Intermittent margin-collapsing/block-negative-3a.html | application crashed [@ js::GCMarker::traverse<JSObject*>(JSObject*)]
Categories
(Core :: JavaScript: GC, defect, P5)
Tracking
()
People
(Reporter: intermittent-bug-filer, Unassigned)
References
(Blocks 1 open bug)
Details
(Keywords: crash, intermittent-failure)
Crash Data
Filed by: nbeleuzu [at] mozilla.com
Parsed log: https://treeherder.mozilla.org/logviewer.html#?job_id=288961213&repo=autoland
Full log: https://firefox-ci-tc.services.mozilla.com/api/queue/v1/task/al8Ia_m4RAqMrFufDDt9Qg/runs/0/artifacts/public/logs/live_backing.log
Reftest URL: https://hg.mozilla.org/mozilla-central/raw-file/tip/layout/tools/reftest/reftest-analyzer.xhtml#logurl=https://firefox-ci-tc.services.mozilla.com/api/queue/v1/task/al8Ia_m4RAqMrFufDDt9Qg/runs/0/artifacts/public/logs/live_backing.log&only_show_unexpected=1
[task 2020-02-14T16:37:03.652Z] 16:37:03 ERROR - TEST-UNEXPECTED-FAIL | layout/reftests/margin-collapsing/block-negative-3a.html | application terminated with exit code 1
[task 2020-02-14T16:37:03.653Z] 16:37:03 INFO - REFTEST INFO | Downloading symbols from: https://firefox-ci-tc.services.mozilla.com/api/queue/v1/task/MIIdKDnAS5qkEDtiG0bBMg/artifacts/public/build/target.crashreporter-symbols.zip
[task 2020-02-14T16:37:09.667Z] 16:37:09 INFO - REFTEST INFO | Copy/paste: /Users/cltbld/tasks/task_1581697830/fetches/minidump_stackwalk/minidump_stackwalk /var/folders/xv/3xxj0xb94_n925ll_qw2y67w000017/T/tmpf9z40A.mozrunner/minidumps/5C3A9621-7997-4C17-B338-32E7F07759AB.dmp /var/folders/xv/3xxj0xb94_n925ll_qw2y67w000017/T/tmp0ISNbn
[task 2020-02-14T16:37:15.934Z] 16:37:15 INFO - REFTEST INFO | Saved minidump as /Users/cltbld/tasks/task_1581697830/build/blobber_upload_dir/5C3A9621-7997-4C17-B338-32E7F07759AB.dmp
[task 2020-02-14T16:37:15.935Z] 16:37:15 INFO - REFTEST INFO | Saved app info as /Users/cltbld/tasks/task_1581697830/build/blobber_upload_dir/5C3A9621-7997-4C17-B338-32E7F07759AB.extra
[task 2020-02-14T16:37:16.111Z] 16:37:16 INFO - REFTEST PROCESS-CRASH | layout/reftests/margin-collapsing/block-negative-3a.html | application crashed [@ js::GCMarker::traverse<JSObject*>(JSObject*)]
[task 2020-02-14T16:37:16.112Z] 16:37:16 INFO - Crash dump filename: /var/folders/xv/3xxj0xb94_n925ll_qw2y67w000017/T/tmpf9z40A.mozrunner/minidumps/5C3A9621-7997-4C17-B338-32E7F07759AB.dmp
[task 2020-02-14T16:37:16.112Z] 16:37:16 INFO - Operating system: Mac OS X
[task 2020-02-14T16:37:16.112Z] 16:37:16 INFO - 10.14.5 18F132
[task 2020-02-14T16:37:16.112Z] 16:37:16 INFO - CPU: amd64
[task 2020-02-14T16:37:16.112Z] 16:37:16 INFO - family 6 model 69 stepping 1
[task 2020-02-14T16:37:16.112Z] 16:37:16 INFO - 4 CPUs
[task 2020-02-14T16:37:16.112Z] 16:37:16 INFO -
[task 2020-02-14T16:37:16.112Z] 16:37:16 INFO - GPU: UNKNOWN
[task 2020-02-14T16:37:16.112Z] 16:37:16 INFO -
[task 2020-02-14T16:37:16.112Z] 16:37:16 INFO - Crash reason: EXC_BAD_ACCESS / EXC_I386_GPFLT
[task 2020-02-14T16:37:16.112Z] 16:37:16 INFO - Crash address: 0x0
[task 2020-02-14T16:37:16.112Z] 16:37:16 INFO - Process uptime: 8 seconds
[task 2020-02-14T16:37:16.112Z] 16:37:16 INFO -
[task 2020-02-14T16:37:16.112Z] 16:37:16 INFO - Thread 0 (crashed)
[task 2020-02-14T16:37:16.112Z] 16:37:16 INFO - 0 XUL!void js::GCMarker::traverse<JSObject*>(JSObject*) [Marking.cpp:434c92c55e9a67e8e9f6699590314b90732a8863 : 983 + 0x18]
[task 2020-02-14T16:37:16.112Z] 16:37:16 INFO - rax = 0xe5e5e5e5e5efffe8 rdx = 0xe5e5e5e5e5e00000
[task 2020-02-14T16:37:16.113Z] 16:37:16 INFO - rcx = 0x000000010c3cf878 rbx = 0x00000001223adb00
[task 2020-02-14T16:37:16.113Z] 16:37:16 INFO - rsi = 0xe5e5e5e5e5e5e5e5 rdi = 0x0000000106c201c0
[task 2020-02-14T16:37:16.113Z] 16:37:16 INFO - rbp = 0x00007ffeebc09740 rsp = 0x00007ffeebc09710
| Comment hidden (Intermittent Failures Robot) |
|
||
Comment 2•5 years ago
|
||
One off crash on MacOS.
Looks like UAF but it's strange to see the jemalloc poison value here. The only jemalloc allocated memory in use here is the mark stack (a Vector).
|
||
Updated•5 years ago
|
Description
•