Closed Bug 1567885 Opened 7 years ago Closed 7 years ago

Intermittent PROCESS-CRASH | Main app process exited normally | application crashed [@ bool mozilla::ipc::ProcessLink::Unsound_IsClosed()]

Categories

(Core :: IPC, defect)

Product:
Core
Component:
IPC
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED DUPLICATE of bug 1493656

People

(Reporter: intermittent-bug-filer, Unassigned)

Details

(Keywords: crash, intermittent-failure, regression)

Crash Data

Filed by: malexandru [at] mozilla.com
Parsed log: https://treeherder.mozilla.org/logviewer.html#?job_id=257644897&repo=mozilla-central
Full log: https://queue.taskcluster.net/v1/task/K1_XlcooRYu-7tgWcxecmA/runs/0/artifacts/public/logs/live_backing.log

07:42:28 INFO - TEST-START | dom/media/test/test_streams_individual_pause.html
07:42:30 INFO - GECKO(12212) | MEMORY STAT | vsize 2103987MB | vsizeMaxContiguous 65051212MB | residentFast 119MB | heapAllocated 11MB
07:42:30 INFO - TEST-OK | dom/media/test/test_streams_individual_pause.html | took 1968ms
07:42:30 INFO - TEST-START | Shutdown
07:42:30 INFO - Passed: 2208
07:42:30 INFO - Failed: 0
07:42:30 INFO - Todo: 2
07:42:30 INFO - Mode: e10s
07:42:30 INFO - Slowest: 33349ms - /tests/dom/media/test/test_eme_unsetMediaKeys_then_capture.html
07:42:30 INFO - SimpleTest FINISHED
07:42:30 INFO - TEST-INFO | Ran 1 Loops
07:42:30 INFO - SimpleTest FINISHED
07:42:31 INFO - GECKO(12212) | [Socket 4204, Chrome_ChildThread] WARNING: pipe error: 109: file z:/task_1563771842/build/src/ipc/chromium/src/chrome/common/ipc_channel_win.cc, line 341
<...>
07:42:41 INFO - PROCESS-CRASH | Main app process exited normally | application crashed [@ bool mozilla::ipc::ProcessLink::Unsound_IsClosed()]
07:42:41 INFO - Crash dump filename: c:\users\task_1563773265\appdata\local\temp\tmpkmvthi.mozrunner\minidumps\eeae7b60-644d-46d4-be6d-9d6190c6b673.dmp
07:42:41 INFO - Operating system: Windows NT
07:42:41 INFO - 10.0.17134
07:42:41 INFO - CPU: amd64
07:42:41 INFO - family 6 model 79 stepping 1
07:42:41 INFO - 16 CPUs
07:42:41 INFO -
07:42:41 INFO - GPU: UNKNOWN
07:42:41 INFO -
07:42:41 INFO - Crash reason: EXCEPTION_ACCESS_VIOLATION_READ
07:42:41 INFO - Crash address: 0xffffffffffffffff
07:42:41 INFO - Assertion: Unknown assertion type 0x00000000
07:42:41 INFO - Process uptime: 145 seconds
07:42:41 INFO -
07:42:41 INFO - Thread 0 (crashed)
07:42:41 INFO - 0 xul.dll!bool mozilla::ipc::ProcessLink::Unsound_IsClosed() [MessageLink.cpp:64fc6a9a9fb2fbcb5483241e7cfde82e1dc5156f : 369 + 0x7]
07:42:41 INFO - rax = 0xe5e5e5e5e5e5e5e5 rdx = 0x0000000000000000
07:42:41 INFO - rcx = 0x00000177ce1cc670 rbx = 0x00000177ce10aaf0
07:42:41 INFO - rsi = 0x00000177ce19fd50 rdi = 0x00000177ce102640
07:42:41 INFO - rbp = 0x00007fffc6933360 rsp = 0x00000005787ff088
07:42:41 INFO - r8 = 0x00000005787ff0b8 r9 = 0x00007fffc6933360
07:42:41 INFO - r10 = 0x0000000000000000 r11 = 0x0000000000000246
07:42:41 INFO - r12 = 0x0000000000000010 r13 = 0x0000000000000008
07:42:41 INFO - r14 = 0x00000177ce150820 r15 = 0x00000177ce150b18
07:42:41 INFO - rip = 0x00007fffc6e21297
07:42:41 INFO - Found by: given as instruction pointer in context
07:42:41 INFO - 1 xul.dll!mozilla::ipc::MessageChannel::Clear() [MessageChannel.cpp:64fc6a9a9fb2fbcb5483241e7cfde82e1dc5156f : 749 + 0xf]
07:42:41 INFO - rbp = 0x00007fffc6933360 rsp = 0x00000005787ff090
07:42:41 INFO - rip = 0x00007fffc6e1c20a
07:42:41 INFO - Found by: stack scanning
07:42:41 INFO - 2 xul.dll!mozilla::ipc::MessageChannel::~MessageChannel() [MessageChannel.cpp:64fc6a9a9fb2fbcb5483241e7cfde82e1dc5156f : 644 + 0x8]
07:42:41 INFO - rbp = 0x00007fffc6933360 rsp = 0x00000005787ff0f0
07:42:41 INFO - rip = 0x00007fffc6e1bcd8
07:42:41 INFO - Found by: call frame info
07:42:41 INFO - 3 xul.dll!mozilla::ipc::IToplevelProtocol::~IToplevelProtocol() [ProtocolUtils.cpp:64fc6a9a9fb2fbcb5483241e7cfde82e1dc5156f : 680 + 0xc]
07:42:41 INFO - rbp = 0x00007fffc6933360 rsp = 0x00000005787ff250
07:42:41 INFO - rip = 0x00007fffc6e245c1
07:42:41 INFO - Found by: call frame info
07:42:41 INFO - 4 xul.dll!void mozilla::net::SocketProcessBridgeParent::~SocketProcessBridgeParent() [SocketProcessBridgeParent.cpp:64fc6a9a9fb2fbcb5483241e7cfde82e1dc5156f : 26 + 0x5]

Looks like yet another variation on bug 1493656, but this one is a very obvious use-after-free (0xe5e5e5e5e5e5e5e5).

Group: dom-core-security
Status: NEW → RESOLVED
Closed: 7 years ago
Resolution: --- → DUPLICATE
Group: dom-core-security
You need to log in before you can comment on or make changes to this bug.