Closed Bug 1538621 Opened 2 years ago Closed 2 years ago

Intermittent PID 17717 | SUMMARY: AddressSanitizer: stack-use-after-scope /builds/worker/workspace/moz-toolchain/src/llvm/projects/compiler-rt/lib/asan/asan_interceptors_memintrinsics.cc:23:3 in __asan_memcpy

Categories

(Core :: Security: PSM, defect, P1)

defect

Tracking

()

RESOLVED FIXED
mozilla68
Tracking Status
firefox-esr60 --- unaffected
firefox66 --- unaffected
firefox67 --- unaffected
firefox68 + fixed

People

(Reporter: intermittent-bug-filer, Assigned: Waldo)

References

(Blocks 1 open bug)

Details

(Keywords: assertion, intermittent-failure, regression)

Attachments

(1 file)

47 bytes, text/x-phabricator-request
Details | Review

#[markdown(off)]
Filed by: apavel [at] mozilla.com

https://treeherder.mozilla.org/logviewer.html#?job_id=235784329&repo=autoland

https://queue.taskcluster.net/v1/task/ApI3CZS0RGS4MqoLqZttxQ/runs/0/artifacts/public/logs/live_backing.log

task 2019-03-25T04:14:28.899Z] 04:14:28 INFO - TEST-START | /webdriver/tests/get_window_handles/get.py
[task 2019-03-25T04:14:29.137Z] 04:14:29 INFO - STDOUT: ============================= test session starts ==============================
[task 2019-03-25T04:14:29.137Z] 04:14:29 INFO - STDOUT: platform linux2 -- Python 2.7.12, pytest-unknown, py-1.5.2, pluggy-0.5.3.dev -- /builds/worker/workspace/build/venv/bin/python
[task 2019-03-25T04:14:29.138Z] 04:14:29 INFO - STDOUT: rootdir: /builds/worker/workspace/build, inifile:
[task 2019-03-25T04:14:29.138Z] 04:14:29 INFO - STDOUT: collecting ...
[task 2019-03-25T04:14:29.154Z] 04:14:29 INFO - STDOUT: collected 3 items
[task 2019-03-25T04:14:29.156Z] 04:14:29 INFO - STDOUT: tests/web-platform/tests/webdriver/tests/get_window_handles/get.py::test_no_browsing_context

task 2019-03-25T04:14:37.491Z] 04:14:37 INFO - PID 17717 | 1553487277477 geckodriver::marionette DEBUG Connection established on 127.0.0.1:2828. Waiting for Marionette handshake
[task 2019-03-25T04:14:37.552Z] 04:14:37 INFO - PID 17717 | =================================================================
[task 2019-03-25T04:14:37.553Z] 04:14:37 ERROR - PID 17717 | ==17724==ERROR: AddressSanitizer: stack-use-after-scope on address 0x7f08a21c3b20 at pc 0x55b36787fa36 bp 0x7f08b5b568a0 sp 0x7f08b5b56050
[task 2019-03-25T04:14:37.553Z] 04:14:37 INFO - PID 17717 | READ of size 83 at 0x7f08a21c3b20 thread T10 (Socket Thread)
[task 2019-03-25T04:14:37.554Z] 04:14:37 INFO - PID 17717 | 1553487277549 Marionette DEBUG Accepted connection 0 from 127.0.0.1:54202
[task 2019-03-25T04:14:37.763Z] 04:14:37 INFO - PID 17717 | #0 0x55b36787fa35 in __asan_memcpy /builds/worker/workspace/moz-toolchain/src/llvm/projects/compiler-rt/lib/asan/asan_interceptors_memintrinsics.cc:23:3
[task 2019-03-25T04:14:38.147Z] 04:14:38 INFO - PID 17717 | #1 0x7f08beecd548 in NS_CopySegmentToBuffer /builds/worker/workspace/build/src/xpcom/io/nsStreamUtils.cpp:720:3
[task 2019-03-25T04:14:38.149Z] 04:14:38 INFO - PID 17717 | #2 0x7f08beecd548 in ReadSegments /builds/worker/workspace/build/src/xpcom/io/nsStringStream.cpp:261
[task 2019-03-25T04:14:38.149Z] 04:14:38 INFO - PID 17717 | #3 0x7f08beecd548 in nsStringInputStream::Read(char*, unsigned int, unsigned int*) /builds/worker/workspace/build/src/xpcom/io/nsStringStream.cpp:236
[task 2019-03-25T04:14:38.150Z] 04:14:38 INFO - PID 17717 | #4 0x7f08beea650e in nsMultiplexInputStream::Read(char*, unsigned int, unsigned int*) /builds/worker/workspace/build/src/xpcom/io/nsMultiplexInputStream.cpp:415:44
[task 2019-03-25T04:14:38.166Z] 04:14:38 INFO - PID 17717 | #5 0x7f08bf12feb8 in nsBufferedInputStream::Fill() /builds/worker/workspace/build/src/netwerk/base/nsBufferedStreams.cpp:487:18
[task 2019-03-25T04:14:38.166Z] 04:14:38 INFO - PID 17717 | #6 0x7f08bf130308 in ReadSegments /builds/worker/workspace/build/src/netwerk/base/nsBufferedStreams.cpp:450:12
[task 2019-03-25T04:14:38.167Z] 04:14:38 INFO - PID 17717 | #7 0x7f08bf130308 in non-virtual thunk to nsBufferedInputStream::ReadSegments(nsresult (*)(nsIInputStream*, void*, char const*, unsigned int, unsigned int, unsigned int*), void*, unsigned int, unsigned int*) /builds/worker/workspace/build/src/netwerk/base/nsBufferedStreams.cpp
[task 2019-03-25T04:14:38.207Z] 04:14:38 INFO - PID 17717 | #8 0x7f08bfbee96f in mozilla::net::nsHttpTransaction::ReadSegments(mozilla::net::nsAHttpSegmentReader*, unsigned int, unsigned int*) /builds/worker/workspace/build/src/netwerk/protocol/http/nsHttpTransaction.cpp:745:23
[task 2019-03-25T04:14:38.208Z] 04:14:38 INFO - PID 17717 | #9 0x7f08bfb88bf3 in mozilla::net::nsHttpConnection::OnSocketWritable() /builds/worker/workspace/build/src/netwerk/protocol/http/nsHttpConnection.cpp:1916:26
[task 2019-03-25T04:14:38.208Z] 04:14:38 INFO - PID 17717 | #10 0x7f08bfb8add3 in OnOutputStreamReady /builds/worker/workspace/build/src/netwerk/protocol/http/nsHttpConnection.cpp:2439:17
[task 2019-03-25T04:14:38.209Z] 04:14:38 INFO - PID 17717 | #11 0x7f08bfb8add3 in mozilla::net::nsHttpConnection::Activate(mozilla::net::nsAHttpTransaction*, unsigned int, int) /builds/worker/workspace/build/src/netwerk/protocol/http/nsHttpConnection.cpp:840
[task 2019-03-25T04:14:38.210Z] 04:14:38 INFO - PID 17717 | #12 0x7f08bfbbdea8 in mozilla::net::nsHttpConnectionMgr::DispatchAbstractTransaction(mozilla::net::nsHttpConnectionMgr::nsConnectionEntry*, mozilla::net::nsAHttpTransaction*, unsigned int, mozilla::net::nsHttpConnection*, int) /builds/worker/workspace/build/src/netwerk/protocol/http/nsHttpConnectionMgr.cpp:1840:14
[task 2019-03-25T04:14:38.210Z] 04:14:38 INFO - PID 17717 | #13 0x7f08bfbbcb97 in mozilla::net::nsHttpConnectionMgr::DispatchTransaction(mozilla::net::nsHttpConnectionMgr::nsConnectionEntry*, mozilla::net::nsHttpTransaction*, mozilla::net::nsHttpConnection*) /builds/worker/workspace/build/src/netwerk/protocol/http/nsHttpConnectionMgr.cpp:1766:8
[task 2019-03-25T04:14:38.212Z] 04:14:38 INFO - PID 17717 | #14 0x7f08bfbbd9d1 in mozilla::net::nsHttpConnectionMgr::TryDispatchTransactionOnIdleConn(mozilla::net::nsHttpConnectionMgr::nsConnectionEntry*, mozilla::net::nsHttpConnectionMgr::PendingTransactionInfo*, bool, bool*) /builds/worker/workspace/build/src/netwerk/protocol/http/nsHttpConnectionMgr.cpp:1722:19
[task 2019-03-25T04:14:38.213Z] 04:14:38 INFO - PID 17717 | #15 0x7f08bfbb09cc in mozilla::net::nsHttpConnectionMgr::TryDispatchTransaction(mozilla::net::nsHttpConnectionMgr::nsConnectionEntry*, bool, mozilla::net::nsHttpConnectionMgr::PendingTransactionInfo*) /builds/worker/workspace/build/src/netwerk/protocol/http/nsHttpConnectionMgr.cpp:1601:19
[task 2019-03-25T04:14:38.214Z] 04:14:38 INFO - PID 17717 | #16 0x7f08bfbafae9 in mozilla::net::nsHttpConnectionMgr::DispatchPendingQ(nsTArray<RefPtr<mozilla::net::nsHttpConnectionMgr::PendingTransactionInfo> >&, mozilla::net::nsHttpConnectionMgr::nsConnectionEntry*, bool) /builds/worker/workspace/build/src/netwerk/protocol/http/nsHttpConnectionMgr.cpp:980:10
[task 2019-03-25T04:14:38.216Z] 04:14:38 INFO - PID 17717 | #17 0x7f08bfbb4b5c in mozilla::net::nsHttpConnectionMgr::ProcessPendingQForEntry(mozilla::net::nsHttpConnectionMgr::nsConnectionEntry*, bool) /builds/worker/workspace/build/src/netwerk/protocol/http/nsHttpConnectionMgr.cpp:1190:29
[task 2019-03-25T04:14:38.216Z] 04:14:38 INFO - PID 17717 | #18 0x7f08bfba9d73 in mozilla::net::nsHttpConnectionMgr::OnMsgProcessPendingQ(int, mozilla::net::ARefBase*) /builds/worker/workspace/build/src/netwerk/protocol/http/nsHttpConnectionMgr.cpp:2536:16
[task 2019-03-25T04:14:38.218Z] 04:14:38 INFO - PID 17717 | #19 0x7f08bfba8cfe in mozilla::net::nsHttpConnectionMgr::OnMsgReclaimConnection(int, mozilla::net::ARefBase*) /builds/worker/workspace/build/src/netwerk/protocol/http/nsHttpConnectionMgr.cpp:2854:3
[task 2019-03-25T04:14:38.219Z] 04:14:38 INFO - PID 17717 | #20 0x7f08bfbd06af in mozilla::net::nsHttpConnectionMgr::nsHalfOpenSocket::SetupConn(nsIAsyncOutputStream*, bool) /builds/worker/workspace/build/src/netwerk/protocol/http/nsHttpConnectionMgr.cpp:4880:32
[task 2019-03-25T04:14:38.220Z] 04:14:38 INFO - PID 17717 | #21 0x7f08bfbce5eb in mozilla::net::nsHttpConnectionMgr::nsHalfOpenSocket::OnOutputStreamReady(nsIAsyncOutputStream*) /builds/worker/workspace/build/src/netwerk/protocol/http/nsHttpConnectionMgr.cpp:4417:17
[task 2019-03-25T04:14:38.224Z] 04:14:38 INFO - PID 17717 | #22 0x7f08bf1e4398 in mozilla::net::nsSocketOutputStream::OnSocketReady(nsresult) /builds/worker/workspace/build/src/netwerk/base/nsSocketTransport2.cpp:514:27
[task 2019-03-25T04:14:38.225Z] 04:14:38 INFO - PID 17717 | #23 0x7f08bf1f1348 in mozilla::net::nsSocketTransport::OnSocketReady(PRFileDesc*, short) /builds/worker/workspace/build/src/netwerk/base/nsSocketTransport2.cpp:2195:15
[task 2019-03-25T04:14:38.225Z] 04:14:38 INFO - PID 17717 | #24 0x7f08bf202381 in mozilla::net::nsSocketTransportService::DoPollIteration(mozilla::BaseTimeDuration<mozilla::TimeDurationValueCalculator>*) /builds/worker/workspace/build/src/netwerk/base/nsSocketTransportService2.cpp
[task 2019-03-25T04:14:38.227Z] 04:14:38 INFO - PID 17717 | #25 0x7f08bf200515 in mozilla::net::nsSocketTransportService::Run() /builds/worker/workspace/build/src/netwerk/base/nsSocketTransportService2.cpp:973:7
[task 2019-03-25T04:14:38.227Z] 04:14:38 INFO - PID 17717 | #26 0x7f08bf2029fc in non-virtual thunk to mozilla::net::nsSocketTransportService::Run() /builds/worker/workspace/build/src/netwerk/base/nsSocketTransportService2.cpp
[task 2019-03-25T04:14:38.235Z] 04:14:38 INFO - PID 17717 | #27 0x7f08bef623a9 in nsThread::ProcessNextEvent(bool, bool*) /builds/worker/workspace/build/src/xpcom/threads/nsThread.cpp:1180:14
[task 2019-03-25T04:14:38.235Z] 04:14:38 INFO - PID 17717 | #28 0x7f08bef68b48 in NS_ProcessNextEvent(nsIThread*, bool) /builds/worker/workspace/build/src/xpcom/threads/nsThreadUtils.cpp:482:10
[task 2019-03-25T04:14:38.251Z] 04:14:38 INFO - PID 17717 | #29 0x7f08bff2a93a in mozilla::ipc::MessagePumpForNonMainThreads::Run(base::MessagePump::Delegate*) /builds/worker/workspace/build/src/ipc/glue/MessagePump.cpp:303:20
[task 2019-03-25T04:14:38.251Z] 04:14:38 INFO - PID 17717 | #30 0x7f08bfe5c0df in RunInternal /builds/worker/workspace/build/src/ipc/chromium/src/base/message_loop.cc:315:10
[task 2019-03-25T04:14:38.253Z] 04:14:38 INFO - PID 17717 | #31 0x7f08bfe5c0df in RunHandler /builds/worker/workspace/build/src/ipc/chromium/src/base/message_loop.cc:308
[task 2019-03-25T04:14:38.253Z] 04:14:38 INFO - PID 17717 | #32 0x7f08bfe5c0df in MessageLoop::Run() /builds/worker/workspace/build/src/ipc/chromium/src/base/message_loop.cc:290
[task 2019-03-25T04:14:38.254Z] 04:14:38 INFO - PID 17717 | #33 0x7f08bef5c37a in nsThread::ThreadFunc(void*) /builds/worker/workspace/build/src/xpcom/threads/nsThread.cpp:454:11
[task 2019-03-25T04:14:38.256Z] 04:14:38 INFO - PID 17717 | #34 0x7f08dfc225ad in _pt_root /builds/worker/workspace/build/src/nsprpub/pr/src/pthreads/ptthread.c:201:5
[task 2019-03-25T04:14:38.257Z] 04:14:38 INFO - PID 17717 | #35 0x7f08df8696b9 in start_thread (/lib/x86_64-linux-gnu/libpthread.so.0+0x76b9)
[task 2019-03-25T04:14:38.318Z] 04:14:38 INFO - PID 17717 | #36 0x7f08de8f241c in clone /build/glibc-LK5gWL/glibc-2.23/misc/../sysdeps/unix/sysv/linux/x86_64/clone.S:109
[task 2019-03-25T04:14:38.319Z] 04:14:38 INFO - PID 17717 |
[task 2019-03-25T04:14:38.319Z] 04:14:38 INFO - PID 17717 | Address 0x7f08a21c3b20 is located in stack of thread T57 (SSL Cert #1) at offset 3328 in frame
[task 2019-03-25T04:14:38.407Z] 04:14:38 INFO - PID 17717 | #0 0x7f08db3cc7af in sqlite3VdbeExec /builds/worker/workspace/build/src/db/sqlite3/src/sqlite3.c:83948
[task 2019-03-25T04:14:38.407Z] 04:14:38 INFO - PID 17717 |
[task 2019-03-25T04:14:38.408Z] 04:14:38 INFO - PID 17717 | This frame has 75 object(s):
[task 2019-03-25T04:14:38.408Z] 04:14:38 INFO - PID 17717 | [32, 40) 'rValue.i12937' (line 83547)
[task 2019-03-25T04:14:38.408Z] 04:14:38 INFO - PID 17717 | [64, 72) 'iValue.i12938' (line 83548)
[task 2019-03-25T04:14:38.409Z] 04:14:38 INFO - PID 17717 | [96, 104) 'rValue.i12704' (line 83547)
[task 2019-03-25T04:14:38.409Z] 04:14:38 INFO - PID 17717 | [128, 136) 'iValue.i12705' (line 83548)
[task 2019-03-25T04:14:38.409Z] 04:14:38 INFO - PID 17717 | [160, 168) 'rValue.i12672' (line 83547)
[task 2019-03-25T04:14:38.410Z] 04:14:38 INFO - PID 17717 | [192, 200) 'iValue.i12673' (line 83548)
[task 2019-03-25T04:14:38.410Z] 04:14:38 INFO - PID 17717 | [224, 232) 'rValue.i12640' (line 83547)
[task 2019-03-25T04:14:38.411Z] 04:14:38 INFO - PID 17717 | [256, 264) 'iValue.i12641' (line 83548)
[task 2019-03-25T04:14:38.411Z] 04:14:38 INFO - PID 17717 | [288, 360) 'b.i.i' (line 74162)
[task 2019-03-25T04:14:38.412Z] 04:14:38 INFO - PID 17717 | [400, 408) 'nByte.i.i' (line 74169)
[task 2019-03-25T04:14:38.412Z] 04:14:38 INFO - PID 17717 | [432, 440) 'sz.i11904' (line 133802)
[task 2019-03-25T04:14:38.412Z] 04:14:38 INFO - PID 17717 | [464, 472) 'rValue.i11569' (line 83547)
[task 2019-03-25T04:14:38.413Z] 04:14:38 INFO - PID 17717 | [496, 504) 'iValue.i11570' (line 83548)
[task 2019-03-25T04:14:38.413Z] 04:14:38 INFO - PID 17717 | [528, 536) 'v64.i10615' (line 31218)
[task 2019-03-25T04:14:38.414Z] 04:14:38 INFO - PID 17717 | [560, 568) 'v64.i' (line 31218)
[task 2019-03-25T04:14:38.414Z] 04:14:38 INFO - PID 17717 | [592, 600) 'rValue.i10327' (line 83547)
[task 2019-03-25T04:14:38.415Z] 04:14:38 INFO - PID 17717 | [624, 632) 'iValue.i10328' (line 83548)
[task 2019-03-25T04:14:38.415Z] 04:14:38 INFO - PID 17717 | [656, 664) 'rValue.i' (line 83547)
[task 2019-03-25T04:14:38.417Z] 04:14:38 INFO - PID 17717 | [688, 696) 'iValue.i' (line 83548)
[task 2019-03-25T04:14:38.417Z] 04:14:38 INFO - PID 17717 | [720, 728) 'y.i' (line 30189)
[task 2019-03-25T04:14:38.418Z] 04:14:38 INFO - PID 17717 | [752, 760) 'z.i10184' (line 30190)
[task 2019-03-25T04:14:38.419Z] 04:14:38 INFO - PID 17717 | [784, 788) 'res.i' (line 94127)
[task 2019-03-25T04:14:38.420Z] 04:14:38 INFO - PID 17717 | [800, 808) 'v64.i.i9469' (line 31218)
[task 2019-03-25T04:14:38.421Z] 04:14:38 INFO - PID 17717 | [832, 840) 'v64.i76.i' (line 31218)
[task 2019-03-25T04:14:38.421Z] 04:14:38 INFO - PID 17717 | [864, 872) 'v64.i.i' (line 31218)
[task 2019-03-25T04:14:38.423Z] 04:14:38 INFO - PID 17717 | [896, 952) 'm.i9410' (line 80756)
[task 2019-03-25T04:14:38.424Z] 04:14:38 INFO - PID 17717 | [992, 1048) 'v.i9411' (line 80756)
[task 2019-03-25T04:14:38.424Z] 04:14:38 INFO - PID 17717 | [1088, 1144) 'm.i' (line 80838)
[task 2019-03-25T04:14:38.426Z] 04:14:38 INFO - PID 17717 | [1184, 1192) 'pDbPage.i154.i.i' (line 65115)
[task 2019-03-25T04:14:38.426Z] 04:14:38 INFO - PID 17717 | [1216, 1224) 'pDbPage.i111.i.i' (line 65115)
[task 2019-03-25T04:14:38.427Z] 04:14:38 INFO - PID 17717 | [1248, 1256) 'pDbPage.i.i.i' (line 65115)
[task 2019-03-25T04:14:38.428Z] 04:14:38 INFO - PID 17717 | [1280, 1281) 'ePtrmapType.i.i' (line 72576)
[task 2019-03-25T04:14:38.429Z] 04:14:38 INFO - PID 17717 | [1296, 1300) 'iPtrmapParent.i.i' (line 72577)
[task 2019-03-25T04:14:38.429Z] 04:14:38 INFO - PID 17717 | [1312, 1408) 'sCheck.i' (line 73004)
[task 2019-03-25T04:14:38.430Z] 04:14:38 INFO - PID 17717 | [1440, 1540) 'zErr.i' (line 73007)
[task 2019-03-25T04:14:38.431Z] 04:14:38 INFO - PID 17717 | [1584, 1592) 'notUsed.i' (line 73075)
[task 2019-03-25T04:14:38.432Z] 04:14:38 INFO - PID 17717 | [1616, 1640) 'head.i35.i' (line 50051)
[task 2019-03-25T04:14:38.432Z] 04:14:38 INFO - PID 17717 | [1680, 1704) 'head.i.i9007' (line 50051)
[task 2019-03-25T04:14:38.434Z] 04:14:38 INFO - PID 17717 | [1744, 1752) 'pList.addr.i162.i' (line 50189)
[task 2019-03-25T04:14:38.437Z] 04:14:38 INFO - PID 17717 | [1776, 1800) 'head.i132.i' (line 50051)
[task 2019-03-25T04:14:38.437Z] 04:14:38 INFO - PID 17717 | [1840, 1848) 'pList.addr.i.i' (line 50189)
[task 2019-03-25T04:14:38.438Z] 04:14:38 INFO - PID 17717 | [1872, 1896) 'head.i99.i' (line 50051)
[task 2019-03-25T04:14:38.439Z] 04:14:38 INFO - PID 17717 | [1936, 1960) 'head.i.i' (line 50051)
[task 2019-03-25T04:14:38.439Z] 04:14:38 INFO - PID 17717 | [2000, 2320) 'aBucket.i.i' (line 50084)
[task 2019-03-25T04:14:38.440Z] 04:14:38 INFO - PID 17717 | [2384, 2392) 'pAux.i' (line 50271)
[task 2019-03-25T04:14:38.441Z] 04:14:38 INFO - PID 17717 | [2416, 2424) 'pTail.i' (line 50271)
[task 2019-03-25T04:14:38.441Z] 04:14:38 INFO - PID 17717 | [2448, 2504) 'ctx.i8754' (line 74643)
[task 2019-03-25T04:14:38.443Z] 04:14:38 INFO - PID 17717 | [2544, 2600) 'ctx.i' (line 74613)
[task 2019-03-25T04:14:38.443Z] 04:14:38 INFO - PID 17717 | [2640, 2696) 't.i' (line 74614)
[task 2019-03-25T04:14:38.444Z] 04:14:38 INFO - PID 17717 | [2736, 2744) 'sz.i.i8622' (line 54009)
[task 2019-03-25T04:14:38.445Z] 04:14:38 INFO - PID 17717 | [2768, 2772) 'logexists.i' (line 58067)
[task 2019-03-25T04:14:38.447Z] 04:14:38 INFO - PID 17717 | [2784, 2840) 'sMem' (line 85834)
[task 2019-03-25T04:14:38.447Z] 04:14:38 INFO - PID 17717 | [2880, 2884) 'iMeta' (line 86607)
[task 2019-03-25T04:14:38.449Z] 04:14:38 INFO - PID 17717 | [2896, 2900) 'res2720' (line 87272)
[task 2019-03-25T04:14:38.449Z] 04:14:38 INFO - PID 17717 | [2912, 2936) 'r2722' (line 87275)
[task 2019-03-25T04:14:38.450Z] 04:14:38 INFO - PID 17717 | [2976, 2980) 'res2937' (line 87569)
[task 2019-03-25T04:14:38.450Z] 04:14:38 INFO - PID 17717 | [2992, 3016) 'r2938' (line 87572)
[task 2019-03-25T04:14:38.452Z] 04:14:38 INFO - PID 17717 | [3056, 3060) 'res3051'
[task 2019-03-25T04:14:38.453Z] 04:14:38 INFO - PID 17717 | [3072, 3080) 'v' (line 87780)
[task 2019-03-25T04:14:38.453Z] 04:14:38 INFO - PID 17717 | [3104, 3108) 'res3121' (line 87782)
[task 2019-03-25T04:14:38.455Z] 04:14:38 INFO - PID 17717 | [3120, 3168) 'x' (line 87943)
[task 2019-03-25T04:14:38.455Z] 04:14:38 INFO - PID 17717 | [3200, 3208) 'v3520' (line 88303)
[task 2019-03-25T04:14:38.458Z] 04:14:38 INFO - PID 17717 | [3232, 3236) 'res3593' (line 88392)
[task 2019-03-25T04:14:38.458Z] 04:14:38 INFO - PID 17717 | [3248, 3296) 'x3748' (line 88676)
[task 2019-03-25T04:14:38.458Z] 04:14:38 INFO - PID 17717 | [3328, 3332) 'res3821' (line 88718) <== Memory access at offset 3328 partially overflows this variable
[task 2019-03-25T04:14:38.459Z] 04:14:38 INFO - PID 17717 | [3344, 3368) 'r3822' (line 88719) <== Memory access at offset 3328 partially underflows this variable
[task 2019-03-25T04:14:38.459Z] 04:14:38 INFO - PID 17717 | [3408, 3432) 'r3910' (line 88879) <== Memory access at offset 3328 partially underflows this variable
[task 2019-03-25T04:14:38.461Z] 04:14:38 INFO - PID 17717 | [3472, 3476) 'nChange3993' (line 89004)
[task 2019-03-25T04:14:38.461Z] 04:14:38 INFO - PID 17717 | [3488, 3492) 'pgno' (line 89060)
[task 2019-03-25T04:14:38.467Z] 04:14:38 INFO - PID 17717 | [3504, 3536) 'initData' (line 89104)
[task 2019-03-25T04:14:38.468Z] 04:14:38 INFO - PID 17717 | [3568, 3580) 'aRes' (line 89936)
[task 2019-03-25T04:14:38.469Z] 04:14:38 INFO - PID 17717 | [3600, 3656) 'sMem5046' (line 90198)
[task 2019-03-25T04:14:38.470Z] 04:14:38 INFO - PID 17717 | [3696, 3704) 'pVCur5079' (line 90245)
[task 2019-03-25T04:14:38.471Z] 04:14:38 INFO - PID 17717 | [3728, 3784) 'sContext' (line 90363)
[task 2019-03-25T04:14:38.471Z] 04:14:38 INFO - PID 17717 | [3824, 3832) 'rowid5314' (line 90515)
[task 2019-03-25T04:14:38.473Z] 04:14:38 INFO - PID 17717 | HINT: this may be a false positive if your program uses some custom stack unwind mechanism, swapcontext or vfork
[task 2019-03-25T04:14:38.474Z] 04:14:38 INFO - PID 17717 | (longjmp and C++ exceptions *are* supported)
[task 2019-03-25T04:14:38.476Z] 04:14:38 INFO - PID 17717 | Thread T57 (SSL Cert #1) created by T10 (Socket Thread) here:
[task 2019-03-25T04:14:38.476Z] 04:14:38 INFO - PID 17717 | #0 0x55b36786929d in pthread_create /builds/worker/workspace/moz-toolchain/src/llvm/projects/compiler-rt/lib/asan/asan_interceptors.cc:210:3
[task 2019-03-25T04:14:38.478Z] 04:14:38 INFO - PID 17717 | #1 0x7f08dfc14613 in _PR_CreateThread /builds/worker/workspace/build/src/nsprpub/pr/src/pthreads/ptthread.c:433:14
[task 2019-03-25T04:14:38.480Z] 04:14:38 INFO - PID 17717 | #2 0x7f08dfbfe09e in PR_CreateThread /builds/worker/workspace/build/src/nsprpub/pr/src/pthreads/ptthread.c:518:12
[task 2019-03-25T04:14:38.480Z] 04:14:38 INFO - PID 17717 | #3 0x7f08bef5e699 in nsThread::Init(nsTSubstring<char> const&) /builds/worker/workspace/build/src/xpcom/threads/nsThread.cpp:661:8
[task 2019-03-25T04:14:38.482Z] 04:14:38 INFO - PID 17717 | #4 0x7f08bef67c90 in nsThreadManager::NewNamedThread(nsTSubstring<char> const&, unsigned int, nsIThread**) /builds/worker/workspace/build/src/xpcom/threads/nsThreadManager.cpp:416:12
[task 2019-03-25T04:14:38.483Z] 04:14:38 INFO - PID 17717 | #5 0x7f08bef6b9f9 in NS_NewNamedThread(nsTSubstring<char> const&, nsIThread**, nsIRunnable*, unsigned int) /builds/worker/workspace/build/src/xpcom/threads/nsThreadUtils.cpp:135:57
[task 2019-03-25T04:14:38.484Z] 04:14:38 INFO - PID 17717 | #6 0x7f08bef6b42b in nsThreadPool::PutEvent(already_AddRefed<nsIRunnable>, unsigned int) /builds/worker/workspace/build/src/xpcom/threads/nsThreadPool.cpp:111:17
[task 2019-03-25T04:14:38.485Z] 04:14:38 INFO - PID 17717 | #7 0x7f08bef6d3ab in nsThreadPool::Dispatch(already_AddRefed<nsIRunnable>, unsigned int) /builds/worker/workspace/build/src/xpcom/threads/nsThreadPool.cpp:290:5
[task 2019-03-25T04:14:38.486Z] 04:14:38 INFO - PID 17717 | #8 0x7f08ca7e27bc in Dispatch /builds/worker/workspace/build/src/obj-firefox/dist/include/nsIEventTarget.h:37:14
[task 2019-03-25T04:14:38.488Z] 04:14:38 INFO - PID 17717 | #9 0x7f08ca7e27bc in Dispatch /builds/worker/workspace/build/src/security/manager/ssl/SSLServerCertVerification.cpp:1412
[task 2019-03-25T04:14:38.488Z] 04:14:38 INFO - PID 17717 | #10 0x7f08ca7e27bc in mozilla::psm::AuthCertificateHook(void*, PRFileDesc*, int, int) /builds/worker/workspace/build/src/security/manager/ssl/SSLServerCertVerification.cpp:1617
[task 2019-03-25T04:14:38.489Z] 04:14:38 INFO - PID 17717 | #11 0x7f08dba5176d in ssl3_AuthCertificate /builds/worker/workspace/build/src/security/nss/lib/ssl/ssl3con.c:10756:21
[task 2019-03-25T04:14:38.491Z] 04:14:38 INFO - PID 17717 | #12 0x7f08dba51293 in ssl3_CompleteHandleCertificate /builds/worker/workspace/build/src/security/nss/lib/ssl/ssl3con.c:10711:14
[task 2019-03-25T04:14:38.491Z] 04:14:38 INFO - PID 17717 | #13 0x7f08dba56473 in ssl3_HandleCertificate /builds/worker/workspace/build/src/security/nss/lib/ssl/ssl3con.c:10579:12
[task 2019-03-25T04:14:38.492Z] 04:14:38 INFO - PID 17717 | #14 0x7f08dba56473 in ssl3_HandlePostHelloHandshakeMessage /builds/worker/workspace/build/src/security/nss/lib/ssl/ssl3con.c:11778
[task 2019-03-25T04:14:38.493Z] 04:14:38 INFO - PID 17717 | #15 0x7f08dba56473 in ssl3_HandleHandshakeMessage /builds/worker/workspace/build/src/security/nss/lib/ssl/ssl3con.c:11721
[task 2019-03-25T04:14:38.495Z] 04:14:38 INFO - PID 17717 | #16 0x7f08dba60116 in ssl3_HandleHandshake /builds/worker/workspace/build/src/security/nss/lib/ssl/ssl3con.c:11895:18
[task 2019-03-25T04:14:38.495Z] 04:14:38 INFO - PID 17717 | #17 0x7f08dba60116 in ssl3_HandleNonApplicationData /builds/worker/workspace/build/src/security/nss/lib/ssl/ssl3con.c:12403
[task 2019-03-25T04:14:38.499Z] 04:14:38 INFO - PID 17717 | #18 0x7f08dba61fb1 in ssl3_HandleRecord /builds/worker/workspace/build/src/security/nss/lib/ssl/ssl3con.c:12684:12
[task 2019-03-25T04:14:38.500Z] 04:14:38 INFO - PID 17717 | #19 0x7f08dba7b854 in ssl3_GatherCompleteHandshake /builds/worker/workspace/build/src/security/nss/lib/ssl/ssl3gthr.c:512:18
[task 2019-03-25T04:14:38.500Z] 04:14:38 INFO - PID 17717 | #20 0x7f08dba8e237 in SSL_ForceHandshake /builds/worker/workspace/build/src/security/nss/lib/ssl/sslsecur.c:370:24
[task 2019-03-25T04:14:38.501Z] 04:14:38 INFO - PID 17717 | #21 0x7f08ca863dc3 in nsNSSSocketInfo::DriveHandshake() /builds/worker/workspace/build/src/security/manager/ssl/nsNSSIOLayer.cpp:393:18
[task 2019-03-25T04:14:38.503Z] 04:14:38 INFO - PID 17717 | #22 0x7f08bfb86015 in mozilla::net::nsHttpConnection::EnsureNPNComplete(nsresult&, unsigned int&) /builds/worker/workspace/build/src/netwerk/protocol/http/nsHttpConnection.cpp:534:15
[task 2019-03-25T04:14:38.503Z] 04:14:38 INFO - PID 17717 | #23 0x7f08bfb88a20 in mozilla::net::nsHttpConnection::OnSocketWritable() /builds/worker/workspace/build/src/netwerk/protocol/http/nsHttpConnection.cpp:1898:17
[task 2019-03-25T04:14:38.504Z] 04:14:38 INFO - PID 17717 | #24 0x7f08bfb98ab6 in OnOutputStreamReady /builds/worker/workspace/build/src/netwerk/protocol/http/nsHttpConnection.cpp:2439:17
[task 2019-03-25T04:14:38.505Z] 04:14:38 INFO - PID 17717 | #25 0x7f08bfb98ab6 in non-virtual thunk to mozilla::net::nsHttpConnection::OnOutputStreamReady(nsIAsyncOutputStream*) /builds/worker/workspace/build/src/netwerk/protocol/http/nsHttpConnection.cpp
[task 2019-03-25T04:14:38.507Z] 04:14:38 INFO - PID 17717 | #26 0x7f08bf1e4398 in mozilla::net::nsSocketOutputStream::OnSocketReady(nsresult) /builds/worker/workspace/build/src/netwerk/base/nsSocketTransport2.cpp:514:27
[task 2019-03-25T04:14:38.508Z] 04:14:38 INFO - PID 17717 | #27 0x7f08bf1f1348 in mozilla::net::nsSocketTransport::OnSocketReady(PRFileDesc*, short) /builds/worker/workspace/build/src/netwerk/base/nsSocketTransport2.cpp:2195:15
[task 2019-03-25T04:14:38.509Z] 04:14:38 INFO - PID 17717 | #28 0x7f08bf202381 in mozilla::net::nsSocketTransportService::DoPollIteration(mozilla::BaseTimeDuration<mozilla::TimeDurationValueCalculator>*) /builds/worker/workspace/build/src/netwerk/base/nsSocketTransportService2.cpp
[task 2019-03-25T04:14:38.511Z] 04:14:38 INFO - PID 17717 | #29 0x7f08bf200515 in mozilla::net::nsSocketTransportService::Run() /builds/worker/workspace/build/src/netwerk/base/nsSocketTransportService2.cpp:973:7
[task 2019-03-25T04:14:38.512Z] 04:14:38 INFO - PID 17717 | #30 0x7f08bf2029fc in non-virtual thunk to mozilla::net::nsSocketTransportService::Run() /builds/worker/workspace/build/src/netwerk/base/nsSocketTransportService2.cpp
[task 2019-03-25T04:14:38.513Z] 04:14:38 INFO - PID 17717 | #31 0x7f08bef623a9 in nsThread::ProcessNextEvent(bool, bool*) /builds/worker/workspace/build/src/xpcom/threads/nsThread.cpp:1180:14
[task 2019-03-25T04:14:38.514Z] 04:14:38 INFO - PID 17717 | #32 0x7f08bef68b48 in NS_ProcessNextEvent(nsIThread*, bool) /builds/worker/workspace/build/src/xpcom/threads/nsThreadUtils.cpp:482:10
[task 2019-03-25T04:14:38.515Z] 04:14:38 INFO - PID 17717 | #33 0x7f08bff2a93a in mozilla::ipc::MessagePumpForNonMainThreads::Run(base::MessagePump::Delegate*) /builds/worker/workspace/build/src/ipc/glue/MessagePump.cpp:303:20
[task 2019-03-25T04:14:38.516Z] 04:14:38 INFO - PID 17717 | #34 0x7f08bfe5c0df in RunInternal /builds/worker/workspace/build/src/ipc/chromium/src/base/message_loop.cc:315:10
[task 2019-03-25T04:14:38.517Z] 04:14:38 INFO - PID 17717 | #35 0x7f08bfe5c0df in RunHandler /builds/worker/workspace/build/src/ipc/chromium/src/base/message_loop.cc:308
[task 2019-03-25T04:14:38.518Z] 04:14:38 INFO - PID 17717 | #36 0x7f08bfe5c0df in MessageLoop::Run() /builds/worker/workspace/build/src/ipc/chromium/src/base/message_loop.cc:290
[task 2019-03-25T04:14:38.520Z] 04:14:38 INFO - PID 17717 | #37 0x7f08bef5c37a in nsThread::ThreadFunc(void*) /builds/worker/workspace/build/src/xpcom/threads/nsThread.cpp:454:11
[task 2019-03-25T04:14:38.521Z] 04:14:38 INFO - PID 17717 | #38 0x7f08dfc225ad in _pt_root /builds/worker/workspace/build/src/nsprpub/pr/src/pthreads/ptthread.c:201:5
[task 2019-03-25T04:14:38.521Z] 04:14:38 INFO - PID 17717 | #39 0x7f08df8696b9 in start_thread (/lib/x86_64-linux-gnu/libpthread.so.0+0x76b9)
[task 2019-03-25T04:14:38.522Z] 04:14:38 INFO - PID 17717 |
[task 2019-03-25T04:14:38.524Z] 04:14:38 INFO - PID 17717 | Thread T10 (Socket Thread) created by T0 here:
[task 2019-03-25T04:14:38.525Z] 04:14:38 INFO - PID 17717 | #0 0x55b36786929d in pthread_create /builds/worker/workspace/moz-toolchain/src/llvm/projects/compiler-rt/lib/asan/asan_interceptors.cc:210:3
[task 2019-03-25T04:14:38.527Z] 04:14:38 INFO - PID 17717 | #1 0x7f08dfc14613 in _PR_CreateThread /builds/worker/workspace/build/src/nsprpub/pr/src/pthreads/ptthread.c:433:14
[task 2019-03-25T04:14:38.528Z] 04:14:38 INFO - PID 17717 | #2 0x7f08dfbfe09e in PR_CreateThread /builds/worker/workspace/build/src/nsprpub/pr/src/pthreads/ptthread.c:518:12
[task 2019-03-25T04:14:38.529Z] 04:14:38 INFO - PID 17717 | #3 0x7f08bef5e699 in nsThread::Init(nsTSubstring<char> const&) /builds/worker/workspace/build/src/xpcom/threads/nsThread.cpp:661:8
[task 2019-03-25T04:14:38.531Z] 04:14:38 INFO - PID 17717 | #4 0x7f08bef67c90 in nsThreadManager::NewNamedThread(nsTSubstring<char> const&, unsigned int, nsIThread**) /builds/worker/workspace/build/src/xpcom/threads/nsThreadManager.cpp:416:12
[task 2019-03-25T04:14:38.532Z] 04:14:38 INFO - PID 17717 | #5 0x7f08bef6b9f9 in NS_NewNamedThread(nsTSubstring<char> const&, nsIThread**, nsIRunnable*, unsigned int) /builds/worker/workspace/build/src/xpcom/threads/nsThreadUtils.cpp:135:57
[task 2019-03-25T04:14:38.533Z] 04:14:38 INFO - PID 17717 | #6 0x7f08bf1fe23c in NS_NewNamedThread<14> /builds/worker/workspace/build/src/obj-firefox/dist/include/nsThreadUtils.h:71:10
[task 2019-03-25T04:14:38.534Z] 04:14:38 INFO - PID 17717 | #7 0x7f08bf1fe23c in mozilla::net::nsSocketTransportService::Init() /builds/worker/workspace/build/src/netwerk/base/nsSocketTransportService2.cpp:609
[task 2019-03-25T04:14:38.535Z] 04:14:38 INFO - PID 17717 | #8 0x7f08beee4e2d in mozilla::xpcom::CreateInstanceImpl(mozilla::xpcom::ModuleID, nsISupports*, nsID const&, void**) /builds/worker/workspace/build/src/obj-firefox/xpcom/components/StaticComponents.cpp:10690:7
[task 2019-03-25T04:14:38.535Z] 04:14:38 INFO - PID 17717 | #9 0x7f08bef1712f in CreateInstance /builds/worker/workspace/build/src/xpcom/components/nsComponentManager.cpp:220:46
[task 2019-03-25T04:14:38.537Z] 04:14:38 INFO - PID 17717 | #10 0x7f08bef1712f in nsComponentManagerImpl::GetServiceLocked((anonymous namespace)::MutexLock&, (anonymous namespace)::EntryWrapper&, nsID const&, void**) /builds/worker/workspace/build/src/xpcom/components/nsComponentManager.cpp:1401
[task 2019-03-25T04:14:38.538Z] 04:14:38 INFO - PID 17717 | #11 0x7f08bef0bd25 in nsComponentManagerImpl::GetServiceByContractID(char const*, nsID const&, void**) /builds/worker/workspace/build/src/xpcom/components/nsComponentManager.cpp:1588:10
[task 2019-03-25T04:14:38.540Z] 04:14:38 INFO - PID 17717 | #12 0x7f08bef20065 in CallGetService /builds/worker/workspace/build/src/xpcom/components/nsComponentManagerUtils.cpp:61:43
[task 2019-03-25T04:14:38.540Z] 04:14:38 INFO - PID 17717 | #13 0x7f08bef20065 in nsGetServiceByContractIDWithError::operator()(nsID const&, void**) const /builds/worker/workspace/build/src/xpcom/components/nsComponentManagerUtils.cpp:253
[task 2019-03-25T04:14:38.542Z] 04:14:38 INFO - PID 17717 | #14 0x7f08bed8f72e in nsCOMPtr_base::assign_from_gs_contractid_with_error(nsGetServiceByContractIDWithError const&, nsID const&) /builds/worker/workspace/build/src/xpcom/base/nsCOMPtr.cpp:91:7
[task 2019-03-25T04:14:38.543Z] 04:14:38 INFO - PID 17717 | #15 0x7f08bf14b46d in operator= /builds/worker/workspace/build/src/obj-firefox/dist/include/nsCOMPtr.h:746:5
[task 2019-03-25T04:14:38.544Z] 04:14:38 INFO - PID 17717 | #16 0x7f08bf14b46d in InitializeSocketTransportService /builds/worker/workspace/build/src/netwerk/base/nsIOService.cpp:305
[task 2019-03-25T04:14:38.546Z] 04:14:38 INFO - PID 17717 | #17 0x7f08bf14b46d in mozilla::net::nsIOService::SetOffline(bool) /builds/worker/workspace/build/src/netwerk/base/nsIOService.cpp:1098
[task 2019-03-25T04:14:38.547Z] 04:14:38 INFO - PID 17717 | #18 0x7f08bf149f6a in mozilla::net::nsIOService::Init() /builds/worker/workspace/build/src/netwerk/base/nsIOService.cpp:270:3
[task 2019-03-25T04:14:38.548Z] 04:14:38 INFO - PID 17717 | #19 0x7f08bf14d3ae in mozilla::net::nsIOService::GetInstance() /builds/worker/workspace/build/src/netwerk/base/nsIOService.cpp:361:9
[task 2019-03-25T04:14:38.548Z] 04:14:38 INFO - PID 17717 | #20 0x7f08beee053e in mozilla::xpcom::CreateInstanceImpl(mozilla::xpcom::ModuleID, nsISupports*, nsID const&, void**) /builds/worker/workspace/build/src/obj-firefox/xpcom/components/StaticComponents.cpp:8192:48
[task 2019-03-25T04:14:38.550Z] 04:14:38 INFO - PID 17717 | #21 0x7f08bef1712f in CreateInstance /builds/worker/workspace/build/src/xpcom/components/nsComponentManager.cpp:220:46
[task 2019-03-25T04:14:38.551Z] 04:14:38 INFO - PID 17717 | #22 0x7f08bef1712f in nsComponentManagerImpl::GetServiceLocked((anonymous namespace)::MutexLock&, (anonymous namespace)::EntryWrapper&, nsID const&, void**) /builds/worker/workspace/build/src/xpcom/components/nsComponentManager.cpp:1401
[task 2019-03-25T04:14:38.552Z] 04:14:38 INFO - PID 17717 | #23 0x7f08bef0bd25 in nsComponentManagerImpl::GetServiceByContractID(char const*, nsID const&, void**) /builds/worker/workspace/build/src/xpcom/components/nsComponentManager.cpp:1588:10
[task 2019-03-25T04:14:38.553Z] 04:14:38 INFO - PID 17717 | #24 0x7f08c10c5d41 in CallGetService<nsIIOService> /builds/worker/workspace/build/src/obj-firefox/dist/include/nsServiceManagerUtils.h:73:10
[task 2019-03-25T04:14:38.555Z] 04:14:38 INFO - PID 17717 | #25 0x7f08c10c5d41 in nsScriptSecurityManager::Init() /builds/worker/workspace/build/src/caps/nsScriptSecurityManager.cpp:1431
[task 2019-03-25T04:14:38.555Z] 04:14:38 INFO - PID 17717 | #26 0x7f08c10c6c6c in nsScriptSecurityManager::InitStatics() /builds/worker/workspace/build/src/caps/nsScriptSecurityManager.cpp:1492:28
[task 2019-03-25T04:14:38.556Z] 04:14:38 INFO - PID 17717 | #27 0x7f08c0a7ffb8 in nsXPConnect::InitStatics() /builds/worker/workspace/build/src/js/xpconnect/src/nsXPConnect.cpp:135:3
[task 2019-03-25T04:14:38.560Z] 04:14:38 INFO - PID 17717 | #28 0x7f08c0a18738 in xpcModuleCtor() /builds/worker/workspace/build/src/js/xpconnect/src/XPCModule.cpp:11:3
[task 2019-03-25T04:14:38.561Z] 04:14:38 INFO - PID 17717 | #29 0x7f08c82ac438 in nsLayoutModuleInitialize() /builds/worker/workspace/build/src/layout/build/nsLayoutModule.cpp:108:7
[task 2019-03-25T04:14:38.562Z] 04:14:38 INFO - PID 17717 | #30 0x7f08bef0ce95 in nsComponentManagerImpl::Init() /builds/worker/workspace/build/src/xpcom/components/nsComponentManager.cpp:535:5
[task 2019-03-25T04:14:38.576Z] 04:14:38 INFO - PID 17717 | #31 0x7f08befba3e9 in NS_InitXPCOM /builds/worker/workspace/build/src/xpcom/build/XPCOMInit.cpp:466:51
[task 2019-03-25T04:14:38.576Z] 04:14:38 INFO - PID 17717 | #32 0x7f08caea6824 in Initialize /builds/worker/workspace/build/src/toolkit/xre/nsAppRunner.cpp:1296:8
[task 2019-03-25T04:14:38.576Z] 04:14:38 INFO - PID 17717 | #33 0x7f08caea6824 in XREMain::XRE_main(int, char**, mozilla::BootstrapConfig const&) /builds/worker/workspace/build/src/toolkit/xre/nsAppRunner.cpp:4723
[task 2019-03-25T04:14:38.576Z] 04:14:38 INFO - PID 17717 | #34 0x7f08caea81ae in XRE_main(int, char**, mozilla::BootstrapConfig const&) /builds/worker/workspace/build/src/toolkit/xre/nsAppRunner.cpp:4811:21
[task 2019-03-25T04:14:38.576Z] 04:14:38 INFO - PID 17717 | #35 0x55b3678b321c in do_main /builds/worker/workspace/build/src/browser/app/nsBrowserApp.cpp:212:22
[task 2019-03-25T04:14:38.577Z] 04:14:38 INFO - PID 17717 | #36 0x55b3678b321c in main /builds/worker/workspace/build/src/browser/app/nsBrowserApp.cpp:291
[task 2019-03-25T04:14:38.578Z] 04:14:38 INFO - PID 17717 | #37 0x7f08de80b82f in __libc_start_main /build/glibc-LK5gWL/glibc-2.23/csu/../csu/libc-start.c:291
[task 2019-03-25T04:14:38.578Z] 04:14:38 INFO - PID 17717 |
[task 2019-03-25T04:14:38.579Z] 04:14:38 INFO - PID 17717 | SUMMARY: AddressSanitizer: stack-use-after-scope /builds/worker/workspace/moz-toolchain/src/llvm/projects/compiler-rt/lib/asan/asan_interceptors_memintrinsics.cc:23:3 in __asan_memcpy
[task 2019-03-25T04:14:38.579Z] 04:14:38 INFO - PID 17717 | Shadow bytes around the buggy address:
[task 2019-03-25T04:14:38.580Z] 04:14:38 INFO - PID 17717 | 0x0fe194430710: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[task 2019-03-25T04:14:38.584Z] 04:14:38 INFO - PID 17717 | 0x0fe194430720: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[task 2019-03-25T04:14:38.584Z] 04:14:38 INFO - PID 17717 | 0x0fe194430730: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[task 2019-03-25T04:14:38.585Z] 04:14:38 INFO - PID 17717 | 0x0fe194430740: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[task 2019-03-25T04:14:38.585Z] 04:14:38 INFO - PID 17717 | 0x0fe194430750: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[task 2019-03-25T04:14:38.586Z] 04:14:38 INFO - PID 17717 | =>0x0fe194430760: 00 00 00 00[00]00 00 00 00 00 00 00 00 00 00 00
[task 2019-03-25T04:14:38.586Z] 04:14:38 INFO - PID 17717 | 0x0fe194430770: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[task 2019-03-25T04:14:38.587Z] 04:14:38 INFO - PID 17717 | 0x0fe194430780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[task 2019-03-25T04:14:38.587Z] 04:14:38 INFO - PID 17717 | 0x0fe194430790: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[task 2019-03-25T04:14:38.588Z] 04:14:38 INFO - PID 17717 | 0x0fe1944307a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[task 2019-03-25T04:14:38.589Z] 04:14:38 INFO - PID 17717 | 0x0fe1944307b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[task 2019-03-25T04:14:38.590Z] 04:14:38 INFO - PID 17717 | Shadow byte legend (one shadow byte represents 8 application bytes):
[task 2019-03-25T04:14:38.591Z] 04:14:38 INFO - PID 17717 | Addressable: 00
[task 2019-03-25T04:14:38.591Z] 04:14:38 INFO - PID 17717 | Partially addressable: 01 02 03 04 05 06 07
[task 2019-03-25T04:14:38.593Z] 04:14:38 INFO - PID 17717 | Heap left redzone: fa
[task 2019-03-25T04:14:38.593Z] 04:14:38 INFO - PID 17717 | Freed heap region: fd
[task 2019-03-25T04:14:38.594Z] 04:14:38 INFO - PID 17717 | Stack left redzone: f1
[task 2019-03-25T04:14:38.594Z] 04:14:38 INFO - PID 17717 | Stack mid redzone: f2
[task 2019-03-25T04:14:38.596Z] 04:14:38 INFO - PID 17717 | Stack right redzone: f3
[task 2019-03-25T04:14:38.597Z] 04:14:38 INFO - PID 17717 | Stack after return: f5
[task 2019-03-25T04:14:38.597Z] 04:14:38 INFO - PID 17717 | Stack use after scope: f8
[task 2019-03-25T04:14:38.598Z] 04:14:38 INFO - PID 17717 | Global redzone: f9
[task 2019-03-25T04:14:38.599Z] 04:14:38 INFO - PID 17717 | Global init order: f6
[task 2019-03-25T04:14:38.600Z] 04:14:38 INFO - PID 17717 | Poisoned by user: f7
[task 2019-03-25T04:14:38.601Z] 04:14:38 INFO - PID 17717 | Container overflow: fc
[task 2019-03-25T04:14:38.601Z] 04:14:38 INFO - PID 17717 | Array cookie: ac
[task 2019-03-25T04:14:38.603Z] 04:14:38 INFO - PID 17717 | Intra object redzone: bb
[task 2019-03-25T04:14:38.603Z] 04:14:38 INFO - PID 17717 | ASan internal: fe
[task 2019-03-25T04:14:38.604Z] 04:14:38 INFO - PID 17717 | Left alloca redzone: ca
[task 2019-03-25T04:14:38.605Z] 04:14:38 INFO - PID 17717 | Right alloca redzone: cb
[task 2019-03-25T04:14:38.606Z] 04:14:38 INFO - PID 17717 | Shadow gap: cc
[task 2019-03-25T04:14:38.607Z] 04:14:38 INFO - PID 17717 | ==17724==ABORTING
[task 2019-03-25T04:14:38.656Z] 04:14:38 INFO - PID 17717 | Exiting due to channel error.
[task 2019-03-25T04:14:38.656Z] 04:14:38 INFO - PID 17717 | 1553487278630 mozrunner::runner DEBUG Killing process 17724
[task 2019-03-25T04:14:38.657Z] 04:14:38 INFO - PID 17717 | Exiting due to channel error.
[task 2019-03-25T04:14:38.657Z] 04:14:38 INFO - PID 17717 | Exiting due to channel error.
[task 2019-03-25T04:14:38.658Z] 04:14:38 INFO - PID 17717 | 1553487278642 webdriver::server DEBUG <- 500 Internal Server Error {"value":{"error":"unknown error","message":"Socket timeout reading Marionette handshake data: EOF reading marionette message","stacktrace":""}}
[task 2019-03-25T04:14:38.756Z] 04:14:38 INFO - STDOUT: ERROR

Component: geckodriver → XPCOM
Keywords: assertion
Product: Testing → Core
Version: Version 3 → unspecified

I think--there's a lot of twistyness in our stream code, so I'm not 100% here--that this is some kind of problem with some buffer/vars on the networking side of things that get passed down into the XPCOM code. I am completely willing to accept that we did something wrong in the XPCOM code, but this smells like something higher-level.

Marking as security-sensitive because stack-use-after-scope seems comparable to uafs.

Group: core-security
Component: XPCOM → Networking
Group: core-security → network-core-security

This could as well be related to bug 1538098.

Depends on: 1538098

One possibility is that someone manipulates mReqHeaderBuf after we have created the upload stream multiplex, but this seems unlikely as we haven't done any major change in the necko code around this member and the code itself is ancient. Also, the memory referred is heap allocated (nsCString).

Other possibility is that somebody is using shared-data-only input stream Rebind()'ed to nsAutoCString (short enough from time to time) as an upload stream for http channel. But that should crash nearly all the time, IMO.

Could the clue for the memory being on stack be a red herring?

The reference to the SSL Cert thread indicates this could be an OCSP POST request.

Hmm... I remember bug 1533640 that was blocking the Vector change bug (which itself is not cause of the crash) touching the OCSP code. And it landed on 21st.

Adding folks involved.

Blocks: 1533640
Flags: needinfo?(jwalden)
Flags: needinfo?(dkeeler)

Now that we pass in a span over the OCSP POST data (it comes from the stack of a cert verifier thread), I suspect that when we "cancel" a request due to a timeout, necko still has a handle on it and tries to use it after that function has returned (currently we never actually call cancel - we just kind-of drop the stream loader and notify our caller that we're done).

Honza - would calling cancel on the stream loader's request here be enough to prevent necko from trying to use the post data? https://searchfox.org/mozilla-central/rev/2c912888e3b7ae4baf161d98d7a01434f31830aa/security/manager/ssl/nsNSSCallbacks.cpp#426

Flags: needinfo?(dkeeler)

I'm not sure I see "the stream loader's request" in the code you refer, so hard to say what you mean with it.

If you call nsHttpChannel->Cancel, you can't make any assumption about access to the upload stream. Cancel() is called on the main thread, http transaction runs on the socket thread. It's too racy.

The more correct way is to simply make a copy of the data, if small enough.

Or keep it in some (maybe newly built) input stream set that can be shared and ref counted. Could storagestream work for you better? It provides multiple copies of a single buffer via nsIInputStream that, when alive, keep the data alive (when adopted by the stream). That means some refactoring tho.

Flags: needinfo?(jwalden) → needinfo?(dkeeler)

The change from Vector to borrowed-pointer was just to avoid copying OCSP_REQUEST_MAX_LENGTH bytes -- which is only 128, I think? In any case it's a small number. I made the change to avoid a copy, but if there are actual lifetime issues to think through doing this, perhaps we should just put a 128-byte buffer directly into OCSPRequest and then its lifetime naturally will be extended for oddities like this.

In short, it's not clear to me it's worth the trouble of thinking about lifetimes here.

(I have a patch for this, just checking that it builds)

Yeah I was just going to say it's not worth jumping through hoops to get the lifetimes to work out. If this isn't what you're already doing, I think the simplest change would be to make this call https://searchfox.org/mozilla-central/rev/2c912888e3b7ae4baf161d98d7a01434f31830aa/security/manager/ssl/nsNSSCallbacks.cpp#287 take NS_ASSIGNMENT_COPY as its third argument (which isn't obvious here because it defaults to NS_ASSIGNMENT_DEPEND).

Flags: needinfo?(dkeeler)
Duplicate of this bug: 1538237

(In reply to Dana Keeler (she/her) (use needinfo) (:keeler for reviews) from comment #9)

Yeah I was just going to say it's not worth jumping through hoops to get the lifetimes to work out. If this isn't what you're already doing, I think the simplest change would be to make this call https://searchfox.org/mozilla-central/rev/2c912888e3b7ae4baf161d98d7a01434f31830aa/security/manager/ssl/nsNSSCallbacks.cpp#287 take NS_ASSIGNMENT_COPY as its third argument (which isn't obvious here because it defaults to NS_ASSIGNMENT_DEPEND).

Yes!

Attached file Bug 1538621. r=keeler
Component: Networking → Security: PSM
Priority: P5 → P1
Assignee: nobody → jwalden
Group: network-core-security → core-security-release
Status: NEW → RESOLVED
Closed: 2 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla68

It seems that the crashes we had in bug 1538098 are now fixed thanks to this patch.
:Waldo, would it be possible to add a test to avoid such a situation in the future ?

Flags: needinfo?(jwalden)

In the abstract, yes, it probably would be possible to do this. In practicality, it would probably be a poor use of my time to figure out how to set up an OCSP response just so to trigger all this in exactly the right manner with an xpcshell test most likely. It'd be great if someone were to do that, but it really would need to be someone other than me who understands the workings of OCSP and how to invoke it in XPCOM-land better than I do.

Flags: needinfo?(jwalden)
Group: core-security-release
You need to log in before you can comment on or make changes to this bug.