Closed
Bug 1621246
Opened 6 years ago
Closed 2 years ago
Intermittent AddressSanitizer: access-violation (C:\Windows\SYSTEM32\ntdll.dll+0x1800a0b76) SQLite3
Categories
(Core :: SQLite and Embedded Database Bindings, defect, P3)
Core
SQLite and Embedded Database Bindings
Tracking
()
RESOLVED
INCOMPLETE
People
(Reporter: bogdan_tara, Unassigned)
Details
(Keywords: csectype-wildptr, sec-high)
https://treeherder.mozilla.org/logviewer.html#/jobs?job_id=292417807&repo=autoland&lineNumber=2258
https://firefoxci.taskcluster-artifacts.net/CqXqL6BrR1mJLbzw_N2bww/0/public/logs/live_backing.log
[task 2020-03-10T10:08:48.638Z] 10:08:48 INFO - TEST-START | dom/crypto/test/test_indexedDB.html
[task 2020-03-10T10:08:49.547Z] 10:08:49 INFO - GECKO(10044) | MEMORY STAT | vsize 19405792MB | vsizeMaxContiguous 74849649MB | residentFast 815MB
[task 2020-03-10T10:08:49.565Z] 10:08:49 INFO - TEST-OK | dom/crypto/test/test_indexedDB.html | took 921ms
[task 2020-03-10T10:08:49.611Z] 10:08:49 INFO - TEST-START | Shutdown
[task 2020-03-10T10:08:49.611Z] 10:08:49 INFO - Passed: 320
[task 2020-03-10T10:08:49.612Z] 10:08:49 INFO - Failed: 0
[task 2020-03-10T10:08:49.612Z] 10:08:49 INFO - Todo: 0
[task 2020-03-10T10:08:49.612Z] 10:08:49 INFO - Mode: e10s
[task 2020-03-10T10:08:49.612Z] 10:08:49 INFO - Slowest: 2997ms - /tests/dom/crypto/test/test_WebCrypto.html
[task 2020-03-10T10:08:49.612Z] 10:08:49 INFO - SimpleTest FINISHED
[task 2020-03-10T10:08:49.612Z] 10:08:49 INFO - TEST-INFO | Ran 1 Loops
[task 2020-03-10T10:08:49.612Z] 10:08:49 INFO - SimpleTest FINISHED
[task 2020-03-10T10:08:50.523Z] 10:08:50 INFO - GECKO(10044) | ###!!! [Parent][RunMessage] Error: Channel closing: too late to send/recv, messages will be lost
[task 2020-03-10T10:08:50.622Z] 10:08:50 INFO - GECKO(10044) | ###!!! [Parent][RunMessage] Error: Channel closing: too late to send/recv, messages will be lost
[task 2020-03-10T10:08:51.067Z] 10:08:51 INFO - GECKO(10044) | 1583834931065 Marionette TRACE Received observer notification xpcom-will-shutdown
[task 2020-03-10T10:08:51.067Z] 10:08:51 INFO - GECKO(10044) | 1583834931066 Marionette INFO Stopped listening on port 2828
[task 2020-03-10T10:08:51.067Z] 10:08:51 INFO - GECKO(10044) | 1583834931066 Marionette DEBUG Marionette stopped listening
[task 2020-03-10T10:08:51.086Z] 10:08:51 INFO - GECKO(10044) | ###!!! [Child][RunMessage] Error: Channel closing: too late to send/recv, messages will be lost
[task 2020-03-10T10:08:52.085Z] 10:08:52 INFO - TEST-INFO | Main app process: exit 0
[task 2020-03-10T10:08:52.085Z] 10:08:52 INFO - runtests.py | Application ran for: 0:00:37.273000
[task 2020-03-10T10:08:52.086Z] 10:08:52 INFO - zombiecheck | Reading PID log: c:\users\task_1583833116\appdata\local\temp\tmpiim4pbpidlog
[task 2020-03-10T10:08:52.087Z] 10:08:52 INFO - ==> process 7284 launched child process 9556 ("Z:\task_1583833116\build\application\firefox\firefox.exe" -contentproc --channel="7284.0.729420691\10739444" -parentBuildID 20200310085017 -prefsHandle 2296 -prefMapHandle 2284 -prefsLen 1 -prefMapSize 229651 -appdir "Z:\task_1583833116\build\application\firefox\browser" - 7284 gpu)
[task 2020-03-10T10:08:52.087Z] 10:08:52 INFO - ==> process 7284 launched child process 5148 ("Z:\task_1583833116\build\application\firefox\firefox.exe" -contentproc --channel="7284.6.162937990\2064215862" -childID 1 -isForBrowser -prefsHandle 2904 -prefMapHandle 2900 -prefsLen 1391 -prefMapSize 229651 -parentBuildID 20200310085017 -appdir "Z:\task_1583833116\build\application\firefox\browser" - 7284 tab)
[task 2020-03-10T10:08:52.087Z] 10:08:52 INFO - ==> process 7284 launched child process 10016 ("Z:\task_1583833116\build\application\firefox\firefox.exe" -contentproc --channel="7284.13.1954156283\1004130372" -childID 2 -isForBrowser -prefsHandle 3104 -prefMapHandle 3100 -prefsLen 1857 -prefMapSize 229651 -parentBuildID 20200310085017 -appdir "Z:\task_1583833116\build\application\firefox\browser" - 7284 tab)
[task 2020-03-10T10:08:52.088Z] 10:08:52 INFO - ==> process 7284 launched child process 10508 ("Z:\task_1583833116\build\application\firefox\firefox.exe" -contentproc --channel="7284.20.1248911469\1810269652" -childID 3 -isForBrowser -prefsHandle 4804 -prefMapHandle 4800 -prefsLen 1857 -prefMapSize 229651 -parentBuildID 20200310085017 -appdir "Z:\task_1583833116\build\application\firefox\browser" - 7284 tab)
[task 2020-03-10T10:08:52.088Z] 10:08:52 INFO - zombiecheck | Checking for orphan process with PID: 10016
[task 2020-03-10T10:08:52.088Z] 10:08:52 INFO - zombiecheck | Checking for orphan process with PID: 5148
[task 2020-03-10T10:08:52.088Z] 10:08:52 INFO - zombiecheck | Checking for orphan process with PID: 9556
[task 2020-03-10T10:08:52.088Z] 10:08:52 INFO - zombiecheck | Checking for orphan process with PID: 10508
[task 2020-03-10T10:08:52.088Z] 10:08:52 INFO - Stopping web server
[task 2020-03-10T10:08:52.093Z] 10:08:52 INFO - Stopping web socket server
[task 2020-03-10T10:08:52.103Z] 10:08:52 INFO - Stopping ssltunnel
[task 2020-03-10T10:08:52.182Z] 10:08:52 WARNING - leakcheck | refcount logging is off, so leaks can't be detected!
[task 2020-03-10T10:08:52.182Z] 10:08:52 INFO - runtests.py | Running tests: end.
[task 2020-03-10T10:08:52.247Z] 10:08:52 INFO - Buffered messages finished
[task 2020-03-10T10:08:52.247Z] 10:08:52 INFO - Running manifest: dom\html\test\forms\mochitest.ini
[task 2020-03-10T10:08:52.285Z] 10:08:52 INFO - INFO | runtests.py | ASan using symbolizer at Z:\task_1583833116\build\application\firefox\llvm-symbolizer.exe
[task 2020-03-10T10:08:52.346Z] 10:08:52 INFO - INFO | runtests.py | ASan running in default memory configuration
[task 2020-03-10T10:08:53.329Z] 10:08:53 INFO - Z:\task_1583833116\build\tests\bin\pk12util.exe: PKCS12 IMPORT SUCCESSFUL
[task 2020-03-10T10:08:53.572Z] 10:08:53 INFO - INFO | runtests.py | ASan using symbolizer at Z:\task_1583833116\build\application\firefox\llvm-symbolizer.exe
[task 2020-03-10T10:08:53.623Z] 10:08:53 INFO - INFO | runtests.py | ASan running in default memory configuration
[task 2020-03-10T10:08:53.623Z] 10:08:53 INFO - INFO | runtests.py | ASan using symbolizer at Z:\task_1583833116\build\application\firefox\llvm-symbolizer.exe
[task 2020-03-10T10:08:53.681Z] 10:08:53 INFO - INFO | runtests.py | ASan running in default memory configuration
[task 2020-03-10T10:08:53.681Z] 10:08:53 INFO - MochitestServer : launching [u'Z:\\task_1583833116\\build\\tests\\bin\\xpcshell.exe', '-g', 'Z:\\task_1583833116\\build\\application\\firefox', '-f', 'Z:\\task_1583833116\\build\\tests\\bin\\components\\httpd.js', '-e', "const _PROFILE_PATH = 'c:\\\\users\\\\task_1583833116\\\\appdata\\\\local\\\\temp\\\\tmpxm4_yn.mozrunner'; const _SERVER_PORT = '8888'; const _SERVER_ADDR = '127.0.0.1'; const _TEST_PREFIX = undefined; const _DISPLAY_RESULTS = false;", '-f', 'Z:\\task_1583833116\\build\\tests\\mochitest\\server.js']
[task 2020-03-10T10:08:53.681Z] 10:08:53 INFO - runtests.py | Server pid: 10724
[task 2020-03-10T10:08:53.683Z] 10:08:53 INFO - runtests.py | Websocket server pid: 6460
[task 2020-03-10T10:08:53.685Z] 10:08:53 INFO - INFO | runtests.py | ASan using symbolizer at Z:\task_1583833116\build\application\firefox\llvm-symbolizer.exe
[task 2020-03-10T10:08:53.744Z] 10:08:53 INFO - INFO | runtests.py | ASan running in default memory configuration
[task 2020-03-10T10:08:53.746Z] 10:08:53 INFO - runtests.py | SSL tunnel pid: 10028
[task 2020-03-10T10:08:54.156Z] 10:08:54 INFO - runtests.py | Running with scheme: http
[task 2020-03-10T10:08:54.156Z] 10:08:54 INFO - runtests.py | Running with e10s: True
[task 2020-03-10T10:08:54.156Z] 10:08:54 INFO - runtests.py | Running with fission: False
[task 2020-03-10T10:08:54.156Z] 10:08:54 INFO - runtests.py | Running with serviceworker_e10s: True
[task 2020-03-10T10:08:54.156Z] 10:08:54 INFO - runtests.py | Running with socketprocess_e10s: False
[task 2020-03-10T10:08:54.157Z] 10:08:54 INFO - runtests.py | Running tests: start.
[task 2020-03-10T10:08:54.157Z] 10:08:54 INFO -
[task 2020-03-10T10:08:54.260Z] 10:08:54 INFO - Application command: Z:\task_1583833116\build\application\firefox\firefox.exe -marionette --wait-for-browser -foreground -profile c:\users\task_1583833116\appdata\local\temp\tmpxm4_yn.mozrunner
[task 2020-03-10T10:08:54.262Z] 10:08:54 INFO - runtests.py | Application pid: 6588
[task 2020-03-10T10:08:54.262Z] 10:08:54 INFO - TEST-INFO | started process GECKO(6588)
[task 2020-03-10T10:08:56.010Z] 10:08:56 INFO - GECKO(6588) | 1583834936005 addons.webextension.doh-rollout@mozilla.org WARN Loading extension 'doh-rollout@mozilla.org': Reading manifest: Invalid extension permission: networkStatus
[task 2020-03-10T10:08:57.818Z] 10:08:57 INFO - GECKO(6588) | =================================================================
[task 2020-03-10T10:08:57.818Z] 10:08:57 ERROR - GECKO(6588) | ==2996==ERROR: AddressSanitizer: access-violation on unknown address 0x1273d4df7000 (pc 0x7ffd61bb0b77 bp 0x000000000000 sp 0x00ef1bfefe48 T36)
[task 2020-03-10T10:08:57.818Z] 10:08:57 INFO - GECKO(6588) | ==2996==The signal is caused by a WRITE memory access.
[task 2020-03-10T10:08:58.203Z] 10:08:58 INFO - GECKO(6588) | #0 0x7ffd61bb0b76 (C:\Windows\SYSTEM32\ntdll.dll+0x1800a0b76)
[task 2020-03-10T10:08:58.207Z] 10:08:58 INFO - GECKO(6588) | #1 0x7ffd3263f41d in __asan::Allocator::Allocate(unsigned __int64,unsigned __int64,struct __sanitizer::BufferedStackTrace *,enum __asan::AllocType,bool) Z:\task_1583576698\fetches\llvm-project\llvm\projects\compiler-rt\lib\asan\asan_allocator.cc:535
[task 2020-03-10T10:08:58.207Z] 10:08:58 INFO - GECKO(6588) | #2 0x7ffd3263ed99 in __asan::asan_malloc(unsigned __int64,struct __sanitizer::BufferedStackTrace *) Z:\task_1583576698\fetches\llvm-project\llvm\projects\compiler-rt\lib\asan\asan_allocator.cc:875
[task 2020-03-10T10:08:58.207Z] 10:08:58 INFO - GECKO(6588) | #3 0x7ffd32654c00 in malloc Z:\task_1583576698\fetches\llvm-project\llvm\projects\compiler-rt\lib\asan\asan_malloc_win.cc:102
[task 2020-03-10T10:08:58.217Z] 10:08:58 INFO - GECKO(6588) | #4 0x7ffd48d047b0 in sqlite3MemMalloc z:\build\build\src\third_party\sqlite3\src\sqlite3.c:23498
[task 2020-03-10T10:08:58.217Z] 10:08:58 INFO - GECKO(6588) | #5 0x7ffd48935de7 in sqlite3Malloc z:\build\build\src\third_party\sqlite3\src\sqlite3.c:27419
[task 2020-03-10T10:08:58.217Z] 10:08:58 INFO - GECKO(6588) | #6 0x7ffd489c52fb in pcache1Alloc z:\build\build\src\third_party\sqlite3\src\sqlite3.c:49809
[task 2020-03-10T10:08:58.217Z] 10:08:58 INFO - GECKO(6588) | #7 0x7ffd48a5e6c7 in balance z:\build\build\src\third_party\sqlite3\src\sqlite3.c:72551
[task 2020-03-10T10:08:58.217Z] 10:08:58 INFO - GECKO(6588) | #8 0x7ffd48a3c242 in sqlite3BtreeInsert z:\build\build\src\third_party\sqlite3\src\sqlite3.c:72945
[task 2020-03-10T10:08:58.217Z] 10:08:58 INFO - GECKO(6588) | #9 0x7ffd48a0341c in sqlite3VdbeExec z:\build\build\src\third_party\sqlite3\src\sqlite3.c:90475
[task 2020-03-10T10:08:58.217Z] 10:08:58 INFO - GECKO(6588) | #10 0x7ffd489591fc in sqlite3_step z:\build\build\src\third_party\sqlite3\src\sqlite3.c:83275
[task 2020-03-10T10:08:58.541Z] 10:08:58 INFO - GECKO(6588) | #11 0x7ffd0f94d390 in mozilla::storage::Connection::stepStatement(struct sqlite3 *,struct sqlite3_stmt *) z:\build\build\src\storage\mozStorageConnection.cpp:1119
[task 2020-03-10T10:08:58.541Z] 10:08:58 INFO - GECKO(6588) | #12 0x7ffd0f98e1ef in mozilla::storage::Statement::ExecuteStep(bool *) z:\build\build\src\storage\mozStorageStatement.cpp:519
[task 2020-03-10T10:08:58.541Z] 10:08:58 INFO - GECKO(6588) | #13 0x7ffd0f98dad5 in mozilla::storage::Statement::Execute(void) z:\build\build\src\storage\mozStorageStatement.cpp:488
[task 2020-03-10T10:08:58.542Z] 10:08:58 INFO - GECKO(6588) | #14 0x7ffd167e5441 in mozilla::dom::indexedDB::`anonymous namespace'::ObjectStoreAddOrPutRequestOp::DoDatabaseWork z:\build\build\src\dom\indexedDB\ActorsParent.cpp:25413
[task 2020-03-10T10:08:58.542Z] 10:08:58 INFO - GECKO(6588) | #15 0x7ffd16786ccc in mozilla::dom::indexedDB::`anonymous namespace'::TransactionDatabaseOperationBase::RunOnConnectionThread z:\build\build\src\dom\indexedDB\ActorsParent.cpp:22869
[task 2020-03-10T10:08:58.543Z] 10:08:58 INFO - GECKO(6588) | #16 0x7ffd1678470c in mozilla::dom::indexedDB::`anonymous namespace'::TransactionDatabaseOperationBase::Run z:\build\build\src\dom\indexedDB\ActorsParent.cpp:23036
[task 2020-03-10T10:08:58.543Z] 10:08:58 INFO - GECKO(6588) | #17 0x7ffd0d724337 in nsThread::ProcessNextEvent(bool,bool *) z:\build\build\src\xpcom\threads\nsThread.cpp:1220
[task 2020-03-10T10:08:58.543Z] 10:08:58 INFO - GECKO(6588) | #18 0x7ffd0d731028 in NS_ProcessNextEvent(class nsIThread *,bool) z:\build\build\src\xpcom\threads\nsThreadUtils.cpp:481
[task 2020-03-10T10:08:58.543Z] 10:08:58 INFO - GECKO(6588) | #19 0x7ffd1675ac1d in mozilla::dom::indexedDB::`anonymous namespace'::ConnectionPool::ThreadRunnable::Run z:\build\build\src\dom\indexedDB\ActorsParent.cpp:12865
[task 2020-03-10T10:08:58.543Z] 10:08:58 INFO - GECKO(6588) | #20 0x7ffd0d724337 in nsThread::ProcessNextEvent(bool,bool *) z:\build\build\src\xpcom\threads\nsThread.cpp:1220
[task 2020-03-10T10:08:58.543Z] 10:08:58 INFO - GECKO(6588) | #21 0x7ffd0d731028 in NS_ProcessNextEvent(class nsIThread *,bool) z:\build\build\src\xpcom\threads\nsThreadUtils.cpp:481
[task 2020-03-10T10:08:58.544Z] 10:08:58 INFO - GECKO(6588) | #22 0x7ffd0ea2164c in mozilla::ipc::MessagePumpForNonMainThreads::Run(class base::MessagePump::Delegate *) z:\build\build\src\ipc\glue\MessagePump.cpp:332
[task 2020-03-10T10:08:58.546Z] 10:08:58 INFO - GECKO(6588) | #23 0x7ffd0e9613ae in MessageLoop::RunHandler(void) z:\build\build\src\ipc\chromium\src\base\message_loop.cc:308
[task 2020-03-10T10:08:58.546Z] 10:08:58 INFO - GECKO(6588) | #24 0x7ffd0e961145 in MessageLoop::Run(void) z:\build\build\src\ipc\chromium\src\base\message_loop.cc:290
[task 2020-03-10T10:08:58.546Z] 10:08:58 INFO - GECKO(6588) | #25 0x7ffd0d71c9b0 in nsThread::ThreadFunc(void *) z:\build\build\src\xpcom\threads\nsThread.cpp:464
[task 2020-03-10T10:08:58.546Z] 10:08:58 INFO - GECKO(6588) | #26 0x7ffd48dec577 in _PR_NativeRunThread z:\build\build\src\nsprpub\pr\src\threads\combined\pruthr.c:399
[task 2020-03-10T10:08:58.546Z] 10:08:58 INFO - GECKO(6588) | #27 0x7ffd48dc08f4 in pr_root z:\build\build\src\nsprpub\pr\src\md\windows\w95thred.c:139
[task 2020-03-10T10:08:58.546Z] 10:08:58 INFO - GECKO(6588) | #28 0x7ffd5dfdc4bd (C:\Windows\System32\ucrtbase.dll+0x18001c4bd)
[task 2020-03-10T10:08:58.546Z] 10:08:58 INFO - GECKO(6588) | #29 0x7ffd3265f838 in __asan::AsanThread::ThreadStart(unsigned __int64,struct __sanitizer::atomic_uintptr_t *) Z:\task_1583576698\fetches\llvm-project\llvm\projects\compiler-rt\lib\asan\asan_thread.cc:262
[task 2020-03-10T10:08:58.547Z] 10:08:58 INFO - GECKO(6588) | #30 0x7ffd601a3033 (C:\Windows\System32\KERNEL32.DLL+0x180013033)
[task 2020-03-10T10:08:58.552Z] 10:08:58 INFO - GECKO(6588) | #31 0x7ffd535f4deb in patched_BaseThreadInitThunk z:\build\build\src\mozglue\dllservices\WindowsDllBlocklist.cpp:587
[task 2020-03-10T10:08:58.552Z] 10:08:58 INFO - GECKO(6588) | #32 0x7ffd61b81460 (C:\Windows\SYSTEM32\ntdll.dll+0x180071460)
[task 2020-03-10T10:08:58.552Z] 10:08:58 INFO - GECKO(6588) | AddressSanitizer can not provide additional info.
[task 2020-03-10T10:08:58.552Z] 10:08:58 INFO - GECKO(6588) | SUMMARY: AddressSanitizer: access-violation (C:\Windows\SYSTEM32\ntdll.dll+0x1800a0b76)
[task 2020-03-10T10:08:58.552Z] 10:08:58 INFO - GECKO(6588) | Thread T36 created by T28 here:
[task 2020-03-10T10:08:58.554Z] 10:08:58 INFO - GECKO(6588) | #0 0x7ffd3266095c in __asan_wrap_CreateThread Z:\task_1583576698\fetches\llvm-project\llvm\projects\compiler-rt\lib\asan\asan_win.cc:146
[task 2020-03-10T10:08:58.554Z] 10:08:58 INFO - GECKO(6588) | #1 0x7ffd5dfdc0c6 (C:\Windows\System32\ucrtbase.dll+0x18001c0c6)
[task 2020-03-10T10:08:58.554Z] 10:08:58 INFO - GECKO(6588) | #2 0x7ffd48dc071d in _PR_MD_CREATE_THREAD z:\build\build\src\nsprpub\pr\src\md\windows\w95thred.c:153
[task 2020-03-10T10:08:58.556Z] 10:08:58 INFO - GECKO(6588) | #3 0x7ffd48ded4dc in _PR_NativeCreateThread z:\build\build\src\nsprpub\pr\src\threads\combined\pruthr.c:1058
[task 2020-03-10T10:08:58.556Z] 10:08:58 INFO - GECKO(6588) | #4 0x7ffd48dede85 in _PR_CreateThread z:\build\build\src\nsprpub\pr\src\threads\combined\pruthr.c:1184
[task 2020-03-10T10:08:58.556Z] 10:08:58 INFO - GECKO(6588) | #5 0x7ffd48de362f in PR_CreateThread z:\build\build\src\nsprpub\pr\src\threads\combined\pruthr.c:1404
[task 2020-03-10T10:08:58.557Z] 10:08:58 INFO - GECKO(6588) | #6 0x7ffd0d71f704 in nsThread::Init(class nsTSubstring<char> const &) z:\build\build\src\xpcom\threads\nsThread.cpp:670
[task 2020-03-10T10:08:58.559Z] 10:08:58 INFO - GECKO(6588) | #7 0x7ffd0d72fbc4 in nsThreadManager::NewNamedThread(class nsTSubstring<char> const &,unsigned int,class nsIThread * *) z:\build\build\src\xpcom\threads\nsThreadManager.cpp:620
[task 2020-03-10T10:08:58.559Z] 10:08:58 INFO - GECKO(6588) | #8 0x7ffd0d733f40 in NS_NewNamedThread(class nsTSubstring<char> const &,class nsIThread * *,class nsIRunnable *,unsigned int) z:\build\build\src\xpcom\threads\nsThreadUtils.cpp:139
[task 2020-03-10T10:08:58.560Z] 10:08:58 INFO - GECKO(6588) | #9 0x7ffd16758600 in mozilla::dom::indexedDB::`anonymous namespace'::ConnectionPool::ScheduleTransaction z:\build\build\src\dom\indexedDB\ActorsParent.cpp:12216
[task 2020-03-10T10:08:58.560Z] 10:08:58 INFO - GECKO(6588) | #10 0x7ffd167833e3 in mozilla::dom::indexedDB::`anonymous namespace'::TransactionDatabaseOperationBase::StartOnConnectionPool z:\build\build\src\dom\indexedDB\ActorsParent.cpp:22810
[task 2020-03-10T10:08:58.561Z] 10:08:58 INFO - GECKO(6588) | #11 0x7ffd16745485 in mozilla::dom::indexedDB::`anonymous namespace'::OpenDatabaseOp::DispatchToWorkThread z:\build\build\src\dom\indexedDB\ActorsParent.cpp:21886
[task 2020-03-10T10:08:58.561Z] 10:08:58 INFO - GECKO(6588) | #12 0x7ffd167366b9 in mozilla::dom::indexedDB::`anonymous namespace'::FactoryOp::Run z:\build\build\src\dom\indexedDB\ActorsParent.cpp
[task 2020-03-10T10:08:58.561Z] 10:08:58 INFO - GECKO(6588) | #13 0x7ffd1674cdbf in mozilla::dom::indexedDB::`anonymous namespace'::WaitForTransactionsHelper::MaybeWaitForFileHandles z:\build\build\src\dom\indexedDB\ActorsParent.cpp:13367
[task 2020-03-10T10:08:58.562Z] 10:08:58 INFO - GECKO(6588) | #14 0x7ffd1674c1ed in mozilla::dom::indexedDB::`anonymous namespace'::WaitForTransactionsHelper::Run z:\build\build\src\dom\indexedDB\ActorsParent.cpp:13390
[task 2020-03-10T10:08:58.562Z] 10:08:58 INFO - GECKO(6588) | #15 0x7ffd16744053 in mozilla::dom::indexedDB::`anonymous namespace'::OpenDatabaseOp::BeginVersionChange z:\build\build\src\dom\indexedDB\ActorsParent.cpp:21777
[task 2020-03-10T10:08:58.563Z] 10:08:58 INFO - GECKO(6588) | #16 0x7ffd167366b9 in mozilla::dom::indexedDB::`anonymous namespace'::FactoryOp::Run z:\build\build\src\dom\indexedDB\ActorsParent.cpp
[task 2020-03-10T10:08:58.563Z] 10:08:58 INFO - GECKO(6588) | #17 0x7ffd0d724337 in nsThread::ProcessNextEvent(bool,bool *) z:\build\build\src\xpcom\threads\nsThread.cpp:1220
[task 2020-03-10T10:08:58.564Z] 10:08:58 INFO - GECKO(6588) | #18 0x7ffd0d731028 in NS_ProcessNextEvent(class nsIThread *,bool) z:\build\build\src\xpcom\threads\nsThreadUtils.cpp:481
[task 2020-03-10T10:08:58.564Z] 10:08:58 INFO - GECKO(6588) | #19 0x7ffd0ea2164c in mozilla::ipc::MessagePumpForNonMainThreads::Run(class base::MessagePump::Delegate *) z:\build\build\src\ipc\glue\MessagePump.cpp:332
[task 2020-03-10T10:08:58.565Z] 10:08:58 INFO - GECKO(6588) | #20 0x7ffd0e9613ae in MessageLoop::RunHandler(void) z:\build\build\src\ipc\chromium\src\base\message_loop.cc:308
[task 2020-03-10T10:08:58.565Z] 10:08:58 INFO - GECKO(6588) | #21 0x7ffd0e961145 in MessageLoop::Run(void) z:\build\build\src\ipc\chromium\src\base\message_loop.cc:290
[task 2020-03-10T10:08:58.566Z] 10:08:58 INFO - GECKO(6588) | #22 0x7ffd0d71c9b0 in nsThread::ThreadFunc(void *) z:\build\build\src\xpcom\threads\nsThread.cpp:464
[task 2020-03-10T10:08:58.566Z] 10:08:58 INFO - GECKO(6588) | #23 0x7ffd48dec577 in _PR_NativeRunThread z:\build\build\src\nsprpub\pr\src\threads\combined\pruthr.c:399
[task 2020-03-10T10:08:58.567Z] 10:08:58 INFO - GECKO(6588) | #24 0x7ffd48dc08f4 in pr_root z:\build\build\src\nsprpub\pr\src\md\windows\w95thred.c:139
[task 2020-03-10T10:08:58.567Z] 10:08:58 INFO - GECKO(6588) | #25 0x7ffd5dfdc4bd (C:\Windows\System32\ucrtbase.dll+0x18001c4bd)
[task 2020-03-10T10:08:58.567Z] 10:08:58 INFO - GECKO(6588) | #26 0x7ffd3265f838 in __asan::AsanThread::ThreadStart(unsigned __int64,struct __sanitizer::atomic_uintptr_t *) Z:\task_1583576698\fetches\llvm-project\llvm\projects\compiler-rt\lib\asan\asan_thread.cc:262
[task 2020-03-10T10:08:58.567Z] 10:08:58 INFO - GECKO(6588) | #27 0x7ffd601a3033 (C:\Windows\System32\KERNEL32.DLL+0x180013033)
[task 2020-03-10T10:08:58.568Z] 10:08:58 INFO - GECKO(6588) | #28 0x7ffd535f4deb in patched_BaseThreadInitThunk z:\build\build\src\mozglue\dllservices\WindowsDllBlocklist.cpp:587
[task 2020-03-10T10:08:58.568Z] 10:08:58 INFO - GECKO(6588) | #29 0x7ffd61b81460 (C:\Windows\SYSTEM32\ntdll.dll+0x180071460)
[task 2020-03-10T10:08:58.568Z] 10:08:58 INFO - GECKO(6588) | Thread T28 created by T0 here:
[task 2020-03-10T10:08:58.568Z] 10:08:58 INFO - GECKO(6588) | #0 0x7ffd3266095c in __asan_wrap_CreateThread Z:\task_1583576698\fetches\llvm-project\llvm\projects\compiler-rt\lib\asan\asan_win.cc:146
[task 2020-03-10T10:08:58.568Z] 10:08:58 INFO - GECKO(6588) | #1 0x7ffd5dfdc0c6 (C:\Windows\System32\ucrtbase.dll+0x18001c0c6)
[task 2020-03-10T10:08:58.568Z] 10:08:58 INFO - GECKO(6588) | #2 0x7ffd48dc071d in _PR_MD_CREATE_THREAD z:\build\build\src\nsprpub\pr\src\md\windows\w95thred.c:153
[task 2020-03-10T10:08:58.568Z] 10:08:58 INFO - GECKO(6588) | #3 0x7ffd48ded4dc in _PR_NativeCreateThread z:\build\build\src\nsprpub\pr\src\threads\combined\pruthr.c:1058
[task 2020-03-10T10:08:58.568Z] 10:08:58 INFO - GECKO(6588) | #4 0x7ffd48dede85 in _PR_CreateThread z:\build\build\src\nsprpub\pr\src\threads\combined\pruthr.c:1184
[task 2020-03-10T10:08:58.569Z] 10:08:58 INFO - GECKO(6588) | #5 0x7ffd48de362f in PR_CreateThread z:\build\build\src\nsprpub\pr\src\threads\combined\pruthr.c:1404
[task 2020-03-10T10:08:58.569Z] 10:08:58 INFO - GECKO(6588) | #6 0x7ffd0d71f704 in nsThread::Init(class nsTSubstring<char> const &) z:\build\build\src\xpcom\threads\nsThread.cpp:670
[task 2020-03-10T10:08:58.569Z] 10:08:58 INFO - GECKO(6588) | #7 0x7ffd0d72fbc4 in nsThreadManager::NewNamedThread(class nsTSubstring<char> const &,unsigned int,class nsIThread * *) z:\build\build\src\xpcom\threads\nsThreadManager.cpp:620
[task 2020-03-10T10:08:58.569Z] 10:08:58 INFO - GECKO(6588) | #8 0x7ffd0d733f40 in NS_NewNamedThread(class nsTSubstring<char> const &,class nsIThread * *,class nsIRunnable *,unsigned int) z:\build\build\src\xpcom\threads\nsThreadUtils.cpp:139
[task 2020-03-10T10:08:58.569Z] 10:08:58 INFO - GECKO(6588) | #9 0x7ffd0e9d2eae in `anonymous namespace'::ParentImpl::CreateBackgroundThread z:\build\build\src\ipc\glue\BackgroundImpl.cpp:1325
[task 2020-03-10T10:08:58.569Z] 10:08:58 INFO - GECKO(6588) | #10 0x7ffd0e9d876f in `anonymous namespace'::ParentImpl::CreateActorHelper::Run z:\build\build\src\ipc\glue\BackgroundImpl.cpp:1639
[task 2020-03-10T10:08:58.569Z] 10:08:58 INFO - GECKO(6588) | #11 0x7ffd0d724337 in nsThread::ProcessNextEvent(bool,bool *) z:\build\build\src\xpcom\threads\nsThread.cpp:1220
[task 2020-03-10T10:08:58.570Z] 10:08:58 INFO - GECKO(6588) | #12 0x7ffd0d731028 in NS_ProcessNextEvent(class nsIThread *,bool) z:\build\build\src\xpcom\threads\nsThreadUtils.cpp:481
[task 2020-03-10T10:08:58.570Z] 10:08:58 INFO - GECKO(6588) | #13 0x7ffd0d730565 in nsThreadManager::SpinEventLoopUntilInternal(class nsINestedEventLoopCondition *,bool) z:\build\build\src\xpcom\threads\nsThreadManager.cpp:694
[task 2020-03-10T10:08:59.040Z] 10:08:59 INFO - GECKO(6588) | #14 0x7ffd1ec338e1 in XPTC__InvokebyIndex (Z:\task_1583833116\build\application\firefox\xul.dll+0x1918638e1)
[task 2020-03-10T10:08:59.042Z] 10:08:59 INFO - GECKO(6588) | #15 0x7ffd0f8ab89f in XPCWrappedNative::CallMethod(class XPCCallContext &,enum XPCWrappedNative::CallMode) z:\build\build\src\js\xpconnect\src\XPCWrappedNative.cpp:1141
[task 2020-03-10T10:08:59.042Z] 10:08:59 INFO - GECKO(6588) | #16 0x7ffd0f8b320e in XPC_WN_CallMethod(struct JSContext *,unsigned int,class JS::Value *) z:\build\build\src\js\xpconnect\src\XPCWrappedNativeJSOps.cpp:947
[task 2020-03-10T10:08:59.042Z] 10:08:59 INFO - GECKO(6588) | #17 0x7ffd1bc4d2ea in js::InternalCallOrConstruct(struct JSContext *,class JS::CallArgs const &,enum js::MaybeConstruct,enum js::CallReason) z:\build\build\src\js\src\vm\Interpreter.cpp:569
[task 2020-03-10T10:08:59.042Z] 10:08:59 INFO - GECKO(6588) | #18 0x7ffd1bc5056d in InternalCall z:\build\build\src\js\src\vm\Interpreter.cpp:632
[task 2020-03-10T10:08:59.042Z] 10:08:59 INFO - GECKO(6588) | #19 0x7ffd1bc2e294 in Interpret z:\build\build\src\js\src\vm\Interpreter.cpp:3046
[task 2020-03-10T10:08:59.043Z] 10:08:59 INFO - GECKO(6588) | #20 0x7ffd1bc12df7 in js::RunScript(struct JSContext *,class js::RunState &) z:\build\build\src\js\src\vm\Interpreter.cpp:449
[task 2020-03-10T10:08:59.043Z] 10:08:59 INFO - GECKO(6588) | #21 0x7ffd1bc4dba9 in js::InternalCallOrConstruct(struct JSContext *,class JS::CallArgs const &,enum js::MaybeConstruct,enum js::CallReason) z:\build\build\src\js\src\vm\Interpreter.cpp:604
[task 2020-03-10T10:08:59.043Z] 10:08:59 INFO - GECKO(6588) | #22 0x7ffd1bc5056d in InternalCall z:\build\build\src\js\src\vm\Interpreter.cpp:632
[task 2020-03-10T10:08:59.043Z] 10:08:59 INFO - GECKO(6588) | #23 0x7ffd1bc50732 in js::Call(struct JSContext *,class JS::Handle<class JS::Value>,class JS::Handle<class JS::Value>,class js::AnyInvokeArgs const &,class JS::MutableHandle<class JS::Value>,enum js::CallReason) z:\build\build\src\js\src\vm\Interpreter.cpp:649
[task 2020-03-10T10:08:59.044Z] 10:08:59 INFO - GECKO(6588) | #24 0x7ffd1c2886ae in js::fun_apply(struct JSContext *,unsigned int,class JS::Value *) z:\build\build\src\js\src\vm\JSFunction.cpp:1214
[task 2020-03-10T10:08:59.044Z] 10:08:59 INFO - GECKO(6588) | #25 0x7ffd1bc4d2ea in js::InternalCallOrConstruct(struct JSContext *,class JS::CallArgs const &,enum js::MaybeConstruct,enum js::CallReason) z:\build\build\src\js\src\vm\Interpreter.cpp:569
[task 2020-03-10T10:08:59.044Z] 10:08:59 INFO - GECKO(6588) | #26 0x7ffd1bc5056d in InternalCall z:\build\build\src\js\src\vm\Interpreter.cpp:632
[task 2020-03-10T10:08:59.044Z] 10:08:59 INFO - GECKO(6588) | #27 0x7ffd1bc2e294 in Interpret z:\build\build\src\js\src\vm\Interpreter.cpp:3046
[task 2020-03-10T10:08:59.044Z] 10:08:59 INFO - GECKO(6588) | #28 0x7ffd1bc12df7 in js::RunScript(struct JSContext *,class js::RunState &) z:\build\build\src\js\src\vm\Interpreter.cpp:449
[task 2020-03-10T10:08:59.044Z] 10:08:59 INFO - GECKO(6588) | #29 0x7ffd1bc4dba9 in js::InternalCallOrConstruct(struct JSContext *,class JS::CallArgs const &,enum js::MaybeConstruct,enum js::CallReason) z:\build\build\src\js\src\vm\Interpreter.cpp:604
[task 2020-03-10T10:08:59.044Z] 10:08:59 INFO - GECKO(6588) | #30 0x7ffd1bc5056d in InternalCall z:\build\build\src\js\src\vm\Interpreter.cpp:632
[task 2020-03-10T10:08:59.045Z] 10:08:59 INFO - GECKO(6588) | #31 0x7ffd1bc50732 in js::Call(struct JSContext *,class JS::Handle<class JS::Value>,class JS::Handle<class JS::Value>,class js::AnyInvokeArgs const &,class JS::MutableHandle<class JS::Value>,enum js::CallReason) z:\build\build\src\js\src\vm\Interpreter.cpp:649
[task 2020-03-10T10:08:59.047Z] 10:08:59 INFO - GECKO(6588) | #32 0x7ffd1be1c6c6 in JS_CallFunctionValue(struct JSContext *,class JS::Handle<class JSObject *>,class JS::Handle<class JS::Value>,class JS::HandleValueArray const &,class JS::MutableHandle<class JS::Value>) z:\build\build\src\js\src\jsapi.cpp:2734
[task 2020-03-10T10:08:59.047Z] 10:08:59 INFO - GECKO(6588) | #33 0x7ffd0f8997e4 in nsXPCWrappedJS::CallMethod(unsigned short,struct nsXPTMethodInfo const *,struct nsXPTCMiniVariant *) z:\build\build\src\js\xpconnect\src\XPCWrappedJSClass.cpp:959
[task 2020-03-10T10:08:59.047Z] 10:08:59 INFO - GECKO(6588) | #34 0x7ffd0d76ad16 in PrepareAndDispatch z:\build\build\src\xpcom\reflect\xptcall\md\win32\xptcstubs_x86_64.cpp:181
[task 2020-03-10T10:08:59.086Z] 10:08:59 INFO - GECKO(6588) | #35 0x7ffd1ec33938 in SharedStub (Z:\task_1583833116\build\application\firefox\xul.dll+0x191863938)
[task 2020-03-10T10:08:59.086Z] 10:08:59 INFO - GECKO(6588) | #36 0x7ffd1b9ac549 in nsXREDirProvider::DoStartup(void) z:\build\build\src\toolkit\xre\nsXREDirProvider.cpp:957
[task 2020-03-10T10:08:59.086Z] 10:08:59 INFO - GECKO(6588) | #37 0x7ffd1b93ceaf in XREMain::XRE_mainRun(void) z:\build\build\src\toolkit\xre\nsAppRunner.cpp:4348
[task 2020-03-10T10:08:59.086Z] 10:08:59 INFO - GECKO(6588) | #38 0x7ffd1b941766 in XREMain::XRE_main(int,char * * const,struct mozilla::BootstrapConfig const &) z:\build\build\src\toolkit\xre\nsAppRunner.cpp:4690
[task 2020-03-10T10:08:59.087Z] 10:08:59 INFO - GECKO(6588) | #39 0x7ffd1b942b48 in XRE_main(int,char * * const,struct mozilla::BootstrapConfig const &) z:\build\build\src\toolkit\xre\nsAppRunner.cpp:4741
[task 2020-03-10T10:08:59.087Z] 10:08:59 INFO - GECKO(6588) | #40 0x7ff796fa2359 in NS_internal_main(int,char * *,char * *) z:\build\build\src\browser\app\nsBrowserApp.cpp:331
[task 2020-03-10T10:08:59.088Z] 10:08:59 INFO - GECKO(6588) | #41 0x7ff796fa1501 in wmain z:\build\build\src\toolkit\xre\nsWindowsWMain.cpp:131
[task 2020-03-10T10:08:59.088Z] 10:08:59 INFO - GECKO(6588) | #42 0x7ff79709dab7 in __scrt_common_main_seh f:\dd\vctools\crt\vcstartup\src\startup\exe_common.inl:288
[task 2020-03-10T10:08:59.088Z] 10:08:59 INFO - GECKO(6588) | #43 0x7ffd601a3033 (C:\Windows\System32\KERNEL32.DLL+0x180013033)
[task 2020-03-10T10:08:59.088Z] 10:08:59 INFO - GECKO(6588) | #44 0x7ffd61b81460 (C:\Windows\SYSTEM32\ntdll.dll+0x180071460)
[task 2020-03-10T10:08:59.088Z] 10:08:59 INFO - GECKO(6588) | ==2996==ABORTING
[task 2020-03-10T10:11:54.627Z] 10:11:54 INFO - runtests.py | Waiting for browser...
[task 2020-03-10T10:11:54.632Z] 10:11:54 INFO - TEST-INFO | Main app process: exit 1
[task 2020-03-10T10:11:54.632Z] 10:11:54 INFO - Buffered messages finished
[task 2020-03-10T10:11:54.632Z] 10:11:54 ERROR - TEST-UNEXPECTED-FAIL | automation.py | application terminated with exit code 1
[task 2020-03-10T10:11:54.632Z] 10:11:54 INFO - runtests.py | Application ran for: 0:03:00.372000
|
Reporter | |
Updated•6 years ago
|
Flags: needinfo?(sgiesecke)
|
||
Comment 1•6 years ago
|
||
Seems odd to have a WRITE access violation inside the allocator. Maybe something earlier trashed the heap?
Keywords: csectype-wildptr,
sec-high
Summary: Intermittent AddressSanitizer: access-violation (C:\Windows\SYSTEM32\ntdll.dll+0x1800a0b76) → Intermittent AddressSanitizer: access-violation (C:\Windows\SYSTEM32\ntdll.dll+0x1800a0b76) SQLite3
|
||
Comment 2•6 years ago
|
||
I have no other idea about this either. While there's Storage & IndexedDB stuff on the stack, it is not even clear that this caused it. This does not appear actionable to me.
Flags: needinfo?(sgiesecke)
|
||
Comment 3•6 years ago
|
||
The priority flag is not set for this bug.
:mak, could you have a look please?
For more information, please visit auto_nag documentation.
Flags: needinfo?(mak)
|
||
Updated•6 years ago
|
Flags: needinfo?(mak)
Priority: -- → P3
|
|
||
Comment 4•6 years ago
|
||
Daniel, what's the usual path for sec-high bugs like this that appear to be non-actionable? Do we just keep them around, close as incomplete?
Flags: needinfo?(dveditz)
|
|
||
Comment 5•6 years ago
|
||
We first mark them 'stalled' (which I'll go ahead and do now). Eventually we either get a lot more evidence (does this intermittent happen a lot, or is it a one-time deal? If we take a close look are there other ones like this, in the unlikely case it's a bug in ASAN itself?) and can maybe resurrect it, or we close it incomplete.
Christian: have you see crashes like this in ASAN? Is it an intentional crash? bp is suspiciously zero, but the AV address is definitely not.
Flags: needinfo?(dveditz) → needinfo?(choller)
Keywords: stalled
|
||
Comment 6•6 years ago
|
||
Sorry for the delayed response here. I agree that the stack looks like something might have corrupted the heap earlier already and I doubt this is an ASan related bug at all. I have not seen such crashes, but maybe Jason has in browser fuzzing?
Flags: needinfo?(choller) → needinfo?(jkratzer)
|
||
Comment 7•6 years ago
|
||
No, sorry. I haven't seen anything recently resembling this stack. Have there been any recent instances of this crash?
Flags: needinfo?(jkratzer)
|
|
||
Comment 8•6 years ago
|
||
No, we have only this one crash the bug got filed for.
|
|
||
Comment 9•4 years ago
|
||
The severity field for this bug is set to normal. However, the bug is flagged with the sec-high keyword.
:mak, could you consider increasing the severity of this security bug?
For more information, please visit auto_nag documentation.
Flags: needinfo?(mak)
|
|
||
Updated•4 years ago
|
Flags: needinfo?(mak)
|
||
Updated•3 years ago
|
Severity: normal → S3
|
||
Updated•2 years ago
|
Status: NEW → RESOLVED
Closed: 2 years ago
Resolution: --- → INCOMPLETE
|
||
Comment 10•2 years ago
|
||
Since the bug is closed, the stalled keyword is now meaningless.
For more information, please visit BugBot documentation.
Keywords: stalled
|
|
||
Updated•2 years ago
|
Group: firefox-core-security
|
|
||
Updated•1 year ago
|
Product: Toolkit → Core
You need to log in
before you can comment on or make changes to this bug.
Description
•