Closed Bug 1673186 Opened 4 years ago Closed 3 years ago

Perma [tier2] sessionrestore_no_auto_restore | application crashed [@ nsPipeInputStream::ReadSegments(nsresult (*)(nsIInputStream*, void*, char const*, unsigned int, unsigned int, unsigned int*), void*, unsigned int, unsigned int*)]

Categories

(Core :: XPCOM, defect)

defect
Not set
normal

Tracking

()

RESOLVED DUPLICATE of bug 1579683

People

(Reporter: intermittent-bug-filer, Unassigned)

References

Details

(Keywords: crash, intermittent-failure, regression, Whiteboard: [retriggered])

Crash Data

Filed by: ccoroiu [at] mozilla.com
Parsed log: https://treeherder.mozilla.org/logviewer.html#?job_id=319636649&repo=mozilla-central
Full log: https://firefox-ci-tc.services.mozilla.com/api/queue/v1/task/Hb4SJ8VQRGyUWAkxjY0wRw/runs/0/artifacts/public/logs/live_backing.log


[task 2020-10-24T11:34:15.306Z] 11:34:15     INFO -  PROCESS-CRASH | sessionrestore_no_auto_restore | application crashed [@ nsPipeInputStream::ReadSegments(nsresult (*)(nsIInputStream*, void*, char const*, unsigned int, unsigned int, unsigned int*), void*, unsigned int, unsigned int*)]
[task 2020-10-24T11:34:15.307Z] 11:34:15     INFO -  Crash dump filename: /var/folders/n9/mhs7cqb55kj5l3xk5vmfvhcc000017/T/tmpoSwpDy/profile/minidumps/7AF79B62-D604-48A8-843F-F1FD652A349B.dmp
[task 2020-10-24T11:34:15.307Z] 11:34:15     INFO -  Mozilla crash reason: MOZ_DIAGNOSTIC_ASSERT(!mReadState.mActiveRead)
[task 2020-10-24T11:34:15.307Z] 11:34:15     INFO -  Operating system: Mac OS X
[task 2020-10-24T11:34:15.307Z] 11:34:15     INFO -                    10.14.5 18F132
[task 2020-10-24T11:34:15.307Z] 11:34:15     INFO -  CPU: amd64
[task 2020-10-24T11:34:15.307Z] 11:34:15     INFO -       family 6 model 69 stepping 1
[task 2020-10-24T11:34:15.307Z] 11:34:15     INFO -       4 CPUs
[task 2020-10-24T11:34:15.307Z] 11:34:15     INFO -  GPU: UNKNOWN
[task 2020-10-24T11:34:15.307Z] 11:34:15     INFO -  Crash reason:  EXC_BAD_ACCESS / KERN_INVALID_ADDRESS
[task 2020-10-24T11:34:15.307Z] 11:34:15     INFO -  Crash address: 0x0
[task 2020-10-24T11:34:15.307Z] 11:34:15     INFO -  Process uptime: 1 seconds
[task 2020-10-24T11:34:15.308Z] 11:34:15     INFO -  Thread 0 (crashed)
[task 2020-10-24T11:34:15.308Z] 11:34:15     INFO -   0  XUL!nsPipeInputStream::ReadSegments(nsresult (*)(nsIInputStream*, void*, char const*, unsigned int, unsigned int, unsigned int*), void*, unsigned int, unsigned int*) [nsPipe3.cpp:78130fed97b782e51d3da1ce1395a2bdb2d83db4 : 1314 + 0x11]
[task 2020-10-24T11:34:15.308Z] 11:34:15     INFO -      rax = 0x000000010da1dc39   rdx = 0x00007ffeeb78ea90
[task 2020-10-24T11:34:15.308Z] 11:34:15     INFO -      rcx = 0x0000000104786290   rbx = 0x0000000116c925e0
[task 2020-10-24T11:34:15.308Z] 11:34:15     INFO -      rsi = 0x0000000106937a80   rdi = 0x0000000116c925e0
[task 2020-10-24T11:34:15.308Z] 11:34:15     INFO -      rbp = 0x00007ffeeb78ea80   rsp = 0x00007ffeeb78e9f0
[task 2020-10-24T11:34:15.308Z] 11:34:15     INFO -       r8 = 0x00007ffeeb78eaa4    r9 = 0x0000000000000000
[task 2020-10-24T11:34:15.308Z] 11:34:15     INFO -      r10 = 0x0000000100000000   r11 = 0x0000000000000000
[task 2020-10-24T11:34:15.308Z] 11:34:15     INFO -      r12 = 0x0000000000008000   r13 = 0x0000000116ca8190
[task 2020-10-24T11:34:15.309Z] 11:34:15     INFO -      r14 = 0x0000000104951138   r15 = 0x0000000000000000
[task 2020-10-24T11:34:15.309Z] 11:34:15     INFO -      rip = 0x000000010687a3d4
[task 2020-10-24T11:34:15.309Z] 11:34:15     INFO -      Found by: given as instruction pointer in context
[task 2020-10-24T11:34:15.309Z] 11:34:15     INFO -   1  XUL!nsInputStreamPump::PeekStream(void (*)(void*, unsigned char const*, unsigned int), void*) [nsInputStreamPump.cpp:78130fed97b782e51d3da1ce1395a2bdb2d83db4 : 104 + 0xd]
[task 2020-10-24T11:34:15.309Z] 11:34:15     INFO -      rbp = 0x00007ffeeb78eae0   rsp = 0x00007ffeeb78ea90
[task 2020-10-24T11:34:15.309Z] 11:34:15     INFO -      rip = 0x00000001069378ea
[task 2020-10-24T11:34:15.309Z] 11:34:15     INFO -      Found by: previous frame's frame pointer
[task 2020-10-24T11:34:15.310Z] 11:34:15     INFO -   2  XUL!nsBaseChannel::OnStartRequest(nsIRequest*) [nsBaseChannel.cpp:78130fed97b782e51d3da1ce1395a2bdb2d83db4 : 826 + 0x17]
[task 2020-10-24T11:34:15.310Z] 11:34:15     INFO -      rbp = 0x00007ffeeb78eb70   rsp = 0x00007ffeeb78eaf0
[task 2020-10-24T11:34:15.310Z] 11:34:15     INFO -      rip = 0x000000010692851f
[task 2020-10-24T11:34:15.310Z] 11:34:15     INFO -      Found by: previous frame's frame pointer
[task 2020-10-24T11:34:15.310Z] 11:34:15     INFO -   3  XUL!nsInputStreamPump::OnInputStreamReady(nsIAsyncInputStream*) [nsInputStreamPump.cpp:78130fed97b782e51d3da1ce1395a2bdb2d83db4 : 390 + 0xaa]
[task 2020-10-24T11:34:15.310Z] 11:34:15     INFO -      rbp = 0x00007ffeeb78ebe0   rsp = 0x00007ffeeb78eb80
[task 2020-10-24T11:34:15.310Z] 11:34:15     INFO -      rip = 0x000000010693859d
[task 2020-10-24T11:34:15.310Z] 11:34:15     INFO -      Found by: previous frame's frame pointer
[task 2020-10-24T11:34:15.311Z] 11:34:15     INFO -   4  XUL!nsInputStreamReadyEvent::Run() [nsStreamUtils.cpp:78130fed97b782e51d3da1ce1395a2bdb2d83db4 : 94 + 0x6]
[task 2020-10-24T11:34:15.311Z] 11:34:15     INFO -      rbp = 0x00007ffeeb78ec00   rsp = 0x00007ffeeb78ebf0
[task 2020-10-24T11:34:15.311Z] 11:34:15     INFO -      rip = 0x000000010687f611
[task 2020-10-24T11:34:15.311Z] 11:34:15     INFO -      Found by: previous frame's frame pointer
[task 2020-10-24T11:34:15.311Z] 11:34:15     INFO -   5  XUL!mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&) [TaskController.cpp:78130fed97b782e51d3da1ce1395a2bdb2d83db4 : 515 + 0xc3]
[task 2020-10-24T11:34:15.311Z] 11:34:15     INFO -      rbp = 0x00007ffeeb78f100   rsp = 0x00007ffeeb78ec10
[task 2020-10-24T11:34:15.311Z] 11:34:15     INFO -      rip = 0x000000010689cb94
[task 2020-10-24T11:34:15.311Z] 11:34:15     INFO -      Found by: previous frame's frame pointer
[task 2020-10-24T11:34:15.312Z] 11:34:15     INFO -   6  XUL!mozilla::detail::RunnableFunction<mozilla::TaskController::InitializeInternal()::$_4>::Run() [nsThreadUtils.h:78130fed97b782e51d3da1ce1395a2bdb2d83db4 : 577 + 0x21]
[task 2020-10-24T11:34:15.312Z] 11:34:15     INFO -      rbp = 0x00007ffeeb78f140   rsp = 0x00007ffeeb78f110
[task 2020-10-24T11:34:15.312Z] 11:34:15     INFO -      rip = 0x00000001068a0f6c
[task 2020-10-24T11:34:15.312Z] 11:34:15     INFO -      Found by: previous frame's frame pointer
[task 2020-10-24T11:34:15.312Z] 11:34:15     INFO -   7  XUL!nsThread::ProcessNextEvent(bool, bool*) [nsThread.cpp:78130fed97b782e51d3da1ce1395a2bdb2d83db4 : 1197 + 0x10]
[task 2020-10-24T11:34:15.312Z] 11:34:15     INFO -      rbp = 0x00007ffeeb78f280   rsp = 0x00007ffeeb78f150
[task 2020-10-24T11:34:15.312Z] 11:34:15     INFO -      rip = 0x00000001068abe4b
[task 2020-10-24T11:34:15.312Z] 11:34:15     INFO -      Found by: previous frame's frame pointer
[task 2020-10-24T11:34:15.313Z] 11:34:15     INFO -   8  XUL!mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) [MessagePump.cpp:78130fed97b782e51d3da1ce1395a2bdb2d83db4 : 87 + 0x27]
[task 2020-10-24T11:34:15.313Z] 11:34:15     INFO -      rbp = 0x00007ffeeb78f2e0   rsp = 0x00007ffeeb78f290
[task 2020-10-24T11:34:15.313Z] 11:34:15     INFO -      rip = 0x0000000106ac998e
[task 2020-10-24T11:34:15.313Z] 11:34:15     INFO -      Found by: previous frame's frame pointer
[task 2020-10-24T11:34:15.313Z] 11:34:15     INFO -   9  XUL!MessageLoop::Run() [message_loop.cc:78130fed97b782e51d3da1ce1395a2bdb2d83db4 : 309 + 0xc]
[task 2020-10-24T11:34:15.313Z] 11:34:15     INFO -      rbp = 0x00007ffeeb78f320   rsp = 0x00007ffeeb78f2f0
[task 2020-10-24T11:34:15.313Z] 11:34:15     INFO -      rip = 0x0000000106a97760
[task 2020-10-24T11:34:15.313Z] 11:34:15     INFO -      Found by: previous frame's frame pointer
[task 2020-10-24T11:34:15.314Z] 11:34:15     INFO -  10  XUL!nsBaseAppShell::Run() [nsBaseAppShell.cpp:78130fed97b782e51d3da1ce1395a2bdb2d83db4 : 137 + 0xd]
[task 2020-10-24T11:34:15.314Z] 11:34:15     INFO -      rbp = 0x00007ffeeb78f340   rsp = 0x00007ffeeb78f330
[task 2020-10-24T11:34:15.314Z] 11:34:15     INFO -      rip = 0x000000010746fb69
[task 2020-10-24T11:34:15.314Z] 11:34:15     INFO -      Found by: previous frame's frame pointer
[task 2020-10-24T11:34:15.314Z] 11:34:15     INFO -  11  XUL!nsAppShell::Run() [nsAppShell.mm:78130fed97b782e51d3da1ce1395a2bdb2d83db4 : 694 + 0x8]
[task 2020-10-24T11:34:15.314Z] 11:34:15     INFO -      rbp = 0x00007ffeeb78f370   rsp = 0x00007ffeeb78f350
[task 2020-10-24T11:34:15.314Z] 11:34:15     INFO -      rip = 0x000000010748f420
[task 2020-10-24T11:34:15.314Z] 11:34:15     INFO -      Found by: previous frame's frame pointer
[task 2020-10-24T11:34:15.314Z] 11:34:15     INFO -  12  XUL!XRE_RunAppShell() [nsEmbedFunctions.cpp:78130fed97b782e51d3da1ce1395a2bdb2d83db4 : 913 + 0x6]
[task 2020-10-24T11:34:15.315Z] 11:34:15     INFO -      rbp = 0x00007ffeeb78f3a0   rsp = 0x00007ffeeb78f380
[task 2020-10-24T11:34:15.315Z] 11:34:15     INFO -      rip = 0x00000001079611b1
[task 2020-10-24T11:34:15.315Z] 11:34:15     INFO -      Found by: previous frame's frame pointer
[task 2020-10-24T11:34:15.315Z] 11:34:15     INFO -  13  XUL!MessageLoop::Run() [message_loop.cc:78130fed97b782e51d3da1ce1395a2bdb2d83db4 : 309 + 0xc]
[task 2020-10-24T11:34:15.315Z] 11:34:15     INFO -      rbp = 0x00007ffeeb78f3e0   rsp = 0x00007ffeeb78f3b0
[task 2020-10-24T11:34:15.315Z] 11:34:15     INFO -      rip = 0x0000000106a97760
[task 2020-10-24T11:34:15.315Z] 11:34:15     INFO -      Found by: previous frame's frame pointer
[task 2020-10-24T11:34:15.315Z] 11:34:15     INFO -  14  XUL!XRE_InitChildProcess(int, char**, XREChildData const*) [nsEmbedFunctions.cpp:78130fed97b782e51d3da1ce1395a2bdb2d83db4 : 744 + 0x5]
[task 2020-10-24T11:34:15.316Z] 11:34:15     INFO -      rbp = 0x00007ffeeb78f6e0   rsp = 0x00007ffeeb78f3f0
[task 2020-10-24T11:34:15.316Z] 11:34:15     INFO -      rip = 0x0000000107960d4f
[task 2020-10-24T11:34:15.316Z] 11:34:15     INFO -      Found by: previous frame's frame pointer
[task 2020-10-24T11:34:15.316Z] 11:34:15     INFO -  15  plugin-container!main [MozillaRuntimeMain.cpp:78130fed97b782e51d3da1ce1395a2bdb2d83db4 : 70 + 0x28]
[task 2020-10-24T11:34:15.316Z] 11:34:15     INFO -      rbp = 0x00007ffeeb78f720   rsp = 0x00007ffeeb78f6f0
[task 2020-10-24T11:34:15.316Z] 11:34:15     INFO -      rip = 0x000000010446ff24
[task 2020-10-24T11:34:15.316Z] 11:34:15     INFO -      Found by: previous frame's frame pointer
[task 2020-10-24T11:34:15.316Z] 11:34:15     INFO -  16  libdyld.dylib!start + 0x1
[task 2020-10-24T11:34:15.316Z] 11:34:15     INFO -      rbp = 0x00007ffeeb78f730   rsp = 0x00007ffeeb78f730
[task 2020-10-24T11:34:15.316Z] 11:34:15     INFO -      rip = 0x00007fff7a5113d5
[task 2020-10-24T11:34:15.316Z] 11:34:15     INFO -      Found by: previous frame's frame pointer```
Summary: Intermittent sessionrestore_no_auto_restore | application crashed [@ nsPipeInputStream::ReadSegments(nsresult (*)(nsIInputStream*, void*, char const*, unsigned int, unsigned int, unsigned int*), void*, unsigned int, unsigned int*)] → Perma [tier2] sessionrestore_no_auto_restore | application crashed [@ nsPipeInputStream::ReadSegments(nsresult (*)(nsIInputStream*, void*, char const*, unsigned int, unsigned int, unsigned int*), void*, unsigned int, unsigned int*)]

It's unlikely caused by bug 1673056 which just removed two alias variables in layout/. Is it possible to do more retriggers on the pushes before mine?

Flags: needinfo?(aethanyc)

(In reply to Ting-Yu Lin [:TYLin] (UTC-7) from comment #4)

It's unlikely caused by bug 1673056 which just removed two alias variables in layout/. Is it possible to do more retriggers on the pushes before mine?

Yes, on try, on autoland the builds that run this job are broken. We'll take care of it.

No longer regressed by: 1673056

Maybe related to bug 1668592...

Looks like we're failing this diagnostic assertion... valentin, do you know how that could be?

Flags: needinfo?(mconley) → needinfo?(valentin.gosu)

I don't know that code very well, but looking at it there didn't seem to be anything obviously wrong with it.
I did a pernosco push, but unfortunately pernosco doesn't run for non-debug builds 🙁
I also did a try push with some printfs to see if there are any unmatched accesses to mActiveRead - again there didn't seem to be anything wrong (but maybe I missed something?)
My best guess would be memory corruption.

Flags: needinfo?(valentin.gosu)

WARNING: At least one completion condition is taking too long to complete. Conditions: [{"name":"AboutHomeStartupCache: Writing cache","state":"Getting cache streams","filename":"resource:///modules/BrowserGlue.jsm","lineNumber":5213,"stack":["resource:///modules/BrowserGlue.jsm:init:5213","resource:///modules/BrowserGlue.jsm:BG__beforeUIStartup:1419","resource:///modules/BrowserGlue.jsm:BG_observe:1042"]}] Barrier: quit-application-granted

Regressed by: 1672517
Has Regression Range: --- → yes
Keywords: regression

It looks like this test causes us to recreate the shutdown crash we're seeing in crash stats for bug 1673716 (look for the warning in comment 12 in the test logs), so perhaps they're related.

See Also: → 1673716
Crash Signature: [@ nsPipeInputStream::ReadSegments(nsresult (*)(nsIInputStream*, void*, char const*, unsigned int, unsigned int, unsigned int*), void*, unsigned int, unsigned int*)] → [@ nsPipeInputStream::ReadSegments(nsresult (*)(nsIInputStream*, void*, char const*, unsigned int, unsigned int, unsigned int*), void*, unsigned int, unsigned int*)] [@ nsPipeInputStream::ReadSegments]
See Also: 1668592
Status: NEW → RESOLVED
Crash Signature: [@ nsPipeInputStream::ReadSegments(nsresult (*)(nsIInputStream*, void*, char const*, unsigned int, unsigned int, unsigned int*), void*, unsigned int, unsigned int*)] [@ nsPipeInputStream::ReadSegments] → [@ nsPipeInputStream::ReadSegments(nsresult (*)(nsIInputStream*, void*, char const*, unsigned int, unsigned int, unsigned int*), void*, unsigned int, unsigned int*)] [@ nsPipeInputStream::ReadSegments]
Closed: 3 years ago
Resolution: --- → DUPLICATE
No longer regressed by: 1672517
See Also: 1674061, 1673716
You need to log in before you can comment on or make changes to this bug.