1709033 - macOS Crash in [@ mozilla::DelayedRunnable::Run]

Status: RESOLVED INCOMPLETE

(Core :: XPCOM, defect)

Description

[Sebastian Hengst [:aryx] (needinfo me if it's about an intermittent or backout)]

16 macOS crashes for 88.0, all on different machines. Crash is new for Gecko 88 and >80% of the crashes hit after >1h uptime.

Crash report: https://crash-stats.mozilla.org/report/index/786775d4-7c8e-4614-b88f-f949d0210425

Reason: EXC_BAD_ACCESS / KERN_INVALID_ADDRESS

Top 10 frames of crashing thread:

0 XUL mozilla::DelayedRunnable::Run xpcom/threads/nsThreadUtils.cpp:794
1 XUL nsThreadPool::Run xpcom/threads/nsThreadPool.cpp:303
2 XUL nsThread::ProcessNextEvent xpcom/threads/nsThread.cpp:1145
3 libmozglue.dylib arena_t::GetNonFullBinRun memory/build/mozjemalloc.cpp:2681
4 XUL nsTSubstring<char>::ReplacePrep xpcom/string/nsTSubstring.cpp:291
5 XUL nsTSubstring<char>::AppendPrintf xpcom/string/nsTSubstring.cpp:1207
6 libmozglue.dylib malloc memory/build/malloc_decls.h:51
7 libmozglue.dylib arena_t::GetNonFullBinRun memory/build/mozjemalloc.cpp:2681
8 libmozglue.dylib malloc memory/build/malloc_decls.h:51
9 libmozglue.dylib malloc memory/build/malloc_decls.h:51

Comment 1

[Andrew McCreight [:mccr8]]

It is hard to tell what is going on here. The stacks are all very junky.

Comment 2

[Julien Cristau [:jcristau]]

Regressing bug backed out of beta for 89: https://hg.mozilla.org/releases/mozilla-beta/rev/21a23370449e01dcb4388f99bcd3778923db3def

Comment 3

[Julien Cristau [:jcristau]]

Regressor backed out of beta again for 90:
https://hg.mozilla.org/releases/mozilla-beta/rev/3dabe43c4982a4759af9195a9eaf02d1062304eb

Comment 4

[Julien Cristau [:jcristau]]

We're not seeing this in 91 or 92 so far.

Comment 5

[Pascal Chevrel:pascalc (PTO until April 26)]

2 crashes in total in 91 beta

Comment 6

[Nika Layzell [:nika] (ni? for response)]

Hasn't been poked in a year - closing for now.