Closed Bug 1511580 Opened 6 years ago Closed 6 years ago

Intermittent GECKO(3370) | SUMMARY: AddressSanitizer: SEGV /builds/worker/workspace/build/src/js/src/gc/Cell.h:266:27 in storeBuffer

Categories

(Core :: JavaScript: GC, defect, P5)

Product:
Core
Component:
JavaScript: GC
Type:
defect

Tracking

()

Status:
RESOLVED FIXED
Milestone:
mozilla66
Tracking Flags:
Tracking Status
firefox-esr60 --- unaffected
firefox64 --- wontfix
firefox65 --- fixed
firefox66 --- fixed

People

(Reporter: intermittent-bug-filer, Assigned: jandem)

References

(Blocks 1 open bug)

Details

(Keywords: intermittent-failure, sec-high, Whiteboard: [post-critsmash-triage][adv-main65+])

Filed by: ncsoregi [at] mozilla.com https://treeherder.mozilla.org/logviewer.html#?job_id=215042452&repo=autoland https://queue.taskcluster.net/v1/task/PVeNGBTiTNS9cn1P-U68aA/runs/0/artifacts/public/logs/live_backing.log [task 2018-12-01T06:52:11.239Z] 06:52:11 INFO - GECKO(3370) | AddressSanitizer:DEADLYSIGNAL [task 2018-12-01T06:52:11.240Z] 06:52:11 INFO - GECKO(3370) | ================================================================= [task 2018-12-01T06:52:11.241Z] 06:52:11 ERROR - GECKO(3370) | ==3370==ERROR: AddressSanitizer: SEGV on unknown address 0x7f950b6ffff0 (pc 0x7f95442506fa bp 0x7fffe2cbcf20 sp 0x7fffe2cbce40 T0) [task 2018-12-01T06:52:11.241Z] 06:52:11 INFO - GECKO(3370) | ==3370==The signal is caused by a READ memory access. [task 2018-12-01T06:52:12.699Z] 06:52:12 INFO - GECKO(3370) | #0 0x7f95442506f9 in storeBuffer /builds/worker/workspace/build/src/js/src/gc/Cell.h:266:27 [task 2018-12-01T06:52:12.700Z] 06:52:12 INFO - GECKO(3370) | #1 0x7f95442506f9 in writeBarrierPost /builds/worker/workspace/build/src/js/src/vm/JSObject.h:711 [task 2018-12-01T06:52:12.700Z] 06:52:12 INFO - GECKO(3370) | #2 0x7f95442506f9 in js::InternalBarrierMethods<JSObject*>::postBarrier(JSObject**, JSObject*, JSObject*) /builds/worker/workspace/build/src/js/src/gc/Barrier.h:263 [task 2018-12-01T06:52:12.757Z] 06:52:12 INFO - GECKO(3370) | #3 0x7f953956df3b in postBarrier /builds/worker/workspace/build/src/obj-firefox/dist/include/js/RootingAPI.h:679:5 [task 2018-12-01T06:52:12.757Z] 06:52:12 INFO - GECKO(3370) | #4 0x7f953956df3b in post /builds/worker/workspace/build/src/obj-firefox/dist/include/js/RootingAPI.h:343 [task 2018-12-01T06:52:12.759Z] 06:52:12 INFO - GECKO(3370) | #5 0x7f953956df3b in ~Heap /builds/worker/workspace/build/src/obj-firefox/dist/include/js/RootingAPI.h:307 [task 2018-12-01T06:52:12.761Z] 06:52:12 INFO - GECKO(3370) | #6 0x7f953956df3b in nsXPCWrappedJS::~nsXPCWrappedJS() /builds/worker/workspace/build/src/js/xpconnect/src/XPCWrappedJS.cpp:447 [task 2018-12-01T06:52:12.763Z] 06:52:12 INFO - GECKO(3370) | #7 0x7f953956e03d in nsXPCWrappedJS::~nsXPCWrappedJS() /builds/worker/workspace/build/src/js/xpconnect/src/XPCWrappedJS.cpp:447:35 [task 2018-12-01T06:52:12.806Z] 06:52:12 INFO - GECKO(3370) | #8 0x7f9537980616 in SnowWhiteKiller::~SnowWhiteKiller() /builds/worker/workspace/build/src/xpcom/base/nsCycleCollector.cpp:2416:7 [task 2018-12-01T06:52:12.808Z] 06:52:12 INFO - GECKO(3370) | #9 0x7f953797f31e in nsCycleCollector::FreeSnowWhite(bool) /builds/worker/workspace/build/src/xpcom/base/nsCycleCollector.cpp:2607:3 [task 2018-12-01T06:52:12.811Z] 06:52:12 INFO - GECKO(3370) | #10 0x7f9537988a10 in nsCycleCollector::BeginCollection(ccType, nsICycleCollectorListener*) /builds/worker/workspace/build/src/xpcom/base/nsCycleCollector.cpp:3578:3 [task 2018-12-01T06:52:12.814Z] 06:52:12 INFO - GECKO(3370) | #11 0x7f9537987fd0 in nsCycleCollector::Collect(ccType, js::SliceBudget&, nsICycleCollectorListener*, bool) /builds/worker/workspace/build/src/xpcom/base/nsCycleCollector.cpp:3407:9 [task 2018-12-01T06:52:12.816Z] 06:52:12 INFO - GECKO(3370) | #12 0x7f953798baec in nsCycleCollector_collect(nsICycleCollectorListener*) /builds/worker/workspace/build/src/xpcom/base/nsCycleCollector.cpp:3942:21 [task 2018-12-01T06:52:12.964Z] 06:52:12 INFO - GECKO(3370) | #13 0x7f953b090b1c in nsJSContext::CycleCollectNow(nsICycleCollectorListener*) /builds/worker/workspace/build/src/dom/base/nsJSEnvironment.cpp:1413:3 [task 2018-12-01T06:52:12.965Z] 06:52:12 INFO - GECKO(3370) | #14 0x7f953b0900c0 in nsJSEnvironmentObserver::Observe(nsISupports*, char const*, char16_t const*) /builds/worker/workspace/build/src/dom/base/nsJSEnvironment.cpp:329:7 [task 2018-12-01T06:52:12.985Z] 06:52:12 INFO - GECKO(3370) | #15 0x7f95379f6501 in nsObserverList::NotifyObservers(nsISupports*, char const*, char16_t const*) /builds/worker/workspace/build/src/xpcom/ds/nsObserverList.cpp:66:19 [task 2018-12-01T06:52:12.987Z] 06:52:12 INFO - GECKO(3370) | #16 0x7f95379f9eb1 in nsObserverService::NotifyObservers(nsISupports*, char const*, char16_t const*) /builds/worker/workspace/build/src/xpcom/ds/nsObserverService.cpp:286:19 [task 2018-12-01T06:52:12.995Z] 06:52:12 INFO - GECKO(3370) | #17 0x7f9537b460a1 in NS_InvokeByIndex /builds/worker/workspace/build/src/xpcom/reflect/xptcall/md/unix/xptcinvoke_asm_x86_64_unix.S:106 [task 2018-12-01T06:52:12.998Z] 06:52:12 INFO - GECKO(3370) | #18 0x7f95395891e3 in Invoke /builds/worker/workspace/build/src/js/xpconnect/src/XPCWrappedNative.cpp:1649:10 [task 2018-12-01T06:52:13.001Z] 06:52:13 INFO - GECKO(3370) | #19 0x7f95395891e3 in Call /builds/worker/workspace/build/src/js/xpconnect/src/XPCWrappedNative.cpp:1207 [task 2018-12-01T06:52:13.003Z] 06:52:13 INFO - GECKO(3370) | #20 0x7f95395891e3 in XPCWrappedNative::CallMethod(XPCCallContext&, XPCWrappedNative::CallMode) /builds/worker/workspace/build/src/js/xpconnect/src/XPCWrappedNative.cpp:1173 [task 2018-12-01T06:52:13.004Z] 06:52:13 INFO - GECKO(3370) | #21 0x7f953958f236 in XPC_WN_CallMethod(JSContext*, unsigned int, JS::Value*) /builds/worker/workspace/build/src/js/xpconnect/src/XPCWrappedNativeJSOps.cpp:948:10 [task 2018-12-01T06:52:13.038Z] 06:52:13 INFO - GECKO(3370) | #22 0x7f9545aa351d in CallJSNative /builds/worker/workspace/build/src/js/src/vm/Interpreter.cpp:443:13 [task 2018-12-01T06:52:13.040Z] 06:52:13 INFO - GECKO(3370) | #23 0x7f9545aa351d in js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct) /builds/worker/workspace/build/src/js/src/vm/Interpreter.cpp:535 [task 2018-12-01T06:52:13.043Z] 06:52:13 INFO - GECKO(3370) | #24 0x7f9545a8d1a7 in CallFromStack /builds/worker/workspace/build/src/js/src/vm/Interpreter.cpp:594:10 [task 2018-12-01T06:52:13.047Z] 06:52:13 INFO - GECKO(3370) | #25 0x7f9545a8d1a7 in Interpret(JSContext*, js::RunState&) /builds/worker/workspace/build/src/js/src/vm/Interpreter.cpp:3348 [task 2018-12-01T06:52:13.050Z] 06:52:13 INFO - GECKO(3370) | #26 0x7f9545a70766 in js::RunScript(JSContext*, js::RunState&) /builds/worker/workspace/build/src/js/src/vm/Interpreter.cpp:423:10 [task 2018-12-01T06:52:13.052Z] 06:52:13 INFO - GECKO(3370) | #27 0x7f9545aa3ec1 in js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct) /builds/worker/workspace/build/src/js/src/vm/Interpreter.cpp:563:13 [task 2018-12-01T06:52:13.053Z] 06:52:13 INFO - GECKO(3370) | #28 0x7f9545aa5b42 in js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>) /builds/worker/workspace/build/src/js/src/vm/Interpreter.cpp:606:8 [task 2018-12-01T06:52:13.071Z] 06:52:13 INFO - GECKO(3370) | #29 0x7f9544b42c21 in js::ForwardingProxyHandler::call(JSContext*, JS::Handle<JSObject*>, JS::CallArgs const&) const /builds/worker/workspace/build/src/js/src/proxy/Wrapper.cpp:162:10 [task 2018-12-01T06:52:13.113Z] 06:52:13 INFO - GECKO(3370) | #30 0x7f9544afa3b1 in js::CrossCompartmentWrapper::call(JSContext*, JS::Handle<JSObject*>, JS::CallArgs const&) const /builds/worker/workspace/build/src/js/src/proxy/CrossCompartmentWrapper.cpp:304:19 [task 2018-12-01T06:52:13.115Z] 06:52:13 INFO - GECKO(3370) | #31 0x7f9544b20741 in js::Proxy::call(JSContext*, JS::Handle<JSObject*>, JS::CallArgs const&) /builds/worker/workspace/build/src/js/src/proxy/Proxy.cpp:535:19 [task 2018-12-01T06:52:13.116Z] 06:52:13 INFO - GECKO(3370) | #32 0x7f9545aa45bc in js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct) /builds/worker/workspace/build/src/js/src/vm/Interpreter.cpp:509:14 [task 2018-12-01T06:52:13.117Z] 06:52:13 INFO - GECKO(3370) | #33 0x7f9545aa5b42 in js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>) /builds/worker/workspace/build/src/js/src/vm/Interpreter.cpp:606:8 [task 2018-12-01T06:52:13.176Z] 06:52:13 INFO - GECKO(3370) | #34 0x7f9544076a23 in Call /builds/worker/workspace/build/src/js/src/vm/Interpreter.h:98:10 [task 2018-12-01T06:52:13.176Z] 06:52:13 INFO - GECKO(3370) | #35 0x7f9544076a23 in PromiseReactionJob(JSContext*, unsigned int, JS::Value*) /builds/worker/workspace/build/src/js/src/builtin/Promise.cpp:1642 [task 2018-12-01T06:52:13.176Z] 06:52:13 INFO - GECKO(3370) | #36 0x7f9545aa351d in CallJSNative /builds/worker/workspace/build/src/js/src/vm/Interpreter.cpp:443:13 [task 2018-12-01T06:52:13.177Z] 06:52:13 INFO - GECKO(3370) | #37 0x7f9545aa351d in js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct) /builds/worker/workspace/build/src/js/src/vm/Interpreter.cpp:535 [task 2018-12-01T06:52:13.177Z] 06:52:13 INFO - GECKO(3370) | #38 0x7f9545aa5b42 in js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>) /builds/worker/workspace/build/src/js/src/vm/Interpreter.cpp:606:8 [task 2018-12-01T06:52:13.238Z] 06:52:13 INFO - GECKO(3370) | #39 0x7f9544a67ae6 in JS::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>) /builds/worker/workspace/build/src/js/src/jsapi.cpp:2651:10 [task 2018-12-01T06:52:13.364Z] 06:52:13 INFO - GECKO(3370) | #40 0x7f953bbbc076 in mozilla::dom::PromiseJobCallback::Call(JSContext*, JS::Handle<JS::Value>, mozilla::ErrorResult&) /builds/worker/workspace/build/src/obj-firefox/dom/bindings/PromiseBinding.cpp:26:8 [task 2018-12-01T06:52:13.385Z] 06:52:13 INFO - GECKO(3370) | #41 0x7f9537968c65 in Call /builds/worker/workspace/build/src/obj-firefox/dist/include/mozilla/dom/PromiseBinding.h:91:12 [task 2018-12-01T06:52:13.387Z] 06:52:13 INFO - GECKO(3370) | #42 0x7f9537968c65 in Call /builds/worker/workspace/build/src/obj-firefox/dist/include/mozilla/dom/PromiseBinding.h:104 [task 2018-12-01T06:52:13.388Z] 06:52:13 INFO - GECKO(3370) | #43 0x7f9537968c65 in mozilla::PromiseJobRunnable::Run(mozilla::AutoSlowOperation&) /builds/worker/workspace/build/src/xpcom/base/CycleCollectedJSContext.cpp:236 [task 2018-12-01T06:52:13.394Z] 06:52:13 INFO - GECKO(3370) | #44 0x7f9537948541 in mozilla::CycleCollectedJSContext::PerformMicroTaskCheckPoint(bool) /builds/worker/workspace/build/src/xpcom/base/CycleCollectedJSContext.cpp:550:17 [task 2018-12-01T06:52:13.397Z] 06:52:13 INFO - GECKO(3370) | #45 0x7f9537948e7f in mozilla::CycleCollectedJSContext::AfterProcessTask(unsigned int) /builds/worker/workspace/build/src/xpcom/base/CycleCollectedJSContext.cpp:392:3 [task 2018-12-01T06:52:13.455Z] 06:52:13 INFO - GECKO(3370) | #46 0x7f953950eccd in XPCJSContext::AfterProcessTask(unsigned int) /builds/worker/workspace/build/src/js/xpconnect/src/XPCJSContext.cpp:1252:28 [task 2018-12-01T06:52:13.504Z] 06:52:13 INFO - GECKO(3370) | #47 0x7f9537b15ee8 in nsThread::ProcessNextEvent(bool, bool*) /builds/worker/workspace/build/src/xpcom/threads/nsThread.cpp:1215:24 [task 2018-12-01T06:52:13.506Z] 06:52:13 INFO - GECKO(3370) | #48 0x7f9537b1c528 in NS_ProcessNextEvent(nsIThread*, bool) /builds/worker/workspace/build/src/xpcom/threads/nsThreadUtils.cpp:468:10 [task 2018-12-01T06:52:13.561Z] 06:52:13 INFO - GECKO(3370) | #49 0x7f9538ab116a in mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) /builds/worker/workspace/build/src/ipc/glue/MessagePump.cpp:88:21 [task 2018-12-01T06:52:13.605Z] 06:52:13 INFO - GECKO(3370) | #50 0x7f9538a0015f in RunInternal /builds/worker/workspace/build/src/ipc/chromium/src/base/message_loop.cc:314:10 [task 2018-12-01T06:52:13.607Z] 06:52:13 INFO - GECKO(3370) | #51 0x7f9538a0015f in RunHandler /builds/worker/workspace/build/src/ipc/chromium/src/base/message_loop.cc:307 [task 2018-12-01T06:52:13.609Z] 06:52:13 INFO - GECKO(3370) | #52 0x7f9538a0015f in MessageLoop::Run() /builds/worker/workspace/build/src/ipc/chromium/src/base/message_loop.cc:289 [task 2018-12-01T06:52:13.642Z] 06:52:13 INFO - GECKO(3370) | #53 0x7f953fb31f69 in nsBaseAppShell::Run() /builds/worker/workspace/build/src/widget/nsBaseAppShell.cpp:137:27 [task 2018-12-01T06:52:13.659Z] 06:52:13 INFO - GECKO(3370) | #54 0x7f9543a962f0 in nsAppStartup::Run() /builds/worker/workspace/build/src/toolkit/components/startup/nsAppStartup.cpp:271:30 [task 2018-12-01T06:52:13.668Z] 06:52:13 INFO - GECKO(3370) | #55 0x7f9543ce2d29 in XREMain::XRE_mainRun() /builds/worker/workspace/build/src/toolkit/xre/nsAppRunner.cpp:4622:22 [task 2018-12-01T06:52:13.671Z] 06:52:13 INFO - GECKO(3370) | #56 0x7f9543ce50b4 in XREMain::XRE_main(int, char**, mozilla::BootstrapConfig const&) /builds/worker/workspace/build/src/toolkit/xre/nsAppRunner.cpp:4760:8 [task 2018-12-01T06:52:13.673Z] 06:52:13 INFO - GECKO(3370) | #57 0x7f9543ce6c40 in XRE_main(int, char**, mozilla::BootstrapConfig const&) /builds/worker/workspace/build/src/toolkit/xre/nsAppRunner.cpp:4845:21 [task 2018-12-01T06:52:13.691Z] 06:52:13 INFO - GECKO(3370) | #58 0x55f9ecc9c1dc in do_main /builds/worker/workspace/build/src/browser/app/nsBrowserApp.cpp:214:22 [task 2018-12-01T06:52:13.693Z] 06:52:13 INFO - GECKO(3370) | #59 0x55f9ecc9c1dc in main /builds/worker/workspace/build/src/browser/app/nsBrowserApp.cpp:293 [task 2018-12-01T06:52:14.299Z] 06:52:14 INFO - GECKO(3370) | #60 0x7f9557c5582f in __libc_start_main /build/glibc-Cl5G7W/glibc-2.23/csu/../csu/libc-start.c:291 [task 2018-12-01T06:52:14.301Z] 06:52:14 INFO - GECKO(3370) | #61 0x55f9ecbc1a98 in _start (/builds/worker/workspace/build/application/firefox/firefox+0x29a98) [task 2018-12-01T06:52:14.303Z] 06:52:14 INFO - GECKO(3370) | AddressSanitizer can not provide additional info. [task 2018-12-01T06:52:14.310Z] 06:52:14 INFO - GECKO(3370) | SUMMARY: AddressSanitizer: SEGV /builds/worker/workspace/build/src/js/src/gc/Cell.h:266:27 in storeBuffer [task 2018-12-01T06:52:14.313Z] 06:52:14 INFO - GECKO(3370) | ==3370==ABORTING [task 2018-12-01T06:52:14.401Z] 06:52:14 INFO - GECKO(3370) | Crash Annotation GraphicsCriticalError: |[C0][GFX1-]: Receive IPC close with reason=AbnormalShutdown (t=37.8666) [GFX1-]: Receive IPC close with reason=AbnormalShutdown [task 2018-12-01T06:52:14.405Z] 06:52:14 INFO - GECKO(3370) | Crash Annotation GraphicsCriticalError: |[C0][GFX1-]: Receive IPC close with reason=AbnormalShutdown (t=42.6705) [GFX1-]: Receive IPC close with reason=AbnormalShutdown [task 2018-12-01T06:52:14.407Z] 06:52:14 INFO - GECKO(3370) | [Child 3593, Chrome_ChildThread] WARNING: pipe error: Broken pipe: file /builds/worker/workspace/build/src/ipc/chromium/src/chrome/common/ipc_channel_posix.cc, line 718 [task 2018-12-01T06:52:14.408Z] 06:52:14 INFO - GECKO(3370) | AddressSanitizer:DEADLYSIGNAL [task 2018-12-01T06:52:14.409Z] 06:52:14 INFO - GECKO(3370) | ================================================================= [task 2018-12-01T06:52:14.411Z] 06:52:14 ERROR - GECKO(3370) | ==3593==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000001 (pc 0x7fa6400ac698 bp 0x7fa63bfa82c0 sp 0x7fa63bfa82a0 T2) [task 2018-12-01T06:52:14.412Z] 06:52:14 INFO - GECKO(3370) | ==3593==The signal is caused by a WRITE memory access. [task 2018-12-01T06:52:14.416Z] 06:52:14 INFO - GECKO(3370) | ==3593==Hint: address points to the zero page. [task 2018-12-01T06:52:14.421Z] 06:52:14 INFO - GECKO(3370) | [Child 3568, Chrome_ChildThread] WARNING: pipe error (3): Connection reset by peer: file /builds/worker/workspace/build/src/ipc/chromium/src/chrome/common/ipc_channel_posix.cc, line 349 [task 2018-12-01T06:52:14.428Z] 06:52:14 INFO - GECKO(3370) | AddressSanitizer:DEADLYSIGNAL [task 2018-12-01T06:52:14.429Z] 06:52:14 INFO - GECKO(3370) | ================================================================= [task 2018-12-01T06:52:14.429Z] 06:52:14 ERROR - GECKO(3370) | ==3568==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000001 (pc 0x7f68f8bac698 bp 0x7f68f4aa82c0 sp 0x7f68f4aa82a0 T2) [task 2018-12-01T06:52:14.431Z] 06:52:14 INFO - GECKO(3370) | ==3568==The signal is caused by a WRITE memory access. [task 2018-12-01T06:52:14.432Z] 06:52:14 INFO - GECKO(3370) | ==3568==Hint: address points to the zero page. [task 2018-12-01T06:52:14.434Z] 06:52:14 INFO - GECKO(3370) | Crash Annotation GraphicsCriticalError: |[C0][GFX1-]: Receive IPC close with reason=AbnormalShutdown (t=46.0479) [GFX1-]: Receive IPC close with reason=AbnormalShutdown [task 2018-12-01T06:52:14.436Z] 06:52:14 INFO - GECKO(3370) | [Child 3539, Chrome_ChildThread] WARNING: pipe error (3): Connection reset by peer: file /builds/worker/workspace/build/src/ipc/chromium/src/chrome/common/ipc_channel_posix.cc, line 349 [task 2018-12-01T06:52:14.439Z] 06:52:14 INFO - GECKO(3370) | AddressSanitizer:DEADLYSIGNAL [task 2018-12-01T06:52:14.444Z] 06:52:14 INFO - GECKO(3370) | ================================================================= [task 2018-12-01T06:52:14.444Z] 06:52:14 ERROR - GECKO(3370) | ==3539==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000001 (pc 0x7f16c75ac698 bp 0x7f16c34a82c0 sp 0x7f16c34a82a0 T2) [task 2018-12-01T06:52:14.444Z] 06:52:14 INFO - GECKO(3370) | ==3539==The signal is caused by a WRITE memory access. [task 2018-12-01T06:52:14.448Z] 06:52:14 INFO - GECKO(3370) | ==3539==Hint: address points to the zero page. [task 2018-12-01T06:52:14.457Z] 06:52:14 INFO - GECKO(3370) | Crash Annotation GraphicsCriticalError: |[C0][GFX1-]: Receive IPC close with reason=AbnormalShutdown (t=49.7843) [GFX1-]: Receive IPC close with reason=AbnormalShutdown [task 2018-12-01T06:52:14.458Z] 06:52:14 INFO - GECKO(3370) | [Child 3483, Chrome_ChildThread] WARNING: pipe error (3): Connection reset by peer: file /builds/worker/workspace/build/src/ipc/chromium/src/chrome/common/ipc_channel_posix.cc, line 349 [task 2018-12-01T06:52:14.464Z] 06:52:14 INFO - GECKO(3370) | AddressSanitizer:DEADLYSIGNAL [task 2018-12-01T06:52:14.471Z] 06:52:14 INFO - GECKO(3370) | ================================================================= [task 2018-12-01T06:52:14.472Z] 06:52:14 ERROR - GECKO(3370) | ==3483==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000001 (pc 0x7f37fccac698 bp 0x7f37f8ba82c0 sp 0x7f37f8ba82a0 T2) [task 2018-12-01T06:52:14.476Z] 06:52:14 INFO - GECKO(3370) | ==3483==The signal is caused by a WRITE memory access. [task 2018-12-01T06:52:14.479Z] 06:52:14 INFO - GECKO(3370) | ==3483==Hint: address points to the zero page. [task 2018-12-01T06:52:14.481Z] 06:52:14 INFO - GECKO(3370) | Crash Annotation GraphicsCriticalError: |[C0][GFX1-]: Receive IPC close with reason=AbnormalShutdown (t=50.934) [GFX1-]: Receive IPC close with reason=AbnormalShutdown [task 2018-12-01T06:52:14.483Z] 06:52:14 INFO - GECKO(3370) | [Child 3466, Chrome_ChildThread] WARNING: pipe error (3): Connection reset by peer: file /builds/worker/workspace/build/src/ipc/chromium/src/chrome/common/ipc_channel_posix.cc, line 349 [task 2018-12-01T06:52:14.489Z] 06:52:14 INFO - GECKO(3370) | AddressSanitizer:DEADLYSIGNAL [task 2018-12-01T06:52:14.491Z] 06:52:14 INFO - GECKO(3370) | ================================================================= [task 2018-12-01T06:52:14.493Z] 06:52:14 ERROR - GECKO(3370) | ==3466==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000001 (pc 0x7f88f23ac698 bp 0x7f88ee2a82c0 sp 0x7f88ee2a82a0 T2) [task 2018-12-01T06:52:14.497Z] 06:52:14 INFO - GECKO(3370) | ==3466==The signal is caused by a WRITE memory access. [task 2018-12-01T06:52:14.499Z] 06:52:14 INFO - GECKO(3370) | ==3466==Hint: address points to the zero page. [task 2018-12-01T06:52:19.760Z] 06:52:19 INFO - GECKO(3370) | #0 0x7fa6400ac697 in mozilla::ipc::MessageChannel::OnChannelErrorFromLink() /builds/worker/workspace/build/src/ipc/glue/MessageChannel.cpp:2487:7 [task 2018-12-01T06:52:19.763Z] 06:52:19 INFO - GECKO(3370) | #1 0x7fa6400b0b87 in OnChannelError /builds/worker/workspace/build/src/ipc/glue/MessageLink.cpp:348:10 [task 2018-12-01T06:52:19.765Z] 06:52:19 INFO - GECKO(3370) | #2 0x7fa6400b0b87 in non-virtual thunk to mozilla::ipc::ProcessLink::OnChannelError() /builds/worker/workspace/build/src/ipc/glue/MessageLink.cpp [task 2018-12-01T06:52:19.816Z] 06:52:19 INFO - GECKO(3370) | #0 0x7f16c75ac697 in mozilla::ipc::MessageChannel::OnChannelErrorFromLink() /builds/worker/workspace/build/src/ipc/glue/MessageChannel.cpp:2487:7 [task 2018-12-01T06:52:19.816Z] 06:52:19 INFO - GECKO(3370) | #3 0x7fa64004e3f7 in event_persist_closure /builds/worker/workspace/build/src/ipc/chromium/src/third_party/libevent/event.c:1580:9 [task 2018-12-01T06:52:19.817Z] 06:52:19 INFO - GECKO(3370) | #4 0x7fa64004e3f7 in event_process_active_single_queue /builds/worker/workspace/build/src/ipc/chromium/src/third_party/libevent/event.c:1639 [task 2018-12-01T06:52:19.817Z] 06:52:19 INFO - GECKO(3370) | #1 0x7f16c75b0b87 in OnChannelError /builds/worker/workspace/build/src/ipc/glue/MessageLink.cpp:348:10 [task 2018-12-01T06:52:19.817Z] 06:52:19 INFO - GECKO(3370) | #2 0x7f16c75b0b87 in non-virtual thunk to mozilla::ipc::ProcessLink::OnChannelError() /builds/worker/workspace/build/src/ipc/glue/MessageLink.cpp [task 2018-12-01T06:52:19.822Z] 06:52:19 INFO - GECKO(3370) | #5 0x7fa640046225 in event_process_active /builds/worker/workspace/build/src/ipc/chromium/src/third_party/libevent/event.c [task 2018-12-01T06:52:19.824Z] 06:52:19 INFO - GECKO(3370) | #6 0x7fa640046225 in event_base_loop /builds/worker/workspace/build/src/ipc/chromium/src/third_party/libevent/event.c:1961 [task 2018-12-01T06:52:19.863Z] 06:52:19 INFO - GECKO(3370) | #0 0x7f68f8bac697 in mozilla::ipc::MessageChannel::OnChannelErrorFromLink() /builds/worker/workspace/build/src/ipc/glue/MessageChannel.cpp:2487:7 [task 2018-12-01T06:52:19.863Z] 06:52:19 INFO - GECKO(3370) | #3 0x7f16c754e3f7 in event_persist_closure /builds/worker/workspace/build/src/ipc/chromium/src/third_party/libevent/event.c:1580:9 [task 2018-12-01T06:52:19.864Z] 06:52:19 INFO - GECKO(3370) | #4 0x7f16c754e3f7 in event_process_active_single_queue /builds/worker/workspace/build/src/ipc/chromium/src/third_party/libevent/event.c:1639 [task 2018-12-01T06:52:19.864Z] 06:52:19 INFO - GECKO(3370) | #5 0x7f16c7546225 in event_process_active /builds/worker/workspace/build/src/ipc/chromium/src/third_party/libevent/event.c [task 2018-12-01T06:52:19.864Z] 06:52:19 INFO - GECKO(3370) | #6 0x7f16c7546225 in event_base_loop /builds/worker/workspace/build/src/ipc/chromium/src/third_party/libevent/event.c:1961 [task 2018-12-01T06:52:19.872Z] 06:52:19 INFO - GECKO(3370) | #1 0x7f68f8bb0b87 in OnChannelError /builds/worker/workspace/build/src/ipc/glue/MessageLink.cpp:348:10 [task 2018-12-01T06:52:19.873Z] 06:52:19 INFO - GECKO(3370) | #2 0x7f68f8bb0b87 in non-virtual thunk to mozilla::ipc::ProcessLink::OnChannelError() /builds/worker/workspace/build/src/ipc/glue/MessageLink.cpp [task 2018-12-01T06:52:19.876Z] 06:52:19 INFO - GECKO(3370) | #7 0x7fa6400059e2 in base::MessagePumpLibevent::Run(base::MessagePump::Delegate*) /builds/worker/workspace/build/src/ipc/chromium/src/base/message_pump_libevent.cc:337:7
Looks like bug 1509986. Maybe this ASan trace is more useful?
Blocks: 1509986
Group: javascript-core-security
Keywords: sec-high
Fixed by bug 1480121.
Status: NEW → RESOLVED
Closed: 6 years ago
Resolution: --- → FIXED
Assignee: nobody → jdemooij
status-firefox64: --- → wontfix
status-firefox65: --- → fixed
status-firefox66: --- → fixed
status-firefox-esr60: --- → unaffected
Target Milestone: --- → mozilla66
Group: javascript-core-security → core-security-release
Flags: qe-verify-
Whiteboard: [post-critsmash-triage]
Whiteboard: [post-critsmash-triage] → [post-critsmash-triage][adv-main65+]
Group: core-security-release
You need to log in before you can comment on or make changes to this bug.