Closed Bug 1626322 Opened 5 years ago Closed 5 years ago

Intermittent Assertion failure: !js::gc::IsInsideNursery(thing.asCell()), at /builds/worker/workspace/obj-build/dist/include/js/HeapAPI.h:574

Categories

(Core :: XPCOM, defect, P1)

Product:
Core
Component:
XPCOM
Type:
defect

Tracking

()

Status:
RESOLVED FIXED
Milestone:
mozilla77
Tracking Flags:
Tracking Status
firefox77 --- fixed

People

(Reporter: intermittent-bug-filer, Assigned: jonco)

Details

(Keywords: intermittent-failure, Whiteboard: [domsecurity-intermittent])

Attachments

(1 file)

Bug 1626322 - Add an API to get the zone of a possibly-nursery allocated GC thing and use it in CheckZoneTracer r?sfink,mccr8
47 bytes, text/x-phabricator-request
Details | Review

Filed by: rmaries [at] mozilla.com
Parsed log: https://treeherder.mozilla.org/logviewer.html#?job_id=295600188&repo=autoland
Full log: https://firefox-ci-tc.services.mozilla.com/api/queue/v1/task/A3gsdGpcSdu5_zbWQXK3bg/runs/0/artifacts/public/logs/live_backing.log

[task 2020-03-31T14:35:14.322Z] 14:35:14 INFO - TEST-START | /WebCryptoAPI/digest/test_digest.https.html
[task 2020-03-31T14:35:22.667Z] 14:35:22 INFO - mozcrash Saved minidump as /builds/worker/workspace/build/blobber_upload_dir/60882b4b-1774-7dec-6dc3-ea2aff4c6221.dmp
[task 2020-03-31T14:35:22.717Z] 14:35:22 INFO - mozcrash Saved app info as /builds/worker/workspace/build/blobber_upload_dir/60882b4b-1774-7dec-6dc3-ea2aff4c6221.extra
[task 2020-03-31T14:35:22.809Z] 14:35:22 INFO - PROCESS-CRASH | /IndexedDB/bigint_value.htm | application crashed [@ CheckZoneTracer::Trace(JS::Heap<JS::Value>, char const, void*) const]
[task 2020-03-31T14:35:22.810Z] 14:35:22 INFO - Mozilla crash reason: MOZ_ASSERT(!js::gc::IsInsideNursery(thing.asCell()))
[task 2020-03-31T14:35:22.810Z] 14:35:22 INFO - Crash dump filename: /tmp/tmpWESo5u/minidumps/60882b4b-1774-7dec-6dc3-ea2aff4c6221.dmp
[task 2020-03-31T14:35:22.811Z] 14:35:22 INFO - Operating system: Linux
[task 2020-03-31T14:35:22.811Z] 14:35:22 INFO - 0.0.0 Linux 4.4.0-1014-aws #14taskcluster1-Ubuntu SMP Tue Apr 3 10:27:00 UTC 2018 x86_64
[task 2020-03-31T14:35:22.811Z] 14:35:22 INFO - CPU: amd64
[task 2020-03-31T14:35:22.811Z] 14:35:22 INFO - family 6 model 62 stepping 4
[task 2020-03-31T14:35:22.812Z] 14:35:22 INFO - 4 CPUs
[task 2020-03-31T14:35:22.812Z] 14:35:22 INFO -
[task 2020-03-31T14:35:22.812Z] 14:35:22 INFO - GPU: UNKNOWN
[task 2020-03-31T14:35:22.813Z] 14:35:22 INFO -
[task 2020-03-31T14:35:22.813Z] 14:35:22 INFO - Crash reason: SIGSEGV /SEGV_MAPERR
[task 2020-03-31T14:35:22.813Z] 14:35:22 INFO - Crash address: 0x0
[task 2020-03-31T14:35:22.814Z] 14:35:22 INFO - Process uptime: not available
[task 2020-03-31T14:35:22.814Z] 14:35:22 INFO -
[task 2020-03-31T14:35:22.814Z] 14:35:22 INFO - Thread 0 (crashed)
[task 2020-03-31T14:35:22.814Z] 14:35:22 INFO - 0 libxul.so!CheckZoneTracer::Trace(JS::Heap<JS::Value>, char const, void*) const [CycleCollectedJSRuntime.cpp:3e03712c2056e28dd085b9f1c03559883b575f40 : 1117 + 0x29]
[task 2020-03-31T14:35:22.815Z] 14:35:22 INFO - rax = 0x00007f57adf69ee9 rdx = 0x0000000000000000
[task 2020-03-31T14:35:22.815Z] 14:35:22 INFO - rcx = 0x00005603269ded78 rbx = 0x00007ffc95469f68
[task 2020-03-31T14:35:22.815Z] 14:35:22 INFO - rsi = 0x00007f57bac6d8b0 rdi = 0x00007f57bac6c680
[task 2020-03-31T14:35:22.815Z] 14:35:22 INFO - rbp = 0x00007ffc95469f40 rsp = 0x00007ffc95469f10
[task 2020-03-31T14:35:22.816Z] 14:35:22 INFO - r8 = 0x00007f57bac6d8b0 r9 = 0x00007f57bbd6c780
[task 2020-03-31T14:35:22.820Z] 14:35:22 INFO - r10 = 0x0000000000000000 r11 = 0x0000000000000000
[task 2020-03-31T14:35:22.820Z] 14:35:22 INFO - r12 = 0x00007ffc95469f58 r13 = 0x00007f57a5ca5900
[task 2020-03-31T14:35:22.820Z] 14:35:22 INFO - r14 = 0x00007f57af019c50 r15 = 0x00007ffc95469f68
[task 2020-03-31T14:35:22.820Z] 14:35:22 INFO - rip = 0x00007f57a7d23b3f
[task 2020-03-31T14:35:22.820Z] 14:35:22 INFO - Found by: given as instruction pointer in context
[task 2020-03-31T14:35:22.820Z] 14:35:22 INFO - 1 libxul.so!mozilla::CycleCollectedJSRuntime::TraceNativeGrayRoots(JSTracer*) [CycleCollectedJSRuntime.cpp:3e03712c2056e28dd085b9f1c03559883b575f40 : 1185 + 0x83]
[task 2020-03-31T14:35:22.820Z] 14:35:22 INFO - rbx = 0x00007f57b0e43440 rbp = 0x00007ffc95469fb0
[task 2020-03-31T14:35:22.820Z] 14:35:22 INFO - rsp = 0x00007ffc95469f50 r12 = 0x00007ffc95469f58
[task 2020-03-31T14:35:22.820Z] 14:35:22 INFO - r13 = 0x00007f57a5ca5900 r14 = 0x00007ffc9546a118
[task 2020-03-31T14:35:22.821Z] 14:35:22 INFO - r15 = 0x00007ffc95469f68 rip = 0x00007f57a7d10e9f
[task 2020-03-31T14:35:22.821Z] 14:35:22 INFO - Found by: call frame info
[task 2020-03-31T14:35:22.821Z] 14:35:22 INFO - 2 libxul.so!js::gc::GCRuntime::traceRuntimeCommon(JSTracer*, js::gc::GCRuntime::TraceOrMarkRuntime) [RootMarking.cpp:3e03712c2056e28dd085b9f1c03559883b575f40 : 431 + 0x45]
[task 2020-03-31T14:35:22.821Z] 14:35:22 INFO - rbx = 0x00007ffc95469fe0 rbp = 0x00007ffc9546a070
[task 2020-03-31T14:35:22.821Z] 14:35:22 INFO - rsp = 0x00007ffc95469fc0 r12 = 0x00007ffc9546a118
[task 2020-03-31T14:35:22.821Z] 14:35:22 INFO - r13 = 0x00007f579fd1f790 r14 = 0x00007ffc95469fe8
[task 2020-03-31T14:35:22.821Z] 14:35:22 INFO - r15 = 0x00007f579fd1f708 rip = 0x00007f57ac6318ff
[task 2020-03-31T14:35:22.821Z] 14:35:22 INFO - Found by: call frame info
[task 2020-03-31T14:35:22.821Z] 14:35:22 INFO - 3 libxul.so!js::gc::GCRuntime::traceRuntime(JSTracer*, js::gc::AutoTraceSession&) [RootMarking.cpp:3e03712c2056e28dd085b9f1c03559883b575f40 : 333 + 0xd]
[task 2020-03-31T14:35:22.821Z] 14:35:22 INFO - rbx = 0x00007ffc9546a118 rbp = 0x00007ffc9546a0b0
[task 2020-03-31T14:35:22.821Z] 14:35:22 INFO - rsp = 0x00007ffc9546a080 r12 = 0x00007ffc9546a080
[task 2020-03-31T14:35:22.821Z] 14:35:22 INFO - r13 = 0x00007ffc9546a110 r14 = 0x00007f579fd1f708
[task 2020-03-31T14:35:22.821Z] 14:35:22 INFO - r15 = 0x00007f579fd1f790 rip = 0x00007f57ac631d88
[task 2020-03-31T14:35:22.821Z] 14:35:22 INFO - Found by: call frame info
[task 2020-03-31T14:35:22.821Z] 14:35:22 INFO - 4 libxul.so!HeapCheckTracerBase::traceHeap(js::gc::AutoTraceSession&) [Verifier.cpp:3e03712c2056e28dd085b9f1c03559883b575f40 : 852 + 0x13]
[task 2020-03-31T14:35:22.821Z] 14:35:22 INFO - rbx = 0x00007f579fd1f000 rbp = 0x00007ffc9546a100
[task 2020-03-31T14:35:22.821Z] 14:35:22 INFO - rsp = 0x00007ffc9546a0c0 r12 = 0x00007ffc9546a1c0
[task 2020-03-31T14:35:22.821Z] 14:35:22 INFO - r13 = 0x00007ffc9546a110 r14 = 0x00007ffc9546a1c0
[task 2020-03-31T14:35:22.821Z] 14:35:22 INFO - r15 = 0xaaaaaaaaaaaaaaaa rip = 0x00007f57ac66238e
[task 2020-03-31T14:35:22.821Z] 14:35:22 INFO - Found by: call frame info
[task 2020-03-31T14:35:22.821Z] 14:35:22 INFO - 5 libxul.so!js::CheckGrayMarkingState(JSRuntime*) [Verifier.cpp:3e03712c2056e28dd085b9f1c03559883b575f40 : 1013 + 0x8]
[task 2020-03-31T14:35:22.821Z] 14:35:22 INFO - rbx = 0x00007f579fd1f000 rbp = 0x00007ffc9546a220
[task 2020-03-31T14:35:22.821Z] 14:35:22 INFO - rsp = 0x00007ffc9546a110 r12 = 0x00007ffc9546a1c0
[task 2020-03-31T14:35:22.821Z] 14:35:22 INFO - r13 = 0x00007ffc9546a188 r14 = 0x00007f579fd1f790
[task 2020-03-31T14:35:22.821Z] 14:35:22 INFO - r15 = 0xaaaaaaaaaaaaaaaa rip = 0x00007f57ac66318b
[task 2020-03-31T14:35:22.821Z] 14:35:22 INFO - Found by: call frame info
[task 2020-03-31T14:35:22.821Z] 14:35:22 INFO - 6 libxul.so!mozilla::CycleCollectedJSRuntime::CheckGrayBits() const [CycleCollectedJSRuntime.cpp:3e03712c2056e28dd085b9f1c03559883b575f40 : 1303 + 0x9]
[task 2020-03-31T14:35:22.822Z] 14:35:22 INFO - rbx = 0x00007f57a513f800 rbp = 0x00007ffc9546a260
[task 2020-03-31T14:35:22.822Z] 14:35:22 INFO - rsp = 0x00007ffc9546a230 r12 = 0x0000000000000000
[task 2020-03-31T14:35:22.822Z] 14:35:22 INFO - r13 = 0x0000000000000000 r14 = 0x0000000000000000
[task 2020-03-31T14:35:22.822Z] 14:35:22 INFO - r15 = 0x00007f57a5cdb7b8 rip = 0x00007f57a7d12905
[task 2020-03-31T14:35:22.822Z] 14:35:22 INFO - Found by: call frame info
[task 2020-03-31T14:35:22.822Z] 14:35:22 INFO - 7 libxul.so!nsCycleCollector::BeginCollection(ccType, nsICycleCollectorListener*) [nsCycleCollector.cpp:3e03712c2056e28dd085b9f1c03559883b575f40 : 3570 + 0x5]
[task 2020-03-31T14:35:22.822Z] 14:35:22 INFO - rbx = 0x00007f57a5cdb700 rbp = 0x00007ffc9546a2e0
[task 2020-03-31T14:35:22.822Z] 14:35:22 INFO - rsp = 0x00007ffc9546a270 r12 = 0x0000000000000000
[task 2020-03-31T14:35:22.822Z] 14:35:22 INFO - r13 = 0x0000000000000000 r14 = 0x0000000000000000
[task 2020-03-31T14:35:22.822Z] 14:35:22 INFO - r15 = 0x00007f57a5cdb7b8 rip = 0x00007f57a7d31840
[task 2020-03-31T14:35:22.822Z] 14:35:22 INFO - Found by: call frame info
[task 2020-03-31T14:35:22.822Z] 14:35:22 INFO - 8 libxul.so!nsCycleCollector::Collect(ccType, js::SliceBudget&, nsICycleCollectorListener*, bool) [nsCycleCollector.cpp:3e03712c2056e28dd085b9f1c03559883b575f40 : 3402 + 0xf]
[task 2020-03-31T14:35:22.822Z] 14:35:22 INFO - rbx = 0x00007f57a5cdb700 rbp = 0x00007ffc9546a360
[task 2020-03-31T14:35:22.822Z] 14:35:22 INFO - rsp = 0x00007ffc9546a2f0 r12 = 0x00007ffc9546a3f0
[task 2020-03-31T14:35:22.822Z] 14:35:22 INFO - r13 = 0x0000000000000001 r14 = 0x00007f57adf71228
[task 2020-03-31T14:35:22.822Z] 14:35:22 INFO - r15 = 0x0000000000000000 rip = 0x00007f57a7d31470
[task 2020-03-31T14:35:22.822Z] 14:35:22 INFO - Found by: call frame info
[task 2020-03-31T14:35:22.822Z] 14:35:22 INFO - 9 libxul.so!nsCycleCollector_collectSlice(js::SliceBudget&, bool) [nsCycleCollector.cpp:3e03712c2056e28dd085b9f1c03559883b575f40 : 3913 + 0x1b]
[task 2020-03-31T14:35:22.822Z] 14:35:22 INFO - rbx = 0x00007f57a5c99f30 rbp = 0x00007ffc9546a3b0
[task 2020-03-31T14:35:22.822Z] 14:35:22 INFO - rsp = 0x00007ffc9546a370 r12 = 0x0000000000000000
[task 2020-03-31T14:35:22.822Z] 14:35:22 INFO - r13 = 0x00000e3d1e2c9a44 r14 = 0x00007ffc9546a3f0
[task 2020-03-31T14:35:22.822Z] 14:35:22 INFO - r15 = 0x0000000000000000 rip = 0x00007f57a7d334fa
[task 2020-03-31T14:35:22.822Z] 14:35:22 INFO - Found by: call frame info
[task 2020-03-31T14:35:22.822Z] 14:35:22 INFO - 10 libxul.so!nsJSContext::RunCycleCollectorSlice(mozilla::TimeStamp) [nsJSEnvironment.cpp:3e03712c2056e28dd085b9f1c03559883b575f40 : 1594 + 0xf]
[task 2020-03-31T14:35:22.822Z] 14:35:22 INFO - rbx = 0x00007ffc9546a3d0 rbp = 0x00007ffc9546a4b0
[task 2020-03-31T14:35:22.822Z] 14:35:22 INFO - rsp = 0x00007ffc9546a3c0 r12 = 0x0000000000000000
[task 2020-03-31T14:35:22.822Z] 14:35:22 INFO - r13 = 0x00000e3d1e2c9a44 r14 = 0x0000000002faadb0
[task 2020-03-31T14:35:22.822Z] 14:35:22 INFO - r15 = 0x00007ffc9546a450 rip = 0x00007f57a90d6438
[task 2020-03-31T14:35:22.822Z] 14:35:22 INFO - Found by: call frame info
[task 2020-03-31T14:35:22.822Z] 14:35:22 INFO - 11 libxul.so!CCRunnerFired(mozilla::TimeStamp) [nsJSEnvironment.cpp:3e03712c2056e28dd085b9f1c03559883b575f40 : 1937 + 0x9]
[task 2020-03-31T14:35:22.822Z] 14:35:22 INFO - rbx = 0x00007f579ebf84c0 rbp = 0x00007ffc9546a4f0
[task 2020-03-31T14:35:22.822Z] 14:35:22 INFO - rsp = 0x00007ffc9546a4c0 r12 = 0x00007ffc9546a510
[task 2020-03-31T14:35:22.822Z] 14:35:22 INFO - r13 = 0x00000e3d1e2c9a44 r14 = 0x00007f579ebf8508
[task 2020-03-31T14:35:22.822Z] 14:35:22 INFO - r15 = 0x0000000000000120 rip = 0x00007f57a90d7a24
[task 2020-03-31T14:35:22.822Z] 14:35:22 INFO - Found by: call frame info
[task 2020-03-31T14:35:22.822Z] 14:35:22 INFO - 12 libxul.so!mozilla::IdleTaskRunner::Run() [IdleTaskRunner.cpp:3e03712c2056e28dd085b9f1c03559883b575f40 : 58 + 0x1d]
[task 2020-03-31T14:35:22.822Z] 14:35:22 INFO - rbx = 0x00007f579ebf84c0 rbp = 0x00007ffc9546a540
[task 2020-03-31T14:35:22.823Z] 14:35:22 INFO - rsp = 0x00007ffc9546a500 r12 = 0x00007ffc9546a510
[task 2020-03-31T14:35:22.823Z] 14:35:22 INFO - r13 = 0x00000e3d1e2c9a44 r14 = 0x00007f579ebf8508
[task 2020-03-31T14:35:22.823Z] 14:35:22 INFO - r15 = 0x00007f579ebf8530 rip = 0x00007f57a7dc54db
[task 2020-03-31T14:35:22.823Z] 14:35:22 INFO - Found by: call frame info
[task 2020-03-31T14:35:22.823Z] 14:35:22 INFO - 13 libxul.so!nsThread::ProcessNextEvent(bool, bool*) [nsThread.cpp:3e03712c2056e28dd085b9f1c03559883b575f40 : 1220 + 0x11]
[task 2020-03-31T14:35:22.823Z] 14:35:22 INFO - rbx = 0x00007ffc9546a580 rbp = 0x00007ffc9546aaa0
[task 2020-03-31T14:35:22.823Z] 14:35:22 INFO - rsp = 0x00007ffc9546a550 r12 = 0x00007f57a5c7f748
[task 2020-03-31T14:35:22.823Z] 14:35:22 INFO - r13 = 0x00000e3d1e2c9a44 r14 = 0x00007f57a5c7f680
[task 2020-03-31T14:35:22.823Z] 14:35:22 INFO - r15 = 0x00007ffc9546a620 rip = 0x00007f57a7de394e
[task 2020-03-31T14:35:22.823Z] 14:35:22 INFO - Found by: call frame info
[task 2020-03-31T14:35:22.823Z] 14:35:22 INFO - 14 libxul.so!NS_ProcessNextEvent(nsIThread*, bool) [nsThreadUtils.cpp:3e03712c2056e28dd085b9f1c03559883b575f40 : 481 + 0xc]
[task 2020-03-31T14:35:22.823Z] 14:35:22 INFO - rbx = 0x0000000000000000 rbp = 0x00007ffc9546aad0
[task 2020-03-31T14:35:22.823Z] 14:35:22 INFO - rsp = 0x00007ffc9546aab0 r12 = 0x0000000000000001
[task 2020-03-31T14:35:22.823Z] 14:35:22 INFO - r13 = 0x00007f57ba6a56c0 r14 = 0x00007ffc9546aab7
[task 2020-03-31T14:35:22.823Z] 14:35:22 INFO - r15 = 0x0000000000000001 rip = 0x00007f57a7de73c9
[task 2020-03-31T14:35:22.823Z] 14:35:22 INFO - Found by: call frame info
[task 2020-03-31T14:35:22.832Z] 14:35:22 INFO - 15 libxul.so!mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) [MessagePump.cpp:3e03712c2056e28dd085b9f1c03559883b575f40 : 87 + 0x7]
[task 2020-03-31T14:35:22.834Z] 14:35:22 INFO - rbx = 0x00007f57ba6a56a0 rbp = 0x00007ffc9546ab30
[task 2020-03-31T14:35:22.834Z] 14:35:22 INFO - rsp = 0x00007ffc9546aae0 r12 = 0x0000000000000001
[task 2020-03-31T14:35:22.835Z] 14:35:22 INFO - r13 = 0x00007f57ba6a56c0 r14 = 0x00007ffc9546ad28
[task 2020-03-31T14:35:22.835Z] 14:35:22 INFO - r15 = 0x0000000000000001 rip = 0x00007f57a83b95a4
[task 2020-03-31T14:35:22.836Z] 14:35:22 INFO - Found by: call frame info
[task 2020-03-31T14:35:22.836Z] 14:35:22 INFO - 16 libxul.so!MessageLoop::RunInternal() [message_loop.cc:3e03712c2056e28dd085b9f1c03559883b575f40 : 315 + 0x17]
[task 2020-03-31T14:35:22.837Z] 14:35:22 INFO - rbx = 0x00007ffc9546ad28 rbp = 0x00007ffc9546ab70
[task 2020-03-31T14:35:22.837Z] 14:35:22 INFO - rsp = 0x00007ffc9546ab40 r12 = 0x00007ffc9546c178
[task 2020-03-31T14:35:22.838Z] 14:35:22 INFO - r13 = 0x00007ffc9546ad28 r14 = 0x00007ffc9546ab80
[task 2020-03-31T14:35:22.839Z] 14:35:22 INFO - r15 = 0x0000000080004005 rip = 0x00007f57a8369293
[task 2020-03-31T14:35:22.839Z] 14:35:22 INFO - Found by: call frame info
[task 2020-03-31T14:35:22.840Z] 14:35:22 INFO - 17 libxul.so!MessageLoop::Run() [message_loop.cc:3e03712c2056e28dd085b9f1c03559883b575f40 : 290 + 0x8]
[task 2020-03-31T14:35:22.840Z] 14:35:22 INFO - rbx = 0x00007ffc9546ad28 rbp = 0x00007ffc9546abb0
[task 2020-03-31T14:35:22.841Z] 14:35:22 INFO - rsp = 0x00007ffc9546ab80 r12 = 0x00007ffc9546c178
[task 2020-03-31T14:35:22.842Z] 14:35:22 INFO - r13 = 0x00007ffc9546ad28 r14 = 0x00007ffc9546ab80
[task 2020-03-31T14:35:22.842Z] 14:35:22 INFO - r15 = 0x0000000080004005 rip = 0x00007f57a83691ed
[task 2020-03-31T14:35:22.843Z] 14:35:22 INFO - Found by: call frame info
[task 2020-03-31T14:35:22.844Z] 14:35:22 INFO - 18 libxul.so!nsBaseAppShell::Run() [nsBaseAppShell.cpp:3e03712c2056e28dd085b9f1c03559883b575f40 : 137 + 0xd]
[task 2020-03-31T14:35:22.845Z] 14:35:22 INFO - rbx = 0x00007f57a5cdc3c0 rbp = 0x00007ffc9546abd0
[task 2020-03-31T14:35:22.845Z] 14:35:22 INFO - rsp = 0x00007ffc9546abc0 r12 = 0x00007ffc9546c178
[task 2020-03-31T14:35:22.846Z] 14:35:22 INFO - r13 = 0x00007ffc9546ad28 r14 = 0x00007f57a5c7f680
[task 2020-03-31T14:35:22.846Z] 14:35:22 INFO - r15 = 0x0000000080004005 rip = 0x00007f57aaab4125
[task 2020-03-31T14:35:22.846Z] 14:35:22 INFO - Found by: call frame info
[task 2020-03-31T14:35:22.847Z] 14:35:22 INFO - 19 libxul.so!XRE_RunAppShell() [nsEmbedFunctions.cpp:3e03712c2056e28dd085b9f1c03559883b575f40 : 909 + 0xe]
[task 2020-03-31T14:35:22.847Z] 14:35:22 INFO - rbx = 0x00007ffc9546abe0 rbp = 0x00007ffc9546ac00
[task 2020-03-31T14:35:22.848Z] 14:35:22 INFO - rsp = 0x00007ffc9546abe0 r12 = 0x00007ffc9546c178
[task 2020-03-31T14:35:22.848Z] 14:35:22 INFO - r13 = 0x00007ffc9546ad28 r14 = 0x0000000000000000
[task 2020-03-31T14:35:22.848Z] 14:35:22 INFO - r15 = 0x0000000080004005 rip = 0x00007f57abc11fbc
[task 2020-03-31T14:35:22.849Z] 14:35:22 INFO - Found by: call frame info
[task 2020-03-31T14:35:22.849Z] 14:35:22 INFO - 20 libxul.so!mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*) [MessagePump.cpp:3e03712c2056e28dd085b9f1c03559883b575f40 : 237 + 0x5]
[task 2020-03-31T14:35:22.849Z] 14:35:22 INFO - rbx = 0x00007ffc9546ad28 rbp = 0x00007ffc9546ac30
[task 2020-03-31T14:35:22.849Z] 14:35:22 INFO - rsp = 0x00007ffc9546ac10 r12 = 0x00007ffc9546c178
[task 2020-03-31T14:35:22.850Z] 14:35:22 INFO - r13 = 0x00007ffc9546ad28 r14 = 0x00007f57ba6a56a0
[task 2020-03-31T14:35:22.850Z] 14:35:22 INFO - r15 = 0x0000000080004005 rip = 0x00007f57a83b9b4d
[task 2020-03-31T14:35:22.851Z] 14:35:22 INFO - Found by: call frame info
[task 2020-03-31T14:35:22.852Z] 14:35:22 INFO - 21 libxul.so!MessageLoop::RunInternal() [message_loop.cc:3e03712c2056e28dd085b9f1c03559883b575f40 : 315 + 0x17]
[task 2020-03-31T14:35:22.852Z] 14:35:22 INFO - rbx = 0x00007ffc9546ad28 rbp = 0x00007ffc9546ac70
[task 2020-03-31T14:35:22.853Z] 14:35:22 INFO - rsp = 0x00007ffc9546ac40 r12 = 0x00007ffc9546c178
[task 2020-03-31T14:35:22.853Z] 14:35:22 INFO - r13 = 0x00007ffc9546ad28 r14 = 0x00007ffc9546ac80
[task 2020-03-31T14:35:22.853Z] 14:35:22 INFO - r15 = 0x0000000080004005 rip = 0x00007f57a8369293
[task 2020-03-31T14:35:22.853Z] 14:35:22 INFO - Found by: call frame info
[task 2020-03-31T14:35:22.853Z] 14:35:22 INFO - 22 libxul.so!MessageLoop::Run() [message_loop.cc:3e03712c2056e28dd085b9f1c03559883b575f40 : 290 + 0x8]
[task 2020-03-31T14:35:22.854Z] 14:35:22 INFO - rbx = 0x00007ffc9546ad28 rbp = 0x00007ffc9546acb0
[task 2020-03-31T14:35:22.854Z] 14:35:22 INFO - rsp = 0x00007ffc9546ac80 r12 = 0x00007ffc9546c178
[task 2020-03-31T14:35:22.854Z] 14:35:22 INFO - r13 = 0x00007ffc9546ad28 r14 = 0x00007ffc9546ac80
[task 2020-03-31T14:35:22.854Z] 14:35:22 INFO - r15 = 0x0000000080004005 rip = 0x00007f57a83691ed
[task 2020-03-31T14:35:22.854Z] 14:35:22 INFO - Found by: call frame info
[task 2020-03-31T14:35:22.855Z] 14:35:22 INFO - 23 libxul.so!XRE_InitChildProcess(int, char**, XREChildData const*) [nsEmbedFunctions.cpp:3e03712c2056e28dd085b9f1c03559883b575f40 : 740 + 0x5]
[task 2020-03-31T14:35:22.855Z] 14:35:22 INFO - rbx = 0x0000000000000001 rbp = 0x00007ffc9546afc0
[task 2020-03-31T14:35:22.855Z] 14:35:22 INFO - rsp = 0x00007ffc9546acc0 r12 = 0x00007ffc9546c178
[task 2020-03-31T14:35:22.856Z] 14:35:22 INFO - r13 = 0x00007ffc9546ad28 r14 = 0x000000000000000d
[task 2020-03-31T14:35:22.856Z] 14:35:22 INFO - r15 = 0x0000000080004005 rip = 0x00007f57abc11bd3
[task 2020-03-31T14:35:22.856Z] 14:35:22 INFO - Found by: call frame info
[task 2020-03-31T14:35:22.857Z] 14:35:22 INFO - 24 firefox-bin!content_process_main(mozilla::Bootstrap*, int, char**) [plugin-container.cpp:3e03712c2056e28dd085b9f1c03559883b575f40 : 56 + 0x11]
[task 2020-03-31T14:35:22.857Z] 14:35:22 INFO - rbx = 0x000000000000000f rbp = 0x00007ffc9546b000
[task 2020-03-31T14:35:22.857Z] 14:35:22 INFO - rsp = 0x00007ffc9546afd0 r12 = 0x00007ffc9546afd0
[task 2020-03-31T14:35:22.857Z] 14:35:22 INFO - r13 = 0x00007ffc9546c170 r14 = 0x00007ffc9546c178
[task 2020-03-31T14:35:22.858Z] 14:35:22 INFO - r15 = 0x00007f57ba6026c0 rip = 0x000056032691abde
[task 2020-03-31T14:35:22.858Z] 14:35:22 INFO - Found by: call frame info
[task 2020-03-31T14:35:22.858Z] 14:35:22 INFO - 25 firefox-bin!main [nsBrowserApp.cpp:3e03712c2056e28dd085b9f1c03559883b575f40 : 303 + 0x20]
[task 2020-03-31T14:35:22.858Z] 14:35:22 INFO - rbx = 0x00007ffc9546b060 rbp = 0x00007ffc9546c090
[task 2020-03-31T14:35:22.859Z] 14:35:22 INFO - rsp = 0x00007ffc9546b010 r12 = 0x000056032691aa60
[task 2020-03-31T14:35:22.859Z] 14:35:22 INFO - r13 = 0x00007ffc9546c170 r14 = 0x00005603269de5b8
[task 2020-03-31T14:35:22.859Z] 14:35:22 INFO - r15 = 0x00000e375edd722a rip = 0x000056032691af80
[task 2020-03-31T14:35:22.859Z] 14:35:22 INFO - Found by: call frame info
[task 2020-03-31T14:35:22.859Z] 14:35:22 INFO - 26 libc.so.6 + 0x21b97
[task 2020-03-31T14:35:22.860Z] 14:35:22 INFO - rbx = 0x0000000000000000 rbp = 0x00005603269aef80
[task 2020-03-31T14:35:22.860Z] 14:35:22 INFO - rsp = 0x00007ffc9546c0a0 r12 = 0x000056032691aa60
[task 2020-03-31T14:35:22.860Z] 14:35:22 INFO - r13 = 0x00007ffc9546c170 r14 = 0x0000000000000000
[task 2020-03-31T14:35:22.860Z] 14:35:22 INFO - r15 = 0x0000000000000000 rip = 0x00007f57ba8a1b97
[task 2020-03-31T14:35:22.860Z] 14:35:22 INFO - Found by: call frame info
[task 2020-03-31T14:35:22.861Z] 14:35:22 INFO - 27 firefox-bin!<name omitted> [UniquePtr.h:3e03712c2056e28dd085b9f1c03559883b575f40 : 253 + 0x17]
[task 2020-03-31T14:35:22.861Z] 14:35:22 INFO - rsp = 0x00007ffc9546c0c0 rip = 0x000056032691ac21
[task 2020-03-31T14:35:22.861Z] 14:35:22 INFO - Found by: stack scanning

Whiteboard: [domsecurity-intermittent]

This is because I forgot BigInts can be nursery allocated when writing CheckZoneTracer.

Assignee: nobody → jcoppeard
Component: DOM: Security → XPCOM
Priority: P5 → P1

Previously CheckZoneTracer didn't take account of the fact that BigInts can be nursery allocated.

Summary: Intermittent PID 1963 | Assertion failure: !js::gc::IsInsideNursery(thing.asCell()), at /builds/worker/workspace/obj-build/dist/include/js/HeapAPI.h:574 → Intermittent Assertion failure: !js::gc::IsInsideNursery(thing.asCell()), at /builds/worker/workspace/obj-build/dist/include/js/HeapAPI.h:574
Pushed by jcoppeard@mozilla.com: https://hg.mozilla.org/integration/autoland/rev/964f475cc66e Add an API to get the zone of a possibly-nursery allocated GC thing and use it in CheckZoneTracer r=sfink,mccr8

https://hg.mozilla.org/mozilla-central/rev/964f475cc66e

Status: NEW → RESOLVED
Closed: 5 years ago
status-firefox77: --- → fixed
Resolution: --- → FIXED
Target Milestone: --- → mozilla77
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: