Closed Bug 1586416 Opened 6 years ago Closed 6 years ago

Intermittent GECKO(3560) | SUMMARY: AddressSanitizer: use-after-poison z:\build\build\src\js\src\gc\Barrier.h:611 in js::HeapPtr<JSAtom *>::~HeapPtr

Tracking

()

Status:

RESOLVED DUPLICATE of bug 1584820

People

(Reporter: intermittent-bug-filer, Unassigned)

Details

(Keywords: intermittent-failure, regression)

Treeherder Bug Filer

Reporter

Description

•

6 years ago

treeherder

Filed by: rgurzau [at] mozilla.com
Parsed log: https://treeherder.mozilla.org/logviewer.html#?job_id=269810912&repo=autoland
Full log: https://queue.taskcluster.net/v1/task/CkiE45xkQoK84UEQ4bpmtg/runs/0/artifacts/public/logs/live_backing.log

[task 2019-10-04T17:37:00.292Z] 17:37:00 [task 2019-10-04T17:37:00.737Z] 17:37:00 [task 2019-10-04T17:37:00.755Z] 17:37:00 [task 2019-10-04T17:37:00.794Z] 17:37:00 [task 2019-10-04T17:37:00.794Z] 17:37:00 [task 2019-10-04T17:37:00.794Z] 17:37:00 [task 2019-10-04T17:37:00.794Z] 17:37:00 [task 2019-10-04T17:37:00.795Z] 17:37:00 [task 2019-10-04T17:37:00.795Z] 17:37:00 [task 2019-10-04T17:37:00.795Z] 17:37:00 [task 2019-10-04T17:37:00.795Z] 17:37:00 [task 2019-10-04T17:37:00.795Z] 17:37:00 [task 2019-10-04T17:37:01.008Z] 17:37:01 [task 2019-10-04T17:37:01.059Z] 17:37:01 [task 2019-10-04T17:37:01.059Z] 17:37:01 [task 2019-10-04T17:37:01.061Z] 17:37:01 [task 2019-10-04T17:37:01.061Z] 17:37:01 [task 2019-10-04T17:37:01.062Z] 17:37:01 [task 2019-10-04T17:37:01.062Z] 17:37:01 [task 2019-10-04T17:37:01.064Z] 17:37:01 [task 2019-10-04T17:37:01.064Z] 17:37:01 [task 2019-10-04T17:37:01.066Z] 17:37:01 [task 2019-10-04T17:37:01.076Z] 17:37:01 [task 2019-10-04T17:37:01.085Z] 17:37:01 [task 2019-10-04T17:37:01.085Z] 17:37:01 [task 2019-10-04T17:37:01.104Z] 17:37:01 [task 2019-10-04T17:37:01.104Z] 17:37:01 [task 2019-10-04T17:37:01.123Z] 17:37:01 [task 2019-10-04T17:37:01.123Z] 17:37:01 [task 2019-10-04T17:37:01.123Z] 17:37:01 [task 2019-10-04T17:37:01.123Z] 17:37:01 [task 2019-10-04T17:37:01.123Z] 17:37:01 [task 2019-10-04T17:37:01.164Z] 17:37:01 [task 2019-10-04T17:37:01.164Z] 17:37:01 [task 2019-10-04T17:37:01.173Z] 17:37:01 [task 2019-10-04T17:37:01.173Z] 17:37:01 [task 2019-10-04T17:37:01.173Z] 17:37:01 [task 2019-10-04T17:37:01.174Z] 17:37:01 [task 2019-10-04T17:37:01.179Z] 17:37:01 [task 2019-10-04T17:37:01.179Z] 17:37:01 [task 2019-10-04T17:37:01.402Z] 17:37:01 [task 2019-10-04T17:37:01.402Z] 17:37:01 [task 2019-10-04T17:37:01.402Z] 17:37:01 [task 2019-10-04T17:37:01.420Z] 17:37:01 [task 2019-10-04T17:37:01.566Z] 17:37:01 [task 2019-10-04T17:37:01.566Z] 17:37:01 [task 2019-10-04T17:37:01.566Z] 17:37:01 [task 2019-10-04T17:37:01.585Z] 17:37:01 [task 2019-10-04T17:37:01.585Z] 17:37:01 [task 2019-10-04T17:37:01.587Z] 17:37:01 [task 2019-10-04T17:37:01.587Z] 17:37:01 [task 2019-10-04T17:37:01.587Z] 17:37:01 [task 2019-10-04T17:37:01.591Z] 17:37:01 [task 2019-10-04T17:37:01.591Z] 17:37:01 [task 2019-10-04T17:37:01.779Z] 17:37:01 [task 2019-10-04T17:37:01.789Z] 17:37:01 [task 2019-10-04T17:37:01.789Z] 17:37:01 [task 2019-10-04T17:37:01.789Z] 17:37:01 [task 2019-10-04T17:37:01.789Z] 17:37:01 [task 2019-10-04T17:37:01.798Z] 17:37:01 [task 2019-10-04T17:37:01.817Z] 17:37:01 [task 2019-10-04T17:37:01.817Z] 17:37:01 [task 2019-10-04T17:37:01.817Z] 17:37:01 [task 2019-10-04T17:37:01.817Z] 17:37:01 [task 2019-10-04T17:37:01.817Z] 17:37:01 [task 2019-10-04T17:37:01.817Z] 17:37:01 [task 2019-10-04T17:37:01.841Z] 17:37:01 [task 2019-10-04T17:37:01.841Z] 17:37:01 [task 2019-10-04T17:37:01.851Z] 17:37:01 [task 2019-10-04T17:37:01.853Z] 17:37:01 [task 2019-10-04T17:37:01.853Z] 17:37:01 [task 2019-10-04T17:37:01.854Z] 17:37:01 [task 2019-10-04T17:37:01.854Z] 17:37:01 [task 2019-10-04T17:37:01.855Z] 17:37:01 [task 2019-10-04T17:37:01.855Z] 17:37:01 [task 2019-10-04T17:37:01.856Z] 17:37:01 [task 2019-10-04T17:37:01.856Z] 17:37:01 [task 2019-10-04T17:37:01.857Z] 17:37:01 [task 2019-10-04T17:37:01.857Z] 17:37:01 [task 2019-10-04T17:37:01.858Z] 17:37:01 [task 2019-10-04T17:37:01.858Z] 17:37:01 [task 2019-10-04T17:37:01.858Z] 17:37:01 [task 2019-10-04T17:37:01.859Z] 17:37:01 [task 2019-10-04T17:37:01.859Z] 17:37:01 [task 2019-10-04T17:37:01.860Z] 17:37:01 [task 2019-10-04T17:37:01.860Z] 17:37:01 [task 2019-10-04T17:37:01.861Z] 17:37:01 [task 2019-10-04T17:37:01.861Z] 17:37:01 [task 2019-10-04T17:37:01.862Z] 17:37:01 [task 2019-10-04T17:37:01.862Z] 17:37:01 [task 2019-10-04T17:37:01.863Z] 17:37:01 [task 2019-10-04T17:37:01.863Z] 17:37:01 [task 2019-10-04T17:37:01.863Z] 17:37:01 [task 2019-10-04T17:37:01.863Z] 17:37:01 [task 2019-10-04T17:37:01.863Z] 17:37:01 [task 2019-10-04T17:37:01.863Z] 17:37:01 [task 2019-10-04T17:37:01.863Z] 17:37:01 [task 2019-10-04T17:37:01.864Z] 17:37:01 [task 2019-10-04T17:37:01.864Z] 17:37:01 [task 2019-10-04T17:37:01.864Z] 17:37:01 [task 2019-10-04T17:37:01.864Z] 17:37:01 [task 2019-10-04T17:37:01.864Z] 17:37:01 [task 2019-10-04T17:37:01.864Z] 17:37:01 [task 2019-10-04T17:37:01.864Z] 17:37:01 INFO - TEST-START | testing/mochitest/tests/MochiKit-1.4.2/tests/test_MochiKit-Visual.html
INFO - GECKO(3560) | MEMORY STAT | vsize 19405838MB | vsizeMaxContiguous 74958917MB | residentFast 635MB
INFO - TEST-OK | testing/mochitest/tests/MochiKit-1.4.2/tests/test_MochiKit-Visual.html | took 452ms
INFO - TEST-START | Shutdown
INFO - Passed: 965
INFO - Failed: 0
INFO - Todo: 0
INFO - Mode: e10s
INFO - Slowest: 2559ms - /tests/testing/mochitest/tests/MochiKit-1.4.2/tests/test_MochiKit-DOM-Safari.html
INFO - SimpleTest FINISHED
INFO - TEST-INFO | Ran 1 Loops
INFO - SimpleTest FINISHED
INFO - GECKO(3560) | [Parent 5104, Gecko_IOThread] WARNING: pipe error: 109: file z:/build/build/src/ipc/chromium/src/chrome/common/ipc_channel_win.cc, line 341
INFO - GECKO(3560) | [Child 9704, Chrome_ChildThread] WARNING: pipe error: 109: file z:/build/build/src/ipc/chromium/src/chrome/common/ipc_channel_win.cc, line 341
INFO - GECKO(3560) | [Child 9704, Chrome_ChildThread] WARNING: pipe error: 109: file z:/build/build/src/ipc/chromium/src/chrome/common/ipc_channel_win.cc, line 341
INFO - GECKO(3560) | [Parent 5104, Gecko_IOThread] WARNING: pipe error: 109: file z:/build/build/src/ipc/chromium/src/chrome/common/ipc_channel_win.cc, line 341
INFO - GECKO(3560) | [GPU 9168, Chrome_ChildThread] WARNING: pipe error: 109: file z:/build/build/src/ipc/chromium/src/chrome/common/ipc_channel_win.cc, line 341
INFO - GECKO(3560) | [GPU 9168, Chrome_ChildThread] WARNING: pipe error: 109: file z:/build/build/src/ipc/chromium/src/chrome/common/ipc_channel_win.cc, line 341
INFO - GECKO(3560) | ###!!! [Parent][RunMessage] Error: Channel closing: too late to send/recv, messages will be lost
INFO - GECKO(3560) | [GPU 9168, Chrome_ChildThread] WARNING: pipe error: 109: file z:/build/build/src/ipc/chromium/src/chrome/common/ipc_channel_win.cc, line 341
INFO - GECKO(3560) | [Parent 5104, Gecko_IOThread] WARNING: pipe error: 109: file z:/build/build/src/ipc/chromium/src/chrome/common/ipc_channel_win.cc, line 341
INFO - GECKO(3560) | [Parent 5104, Gecko_IOThread] WARNING: pipe error: 109: file z:/build/build/src/ipc/chromium/src/chrome/common/ipc_channel_win.cc, line 341
INFO - GECKO(3560) | [Parent 5104, Gecko_IOThread] WARNING: pipe error: 109: file z:/build/build/src/ipc/chromium/src/chrome/common/ipc_channel_win.cc, line 341
INFO - GECKO(3560) | [Child 824, Chrome_ChildThread] WARNING: pipe error: 109: file z:/build/build/src/ipc/chromium/src/chrome/common/ipc_channel_win.cc, line 341
INFO - GECKO(3560) | [Child 824, Chrome_ChildThread] WARNING: pipe error: 109: file z:/build/build/src/ipc/chromium/src/chrome/common/ipc_channel_win.cc, line 341
INFO - GECKO(3560) | [Parent 5104, Gecko_IOThread] WARNING: pipe error: 109: file z:/build/build/src/ipc/chromium/src/chrome/common/ipc_channel_win.cc, line 341
INFO - GECKO(3560) | [GPU 9168, Chrome_ChildThread] WARNING: pipe error: 109: file z:/build/build/src/ipc/chromium/src/chrome/common/ipc_channel_win.cc, line 341
INFO - GECKO(3560) | ###!!! [Parent][RunMessage] Error: Channel closing: too late to send/recv, messages will be lost
INFO - GECKO(3560) | [GPU 9168, Chrome_ChildThread] WARNING: pipe error: 109: file z:/build/build/src/ipc/chromium/src/chrome/common/ipc_channel_win.cc, line 341
INFO - GECKO(3560) | [GPU 9168, Chrome_ChildThread] WARNING: pipe error: 109: file z:/build/build/src/ipc/chromium/src/chrome/common/ipc_channel_win.cc, line 341
INFO - GECKO(3560) | [Parent 5104, Gecko_IOThread] WARNING: pipe error: 109: file z:/build/build/src/ipc/chromium/src/chrome/common/ipc_channel_win.cc, line 341
INFO - GECKO(3560) | [Parent 5104, Gecko_IOThread] WARNING: pipe error: 109: file z:/build/build/src/ipc/chromium/src/chrome/common/ipc_channel_win.cc, line 341
INFO - GECKO(3560) | [Parent 5104, Gecko_IOThread] WARNING: pipe error: 109: file z:/build/build/src/ipc/chromium/src/chrome/common/ipc_channel_win.cc, line 341
INFO - GECKO(3560) | [Child 6720, Chrome_ChildThread] WARNING: pipe error: 109: file z:/build/build/src/ipc/chromium/src/chrome/common/ipc_channel_win.cc, line 341
INFO - GECKO(3560) | [Parent 5104, Gecko_IOThread] WARNING: pipe error: 109: file z:/build/build/src/ipc/chromium/src/chrome/common/ipc_channel_win.cc, line 341
INFO - GECKO(3560) | [GPU 9168, Chrome_ChildThread] WARNING: pipe error: 109: file z:/build/build/src/ipc/chromium/src/chrome/common/ipc_channel_win.cc, line 341
INFO - GECKO(3560) | ###!!! [Parent][RunMessage] Error: Channel closing: too late to send/recv, messages will be lost
INFO - GECKO(3560) | [GPU 9168, Chrome_ChildThread] WARNING: pipe error: 109: file z:/build/build/src/ipc/chromium/src/chrome/common/ipc_channel_win.cc, line 341
INFO - GECKO(3560) | [Parent 5104, Gecko_IOThread] WARNING: pipe error: 109: file z:/build/build/src/ipc/chromium/src/chrome/common/ipc_channel_win.cc, line 341
INFO - GECKO(3560) | [Parent 5104, Gecko_IOThread] WARNING: pipe error: 109: file z:/build/build/src/ipc/chromium/src/chrome/common/ipc_channel_win.cc, line 341
INFO - GECKO(3560) | =================================================================
ERROR - GECKO(3560) | ==824==ERROR: AddressSanitizer: use-after-poison on address 0x1598d73e5de0 at pc 0x7ff86d7afb47 bp 0x008fac5fedc0 sp 0x008fac5fee08
INFO - GECKO(3560) | READ of size 8 at 0x1598d73e5de0 thread T10
INFO - GECKO(3560) | ==824==WARNING: Failed to use and restart external symbolizer!
INFO - GECKO(3560) | 1570210621564 Marionette TRACE Received observer notification xpcom-will-shutdown
INFO - GECKO(3560) | 1570210621564 Marionette INFO Stopped listening on port 2828
INFO - GECKO(3560) | 1570210621564 Marionette DEBUG Remote service is inactive
INFO - GECKO(3560) | [GPU 9168, Chrome_ChildThread] WARNING: pipe error: 109
INFO - GECKO(3560) | ###!!! [Child][RunMessage] Error: Channel closing: too late to send/recv, messages will be lost
INFO - GECKO(3560) | : file z:/build/build/src/ipc/chromium/src/chrome/common/ipc_channel_win.cc, line 341
INFO - GECKO(3560) | [GPU 9168, Chrome_ChildThread] WARNING: pipe error: 109: file z:/build/build/src/ipc/chromium/src/chrome/common/ipc_channel_win.cc, line 341
INFO - GECKO(3560) | [Parent 5104, Gecko_IOThread] WARNING: pipe error: 109: file z:/build/build/src/ipc/chromium/src/chrome/common/ipc_channel_win.cc, line 341
INFO - GECKO(3560) | [Parent 5104, Gecko_IOThread] WARNING: pipe error: 109: file z:/build/build/src/ipc/chromium/src/chrome/common/ipc_channel_win.cc, line 341
INFO - GECKO(3560) | [Parent 5104, Gecko_IOThread] WARNING: pipe error: 109: file z:/build/build/src/ipc/chromium/src/chrome/common/ipc_channel_win.cc, line 341
INFO - GECKO(3560) | #0 0x7ff86d7afb46 in js::HeapPtr<JSAtom *>::~HeapPtr z:\build\build\src\js\src\gc\Barrier.h:611
INFO - GECKO(3560) | #1 0x7ff86dd55c1c in js::XDRIncrementalEncoder::~XDRIncrementalEncoder z:\build\build\src\js\src\vm\Xdr.h:562
INFO - GECKO(3560) | #2 0x7ff86dd55a8f in js::XDRIncrementalEncoder::~XDRIncrementalEncoder z:\build\build\src\js\src\vm\Xdr.h:562
INFO - GECKO(3560) | #3 0x7ff86dd4370d in js::ScriptSource::~ScriptSource z:\build\build\src\js\src\vm\JSScript.h:732
INFO - GECKO(3560) | #4 0x7ff86dd5597c in js::SourceCompressionTask::~SourceCompressionTask z:\build\build\src\js\src\vm\HelperThreads.h:838
INFO - GECKO(3560) | #5 0x7ff86da03bd9 in js::AttachFinishedCompressions z:\build\build\src\js\src\vm\HelperThreads.cpp:2459
INFO - GECKO(3560) | #6 0x7ff86e399cc5 in SweepCompressionTasks z:\build\build\src\js\src\gc\GC.cpp:5116
INFO - GECKO(3560) | #7 0x7ff86d9f9e7a in js::GCParallelTask::runFromHelperThread z:\build\build\src\js\src\vm\HelperThreads.cpp:1806
INFO - GECKO(3560) | #8 0x7ff86d9fa716 in js::HelperThread::handleGCParallelWorkload z:\build\build\src\js\src\vm\HelperThreads.cpp:1827
INFO - GECKO(3560) | #9 0x7ff86d9ff267 in js::HelperThread::threadLoop z:\build\build\src\js\src\vm\HelperThreads.cpp:2628
INFO - GECKO(3560) | #10 0x7ff86da31dca in js::detail::ThreadTrampoline<void (&)(void *),js::HelperThread *>::Start z:\build\build\src\js\src\threading\Thread.h:199
INFO - GECKO(3560) | #11 0x7ff8b040c4bd in o_ceil+0x4d (C:\Windows\System32\ucrtbase.dll+0x18001c4bd)
INFO - GECKO(3560) | #12 0x7ff884c9e8c8 in __asan::AsanThread::ThreadStart Z:\task_1569588313\fetches\llvm-project\llvm\projects\compiler-rt\lib\asan\asan_thread.cc:264
INFO - GECKO(3560) | #13 0x7ff8b16d3033 in BaseThreadInitThunk+0x13 (C:\Windows\System32\KERNEL32.DLL+0x180013033)
INFO - GECKO(3560) | #14 0x7ff8a5df4dcb in patched_BaseThreadInitThunk z:\build\build\src\mozglue\dllservices\WindowsDllBlocklist.cpp:564
INFO - GECKO(3560) | #15 0x7ff8b4091460 in RtlUserThreadStart+0x20 (C:\Windows\SYSTEM32\ntdll.dll+0x180071460)
INFO - GECKO(3560) | Address 0x1598d73e5de0 is a wild pointer.
INFO - GECKO(3560) | SUMMARY: AddressSanitizer: use-after-poison z:\build\build\src\js\src\gc\Barrier.h:611 in js::HeapPtr<JSAtom *>::~HeapPtr
INFO - GECKO(3560) | Shadow bytes around the buggy address:
INFO - GECKO(3560) | 0x04d85807cb60: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7
INFO - GECKO(3560) | 0x04d85807cb70: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7
INFO - GECKO(3560) | 0x04d85807cb80: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7
INFO - GECKO(3560) | 0x04d85807cb90: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7
INFO - GECKO(3560) | 0x04d85807cba0: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7
INFO - GECKO(3560) | =>0x04d85807cbb0: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7[f7]f7 f7 f7
INFO - GECKO(3560) | 0x04d85807cbc0: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7
INFO - GECKO(3560) | 0x04d85807cbd0: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7
INFO - GECKO(3560) | 0x04d85807cbe0: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7
INFO - GECKO(3560) | 0x04d85807cbf0: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7
INFO - GECKO(3560) | 0x04d85807cc00: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7
INFO - GECKO(3560) | Shadow byte legend (one shadow byte represents 8 application bytes):
INFO - GECKO(3560) | Addressable: 00
INFO - GECKO(3560) | Partially addressable: 01 02 03 04 05 06 07
INFO - GECKO(3560) | Heap left redzone: fa
INFO - GECKO(3560) | Freed heap region: fd
INFO - GECKO(3560) | Stack left redzone: f1
INFO - GECKO(3560) | Stack mid redzone: f2
INFO - GECKO(3560) | Stack right redzone: f3
INFO - GECKO(3560) | Stack after return: f5
INFO - GECKO(3560) | Stack use after scope: f8
INFO - GECKO(3560) | Global redzone: f9
INFO - GECKO(3560) | Global init order: f6
INFO - GECKO(3560) | Poisoned by user: f7
INFO - GECKO(3560) | Container overflow: fc
INFO - GECKO(3560) | Array cookie: ac
INFO - GECKO(3560) | Intra object redzone: bb
INFO - GECKO(3560) | ASan internal: fe
INFO - GECKO(3560) | Left alloca redzone: ca
INFO - GECKO(3560) | Right alloca redzone: cb
INFO - GECKO(3560) | Shadow gap: cc

Raul Gurzau (:RaulG)

Updated

•

6 years ago

Group: core-security-release

Tyson Smith [:tsmith]

Updated

•

6 years ago

Group: core-security-release → javascript-core-security

Component: Mochitest → JavaScript: GC

Product: Testing → Core

Version: Version 3 → unspecified

Sebastian Hengst [:aryx] (needinfo me if it's about an intermittent or backout)

Updated

•

6 years ago

Status: NEW → RESOLVED

Closed: 6 years ago

Resolution: --- → DUPLICATE

Daniel Veditz [:dveditz]

Updated

•

2 years ago

Duplicate of bug: 1584820
No longer duplicate of bug: 1585924

Daniel Veditz [:dveditz]

Updated

•

2 years ago

Group: javascript-core-security

You need to log in before you can comment on or make changes to this bug.

Bugzilla

Intermittent GECKO(3560) | SUMMARY: AddressSanitizer: use-after-poison z:\build\build\src\js\src\gc\Barrier.h:611 in js::HeapPtr<JSAtom *>::~HeapPtr

Categories

(Core :: JavaScript: GC, defect, P5)

Tracking

()

People

(Reporter: intermittent-bug-filer, Unassigned)

References

Details

(Keywords: intermittent-failure, regression)

Crash Data

Security

(public)

User Story

Description

Updated

Updated

Updated

Updated

Updated