1538273 - Intermittent GECKO(2784) | SUMMARY: AddressSanitizer: heap-use-after-free z:\build\build\src\dom\localstorage\ActorsParent.cpp:7868 in mozilla::dom::`anonymous namespace'::QuotaClient::AbortOperations

Status: RESOLVED FIXED

(Core :: Storage: localStorage & sessionStorage, defect, P2)

Description

[Treeherder Bug Filer]

#[markdown(off)]
Filed by: aciure [at] mozilla.com

https://treeherder.mozilla.org/logviewer.html#?job_id=235486232&repo=autoland

https://queue.taskcluster.net/v1/task/WcCsXKwpRgmTufbWlYpulA/runs/0/artifacts/public/logs/live_backing.log

15:32:57 INFO - GECKO(2784) | MEMORY STAT | vsize 19405149MB | vsizeMaxContiguous 65992984MB | residentFast 1246MB
15:32:57 INFO - TEST-OK | dom/base/test/chrome/test_windowroot.xul | took 135ms
15:32:57 INFO - TEST-START | Shutdown
15:32:57 INFO - Passed: 16340
15:32:57 INFO - Failed: 0
15:32:57 INFO - Todo: 6
15:32:57 INFO - Mode: non-e10s
15:32:57 INFO - Slowest: 9005ms - chrome://mochitests/content/chrome/dom/base/test/chrome/test_swapFrameLoaders.xul
15:32:57 INFO - SimpleTest FINISHED
15:32:57 INFO - TEST-INFO | Ran 1 Loops
15:32:57 INFO - SimpleTest FINISHED
15:33:28 INFO - GECKO(2784) | =================================================================
15:33:28 ERROR - GECKO(2784) | ==9500==ERROR: AddressSanitizer: heap-use-after-free on address 0x114319443e86 at pc 0x7ff868df4e83 bp 0x0007ec9f9c00 sp 0x0007ec9f9c48
15:33:28 INFO - GECKO(2784) | READ of size 1 at 0x114319443e86 thread T26
15:33:28 INFO - GECKO(2784) | #0 0x7ff868df4e82 in mozilla::dom::`anonymous namespace'::QuotaClient::AbortOperations z:\build\build\src\dom\localstorage\ActorsParent.cpp:7868
15:33:28 INFO - GECKO(2784) | #1 0x7ff867d91fa4 in mozilla::dom::quota::QuotaManager::ShutdownTimerCallback(class nsITimer *,void *) z:\build\build\src\dom\quota\ActorsParent.cpp:5934
15:33:28 INFO - GECKO(2784) | #2 0x7ff85ed241c4 in nsTimerImpl::Fire(int) z:\build\build\src\xpcom\threads\nsTimerImpl.cpp:559
15:33:28 INFO - GECKO(2784) | #3 0x7ff85ed23755 in nsTimerEvent::Run(void) z:\build\build\src\xpcom\threads\TimerThread.cpp:260
15:33:28 INFO - GECKO(2784) | #4 0x7ff85ed3a680 in nsThread::ProcessNextEvent(bool,bool *) z:\build\build\src\xpcom\threads\nsThread.cpp:1180
15:33:28 INFO - GECKO(2784) | #5 0x7ff85ed42518 in NS_ProcessNextEvent(class nsIThread *,bool) z:\build\build\src\xpcom\threads\nsThreadUtils.cpp:482
15:33:28 INFO - GECKO(2784) | #6 0x7ff868df552d in mozilla::dom::`anonymous namespace'::QuotaClient::ShutdownWorkThreads z:\build\build\src\dom\localstorage\ActorsParent.cpp:7928
15:33:28 INFO - GECKO(2784) | #7 0x7ff867d8e2a1 in mozilla::dom::quota::QuotaManager::Shutdown(void) z:\build\build\src\dom\quota\ActorsParent.cpp:3265
15:33:28 INFO - GECKO(2784) | #8 0x7ff867d834c2 in mozilla::dom::quota::QuotaManager::ShutdownInstance(void) z:\build\build\src\dom\quota\ActorsParent.cpp:2877
15:33:28 INFO - GECKO(2784) | #9 0x7ff867d833f8 in mozilla::dom::quota::RecvShutdownQuotaManager(void) z:\build\build\src\dom\quota\ActorsParent.cpp:2243
15:33:28 INFO - GECKO(2784) | #10 0x7ff85fda13e5 in mozilla::ipc::BackgroundParentImpl::RecvShutdownQuotaManager(void) z:\build\build\src\ipc\glue\BackgroundParentImpl.cpp:995
15:33:28 INFO - GECKO(2784) | #11 0x7ff860763564 in mozilla::ipc::PBackgroundParent::OnMessageReceived(class IPC::Message const &) z:\build\build\src\obj-firefox\ipc\ipdl\PBackgroundParent.cpp:2730
15:33:28 INFO - GECKO(2784) | #12 0x7ff85fe23252 in mozilla::ipc::MessageChannel::DispatchAsyncMessage(class IPC::Message const &) z:\build\build\src\ipc\glue\MessageChannel.cpp:2151
15:33:28 INFO - GECKO(2784) | #13 0x7ff85fe1fd81 in ?DispatchMessage@MessageChannel@ipc@mozilla@@AEAAX$$QEAVMessage@IPC@@@Z z:\build\build\src\ipc\glue\MessageChannel.cpp:2078
15:33:28 INFO - GECKO(2784) | #14 0x7ff85fe21b24 in mozilla::ipc::MessageChannel::RunMessage(class mozilla::ipc::MessageChannel::MessageTask &) z:\build\build\src\ipc\glue\MessageChannel.cpp:1937
15:33:28 INFO - GECKO(2784) | #15 0x7ff85fe221d5 in mozilla::ipc::MessageChannel::MessageTask::Run(void) z:\build\build\src\ipc\glue\MessageChannel.cpp:1968
15:33:28 INFO - GECKO(2784) | #16 0x7ff85ed3a680 in nsThread::ProcessNextEvent(bool,bool *) z:\build\build\src\xpcom\threads\nsThread.cpp:1180
15:33:28 INFO - GECKO(2784) | #17 0x7ff85ed42518 in NS_ProcessNextEvent(class nsIThread *,bool) z:\build\build\src\xpcom\threads\nsThreadUtils.cpp:482
15:33:28 INFO - GECKO(2784) | #18 0x7ff85fe2c66e in mozilla::ipc::MessagePumpForNonMainThreads::Run(class base::MessagePump::Delegate *) z:\build\build\src\ipc\glue\MessagePump.cpp:333
15:33:28 INFO - GECKO(2784) | #19 0x7ff85fd7868e in MessageLoop::RunHandler(void) z:\build\build\src\ipc\chromium\src\base\message_loop.cc:308
15:33:28 INFO - GECKO(2784) | #20 0x7ff85fd78425 in MessageLoop::Run(void) z:\build\build\src\ipc\chromium\src\base\message_loop.cc:290
15:33:28 INFO - GECKO(2784) | #21 0x7ff85ed33046 in nsThread::ThreadFunc(void *) z:\build\build\src\xpcom\threads\nsThread.cpp:454
15:33:28 INFO - GECKO(2784) | #22 0x7ff89c1f561d in _PR_NativeRunThread z:\build\build\src\nsprpub\pr\src\threads\combined\pruthr.c:397
15:33:28 INFO - GECKO(2784) | #23 0x7ff89c1c47b4 in pr_root z:\build\build\src\nsprpub\pr\src\md\windows\w95thred.c:137
15:33:28 INFO - GECKO(2784) | #24 0x7ff8b1b6c4bd (C:\Windows\System32\ucrtbase.dll+0x18001c4bd)

Comment 1

[Intermittent Failures Robot]

1 failures in 2561 pushes (0.0 failures/push) were associated with this bug in the last 7 days.

Repository breakdown:

• autoland: 1

Platform breakdown:

• windows10-64: 1

For more details, see:
https://treeherder.mozilla.org/intermittent-failures.html#/bugdetails?bug=1538273&startday=2019-03-18&endday=2019-03-24&tree=all

Comment 2

[Jan Varga [:janv]]

I believe this will be fixed by patch in bug 1533789.
It's almost the same problem as in bug 1534536.

Comment 3

[Jan Varga [:janv]]

This is now fixed by patch in bug 1533789.
There are no intermittent failures since Mar 23 which correlates with patch landing:
https://treeherder.mozilla.org/intermittent-failures.html#/bugdetails?bug=1538273&startday=2019-03-18&endday=2019-04-01&tree=all