Closed Bug 1566306 Opened 5 years ago Closed 4 years ago

Intermittent <test-name> | application crashed [@ objc_msgLookupSuper2 + 0x5d]

Categories

(Core :: Widget: Cocoa, defect, P3)

defect

Tracking

()

RESOLVED DUPLICATE of bug 1596826

People

(Reporter: intermittent-bug-filer, Unassigned)

References

Details

(Keywords: crash, intermittent-failure, regression)

Crash Data

Filed by: nerli [at] mozilla.com
Parsed log: https://treeherder.mozilla.org/logviewer.html#?job_id=256664895&repo=mozilla-inbound
Full log: https://queue.taskcluster.net/v1/task/aOwamfFPSICKbilnxzhIVA/runs/0/artifacts/public/logs/live_backing.log


01:50:19 INFO - TEST-START | netwerk/test/mochitests/test_different_domain_in_hierarchy.html
01:50:19 INFO - GECKO(1786) | MEMORY STAT | vsize 6722MB | residentFast 97MB | heapAllocated 13MB
01:50:20 INFO - GECKO(1786) | Exiting due to channel error.
01:50:20 INFO - GECKO(1786) | Exiting due to channel error.
01:50:20 INFO - GECKO(1786) | Exiting due to channel error.
01:50:20 INFO - GECKO(1786) | Exiting due to channel error.
01:50:20 INFO - TEST-INFO | Main app process: exit 1
01:50:20 INFO - Buffered messages logged at 01:50:19
01:50:20 INFO - TEST-PASS | netwerk/test/mochitests/test_different_domain_in_hierarchy.html | message data received from popup
01:50:20 INFO - TEST-PASS | netwerk/test/mochitests/test_different_domain_in_hierarchy.html | message data received from popup
01:50:20 INFO - TEST-PASS | netwerk/test/mochitests/test_different_domain_in_hierarchy.html | message data received from popup
01:50:20 INFO - TEST-PASS | netwerk/test/mochitests/test_different_domain_in_hierarchy.html | total number of cookies
01:50:20 INFO - Buffered messages finished
01:50:20 ERROR - TEST-UNEXPECTED-FAIL | netwerk/test/mochitests/test_different_domain_in_hierarchy.html | application terminated with exit code 1
01:50:20 INFO - runtests.py | Application ran for: 0:00:06.619222
01:50:20 INFO - zombiecheck | Reading PID log: /var/folders/ng/1t75hz8x645gs2cfs1nk8qk0000017/T/tmprPhZvQpidlog
01:50:20 INFO - ==> process 1786 launched child process 1787
01:50:20 INFO - ==> process 1786 launched child process 1788
01:50:20 INFO - ==> process 1786 launched child process 1789
01:50:20 INFO - ==> process 1786 launched child process 1790
01:50:20 INFO - zombiecheck | Checking for orphan process with PID: 1787
01:50:20 INFO - zombiecheck | Checking for orphan process with PID: 1788
01:50:20 INFO - zombiecheck | Checking for orphan process with PID: 1789
01:50:20 INFO - zombiecheck | Checking for orphan process with PID: 1790
01:50:20 INFO - mozcrash Downloading symbols from: https://queue.taskcluster.net/v1/task/BiQAahPoTBCZ9tDgvu5aUw/artifacts/public/build/target.crashreporter-symbols.zip
01:50:24 INFO - mozcrash Copy/paste: /Users/cltbld/tasks/task_1563241393/build/macosx64-minidump_stackwalk /var/folders/ng/1t75hz8x645gs2cfs1nk8qk0000017/T/tmpUS1zUm.mozrunner/minidumps/438D9F00-D3D5-4A9D-BBC6-6002A35859CD.dmp /var/folders/ng/1t75hz8x645gs2cfs1nk8qk0000017/T/tmpuLM92W
01:50:32 INFO - mozcrash Saved minidump as /Users/cltbld/tasks/task_1563241393/build/blobber_upload_dir/438D9F00-D3D5-4A9D-BBC6-6002A35859CD.dmp
01:50:32 INFO - mozcrash Saved app info as /Users/cltbld/tasks/task_1563241393/build/blobber_upload_dir/438D9F00-D3D5-4A9D-BBC6-6002A35859CD.extra
01:50:32 INFO - PROCESS-CRASH | netwerk/test/mochitests/test_different_domain_in_hierarchy.html | application crashed [@ objc_msgLookupSuper2 + 0x5d]
01:50:32 INFO - Crash dump filename: /var/folders/ng/1t75hz8x645gs2cfs1nk8qk0000017/T/tmpUS1zUm.mozrunner/minidumps/438D9F00-D3D5-4A9D-BBC6-6002A35859CD.dmp
01:50:32 INFO - Operating system: Mac OS X
01:50:32 INFO - 10.14.5 18F132
01:50:32 INFO - CPU: amd64
01:50:32 INFO - family 6 model 69 stepping 1
01:50:32 INFO - 4 CPUs
01:50:32 INFO -
01:50:32 INFO - GPU: UNKNOWN
01:50:32 INFO -
01:50:32 INFO - Crash reason: EXC_BAD_ACCESS / KERN_INVALID_ADDRESS
01:50:32 INFO - Crash address: 0xffffffffe5e5e5f8
01:50:32 INFO - Process uptime: 6 seconds
01:50:32 INFO -
01:50:32 INFO - Thread 1 (crashed)
01:50:32 INFO - 0 libobjc.A.dylib!objc_msgLookupSuper2 + 0x5d
01:50:32 INFO - rax = 0x000000012b6a57f0 rdx = 0x000000012b387fd0
01:50:32 INFO - rcx = 0x00007fff40076887 rbx = 0x000000012b387fd0
01:50:32 INFO - rsi = 0x00007fff40ac2f88 rdi = 0x0000000123c4b100
01:50:32 INFO - rbp = 0x0000700007832f40 rsp = 0x0000700007832f38
01:50:32 INFO - r8 = 0x0000000000000000 r9 = 0x000000012b488430
01:50:32 INFO - r10 = 0x000065e5e5e5e5e0 r11 = 0x00007fff40ac2f88
01:50:32 INFO - r12 = 0x00007fff42812a62 r13 = 0x0000000123c2e898
01:50:32 INFO - r14 = 0x0000000123c2e880 r15 = 0x000000012b488400
01:50:32 INFO - rip = 0x00007fff6cf4169d
01:50:32 INFO - Found by: given as instruction pointer in context
01:50:32 INFO - 1 CoreFoundation!_CFAppendXML0 + 0x513
01:50:32 INFO - rbp = 0x0000700007833ff0 rsp = 0x0000700007832f50
01:50:32 INFO - rip = 0x00007fff4281260c
01:50:32 INFO - Found by: previous frame's frame pointer
01:50:32 INFO - 2 CoreFoundation!_CFAppendXML0 + 0x59
01:50:32 INFO - rbp = 0x0000700007834050 rsp = 0x0000700007834000
01:50:32 INFO - rip = 0x00007fff42812152
01:50:32 INFO - Found by: previous frame's frame pointer
01:50:32 INFO - 3 CoreFoundation!__CFStringDecodeByteStream3 + 0x1c2
01:50:32 INFO - rbp = 0x0000700007834d60 rsp = 0x0000700007834060
01:50:32 INFO - rip = 0x00007fff427f3362
01:50:32 INFO - Found by: previous frame's frame pointer

Moving to a different component due to NSAnimation on the stack.

Component: Networking → Widget: Cocoa

It looks like the main thread is attempting to close a window while its native window opening animation is running, and somehow this leads to a use-after-free in Cocoa code.

Priority: -- → P3
Summary: Intermittent netwerk/test/mochitests/test_different_domain_in_hierarchy.html | application crashed [@ objc_msgLookupSuper2 + 0x5d] → Intermittent <test-name> | application crashed [@ objc_msgLookupSuper2 + 0x5d]
Crash Signature: [@ objc_msgLookupSuper2 + 0x5d] → [@ objc_msgLookupSuper2 + 0x5d] [@ objc_msgLookup_fpret + 0x57]
Status: NEW → RESOLVED
Crash Signature: [@ objc_msgLookupSuper2 + 0x5d] [@ objc_msgLookup_fpret + 0x57] → [@ objc_msgLookupSuper2 + 0x5d] [@ objc_msgLookup_fpret + 0x57]
Closed: 4 years ago
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.