1632830 - libFuzzer triggers assertion when exiting in debug builds

Status: RESOLVED FIXED

(Firefox Build System :: General, defect)

Description

[Christian Holler (:decoder)]

In debug builds, libFuzzer triggers the following assertion in debug builds when it exits:

Assertion failure: isEmpty() (failing this assertion means this LinkedList's creator is buggy: it should have removed all this list's elements before the list's destruction), at dist/include/mozilla/LinkedList.h:440

This is because libFuzzer uses exit() for leaving it's main runtime loop rather than returning, causing our ScopedXPCOM instance to not be teared down properly. We can fix this however by allocating it on the heap and properly tearing it down in an atexit handler.

Comment 1

[Christian Holler (:decoder)]

Attachment: Bug 1632830 - Properly shutdown ScopedXPCOM instance with libFuzzer. r?truber

Comment 2

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/f3c8de49902a
Properly shutdown ScopedXPCOM instance with libFuzzer. r=truber

Comment 3

[Stefan Hindli [:stefan_hindli]]

https://hg.mozilla.org/mozilla-central/rev/f3c8de49902a