Closed Bug 1660163 Opened 4 years ago Closed 1 year ago

AddressSanitizer:DEADLYSIGNAL (diagnostic assertion failure in MozPromise)

Categories

(Core :: XPCOM, defect)

Product:
Core
Component:
XPCOM
Type:
defect

Tracking

()

Status:
RESOLVED INCOMPLETE

People

(Reporter: jasonxiale, Unassigned)

References

(Blocks 1 open bug)

Details

User Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.135 Safari/537.36

Steps to reproduce:

firefox nightly version: 81.0a1 (2020-08-18) (64-bit)
OS: "Ubuntu 18.04.5 LTS"
I run nightly using command "firefox --private-window", after some time, it shows a crash log

Actual results:

./firefox --private-window

###!!! [Parent][RunMessage] Error: Channel closing: too late to send/recv, messages will be lost

###!!! [Parent][RunMessage] Error: Channel closing: too late to send/recv, messages will be lost

###!!! [Parent][RunMessage] Error: Channel closing: too late to send/recv, messages will be lost

Assertion failure: Request::mDisconnected, at /builds/worker/workspace/obj-build/dist/include/mozilla/MozPromise.h:447
Assertion failure: Request::mDisconnected, at /builds/worker/workspace/obj-build/dist/include/mozilla/MozPromise.h:447
#01: ???[/home/jason/Tools/firefox/firefox/libxul.so +0x80dc96b]
#01: ???[/home/jason/Tools/firefox/firefox/libxul.so +0x80dc96b]
#02: ???[/home/jason/Tools/firefox/firefox/libxul.so +0x5f511fd]
#02: ???[/home/jason/Tools/firefox/firefox/libxul.so +0x5f511fd]
#03: ???[/home/jason/Tools/firefox/firefox/libxul.so +0x6236cc5]
#04: ???[/home/jason/Tools/firefox/firefox/libxul.so +0x80dbe38]
#03: ???[/home/jason/Tools/firefox/firefox/libxul.so +0x6236cc5]
#05: ???[/home/jason/Tools/firefox/firefox/libxul.so +0x80e3a3d]
#04: ???[/home/jason/Tools/firefox/firefox/libxul.so +0x80dbe38]
#06: ???[/home/jason/Tools/firefox/firefox/libxul.so +0x801a51e]
#05: ???[/home/jason/Tools/firefox/firefox/libxul.so +0x80e3a3d]
#07: ???[/home/jason/Tools/firefox/firefox/libxul.so +0x8032653]
#06: ???[/home/jason/Tools/firefox/firefox/libxul.so +0x801a51e]
#08: ???[/home/jason/Tools/firefox/firefox/libxul.so +0x8033fee]
#07: ???[/home/jason/Tools/firefox/firefox/libxul.so +0x8032653]
#09: ???[/home/jason/Tools/firefox/firefox/libxul.so +0x803065d]
#08: ???[/home/jason/Tools/firefox/firefox/libxul.so +0x8033fee]
#10: ???[/home/jason/Tools/firefox/firefox/libxul.so +0x5d575de]
#09: ???[/home/jason/Tools/firefox/firefox/libxul.so +0x803065d]
#11: ???[/home/jason/Tools/firefox/firefox/libxul.so +0x5d3a2a9]
#10: ???[/home/jason/Tools/firefox/firefox/libxul.so +0x5d575de]
#12: ???[/home/jason/Tools/firefox/firefox/libxul.so +0x5d3b265]
#11: ???[/home/jason/Tools/firefox/firefox/libxul.so +0x5d3a2a9]
#13: ???[/home/jason/Tools/firefox/firefox/libxul.so +0x5d3bd1c]
#12: ???[/home/jason/Tools/firefox/firefox/libxul.so +0x5d3b265]
#14: ???[/home/jason/Tools/firefox/firefox/libxul.so +0x5d3600b]
#13: ???[/home/jason/Tools/firefox/firefox/libxul.so +0x5d3bd1c]
#14: ???[/home/jason/Tools/firefox/firefox/libxul.so +0x5d3600b]
#15: ???[/home/jason/Tools/firefox/firefox/libxul.so +0x13be5620]
#15: ???[/home/jason/Tools/firefox/firefox/libxul.so +0x13be5620]
#16: ???[/home/jason/Tools/firefox/firefox/libxul.so +0x13be66bd]
#16: ???[/home/jason/Tools/firefox/firefox/libxul.so +0x13be66bd]
#17: ???[/home/jason/Tools/firefox/firefox/libxul.so +0x13be932e]
#17: ???[/home/jason/Tools/firefox/firefox/libxul.so +0x13be932e]
#18: ???[/home/jason/Tools/firefox/firefox/libxul.so +0x13bf21b9]
#18: ???[/home/jason/Tools/firefox/firefox/libxul.so +0x13bf21b9]
#19: ???[/home/jason/Tools/firefox/firefox/libxul.so +0x5d7722a]
#19: ???[/home/jason/Tools/firefox/firefox/libxul.so +0x5d7722a]
#20: ???[/home/jason/Tools/firefox/firefox/libxul.so +0x5d78cc4]
#20: ???[/home/jason/Tools/firefox/firefox/libxul.so +0x5d78cc4]
#21: ???[/home/jason/Tools/firefox/firefox/libxul.so +0x5d78442]
#21: ???[/home/jason/Tools/firefox/firefox/libxul.so +0x5d78442]
#22: ???[/home/jason/Tools/firefox/firefox/libxul.so +0x5d77d36]
#22: ???[/home/jason/Tools/firefox/firefox/libxul.so +0x5d77d36]
#23: ???[/home/jason/Tools/firefox/firefox/libxul.so +0x5d7a069]
#23: ???[/home/jason/Tools/firefox/firefox/libxul.so +0x5d7a069]
#24: ???[/home/jason/Tools/firefox/firefox/libxul.so +0x5d7d7ab]
#24: ???[/home/jason/Tools/firefox/firefox/libxul.so +0x5d7d7ab]
#25: ???[/home/jason/Tools/firefox/firefox/libxul.so +0x5fabf1b]
#25: ???[/home/jason/Tools/firefox/firefox/libxul.so +0x5fabf1b]
#26: ???[/home/jason/Tools/firefox/firefox/libxul.so +0x128c213d]
#26: ???[/home/jason/Tools/firefox/firefox/libxul.so +0x128c213d]
#27: ???[/home/jason/Tools/firefox/firefox/libxul.so +0x71ef7e6]
#27: ???[/home/jason/Tools/firefox/firefox/libxul.so +0x71ef7e6]
#28: ???[/home/jason/Tools/firefox/firefox/libxul.so +0x128c2d08]
#28: ???[/home/jason/Tools/firefox/firefox/libxul.so +0x128c2d08]
#29: ???[/home/jason/Tools/firefox/firefox/firefox-bin +0x15acc7]
#29: ???[/home/jason/Tools/firefox/firefox/firefox-bin +0x15acc7]
#30: __libc_start_main[/lib/x86_64-linux-gnu/libc.so.6 +0x21b97]
#31: ???[/home/jason/Tools/firefox/firefox/firefox-bin +0xaf029]
#30: __libc_start_main[/lib/x86_64-linux-gnu/libc.so.6 +0x21b97]
#32: ??? (???:???)
#31: ???[/home/jason/Tools/firefox/firefox/firefox-bin +0xaf029]
#32: ??? (???:???)
AddressSanitizer:DEADLYSIGNAL
AddressSanitizer:DEADLYSIGNAL

Expected results:

no crash

This crash output shows no symbols, so it's hard to know what caused it. Can you symbolicate it?

(Note for triage: I suspect this doesn't need to be security sensitive - bug 1655509 and various other bugs are not, either - but it's hard to know for sure without more stack details.)

Group: firefox-core-security → core-security
Component: Untriaged → XPCOM
Flags: needinfo?(jasonxiale)
Product: Firefox → Core
Summary: AddressSanitizer:DEADLYSIGNAL → AddressSanitizer:DEADLYSIGNAL (diagnostic assertion failure in MozPromise)
Version: other → unspecified

I ran another similar issue and symbolicate the crash using "./llvm-symbolizer -e=firefox-bin < addr.txt "
and I got the result as follow
??:0:0
_fini

...

??:0:0
_fini
??:0:0
content_process_main
/builds/worker/checkouts/gecko/browser/app/../../ipc/contentproc/plugin-container.cpp:56:28
main
/builds/worker/checkouts/gecko/browser/app/nsBrowserApp.cpp:303:18
??
??:0:0
_start
??:0:0
"

Flags: needinfo?(jasonxiale)
Group: core-security

There doesn't appear to be anything actionable about this report right now. If this is still happening, could you re-open with a symbolicated stack and needinfo me to take another look?

Status: UNCONFIRMED → RESOLVED
Closed: 1 year ago
Resolution: --- → INCOMPLETE
You need to log in before you can comment on or make changes to this bug.