bug 1493512 Opened 6 years ago Closed 6 years ago

Intermittent SUMMARY: AddressSanitizer: heap-use-after-free z:\build\build\src\gfx\cairo\cairo\src\cairo-gstate.c:218 in _cairo_gstate_fini

Categories

(Core :: Graphics, defect)

Product:
Core
Component:
Graphics
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED DUPLICATE of bug 1475594

People

(Reporter: nataliaCs, Unassigned)

Details

(Keywords: intermittent-failure)

Central as Beta simulation: https://treeherder.mozilla.org/#/jobs?repo=try&resultStatus=testfailed,busted,exception,usercancel,runnable&revision=baa64b256cdf6fde6341d7528de140569e19a2eb&group_state=expanded&selectedJob=201058851 Failure log: https://treeherder.mozilla.org/logviewer.html#?job_id=201058851&repo=try&lineNumber=1341 Task details: https://tools.taskcluster.net/groups/UR7K9CMISliJJJWY2Uve4w/tasks/RxDfDhulSQGmJJups2gqNA/details 11:22:44 INFO - TEST-START | devtools/client/inspector/rules/test/browser_rules_cubicbezier-commit-on-ENTER.js 11:22:47 INFO - GECKO(932) | ================================================================= 11:22:47 ERROR - GECKO(932) | ==932==ERROR: AddressSanitizer: heap-use-after-free on address 0x1170a56e6090 at pc 0x7ff980269e7d bp 0x002f5d22d3d0 sp 0x002f5d22d418 11:22:47 INFO - GECKO(932) | WRITE of size 8 at 0x1170a56e6090 thread T58 11:22:47 INFO - GECKO(932) | #0 0x7ff980269e7c in _cairo_gstate_fini z:\build\build\src\gfx\cairo\cairo\src\cairo-gstate.c:218 11:22:47 INFO - GECKO(932) | #1 0x7ff98026a8c1 in _cairo_gstate_restore z:\build\build\src\gfx\cairo\cairo\src\cairo-gstate.c:290 11:22:47 INFO - GECKO(932) | #2 0x7ff98031bdd5 in _moz_cairo_restore z:\build\build\src\gfx\cairo\cairo\src\cairo.c:608 11:22:47 INFO - GECKO(932) | #3 0x7ff976b9471e in mozilla::gfx::`anonymous namespace'::AutoPrepareForDrawing::~AutoPrepareForDrawing z:\build\build\src\gfx\2d\DrawTargetCairo.cpp:85 11:22:47 INFO - GECKO(932) | #4 0x7ff976b9a212 in mozilla::gfx::DrawTargetCairo::CopySurface(class mozilla::gfx::SourceSurface *,struct mozilla::gfx::IntRectTyped<struct mozilla::gfx::UnknownUnits> const &,struct mozilla::gfx::IntPointTyped<struct mozilla::gfx::UnknownUnits> const &) z:\build\build\src\gfx\2d\DrawTargetCairo.cpp:1153 11:22:47 INFO - GECKO(932) | #5 0x7ff9772ff94e in mozilla::layers::BasicCompositor::TryToEndRemoteDrawing(bool) z:\build\build\src\gfx\layers\basic\BasicCompositor.cpp:1050 11:22:47 INFO - GECKO(932) | #6 0x7ff97731244c in mozilla::layers::BasicCompositor::EndFrame(void) z:\build\build\src\gfx\layers\basic\BasicCompositor.cpp:1015 11:22:47 INFO - GECKO(932) | #7 0x7ff97745df42 in mozilla::layers::LayerManagerComposite::Render(class mozilla::gfx::IntRegionTyped<struct mozilla::gfx::UnknownUnits> const &,class mozilla::gfx::IntRegionTyped<struct mozilla::gfx::UnknownUnits> const &) z:\build\build\src\gfx\layers\composite\LayerManagerComposite.cpp:1005 11:22:47 INFO - GECKO(932) | #8 0x7ff977459838 in mozilla::layers::LayerManagerComposite::UpdateAndRender(void) z:\build\build\src\gfx\layers\composite\LayerManagerComposite.cpp:544 11:22:47 INFO - GECKO(932) | #9 0x7ff97745798c in mozilla::layers::LayerManagerComposite::EndTransaction(class mozilla::TimeStamp const &,enum mozilla::layers::LayerManager::EndTransactionFlags) z:\build\build\src\gfx\layers\composite\LayerManagerComposite.cpp:465 11:22:47 INFO - GECKO(932) | #10 0x7ff97750ebfa in mozilla::layers::CompositorBridgeParent::CompositeToTarget(class mozilla::gfx::DrawTarget *,struct mozilla::gfx::IntRectTyped<struct mozilla::gfx::UnknownUnits> const *) z:\build\build\src\gfx\layers\ipc\CompositorBridgeParent.cpp:1086 11:22:47 INFO - GECKO(932) | #11 0x7ff97752c7a9 in mozilla::layers::CompositorVsyncScheduler::Composite(class mozilla::TimeStamp) z:\build\build\src\gfx\layers\ipc\CompositorVsyncScheduler.cpp:245 11:22:47 INFO - GECKO(932) | #12 0x7ff977563e41 in mozilla::detail::RunnableMethodImpl<class mozilla::layers::CompositorVsyncScheduler *,void ( mozilla::layers::CompositorVsyncScheduler::*)(class mozilla::TimeStamp),1,1,class mozilla::TimeStamp>::Run(void) z:\build\build\src\obj-firefox\dist\include\nsThreadUtils.h:1229 11:22:47 INFO - GECKO(932) | #13 0x7ff975685173 in ?DeferOrRunPendingTask@MessageLoop@@IEAA_N$$QEAUPendingTask@1@@Z z:\build\build\src\ipc\chromium\src\base\message_loop.cc:459 11:22:47 INFO - GECKO(932) | #14 0x7ff975686b4e in MessageLoop::DoWork(void) z:\build\build\src\ipc\chromium\src\base\message_loop.cc:534 11:22:47 INFO - GECKO(932) | #15 0x7ff975657f32 in base::MessagePumpForUI::DoRunLoop(void) z:\build\build\src\ipc\chromium\src\base\message_pump_win.cc:210 11:22:47 INFO - GECKO(932) | #16 0x7ff97565a389 in base::MessagePumpWin::Run(class base::MessagePump::Delegate *) z:\build\build\src\ipc\chromium\src\base\message_pump_win.h:80 11:22:47 INFO - GECKO(932) | #17 0x7ff975683efe in MessageLoop::RunHandler(void) z:\build\build\src\ipc\chromium\src\base\message_loop.cc:318 11:22:47 INFO - GECKO(932) | #18 0x7ff9756945e5 in base::Thread::ThreadMain(void) z:\build\build\src\ipc\chromium\src\base\thread.cc:181 11:22:47 INFO - GECKO(932) | #19 0x7ff97565bb2a in `anonymous namespace'::ThreadFunc z:\build\build\src\ipc\chromium\src\base\platform_thread_win.cc:34 11:22:47 INFO - GECKO(932) | #20 0x7ff98ba8e4b8 in __asan::AsanThread::ThreadStart(unsigned __int64,struct __sanitizer::atomic_uintptr_t *) Z:\task_1537535524\build\src\build\build-clang\build-clang\src\llvm\projects\compiler-rt\lib\asan\asan_thread.cc:262 11:22:47 INFO - GECKO(932) | #21 0x7ff9b3b22773 (C:\Windows\System32\KERNEL32.DLL+0x180012773) 11:22:47 INFO - GECKO(932) | #22 0x7ff99e2a74f9 in patched_BaseThreadInitThunk z:\build\build\src\mozglue\build\WindowsDllBlocklist.cpp:708 11:22:47 INFO - GECKO(932) | #23 0x7ff9b6620d60 (C:\Windows\SYSTEM32\ntdll.dll+0x180070d60) 11:22:47 INFO - GECKO(932) | 0x1170a56e6090 is located 272 bytes inside of 1424-byte region [0x1170a56e5f80,0x1170a56e6510) 11:22:47 INFO - GECKO(932) | freed by thread T0 here: 11:22:47 INFO - GECKO(932) | #0 0x7ff98ba83fd0 in free Z:\task_1537535524\build\src\build\build-clang\build-clang\src\llvm\projects\compiler-rt\lib\asan\asan_malloc_win.cc:44 11:22:47 INFO - GECKO(932) | #1 0x7ff98031bb23 in _moz_cairo_destroy z:\build\build\src\gfx\cairo\cairo\src\cairo.c:485 11:22:47 INFO - GECKO(932) | #2 0x7ff976b90c75 in mozilla::gfx::DrawTargetCairo::~DrawTargetCairo(void) z:\build\build\src\gfx\2d\DrawTargetCairo.cpp:617 11:22:47 INFO - GECKO(932) | #3 0x7ff976c027ff in mozilla::gfx::DrawTargetCairo::`scalar deleting destructor'(unsigned int) z:\build\build\src\gfx\2d\DrawTargetCairo.cpp:616 11:22:47 INFO - GECKO(932) | #4 0x7ff97e200b73 in mozilla::widget::WinCompositorWidget::ClearTransparentWindow(void) z:\build\build\src\widget\windows\WinCompositorWidget.cpp:312 11:22:47 INFO - GECKO(932) | #5 0x7ff97e35895b in nsWindow::Show(bool) z:\build\build\src\widget\windows\nsWindow.cpp:1648 11:22:47 INFO - GECKO(932) | #6 0x7ff97e06bd61 in nsView::DoResetWidgetBounds(bool,bool) z:\build\build\src\view\nsView.cpp:342 11:22:47 INFO - GECKO(932) | #7 0x7ff97e079667 in nsViewManager::ProcessPendingUpdatesForView(class nsView *,bool) z:\build\build\src\view\nsViewManager.cpp:399 11:22:47 INFO - GECKO(932) | #8 0x7ff97e0808f7 in nsViewManager::ProcessPendingUpdates(void) z:\build\build\src\view\nsViewManager.cpp:1102 11:22:47 INFO - GECKO(932) | #9 0x7ff97e8bd0ec in nsRefreshDriver::Tick(class mozilla::TimeStamp) z:\build\build\src\layout\base\nsRefreshDriver.cpp:2046 11:22:47 INFO - GECKO(932) | #10 0x7ff97e8cc92a in mozilla::RefreshDriverTimer::TickRefreshDrivers(class mozilla::TimeStamp,class nsTArray<class RefPtr<class nsRefreshDriver> > &) z:\build\build\src\layout\base\nsRefreshDriver.cpp:300 11:22:47 INFO - GECKO(932) | #11 0x7ff97e8cc3ae in mozilla::RefreshDriverTimer::Tick(class mozilla::TimeStamp) z:\build\build\src\layout\base\nsRefreshDriver.cpp:318 11:22:47 INFO - GECKO(932) | #12 0x7ff97e8cfe4e in mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver::TickRefreshDriver(class mozilla::TimeStamp) z:\build\build\src\layout\base\nsRefreshDriver.cpp:672 11:22:47 INFO - GECKO(932) | #13 0x7ff97e8d03fb in mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver::ParentProcessVsyncNotifier::Run(void) z:\build\build\src\layout\base\nsRefreshDriver.cpp:513 11:22:47 INFO - GECKO(932) | #14 0x7ff9746cf8d8 in nsThread::ProcessNextEvent(bool,bool *) z:\build\build\src\xpcom\threads\nsThread.cpp:1166 11:22:47 INFO - GECKO(932) | #15 0x7ff9746d79ce in NS_ProcessNextEvent(class nsIThread *,bool) z:\build\build\src\xpcom\threads\nsThreadUtils.cpp:519 11:22:47 INFO - GECKO(932) | #16 0x7ff97571c769 in mozilla::ipc::MessagePump::Run(class base::MessagePump::Delegate *) z:\build\build\src\ipc\glue\MessagePump.cpp:97 11:22:47 INFO - GECKO(932) | #17 0x7ff975683efe in MessageLoop::RunHandler(void) z:\build\build\src\ipc\chromium\src\base\message_loop.cc:318 11:22:47 INFO - GECKO(932) | #18 0x7ff975683c86 in MessageLoop::Run(void) z:\build\build\src\ipc\chromium\src\base\message_loop.cc:298 11:22:47 INFO - GECKO(932) | #19 0x7ff97e159e2a in nsBaseAppShell::Run(void) z:\build\build\src\widget\nsBaseAppShell.cpp:158 11:22:47 INFO - GECKO(932) | #20 0x7ff97e2db8a9 in nsAppShell::Run(void) z:\build\build\src\widget\windows\nsAppShell.cpp:420 11:22:47 INFO - GECKO(932) | #21 0x7ff98221472e in nsAppStartup::Run(void) z:\build\build\src\toolkit\components\startup\nsAppStartup.cpp:290 11:22:47 INFO - GECKO(932) | #22 0x7ff9824b3327 in XREMain::XRE_mainRun(void) z:\build\build\src\toolkit\xre\nsAppRunner.cpp:4823 11:22:47 INFO - GECKO(932) | #23 0x7ff9824b7c67 in XREMain::XRE_main(int,char * * const,struct mozilla::BootstrapConfig const &) z:\build\build\src\toolkit\xre\nsAppRunner.cpp:4968 11:22:47 INFO - GECKO(932) | #24 0x7ff9824ba080 in XRE_main(int,char * * const,struct mozilla::BootstrapConfig const &) z:\build\build\src\toolkit\xre\nsAppRunner.cpp:5060 11:22:47 INFO - GECKO(932) | #25 0x7ff6d61f1d5d (Z:\task_1537700112\build\application\firefox\firefox.exe+0x140001d5d) 11:22:47 INFO - GECKO(932) | #26 0x7ff6d61f14a1 (Z:\task_1537700112\build\application\firefox\firefox.exe+0x1400014a1) 11:22:47 INFO - GECKO(932) | #27 0x7ff6d62ee63b (Z:\task_1537700112\build\application\firefox\firefox.exe+0x1400fe63b) 11:22:47 INFO - GECKO(932) | #28 0x7ff9b3b22773 (C:\Windows\System32\KERNEL32.DLL+0x180012773) 11:22:47 INFO - GECKO(932) | #29 0x7ff9b6620d60 (C:\Windows\SYSTEM32\ntdll.dll+0x180070d60) 11:22:47 INFO - GECKO(932) | previously allocated by thread T0 here: 11:22:47 INFO - GECKO(932) | #0 0x7ff98ba840c0 in malloc Z:\task_1537535524\build\src\build\build-clang\build-clang\src\llvm\projects\compiler-rt\lib\asan\asan_malloc_win.cc:60 11:22:47 INFO - GECKO(932) | #1 0x7ff98031b233 in _moz_cairo_create z:\build\build\src\gfx\cairo\cairo\src\cairo.c:384 11:22:47 INFO - GECKO(932) | #2 0x7ff976ba4d74 in mozilla::gfx::DrawTargetCairo::InitAlreadyReferenced(struct _cairo_surface *,struct mozilla::gfx::IntSizeTyped<struct mozilla::gfx::UnknownUnits> const &,enum mozilla::gfx::SurfaceFormat *) z:\build\build\src\gfx\2d\DrawTargetCairo.cpp:1921 11:22:47 INFO - GECKO(932) | #3 0x7ff976ad2477 in mozilla::gfx::Factory::CreateDrawTargetForCairoSurface(struct _cairo_surface *,struct mozilla::gfx::IntSizeTyped<struct mozilla::gfx::UnknownUnits> const &,enum mozilla::gfx::SurfaceFormat *) z:\build\build\src\gfx\2d\Factory.cpp:1052 11:22:47 INFO - GECKO(932) | #4 0x7ff97761d31d in gfxPlatform::CreateDrawTargetForSurface(class gfxASurface *,struct mozilla::gfx::IntSizeTyped<struct mozilla::gfx::UnknownUnits> const &) z:\build\build\src\gfx\thebes\gfxPlatform.cpp:1229 11:22:47 INFO - GECKO(932) | #5 0x7ff97e20082b in mozilla::widget::WinCompositorWidget::ClearTransparentWindow(void) z:\build\build\src\widget\windows\WinCompositorWidget.cpp:305 11:22:47 INFO - GECKO(932) | #6 0x7ff97e35895b in nsWindow::Show(bool) z:\build\build\src\widget\windows\nsWindow.cpp:1648 11:22:47 INFO - GECKO(932) | #7 0x7ff97e06bd61 in nsView::DoResetWidgetBounds(bool,bool) z:\build\build\src\view\nsView.cpp:342 11:22:47 INFO - GECKO(932) | #8 0x7ff97e079667 in nsViewManager::ProcessPendingUpdatesForView(class nsView *,bool) z:\build\build\src\view\nsViewManager.cpp:399 11:22:47 INFO - GECKO(932) | #9 0x7ff97e0808f7 in nsViewManager::ProcessPendingUpdates(void) z:\build\build\src\view\nsViewManager.cpp:1102 11:22:47 INFO - GECKO(932) | #10 0x7ff97e8bd0ec in nsRefreshDriver::Tick(class mozilla::TimeStamp) z:\build\build\src\layout\base\nsRefreshDriver.cpp:2046 11:22:47 INFO - GECKO(932) | #11 0x7ff97e8cc92a in mozilla::RefreshDriverTimer::TickRefreshDrivers(class mozilla::TimeStamp,class nsTArray<class RefPtr<class nsRefreshDriver> > &) z:\build\build\src\layout\base\nsRefreshDriver.cpp:300 11:22:47 INFO - GECKO(932) | #12 0x7ff97e8cc3ae in mozilla::RefreshDriverTimer::Tick(class mozilla::TimeStamp) z:\build\build\src\layout\base\nsRefreshDriver.cpp:318 11:22:47 INFO - GECKO(932) | #13 0x7ff97e8cfe4e in mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver::TickRefreshDriver(class mozilla::TimeStamp) z:\build\build\src\layout\base\nsRefreshDriver.cpp:672 11:22:47 INFO - GECKO(932) | #14 0x7ff97e8d03fb in mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver::ParentProcessVsyncNotifier::Run(void) z:\build\build\src\layout\base\nsRefreshDriver.cpp:513 11:22:47 INFO - GECKO(932) | #15 0x7ff9746cf8d8 in nsThread::ProcessNextEvent(bool,bool *) z:\build\build\src\xpcom\threads\nsThread.cpp:1166 11:22:47 INFO - GECKO(932) | #16 0x7ff9746d79ce in NS_ProcessNextEvent(class nsIThread *,bool) z:\build\build\src\xpcom\threads\nsThreadUtils.cpp:519 11:22:47 INFO - GECKO(932) | #17 0x7ff97571c769 in mozilla::ipc::MessagePump::Run(class base::MessagePump::Delegate *) z:\build\build\src\ipc\glue\MessagePump.cpp:97 11:22:47 INFO - GECKO(932) | #18 0x7ff975683efe in MessageLoop::RunHandler(void) z:\build\build\src\ipc\chromium\src\base\message_loop.cc:318 11:22:47 INFO - GECKO(932) | #19 0x7ff975683c86 in MessageLoop::Run(void) z:\build\build\src\ipc\chromium\src\base\message_loop.cc:298 11:22:47 INFO - GECKO(932) | #20 0x7ff97e159e2a in nsBaseAppShell::Run(void) z:\build\build\src\widget\nsBaseAppShell.cpp:158 11:22:47 INFO - GECKO(932) | #21 0x7ff97e2db8a9 in nsAppShell::Run(void) z:\build\build\src\widget\windows\nsAppShell.cpp:420 11:22:47 INFO - GECKO(932) | #22 0x7ff98221472e in nsAppStartup::Run(void) z:\build\build\src\toolkit\components\startup\nsAppStartup.cpp:290 11:22:47 INFO - GECKO(932) | #23 0x7ff9824b3327 in XREMain::XRE_mainRun(void) z:\build\build\src\toolkit\xre\nsAppRunner.cpp:4823 11:22:47 INFO - GECKO(932) | #24 0x7ff9824b7c67 in XREMain::XRE_main(int,char * * const,struct mozilla::BootstrapConfig const &) z:\build\build\src\toolkit\xre\nsAppRunner.cpp:4968 11:22:47 INFO - GECKO(932) | #25 0x7ff9824ba080 in XRE_main(int,char * * const,struct mozilla::BootstrapConfig const &) z:\build\build\src\toolkit\xre\nsAppRunner.cpp:5060 11:22:47 INFO - GECKO(932) | #26 0x7ff6d61f1d5d (Z:\task_1537700112\build\application\firefox\firefox.exe+0x140001d5d) 11:22:47 INFO - GECKO(932) | #27 0x7ff6d61f14a1 (Z:\task_1537700112\build\application\firefox\firefox.exe+0x1400014a1) 11:22:47 INFO - GECKO(932) | #28 0x7ff6d62ee63b (Z:\task_1537700112\build\application\firefox\firefox.exe+0x1400fe63b) 11:22:47 INFO - GECKO(932) | #29 0x7ff9b3b22773 (C:\Windows\System32\KERNEL32.DLL+0x180012773) 11:22:47 INFO - GECKO(932) | Thread T58 created by T0 here: 11:22:47 INFO - GECKO(932) | #0 0x7ff98ba8f5f0 in __asan_wrap_CreateThread Z:\task_1537535524\build\src\build\build-clang\build-clang\src\llvm\projects\compiler-rt\lib\asan\asan_win.cc:146 11:22:47 INFO - GECKO(932) | #1 0x7ff97565babf in PlatformThread::Create(unsigned __int64,class PlatformThread::Delegate *,void * *) z:\build\build\src\ipc\chromium\src\base\platform_thread_win.cc:78 11:22:47 INFO - GECKO(932) | #2 0x7ff975693e9c in base::Thread::StartWithOptions(struct base::Thread::Options const &) z:\build\build\src\ipc\chromium\src\base\thread.cc:99 11:22:47 INFO - GECKO(932) | #3 0x7ff97752a76c in mozilla::layers::CompositorThreadHolder::CompositorThreadHolder(void) z:\build\build\src\gfx\layers\ipc\CompositorThread.cpp:53 11:22:47 INFO - GECKO(932) | #4 0x7ff97752abdf in mozilla::layers::CompositorThreadHolder::Start(void) z:\build\build\src\gfx\layers\ipc\CompositorThread.cpp:123 11:22:47 INFO - GECKO(932) | #5 0x7ff97761a012 in gfxPlatform::InitLayersIPC(void) z:\build\build\src\gfx\thebes\gfxPlatform.cpp:1149 11:22:47 INFO - GECKO(932) | #6 0x7ff9776130eb in gfxPlatform::Init(void) z:\build\build\src\gfx\thebes\gfxPlatform.cpp:857 11:22:47 INFO - GECKO(932) | #7 0x7ff977611643 in gfxPlatform::GetPlatform(void) z:\build\build\src\gfx\thebes\gfxPlatform.cpp:517 11:22:47 INFO - GECKO(932) | #8 0x7ff97e8b195c in nsRefreshDriver::ChooseTimer(void)const z:\build\build\src\layout\base\nsRefreshDriver.cpp:1101 11:22:47 INFO - GECKO(932) | #9 0x7ff97e8b51c6 in nsRefreshDriver::EnsureTimerStarted(enum nsRefreshDriver::EnsureTimerStartedFlags) z:\build\build\src\layout\base\nsRefreshDriver.cpp:1357 11:22:47 INFO - GECKO(932) | #10 0x7ff97e97f58f in nsIPresShell::DoObserveStyleFlushes(void) z:\build\build\src\layout\base\PresShell.cpp:9437 11:22:47 INFO - GECKO(932) | #11 0x7ff97eafd596 in nsPresContext::CompatibilityModeChanged(void) z:\build\build\src\layout\base\nsPresContext.cpp:1102 11:22:47 INFO - GECKO(932) | #12 0x7ff97e918842 in mozilla::PresShell::Init(class nsIDocument *,class nsPresContext *,class nsViewManager *,class mozilla::UniquePtr<class mozilla::ServoStyleSet,class mozilla::DefaultDelete<class mozilla::ServoStyleSet> >) z:\build\build\src\layout\base\PresShell.cpp:949 11:22:47 INFO - GECKO(932) | #13 0x7ff97809f8cd in nsIDocument::CreateShell(class nsPresContext *,class nsViewManager *,class mozilla::UniquePtr<class mozilla::ServoStyleSet,class mozilla::DefaultDelete<class mozilla::ServoStyleSet> >) z:\build\build\src\dom\base\nsDocument.cpp:3936 11:22:47 INFO - GECKO(932) | #14 0x7ff97ea3c0bf in nsDocumentViewer::InitPresentationStuff(bool) z:\build\build\src\layout\base\nsDocumentViewer.cpp:796 11:22:47 INFO - GECKO(932) | #15 0x7ff97ea3b683 in nsDocumentViewer::InitInternal(class nsIWidget *,class nsISupports *,struct mozilla::gfx::IntRectTyped<struct mozilla::gfx::UnknownUnits> const &,bool,bool,bool) z:\build\build\src\layout\base\nsDocumentViewer.cpp:1045 11:22:47 INFO - GECKO(932) | #16 0x7ff97ea3a7c0 in nsDocumentViewer::Init(class nsIWidget *,struct mozilla::gfx::IntRectTyped<struct mozilla::gfx::UnknownUnits> const &) z:\build\build\src\layout\base\nsDocumentViewer.cpp:771 11:22:47 INFO - GECKO(932) | #17 0x7ff9818b6cf7 in nsDocShell::SetupNewViewer(class nsIContentViewer *) z:\build\build\src\docshell\base\nsDocShell.cpp:8883 11:22:47 INFO - GECKO(932) | #18 0x7ff9818b56f2 in nsDocShell::Embed(class nsIContentViewer *,char const *,class nsISupports *) z:\build\build\src\docshell\base\nsDocShell.cpp:6707 11:22:47 INFO - GECKO(932) | #19 0x7ff9818c669a in nsDocShell::CreateAboutBlankContentViewer(class nsIPrincipal *,class nsIURI *,bool,bool) z:\build\build\src\docshell\base\nsDocShell.cpp:7586 11:22:47 INFO - GECKO(932) | #20 0x7ff9818c7d3a in nsDocShell::CreateAboutBlankContentViewer(class nsIPrincipal *) z:\build\build\src\docshell\base\nsDocShell.cpp:7611 11:22:47 INFO - GECKO(932) | #21 0x7ff981945cc5 in nsWebShellWindow::Initialize(class nsIXULWindow *,class nsIXULWindow *,class nsIURI *,int,int,bool,class nsITabParent *,class mozIDOMWindowProxy *,struct nsWidgetInitData &) z:\build\build\src\xpfe\appshell\nsWebShellWindow.cpp:229 11:22:47 INFO - GECKO(932) | #22 0x7ff98193f7a3 in nsAppShellService::JustCreateTopWindow(class nsIXULWindow *,class nsIURI *,unsigned int,int,int,bool,class nsITabParent *,class mozIDOMWindowProxy *,class nsWebShellWindow * *) z:\build\build\src\xpfe\appshell\nsAppShellService.cpp:754 11:22:47 INFO - GECKO(932) | #23 0x7ff98194198c in nsAppShellService::CreateTopLevelWindow(class nsIXULWindow *,class nsIURI *,unsigned int,int,int,class nsITabParent *,class mozIDOMWindowProxy *,class nsIXULWindow * *) z:\build\build\src\xpfe\appshell\nsAppShellService.cpp:200 11:22:47 INFO - GECKO(932) | #24 0x7ff982216fef in nsAppStartup::CreateChromeWindow2(class nsIWebBrowserChrome *,unsigned int,class nsITabParent *,class mozIDOMWindowProxy *,unsigned __int64,bool *,class nsIWebBrowserChrome * *) z:\build\build\src\toolkit\components\startup\nsAppStartup.cpp:680 11:22:47 INFO - GECKO(932) | #25 0x7ff98240eed4 in nsWindowWatcher::CreateChromeWindow(class nsTSubstring<char> const &,class nsIWebBrowserChrome *,unsigned int,class nsITabParent *,class mozIDOMWindowProxy *,unsigned __int64,class nsIWebBrowserChrome * *) z:\build\build\src\toolkit\components\windowwatcher\nsWindowWatcher.cpp:463 11:22:47 INFO - GECKO(932) | #26 0x7ff98240aee4 in nsWindowWatcher::OpenWindowInternal(class mozIDOMWindowProxy *,char const *,char const *,char const *,bool,bool,bool,class nsIArray *,bool,bool,class nsDocShellLoadInfo *,class mozIDOMWindowProxy * *) z:\build\build\src\toolkit\components\windowwatcher\nsWindowWatcher.cpp:934 11:22:47 INFO - GECKO(932) | #27 0x7ff9824055d4 in nsWindowWatcher::OpenWindow(class mozIDOMWindowProxy *,char const *,char const *,char const *,class nsISupports *,class mozIDOMWindowProxy * *) z:\build\build\src\toolkit\components\windowwatcher\nsWindowWatcher.cpp:323 11:22:47 INFO - GECKO(932) | #28 0x7ff9849d1a71 in XPTC__InvokebyIndex (Z:\task_1537700112\build\application\firefox\xul.dll+0x1905a1a71) 11:22:47 INFO - GECKO(932) | #29 0x7ff9762a4605 in XPCWrappedNative::CallMethod(class XPCCallContext &,enum XPCWrappedNative::CallMode) z:\build\build\src\js\xpconnect\src\XPCWrappedNative.cpp:1233 11:22:47 INFO - GECKO(932) | #30 0x7ff9762abfea in XPC_WN_CallMethod(struct JSContext *,unsigned int,union JS::Value *) z:\build\build\src\js\xpconnect\src\XPCWrappedNativeJSOps.cpp:963 11:22:47 INFO - GECKO(932) | #31 0x7ff983deb282 in js::InternalCallOrConstruct(struct JSContext *,class JS::CallArgs const &,enum js::MaybeConstruct) z:\build\build\src\js\src\vm\Interpreter.cpp:553 11:22:47 INFO - GECKO(932) | #32 0x7ff983dedca5 in InternalCall z:\build\build\src\js\src\vm\Interpreter.cpp:607 11:22:47 INFO - GECKO(932) | #33 0x7ff983db84ff in Interpret z:\build\build\src\js\src\vm\Interpreter.cpp:3451 11:22:47 INFO - GECKO(932) | #34 0x7ff983db3f37 in js::RunScript(struct JSContext *,class js::RunState &) z:\build\build\src\js\src\vm\Interpreter.cpp:440 11:22:47 INFO - GECKO(932) | #35 0x7ff983debb13 in js::InternalCallOrConstruct(struct JSContext *,class JS::CallArgs const &,enum js::MaybeConstruct) z:\build\build\src\js\src\vm\Interpreter.cpp:580 11:22:47 INFO - GECKO(932) | #36 0x7ff983dedca5 in InternalCall z:\build\build\src\js\src\vm\Interpreter.cpp:607 11:22:47 INFO - GECKO(932) | #37 0x7ff983deded6 in js::Call(struct JSContext *,class JS::Handle<union JS::Value>,class JS::Handle<union JS::Value>,class js::AnyInvokeArgs const &,class JS::MutableHandle<union JS::Value>) z:\build\build\src\js\src\vm\Interpreter.cpp:626 11:22:47 INFO - GECKO(932) | #38 0x7ff982b99aaf in JS_CallFunctionValue(struct JSContext *,class JS::Handle<class JSObject *>,class JS::Handle<union JS::Value>,class JS::HandleValueArray const &,class JS::MutableHandle<union JS::Value>) z:\build\build\src\js\src\jsapi.cpp:2893 11:22:47 INFO - GECKO(932) | #39 0x7ff97628764d in nsXPCWrappedJSClass::CallMethod(class nsXPCWrappedJS *,unsigned short,struct nsXPTMethodInfo const *,struct nsXPTCMiniVariant *) z:\build\build\src\js\xpconnect\src\XPCWrappedJSClass.cpp:1206 11:22:47 INFO - GECKO(932) | #40 0x7ff976284e93 in nsXPCWrappedJS::CallMethod(unsigned short,struct nsXPTMethodInfo const *,struct nsXPTCMiniVariant *) z:\build\build\src\js\xpconnect\src\XPCWrappedJS.cpp:653 11:22:47 INFO - GECKO(932) | #41 0x7ff974703a18 in PrepareAndDispatch z:\build\build\src\xpcom\reflect\xptcall\md\win32\xptcstubs_x86_64.cpp:181 11:22:47 INFO - GECKO(932) | #42 0x7ff9849d1ac8 in SharedStub (Z:\task_1537700112\build\application\firefox\xul.dll+0x1905a1ac8) 11:22:47 INFO - GECKO(932) | #43 0x7ff974673686 in NS_CreateServicesFromCategory(char const *,class nsISupports *,char const *,UNKNOWN const *) z:\build\build\src\xpcom\components\nsCategoryManager.cpp:777 11:22:47 INFO - GECKO(932) | #44 0x7ff9824e82be in nsXREDirProvider::DoStartup(void) z:\build\build\src\toolkit\xre\nsXREDirProvider.cpp:1002 11:22:47 INFO - GECKO(932) | #45 0x7ff9824b2af3 in XREMain::XRE_mainRun(void) z:\build\build\src\toolkit\xre\nsAppRunner.cpp:4653 11:22:47 INFO - GECKO(932) | #46 0x7ff9824b7c67 in XREMain::XRE_main(int,char * * const,struct mozilla::BootstrapConfig const &) z:\build\build\src\toolkit\xre\nsAppRunner.cpp:4968 11:22:47 INFO - GECKO(932) | #47 0x7ff9824ba080 in XRE_main(int,char * * const,struct mozilla::BootstrapConfig const &) z:\build\build\src\toolkit\xre\nsAppRunner.cpp:5060 11:22:47 INFO - GECKO(932) | #48 0x7ff6d61f1d5d (Z:\task_1537700112\build\application\firefox\firefox.exe+0x140001d5d) 11:22:47 INFO - GECKO(932) | #49 0x7ff6d61f14a1 (Z:\task_1537700112\build\application\firefox\firefox.exe+0x1400014a1) 11:22:47 INFO - GECKO(932) | #50 0x7ff6d62ee63b (Z:\task_1537700112\build\application\firefox\firefox.exe+0x1400fe63b) 11:22:47 INFO - GECKO(932) | #51 0x7ff9b3b22773 (C:\Windows\System32\KERNEL32.DLL+0x180012773) 11:22:47 INFO - GECKO(932) | #52 0x7ff9b6620d60 (C:\Windows\SYSTEM32\ntdll.dll+0x180070d60) 11:22:47 INFO - GECKO(932) | SUMMARY: AddressSanitizer: heap-use-after-free z:\build\build\src\gfx\cairo\cairo\src\cairo-gstate.c:218 in _cairo_gstate_fini 11:22:47 INFO - GECKO(932) | Shadow bytes around the buggy address: 11:22:47 INFO - GECKO(932) | 0x0368b9ddcbc0: fd fd fa fa fa fa fa fa fa fa fa fa fa fa fa fa 11:22:47 INFO - GECKO(932) | 0x0368b9ddcbd0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 11:22:47 INFO - GECKO(932) | 0x0368b9ddcbe0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 11:22:47 INFO - GECKO(932) | 0x0368b9ddcbf0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 11:22:47 INFO - GECKO(932) | 0x0368b9ddcc00: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 11:22:47 INFO - GECKO(932) | =>0x0368b9ddcc10: fd fd[fd]fd fd fd fd fd fd fd fd fd fd fd fd fd 11:22:47 INFO - GECKO(932) | 0x0368b9ddcc20: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 11:22:47 INFO - GECKO(932) | 0x0368b9ddcc30: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 11:22:47 INFO - GECKO(932) | 0x0368b9ddcc40: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 11:22:47 INFO - GECKO(932) | 0x0368b9ddcc50: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 11:22:47 INFO - GECKO(932) | 0x0368b9ddcc60: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 11:22:47 INFO - GECKO(932) | Shadow byte legend (one shadow byte represents 8 application bytes): 11:22:47 INFO - GECKO(932) | Addressable: 00 11:22:47 INFO - GECKO(932) | Partially addressable: 01 02 03 04 05 06 07 11:22:47 INFO - GECKO(932) | Heap left redzone: fa 11:22:47 INFO - GECKO(932) | Freed heap region: fd 11:22:47 INFO - GECKO(932) | Stack left redzone: f1 11:22:47 INFO - GECKO(932) | Stack mid redzone: f2 11:22:47 INFO - GECKO(932) | Stack right redzone: f3 11:22:47 INFO - GECKO(932) | Stack after return: f5 11:22:47 INFO - GECKO(932) | Stack use after scope: f8 11:22:47 INFO - GECKO(932) | Global redzone: f9 11:22:47 INFO - GECKO(932) | Global init order: f6 11:22:47 INFO - GECKO(932) | Poisoned by user: f7 11:22:47 INFO - GECKO(932) | Container overflow: fc 11:22:47 INFO - GECKO(932) | Array cookie: ac 11:22:47 INFO - GECKO(932) | Intra object redzone: bb 11:22:47 INFO - GECKO(932) | ASan internal: fe 11:22:47 INFO - GECKO(932) | Left alloca redzone: ca 11:22:47 INFO - GECKO(932) | Right alloca redzone: cb 11:22:47 INFO - GECKO(932) | Shadow gap: cc 11:22:47 INFO - GECKO(932) | ==932==ABORTING 11:22:48 INFO - TEST-INFO | Main app process: exit 1
Status: NEW → RESOLVED
Closed: 6 years ago
Resolution: --- → DUPLICATE
Group: core-security
You need to log in before you can comment on or make changes to this bug.