Closed Bug 1589244 Opened 5 years ago Closed 3 years ago

Intermittent /content-security-policy/script-src/script-src-wildcards-disallowed.html | application crashed [@ BaseAllocator::malloc(unsigned long)]

Categories

(Core :: DOM: Security, defect, P5)

Product:
Core
Component:
DOM: Security
Type:
defect

Tracking

()

Status:
RESOLVED WORKSFORME

People

(Reporter: intermittent-bug-filer, Unassigned)

Details

(Keywords: crash, intermittent-failure, Whiteboard: [domsecurity-intermittent])

Crash Data

Filed by: malexandru [at] mozilla.com
Parsed log: https://treeherder.mozilla.org/logviewer.html#?job_id=271583382&repo=autoland
Full log: https://queue.taskcluster.net/v1/task/LYeg5BR7Ru6f5s01IqND0w/runs/0/artifacts/public/logs/live_backing.log

[task 2019-10-16T22:03:07.594Z] 22:03:07 INFO - TEST-OK | /content-security-policy/script-src/script-src-strict_dynamic_worker.https.html | took 664ms
[task 2019-10-16T22:03:07.594Z] 22:03:07 INFO - TEST-START | /content-security-policy/script-src/script-src-wildcards-disallowed.html
[task 2019-10-16T22:03:07.594Z] 22:03:07 INFO - Closing window 164
[task 2019-10-16T22:03:08.515Z] 22:03:08 INFO - IOError on command, setting status to CRASH
[task 2019-10-16T22:03:09.807Z] 22:03:09 INFO - mozcrash Downloading symbols from: https://queue.taskcluster.net/v1/task/c3c-2d5OR6WiqxIjxV568A/artifacts/public/build/target.crashreporter-symbols.zip
[task 2019-10-16T22:03:12.798Z] 22:03:12 INFO - mozcrash Copy/paste: /builds/worker/workspace/build/linux64-minidump_stackwalk /tmp/tmpk2IHP2/67169eee-85fe-1464-d696-697c452fbc68.dmp /tmp/tmp0LGYhM
[task 2019-10-16T22:03:16.051Z] 22:03:16 INFO - mozcrash Saved minidump as /builds/worker/workspace/build/blobber_upload_dir/67169eee-85fe-1464-d696-697c452fbc68.dmp
[task 2019-10-16T22:03:16.051Z] 22:03:16 INFO - mozcrash Saved app info as /builds/worker/workspace/build/blobber_upload_dir/67169eee-85fe-1464-d696-697c452fbc68.extra
[task 2019-10-16T22:03:16.171Z] 22:03:16 INFO - PROCESS-CRASH | /content-security-policy/script-src/script-src-wildcards-disallowed.html | application crashed [@ BaseAllocator::malloc(unsigned long)]
[task 2019-10-16T22:03:16.171Z] 22:03:16 INFO - Crash dump filename: /tmp/tmpk2IHP2/67169eee-85fe-1464-d696-697c452fbc68.dmp
[task 2019-10-16T22:03:16.171Z] 22:03:16 INFO - Operating system: Android
[task 2019-10-16T22:03:16.171Z] 22:03:16 INFO - 0.0.0 Linux 3.10.0+ #260 SMP PREEMPT Fri May 19 12:48:14 PDT 2017 x86_64
[task 2019-10-16T22:03:16.171Z] 22:03:16 INFO - CPU: amd64
[task 2019-10-16T22:03:16.171Z] 22:03:16 INFO - family 6 model 6 stepping 3
[task 2019-10-16T22:03:16.171Z] 22:03:16 INFO - 4 CPUs
[task 2019-10-16T22:03:16.171Z] 22:03:16 INFO -
[task 2019-10-16T22:03:16.171Z] 22:03:16 INFO - GPU: UNKNOWN
[task 2019-10-16T22:03:16.171Z] 22:03:16 INFO -
[task 2019-10-16T22:03:16.171Z] 22:03:16 INFO - Crash reason: SIGSEGV /SEGV_MAPERR
[task 2019-10-16T22:03:16.171Z] 22:03:16 INFO - Crash address: 0x0
[task 2019-10-16T22:03:16.172Z] 22:03:16 INFO - Process uptime: not available
[task 2019-10-16T22:03:16.172Z] 22:03:16 INFO -
[task 2019-10-16T22:03:16.172Z] 22:03:16 INFO - Thread 11 (crashed)
[task 2019-10-16T22:03:16.172Z] 22:03:16 INFO - 0 libxul.so!gkrust_shared::panic_hook [Assertions.h:8843c82f74f732dda425d901b7ecbd8f62c88b0d : 332 + 0x0]
[task 2019-10-16T22:03:16.172Z] 22:03:16 INFO - rax = 0x00007edc56197792 rdx = 0x00007edc56197700
[task 2019-10-16T22:03:16.172Z] 22:03:16 INFO - rcx = 0x00007edc55894498 rbx = 0x0000000000000015
[task 2019-10-16T22:03:16.172Z] 22:03:16 INFO - rsi = 0xfffffffffffffda0 rdi = 0x00007edc56197588
[task 2019-10-16T22:03:16.172Z] 22:03:16 INFO - rbp = 0x00007edc561979b0 rsp = 0x00007edc56197580
[task 2019-10-16T22:03:16.172Z] 22:03:16 INFO - r8 = 0x00007edc56197700 r9 = 0x00007edc56199088
[task 2019-10-16T22:03:16.172Z] 22:03:16 INFO - r10 = 0x00007edc43f640d8 r11 = 0x0000000000000080
[task 2019-10-16T22:03:16.172Z] 22:03:16 INFO - r12 = 0x00007edc43f39fc0 r13 = 0x0000000000000005
[task 2019-10-16T22:03:16.172Z] 22:03:16 INFO - r14 = 0x00007edc5344b023 r15 = 0x000000000000040a
[task 2019-10-16T22:03:16.172Z] 22:03:16 INFO - rip = 0x00007edc5237ee21
[task 2019-10-16T22:03:16.172Z] 22:03:16 INFO - Found by: given as instruction pointer in context
[task 2019-10-16T22:03:16.172Z] 22:03:16 INFO - 1 libxul.so!core::ops::function::Fn::call [function.rs:eae3437dfe991621e8afdc82734f4a172d7ddf9b : 69 + 0xc]
[task 2019-10-16T22:03:16.172Z] 22:03:16 INFO - rbp = 0x00007edc561979c0 rsp = 0x00007edc561979c0
[task 2019-10-16T22:03:16.172Z] 22:03:16 INFO - rip = 0x00007edc5237ed4c
[task 2019-10-16T22:03:16.172Z] 22:03:16 INFO - Found by: previous frame's frame pointer
[task 2019-10-16T22:03:16.172Z] 22:03:16 INFO - 2 libxul.so!std::panicking::rust_panic_with_hook [panicking.rs:eae3437dfe991621e8afdc82734f4a172d7ddf9b : 481 + 0x6]
[task 2019-10-16T22:03:16.172Z] 22:03:16 INFO - rsp = 0x00007edc561979d0 rip = 0x00007edc52c50328
[task 2019-10-16T22:03:16.172Z] 22:03:16 INFO - Found by: stack scanning
[task 2019-10-16T22:03:16.172Z] 22:03:16 INFO - 3 libmozglue.so!BaseAllocator::malloc(unsigned long) [mozjemalloc.cpp:8843c82f74f732dda425d901b7ecbd8f62c88b0d : 3944 + 0xa]
[task 2019-10-16T22:03:16.172Z] 22:03:16 INFO - rsp = 0x00007edc56197a90 rip = 0x00007edc5553bf7d
[task 2019-10-16T22:03:16.172Z] 22:03:16 INFO - Found by: stack scanning
[task 2019-10-16T22:03:16.172Z] 22:03:16 INFO - 4 libxul.so + 0x4073920
[task 2019-10-16T22:03:16.172Z] 22:03:16 INFO - rsp = 0x00007edc56197b98 rip = 0x00007edc52c6b920
[task 2019-10-16T22:03:16.172Z] 22:03:16 INFO - Found by: stack scanning
[task 2019-10-16T22:03:16.172Z] 22:03:16 INFO - 5 libxul.so!style::data::ElementData::invalidate_style_if_needed + 0x809
[task 2019-10-16T22:03:16.172Z] 22:03:16 INFO - rsp = 0x00007edc56197bd0 rip = 0x00007edc5282f819
[task 2019-10-16T22:03:16.172Z] 22:03:16 INFO - Found by: stack scanning
[task 2019-10-16T22:03:16.172Z] 22:03:16 INFO - 6 libmozglue.so!arena_dalloc(void*, unsigned long, arena_t*) [mozjemalloc.cpp:8843c82f74f732dda425d901b7ecbd8f62c88b0d : 3329 + 0x145]
[task 2019-10-16T22:03:16.172Z] 22:03:16 INFO - rsp = 0x00007edc56197d00 rip = 0x00007edc5553aefd
[task 2019-10-16T22:03:16.172Z] 22:03:16 INFO - Found by: stack scanning
[task 2019-10-16T22:03:16.172Z] 22:03:16 INFO - 7 libxul.so!RefPtr<mozilla::dom::WindowGlobalParent>::assign_with_AddRef(mozilla::dom::WindowGlobalParent*) [RefPtr.h:8843c82f74f732dda425d901b7ecbd8f62c88b0d : 58 + 0x8]
[task 2019-10-16T22:03:16.172Z] 22:03:16 INFO - rsp = 0x00007edc56197d60 rip = 0x00007edc504e656e
[task 2019-10-16T22:03:16.173Z] 22:03:16 INFO - Found by: stack scanning
[task 2019-10-16T22:03:16.173Z] 22:03:16 INFO - 8 libxul.so!mozilla::dom::WindowGlobalParent::RecvBecomeCurrentWindowGlobal() [WindowGlobalParent.cpp:8843c82f74f732dda425d901b7ecbd8f62c88b0d : 225 + 0x9]
[task 2019-10-16T22:03:16.173Z] 22:03:16 INFO - rsp = 0x00007edc56197d80 rip = 0x00007edc50c335eb
[task 2019-10-16T22:03:16.173Z] 22:03:16 INFO - Found by: stack scanning
[task 2019-10-16T22:03:16.173Z] 22:03:16 INFO - 9 libxul.so!mozilla::BufferList<InfallibleAllocPolicy>::IterImpl::Advance(mozilla::BufferList<InfallibleAllocPolicy> const&, unsigned long) [BufferList.h:8843c82f74f732dda425d901b7ecbd8f62c88b0d : 239 + 0xb]
[task 2019-10-16T22:03:16.173Z] 22:03:16 INFO - rsp = 0x00007edc56197da0 rip = 0x00007edc4f8c80c8
[task 2019-10-16T22:03:16.173Z] 22:03:16 INFO - Found by: stack scanning
[task 2019-10-16T22:03:16.173Z] 22:03:16 INFO - 10 libxul.so!mozilla::BufferList<InfallibleAllocPolicy>::ReadBytes(mozilla::BufferList<InfallibleAllocPolicy>::IterImpl&, char*, unsigned long) const [BufferList.h:8843c82f74f732dda425d901b7ecbd8f62c88b0d : 465 + 0xf]
[task 2019-10-16T22:03:16.173Z] 22:03:16 INFO - rsp = 0x00007edc56197dd0 rip = 0x00007edc4f8c9390
[task 2019-10-16T22:03:16.173Z] 22:03:16 INFO - Found by: stack scanning
[task 2019-10-16T22:03:16.173Z] 22:03:16 INFO - 11 libxul.so!mozilla::BufferList<InfallibleAllocPolicy>::IterImpl::Advance(mozilla::BufferList<InfallibleAllocPolicy> const&, unsigned long) [BufferList.h:8843c82f74f732dda425d901b7ecbd8f62c88b0d : 239 + 0xb]
[task 2019-10-16T22:03:16.173Z] 22:03:16 INFO - rsp = 0x00007edc56197de0 rip = 0x00007edc4f8c80c8
[task 2019-10-16T22:03:16.173Z] 22:03:16 INFO - Found by: stack scanning
[task 2019-10-16T22:03:16.173Z] 22:03:16 INFO - 12 libxul.so!mozilla::dom::BrowsingContext::Transaction::Apply(mozilla::dom::BrowsingContext*) [BrowsingContextFieldList.h:8843c82f74f732dda425d901b7ecbd8f62c88b0d : 31 + 0x71]
[task 2019-10-16T22:03:16.173Z] 22:03:16 INFO - rsp = 0x00007edc56197e20 rip = 0x00007edc516cfd0a
[task 2019-10-16T22:03:16.173Z] 22:03:16 INFO - Found by: stack scanning
[task 2019-10-16T22:03:16.173Z] 22:03:16 INFO - 13 libxul.so!mozilla::BufferList<InfallibleAllocPolicy>::IterImpl::Advance(mozilla::BufferList<InfallibleAllocPolicy> const&, unsigned long) [BufferList.h:8843c82f74f732dda425d901b7ecbd8f62c88b0d : 239 + 0xb]
[task 2019-10-16T22:03:16.173Z] 22:03:16 INFO - rsp = 0x00007edc56197e30 rip = 0x00007edc4f8c80c8
[task 2019-10-16T22:03:16.173Z] 22:03:16 INFO - Found by: stack scanning
[task 2019-10-16T22:03:16.173Z] 22:03:16 INFO - 14 libxul.so!mozilla::dom::ContentParent::RecvCommitBrowsingContextTransaction(mozilla::dom::BrowsingContext*, mozilla::dom::BrowsingContext::Transaction&&, unsigned long) [ContentParent.cpp:8843c82f74f732dda425d901b7ecbd8f62c88b0d : 6108 + 0xb]
[task 2019-10-16T22:03:16.173Z] 22:03:16 INFO - rsp = 0x00007edc56197e80 rip = 0x00007edc50c1c87c
[task 2019-10-16T22:03:16.173Z] 22:03:16 INFO - Found by: stack scanning
[task 2019-10-16T22:03:16.173Z] 22:03:16 INFO - 15 libxul.so!mozilla::detail::RunnableFunction<mozilla::DataChannelConnection::SendPacket(std::__ndk1::unique_ptr<mozilla::MediaPacket, std::__ndk1::default_delete<mozilla::MediaPacket> >&&)::$_1>::~RunnableFunction() [nsThreadUtils.h:8843c82f74f732dda425d901b7ecbd8f62c88b0d : 555 + 0x28]
[task 2019-10-16T22:03:16.173Z] 22:03:16 INFO - rsp = 0x00007edc56197eb0 rip = 0x00007edc4f8c0800
[task 2019-10-16T22:03:16.173Z] 22:03:16 INFO - Found by: stack scanning
[task 2019-10-16T22:03:16.173Z] 22:03:16 INFO - 16 libxul.so!mozilla::dom::PContentParent::OnMessageReceived(IPC::Message const&) [PContentParent.cpp: : 5875 + 0x8]
[task 2019-10-16T22:03:16.173Z] 22:03:16 INFO - rsp = 0x00007edc56197ef0 rip = 0x00007edc4f97e74a
[task 2019-10-16T22:03:16.173Z] 22:03:16 INFO - Found by: stack scanning
[task 2019-10-16T22:03:16.173Z] 22:03:16 INFO - 17 libxul.so!js::RunScript(JSContext*, js::RunState&) [Interpreter.cpp:8843c82f74f732dda425d901b7ecbd8f62c88b0d : 410 + 0xb]
[task 2019-10-16T22:03:16.173Z] 22:03:16 INFO - rsp = 0x00007edc56197f50 rip = 0x00007edc519cd383
[task 2019-10-16T22:03:16.173Z] 22:03:16 INFO - Found by: stack scanning
[task 2019-10-16T22:03:16.173Z] 22:03:16 INFO - 18 dalvik-main space 1 (deleted) + 0x8c00000
[task 2019-10-16T22:03:16.173Z] 22:03:16 INFO - rsp = 0x00007edc56197f60 rip = 0x000000003f800000
[task 2019-10-16T22:03:16.173Z] 22:03:16 INFO - Found by: stack scanning
[task 2019-10-16T22:03:16.174Z] 22:03:16 INFO - 19 libxul.so!js::NewFunctionWithProto(JSContext*, bool ()(JSContext, unsigned int, JS::Value*), unsigned int, FunctionFlags, JS::Handle<JSObject*>, JS::Handle<JSAtom*>, JS::Handle<JSObject*>, js::gc::AllocKind, js::NewObjectKind) [JSFunction.cpp:8843c82f74f732dda425d901b7ecbd8f62c88b0d : 2121 + 0x2c]
[task 2019-10-16T22:03:16.174Z] 22:03:16 INFO - rsp = 0x00007edc56198000 rip = 0x00007edc51bc20a9
[task 2019-10-16T22:03:16.174Z] 22:03:16 INFO - Found by: stack scanning
[task 2019-10-16T22:03:16.174Z] 22:03:16 INFO - 20 libxul.so!js::jit::ICStubCompiler::getStubCode() [BaselineIC.cpp:8843c82f74f732dda425d901b7ecbd8f62c88b0d : 965 + 0xd3]
[task 2019-10-16T22:03:16.174Z] 22:03:16 INFO - rsp = 0x00007edc56198030 rip = 0x00007edc51f7c8a1
[task 2019-10-16T22:03:16.174Z] 22:03:16 INFO - Found by: stack scanning
[task 2019-10-16T22:03:16.174Z] 22:03:16 INFO - 21 libxul.so!js::PromiseObject::create(JSContext*, JS::Handle<JSObject*>, JS::Handle<JSObject*>, bool) [Promise.cpp:8843c82f74f732dda425d901b7ecbd8f62c88b0d : 2231 + 0x25]
[task 2019-10-16T22:03:16.174Z] 22:03:16 INFO - rsp = 0x00007edc56198080 rip = 0x00007edc51a4d318
[task 2019-10-16T22:03:16.174Z] 22:03:16 INFO - Found by: stack scanning
[task 2019-10-16T22:03:16.174Z] 22:03:16 INFO - 22 dalvik-main space 1 (deleted) + 0x1c10e501
[task 2019-10-16T22:03:16.174Z] 22:03:16 INFO - rsp = 0x00007edc56198150 rip = 0x0000000052d0e501
[task 2019-10-16T22:03:16.174Z] 22:03:16 INFO - Found by: stack scanning
[task 2019-10-16T22:03:16.174Z] 22:03:16 INFO - 23 libxul.so!PromiseConstructor(JSContext*, unsigned int, JS::Value*) [Promise.cpp:8843c82f74f732dda425d901b7ecbd8f62c88b0d : 2152 + 0xe]
[task 2019-10-16T22:03:16.174Z] 22:03:16 INFO - rsp = 0x00007edc561981d0 rip = 0x00007edc51a61296
[task 2019-10-16T22:03:16.174Z] 22:03:16 INFO - Found by: stack scanning
[task 2019-10-16T22:03:16.174Z] 22:03:16 INFO - 24 libxul.so!js::GCPtr<JS::Value>::set(JS::Value const&) [Barrier.h:8843c82f74f732dda425d901b7ecbd8f62c88b0d : 550 + 0x5]
[task 2019-10-16T22:03:16.174Z] 22:03:16 INFO - rsp = 0x00007edc56198240 rip = 0x00007edc519f66f7
[task 2019-10-16T22:03:16.174Z] 22:03:16 INFO - Found by: stack scanning
[task 2019-10-16T22:03:16.174Z] 22:03:16 INFO -
[task 2019-10-16T22:03:16.174Z] 22:03:16 INFO - Thread 0

Whiteboard: [domsecurity-intermittent]

The priority flag is not set for this bug.
:ckerschb, could you have a look please?

For more information, please visit auto_nag documentation.

Flags: needinfo?(ckerschb)
Flags: needinfo?(ckerschb)
Priority: -- → P5

Marking this as Resolved > Worksforme since there are no more crashes in the last 6 months with this signature.

Status: NEW → RESOLVED
Closed: 3 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.