Open Bug 1702620 Opened 4 years ago Updated 1 year ago

Hang dumping coverage in fuzzing-ccov builds

Categories

(Testing :: Code Coverage, defect, P3)

Default
defect

Tracking

(Not tracked)

People

(Reporter: tsmith, Unassigned)

References

(Blocks 2 open bugs)

Details

Attachments

(5 files)

We are also seeing this hang frequently. It seems to happen when triggering a coverage dump. This is the stack that we see when we send SIGABRT to the seemingly hung process. I'm not sure if it is related to bug 1541224 or not.

==12901==ERROR: UndefinedBehaviorSanitizer: ABRT on unknown address 0x03e8000005e2 (pc 0x7fce10fda6a7 bp 0x000000000000 sp 0x7ffc1f7446a0 T12901)
    #0 0x7fce10fda6a7 in fcntl64 /build/glibc-eX1tMB/glibc-2.31/io/../sysdeps/unix/sysv/linux/fcntl64.c:49:12
    #1 0x7fce1142d25e in fcntl_compat /build/glibc-eX1tMB/glibc-2.31/nptl/../sysdeps/unix/pt-fcntl.c:40:10
    #2 0x557fb6ec6160 in lprofLockFd (/home/worker/builds/try-20210401165851-ccov-fuzzing-opt/firefox-bin+0x162160)
    #3 0x557fb6ec4dcf in llvm_gcda_start_file (/home/worker/builds/try-20210401165851-ccov-fuzzing-opt/firefox-bin+0x160dcf)
    #4 0x557fb6dc000a in __llvm_gcov_writeout (/home/worker/builds/try-20210401165851-ccov-fuzzing-opt/firefox-bin+0x5c00a)
    #5 0x7fcdfd55e504 in __gcov_dump (/home/worker/builds/try-20210401165851-ccov-fuzzing-opt/libxul.so+0x172a3504)
    #6 0x7fcdf47acd7c in mozilla::CodeCoverageHandler::FlushCounters(bool) src/tools/code-coverage/CodeCoverageHandler.cpp:52:3
    #7 0x7fce1142e3bf  (/lib/x86_64-linux-gnu/libpthread.so.0+0x153bf)
    #8 0x7fce10fdeafe in poll /build/glibc-eX1tMB/glibc-2.31/io/../sysdeps/unix/sysv/linux/poll.c:29:10
    #9 0x7fcdf2dda473 in PollWrapper(_GPollFD*, unsigned int, int) src/widget/gtk/nsAppShell.cpp:59:14
    #10 0x7fce0af5736d  (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x5236d)
    #11 0x7fce0af574a2 in g_main_context_iteration (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x524a2)
    #12 0x7fcdf2dda6bf in nsAppShell::ProcessNextNativeEvent(bool) src/widget/gtk/nsAppShell.cpp:248:14
    #13 0x7fcdf2d0c8e7 in DoProcessNextNativeEvent src/widget/nsBaseAppShell.cpp:120:17
    #14 0x7fcdf2d0c8e7 in nsBaseAppShell::OnProcessNextEvent(nsIThreadInternal*, bool) src/widget/nsBaseAppShell.cpp:259:10
    #15 0x7fcdf2d0cb1c in non-virtual thunk to nsBaseAppShell::OnProcessNextEvent(nsIThreadInternal*, bool) src/widget/nsBaseAppShell.cpp
    #16 0x7fcdecdf9735 in nsThread::ProcessNextEvent(bool, bool*) src/xpcom/threads/nsThread.cpp:1071:10
    #17 0x7fcdece00d5c in NS_ProcessNextEvent(nsIThread*, bool) src/xpcom/threads/nsThreadUtils.cpp:548:10
    #18 0x7fcdeda6989c in mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) src/ipc/glue/MessagePump.cpp:109:5
    #19 0x7fcded9ae09f in RunInternal src/ipc/chromium/src/base/message_loop.cc:335:10
    #20 0x7fcded9ae09f in RunHandler src/ipc/chromium/src/base/message_loop.cc:328:3
    #21 0x7fcded9ae09f in MessageLoop::Run() src/ipc/chromium/src/base/message_loop.cc:310:3
    #22 0x7fcdf2d0c4c0 in nsBaseAppShell::Run() src/widget/nsBaseAppShell.cpp:137:27
    #23 0x7fcdf4d6ab8f in XRE_RunAppShell() src/toolkit/xre/nsEmbedFunctions.cpp:902:20
    #24 0x7fcdeda6a7ac in mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*) src/ipc/glue/MessagePump.cpp:237:9
    #25 0x7fcded9ae09f in RunInternal src/ipc/chromium/src/base/message_loop.cc:335:10
    #26 0x7fcded9ae09f in RunHandler src/ipc/chromium/src/base/message_loop.cc:328:3
    #27 0x7fcded9ae09f in MessageLoop::Run() src/ipc/chromium/src/base/message_loop.cc:310:3
    #28 0x7fcdf4d69bf2 in XRE_InitChildProcess(int, char**, XREChildData const*) src/toolkit/xre/nsEmbedFunctions.cpp:734:34
    #29 0x557fb6dbe9b3 in content_process_main src/browser/app/../../ipc/contentproc/plugin-container.cpp:57:28
    #30 0x557fb6dbe9b3 in main src/browser/app/nsBrowserApp.cpp:309:18
    #31 0x7fce10ef00b2 in __libc_start_main /build/glibc-eX1tMB/glibc-2.31/csu/../csu/libc-start.c:308:16
    #32 0x557fb6d9b7d7 in _start (/home/worker/builds/try-20210401165851-ccov-fuzzing-opt/firefox-bin+0x377d7)

It isn't related to bug 1541224, tbh I'd really prefer having a correlation.
The lprofLockFd is defined here:
https://github.com/llvm/llvm-project/blob/0f7e3a55463d2ed9abc60c6fd0126bcb19fc6d69/compiler-rt/lib/profile/InstrProfilingUtil.c#L125
and it's called from:
https://github.com/llvm/llvm-project/blob/da98177cda168468160912272213c695c03682d9/compiler-rt/lib/profile/GCDAProfiling.c#L342

On firefox side we're using cross process mutex to avoid this kind of problem... I'm quite doubtful...

I missed that it's a forced crash so it likely means that we're blocking to lock the file but it should be impossible... I miss something.

Can you check if any process is getting shut down around the time you trigger a coverage dump?

And can you forcibly crash the other processes too and get a stack trace for them too?

(In reply to Marco Castelluccio [:marco] from comment #3)

Can you check if any process is getting shut down around the time you trigger a coverage dump?

Well the browser is not technically hung but the dumping appears to be. Currently we wait and assume that if the browser does not close the gcno file after 15s something has gone wrong.

And can you forcibly crash the other processes too and get a stack trace for them too?

Not without a lot of hacking.

(In reply to Tyson Smith [:tsmith] from comment #5)

Not without a lot of hacking.

Hmm well maybe code wise it won't too bad but to get the a test run it'll be a pain.

To reproduce this locally:

GCOV_PREFIX_STRIP=3 GCOV_PREFIX=/path/to/build/ python3 -m grizzly ~/path/to/build/firefox no-op --coverage 

This will run the no-op adapter that just opens and then closes.

To install grizzly:

pip install grizzly-framework

I added more debugging output locally and sent SIGABRT to all procs.

Sending SIGUSR1 to 12423 (child)
Sending SIGUSR1 to 12472 (child)
Sending SIGUSR1 to 12475 (child)
Sending SIGUSR1 to 12540 (child)
Sending SIGUSR1 to 12599 (child)
Sending SIGUSR1 to 12399 (parent)
gcda file open by pid 12399 after 15.04s
child psutil.Process(pid=12423, name='Socket Process', status='sleeping', started='12:56:36')
child psutil.Process(pid=12472, name='file:// Content', status='zombie', started='12:56:39')
child psutil.Process(pid=12475, name='WebExtensions', status='sleeping', started='12:56:39')
child psutil.Process(pid=12540, name='Web Content', status='sleeping', started='12:56:41')
child psutil.Process(pid=12599, name='Web Content', status='sleeping', started='12:56:43')
parent psutil.Process(pid=12399, name='firefox-bin', status='sleeping', started='12:56:35')
Sending SIGABRT to each process...
Attached file log.12399.txt
Attached file log.12475.txt
Attached file log.12540.txt
Attached file log.12423.txt
Attached file log.12599.txt
See Also: → 1710483
Blocks: 1720345
Severity: -- → S3
Priority: -- → P3

This hang is still happening frequently while fuzzing with ccov builds. Here are a couple of recent stack traces.

#0 0x7faf655ae5cb in __lll_lock_wait_private /build/glibc-SzIz7B/glibc-2.31/nptl/./lowlevellock.c:35:7
#1 0x7faf655b432a in malloc /build/glibc-SzIz7B/glibc-2.31/malloc/malloc.c:3064:3
#2 0x7faf6559bd03 in _IO_file_doallocate /build/glibc-SzIz7B/glibc-2.31/libio/filedoalloc.c:101:7
#3 0x7faf655abecf in _IO_doallocbuf /build/glibc-SzIz7B/glibc-2.31/libio/genops.c:347:9
#4 0x7faf655a8994 in _IO_file_seekoff /build/glibc-SzIz7B/glibc-2.31/libio/fileops.c:938:7
#5 0x7faf655a537c in fseek /build/glibc-SzIz7B/glibc-2.31/libio/fseek.c:36:12
#6 0x55eda6a917bb in llvm_gcda_start_file crtstuff.c
#7 0x55eda697d0da in __llvm_gcov_writeout nsBrowserApp.cpp
#8 0x7faf50e8fca4 in __gcov_dump crtstuff.c
#9 0x7faf47845fed in mozilla::CodeCoverageHandler::FlushCounters(bool) /builds/worker/checkouts/gecko/tools/code-coverage/CodeCoverageHandler.cpp:53:3
#10 0x7faf6555d08f  (/lib/x86_64-linux-gnu/libc.so.6+0x4308f) (BuildId: 1878e6b475720c7c51969e69ab2d276fae6d1dee)
#11 0x7faf655b1083 in _int_free /build/glibc-SzIz7B/glibc-2.31/malloc/malloc.c:4302:7
#12 0x7faf3e94f389 in mozilla::JSHolderMap::RemoveEntry(mozilla::SegmentedVector<mozilla::JSHolderMap::Entry, 256ul, InfallibleAllocPolicy>&, mozilla::JSHolderMap::Entry*) /builds/worker/checkouts/gecko/xpcom/base/CycleCollectedJSRuntime.cpp:554:16
#13 0x7faf3e94f0b4 in mozilla::JSHolderMap::EntryVectorIter::Settle() /builds/worker/checkouts/gecko/xpcom/base/CycleCollectedJSRuntime.cpp:501:38
#14 0x7faf3e956bc2 in Next /builds/worker/workspace/obj-build/dist/include/mozilla/CycleCollectedJSRuntime.h:164:5
#15 0x7faf3e956bc2 in Next /builds/worker/workspace/obj-build/dist/include/mozilla/CycleCollectedJSRuntime.h:191:11
#16 0x7faf3e956bc2 in mozilla::CycleCollectedJSRuntime::TraceJSHolders(JSTracer*, mozilla::JSHolderMap::Iter&, js::SliceBudget&) /builds/worker/checkouts/gecko/xpcom/base/CycleCollectedJSRuntime.cpp:1486:11
#17 0x7faf3e9563c8 in mozilla::CycleCollectedJSRuntime::TraceNativeGrayRoots(JSTracer*, mozilla::JSHolderMap::WhichHolders, js::SliceBudget&) /builds/worker/checkouts/gecko/xpcom/base/CycleCollectedJSRuntime.cpp:1459:19
#18 0x7faf48e810bd in traceEmbeddingGrayRoots /builds/worker/checkouts/gecko/js/src/gc/RootMarking.cpp:403:10
#19 0x7faf48e810bd in js::gc::IncrementalProgress js::gc::GCRuntime::markGrayRoots<js::gc::SweepGroupZonesIter>(js::SliceBudget&, js::gcstats::PhaseKind) /builds/worker/checkouts/gecko/js/src/gc/Sweeping.cpp:549:7
#20 0x7faf48e80f78 in js::gc::GCRuntime::markGrayRootsInCurrentGroup(JS::GCContext*, js::SliceBudget&) /builds/worker/checkouts/gecko/js/src/gc/Sweeping.cpp:1087:10
#21 0x7faf48e989ac in sweepaction::SweepActionSequence::run(js::gc::SweepAction::Args&) /builds/worker/checkouts/gecko/js/src/gc/Sweeping.cpp:2089:23
#22 0x7faf48e92598 in sweepaction::SweepActionForEach<js::gc::SweepGroupsIter, JSRuntime*>::run(js::gc::SweepAction::Args&) /builds/worker/checkouts/gecko/js/src/gc/Sweeping.cpp:2124:19
#23 0x7faf48e8a4fa in js::gc::GCRuntime::performSweepActions(js::SliceBudget&) /builds/worker/checkouts/gecko/js/src/gc/Sweeping.cpp:2261:53
#24 0x7faf48dfb7dc in js::gc::GCRuntime::incrementalSlice(js::SliceBudget&, JS::GCReason, bool) /builds/worker/checkouts/gecko/js/src/gc/GC.cpp:3315:11
#25 0x7faf48dff2e8 in js::gc::GCRuntime::gcCycle(bool, js::SliceBudget const&, JS::GCReason) /builds/worker/checkouts/gecko/js/src/gc/GC.cpp:3819:3
#26 0x7faf48e00291 in js::gc::GCRuntime::collect(bool, js::SliceBudget const&, JS::GCReason) /builds/worker/checkouts/gecko/js/src/gc/GC.cpp:4007:9
#27 0x7faf411618cd in GarbageCollectImpl(JS::GCReason, nsJSContext::IsShrinking, js::SliceBudget const&) /builds/worker/checkouts/gecko/dom/base/nsJSEnvironment.cpp:1048:5
#28 0x7faf41161ad5 in nsJSContext::RunIncrementalGCSlice(JS::GCReason, nsJSContext::IsShrinking, js::SliceBudget&) /builds/worker/checkouts/gecko/dom/base/nsJSEnvironment.cpp:1085:3
#29 0x7faf40cf076b in mozilla::CCGCScheduler::GCRunnerFiredDoGC(mozilla::TimeStamp, mozilla::GCRunnerStep const&) /builds/worker/checkouts/gecko/dom/base/CCGCScheduler.cpp:424:3
#30 0x7faf40cefb1f in mozilla::CCGCScheduler::GCRunnerFired(mozilla::TimeStamp) /builds/worker/checkouts/gecko/dom/base/CCGCScheduler.cpp:383:10
#31 0x7faf3eaae58c in operator() /builds/worker/fetches/sysroot-x86_64-linux-gnu/usr/lib/gcc/x86_64-linux-gnu/7.5.0/../../../../include/c++/7.5.0/bits/std_function.h:706:14
#32 0x7faf3eaae58c in mozilla::IdleTaskRunner::Run() /builds/worker/checkouts/gecko/xpcom/threads/IdleTaskRunner.cpp:125:14
#33 0x7faf3eaaf162 in mozilla::IdleTaskRunnerTask::Run() /builds/worker/checkouts/gecko/xpcom/threads/IdleTaskRunner.cpp:46:15
#34 0x7faf3eaca3d9 in mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&) /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:851:26
#35 0x7faf3eac8dcf in mozilla::TaskController::ExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&) /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:725:15
#36 0x7faf3eac8f28 in mozilla::TaskController::ProcessPendingMTTask(bool) /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:461:36
#37 0x7faf3eafb5a9 in operator() /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:187:37
#38 0x7faf3eafb5a9 in mozilla::detail::RunnableFunction<mozilla::TaskController::InitializeInternal()::$_0>::Run() /builds/worker/workspace/obj-build/dist/include/nsThreadUtils.h:531:5
#39 0x7faf3eae1023 in nsThread::ProcessNextEvent(bool, bool*) /builds/worker/checkouts/gecko/xpcom/threads/nsThread.cpp:1205:16
#40 0x7faf3eae76bf in NS_ProcessNextEvent(nsIThread*, bool) /builds/worker/checkouts/gecko/xpcom/threads/nsThreadUtils.cpp:465:10
#41 0x7faf3fb29975 in mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) /builds/worker/checkouts/gecko/ipc/glue/MessagePump.cpp:85:21
#42 0x7faf3fa11e4f in RunInternal /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:381:10
#43 0x7faf3fa11e4f in RunHandler /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:374:3
#44 0x7faf3fa11e4f in MessageLoop::Run() /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:356:3
#45 0x7faf454402f0 in nsBaseAppShell::Run() /builds/worker/checkouts/gecko/widget/nsBaseAppShell.cpp:150:27
#46 0x7faf47e66e78 in nsAppStartup::Run() /builds/worker/checkouts/gecko/toolkit/components/startup/nsAppStartup.cpp:295:30
#47 0x7faf48025e6d in XREMain::XRE_mainRun() /builds/worker/checkouts/gecko/toolkit/xre/nsAppRunner.cpp:5706:22
#48 0x7faf48027fe0 in XREMain::XRE_main(int, char**, mozilla::BootstrapConfig const&) /builds/worker/checkouts/gecko/toolkit/xre/nsAppRunner.cpp:5900:8
#49 0x7faf48028cfa in XRE_main(int, char**, mozilla::BootstrapConfig const&) /builds/worker/checkouts/gecko/toolkit/xre/nsAppRunner.cpp:5956:21
#50 0x55eda697bc3f in do_main /builds/worker/checkouts/gecko/browser/app/nsBrowserApp.cpp:228:22
#51 0x55eda697bc3f in main /builds/worker/checkouts/gecko/browser/app/nsBrowserApp.cpp:427:16
#52 0x7faf6553e082 in __libc_start_main /build/glibc-SzIz7B/glibc-2.31/csu/../csu/libc-start.c:308:16
#53 0x55eda69516e7 in _start (/home/worker/builds/m-c-20220807214336-ccov-fuzzing-opt/firefox-bin+0x3a6e7) (BuildId: 8038a4b5ddbcac99e97d7be4b74cb0d1e1e03579)
#0 0x7fa0f19865cb in __lll_lock_wait_private /build/glibc-SzIz7B/glibc-2.31/nptl/./lowlevellock.c:35:7
#1 0x7fa0f198c32a in malloc /build/glibc-SzIz7B/glibc-2.31/malloc/malloc.c:3064:3
#2 0x7fa0f1973d03 in _IO_file_doallocate /build/glibc-SzIz7B/glibc-2.31/libio/filedoalloc.c:101:7
#3 0x7fa0f1983ecf in _IO_doallocbuf /build/glibc-SzIz7B/glibc-2.31/libio/genops.c:347:9
#4 0x7fa0f1980994 in _IO_file_seekoff /build/glibc-SzIz7B/glibc-2.31/libio/fileops.c:938:7
#5 0x7fa0f197d37c in fseek /build/glibc-SzIz7B/glibc-2.31/libio/fseek.c:36:12
#6 0x563fd5e9e7bb in llvm_gcda_start_file crtstuff.c
#7 0x563fd5d8a0da in __llvm_gcov_writeout nsBrowserApp.cpp
#8 0x7fa0dd265ca4 in __gcov_dump crtstuff.c
#9 0x7fa0d3c1bfed in mozilla::CodeCoverageHandler::FlushCounters(bool) /builds/worker/checkouts/gecko/tools/code-coverage/CodeCoverageHandler.cpp:53:3
#10 0x7fa0f193508f  (/lib/x86_64-linux-gnu/libc.so.6+0x4308f) (BuildId: 1878e6b475720c7c51969e69ab2d276fae6d1dee)
#11 0x7fa0f19878c6 in unlink_chunk /build/glibc-SzIz7B/glibc-2.31/malloc/malloc.c:1459:6
#12 0x7fa0f1987a7b in malloc_consolidate /build/glibc-SzIz7B/glibc-2.31/malloc/malloc.c:4494:4
#13 0x7fa0f1988fdf in _int_free /build/glibc-SzIz7B/glibc-2.31/malloc/malloc.c:4400:2
#14 0x7fa0d0a68f68 in js_free /builds/worker/workspace/obj-build/dist/include/js/Utility.h:413:3
#15 0x7fa0d0a68f68 in free_<char> /builds/worker/workspace/obj-build/dist/include/js/AllocPolicy.h:83:5
#16 0x7fa0d0a68f68 in mozilla::BufferList<js::SystemAllocPolicy>::Clear() /builds/worker/workspace/obj-build/dist/include/mozilla/BufferList.h:163:15
#17 0x7fa0d464011a in Clear /builds/worker/workspace/obj-build/dist/include/js/StructuredClone.h:564:14
#18 0x7fa0d464011a in JSAutoStructuredCloneBuffer::clear() /builds/worker/checkouts/gecko/js/src/vm/StructuredClone.cpp:3906:9
#19 0x7fa0cd4093dc in ~JSAutoStructuredCloneBuffer /builds/worker/workspace/obj-build/dist/include/js/StructuredClone.h:673:36
#20 0x7fa0cd4093dc in operator() /builds/worker/workspace/obj-build/dist/include/mozilla/UniquePtr.h:459:5
#21 0x7fa0cd4093dc in mozilla::UniquePtr<JSAutoStructuredCloneBuffer, mozilla::DefaultDelete<JSAutoStructuredCloneBuffer> >::reset(JSAutoStructuredCloneBuffer*) /builds/worker/workspace/obj-build/dist/include/mozilla/UniquePtr.h:301:7
#22 0x7fa0cd404c1d in operator= /builds/worker/workspace/obj-build/dist/include/mozilla/UniquePtr.h:271:5
#23 0x7fa0cd404c1d in Clear /builds/worker/checkouts/gecko/dom/base/StructuredCloneHolder.cpp:253:11
#24 0x7fa0cd404c1d in mozilla::dom::StructuredCloneHolder::~StructuredCloneHolder() /builds/worker/checkouts/gecko/dom/base/StructuredCloneHolder.cpp:345:3
#25 0x7fa0cd3dc00b in ~MaybeStorage /builds/worker/workspace/obj-build/dist/include/mozilla/Maybe.h:269:25
#26 0x7fa0cd3dc00b in ~StructuredCloneBlob /builds/worker/checkouts/gecko/dom/base/StructuredCloneBlob.cpp:36:1
#27 0x7fa0cd3dc00b in mozilla::dom::StructuredCloneBlob::Release() /builds/worker/checkouts/gecko/dom/base/StructuredCloneBlob.cpp:231:1
#28 0x7fa0cad42fc9 in ~nsCOMPtr_base /builds/worker/checkouts/gecko/xpcom/base/nsCOMPtr.h:328:7
#29 0x7fa0cad42fc9 in PopLast /builds/worker/workspace/obj-build/dist/include/mozilla/SegmentedVector.h:107:29
#30 0x7fa0cad42fc9 in mozilla::SegmentedVector<nsCOMPtr<nsISupports>, 4096ul, mozilla::MallocAllocPolicy>::PopLastN(unsigned int) /builds/worker/workspace/obj-build/dist/include/mozilla/SegmentedVector.h:262:13
#31 0x7fa0cad2d96e in mozilla::dom::DeferredFinalizerImpl<nsISupports>::DeferredFinalize(unsigned int, void*) /builds/worker/workspace/obj-build/dist/include/mozilla/dom/BindingUtils.h:2773:15
#32 0x7fa0cad2e162 in mozilla::IncrementalFinalizeRunnable::ReleaseNow(bool) /builds/worker/checkouts/gecko/xpcom/base/CycleCollectedJSRuntime.cpp:1721:18
#33 0x7fa0cad2e45a in mozilla::IncrementalFinalizeRunnable::Run() /builds/worker/checkouts/gecko/xpcom/base/CycleCollectedJSRuntime.cpp:1758:3
#34 0x7fa0caec92bf in IdleRunnableWrapper::Run() /builds/worker/checkouts/gecko/xpcom/threads/nsThreadUtils.cpp:309:22
#35 0x7fa0caecc92d in mozilla::RunnableTask::Run() /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:538:16
#36 0x7fa0caea03d9 in mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&) /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:851:26
#37 0x7fa0cae9edcf in mozilla::TaskController::ExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&) /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:725:15
#38 0x7fa0cae9ef28 in mozilla::TaskController::ProcessPendingMTTask(bool) /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:461:36
#39 0x7fa0caed15a9 in operator() /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:187:37
#40 0x7fa0caed15a9 in mozilla::detail::RunnableFunction<mozilla::TaskController::InitializeInternal()::$_0>::Run() /builds/worker/workspace/obj-build/dist/include/nsThreadUtils.h:531:5
#41 0x7fa0caeb7023 in nsThread::ProcessNextEvent(bool, bool*) /builds/worker/checkouts/gecko/xpcom/threads/nsThread.cpp:1205:16
#42 0x7fa0caebd6bf in NS_ProcessNextEvent(nsIThread*, bool) /builds/worker/checkouts/gecko/xpcom/threads/nsThreadUtils.cpp:465:10
#43 0x7fa0cbeff975 in mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) /builds/worker/checkouts/gecko/ipc/glue/MessagePump.cpp:85:21
#44 0x7fa0cbde7e4f in RunInternal /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:381:10
#45 0x7fa0cbde7e4f in RunHandler /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:374:3
#46 0x7fa0cbde7e4f in MessageLoop::Run() /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:356:3
#47 0x7fa0d18162f0 in nsBaseAppShell::Run() /builds/worker/checkouts/gecko/widget/nsBaseAppShell.cpp:150:27
#48 0x7fa0d423ce78 in nsAppStartup::Run() /builds/worker/checkouts/gecko/toolkit/components/startup/nsAppStartup.cpp:295:30
#49 0x7fa0d43fbe6d in XREMain::XRE_mainRun() /builds/worker/checkouts/gecko/toolkit/xre/nsAppRunner.cpp:5706:22
#50 0x7fa0d43fdfe0 in XREMain::XRE_main(int, char**, mozilla::BootstrapConfig const&) /builds/worker/checkouts/gecko/toolkit/xre/nsAppRunner.cpp:5900:8
#51 0x7fa0d43fecfa in XRE_main(int, char**, mozilla::BootstrapConfig const&) /builds/worker/checkouts/gecko/toolkit/xre/nsAppRunner.cpp:5956:21
#52 0x563fd5d88c3f in do_main /builds/worker/checkouts/gecko/browser/app/nsBrowserApp.cpp:228:22
#53 0x563fd5d88c3f in main /builds/worker/checkouts/gecko/browser/app/nsBrowserApp.cpp:427:16
#54 0x7fa0f1916082 in __libc_start_main /build/glibc-SzIz7B/glibc-2.31/csu/../csu/libc-start.c:308:16
#55 0x563fd5d5e6e7 in _start (/home/worker/builds/m-c-20220807214336-ccov-fuzzing-opt/firefox-bin+0x3a6e7) (BuildId: 8038a4b5ddbcac99e97d7be4b74cb0d1e1e03579)

A pernosco session for this big can be found here.

You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: