1579038 - Perma Tier 2 memchr crash on Windows10 aarch64

Status: RESOLVED FIXED

(Core :: JavaScript Engine, defect)

Description

[Dorel Luca [:dluca]]

Log:
https://treeherder.mozilla.org/logviewer.html#/jobs?job_id=265089005&repo=mozilla-central&lineNumber=50405

INFO -  Testing MOZ_LOADER_SHARE_GLOBAL=None jsloader.shareGlobal=True
07:26:33     INFO -  Testing MOZ_LOADER_SHARE_GLOBAL='0' jsloader.shareGlobal=True
07:26:36     INFO -  Testing MOZ_LOADER_SHARE_GLOBAL='1' jsloader.shareGlobal=True
07:26:39     INFO -  Testing MOZ_LOADER_SHARE_GLOBAL='0' jsloader.shareGlobal=False
07:27:50     INFO -  mozcrash Downloading symbols from: https://queue.taskcluster.net/v1/task/E40wTUoiROOAPJR6CdJDug/artifacts/public/build/target.crashreporter-symbols.zip
07:27:53     INFO -  mozcrash Copy/paste: C:\tasks\task_1567666117\build\win32-minidump_stackwalk.exe c:\users\testdroid.yoga-010\appdata\local\temp\tmpr145b6.mozrunner\minidumps\6ddb0e81-a77d-466f-a422-15f65da2bda0.dmp c:\users\testdroid.yoga-010\appdata\local\temp\tmp1ww8kd
07:28:05     INFO -  mozcrash Saved minidump as C:\tasks\task_1567666117\build\blobber_upload_dir\6ddb0e81-a77d-466f-a422-15f65da2bda0.dmp
07:28:05     INFO -  mozcrash Saved app info as C:\tasks\task_1567666117\build\blobber_upload_dir\6ddb0e81-a77d-466f-a422-15f65da2bda0.extra
07:28:05    ERROR -  PROCESS-CRASH | js\xpconnect\tests\marionette\test_loader_global_sharing.py TestLoaderGlobalSharing.test_global_sharing_settings | application crashed [@ memchr]
07:28:05     INFO -  Crash dump filename: c:\users\testdroid.yoga-010\appdata\local\temp\tmpr145b6.mozrunner\minidumps\6ddb0e81-a77d-466f-a422-15f65da2bda0.dmp
07:28:05     INFO -  Operating system: Windows NT
07:28:05     INFO -                    10.0.17134
07:28:05     INFO -  CPU: 0x000c
07:28:05     INFO -       8 CPUs
07:28:05     INFO -  GPU: UNKNOWN
07:28:05     INFO -  Crash reason:  EXCEPTION_ACCESS_VIOLATION_READ
07:28:05     INFO -  Crash address: 0x25a8ebae000
07:28:05     INFO -  Process uptime: 0 seconds
07:28:05     INFO -  Thread 0 (crashed)
07:28:05     INFO -   0  VCRUNTIME140.dll!memchr [memchr.c : 131 + 0x8]
07:28:05     INFO -      Found by: given as instruction pointer in context
07:28:05     INFO -   1  xul.dll!js::GeckoProfilerRuntime::allocProfileString(JSContext *,JSScript *) [GeckoProfiler.cpp:63f962127985e6f95afcfb753683e3aae743f66d : 297 + 0x10]
07:28:05     INFO -      Found by: previous frame's frame pointer
07:28:05     INFO -   2  xul.dll!js::jit::BaselineCompiler::compile() [BaselineCodeGen.cpp:63f962127985e6f95afcfb753683e3aae743f66d : 289 + 0xc]
07:28:05     INFO -      Found by: previous frame's frame pointer
07:28:05     INFO -   3  xul.dll!js::jit::BaselineCompile(JSContext *,JSScript *,bool) [BaselineJIT.cpp:63f962127985e6f95afcfb753683e3aae743f66d : 218 + 0x4]
07:28:05     INFO -      Found by: previous frame's frame pointer
07:28:05     INFO -   4  xul.dll!js::jit::BaselineCompileFromBaselineInterpreter(JSContext *,js::jit::BaselineFrame *,unsigned char * *) [BaselineJIT.cpp:63f962127985e6f95afcfb753683e3aae743f66d : 408 + 0x0]
07:28:05     INFO -      Found by: previous frame's frame pointer
07:28:05     INFO -   5  0x1eae7f72988
07:28:05     INFO -      Found by: previous frame's frame pointer
07:28:05     INFO -   6  xul.dll!js::LiveSavedFrameCache::~LiveSavedFrameCache() [Stack.h:63f962127985e6f95afcfb753683e3aae743f66d : 1328 + 0x30]
07:28:05     INFO -      Found by: stack scanning
07:28:05     INFO -   7  xul.dll!tan + 0x1112fec
07:28:05     INFO -      Found by: stack scanning
07:28:05     INFO -   8  xul.dll!tan + 0x1113004
07:28:05     INFO -      Found by: stack scanning
07:28:05     INFO -   9  xul.dll!js::SetIntegrityLevel(JSContext *,JS::Handle<JSObject *>,js::IntegrityLevel) [JSObject.cpp:63f962127985e6f95afcfb753683e3aae743f66d : 521 + 0x0]
07:28:05     INFO -      Found by: stack scanning
07:28:05     INFO -  10  xul.dll!NewObject(JSContext *,JS::Handle<js::ObjectGroup *>,js::gc::AllocKind,js::NewObjectKind,unsigned int) [JSObject.cpp:63f962127985e6f95afcfb753683e3aae743f66d : 798 + 0x0]
07:28:05     INFO -      Found by: stack scanning
07:28:05     INFO -  11  xul.dll!tan + 0x1113004
07:28:05     INFO -      Found by: stack scanning
07:28:05     INFO -  12  xul.dll!js::NewObjectWithGivenTaggedProto(JSContext *,JSClass const *,JS::Handle<js::TaggedProto>,js::gc::AllocKind,js::NewObjectKind,unsigned int) [JSObject.cpp:63f962127985e6f95afcfb753683e3aae743f66d : 864 + 0x10]
07:28:05     INFO -      Found by: stack scanning
07:28:05     INFO -  13  xul.dll + 0x400601c
07:28:05     INFO -      Found by: stack scanning
07:28:05     INFO -  14  xul.dll!js::SavedFrame::create(JSContext *) [SavedStacks.cpp:63f962127985e6f95afcfb753683e3aae743f66d : 553 + 0x18]
07:28:05     INFO -      Found by: stack scanning
07:28:05     INFO -  15  xul.dll!class js::SavedFrame * js::SavedStacks::getOrCreateSavedFrame(struct JSContext *, class JS::Handle<js::SavedFrame::Lookup>) [SavedStacks.cpp:63f962127985e6f95afcfb753683e3aae743f66d : 1706 + 0x158]
07:28:05     INFO -      Found by: stack scanning
07:28:05     INFO -  16  xul.dll!tan + 0x182efec
07:28:05     INFO -      Found by: stack scanning
07:28:05     INFO -  17  xul.dll!js::FrameIter::FrameIter(JSContext *,js::FrameIter::DebuggerEvalOption) [Stack.cpp:63f962127985e6f95afcfb753683e3aae743f66d : 757 + 0x0]
07:28:05     INFO -      Found by: stack scanning
07:28:05     INFO -  18  xul.dll!js::SavedStacks::insertFrames(JSContext *,JS::MutableHandle<js::SavedFrame *>,mozilla::Variant<JS::AllFrames,JS::MaxFrames,JS::FirstSubsumedFrame> &&) [SavedStacks.cpp:63f962127985e6f95afcfb753683e3aae743f66d : 1412 + 0x0]
07:28:05     INFO -      Found by: stack scanning
07:28:05     INFO -  19  xul.dll!tan + 0x11239f4
07:28:05     INFO -      Found by: stack scanning
07:28:05     INFO -  20  xul.dll!js::RunScript(JSContext *,js::RunState &) [Interpreter.cpp:63f962127985e6f95afcfb753683e3aae743f66d : 409 + 0x8]
07:28:05     INFO -      Found by: stack scanning
07:28:05     INFO -  21  xul.dll!js::InternalCallOrConstruct(JSContext *,JS::CallArgs const &,js::MaybeConstruct) [Interpreter.cpp:63f962127985e6f95afcfb753683e3aae743f66d : 567 + 0x8]
07:28:05     INFO -      Found by: stack scanning
07:28:05     INFO -  22  xul.dll + 0x400601c
07:28:05     INFO -      Found by: stack scanning
07:28:05     INFO -  23  xul.dll!js::CallGetter(JSContext *,JS::Handle<JS::Value>,JS::Handle<JS::Value>,JS::MutableHandle<JS::Value>) [Interpreter.cpp:63f962127985e6f95afcfb753683e3aae743f66d : 734 + 0x64]
07:28:05     INFO -      Found by: stack scanning
07:28:05     INFO -  24  xul.dll!js::NativeGetProperty(JSContext *,JS::Handle<js::NativeObject *>,JS::Handle<JS::Value>,JS::Handle<JS::PropertyKey>,JS::MutableHandle<JS::Value>) [NativeObject.cpp:63f962127985e6f95afcfb753683e3aae743f66d : 2607 + 0x148]
07:28:05     INFO -      Found by: stack scanning
07:28:05     INFO -  25  xul.dll + 0x3fb302c
07:28:05     INFO -      Found by: stack scanning
07:28:05     INFO -  26  xul.dll!js::GetProperty(JSContext *,JS::Handle<JS::Value>,JS::Handle<js::PropertyName *>,JS::MutableHandle<JS::Value>) [Interpreter.cpp:63f962127985e6f95afcfb753683e3aae743f66d : 4513 + 0x28]
07:28:05     INFO -      Found by: stack scanning
07:28:05     INFO -  27  xul.dll!Interpret(JSContext *,js::RunState &) [Interpreter.cpp:63f962127985e6f95afcfb753683e3aae743f66d : 2771 + 0x70]
07:28:05     INFO -      Found by: stack scanning
07:28:05     INFO -  Thread 1

Looks like this started to fail when bug 1577161 was merged to central here:
https://hg.mozilla.org/mozilla-central/rev/5e767d6cba5a15ab91b5a4fe0fb87ee7eaf15aa9

Ted: Can you please take a look at this bug?

Comment 2

[Alexandru Michis [:malexandru]]

This should be fixed by this backout: https://bugzilla.mozilla.org/show_bug.cgi?id=1577161#c4

Backout link: https://hg.mozilla.org/integration/autoland/rev/dca9b6dd135f3230cb7f5516003df450efcb06bf

Comment 3

[Intermittent Failures Robot]

18 failures in 1022 pushes (0.018 failures/push) were associated with this bug yesterday.

Repository breakdown:

• mozilla-central: 13
• autoland: 5

Platform breakdown:

• windows10-aarch64: 18

For more details, see:
https://treeherder.mozilla.org/intermittent-failures.html#/bugdetails?bug=1579038&startday=2019-09-05&endday=2019-09-05&tree=all

Comment 4

[Intermittent Failures Robot]

18 failures in 4408 pushes (0.004 failures/push) were associated with this bug in the last 7 days.

Repository breakdown:

• mozilla-central: 13
• autoland: 5

Platform breakdown:

• windows10-aarch64: 18

For more details, see:
https://treeherder.mozilla.org/intermittent-failures.html#/bugdetails?bug=1579038&startday=2019-09-02&endday=2019-09-08&tree=all

Comment 5

[Intermittent Failures Robot]

1 failures in 4182 pushes (0.0 failures/push) were associated with this bug in the last 7 days.

Repository breakdown:

• mozilla-central: 1

Platform breakdown:

• windows10-aarch64: 1

For more details, see:
https://treeherder.mozilla.org/intermittent-failures.html#/bugdetails?bug=1579038&startday=2019-10-21&endday=2019-10-27&tree=all

Comment 6

[Ted Campbell [:tcampbell]]

The regressing patch was successfully fixed and relanded.