1699491 - Intermittent SUMMARY: AddressSanitizer: heap-use-after-free /builds/worker/checkouts/gecko/js/src/gc/Marking.cpp:1373 in js::GCMarker::eagerlyMarkChildren

Status: RESOLVED DUPLICATE of bug 1699334

(Core :: JavaScript: GC, defect, P5)

Description

[Treeherder Bug Filer]

Filed by: nbeleuzu [at] mozilla.com
Parsed log: https://treeherder.mozilla.org/logviewer?job_id=333652840&repo=autoland
Full log: https://firefox-ci-tc.services.mozilla.com/api/queue/v1/task/C31kmO8tQTuJ2eos9LRP3A/runs/0/artifacts/public/logs/live_backing.log

---

[task 2021-03-18T15:41:41.516Z] 15:41:41     INFO - TEST-START | dom/tests/mochitest/ajax/prototype/test_Prototype.html
[task 2021-03-18T15:41:43.112Z] 15:41:43     INFO - GECKO(4152) | JavaScript warning: http://mochi.test:8888/tests/dom/tests/mochitest/ajax/prototype/test/lib/unittest.js, line 129: unreachable code after return statement
[task 2021-03-18T15:41:43.278Z] 15:41:43     INFO - GECKO(4152) | JavaScript warning: http://mochi.test:8888/tests/dom/tests/mochitest/ajax/prototype/test/lib/unittest.js, line 129: unreachable code after return statement
[task 2021-03-18T15:41:43.550Z] 15:41:43     INFO - GECKO(4152) | JavaScript warning: http://mochi.test:8888/tests/dom/tests/mochitest/ajax/prototype/test/lib/unittest.js, line 129: unreachable code after return statement
[task 2021-03-18T15:41:43.689Z] 15:41:43     INFO - GECKO(4152) | JavaScript warning: http://mochi.test:8888/tests/dom/tests/mochitest/ajax/prototype/test/lib/unittest.js, line 129: unreachable code after return statement
[task 2021-03-18T15:41:43.875Z] 15:41:43     INFO - GECKO(4152) | JavaScript warning: http://mochi.test:8888/tests/dom/tests/mochitest/ajax/prototype/test/lib/unittest.js, line 129: unreachable code after return statement
[task 2021-03-18T15:41:44.015Z] 15:41:44     INFO - GECKO(4152) | JavaScript warning: http://mochi.test:8888/tests/dom/tests/mochitest/ajax/prototype/test/lib/unittest.js, line 129: unreachable code after return statement
[task 2021-03-18T15:41:45.365Z] 15:41:45     INFO - GECKO(4152) | JavaScript warning: http://mochi.test:8888/tests/dom/tests/mochitest/ajax/prototype/test/lib/unittest.js, line 129: unreachable code after return statement
[task 2021-03-18T15:41:45.768Z] 15:41:45     INFO - GECKO(4152) | JavaScript warning: http://mochi.test:8888/tests/dom/tests/mochitest/ajax/prototype/test/lib/unittest.js, line 129: unreachable code after return statement
[task 2021-03-18T15:41:47.112Z] 15:41:47     INFO - GECKO(4152) | JavaScript warning: http://mochi.test:8888/tests/dom/tests/mochitest/ajax/prototype/test/lib/unittest.js, line 129: unreachable code after return statement
[task 2021-03-18T15:41:47.355Z] 15:41:47     INFO - GECKO(4152) | JavaScript warning: http://mochi.test:8888/tests/dom/tests/mochitest/ajax/prototype/test/lib/unittest.js, line 129: unreachable code after return statement
[task 2021-03-18T15:41:47.666Z] 15:41:47     INFO - GECKO(4152) | JavaScript warning: http://mochi.test:8888/tests/dom/tests/mochitest/ajax/prototype/test/lib/unittest.js, line 129: unreachable code after return statement
[task 2021-03-18T15:41:48.032Z] 15:41:48     INFO - GECKO(4152) | JavaScript warning: http://mochi.test:8888/tests/dom/tests/mochitest/ajax/prototype/test/lib/unittest.js, line 129: unreachable code after return statement
[task 2021-03-18T15:41:52.357Z] 15:41:52     INFO - GECKO(4152) | JavaScript warning: http://mochi.test:8888/tests/dom/tests/mochitest/ajax/prototype/test/lib/unittest.js, line 129: unreachable code after return statement
[task 2021-03-18T15:41:52.644Z] 15:41:52     INFO - GECKO(4152) | JavaScript warning: http://mochi.test:8888/tests/dom/tests/mochitest/ajax/prototype/test/lib/unittest.js, line 129: unreachable code after return statement
[task 2021-03-18T15:41:52.866Z] 15:41:52     INFO - GECKO(4152) | JavaScript warning: http://mochi.test:8888/tests/dom/tests/mochitest/ajax/prototype/test/lib/unittest.js, line 129: unreachable code after return statement
[task 2021-03-18T15:41:53.089Z] 15:41:53     INFO - GECKO(4152) | JavaScript warning: http://mochi.test:8888/tests/dom/tests/mochitest/ajax/prototype/test/lib/unittest.js, line 129: unreachable code after return statement
[task 2021-03-18T15:41:53.392Z] 15:41:53     INFO - GECKO(4152) | JavaScript warning: http://mochi.test:8888/tests/dom/tests/mochitest/ajax/prototype/test/lib/unittest.js, line 129: unreachable code after return statement
[task 2021-03-18T15:41:53.776Z] 15:41:53     INFO - GECKO(4152) | JavaScript warning: http://mochi.test:8888/tests/dom/tests/mochitest/ajax/prototype/test/lib/unittest.js, line 129: unreachable code after return statement
[task 2021-03-18T15:41:53.835Z] 15:41:53     INFO - GECKO(4152) | =================================================================
[task 2021-03-18T15:41:53.835Z] 15:41:53    ERROR - GECKO(4152) | ==8008==ERROR: AddressSanitizer: heap-use-after-free on address 0x12936be00000 at pc 0x7ff91c70811c bp 0x00fbd7debb10 sp 0x00fbd7debb58
[task 2021-03-18T15:41:53.835Z] 15:41:53     INFO - GECKO(4152) | READ of size 8 at 0x12936be00000 thread T0
[task 2021-03-18T15:41:53.855Z] 15:41:53     INFO - GECKO(4152) | ==8008==WARNING: Failed to use and restart external symbolizer!
[task 2021-03-18T15:41:54.356Z] 15:41:54     INFO - GECKO(4152) |     #0 0x7ff91c70811b in js::GCMarker::eagerlyMarkChildren /builds/worker/checkouts/gecko/js/src/gc/Marking.cpp:1373
[task 2021-03-18T15:41:54.357Z] 15:41:54     INFO - GECKO(4152) |     #1 0x7ff91c6d777a in js::GCMarker::traceBarrieredCell /builds/worker/checkouts/gecko/js/src/gc/Marking.cpp:4187
[task 2021-03-18T15:41:54.357Z] 15:41:54     INFO - GECKO(4152) |     #2 0x7ff91c6c761a in js::GCMarker::traceBarrieredCells /builds/worker/checkouts/gecko/js/src/gc/Marking.cpp:4172
[task 2021-03-18T15:41:54.357Z] 15:41:54     INFO - GECKO(4152) |     #3 0x7ff91c6c202f in js::gc::BarrierTracer::performBarrier /builds/worker/checkouts/gecko/js/src/gc/Marking.cpp:4151
[task 2021-03-18T15:41:54.358Z] 15:41:54     INFO - GECKO(4152) |     #4 0x7ff91c283a65 in JSRope::flattenInternal<JSRope::WithIncrementalBarrier,unsigned char> /builds/worker/checkouts/gecko/js/src/vm/StringType.cpp:765
[task 2021-03-18T15:41:54.358Z] 15:41:54     INFO - GECKO(4152) |     #5 0x7ff91c2304de in JSRope::flatten /builds/worker/checkouts/gecko/js/src/vm/StringType.cpp:858
[task 2021-03-18T15:41:54.368Z] 15:41:54     INFO - GECKO(4152) |     #6 0x7ff91df7a29b in ExecuteRegExp /builds/worker/checkouts/gecko/js/src/builtin/RegExp.cpp:1068
[task 2021-03-18T15:41:54.368Z] 15:41:54     INFO - GECKO(4152) |     #7 0x7ff91df78495 in RegExpMatcherImpl /builds/worker/checkouts/gecko/js/src/builtin/RegExp.cpp:1130
[task 2021-03-18T15:41:54.368Z] 15:41:54     INFO - GECKO(4152) |     #8 0x7ff91df789e8 in js::RegExpMatcherRaw /builds/worker/checkouts/gecko/js/src/builtin/RegExp.cpp:1185
[task 2021-03-18T15:41:54.387Z] 15:41:54     INFO - GECKO(4152) |     #9 0x185d0f052de  (<unknown module>)
[task 2021-03-18T15:41:54.387Z] 15:41:54     INFO - GECKO(4152) | 0x12936be00000 is located 7680 bytes inside of 16384-byte region [0x12936bdfe200,0x12936be02200)```

Comment 1

[Ryan VanderMeulen [:RyanVM]]

I'm guessing this is a dupe of another recently-filed bug.

Comment 2

[Andrew McCreight [:mccr8]]

Looks like bug 1699334.