1538621 - Intermittent PID 17717 | SUMMARY: AddressSanitizer: stack-use-after-scope /builds/worker/workspace/moz-toolchain/src/llvm/projects/compiler-rt/lib/asan/asan_interceptors_memintrinsics.cc:23:3 in __asan_memcpy

Treeherder Bug Filer

Reporter

Description

•

5 years ago

treeherder

#[markdown(off)]
Filed by: apavel [at] mozilla.com

https://treeherder.mozilla.org/logviewer.html#?job_id=235784329&repo=autoland

https://queue.taskcluster.net/v1/task/ApI3CZS0RGS4MqoLqZttxQ/runs/0/artifacts/public/logs/live_backing.log

task 2019-03-25T04:14:28.899Z] 04:14:28 INFO - TEST-START | /webdriver/tests/get_window_handles/get.py
[task 2019-03-25T04:14:29.137Z] 04:14:29 INFO - STDOUT: ============================= test session starts ==============================
[task 2019-03-25T04:14:29.137Z] 04:14:29 INFO - STDOUT: platform linux2 -- Python 2.7.12, pytest-unknown, py-1.5.2, pluggy-0.5.3.dev -- /builds/worker/workspace/build/venv/bin/python
[task 2019-03-25T04:14:29.138Z] 04:14:29 INFO - STDOUT: rootdir: /builds/worker/workspace/build, inifile:
[task 2019-03-25T04:14:29.138Z] 04:14:29 INFO - STDOUT: collecting ...
[task 2019-03-25T04:14:29.154Z] 04:14:29 INFO - STDOUT: collected 3 items
[task 2019-03-25T04:14:29.156Z] 04:14:29 INFO - STDOUT: tests/web-platform/tests/webdriver/tests/get_window_handles/get.py::test_no_browsing_context

task 2019-03-25T04:14:37.491Z] 04:14:37 [task 2019-03-25T04:14:37.552Z] 04:14:37 [task 2019-03-25T04:14:37.553Z] 04:14:37 [task 2019-03-25T04:14:37.553Z] 04:14:37 [task 2019-03-25T04:14:37.554Z] 04:14:37 [task 2019-03-25T04:14:37.763Z] 04:14:37 [task 2019-03-25T04:14:38.147Z] 04:14:38 [task 2019-03-25T04:14:38.149Z] 04:14:38 [task 2019-03-25T04:14:38.149Z] 04:14:38 [task 2019-03-25T04:14:38.150Z] 04:14:38 [task 2019-03-25T04:14:38.166Z] 04:14:38 [task 2019-03-25T04:14:38.166Z] 04:14:38 [task 2019-03-25T04:14:38.167Z] 04:14:38 [task 2019-03-25T04:14:38.207Z] 04:14:38 [task 2019-03-25T04:14:38.208Z] 04:14:38 [task 2019-03-25T04:14:38.208Z] 04:14:38 [task 2019-03-25T04:14:38.209Z] 04:14:38 [task 2019-03-25T04:14:38.210Z] 04:14:38 [task 2019-03-25T04:14:38.210Z] 04:14:38 [task 2019-03-25T04:14:38.212Z] 04:14:38 [task 2019-03-25T04:14:38.213Z] 04:14:38 [task 2019-03-25T04:14:38.214Z] 04:14:38 [task 2019-03-25T04:14:38.216Z] 04:14:38 [task 2019-03-25T04:14:38.216Z] 04:14:38 [task 2019-03-25T04:14:38.218Z] 04:14:38 [task 2019-03-25T04:14:38.219Z] 04:14:38 [task 2019-03-25T04:14:38.220Z] 04:14:38 [task 2019-03-25T04:14:38.224Z] 04:14:38 [task 2019-03-25T04:14:38.225Z] 04:14:38 [task 2019-03-25T04:14:38.225Z] 04:14:38 [task 2019-03-25T04:14:38.227Z] 04:14:38 [task 2019-03-25T04:14:38.227Z] 04:14:38 [task 2019-03-25T04:14:38.235Z] 04:14:38 [task 2019-03-25T04:14:38.235Z] 04:14:38 [task 2019-03-25T04:14:38.251Z] 04:14:38 [task 2019-03-25T04:14:38.251Z] 04:14:38 [task 2019-03-25T04:14:38.253Z] 04:14:38 [task 2019-03-25T04:14:38.253Z] 04:14:38 [task 2019-03-25T04:14:38.254Z] 04:14:38 [task 2019-03-25T04:14:38.256Z] 04:14:38 [task 2019-03-25T04:14:38.257Z] 04:14:38 [task 2019-03-25T04:14:38.318Z] 04:14:38 [task 2019-03-25T04:14:38.319Z] 04:14:38 [task 2019-03-25T04:14:38.319Z] 04:14:38 [task 2019-03-25T04:14:38.407Z] 04:14:38 [task 2019-03-25T04:14:38.407Z] 04:14:38 [task 2019-03-25T04:14:38.408Z] 04:14:38 [task 2019-03-25T04:14:38.408Z] 04:14:38 [task 2019-03-25T04:14:38.408Z] 04:14:38 [task 2019-03-25T04:14:38.409Z] 04:14:38 [task 2019-03-25T04:14:38.409Z] 04:14:38 [task 2019-03-25T04:14:38.409Z] 04:14:38 [task 2019-03-25T04:14:38.410Z] 04:14:38 [task 2019-03-25T04:14:38.410Z] 04:14:38 [task 2019-03-25T04:14:38.411Z] 04:14:38 [task 2019-03-25T04:14:38.411Z] 04:14:38 [task 2019-03-25T04:14:38.412Z] 04:14:38 [task 2019-03-25T04:14:38.412Z] 04:14:38 [task 2019-03-25T04:14:38.412Z] 04:14:38 [task 2019-03-25T04:14:38.413Z] 04:14:38 [task 2019-03-25T04:14:38.413Z] 04:14:38 [task 2019-03-25T04:14:38.414Z] 04:14:38 [task 2019-03-25T04:14:38.414Z] 04:14:38 [task 2019-03-25T04:14:38.415Z] 04:14:38 [task 2019-03-25T04:14:38.415Z] 04:14:38 [task 2019-03-25T04:14:38.417Z] 04:14:38 [task 2019-03-25T04:14:38.417Z] 04:14:38 [task 2019-03-25T04:14:38.418Z] 04:14:38 [task 2019-03-25T04:14:38.419Z] 04:14:38 [task 2019-03-25T04:14:38.420Z] 04:14:38 [task 2019-03-25T04:14:38.421Z] 04:14:38 [task 2019-03-25T04:14:38.421Z] 04:14:38 [task 2019-03-25T04:14:38.423Z] 04:14:38 [task 2019-03-25T04:14:38.424Z] 04:14:38 [task 2019-03-25T04:14:38.424Z] 04:14:38 [task 2019-03-25T04:14:38.426Z] 04:14:38 [task 2019-03-25T04:14:38.426Z] 04:14:38 [task 2019-03-25T04:14:38.427Z] 04:14:38 [task 2019-03-25T04:14:38.428Z] 04:14:38 [task 2019-03-25T04:14:38.429Z] 04:14:38 [task 2019-03-25T04:14:38.429Z] 04:14:38 [task 2019-03-25T04:14:38.430Z] 04:14:38 [task 2019-03-25T04:14:38.431Z] 04:14:38 [task 2019-03-25T04:14:38.432Z] 04:14:38 [task 2019-03-25T04:14:38.432Z] 04:14:38 [task 2019-03-25T04:14:38.434Z] 04:14:38 [task 2019-03-25T04:14:38.437Z] 04:14:38 [task 2019-03-25T04:14:38.437Z] 04:14:38 [task 2019-03-25T04:14:38.438Z] 04:14:38 [task 2019-03-25T04:14:38.439Z] 04:14:38 [task 2019-03-25T04:14:38.439Z] 04:14:38 [task 2019-03-25T04:14:38.440Z] 04:14:38 [task 2019-03-25T04:14:38.441Z] 04:14:38 [task 2019-03-25T04:14:38.441Z] 04:14:38 [task 2019-03-25T04:14:38.443Z] 04:14:38 [task 2019-03-25T04:14:38.443Z] 04:14:38 [task 2019-03-25T04:14:38.444Z] 04:14:38 [task 2019-03-25T04:14:38.445Z] 04:14:38 [task 2019-03-25T04:14:38.447Z] 04:14:38 [task 2019-03-25T04:14:38.447Z] 04:14:38 [task 2019-03-25T04:14:38.449Z] 04:14:38 [task 2019-03-25T04:14:38.449Z] 04:14:38 [task 2019-03-25T04:14:38.450Z] 04:14:38 [task 2019-03-25T04:14:38.450Z] 04:14:38 [task 2019-03-25T04:14:38.452Z] 04:14:38 [task 2019-03-25T04:14:38.453Z] 04:14:38 [task 2019-03-25T04:14:38.453Z] 04:14:38 [task 2019-03-25T04:14:38.455Z] 04:14:38 [task 2019-03-25T04:14:38.455Z] 04:14:38 [task 2019-03-25T04:14:38.458Z] 04:14:38 [task 2019-03-25T04:14:38.458Z] 04:14:38 [task 2019-03-25T04:14:38.458Z] 04:14:38 [task 2019-03-25T04:14:38.459Z] 04:14:38 [task 2019-03-25T04:14:38.459Z] 04:14:38 [task 2019-03-25T04:14:38.461Z] 04:14:38 [task 2019-03-25T04:14:38.461Z] 04:14:38 [task 2019-03-25T04:14:38.467Z] 04:14:38 [task 2019-03-25T04:14:38.468Z] 04:14:38 [task 2019-03-25T04:14:38.469Z] 04:14:38 [task 2019-03-25T04:14:38.470Z] 04:14:38 [task 2019-03-25T04:14:38.471Z] 04:14:38 [task 2019-03-25T04:14:38.471Z] 04:14:38 [task 2019-03-25T04:14:38.473Z] 04:14:38 [task 2019-03-25T04:14:38.474Z] 04:14:38 [task 2019-03-25T04:14:38.476Z] 04:14:38 [task 2019-03-25T04:14:38.476Z] 04:14:38 [task 2019-03-25T04:14:38.478Z] 04:14:38 [task 2019-03-25T04:14:38.480Z] 04:14:38 [task 2019-03-25T04:14:38.480Z] 04:14:38 [task 2019-03-25T04:14:38.482Z] 04:14:38 [task 2019-03-25T04:14:38.483Z] 04:14:38 [task 2019-03-25T04:14:38.484Z] 04:14:38 [task 2019-03-25T04:14:38.485Z] 04:14:38 [task 2019-03-25T04:14:38.486Z] 04:14:38 [task 2019-03-25T04:14:38.488Z] 04:14:38 [task 2019-03-25T04:14:38.488Z] 04:14:38 [task 2019-03-25T04:14:38.489Z] 04:14:38 [task 2019-03-25T04:14:38.491Z] 04:14:38 [task 2019-03-25T04:14:38.491Z] 04:14:38 [task 2019-03-25T04:14:38.492Z] 04:14:38 [task 2019-03-25T04:14:38.493Z] 04:14:38 [task 2019-03-25T04:14:38.495Z] 04:14:38 [task 2019-03-25T04:14:38.495Z] 04:14:38 [task 2019-03-25T04:14:38.499Z] 04:14:38 [task 2019-03-25T04:14:38.500Z] 04:14:38 [task 2019-03-25T04:14:38.500Z] 04:14:38 [task 2019-03-25T04:14:38.501Z] 04:14:38 [task 2019-03-25T04:14:38.503Z] 04:14:38 [task 2019-03-25T04:14:38.503Z] 04:14:38 [task 2019-03-25T04:14:38.504Z] 04:14:38 [task 2019-03-25T04:14:38.505Z] 04:14:38 [task 2019-03-25T04:14:38.507Z] 04:14:38 [task 2019-03-25T04:14:38.508Z] 04:14:38 [task 2019-03-25T04:14:38.509Z] 04:14:38 [task 2019-03-25T04:14:38.511Z] 04:14:38 [task 2019-03-25T04:14:38.512Z] 04:14:38 [task 2019-03-25T04:14:38.513Z] 04:14:38 [task 2019-03-25T04:14:38.514Z] 04:14:38 [task 2019-03-25T04:14:38.515Z] 04:14:38 [task 2019-03-25T04:14:38.516Z] 04:14:38 [task 2019-03-25T04:14:38.517Z] 04:14:38 [task 2019-03-25T04:14:38.518Z] 04:14:38 [task 2019-03-25T04:14:38.520Z] 04:14:38 [task 2019-03-25T04:14:38.521Z] 04:14:38 [task 2019-03-25T04:14:38.521Z] 04:14:38 [task 2019-03-25T04:14:38.522Z] 04:14:38 [task 2019-03-25T04:14:38.524Z] 04:14:38 [task 2019-03-25T04:14:38.525Z] 04:14:38 [task 2019-03-25T04:14:38.527Z] 04:14:38 [task 2019-03-25T04:14:38.528Z] 04:14:38 [task 2019-03-25T04:14:38.529Z] 04:14:38 [task 2019-03-25T04:14:38.531Z] 04:14:38 [task 2019-03-25T04:14:38.532Z] 04:14:38 [task 2019-03-25T04:14:38.533Z] 04:14:38 [task 2019-03-25T04:14:38.534Z] 04:14:38 [task 2019-03-25T04:14:38.535Z] 04:14:38 [task 2019-03-25T04:14:38.535Z] 04:14:38 [task 2019-03-25T04:14:38.537Z] 04:14:38 [task 2019-03-25T04:14:38.538Z] 04:14:38 [task 2019-03-25T04:14:38.540Z] 04:14:38 [task 2019-03-25T04:14:38.540Z] 04:14:38 [task 2019-03-25T04:14:38.542Z] 04:14:38 [task 2019-03-25T04:14:38.543Z] 04:14:38 [task 2019-03-25T04:14:38.544Z] 04:14:38 [task 2019-03-25T04:14:38.546Z] 04:14:38 [task 2019-03-25T04:14:38.547Z] 04:14:38 [task 2019-03-25T04:14:38.548Z] 04:14:38 [task 2019-03-25T04:14:38.548Z] 04:14:38 [task 2019-03-25T04:14:38.550Z] 04:14:38 [task 2019-03-25T04:14:38.551Z] 04:14:38 [task 2019-03-25T04:14:38.552Z] 04:14:38 [task 2019-03-25T04:14:38.553Z] 04:14:38 [task 2019-03-25T04:14:38.555Z] 04:14:38 [task 2019-03-25T04:14:38.555Z] 04:14:38 [task 2019-03-25T04:14:38.556Z] 04:14:38 [task 2019-03-25T04:14:38.560Z] 04:14:38 [task 2019-03-25T04:14:38.561Z] 04:14:38 [task 2019-03-25T04:14:38.562Z] 04:14:38 [task 2019-03-25T04:14:38.576Z] 04:14:38 [task 2019-03-25T04:14:38.576Z] 04:14:38 [task 2019-03-25T04:14:38.576Z] 04:14:38 [task 2019-03-25T04:14:38.576Z] 04:14:38 [task 2019-03-25T04:14:38.576Z] 04:14:38 [task 2019-03-25T04:14:38.577Z] 04:14:38 [task 2019-03-25T04:14:38.578Z] 04:14:38 [task 2019-03-25T04:14:38.578Z] 04:14:38 [task 2019-03-25T04:14:38.579Z] 04:14:38 [task 2019-03-25T04:14:38.579Z] 04:14:38 [task 2019-03-25T04:14:38.580Z] 04:14:38 [task 2019-03-25T04:14:38.584Z] 04:14:38 [task 2019-03-25T04:14:38.584Z] 04:14:38 [task 2019-03-25T04:14:38.585Z] 04:14:38 [task 2019-03-25T04:14:38.585Z] 04:14:38 [task 2019-03-25T04:14:38.586Z] 04:14:38 [task 2019-03-25T04:14:38.586Z] 04:14:38 [task 2019-03-25T04:14:38.587Z] 04:14:38 [task 2019-03-25T04:14:38.587Z] 04:14:38 [task 2019-03-25T04:14:38.588Z] 04:14:38 [task 2019-03-25T04:14:38.589Z] 04:14:38 [task 2019-03-25T04:14:38.590Z] 04:14:38 [task 2019-03-25T04:14:38.591Z] 04:14:38 [task 2019-03-25T04:14:38.591Z] 04:14:38 [task 2019-03-25T04:14:38.593Z] 04:14:38 [task 2019-03-25T04:14:38.593Z] 04:14:38 [task 2019-03-25T04:14:38.594Z] 04:14:38 [task 2019-03-25T04:14:38.594Z] 04:14:38 [task 2019-03-25T04:14:38.596Z] 04:14:38 [task 2019-03-25T04:14:38.597Z] 04:14:38 [task 2019-03-25T04:14:38.597Z] 04:14:38 [task 2019-03-25T04:14:38.598Z] 04:14:38 [task 2019-03-25T04:14:38.599Z] 04:14:38 [task 2019-03-25T04:14:38.600Z] 04:14:38 [task 2019-03-25T04:14:38.601Z] 04:14:38 [task 2019-03-25T04:14:38.601Z] 04:14:38 [task 2019-03-25T04:14:38.603Z] 04:14:38 [task 2019-03-25T04:14:38.603Z] 04:14:38 [task 2019-03-25T04:14:38.604Z] 04:14:38 [task 2019-03-25T04:14:38.605Z] 04:14:38 [task 2019-03-25T04:14:38.606Z] 04:14:38 [task 2019-03-25T04:14:38.607Z] 04:14:38 [task 2019-03-25T04:14:38.656Z] 04:14:38 [task 2019-03-25T04:14:38.656Z] 04:14:38 [task 2019-03-25T04:14:38.657Z] 04:14:38 [task 2019-03-25T04:14:38.657Z] 04:14:38 [task 2019-03-25T04:14:38.658Z] 04:14:38 [task 2019-03-25T04:14:38.756Z] 04:14:38 INFO - PID 17717 | 1553487277477 geckodriver::marionette DEBUG Connection established on 127.0.0.1:2828. Waiting for Marionette handshake
INFO - PID 17717 | =================================================================
ERROR - PID 17717 | ==17724==ERROR: AddressSanitizer: stack-use-after-scope on address 0x7f08a21c3b20 at pc 0x55b36787fa36 bp 0x7f08b5b568a0 sp 0x7f08b5b56050
INFO - PID 17717 | READ of size 83 at 0x7f08a21c3b20 thread T10 (Socket Thread)
INFO - PID 17717 | 1553487277549 Marionette DEBUG Accepted connection 0 from 127.0.0.1:54202
INFO - PID 17717 | #0 0x55b36787fa35 in __asan_memcpy /builds/worker/workspace/moz-toolchain/src/llvm/projects/compiler-rt/lib/asan/asan_interceptors_memintrinsics.cc:23:3
INFO - PID 17717 | #1 0x7f08beecd548 in NS_CopySegmentToBuffer /builds/worker/workspace/build/src/xpcom/io/nsStreamUtils.cpp:720:3
INFO - PID 17717 | #2 0x7f08beecd548 in ReadSegments /builds/worker/workspace/build/src/xpcom/io/nsStringStream.cpp:261
INFO - PID 17717 | #3 0x7f08beecd548 in nsStringInputStream::Read(char*, unsigned int, unsigned int*) /builds/worker/workspace/build/src/xpcom/io/nsStringStream.cpp:236
INFO - PID 17717 | #4 0x7f08beea650e in nsMultiplexInputStream::Read(char*, unsigned int, unsigned int*) /builds/worker/workspace/build/src/xpcom/io/nsMultiplexInputStream.cpp:415:44
INFO - PID 17717 | #5 0x7f08bf12feb8 in nsBufferedInputStream::Fill() /builds/worker/workspace/build/src/netwerk/base/nsBufferedStreams.cpp:487:18
INFO - PID 17717 | #6 0x7f08bf130308 in ReadSegments /builds/worker/workspace/build/src/netwerk/base/nsBufferedStreams.cpp:450:12
INFO - PID 17717 | #7 0x7f08bf130308 in non-virtual thunk to nsBufferedInputStream::ReadSegments(nsresult (*)(nsIInputStream*, void*, char const*, unsigned int, unsigned int, unsigned int*), void*, unsigned int, unsigned int*) /builds/worker/workspace/build/src/netwerk/base/nsBufferedStreams.cpp
INFO - PID 17717 | #8 0x7f08bfbee96f in mozilla::net::nsHttpTransaction::ReadSegments(mozilla::net::nsAHttpSegmentReader*, unsigned int, unsigned int*) /builds/worker/workspace/build/src/netwerk/protocol/http/nsHttpTransaction.cpp:745:23
INFO - PID 17717 | #9 0x7f08bfb88bf3 in mozilla::net::nsHttpConnection::OnSocketWritable() /builds/worker/workspace/build/src/netwerk/protocol/http/nsHttpConnection.cpp:1916:26
INFO - PID 17717 | #10 0x7f08bfb8add3 in OnOutputStreamReady /builds/worker/workspace/build/src/netwerk/protocol/http/nsHttpConnection.cpp:2439:17
INFO - PID 17717 | #11 0x7f08bfb8add3 in mozilla::net::nsHttpConnection::Activate(mozilla::net::nsAHttpTransaction*, unsigned int, int) /builds/worker/workspace/build/src/netwerk/protocol/http/nsHttpConnection.cpp:840
INFO - PID 17717 | #12 0x7f08bfbbdea8 in mozilla::net::nsHttpConnectionMgr::DispatchAbstractTransaction(mozilla::net::nsHttpConnectionMgr::nsConnectionEntry*, mozilla::net::nsAHttpTransaction*, unsigned int, mozilla::net::nsHttpConnection*, int) /builds/worker/workspace/build/src/netwerk/protocol/http/nsHttpConnectionMgr.cpp:1840:14
INFO - PID 17717 | #13 0x7f08bfbbcb97 in mozilla::net::nsHttpConnectionMgr::DispatchTransaction(mozilla::net::nsHttpConnectionMgr::nsConnectionEntry*, mozilla::net::nsHttpTransaction*, mozilla::net::nsHttpConnection*) /builds/worker/workspace/build/src/netwerk/protocol/http/nsHttpConnectionMgr.cpp:1766:8
INFO - PID 17717 | #14 0x7f08bfbbd9d1 in mozilla::net::nsHttpConnectionMgr::TryDispatchTransactionOnIdleConn(mozilla::net::nsHttpConnectionMgr::nsConnectionEntry*, mozilla::net::nsHttpConnectionMgr::PendingTransactionInfo*, bool, bool*) /builds/worker/workspace/build/src/netwerk/protocol/http/nsHttpConnectionMgr.cpp:1722:19
INFO - PID 17717 | #15 0x7f08bfbb09cc in mozilla::net::nsHttpConnectionMgr::TryDispatchTransaction(mozilla::net::nsHttpConnectionMgr::nsConnectionEntry*, bool, mozilla::net::nsHttpConnectionMgr::PendingTransactionInfo*) /builds/worker/workspace/build/src/netwerk/protocol/http/nsHttpConnectionMgr.cpp:1601:19
INFO - PID 17717 | #16 0x7f08bfbafae9 in mozilla::net::nsHttpConnectionMgr::DispatchPendingQ(nsTArray<RefPtr<mozilla::net::nsHttpConnectionMgr::PendingTransactionInfo> >&, mozilla::net::nsHttpConnectionMgr::nsConnectionEntry*, bool) /builds/worker/workspace/build/src/netwerk/protocol/http/nsHttpConnectionMgr.cpp:980:10
INFO - PID 17717 | #17 0x7f08bfbb4b5c in mozilla::net::nsHttpConnectionMgr::ProcessPendingQForEntry(mozilla::net::nsHttpConnectionMgr::nsConnectionEntry*, bool) /builds/worker/workspace/build/src/netwerk/protocol/http/nsHttpConnectionMgr.cpp:1190:29
INFO - PID 17717 | #18 0x7f08bfba9d73 in mozilla::net::nsHttpConnectionMgr::OnMsgProcessPendingQ(int, mozilla::net::ARefBase*) /builds/worker/workspace/build/src/netwerk/protocol/http/nsHttpConnectionMgr.cpp:2536:16
INFO - PID 17717 | #19 0x7f08bfba8cfe in mozilla::net::nsHttpConnectionMgr::OnMsgReclaimConnection(int, mozilla::net::ARefBase*) /builds/worker/workspace/build/src/netwerk/protocol/http/nsHttpConnectionMgr.cpp:2854:3
INFO - PID 17717 | #20 0x7f08bfbd06af in mozilla::net::nsHttpConnectionMgr::nsHalfOpenSocket::SetupConn(nsIAsyncOutputStream*, bool) /builds/worker/workspace/build/src/netwerk/protocol/http/nsHttpConnectionMgr.cpp:4880:32
INFO - PID 17717 | #21 0x7f08bfbce5eb in mozilla::net::nsHttpConnectionMgr::nsHalfOpenSocket::OnOutputStreamReady(nsIAsyncOutputStream*) /builds/worker/workspace/build/src/netwerk/protocol/http/nsHttpConnectionMgr.cpp:4417:17
INFO - PID 17717 | #22 0x7f08bf1e4398 in mozilla::net::nsSocketOutputStream::OnSocketReady(nsresult) /builds/worker/workspace/build/src/netwerk/base/nsSocketTransport2.cpp:514:27
INFO - PID 17717 | #23 0x7f08bf1f1348 in mozilla::net::nsSocketTransport::OnSocketReady(PRFileDesc*, short) /builds/worker/workspace/build/src/netwerk/base/nsSocketTransport2.cpp:2195:15
INFO - PID 17717 | #24 0x7f08bf202381 in mozilla::net::nsSocketTransportService::DoPollIteration(mozilla::BaseTimeDuration<mozilla::TimeDurationValueCalculator>*) /builds/worker/workspace/build/src/netwerk/base/nsSocketTransportService2.cpp
INFO - PID 17717 | #25 0x7f08bf200515 in mozilla::net::nsSocketTransportService::Run() /builds/worker/workspace/build/src/netwerk/base/nsSocketTransportService2.cpp:973:7
INFO - PID 17717 | #26 0x7f08bf2029fc in non-virtual thunk to mozilla::net::nsSocketTransportService::Run() /builds/worker/workspace/build/src/netwerk/base/nsSocketTransportService2.cpp
INFO - PID 17717 | #27 0x7f08bef623a9 in nsThread::ProcessNextEvent(bool, bool*) /builds/worker/workspace/build/src/xpcom/threads/nsThread.cpp:1180:14
INFO - PID 17717 | #28 0x7f08bef68b48 in NS_ProcessNextEvent(nsIThread*, bool) /builds/worker/workspace/build/src/xpcom/threads/nsThreadUtils.cpp:482:10
INFO - PID 17717 | #29 0x7f08bff2a93a in mozilla::ipc::MessagePumpForNonMainThreads::Run(base::MessagePump::Delegate*) /builds/worker/workspace/build/src/ipc/glue/MessagePump.cpp:303:20
INFO - PID 17717 | #30 0x7f08bfe5c0df in RunInternal /builds/worker/workspace/build/src/ipc/chromium/src/base/message_loop.cc:315:10
INFO - PID 17717 | #31 0x7f08bfe5c0df in RunHandler /builds/worker/workspace/build/src/ipc/chromium/src/base/message_loop.cc:308
INFO - PID 17717 | #32 0x7f08bfe5c0df in MessageLoop::Run() /builds/worker/workspace/build/src/ipc/chromium/src/base/message_loop.cc:290
INFO - PID 17717 | #33 0x7f08bef5c37a in nsThread::ThreadFunc(void*) /builds/worker/workspace/build/src/xpcom/threads/nsThread.cpp:454:11
INFO - PID 17717 | #34 0x7f08dfc225ad in _pt_root /builds/worker/workspace/build/src/nsprpub/pr/src/pthreads/ptthread.c:201:5
INFO - PID 17717 | #35 0x7f08df8696b9 in start_thread (/lib/x86_64-linux-gnu/libpthread.so.0+0x76b9)
INFO - PID 17717 | #36 0x7f08de8f241c in clone /build/glibc-LK5gWL/glibc-2.23/misc/../sysdeps/unix/sysv/linux/x86_64/clone.S:109
INFO - PID 17717 |
INFO - PID 17717 | Address 0x7f08a21c3b20 is located in stack of thread T57 (SSL Cert #1) at offset 3328 in frame
INFO - PID 17717 | #0 0x7f08db3cc7af in sqlite3VdbeExec /builds/worker/workspace/build/src/db/sqlite3/src/sqlite3.c:83948
INFO - PID 17717 |
INFO - PID 17717 | This frame has 75 object(s):
INFO - PID 17717 | [32, 40) 'rValue.i12937' (line 83547)
INFO - PID 17717 | [64, 72) 'iValue.i12938' (line 83548)
INFO - PID 17717 | [96, 104) 'rValue.i12704' (line 83547)
INFO - PID 17717 | [128, 136) 'iValue.i12705' (line 83548)
INFO - PID 17717 | [160, 168) 'rValue.i12672' (line 83547)
INFO - PID 17717 | [192, 200) 'iValue.i12673' (line 83548)
INFO - PID 17717 | [224, 232) 'rValue.i12640' (line 83547)
INFO - PID 17717 | [256, 264) 'iValue.i12641' (line 83548)
INFO - PID 17717 | [288, 360) 'b.i.i' (line 74162)
INFO - PID 17717 | [400, 408) 'nByte.i.i' (line 74169)
INFO - PID 17717 | [432, 440) 'sz.i11904' (line 133802)
INFO - PID 17717 | [464, 472) 'rValue.i11569' (line 83547)
INFO - PID 17717 | [496, 504) 'iValue.i11570' (line 83548)
INFO - PID 17717 | [528, 536) 'v64.i10615' (line 31218)
INFO - PID 17717 | [560, 568) 'v64.i' (line 31218)
INFO - PID 17717 | [592, 600) 'rValue.i10327' (line 83547)
INFO - PID 17717 | [624, 632) 'iValue.i10328' (line 83548)
INFO - PID 17717 | [656, 664) 'rValue.i' (line 83547)
INFO - PID 17717 | [688, 696) 'iValue.i' (line 83548)
INFO - PID 17717 | [720, 728) 'y.i' (line 30189)
INFO - PID 17717 | [752, 760) 'z.i10184' (line 30190)
INFO - PID 17717 | [784, 788) 'res.i' (line 94127)
INFO - PID 17717 | [800, 808) 'v64.i.i9469' (line 31218)
INFO - PID 17717 | [832, 840) 'v64.i76.i' (line 31218)
INFO - PID 17717 | [864, 872) 'v64.i.i' (line 31218)
INFO - PID 17717 | [896, 952) 'm.i9410' (line 80756)
INFO - PID 17717 | [992, 1048) 'v.i9411' (line 80756)
INFO - PID 17717 | [1088, 1144) 'm.i' (line 80838)
INFO - PID 17717 | [1184, 1192) 'pDbPage.i154.i.i' (line 65115)
INFO - PID 17717 | [1216, 1224) 'pDbPage.i111.i.i' (line 65115)
INFO - PID 17717 | [1248, 1256) 'pDbPage.i.i.i' (line 65115)
INFO - PID 17717 | [1280, 1281) 'ePtrmapType.i.i' (line 72576)
INFO - PID 17717 | [1296, 1300) 'iPtrmapParent.i.i' (line 72577)
INFO - PID 17717 | [1312, 1408) 'sCheck.i' (line 73004)
INFO - PID 17717 | [1440, 1540) 'zErr.i' (line 73007)
INFO - PID 17717 | [1584, 1592) 'notUsed.i' (line 73075)
INFO - PID 17717 | [1616, 1640) 'head.i35.i' (line 50051)
INFO - PID 17717 | [1680, 1704) 'head.i.i9007' (line 50051)
INFO - PID 17717 | [1744, 1752) 'pList.addr.i162.i' (line 50189)
INFO - PID 17717 | [1776, 1800) 'head.i132.i' (line 50051)
INFO - PID 17717 | [1840, 1848) 'pList.addr.i.i' (line 50189)
INFO - PID 17717 | [1872, 1896) 'head.i99.i' (line 50051)
INFO - PID 17717 | [1936, 1960) 'head.i.i' (line 50051)
INFO - PID 17717 | [2000, 2320) 'aBucket.i.i' (line 50084)
INFO - PID 17717 | [2384, 2392) 'pAux.i' (line 50271)
INFO - PID 17717 | [2416, 2424) 'pTail.i' (line 50271)
INFO - PID 17717 | [2448, 2504) 'ctx.i8754' (line 74643)
INFO - PID 17717 | [2544, 2600) 'ctx.i' (line 74613)
INFO - PID 17717 | [2640, 2696) 't.i' (line 74614)
INFO - PID 17717 | [2736, 2744) 'sz.i.i8622' (line 54009)
INFO - PID 17717 | [2768, 2772) 'logexists.i' (line 58067)
INFO - PID 17717 | [2784, 2840) 'sMem' (line 85834)
INFO - PID 17717 | [2880, 2884) 'iMeta' (line 86607)
INFO - PID 17717 | [2896, 2900) 'res2720' (line 87272)
INFO - PID 17717 | [2912, 2936) 'r2722' (line 87275)
INFO - PID 17717 | [2976, 2980) 'res2937' (line 87569)
INFO - PID 17717 | [2992, 3016) 'r2938' (line 87572)
INFO - PID 17717 | [3056, 3060) 'res3051'
INFO - PID 17717 | [3072, 3080) 'v' (line 87780)
INFO - PID 17717 | [3104, 3108) 'res3121' (line 87782)
INFO - PID 17717 | [3120, 3168) 'x' (line 87943)
INFO - PID 17717 | [3200, 3208) 'v3520' (line 88303)
INFO - PID 17717 | [3232, 3236) 'res3593' (line 88392)
INFO - PID 17717 | [3248, 3296) 'x3748' (line 88676)
INFO - PID 17717 | [3328, 3332) 'res3821' (line 88718) <== Memory access at offset 3328 partially overflows this variable
INFO - PID 17717 | [3344, 3368) 'r3822' (line 88719) <== Memory access at offset 3328 partially underflows this variable
INFO - PID 17717 | [3408, 3432) 'r3910' (line 88879) <== Memory access at offset 3328 partially underflows this variable
INFO - PID 17717 | [3472, 3476) 'nChange3993' (line 89004)
INFO - PID 17717 | [3488, 3492) 'pgno' (line 89060)
INFO - PID 17717 | [3504, 3536) 'initData' (line 89104)
INFO - PID 17717 | [3568, 3580) 'aRes' (line 89936)
INFO - PID 17717 | [3600, 3656) 'sMem5046' (line 90198)
INFO - PID 17717 | [3696, 3704) 'pVCur5079' (line 90245)
INFO - PID 17717 | [3728, 3784) 'sContext' (line 90363)
INFO - PID 17717 | [3824, 3832) 'rowid5314' (line 90515)
INFO - PID 17717 | HINT: this may be a false positive if your program uses some custom stack unwind mechanism, swapcontext or vfork
INFO - PID 17717 | (longjmp and C++ exceptions *are* supported)
INFO - PID 17717 | Thread T57 (SSL Cert #1) created by T10 (Socket Thread) here:
INFO - PID 17717 | #0 0x55b36786929d in pthread_create /builds/worker/workspace/moz-toolchain/src/llvm/projects/compiler-rt/lib/asan/asan_interceptors.cc:210:3
INFO - PID 17717 | #1 0x7f08dfc14613 in _PR_CreateThread /builds/worker/workspace/build/src/nsprpub/pr/src/pthreads/ptthread.c:433:14
INFO - PID 17717 | #2 0x7f08dfbfe09e in PR_CreateThread /builds/worker/workspace/build/src/nsprpub/pr/src/pthreads/ptthread.c:518:12
INFO - PID 17717 | #3 0x7f08bef5e699 in nsThread::Init(nsTSubstring<char> const&) /builds/worker/workspace/build/src/xpcom/threads/nsThread.cpp:661:8
INFO - PID 17717 | #4 0x7f08bef67c90 in nsThreadManager::NewNamedThread(nsTSubstring<char> const&, unsigned int, nsIThread**) /builds/worker/workspace/build/src/xpcom/threads/nsThreadManager.cpp:416:12
INFO - PID 17717 | #5 0x7f08bef6b9f9 in NS_NewNamedThread(nsTSubstring<char> const&, nsIThread**, nsIRunnable*, unsigned int) /builds/worker/workspace/build/src/xpcom/threads/nsThreadUtils.cpp:135:57
INFO - PID 17717 | #6 0x7f08bef6b42b in nsThreadPool::PutEvent(already_AddRefed<nsIRunnable>, unsigned int) /builds/worker/workspace/build/src/xpcom/threads/nsThreadPool.cpp:111:17
INFO - PID 17717 | #7 0x7f08bef6d3ab in nsThreadPool::Dispatch(already_AddRefed<nsIRunnable>, unsigned int) /builds/worker/workspace/build/src/xpcom/threads/nsThreadPool.cpp:290:5
INFO - PID 17717 | #8 0x7f08ca7e27bc in Dispatch /builds/worker/workspace/build/src/obj-firefox/dist/include/nsIEventTarget.h:37:14
INFO - PID 17717 | #9 0x7f08ca7e27bc in Dispatch /builds/worker/workspace/build/src/security/manager/ssl/SSLServerCertVerification.cpp:1412
INFO - PID 17717 | #10 0x7f08ca7e27bc in mozilla::psm::AuthCertificateHook(void*, PRFileDesc*, int, int) /builds/worker/workspace/build/src/security/manager/ssl/SSLServerCertVerification.cpp:1617
INFO - PID 17717 | #11 0x7f08dba5176d in ssl3_AuthCertificate /builds/worker/workspace/build/src/security/nss/lib/ssl/ssl3con.c:10756:21
INFO - PID 17717 | #12 0x7f08dba51293 in ssl3_CompleteHandleCertificate /builds/worker/workspace/build/src/security/nss/lib/ssl/ssl3con.c:10711:14
INFO - PID 17717 | #13 0x7f08dba56473 in ssl3_HandleCertificate /builds/worker/workspace/build/src/security/nss/lib/ssl/ssl3con.c:10579:12
INFO - PID 17717 | #14 0x7f08dba56473 in ssl3_HandlePostHelloHandshakeMessage /builds/worker/workspace/build/src/security/nss/lib/ssl/ssl3con.c:11778
INFO - PID 17717 | #15 0x7f08dba56473 in ssl3_HandleHandshakeMessage /builds/worker/workspace/build/src/security/nss/lib/ssl/ssl3con.c:11721
INFO - PID 17717 | #16 0x7f08dba60116 in ssl3_HandleHandshake /builds/worker/workspace/build/src/security/nss/lib/ssl/ssl3con.c:11895:18
INFO - PID 17717 | #17 0x7f08dba60116 in ssl3_HandleNonApplicationData /builds/worker/workspace/build/src/security/nss/lib/ssl/ssl3con.c:12403
INFO - PID 17717 | #18 0x7f08dba61fb1 in ssl3_HandleRecord /builds/worker/workspace/build/src/security/nss/lib/ssl/ssl3con.c:12684:12
INFO - PID 17717 | #19 0x7f08dba7b854 in ssl3_GatherCompleteHandshake /builds/worker/workspace/build/src/security/nss/lib/ssl/ssl3gthr.c:512:18
INFO - PID 17717 | #20 0x7f08dba8e237 in SSL_ForceHandshake /builds/worker/workspace/build/src/security/nss/lib/ssl/sslsecur.c:370:24
INFO - PID 17717 | #21 0x7f08ca863dc3 in nsNSSSocketInfo::DriveHandshake() /builds/worker/workspace/build/src/security/manager/ssl/nsNSSIOLayer.cpp:393:18
INFO - PID 17717 | #22 0x7f08bfb86015 in mozilla::net::nsHttpConnection::EnsureNPNComplete(nsresult&, unsigned int&) /builds/worker/workspace/build/src/netwerk/protocol/http/nsHttpConnection.cpp:534:15
INFO - PID 17717 | #23 0x7f08bfb88a20 in mozilla::net::nsHttpConnection::OnSocketWritable() /builds/worker/workspace/build/src/netwerk/protocol/http/nsHttpConnection.cpp:1898:17
INFO - PID 17717 | #24 0x7f08bfb98ab6 in OnOutputStreamReady /builds/worker/workspace/build/src/netwerk/protocol/http/nsHttpConnection.cpp:2439:17
INFO - PID 17717 | #25 0x7f08bfb98ab6 in non-virtual thunk to mozilla::net::nsHttpConnection::OnOutputStreamReady(nsIAsyncOutputStream*) /builds/worker/workspace/build/src/netwerk/protocol/http/nsHttpConnection.cpp
INFO - PID 17717 | #26 0x7f08bf1e4398 in mozilla::net::nsSocketOutputStream::OnSocketReady(nsresult) /builds/worker/workspace/build/src/netwerk/base/nsSocketTransport2.cpp:514:27
INFO - PID 17717 | #27 0x7f08bf1f1348 in mozilla::net::nsSocketTransport::OnSocketReady(PRFileDesc*, short) /builds/worker/workspace/build/src/netwerk/base/nsSocketTransport2.cpp:2195:15
INFO - PID 17717 | #28 0x7f08bf202381 in mozilla::net::nsSocketTransportService::DoPollIteration(mozilla::BaseTimeDuration<mozilla::TimeDurationValueCalculator>*) /builds/worker/workspace/build/src/netwerk/base/nsSocketTransportService2.cpp
INFO - PID 17717 | #29 0x7f08bf200515 in mozilla::net::nsSocketTransportService::Run() /builds/worker/workspace/build/src/netwerk/base/nsSocketTransportService2.cpp:973:7
INFO - PID 17717 | #30 0x7f08bf2029fc in non-virtual thunk to mozilla::net::nsSocketTransportService::Run() /builds/worker/workspace/build/src/netwerk/base/nsSocketTransportService2.cpp
INFO - PID 17717 | #31 0x7f08bef623a9 in nsThread::ProcessNextEvent(bool, bool*) /builds/worker/workspace/build/src/xpcom/threads/nsThread.cpp:1180:14
INFO - PID 17717 | #32 0x7f08bef68b48 in NS_ProcessNextEvent(nsIThread*, bool) /builds/worker/workspace/build/src/xpcom/threads/nsThreadUtils.cpp:482:10
INFO - PID 17717 | #33 0x7f08bff2a93a in mozilla::ipc::MessagePumpForNonMainThreads::Run(base::MessagePump::Delegate*) /builds/worker/workspace/build/src/ipc/glue/MessagePump.cpp:303:20
INFO - PID 17717 | #34 0x7f08bfe5c0df in RunInternal /builds/worker/workspace/build/src/ipc/chromium/src/base/message_loop.cc:315:10
INFO - PID 17717 | #35 0x7f08bfe5c0df in RunHandler /builds/worker/workspace/build/src/ipc/chromium/src/base/message_loop.cc:308
INFO - PID 17717 | #36 0x7f08bfe5c0df in MessageLoop::Run() /builds/worker/workspace/build/src/ipc/chromium/src/base/message_loop.cc:290
INFO - PID 17717 | #37 0x7f08bef5c37a in nsThread::ThreadFunc(void*) /builds/worker/workspace/build/src/xpcom/threads/nsThread.cpp:454:11
INFO - PID 17717 | #38 0x7f08dfc225ad in _pt_root /builds/worker/workspace/build/src/nsprpub/pr/src/pthreads/ptthread.c:201:5
INFO - PID 17717 | #39 0x7f08df8696b9 in start_thread (/lib/x86_64-linux-gnu/libpthread.so.0+0x76b9)
INFO - PID 17717 |
INFO - PID 17717 | Thread T10 (Socket Thread) created by T0 here:
INFO - PID 17717 | #0 0x55b36786929d in pthread_create /builds/worker/workspace/moz-toolchain/src/llvm/projects/compiler-rt/lib/asan/asan_interceptors.cc:210:3
INFO - PID 17717 | #1 0x7f08dfc14613 in _PR_CreateThread /builds/worker/workspace/build/src/nsprpub/pr/src/pthreads/ptthread.c:433:14
INFO - PID 17717 | #2 0x7f08dfbfe09e in PR_CreateThread /builds/worker/workspace/build/src/nsprpub/pr/src/pthreads/ptthread.c:518:12
INFO - PID 17717 | #3 0x7f08bef5e699 in nsThread::Init(nsTSubstring<char> const&) /builds/worker/workspace/build/src/xpcom/threads/nsThread.cpp:661:8
INFO - PID 17717 | #4 0x7f08bef67c90 in nsThreadManager::NewNamedThread(nsTSubstring<char> const&, unsigned int, nsIThread**) /builds/worker/workspace/build/src/xpcom/threads/nsThreadManager.cpp:416:12
INFO - PID 17717 | #5 0x7f08bef6b9f9 in NS_NewNamedThread(nsTSubstring<char> const&, nsIThread**, nsIRunnable*, unsigned int) /builds/worker/workspace/build/src/xpcom/threads/nsThreadUtils.cpp:135:57
INFO - PID 17717 | #6 0x7f08bf1fe23c in NS_NewNamedThread<14> /builds/worker/workspace/build/src/obj-firefox/dist/include/nsThreadUtils.h:71:10
INFO - PID 17717 | #7 0x7f08bf1fe23c in mozilla::net::nsSocketTransportService::Init() /builds/worker/workspace/build/src/netwerk/base/nsSocketTransportService2.cpp:609
INFO - PID 17717 | #8 0x7f08beee4e2d in mozilla::xpcom::CreateInstanceImpl(mozilla::xpcom::ModuleID, nsISupports*, nsID const&, void**) /builds/worker/workspace/build/src/obj-firefox/xpcom/components/StaticComponents.cpp:10690:7
INFO - PID 17717 | #9 0x7f08bef1712f in CreateInstance /builds/worker/workspace/build/src/xpcom/components/nsComponentManager.cpp:220:46
INFO - PID 17717 | #10 0x7f08bef1712f in nsComponentManagerImpl::GetServiceLocked((anonymous namespace)::MutexLock&, (anonymous namespace)::EntryWrapper&, nsID const&, void**) /builds/worker/workspace/build/src/xpcom/components/nsComponentManager.cpp:1401
INFO - PID 17717 | #11 0x7f08bef0bd25 in nsComponentManagerImpl::GetServiceByContractID(char const*, nsID const&, void**) /builds/worker/workspace/build/src/xpcom/components/nsComponentManager.cpp:1588:10
INFO - PID 17717 | #12 0x7f08bef20065 in CallGetService /builds/worker/workspace/build/src/xpcom/components/nsComponentManagerUtils.cpp:61:43
INFO - PID 17717 | #13 0x7f08bef20065 in nsGetServiceByContractIDWithError::operator()(nsID const&, void**) const /builds/worker/workspace/build/src/xpcom/components/nsComponentManagerUtils.cpp:253
INFO - PID 17717 | #14 0x7f08bed8f72e in nsCOMPtr_base::assign_from_gs_contractid_with_error(nsGetServiceByContractIDWithError const&, nsID const&) /builds/worker/workspace/build/src/xpcom/base/nsCOMPtr.cpp:91:7
INFO - PID 17717 | #15 0x7f08bf14b46d in operator= /builds/worker/workspace/build/src/obj-firefox/dist/include/nsCOMPtr.h:746:5
INFO - PID 17717 | #16 0x7f08bf14b46d in InitializeSocketTransportService /builds/worker/workspace/build/src/netwerk/base/nsIOService.cpp:305
INFO - PID 17717 | #17 0x7f08bf14b46d in mozilla::net::nsIOService::SetOffline(bool) /builds/worker/workspace/build/src/netwerk/base/nsIOService.cpp:1098
INFO - PID 17717 | #18 0x7f08bf149f6a in mozilla::net::nsIOService::Init() /builds/worker/workspace/build/src/netwerk/base/nsIOService.cpp:270:3
INFO - PID 17717 | #19 0x7f08bf14d3ae in mozilla::net::nsIOService::GetInstance() /builds/worker/workspace/build/src/netwerk/base/nsIOService.cpp:361:9
INFO - PID 17717 | #20 0x7f08beee053e in mozilla::xpcom::CreateInstanceImpl(mozilla::xpcom::ModuleID, nsISupports*, nsID const&, void**) /builds/worker/workspace/build/src/obj-firefox/xpcom/components/StaticComponents.cpp:8192:48
INFO - PID 17717 | #21 0x7f08bef1712f in CreateInstance /builds/worker/workspace/build/src/xpcom/components/nsComponentManager.cpp:220:46
INFO - PID 17717 | #22 0x7f08bef1712f in nsComponentManagerImpl::GetServiceLocked((anonymous namespace)::MutexLock&, (anonymous namespace)::EntryWrapper&, nsID const&, void**) /builds/worker/workspace/build/src/xpcom/components/nsComponentManager.cpp:1401
INFO - PID 17717 | #23 0x7f08bef0bd25 in nsComponentManagerImpl::GetServiceByContractID(char const*, nsID const&, void**) /builds/worker/workspace/build/src/xpcom/components/nsComponentManager.cpp:1588:10
INFO - PID 17717 | #24 0x7f08c10c5d41 in CallGetService<nsIIOService> /builds/worker/workspace/build/src/obj-firefox/dist/include/nsServiceManagerUtils.h:73:10
INFO - PID 17717 | #25 0x7f08c10c5d41 in nsScriptSecurityManager::Init() /builds/worker/workspace/build/src/caps/nsScriptSecurityManager.cpp:1431
INFO - PID 17717 | #26 0x7f08c10c6c6c in nsScriptSecurityManager::InitStatics() /builds/worker/workspace/build/src/caps/nsScriptSecurityManager.cpp:1492:28
INFO - PID 17717 | #27 0x7f08c0a7ffb8 in nsXPConnect::InitStatics() /builds/worker/workspace/build/src/js/xpconnect/src/nsXPConnect.cpp:135:3
INFO - PID 17717 | #28 0x7f08c0a18738 in xpcModuleCtor() /builds/worker/workspace/build/src/js/xpconnect/src/XPCModule.cpp:11:3
INFO - PID 17717 | #29 0x7f08c82ac438 in nsLayoutModuleInitialize() /builds/worker/workspace/build/src/layout/build/nsLayoutModule.cpp:108:7
INFO - PID 17717 | #30 0x7f08bef0ce95 in nsComponentManagerImpl::Init() /builds/worker/workspace/build/src/xpcom/components/nsComponentManager.cpp:535:5
INFO - PID 17717 | #31 0x7f08befba3e9 in NS_InitXPCOM /builds/worker/workspace/build/src/xpcom/build/XPCOMInit.cpp:466:51
INFO - PID 17717 | #32 0x7f08caea6824 in Initialize /builds/worker/workspace/build/src/toolkit/xre/nsAppRunner.cpp:1296:8
INFO - PID 17717 | #33 0x7f08caea6824 in XREMain::XRE_main(int, char**, mozilla::BootstrapConfig const&) /builds/worker/workspace/build/src/toolkit/xre/nsAppRunner.cpp:4723
INFO - PID 17717 | #34 0x7f08caea81ae in XRE_main(int, char**, mozilla::BootstrapConfig const&) /builds/worker/workspace/build/src/toolkit/xre/nsAppRunner.cpp:4811:21
INFO - PID 17717 | #35 0x55b3678b321c in do_main /builds/worker/workspace/build/src/browser/app/nsBrowserApp.cpp:212:22
INFO - PID 17717 | #36 0x55b3678b321c in main /builds/worker/workspace/build/src/browser/app/nsBrowserApp.cpp:291
INFO - PID 17717 | #37 0x7f08de80b82f in __libc_start_main /build/glibc-LK5gWL/glibc-2.23/csu/../csu/libc-start.c:291
INFO - PID 17717 |
INFO - PID 17717 | SUMMARY: AddressSanitizer: stack-use-after-scope /builds/worker/workspace/moz-toolchain/src/llvm/projects/compiler-rt/lib/asan/asan_interceptors_memintrinsics.cc:23:3 in __asan_memcpy
INFO - PID 17717 | Shadow bytes around the buggy address:
INFO - PID 17717 | 0x0fe194430710: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
INFO - PID 17717 | 0x0fe194430720: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
INFO - PID 17717 | 0x0fe194430730: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
INFO - PID 17717 | 0x0fe194430740: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
INFO - PID 17717 | 0x0fe194430750: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
INFO - PID 17717 | =>0x0fe194430760: 00 00 00 00[00]00 00 00 00 00 00 00 00 00 00 00
INFO - PID 17717 | 0x0fe194430770: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
INFO - PID 17717 | 0x0fe194430780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
INFO - PID 17717 | 0x0fe194430790: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
INFO - PID 17717 | 0x0fe1944307a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
INFO - PID 17717 | 0x0fe1944307b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
INFO - PID 17717 | Shadow byte legend (one shadow byte represents 8 application bytes):
INFO - PID 17717 | Addressable: 00
INFO - PID 17717 | Partially addressable: 01 02 03 04 05 06 07
INFO - PID 17717 | Heap left redzone: fa
INFO - PID 17717 | Freed heap region: fd
INFO - PID 17717 | Stack left redzone: f1
INFO - PID 17717 | Stack mid redzone: f2
INFO - PID 17717 | Stack right redzone: f3
INFO - PID 17717 | Stack after return: f5
INFO - PID 17717 | Stack use after scope: f8
INFO - PID 17717 | Global redzone: f9
INFO - PID 17717 | Global init order: f6
INFO - PID 17717 | Poisoned by user: f7
INFO - PID 17717 | Container overflow: fc
INFO - PID 17717 | Array cookie: ac
INFO - PID 17717 | Intra object redzone: bb
INFO - PID 17717 | ASan internal: fe
INFO - PID 17717 | Left alloca redzone: ca
INFO - PID 17717 | Right alloca redzone: cb
INFO - PID 17717 | Shadow gap: cc
INFO - PID 17717 | ==17724==ABORTING
INFO - PID 17717 | Exiting due to channel error.
INFO - PID 17717 | 1553487278630 mozrunner::runner DEBUG Killing process 17724
INFO - PID 17717 | Exiting due to channel error.
INFO - PID 17717 | Exiting due to channel error.
INFO - PID 17717 | 1553487278642 webdriver::server DEBUG <- 500 Internal Server Error {"value":{"error":"unknown error","message":"Socket timeout reading Marionette handshake data: EOF reading marionette message","stacktrace":""}}
INFO - STDOUT: ERROR

Henrik Skupin [:whimboo][⌚️UTC+1]

Updated

•

5 years ago

Component: geckodriver → XPCOM

Keywords: assertion

Product: Testing → Core

Version: Version 3 → unspecified

Nathan Froyd [:froydnj]

Comment 1

•

5 years ago

I think--there's a lot of twistyness in our stream code, so I'm not 100% here--that this is some kind of problem with some buffer/vars on the networking side of things that get passed down into the XPCOM code. I am completely willing to accept that we did something wrong in the XPCOM code, but this smells like something higher-level.

Marking as security-sensitive because stack-use-after-scope seems comparable to uafs.

Group: core-security

Component: XPCOM → Networking

Andrew McCreight [:mccr8]

Updated

•

5 years ago

Group: core-security → network-core-security

Andrew McCreight [:mccr8]

Updated

•

5 years ago

Depends on: 1538237

Honza Bambas (:mayhemer)

Comment 2

•

5 years ago

This could as well be related to bug 1538098.

Andrew McCreight [:mccr8]

Updated

•

5 years ago

Depends on: 1538098
No longer depends on: 1538237

Honza Bambas (:mayhemer)

Comment 3

•

5 years ago

One possibility is that someone manipulates mReqHeaderBuf after we have created the upload stream multiplex, but this seems unlikely as we haven't done any major change in the necko code around this member and the code itself is ancient. Also, the memory referred is heap allocated (nsCString).

Other possibility is that somebody is using shared-data-only input stream Rebind()'ed to nsAutoCString (short enough from time to time) as an upload stream for http channel. But that should crash nearly all the time, IMO.

Could the clue for the memory being on stack be a red herring?

Honza Bambas (:mayhemer)

Comment 4

•

5 years ago

The reference to the SSL Cert thread indicates this could be an OCSP POST request.

Hmm... I remember bug 1533640 that was blocking the Vector change bug (which itself is not cause of the crash) touching the OCSP code. And it landed on 21st.

Adding folks involved.

Blocks: 1533640

Flags: needinfo?(jwalden)

Flags: needinfo?(dkeeler)

Dana Keeler (she/her) (use needinfo) [:keeler] (on leave)

Comment 5

•

5 years ago

Now that we pass in a span over the OCSP POST data (it comes from the stack of a cert verifier thread), I suspect that when we "cancel" a request due to a timeout, necko still has a handle on it and tries to use it after that function has returned (currently we never actually call cancel - we just kind-of drop the stream loader and notify our caller that we're done).

Honza - would calling cancel on the stream loader's request here be enough to prevent necko from trying to use the post data? https://searchfox.org/mozilla-central/rev/2c912888e3b7ae4baf161d98d7a01434f31830aa/security/manager/ssl/nsNSSCallbacks.cpp#426

Flags: needinfo?(dkeeler)

Honza Bambas (:mayhemer)

Comment 6

•

5 years ago

I'm not sure I see "the stream loader's request" in the code you refer, so hard to say what you mean with it.

If you call nsHttpChannel->Cancel, you can't make any assumption about access to the upload stream. Cancel() is called on the main thread, http transaction runs on the socket thread. It's too racy.

The more correct way is to simply make a copy of the data, if small enough.

Or keep it in some (maybe newly built) input stream set that can be shared and ref counted. Could storagestream work for you better? It provides multiple copies of a single buffer via nsIInputStream that, when alive, keep the data alive (when adopted by the stream). That means some refactoring tho.

Flags: needinfo?(jwalden) → needinfo?(dkeeler)

Jeff Walden [:Waldo]

Assignee

Comment 7

•

5 years ago

The change from Vector to borrowed-pointer was just to avoid copying OCSP_REQUEST_MAX_LENGTH bytes -- which is only 128, I think? In any case it's a small number. I made the change to avoid a copy, but if there are actual lifetime issues to think through doing this, perhaps we should just put a 128-byte buffer directly into OCSPRequest and then its lifetime naturally will be extended for oddities like this.

In short, it's not clear to me it's worth the trouble of thinking about lifetimes here.

Jeff Walden [:Waldo]

Assignee

Comment 8

•

5 years ago

(I have a patch for this, just checking that it builds)

Dana Keeler (she/her) (use needinfo) [:keeler] (on leave)

Comment 9

•

5 years ago

Yeah I was just going to say it's not worth jumping through hoops to get the lifetimes to work out. If this isn't what you're already doing, I think the simplest change would be to make this call https://searchfox.org/mozilla-central/rev/2c912888e3b7ae4baf161d98d7a01434f31830aa/security/manager/ssl/nsNSSCallbacks.cpp#287 take NS_ASSIGNMENT_COPY as its third argument (which isn't obvious here because it defaults to NS_ASSIGNMENT_DEPEND).

Flags: needinfo?(dkeeler)

Honza Bambas (:mayhemer)

Comment 11

•

5 years ago

(In reply to Dana Keeler (she/her) (use needinfo) (:keeler for reviews) from comment #9)

Yeah I was just going to say it's not worth jumping through hoops to get the lifetimes to work out. If this isn't what you're already doing, I think the simplest change would be to make this call https://searchfox.org/mozilla-central/rev/2c912888e3b7ae4baf161d98d7a01434f31830aa/security/manager/ssl/nsNSSCallbacks.cpp#287 take NS_ASSIGNMENT_COPY as its third argument (which isn't obvious here because it defaults to NS_ASSIGNMENT_DEPEND).

Yes!

Jeff Walden [:Waldo]

Assignee

Comment 12

•

5 years ago

Attached file Bug 1538621. r=keeler — Details

Honza Bambas (:mayhemer)

Updated

•

5 years ago

Component: Networking → Security: PSM

Priority: P5 → P1

Honza Bambas (:mayhemer)

Updated

•

5 years ago

Assignee: nobody → jwalden

Jeff Walden [:Waldo]

Assignee

Comment 13

•

5 years ago

Lando is hating me (because security bug?) so https://hg.mozilla.org/integration/mozilla-inbound/rev/f0935a5cd291518c32c0eab8688e6cec645899a0

Sebastian Hengst [:aryx] (needinfo me if it's about an intermittent or backout)

Comment 14

•

5 years ago

https://hg.mozilla.org/mozilla-central/rev/197fa5d521f1

Group: network-core-security → core-security-release

Status: NEW → RESOLVED

Closed: 5 years ago

status-firefox68: --- → fixed

Resolution: --- → FIXED

Target Milestone: --- → mozilla68

Calixte Denizet (:calixte)

Comment 15

•

5 years ago

It seems that the crashes we had in bug 1538098 are now fixed thanks to this patch.
:Waldo, would it be possible to add a test to avoid such a situation in the future ?

Flags: needinfo?(jwalden)

Sebastian Hengst [:aryx] (needinfo me if it's about an intermittent or backout)

Comment 16

•

5 years ago

https://hg.mozilla.org/integration/mozilla-inbound/rev/f0935a5cd291518c32c0eab8688e6cec645899a0
https://hg.mozilla.org/mozilla-central/rev/f0935a5cd291

Jeff Walden [:Waldo]

Assignee

Comment 17

•

5 years ago

In the abstract, yes, it probably would be possible to do this. In practicality, it would probably be a poor use of my time to figure out how to set up an OCSP response just so to trigger all this in exactly the right manner with an xpcshell test most likely. It'd be great if someone were to do that, but it really would need to be someone other than me who understands the workings of OCSP and how to invoke it in XPCOM-land better than I do.

Flags: needinfo?(jwalden)

Ryan VanderMeulen [:RyanVM]

Updated

•

5 years ago

status-firefox66: --- → unaffected

status-firefox67: --- → unaffected

status-firefox-esr60: --- → unaffected

tracking-firefox68: --- → +

Peter Van der Beken [:peterv]

Comment 18

•

5 years ago

https://hg.mozilla.org/projects/ash/rev/197fa5d521f10986c481b178a9a13328d1dafbd4
Bug 1538621.  r=keeler

Sylvestre Ledru [:Sylvestre]

Updated

•

4 years ago

Blocks: asan-maintenance

Daniel Veditz [:dveditz]

Updated

•

4 years ago

Group: core-security-release