1646372 - Intermittent xpcshell <anything> | application crashed [@ Allocator<MozJemallocBase>::free]

Reporter

Description

•

5 years ago

treeherder

Filed by: ncsoregi [at] mozilla.com
Parsed log: https://treeherder.mozilla.org/logviewer.html#?job_id=306641318&repo=mozilla-central
Full log: https://firefox-ci-tc.services.mozilla.com/api/queue/v1/task/LTRqHjTiRCeYUyl4p1wA5Q/runs/0/artifacts/public/logs/live_backing.log

[task 2020-06-17T13:35:26.568Z] 13:35:26 [task 2020-06-17T13:35:26.568Z] 13:35:26 [task 2020-06-17T13:35:26.568Z] 13:35:26 [task 2020-06-17T13:35:26.568Z] 13:35:26 [task 2020-06-17T13:35:26.569Z] 13:35:26 [task 2020-06-17T13:35:26.569Z] 13:35:26 [task 2020-06-17T13:35:26.569Z] 13:35:26 [task 2020-06-17T13:35:26.570Z] 13:35:26 [task 2020-06-17T13:35:26.570Z] 13:35:26 [task 2020-06-17T13:35:26.570Z] 13:35:26 [task 2020-06-17T13:35:26.571Z] 13:35:26 [task 2020-06-17T13:35:26.571Z] 13:35:26 [task 2020-06-17T13:35:26.571Z] 13:35:26 [task 2020-06-17T13:35:26.571Z] 13:35:26 [task 2020-06-17T13:35:26.571Z] 13:35:26 [task 2020-06-17T13:35:26.572Z] 13:35:26 [task 2020-06-17T13:35:26.572Z] 13:35:26 [task 2020-06-17T13:35:26.572Z] 13:35:26 [task 2020-06-17T13:35:26.572Z] 13:35:26 [task 2020-06-17T13:35:26.572Z] 13:35:26 [task 2020-06-17T13:35:26.573Z] 13:35:26 [task 2020-06-17T13:35:26.573Z] 13:35:26 [task 2020-06-17T13:35:26.573Z] 13:35:26 [task 2020-06-17T13:35:26.573Z] 13:35:26 [task 2020-06-17T13:35:26.573Z] 13:35:26 [task 2020-06-17T13:35:26.573Z] 13:35:26 [task 2020-06-17T13:35:26.574Z] 13:35:26 [task 2020-06-17T13:35:26.574Z] 13:35:26 [task 2020-06-17T13:35:26.574Z] 13:35:26 [task 2020-06-17T13:35:26.574Z] 13:35:26 [task 2020-06-17T13:35:26.574Z] 13:35:26 [task 2020-06-17T13:35:26.575Z] 13:35:26 [task 2020-06-17T13:35:26.575Z] 13:35:26 [task 2020-06-17T13:35:26.575Z] 13:35:26 [task 2020-06-17T13:35:26.575Z] 13:35:26 [task 2020-06-17T13:35:26.575Z] 13:35:26 [task 2020-06-17T13:35:26.575Z] 13:35:26 [task 2020-06-17T13:35:26.576Z] 13:35:26 [task 2020-06-17T13:35:26.576Z] 13:35:26 [task 2020-06-17T13:35:26.576Z] 13:35:26 [task 2020-06-17T13:35:26.576Z] 13:35:26 [task 2020-06-17T13:35:26.576Z] 13:35:26 [task 2020-06-17T13:35:26.577Z] 13:35:26 [task 2020-06-17T13:35:26.577Z] 13:35:26 [task 2020-06-17T13:35:26.577Z] 13:35:26 [task 2020-06-17T13:35:26.577Z] 13:35:26 [task 2020-06-17T13:35:26.577Z] 13:35:26 [task 2020-06-17T13:35:26.577Z] 13:35:26 [task 2020-06-17T13:35:26.578Z] 13:35:26 [task 2020-06-17T13:35:26.578Z] 13:35:26 [task 2020-06-17T13:35:26.578Z] 13:35:26 [task 2020-06-17T13:35:26.578Z] 13:35:26 [task 2020-06-17T13:35:26.578Z] 13:35:26 [task 2020-06-17T13:35:26.578Z] 13:35:26 [task 2020-06-17T13:35:26.579Z] 13:35:26 [task 2020-06-17T13:35:26.579Z] 13:35:26 [task 2020-06-17T13:35:26.579Z] 13:35:26 [task 2020-06-17T13:35:26.579Z] 13:35:26 [task 2020-06-17T13:35:26.579Z] 13:35:26 [task 2020-06-17T13:35:26.580Z] 13:35:26 [task 2020-06-17T13:35:26.580Z] 13:35:26 [task 2020-06-17T13:35:26.580Z] 13:35:26 [task 2020-06-17T13:35:26.580Z] 13:35:26 [task 2020-06-17T13:35:26.580Z] 13:35:26 [task 2020-06-17T13:35:26.580Z] 13:35:26 [task 2020-06-17T13:35:26.580Z] 13:35:26 [task 2020-06-17T13:35:26.581Z] 13:35:26 [task 2020-06-17T13:35:26.581Z] 13:35:26 [task 2020-06-17T13:35:26.581Z] 13:35:26 [task 2020-06-17T13:35:26.582Z] 13:35:26 [task 2020-06-17T13:35:26.582Z] 13:35:26 [task 2020-06-17T13:35:26.582Z] 13:35:26 [task 2020-06-17T13:35:26.582Z] 13:35:26 [task 2020-06-17T13:35:26.582Z] 13:35:26 [task 2020-06-17T13:35:26.583Z] 13:35:26 [task 2020-06-17T13:35:26.583Z] 13:35:26 [task 2020-06-17T13:35:26.583Z] 13:35:26 [task 2020-06-17T13:35:26.583Z] 13:35:26 [task 2020-06-17T13:35:26.584Z] 13:35:26 [task 2020-06-17T13:35:26.584Z] 13:35:26 [task 2020-06-17T13:35:26.584Z] 13:35:26 [task 2020-06-17T13:35:26.585Z] 13:35:26 [task 2020-06-17T13:35:26.585Z] 13:35:26 [task 2020-06-17T13:35:26.585Z] 13:35:26 [task 2020-06-17T13:35:26.586Z] 13:35:26 [task 2020-06-17T13:35:26.586Z] 13:35:26 [task 2020-06-17T13:35:26.586Z] 13:35:26 [task 2020-06-17T13:35:26.586Z] 13:35:26 [task 2020-06-17T13:35:26.587Z] 13:35:26 [task 2020-06-17T13:35:26.587Z] 13:35:26 [task 2020-06-17T13:35:26.587Z] 13:35:26 [task 2020-06-17T13:35:26.587Z] 13:35:26 [task 2020-06-17T13:35:26.588Z] 13:35:26 [task 2020-06-17T13:35:26.588Z] 13:35:26 [task 2020-06-17T13:35:26.588Z] 13:35:26 [task 2020-06-17T13:35:26.588Z] 13:35:26 [task 2020-06-17T13:35:26.588Z] 13:35:26 [task 2020-06-17T13:35:26.589Z] 13:35:26 [task 2020-06-17T13:35:26.589Z] 13:35:26 [task 2020-06-17T13:35:26.589Z] 13:35:26 [task 2020-06-17T13:35:26.590Z] 13:35:26 [task 2020-06-17T13:35:26.590Z] 13:35:26 [task 2020-06-17T13:35:26.590Z] 13:35:26 [task 2020-06-17T13:35:26.591Z] 13:35:26 [task 2020-06-17T13:35:26.591Z] 13:35:26 [task 2020-06-17T13:35:26.591Z] 13:35:26 [task 2020-06-17T13:35:26.591Z] 13:35:26 [task 2020-06-17T13:35:26.592Z] 13:35:26 [task 2020-06-17T13:35:26.592Z] 13:35:26 [task 2020-06-17T13:35:26.592Z] 13:35:26 [task 2020-06-17T13:35:26.593Z] 13:35:26 [task 2020-06-17T13:35:26.593Z] 13:35:26 [task 2020-06-17T13:35:26.593Z] 13:35:26 [task 2020-06-17T13:35:26.593Z] 13:35:26 [task 2020-06-17T13:35:26.594Z] 13:35:26 [task 2020-06-17T13:35:26.594Z] 13:35:26 [task 2020-06-17T13:35:26.594Z] 13:35:26 [task 2020-06-17T13:35:26.595Z] 13:35:26 [task 2020-06-17T13:35:26.595Z] 13:35:26 WARNING - PROCESS-CRASH | browser/extensions/formautofill/test/unit/heuristics/test_basic.js | application crashed [@ Allocator<MozJemallocBase>::free(void*)]
INFO - Crash dump filename: /tmp/xpc-other-NCUJS_/449b7a97-96d9-2da7-2974-6d7fd01acf2f.dmp
INFO - Operating system: Linux
INFO - 0.0.0 Linux 4.4.0-1014-aws #14taskcluster1-Ubuntu SMP Tue Apr 3 10:27:00 UTC 2018 x86_64
INFO - CPU: amd64
INFO - family 23 model 1 stepping 2
INFO - 4 CPUs
INFO - GPU: UNKNOWN
INFO - Crash reason: SIGSEGV /SEGV_MAPERR
INFO - Crash address: 0x7f0a00000000
INFO - Process uptime: not available
INFO - Thread 36 (crashed)
INFO - 0 xpcshell!Allocator<MozJemallocBase>::free(void*) [malloc_decls.h:3155ffead6aefd99f4cef141b19163b881c0e288 : 54 + 0x9d]
INFO - rax = 0x0000000000000001 rdx = 0x00007f0b0a61f000
INFO - rcx = 0x0000000000000003 rbx = 0x00007f0a00000002
INFO - rsi = 0x0000000000000000 rdi = 0x00007f0a00000002
INFO - rbp = 0x00007f0afd8fd2b0 rsp = 0x00007f0afd8fd280
INFO - r8 = 0x0000000000000000 r9 = 0x0000000000000001
INFO - r10 = 0x0000000000000008 r11 = 0x0000000000000202
INFO - r12 = 0x0000000000000002 r13 = 0x0000000000001105
INFO - r14 = 0x00007f0a00000000 r15 = 0x00007f0afc2107c0
INFO - rip = 0x00005630b9c6b5ad
INFO - Found by: given as instruction pointer in context
INFO - 1 xpcshell!replace_free [PHC.cpp:3155ffead6aefd99f4cef141b19163b881c0e288 : 1312 + 0x1e2]
INFO - rbx = 0x00007f0a00000002 rbp = 0x00007f0afd8fd390
INFO - rsp = 0x00007f0afd8fd2c0 r12 = 0x00007f0b0014dc00
INFO - r13 = 0x0000000000001105 r14 = 0x00007f0afd8fd450
INFO - r15 = 0x00007f0afc2107c0 rip = 0x00005630b9c71842
INFO - Found by: call frame info
INFO - 2 xpcshell!free [malloc_decls.h:3155ffead6aefd99f4cef141b19163b881c0e288 : 54 + 0x30]
INFO - rbx = 0x00007f0b0014dce8 rbp = 0x00007f0afd8fd3b0
INFO - rsp = 0x00007f0afd8fd3a0 r12 = 0x00007f0b0014dc00
INFO - r13 = 0x0000000000001105 r14 = 0x00007f0afd8fd450
INFO - r15 = 0x00007f0afc2107c0 rip = 0x00005630b9c5b260
INFO - Found by: call frame info
INFO - 3 libxul.so!base::FreeEnvVarsArray::operator()(char**) [process_util_posix.cc:3155ffead6aefd99f4cef141b19163b881c0e288 : 270 + 0x5]
INFO - rbx = 0x00007f0b0014dce8 rbp = 0x00007f0afd8fd3d0
INFO - rsp = 0x00007f0afd8fd3c0 r12 = 0x00007f0b0014dc00
INFO - r13 = 0x0000000000001105 r14 = 0x00007f0afd8fd450
INFO - r15 = 0x00007f0afc2107c0 rip = 0x00007f0b19c8c9e1
INFO - Found by: call frame info
INFO - 4 libxul.so!base::LaunchApp(std::vector<std::string, std::allocator<std::string> > const&, base::LaunchOptions const&, int*) [process_util_linux.cc:3155ffead6aefd99f4cef141b19163b881c0e288 : 225 + 0x22]
INFO - rbx = 0x0000000000000001 rbp = 0x00007f0afd8fd4c0
INFO - rsp = 0x00007f0afd8fd3e0 r12 = 0x00007f0b02402370
INFO - r13 = 0x0000000000001105 r14 = 0x00007f0afd8fd450
INFO - r15 = 0x00007f0afc2107c0 rip = 0x00007f0b19c87e67
INFO - Found by: call frame info
INFO - 5 libxul.so!mozilla::ipc::PosixProcessLauncher::DoLaunch() [GeckoChildProcessHost.cpp:3155ffead6aefd99f4cef141b19163b881c0e288 : 1270 + 0x5]
INFO - rbx = 0x00007f0b024022c8 rbp = 0x00007f0afd8fd510
INFO - rsp = 0x00007f0afd8fd4d0 r12 = 0x00007f0afd8fd520
INFO - r13 = 0x00007f0b00106f80 r14 = 0x00007f0afd8fd570
INFO - r15 = 0x00007f0afd8fd5b0 rip = 0x00007f0b19cd9696
INFO - Found by: call frame info
INFO - 6 libxul.so!mozilla::ipc::BaseProcessLauncher::PerformAsyncLaunch() [GeckoChildProcessHost.cpp:3155ffead6aefd99f4cef141b19163b881c0e288 : 1017 + 0xe]
INFO - rbx = 0x00007f0b024022c8 rbp = 0x00007f0afd8fd560
INFO - rsp = 0x00007f0afd8fd520 r12 = 0x00007f0b024022c0
INFO - r13 = 0x00007f0b00106f80 r14 = 0x00007f0afd8fd570
INFO - r15 = 0x00007f0afd8fd5b0 rip = 0x00007f0b19cdda01
INFO - Found by: call frame info
INFO - 7 libxul.so!mozilla::detail::ProxyRunnable<mozilla::MozPromise<mozilla::ipc::LaunchResults, mozilla::ipc::LaunchError, false>, RefPtr<mozilla::MozPromise<mozilla::ipc::LaunchResults, mozilla::ipc::LaunchError, false> > (mozilla::ipc::BaseProcessLauncher::)(), mozilla::ipc::BaseProcessLauncher>::Run() [MozPromise.h:3155ffead6aefd99f4cef141b19163b881c0e288 : 1457 + 0x2b]
INFO - rbx = 0x00007f0b00106f80 rbp = 0x00007f0afd8fd590
INFO - rsp = 0x00007f0afd8fd570 r12 = 0x00007f0b0012b030
INFO - r13 = 0x00007f0b00106f80 r14 = 0x00007f0afd8fd5a0
INFO - r15 = 0x00007f0afd8fd5b0 rip = 0x00007f0b19cdeb5f
INFO - Found by: call frame info
INFO - 8 libxul.so!mozilla::TaskQueue::Runner::Run() [TaskQueue.cpp:3155ffead6aefd99f4cef141b19163b881c0e288 : 214 + 0xa]
INFO - rbx = 0x00007f0b00127af0 rbp = 0x00007f0afd8fd620
INFO - rsp = 0x00007f0afd8fd5a0 r12 = 0x00007f0b0012b030
INFO - r13 = 0x00007f0b00106f80 r14 = 0x00007f0afd8fd5a0
INFO - r15 = 0x00007f0afd8fd5b0 rip = 0x00007f0b1949b6a9
INFO - Found by: call frame info
INFO - 9 libxul.so!nsThread::ProcessNextEvent(bool, bool) [nsThread.cpp:3155ffead6aefd99f4cef141b19163b881c0e288 : 1234 + 0x6]
INFO - rbx = 0x00007f0b00afd5f0 rbp = 0x00007f0afd8fdb80
INFO - rsp = 0x00007f0afd8fd630 r12 = 0x00007f0afd8fdba7
INFO - r13 = 0x0000000000000000 r14 = 0x00002816202e4f1e
INFO - r15 = 0x0000000000000000 rip = 0x00007f0b1949fdd2
INFO - Found by: call frame info
INFO - 10 libxul.so!NS_ProcessNextEvent(nsIThread*, bool) [nsThreadUtils.cpp:3155ffead6aefd99f4cef141b19163b881c0e288 : 501 + 0xe]
INFO - rbx = 0x00007f0afd8fdc50 rbp = 0x00007f0afd8fdbb0
INFO - rsp = 0x00007f0afd8fdb90 r12 = 0x00007f0b0245d2c0
INFO - r13 = 0x00007f0b00afd5f0 r14 = 0x00007f0b0245d2e0
INFO - r15 = 0x0000000000000000 rip = 0x00007f0b194871d3
INFO - Found by: call frame info
INFO - 11 libxul.so!mozilla::ipc::MessagePumpForNonMainThreads::Run(base::MessagePump::Delegate*) [MessagePump.cpp:3155ffead6aefd99f4cef141b19163b881c0e288 : 302 + 0xa]
INFO - rbx = 0x00007f0afd8fdc50 rbp = 0x00007f0afd8fdbf0
INFO - rsp = 0x00007f0afd8fdbc0 r12 = 0x00007f0b0245d2c0
INFO - r13 = 0x00007f0b00afd5f0 r14 = 0x00007f0b0245d2e0
INFO - r15 = 0x0000000000000000 rip = 0x00007f0b19ce7a74
INFO - Found by: call frame info
INFO - 12 libxul.so!MessageLoop::Run() [message_loop.cc:3155ffead6aefd99f4cef141b19163b881c0e288 : 290 + 0x5]
INFO - rbx = 0x00007f0b00afd5f0 rbp = 0x00007f0afd8fdc20
INFO - rsp = 0x00007f0afd8fdc00 r12 = 0x00007f0afd8fdc40
INFO - r13 = 0x00007f0b28c71bc0 r14 = 0x00007f0afd8fdc50
INFO - r15 = 0x00007f0afd8fe920 rip = 0x00007f0b19c8b4aa
INFO - Found by: call frame info
INFO - 13 libxul.so!nsThread::ThreadFunc(void*) [nsThread.cpp:3155ffead6aefd99f4cef141b19163b881c0e288 : 447 + 0x8]
INFO - rbx = 0x00007f0b00afd5f0 rbp = 0x00007f0afd8fde20
INFO - rsp = 0x00007f0afd8fdc30 r12 = 0x00007f0afd8fdc40
INFO - r13 = 0x00007f0b28c71bc0 r14 = 0x00007f0afd8fdc50
INFO - r15 = 0x00007f0afd8fe920 rip = 0x00007f0b1949f21f
INFO - Found by: call frame info
INFO - 14 libnspr4.so!_pt_root [ptthread.c:3155ffead6aefd99f4cef141b19163b881c0e288 : 201 + 0x7]
INFO - rbx = 0x00007f0b0247f700 rbp = 0x00007f0afd8fde70
INFO - rsp = 0x00007f0afd8fde30 r12 = 0x0000000000000000
INFO - r13 = 0x00000000000010da r14 = 0x00007f0afd8ff700
INFO - r15 = 0x00007f0afd8fe920 rip = 0x00007f0b2c2fab2e
INFO - Found by: call frame info
INFO - 15 libpthread.so.0!start_thread [pthread_create.c : 463 + 0xd]
INFO - rbx = 0x0000000000000000 rbp = 0x0000000000000000
INFO - rsp = 0x00007f0afd8fde80 r12 = 0x00007f0afd8fdf40
INFO - r13 = 0x0000000000000000 r14 = 0x00007f0b0247f700
INFO - r15 = 0x00007ffcefd35ab0 rip = 0x00007f0b2bf0c6db
INFO - Found by: call frame info
INFO - 16 libc.so.6!clone + 0x3f
INFO - rbx = 0x00007f0afd8ff700 rbp = 0x0000000000000000
INFO - rsp = 0x00007f0afd8fdf40 r12 = 0x00007f0afd8fdf40
INFO - r13 = 0x0000000000000000 r14 = 0x00007f0b0247f700
INFO - r15 = 0x00007ffcefd35ab0 rip = 0x00007f0b124bf88f
INFO - Found by: call frame info

Comment hidden (Intermittent Failures Robot)

Nicolas B. Pierron [:nbp]

Updated

•

5 years ago

Component: JavaScript Engine → Memory Allocator

Nicolas B. Pierron [:nbp]

Comment 3

•

5 years ago

This sounds like a problem between the allocator and code coverage, based on the builds where this error appeared.
Marco, do you know who might be the person to investigate the interesection of gcov and the allocator?

Flags: needinfo?(mcastelluccio)

BugBot [:suhaib / :marco/ :calixte]

Updated

•

5 years ago

Crash Signature: [@ Allocator<MozJemallocBase>::free(void*)] → [@ Allocator<MozJemallocBase>::free(void*)] [@ arena_t::DallocSmall(arena_chunk_t*, void*, arena_chunk_map_t*)]

Comment hidden (Intermittent Failures Robot)

Marco Castelluccio [:marco]

Comment 21

•

4 years ago

This hasn't been happening anymore for a while now.

Crash Signature: [@ Allocator<MozJemallocBase>::free(void*)] [@ arena_t::DallocSmall(arena_chunk_t*, void*, arena_chunk_map_t*)] → [@ Allocator<MozJemallocBase>::free(void*)] [@ arena_t::DallocSmall(arena_chunk_t*, void*, arena_chunk_map_t*)]

Flags: needinfo?(mcastelluccio)

Comment hidden (Intermittent Failures Robot)

BMO Automation

Updated

•

3 years ago

Severity: normal → S3

BMO Automation

Updated

•

2 years ago

Crash Signature: [@ Allocator<MozJemallocBase>::free(void*)] [@ arena_t::DallocSmall(arena_chunk_t*, void*, arena_chunk_map_t*)] → [@ Allocator<MozJemallocBase>::free] [@ arena_t::DallocSmall]

Summary: Intermittent xpcshell <anything> | application crashed [@ Allocator<MozJemallocBase>::free(void*)] → Intermittent xpcshell <anything> | application crashed [@ Allocator<MozJemallocBase>::free]

BugBot [:suhaib / :marco/ :calixte]

Comment 26

•

11 months ago

https://wiki.mozilla.org/Bug_Triage#Intermittent_Test_Failure_Cleanup
For more information, please visit BugBot documentation.

Status: NEW → RESOLVED

Closed: 11 months ago

Resolution: --- → INCOMPLETE