Closed Bug 1625444 Opened 4 years ago Closed 4 years ago

Intermittent /IndexedDB/parallel-cursors-upgrade.html | application crashed [@ CheckZoneTracer::Trace(JS::Heap<JS::Value>*, char const*, void*) const]

Categories

(Core :: Storage: IndexedDB, defect)

Product:
Core
Component:
Storage: IndexedDB
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED FIXED
Milestone:
mozilla76
Tracking Flags:
Tracking Status
firefox-esr68 --- unaffected
firefox74 --- unaffected
firefox75 --- unaffected
firefox76 --- fixed

People

(Reporter: intermittent-bug-filer, Assigned: sg)

References

(Regression)

Details

(Keywords: crash, intermittent-failure, regression)

Crash Data

Attachments

(1 file)

Bug 1625444 - Make IDBObjectStoreCursor a multi-zone JSHolder class. r=jonco,#dom-workers-and-storage
47 bytes, text/x-phabricator-request
Details | Review

Filed by: cbrindusan [at] mozilla.com
Parsed log: https://treeherder.mozilla.org/logviewer.html#?job_id=295020069&repo=mozilla-central
Full log: https://firefox-ci-tc.services.mozilla.com/api/queue/v1/task/I_x_w59gTQSTnAMEeiWLAw/runs/0/artifacts/public/logs/live_backing.log

[task 2020-03-27T10:16:48.736Z] 10:16:48 INFO - TEST-START | /IndexedDB/parallel-cursors-upgrade.html
[task 2020-03-27T10:16:48.799Z] 10:16:48 INFO - Closing window 1343
[task 2020-03-27T10:16:50.901Z] 10:16:50 INFO - Browser not responding, setting status to CRASH
[task 2020-03-27T10:16:52.215Z] 10:16:52 INFO - mozcrash Copy/paste: /builds/worker/fetches/minidump_stackwalk/minidump_stackwalk /tmp/tmpBtaHcU/6614d5f5-1994-7d7c-7c3f-3d3dc26afc10.dmp /builds/worker/workspace/build/symbols
[task 2020-03-27T10:16:56.713Z] 10:16:56 INFO - mozcrash Saved minidump as /builds/worker/workspace/build/blobber_upload_dir/6614d5f5-1994-7d7c-7c3f-3d3dc26afc10.dmp
[task 2020-03-27T10:16:56.713Z] 10:16:56 INFO - mozcrash Saved app info as /builds/worker/workspace/build/blobber_upload_dir/6614d5f5-1994-7d7c-7c3f-3d3dc26afc10.extra
[task 2020-03-27T10:16:56.844Z] 10:16:56 INFO - PROCESS-CRASH | /IndexedDB/parallel-cursors-upgrade.html | application crashed [@ CheckZoneTracer::Trace(JS::Heap<JS::Value>, char const, void*) const]
[task 2020-03-27T10:16:56.844Z] 10:16:56 INFO - Mozilla crash reason: JS holder IDBObjectStoreCursor contains pointers to GC things in more than one zone (found in mCachedValue)
[task 2020-03-27T10:16:56.844Z] 10:16:56 INFO -
[task 2020-03-27T10:16:56.844Z] 10:16:56 INFO - Crash dump filename: /tmp/tmpBtaHcU/6614d5f5-1994-7d7c-7c3f-3d3dc26afc10.dmp
[task 2020-03-27T10:16:56.844Z] 10:16:56 INFO - Operating system: Android
[task 2020-03-27T10:16:56.844Z] 10:16:56 INFO - 0.0.0 Linux 3.10.0+ #260 SMP PREEMPT Fri May 19 12:48:14 PDT 2017 x86_64
[task 2020-03-27T10:16:56.844Z] 10:16:56 INFO - CPU: amd64
[task 2020-03-27T10:16:56.844Z] 10:16:56 INFO - family 6 model 6 stepping 3
[task 2020-03-27T10:16:56.844Z] 10:16:56 INFO - 4 CPUs
[task 2020-03-27T10:16:56.844Z] 10:16:56 INFO -
[task 2020-03-27T10:16:56.844Z] 10:16:56 INFO - GPU: UNKNOWN
[task 2020-03-27T10:16:56.844Z] 10:16:56 INFO -
[task 2020-03-27T10:16:56.845Z] 10:16:56 INFO - Crash reason: SIGSEGV /SEGV_MAPERR
[task 2020-03-27T10:16:56.845Z] 10:16:56 INFO - Crash address: 0x0
[task 2020-03-27T10:16:56.845Z] 10:16:56 INFO - Process uptime: not available
[task 2020-03-27T10:16:56.845Z] 10:16:56 INFO -
[task 2020-03-27T10:16:56.845Z] 10:16:56 INFO - Thread 18 (crashed)
[task 2020-03-27T10:16:56.845Z] 10:16:56 INFO - 0 libxul.so!CheckZoneTracer::Trace(JS::Heap<JS::Value>, char const, void*) const [CycleCollectedJSRuntime.cpp:2998408f57b103e0ca4256d55bca54c1f046aca6 : 0 + 0x4c]
[task 2020-03-27T10:16:56.845Z] 10:16:56 INFO - rax = 0x000079ee1e66dbc0 rdx = 0x0000000000000004
[task 2020-03-27T10:16:56.845Z] 10:16:56 INFO - rcx = 0x23a356e8566a3ca4 rbx = 0x000079ee1e66dbd0
[task 2020-03-27T10:16:56.845Z] 10:16:56 INFO - rsi = 0x000079ee0c101a10 rdi = 0x000000000000001b
[task 2020-03-27T10:16:56.845Z] 10:16:56 INFO - rbp = 0x000079ee0c1020f0 rsp = 0x000079ee0c1020c0
[task 2020-03-27T10:16:56.845Z] 10:16:56 INFO - r8 = 0x0000000000000000 r9 = 0x000079ee3c76f090[task 2020-03-27T10:16:56.845Z] 10:16:56 INFO - r10 = 0x0000000000000022 r11 = 0x0000000000000246
[task 2020-03-27T10:16:56.845Z] 10:16:56 INFO - r12 = 0x000079ee08d57098 r13 = 0xfffaffffffffffff
[task 2020-03-27T10:16:56.845Z] 10:16:56 INFO - r14 = 0x000079ee1bb0e283 r15 = 0x000079ee0c102158
[task 2020-03-27T10:16:56.845Z] 10:16:56 INFO - rip = 0x000079ee135e5975
[task 2020-03-27T10:16:56.845Z] 10:16:56 INFO - Found by: given as instruction pointer in context
[task 2020-03-27T10:16:56.845Z] 10:16:56 INFO - 1 libxul.so!mozilla::dom::IDBCursor::cycleCollection::Trace(void*, TraceCallbacks const&, void*) [IDBCursor.cpp:2998408f57b103e0ca4256d55bca54c1f046aca6 : 806 + 0x19]
[task 2020-03-27T10:16:56.845Z] 10:16:56 INFO - rbp = 0x000079ee0c102140 rsp = 0x000079ee0c102100
[task 2020-03-27T10:16:56.845Z] 10:16:56 INFO - rip = 0x000079ee16ea87fe
[task 2020-03-27T10:16:56.845Z] 10:16:56 INFO - Found by: previous frame's frame pointer
[task 2020-03-27T10:16:56.845Z] 10:16:56 INFO - 2 libxul.so!mozilla::CycleCollectedJSRuntime::TraceNativeGrayRoots(JSTracer*) [CycleCollectedJSRuntime.cpp:2998408f57b103e0ca4256d55bca54c1f046aca6 : 1185 + 0x95]
[task 2020-03-27T10:16:56.845Z] 10:16:56 INFO - rbp = 0x000079ee0c1021a0 rsp = 0x000079ee0c102150
[task 2020-03-27T10:16:56.845Z] 10:16:56 INFO - rip = 0x000079ee135d034f
[task 2020-03-27T10:16:56.845Z] 10:16:56 INFO - Found by: previous frame's frame pointer
[task 2020-03-27T10:16:56.846Z] 10:16:56 INFO - 3 libxul.so!js::gc::GCRuntime::bufferGrayRoots() [RootMarking.cpp:2998408f57b103e0ca4256d55bca54c1f046aca6 : 555 + 0x27]
[task 2020-03-27T10:16:56.846Z] 10:16:56 INFO - rbp = 0x000079ee0c102220 rsp = 0x000079ee0c1021b0
[task 2020-03-27T10:16:56.846Z] 10:16:56 INFO - rip = 0x000079ee193f9087
[task 2020-03-27T10:16:56.846Z] 10:16:56 INFO - Found by: previous frame's frame pointer
[task 2020-03-27T10:16:56.846Z] 10:16:56 INFO - 4 libxul.so!AutoRunParallelTask::run() [GC.cpp:2998408f57b103e0ca4256d55bca54c1f046aca6 : 3581 + 0x1a]
[task 2020-03-27T10:16:56.846Z] 10:16:56 INFO - rbp = 0x000079ee0c102240 rsp = 0x000079ee0c102230
[task 2020-03-27T10:16:56.846Z] 10:16:56 INFO - rip = 0x000079ee193b2118
[task 2020-03-27T10:16:56.846Z] 10:16:56 INFO - Found by: previous frame's frame pointer
[task 2020-03-27T10:16:56.846Z] 10:16:56 INFO - 5 libxul.so!js::GCParallelTask::runTask() [GCParallelTask.cpp:2998408f57b103e0ca4256d55bca54c1f046aca6 : 146 + 0x9]
[task 2020-03-27T10:16:56.846Z] 10:16:56 INFO - rbp = 0x000079ee0c102270 rsp = 0x000079ee0c102250
[task 2020-03-27T10:16:56.846Z] 10:16:56 INFO - rip = 0x000079ee1939cc9b
[task 2020-03-27T10:16:56.846Z] 10:16:56 INFO - Found by: previous frame's frame pointer
[task 2020-03-27T10:16:56.846Z] 10:16:56 INFO - 6 libxul.so!js::GCParallelTask::runFromHelperThread(js::AutoLockHelperThreadState&) [GCParallelTask.cpp:2998408f57b103e0ca4256d55bca54c1f046aca6 : 131 + 0xa]
[task 2020-03-27T10:16:56.846Z] 10:16:56 INFO - 6 libxul.so!js::GCParallelTask::runFromHelperThread(js::AutoLockHelperThreadState&) [GCParallelTask.cpp:2998408f57b103e0ca4256d55bca54c1f046aca6 : 131 + 0xa]
[task 2020-03-27T10:16:56.846Z] 10:16:56 INFO - rbp = 0x000079ee0c1022b0 rsp = 0x000079ee0c102280
[task 2020-03-27T10:16:56.846Z] 10:16:56 INFO - rip = 0x000079ee1939ca59
[task 2020-03-27T10:16:56.846Z] 10:16:56 INFO - Found by: previous frame's frame pointer
[task 2020-03-27T10:16:56.846Z] 10:16:56 INFO - 7 libxul.so!js::HelperThread::handleGCParallelWorkload(js::AutoLockHelperThreadState&) [HelperThreads.cpp:2998408f57b103e0ca4256d55bca54c1f046aca6 : 1712 + 0x8]
[task 2020-03-27T10:16:56.846Z] 10:16:56 INFO - rbp = 0x000079ee0c102320 rsp = 0x000079ee0c1022c0
[task 2020-03-27T10:16:56.847Z] 10:16:56 INFO - rip = 0x000079ee18d80c3e
[task 2020-03-27T10:16:56.847Z] 10:16:56 INFO - Found by: previous frame's frame pointer
[task 2020-03-27T10:16:56.847Z] 10:16:56 INFO - 8 libxul.so!js::HelperThread::threadLoop() [HelperThreads.cpp:2998408f57b103e0ca4256d55bca54c1f046aca6 : 2526 + 0x5]
[task 2020-03-27T10:16:56.847Z] 10:16:56 INFO - rbp = 0x000079ee0c102390 rsp = 0x000079ee0c102330
[task 2020-03-27T10:16:56.847Z] 10:16:56 INFO - rip = 0x000079ee18d82ca5
[task 2020-03-27T10:16:56.847Z] 10:16:56 INFO - Found by: previous frame's frame pointer
[task 2020-03-27T10:16:56.847Z] 10:16:56 INFO - 9 libxul.so!js::HelperThread::ThreadMain(void*) [HelperThreads.cpp:2998408f57b103e0ca4256d55bca54c1f046aca6 : 2048 + 0x8]
[task 2020-03-27T10:16:56.847Z] 10:16:56 INFO - rbp = 0x000079ee0c1023b0 rsp = 0x000079ee0c1023a0
[task 2020-03-27T10:16:56.847Z] 10:16:56 INFO - rip = 0x000079ee18d7dcc5
[task 2020-03-27T10:16:56.847Z] 10:16:56 INFO - Found by: previous frame's frame pointer
[task 2020-03-27T10:16:56.847Z] 10:16:56 INFO - 10 libxul.so!js::detail::ThreadTrampoline<void (&)(void*), js::HelperThread*>::Start(void*) [Thread.h:2998408f57b103e0ca4256d55bca54c1f046aca6 : 206 + 0x1a]
[task 2020-03-27T10:16:56.847Z] 10:16:56 INFO - rbp = 0x000079ee0c1023e0 rsp = 0x000079ee0c1023c0
[task 2020-03-27T10:16:56.847Z] 10:16:56 INFO - rip = 0x000079ee18db9f15
[task 2020-03-27T10:16:56.847Z] 10:16:56 INFO - Found by: previous frame's frame pointer
[task 2020-03-27T10:16:56.847Z] 10:16:56 INFO - 11 libc.so + 0x89772
[task 2020-03-27T10:16:56.847Z] 10:16:56 INFO - rsp = 0x000079ee0c1023f0 rip = 0x000079ee38ef2772
[task 2020-03-27T10:16:56.847Z] 10:16:56 INFO - Found by: stack scanning
[task 2020-03-27T10:16:56.847Z] 10:16:56 INFO - 12 libxul.so + 0x6606ee0
[task 2020-03-27T10:16:56.847Z] 10:16:56 INFO - rsp = 0x000079ee0c102428 rip = 0x000079ee18db9ee0[task 2020-03-27T10:16:56.847Z] 10:16:56 INFO - Found by: stack scanning
[task 2020-03-27T10:16:56.848Z] 10:16:56 INFO - 13 libc.so + 0x299ec
[task 2020-03-27T10:16:56.848Z] 10:16:56 INFO - rsp = 0x000079ee0c102440 rip = 0x000079ee38e929ec
[task 2020-03-27T10:16:56.848Z] 10:16:56 INFO - Found by: stack scanning
[task 2020-03-27T10:16:56.848Z] 10:16:56 INFO - 14 libc.so + 0x896c0
[task 2020-03-27T10:16:56.848Z] 10:16:56 INFO - rsp = 0x000079ee0c102448 rip = 0x000079ee38ef26c0
[task 2020-03-27T10:16:56.848Z] 10:16:56 INFO - Found by: stack scanning
[task 2020-03-27T10:16:56.848Z] 10:16:56 INFO - 15 libc.so + 0x1ca66
[task 2020-03-27T10:16:56.848Z] 10:16:56 INFO - rsp = 0x000079ee0c102450 rip = 0x000079ee38e85a66
[task 2020-03-27T10:16:56.848Z] 10:16:56 INFO - Found by: stack scanning
[task 2020-03-27T10:16:56.848Z] 10:16:56 INFO - 16 libxul.so + 0x6606ee0
[task 2020-03-27T10:16:56.848Z] 10:16:56 INFO - rsp = 0x000079ee0c1024b8 rip = 0x000079ee18db9ee0
[task 2020-03-27T10:16:56.848Z] 10:16:56 INFO - Found by: stack scanning

Simon, it's a crash related IDBCursor, could you take a look?

Flags: needinfo?(sgiesecke)
Flags: needinfo?(sgiesecke)
Regressed by: 1624810
Has Regression Range: --- → yes
Keywords: regression

Jon, is it appropriate to use NS_IMPL_CYCLE_COLLECTION_MULTI_ZONE_JSHOLDER_CLASS for IDBObjectStoreCursor as well (as it's already the case for IDBIndexCursor)?

Flags: needinfo?(jcoppeard)
Assignee: nobody → sgiesecke
Status: NEW → ASSIGNED
Crash Signature: [@ CheckZoneTracer::Trace(JS::Heap<JS::Value>*, char const*, void*) const] → [@ CheckZoneTracer::Trace(JS::Heap<JS::Value>*, char const*, void*) const] [@ CheckZoneTracer::checkZone(JS::Zone*, char const*) const]
Pushed by sgiesecke@mozilla.com:
https://hg.mozilla.org/integration/autoland/rev/d7c936098f29
Make IDBObjectStoreCursor a multi-zone JSHolder class. r=jonco,dom-workers-and-storage-reviewers,asuth

https://hg.mozilla.org/mozilla-central/rev/d7c936098f29

Status: ASSIGNED → RESOLVED
Closed: 4 years ago
status-firefox76: --- → fixed
Resolution: --- → FIXED
Target Milestone: --- → mozilla76
Crash Signature: [@ CheckZoneTracer::Trace(JS::Heap<JS::Value>*, char const*, void*) const] [@ CheckZoneTracer::checkZone(JS::Zone*, char const*) const] → [@ CheckZoneTracer::Trace(JS::Heap<JS::Value>*, char const*, void*) const] [@ CheckZoneTracer::checkZone(JS::Zone*, char const*) const]
status-firefox74: --- → unaffected
status-firefox75: --- → unaffected
status-firefox-esr68: --- → unaffected
Flags: needinfo?(jcoppeard)
See Also: → 1627282
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: