Closed Bug 1779762 Opened 2 years ago Closed 2 years ago

Intermittent Main app process exited normally | application crashed [@ mozilla::dom::workerinternals::loader::WorkerScriptLoader::OnStreamComplete(JS::loader::ScriptLoadRequest*, nsresult)]

Categories

(Core :: DOM: Workers, defect)

Product:
Core
Component:
DOM: Workers
Type:
defect

Tracking

()

Status:
RESOLVED FIXED
Milestone:
104 Branch
Tracking Flags:
Tracking Status
firefox-esr91 --- unaffected
firefox-esr102 --- unaffected
firefox102 --- unaffected
firefox103 --- unaffected
firefox104 --- fixed

People

(Reporter: intermittent-bug-filer, Assigned: yulia)

References

(Regression)

Details

(5 keywords)

Crash Data

Attachments

(2 files)

Bug 1779762 - r?asuth
48 bytes, text/x-phabricator-request
Details | Review
Bug 1779762 - Reimplement mLoadingFinished check; r?asuth
48 bytes, text/x-phabricator-request
Details | Review

Filed by: bszekely [at] mozilla.com
Parsed log: https://treeherder.mozilla.org/logviewer?job_id=384471206&repo=mozilla-central
Full log: https://firefox-ci-tc.services.mozilla.com/api/queue/v1/task/HQ_Q3eV8QSW46D8GZtLuxw/runs/0/artifacts/public/logs/live_backing.log

[task 2022-07-15T11:38:38.872Z] 11:38:38     INFO - TEST-START | Shutdown
[task 2022-07-15T11:38:38.877Z] 11:38:38     INFO - Browser Chrome Test Summary
[task 2022-07-15T11:38:38.877Z] 11:38:38     INFO - Passed:  864
[task 2022-07-15T11:38:38.877Z] 11:38:38     INFO - Failed:  0
[task 2022-07-15T11:38:38.878Z] 11:38:38     INFO - Todo:    0
[task 2022-07-15T11:38:38.879Z] 11:38:38     INFO - Mode:    e10s
[task 2022-07-15T11:38:38.879Z] 11:38:38     INFO - *** End BrowserChrome Test Results ***
[task 2022-07-15T11:38:38.930Z] 11:38:38     INFO - GECKO(1634) | Exiting due to channel error.
[task 2022-07-15T11:38:38.930Z] 11:38:38     INFO - GECKO(1634) | Exiting due to channel error.
[task 2022-07-15T11:38:38.931Z] 11:38:38     INFO - GECKO(1634) | Exiting due to channel error.
[task 2022-07-15T11:38:38.932Z] 11:38:38     INFO - GECKO(1634) | Exiting due to channel error.
[task 2022-07-15T11:38:38.932Z] 11:38:38     INFO - GECKO(1634) | Exiting due to channel error.
[task 2022-07-15T11:38:38.979Z] 11:38:38     INFO - TEST-INFO | Main app process: exit 0
[task 2022-07-15T11:38:38.979Z] 11:38:38     INFO - runtests.py | Application ran for: 0:06:33.921793
[task 2022-07-15T11:38:38.979Z] 11:38:38     INFO - zombiecheck | Reading PID log: /tmp/tmplssgnr1kpidlog
[task 2022-07-15T11:38:38.979Z] 11:38:38     INFO - ==> process 1634 launched child process 1655
[task 2022-07-15T11:38:38.979Z] 11:38:38     INFO - ==> process 1634 launched child process 1737
[task 2022-07-15T11:38:38.979Z] 11:38:38     INFO - ==> process 1634 launched child process 1759
[task 2022-07-15T11:38:38.979Z] 11:38:38     INFO - ==> process 1634 launched child process 1803
[task 2022-07-15T11:38:38.979Z] 11:38:38     INFO - ==> process 1634 launched child process 1823
[task 2022-07-15T11:38:38.979Z] 11:38:38     INFO - ==> process 1634 launched child process 1828
[task 2022-07-15T11:38:38.979Z] 11:38:38     INFO - ==> process 1634 launched child process 1968
[task 2022-07-15T11:38:38.979Z] 11:38:38     INFO - ==> process 1634 launched child process 1974
[task 2022-07-15T11:38:38.979Z] 11:38:38     INFO - ==> process 1634 launched child process 1984
[task 2022-07-15T11:38:38.979Z] 11:38:38     INFO - ==> process 1634 launched child process 2040
[task 2022-07-15T11:38:38.979Z] 11:38:38     INFO - ==> process 1634 launched child process 2067
[task 2022-07-15T11:38:38.979Z] 11:38:38     INFO - ==> process 1634 launched child process 2126
[task 2022-07-15T11:38:38.979Z] 11:38:38     INFO - ==> process 1634 launched child process 2154
[task 2022-07-15T11:38:38.979Z] 11:38:38     INFO - ==> process 1634 launched child process 2181
[task 2022-07-15T11:38:38.979Z] 11:38:38     INFO - ==> process 1634 launched child process 2204
[task 2022-07-15T11:38:38.979Z] 11:38:38     INFO - ==> process 1634 launched child process 2225
[task 2022-07-15T11:38:38.980Z] 11:38:38     INFO - ==> process 1634 launched child process 2251
[task 2022-07-15T11:38:38.980Z] 11:38:38     INFO - ==> process 1634 launched child process 2275
[task 2022-07-15T11:38:38.980Z] 11:38:38     INFO - ==> process 1634 launched child process 2296
[task 2022-07-15T11:38:38.987Z] 11:38:38     INFO - ==> process 1634 launched child process 2323
[task 2022-07-15T11:38:38.989Z] 11:38:38     INFO - ==> process 1634 launched child process 2346
[task 2022-07-15T11:38:38.989Z] 11:38:38     INFO - ==> process 1634 launched child process 2367
[task 2022-07-15T11:38:38.989Z] 11:38:38     INFO - ==> process 1634 launched child process 2393
[task 2022-07-15T11:38:38.990Z] 11:38:38     INFO - ==> process 1634 launched child process 2416
[task 2022-07-15T11:38:38.991Z] 11:38:38     INFO - ==> process 1634 launched child process 2440
[task 2022-07-15T11:38:38.997Z] 11:38:38     INFO - ==> process 1634 launched child process 2442
[task 2022-07-15T11:38:38.997Z] 11:38:38     INFO - ==> process 1634 launched child process 2464
[task 2022-07-15T11:38:38.998Z] 11:38:38     INFO - ==> process 1634 launched child process 2492
[task 2022-07-15T11:38:38.998Z] 11:38:38     INFO - ==> process 1634 launched child process 2515
[task 2022-07-15T11:38:38.998Z] 11:38:38     INFO - ==> process 1634 launched child process 2536
[task 2022-07-15T11:38:38.998Z] 11:38:38     INFO - ==> process 1634 launched child process 2563
[task 2022-07-15T11:38:38.999Z] 11:38:38     INFO - ==> process 1634 launched child process 2586
[task 2022-07-15T11:38:38.999Z] 11:38:38     INFO - ==> process 1634 launched child process 2614
[task 2022-07-15T11:38:38.999Z] 11:38:38     INFO - ==> process 1634 launched child process 2635
[task 2022-07-15T11:38:39.000Z] 11:38:39     INFO - ==> process 1634 launched child process 2662
[task 2022-07-15T11:38:39.000Z] 11:38:39     INFO - ==> process 1634 launched child process 2685
[task 2022-07-15T11:38:39.001Z] 11:38:39     INFO - ==> process 1634 launched child process 2707
[task 2022-07-15T11:38:39.001Z] 11:38:39     INFO - ==> process 1634 launched child process 2733
[task 2022-07-15T11:38:39.004Z] 11:38:39     INFO - ==> process 1634 launched child process 2764
[task 2022-07-15T11:38:39.008Z] 11:38:39     INFO - ==> process 1634 launched child process 2791
[task 2022-07-15T11:38:39.009Z] 11:38:39     INFO - zombiecheck | Checking for orphan process with PID: 2563
[task 2022-07-15T11:38:39.010Z] 11:38:39     INFO - zombiecheck | Checking for orphan process with PID: 2181
[task 2022-07-15T11:38:39.010Z] 11:38:39     INFO - zombiecheck | Checking for orphan process with PID: 2440
[task 2022-07-15T11:38:39.011Z] 11:38:39     INFO - zombiecheck | Checking for orphan process with PID: 2442
[task 2022-07-15T11:38:39.011Z] 11:38:39     INFO - zombiecheck | Checking for orphan process with PID: 1803
[task 2022-07-15T11:38:39.013Z] 11:38:39     INFO - zombiecheck | Checking for orphan process with PID: 2067
[task 2022-07-15T11:38:39.013Z] 11:38:39     INFO - zombiecheck | Checking for orphan process with PID: 2323
[task 2022-07-15T11:38:39.013Z] 11:38:39     INFO - zombiecheck | Checking for orphan process with PID: 2707
[task 2022-07-15T11:38:39.014Z] 11:38:39     INFO - zombiecheck | Checking for orphan process with PID: 2040
[task 2022-07-15T11:38:39.014Z] 11:38:39     INFO - zombiecheck | Checking for orphan process with PID: 2586
[task 2022-07-15T11:38:39.014Z] 11:38:39     INFO - zombiecheck | Checking for orphan process with PID: 2204
[task 2022-07-15T11:38:39.014Z] 11:38:39     INFO - zombiecheck | Checking for orphan process with PID: 1823
[task 2022-07-15T11:38:39.014Z] 11:38:39     INFO - zombiecheck | Checking for orphan process with PID: 2464
[task 2022-07-15T11:38:39.022Z] 11:38:39     INFO - zombiecheck | Checking for orphan process with PID: 1828
[task 2022-07-15T11:38:39.022Z] 11:38:39     INFO - zombiecheck | Checking for orphan process with PID: 2346
[task 2022-07-15T11:38:39.022Z] 11:38:39     INFO - zombiecheck | Checking for orphan process with PID: 2733
[task 2022-07-15T11:38:39.023Z] 11:38:39     INFO - zombiecheck | Checking for orphan process with PID: 1968
[task 2022-07-15T11:38:39.023Z] 11:38:39     INFO - zombiecheck | Checking for orphan process with PID: 2225
[task 2022-07-15T11:38:39.023Z] 11:38:39     INFO - zombiecheck | Checking for orphan process with PID: 1974
[task 2022-07-15T11:38:39.023Z] 11:38:39     INFO - zombiecheck | Checking for orphan process with PID: 2614
[task 2022-07-15T11:38:39.024Z] 11:38:39     INFO - zombiecheck | Checking for orphan process with PID: 2492
[task 2022-07-15T11:38:39.025Z] 11:38:39     INFO - zombiecheck | Checking for orphan process with PID: 2367
[task 2022-07-15T11:38:39.026Z] 11:38:39     INFO - zombiecheck | Checking for orphan process with PID: 1984
[task 2022-07-15T11:38:39.026Z] 11:38:39     INFO - zombiecheck | Checking for orphan process with PID: 1737
[task 2022-07-15T11:38:39.026Z] 11:38:39     INFO - zombiecheck | Checking for orphan process with PID: 2251
[task 2022-07-15T11:38:39.026Z] 11:38:39     INFO - zombiecheck | Checking for orphan process with PID: 2635
[task 2022-07-15T11:38:39.026Z] 11:38:39     INFO - zombiecheck | Checking for orphan process with PID: 2764
[task 2022-07-15T11:38:39.026Z] 11:38:39     INFO - zombiecheck | Checking for orphan process with PID: 2126
[task 2022-07-15T11:38:39.027Z] 11:38:39     INFO - zombiecheck | Checking for orphan process with PID: 2515
[task 2022-07-15T11:38:39.027Z] 11:38:39     INFO - zombiecheck | Checking for orphan process with PID: 2393
[task 2022-07-15T11:38:39.027Z] 11:38:39     INFO - zombiecheck | Checking for orphan process with PID: 1759
[task 2022-07-15T11:38:39.027Z] 11:38:39     INFO - zombiecheck | Checking for orphan process with PID: 2275
[task 2022-07-15T11:38:39.028Z] 11:38:39     INFO - zombiecheck | Checking for orphan process with PID: 2662
[task 2022-07-15T11:38:39.028Z] 11:38:39     INFO - zombiecheck | Checking for orphan process with PID: 2791
[task 2022-07-15T11:38:39.028Z] 11:38:39     INFO - zombiecheck | Checking for orphan process with PID: 2536
[task 2022-07-15T11:38:39.028Z] 11:38:39     INFO - zombiecheck | Checking for orphan process with PID: 2154
[task 2022-07-15T11:38:39.029Z] 11:38:39     INFO - zombiecheck | Checking for orphan process with PID: 2416
[task 2022-07-15T11:38:39.029Z] 11:38:39     INFO - zombiecheck | Checking for orphan process with PID: 1655
[task 2022-07-15T11:38:39.029Z] 11:38:39     INFO - zombiecheck | Checking for orphan process with PID: 2296
[task 2022-07-15T11:38:39.030Z] 11:38:39     INFO - zombiecheck | Checking for orphan process with PID: 2685
[task 2022-07-15T11:38:39.030Z] 11:38:39     INFO - mozcrash Downloading symbols from: https://firefox-ci-tc.services.mozilla.com/api/queue/v1/task/SQIe9n0xT9ilVz6QFGdC4A/artifacts/public/build/target.crashreporter-symbols.zip
[task 2022-07-15T11:38:42.425Z] 11:38:42     INFO - mozcrash Copy/paste: /builds/worker/fetches/minidump-stackwalk/minidump-stackwalk --symbols-url=https://symbols.mozilla.org/ --human /tmp/tmp8clyul47.mozrunner/minidumps/332801b7-ccd1-2e9b-1118-541a645fc131.dmp /tmp/tmp7nqh0cxo
[task 2022-07-15T11:38:44.300Z] 11:38:44     INFO - mozcrash Saved minidump as /builds/worker/workspace/build/blobber_upload_dir/332801b7-ccd1-2e9b-1118-541a645fc131.dmp
[task 2022-07-15T11:38:44.301Z] 11:38:44     INFO - mozcrash Saved app info as /builds/worker/workspace/build/blobber_upload_dir/332801b7-ccd1-2e9b-1118-541a645fc131.extra
[task 2022-07-15T11:38:44.381Z] 11:38:44     INFO - PROCESS-CRASH | Main app process exited normally | application crashed [@ mozilla::dom::workerinternals::loader::WorkerScriptLoader::OnStreamComplete(JS::loader::ScriptLoadRequest*, nsresult)]
[task 2022-07-15T11:38:44.381Z] 11:38:44     INFO - Crash dump filename: /tmp/tmp8clyul47.mozrunner/minidumps/332801b7-ccd1-2e9b-1118-541a645fc131.dmp
[task 2022-07-15T11:38:44.381Z] 11:38:44     INFO - Operating system: Linux
[task 2022-07-15T11:38:44.381Z] 11:38:44     INFO -                   4.4.0-1014-aws #14taskcluster1-Ubuntu SMP Tue Apr 3 10:27:00 UTC 2018
[task 2022-07-15T11:38:44.381Z] 11:38:44     INFO - CPU: amd64
[task 2022-07-15T11:38:44.381Z] 11:38:44     INFO -      family 6 model 85 stepping 7
[task 2022-07-15T11:38:44.381Z] 11:38:44     INFO -      2 CPUs
[task 2022-07-15T11:38:44.381Z] 11:38:44     INFO - Linux Ubuntu 18.04 - bionic (Ubuntu 18.04.6 LTS)
[task 2022-07-15T11:38:44.381Z] 11:38:44     INFO - 
[task 2022-07-15T11:38:44.381Z] 11:38:44     INFO - Crash reason:  SIGSEGV / SI_KERNEL
[task 2022-07-15T11:38:44.381Z] 11:38:44     INFO - Crash address: 0x0
[task 2022-07-15T11:38:44.381Z] 11:38:44     INFO - Process uptime: not available
[task 2022-07-15T11:38:44.381Z] 11:38:44     INFO - 
[task 2022-07-15T11:38:44.381Z] 11:38:44     INFO - Thread 0 Isolated Servic (crashed)
[task 2022-07-15T11:38:44.381Z] 11:38:44     INFO -  0  libxul.so!mozilla::dom::workerinternals::loader::WorkerScriptLoader::OnStreamComplete(JS::loader::ScriptLoadRequest*, nsresult) [ScriptLoader.cpp:59134b451eec1454be5f2e489176b4b59f1ddb5a : 631 + 0x0]
[task 2022-07-15T11:38:44.381Z] 11:38:44     INFO -      rax = 0x00007fc684e06a00    rdx = 0x00000000804b0002
[task 2022-07-15T11:38:44.381Z] 11:38:44     INFO -      rcx = 0x0000000000000003    rbx = 0x00007fc6801bfea0
[task 2022-07-15T11:38:44.381Z] 11:38:44     INFO -      rsi = 0xe5e5e5e5e5e5e5e5    rdi = 0x00007fc6801bfea0
[task 2022-07-15T11:38:44.381Z] 11:38:44     INFO -      rbp = 0x00007fff257b3500    rsp = 0x00007fff257b34f0
[task 2022-07-15T11:38:44.381Z] 11:38:44     INFO -       r8 = 0x0000000000000000     r9 = 0x00007fc698e6fc50
[task 2022-07-15T11:38:44.381Z] 11:38:44     INFO -      r10 = 0x0000000000000000    r11 = 0x0000000000000206
[task 2022-07-15T11:38:44.381Z] 11:38:44     INFO -      r12 = 0x00007fc684e06ba8    r13 = 0x0000000000000021
[task 2022-07-15T11:38:44.381Z] 11:38:44     INFO -      r14 = 0xe5e5e5e5e5e5e5e5    r15 = 0x00007fc684e06b80
[task 2022-07-15T11:38:44.381Z] 11:38:44     INFO -      rip = 0x00007fc68b97297d
[task 2022-07-15T11:38:44.381Z] 11:38:44     INFO -     Found by: given as instruction pointer in context
[task 2022-07-15T11:38:44.381Z] 11:38:44     INFO -  1  libxul.so!mozilla::net::nsStreamLoader::OnStopRequest(nsIRequest*, nsresult) [nsStreamLoader.cpp:59134b451eec1454be5f2e489176b4b59f1ddb5a : 86 + 0x19]
[task 2022-07-15T11:38:44.381Z] 11:38:44     INFO -      rbx = 0x00007fc684e06bc8    rbp = 0x00007fff257b3560
[task 2022-07-15T11:38:44.381Z] 11:38:44     INFO -      rsp = 0x00007fff257b3510    r12 = 0x00007fc684e06ba8
[task 2022-07-15T11:38:44.381Z] 11:38:44     INFO -      r13 = 0x0000000000000021    r14 = 0x00007fc67fb04d40
[task 2022-07-15T11:38:44.381Z] 11:38:44     INFO -      r15 = 0x00007fc684e06b80    rip = 0x00007fc68b19dd19
[task 2022-07-15T11:38:44.381Z] 11:38:44     INFO -     Found by: call frame info
[task 2022-07-15T11:38:44.381Z] 11:38:44     INFO -  2  libxul.so!nsInputStreamPump::OnStateStop() [nsInputStreamPump.cpp:59134b451eec1454be5f2e489176b4b59f1ddb5a : 657 + 0x10]
[task 2022-07-15T11:38:44.381Z] 11:38:44     INFO -      rbx = 0x00007fc698e8d5e0    rbp = 0x00007fff257b35a0
[task 2022-07-15T11:38:44.381Z] 11:38:44     INFO -      rsp = 0x00007fff257b3570    r12 = 0x0000000000000000
[task 2022-07-15T11:38:44.381Z] 11:38:44     INFO -      r13 = 0x00007fc698ec29a8    r14 = 0x00007fc698ec29a8
[task 2022-07-15T11:38:44.381Z] 11:38:44     INFO -      r15 = 0x00007fc698ec2920    rip = 0x00007fc68b17e59d
[task 2022-07-15T11:38:44.381Z] 11:38:44     INFO -     Found by: call frame info
[task 2022-07-15T11:38:44.382Z] 11:38:44     INFO -  3  libxul.so!nsInputStreamPump::OnInputStreamReady(nsIAsyncInputStream*) [nsInputStreamPump.cpp:59134b451eec1454be5f2e489176b4b59f1ddb5a : 382 + 0x7]
[task 2022-07-15T11:38:44.382Z] 11:38:44     INFO -      rbx = 0x00007fc698e8d5e0    rbp = 0x00007fff257b3620
[task 2022-07-15T11:38:44.382Z] 11:38:44     INFO -      rsp = 0x00007fff257b35b0    r12 = 0x0000000000000000
[task 2022-07-15T11:38:44.382Z] 11:38:44     INFO -      r13 = 0x00007fc698ec29a8    r14 = 0x00007fc698ec2920
[task 2022-07-15T11:38:44.382Z] 11:38:44     INFO -      r15 = 0x0000000000000002    rip = 0x00007fc68b17ddc9
[task 2022-07-15T11:38:44.382Z] 11:38:44     INFO -     Found by: call frame info
[task 2022-07-15T11:38:44.382Z] 11:38:44     INFO -  4  libxul.so!already_AddRefed<mozilla::CancelableRunnable> NS_NewCancelableRunnableFunction<CallbackHolder::CallbackHolder(nsIAsyncInputStream*, nsIInputStreamCallback*, unsigned int, nsIEventTarget*)::{lambda()#1}>(char const*, CallbackHolder::CallbackHolder(nsIAsyncInputStream*, nsIInputStreamCallback*, unsigned int, nsIEventTarget*)::{lambda()#1}&&)::FuncCancelableRunnable::Run() [nsThreadUtils.h:59134b451eec1454be5f2e489176b4b59f1ddb5a : 650 + 0xd]
[task 2022-07-15T11:38:44.382Z] 11:38:44     INFO -      rbx = 0x00007fff257b3640    rbp = 0x00007fff257b3630
[task 2022-07-15T11:38:44.382Z] 11:38:44     INFO -      rsp = 0x00007fff257b3630    r12 = 0x00007fff257b3640
[task 2022-07-15T11:38:44.382Z] 11:38:44     INFO -      r13 = 0x00000088aa3fb8ce    r14 = 0x00007fc680111970
[task 2022-07-15T11:38:44.382Z] 11:38:44     INFO -      r15 = 0x00007fc67fb0a0f8    rip = 0x00007fc68b0da498
[task 2022-07-15T11:38:44.382Z] 11:38:44     INFO -     Found by: call frame info
[task 2022-07-15T11:38:44.382Z] 11:38:44     INFO -  5  libxul.so!mozilla::ThrottledEventQueue::Inner::Executor::Run() [ThrottledEventQueue.cpp:59134b451eec1454be5f2e489176b4b59f1ddb5a : 81 + 0x96]
[task 2022-07-15T11:38:44.382Z] 11:38:44     INFO -      rbx = 0x00007fff257b3640    rbp = 0x00007fff257b3670
[task 2022-07-15T11:38:44.382Z] 11:38:44     INFO -      rsp = 0x00007fff257b3640    r12 = 0x00007fff257b3640
[task 2022-07-15T11:38:44.383Z] 11:38:44     INFO -      r13 = 0x00000088aa3fb8ce    r14 = 0x00007fc680111970
[task 2022-07-15T11:38:44.383Z] 11:38:44     INFO -      r15 = 0x00007fc67fb0a0f8    rip = 0x00007fc68b103fd3
[task 2022-07-15T11:38:44.383Z] 11:38:44     INFO -     Found by: call frame info
[task 2022-07-15T11:38:44.383Z] 11:38:44     INFO -  6  libxul.so!mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&) [TaskController.cpp:59134b451eec1454be5f2e489176b4b59f1ddb5a : 851 + 0x2d0]
[task 2022-07-15T11:38:44.383Z] 11:38:44     INFO -      rbx = 0x00007fc6801dbb00    rbp = 0x00007fff257b3cf0
[task 2022-07-15T11:38:44.383Z] 11:38:44     INFO -      rsp = 0x00007fff257b3680    r12 = 0x00007fc6801dbb00
[task 2022-07-15T11:38:44.383Z] 11:38:44     INFO -      r13 = 0x00000088aa3fb8ce    r14 = 0x00007fc68f6703f8
[task 2022-07-15T11:38:44.383Z] 11:38:44     INFO -      r15 = 0x00007fff257b3800    rip = 0x00007fc68a7a592f
[task 2022-07-15T11:38:44.383Z] 11:38:44     INFO -     Found by: call frame info
[task 2022-07-15T11:38:44.384Z] 11:38:44     INFO -  7  libxul.so!nsThread::ProcessNextEvent(bool, bool*) [nsThread.cpp:59134b451eec1454be5f2e489176b4b59f1ddb5a : 1205 + 0x3a]
[task 2022-07-15T11:38:44.384Z] 11:38:44     INFO -      rbx = 0x00007fff257b3e50    rbp = 0x00007fff257b3fe0
[task 2022-07-15T11:38:44.384Z] 11:38:44     INFO -      rsp = 0x00007fff257b3d00    r12 = 0x00007fc698e9b400
[task 2022-07-15T11:38:44.384Z] 11:38:44     INFO -      r13 = 0x00007fc698ec3910    r14 = 0x00000088aa3f89fa
[task 2022-07-15T11:38:44.384Z] 11:38:44     INFO -      r15 = 0x00007fc68b0fa890    rip = 0x00007fc68a7ad4e9
[task 2022-07-15T11:38:44.384Z] 11:38:44     INFO -     Found by: call frame info
[task 2022-07-15T11:38:44.384Z] 11:38:44     INFO -  8  libxul.so!mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) [MessagePump.cpp:59134b451eec1454be5f2e489176b4b59f1ddb5a : 85 + 0x2d]
[task 2022-07-15T11:38:44.384Z] 11:38:44     INFO -      rbx = 0x0000000000000000    rbp = 0x00007fff257b4180
[task 2022-07-15T11:38:44.384Z] 11:38:44     INFO -      rsp = 0x00007fff257b3ff0    r12 = 0x00007fc698e8e978
[task 2022-07-15T11:38:44.384Z] 11:38:44     INFO -      r13 = 0x00007fc698e49e80    r14 = 0x00007fc684e17000
[task 2022-07-15T11:38:44.384Z] 11:38:44     INFO -      r15 = 0x00007fff257b4288    rip = 0x00007fc68a7ef3d5
[task 2022-07-15T11:38:44.384Z] 11:38:44     INFO -     Found by: call frame info
[task 2022-07-15T11:38:44.384Z] 11:38:44     INFO -  9  libxul.so!MessageLoop::Run() [message_loop.cc:59134b451eec1454be5f2e489176b4b59f1ddb5a : 355 + 0xb]
[task 2022-07-15T11:38:44.384Z] 11:38:44     INFO -      rbx = 0x00007fff257b4198    rbp = 0x00007fff257b41c0
[task 2022-07-15T11:38:44.384Z] 11:38:44     INFO -      rsp = 0x00007fff257b4190    r12 = 0x0000000080004005
[task 2022-07-15T11:38:44.385Z] 11:38:44     INFO -      r13 = 0x00007fff257b5648    r14 = 0x00007fc684e170a0
[task 2022-07-15T11:38:44.385Z] 11:38:44     INFO -      r15 = 0x0000000098e1e601    rip = 0x00007fc68b2eb85f
[task 2022-07-15T11:38:44.385Z] 11:38:44     INFO -     Found by: call frame info
[task 2022-07-15T11:38:44.385Z] 11:38:44     INFO - 10  libxul.so!nsBaseAppShell::Run() [nsBaseAppShell.cpp:59134b451eec1454be5f2e489176b4b59f1ddb5a : 150 + 0xc]
[task 2022-07-15T11:38:44.385Z] 11:38:44     INFO -      rbx = 0x00007fc684e4ea80    rbp = 0x00007fff257b41e0
[task 2022-07-15T11:38:44.385Z] 11:38:44     INFO -      rsp = 0x00007fff257b41d0    r12 = 0x0000000080004005
[task 2022-07-15T11:38:44.385Z] 11:38:44     INFO -      r13 = 0x00007fff257b5648    r14 = 0x00007fc684e170a0
[task 2022-07-15T11:38:44.385Z] 11:38:44     INFO -      r15 = 0x0000000098e1e601    rip = 0x00007fc68ba07fd9
[task 2022-07-15T11:38:44.385Z] 11:38:44     INFO -     Found by: call frame info
[task 2022-07-15T11:38:44.385Z] 11:38:44     INFO - 11  libxul.so!XRE_RunAppShell() [nsEmbedFunctions.cpp:59134b451eec1454be5f2e489176b4b59f1ddb5a : 875 + 0x5]
[task 2022-07-15T11:38:44.385Z] 11:38:44     INFO -      rbx = 0x00007fff257b41f8    rbp = 0x00007fff257b4210
[task 2022-07-15T11:38:44.385Z] 11:38:44     INFO -      rsp = 0x00007fff257b41f0    r12 = 0x0000000080004005
[task 2022-07-15T11:38:44.385Z] 11:38:44     INFO -      r13 = 0x00007fff257b5648    r14 = 0x00007fff257b4288
[task 2022-07-15T11:38:44.385Z] 11:38:44     INFO -      r15 = 0x0000000098e1e601    rip = 0x00007fc68bd2bd45
[task 2022-07-15T11:38:44.386Z] 11:38:44     INFO -     Found by: call frame info
[task 2022-07-15T11:38:44.386Z] 11:38:44     INFO - 12  libxul.so!MessageLoop::Run() [message_loop.cc:59134b451eec1454be5f2e489176b4b59f1ddb5a : 355 + 0xb]
[task 2022-07-15T11:38:44.386Z] 11:38:44     INFO -      rbx = 0x00007fff257b4228    rbp = 0x00007fff257b4250
[task 2022-07-15T11:38:44.386Z] 11:38:44     INFO -      rsp = 0x00007fff257b4220    r12 = 0x0000000080004005
[task 2022-07-15T11:38:44.386Z] 11:38:44     INFO -      r13 = 0x00007fff257b5648    r14 = 0x00007fff257b4288
[task 2022-07-15T11:38:44.386Z] 11:38:44     INFO -      r15 = 0x0000000098e1e601    rip = 0x00007fc68b2eb85f
[task 2022-07-15T11:38:44.386Z] 11:38:44     INFO -     Found by: call frame info
[task 2022-07-15T11:38:44.386Z] 11:38:44     INFO - 13  libxul.so!XRE_InitChildProcess(int, char**, XREChildData const*) [nsEmbedFunctions.cpp:59134b451eec1454be5f2e489176b4b59f1ddb5a : 734 + 0x7]
[task 2022-07-15T11:38:44.386Z] 11:38:44     INFO -      rbx = 0x00007fc698ebe400    rbp = 0x00007fff257b44e0
[task 2022-07-15T11:38:44.386Z] 11:38:44     INFO -      rsp = 0x00007fff257b4260    r12 = 0x0000000080004005
[task 2022-07-15T11:38:44.386Z] 11:38:44     INFO -      r13 = 0x00007fff257b5648    r14 = 0x00007fff257b4288
[task 2022-07-15T11:38:44.386Z] 11:38:44     INFO -      r15 = 0x0000000098e1e601    rip = 0x00007fc68bd2ba2a
[task 2022-07-15T11:38:44.386Z] 11:38:44     INFO -     Found by: call frame info
[task 2022-07-15T11:38:44.387Z] 11:38:44     INFO - 14  firefox-bin!main [nsBrowserApp.cpp:59134b451eec1454be5f2e489176b4b59f1ddb5a : 338 + 0x45]
[task 2022-07-15T11:38:44.387Z] 11:38:44     INFO -      rbx = 0x0000000000000011    rbp = 0x00007fff257b5560
[task 2022-07-15T11:38:44.387Z] 11:38:44     INFO -      rsp = 0x00007fff257b44f0    r12 = 0x0000000000000004
[task 2022-07-15T11:38:44.387Z] 11:38:44     INFO -      r13 = 0x00007fff257b56e0    r14 = 0x00007fff257b5648
[task 2022-07-15T11:38:44.387Z] 11:38:44     INFO -      r15 = 0x00007fc698e036d0    rip = 0x0000559290945702
[task 2022-07-15T11:38:44.387Z] 11:38:44     INFO -     Found by: call frame info
[task 2022-07-15T11:38:44.387Z] 11:38:44     INFO - 15  libc.so.6!__libc_start_main [libc-start.c : 310 + 0x19]
[task 2022-07-15T11:38:44.387Z] 11:38:44     INFO -      rbx = 0x0000000000000000    rbp = 0x00005592909654e0
[task 2022-07-15T11:38:44.387Z] 11:38:44     INFO -      rsp = 0x00007fff257b5570    r12 = 0x0000559290945481
[task 2022-07-15T11:38:44.387Z] 11:38:44     INFO -      r13 = 0x00007fff257b5640    r14 = 0x0000000000000000
[task 2022-07-15T11:38:44.387Z] 11:38:44     INFO -      r15 = 0x0000000000000000    rip = 0x00007fc6992bab97
[task 2022-07-15T11:38:44.387Z] 11:38:44     INFO -     Found by: call frame info
[task 2022-07-15T11:38:44.388Z] 11:38:44     INFO - 16  firefox-bin!_start + 0x28
[task 2022-07-15T11:38:44.388Z] 11:38:44     INFO -      rbx = 0x0000000000000000    rbp = 0x0000000000000000
[task 2022-07-15T11:38:44.388Z] 11:38:44     INFO -      rsp = 0x00007fff257b5630    r12 = 0x0000559290945481
[task 2022-07-15T11:38:44.388Z] 11:38:44     INFO -      r13 = 0x00007fff257b5640    r14 = 0x0000000000000000
[task 2022-07-15T11:38:44.388Z] 11:38:44     INFO -      r15 = 0x0000000000000000    rip = 0x00005592909454aa
[task 2022-07-15T11:38:44.388Z] 11:38:44     INFO -     Found by: call frame info
[task 2022-07-15T11:38:44.388Z] 11:38:44     INFO - 
[task 2022-07-15T11:38:44.388Z] 11:38:44     INFO - Thread 1 IPC I/O Child
[task 2022-07-15T11:38:44.388Z] 11:38:44     INFO -  0  libc.so.6!syscall + 0x19
Group: firefox-core-security → dom-core-security
Component: about:debugging → DOM: Workers
Keywords: csectype-uaf
Product: DevTools → Core

I'll conservatively mark this sec-high.

Keywords: sec-high
See Also: → 1779628

(I couldn't immediately see what is causing the crash.)

I think there are two underlying crashes: One related to cancellation, and one related to onStreamComplete. The cancellation likely stems from the rework of the cancellation path so that data iteration is on the worker. I am checking that now. For this one, I am not certain. I think this may be related to 1779699 but i don't have an immediate diagnosis for why it is happening. Ill try to fix the debug build bugs first and see if i can reproduce this.

Assignee: nobody → ystartsev
Flags: needinfo?(ystartsev)

After some more debugging: I believe that all of the crashes may have the same root cause: The cancellation behavior was incorrectly calling "LoadingFinished" twice on objects that were potentially being cleaned up. Cancellation is timing sensitive, as it can happen at any point. It only does this if we cancel before we complete the load. In addition, a check for if something had been loaded twice was removed (in favor of SetReady), making it a bit harder to pin point this. I believe if that had remained in place, all of the crashes would have been at the same point in LoadingFinished. I've reintroduced it to make it easier to catch this in the future.

With regards to posting the fix: should that happen here, or in the debug issues? I will ping Ted on this one.

Flags: needinfo?(tcampbell)

Got an answer, I will treat it as a fix for this bug but fall back on one of the other bugs for the "fix", and follow the security process. Here is the list of likely duplicates: 1780019, 1779700, 1779762, 1780011, 1779628

Flags: needinfo?(tcampbell)
Attached file Bug 1779762 - r?asuth —

Depends on D152181

I spoke with Freddy and he recommended doing it here.

I wasn't aware this needs to build upon a patch from another bug. You could also fix this under the pretense of fixing the cloning error in bug 1778762, which is also not uncommon. What would you suggest, Tom?

(This only affects Nightly and it would be kinda nice if we got it in before the soft freeze, I suppose)

Flags: needinfo?(tom)

How easily can the security issue be deduced from the patch?

This is a timing issue where a function (deeply nested) is called Twice. I think it will be difficult to deduce
Do comments in the patch, the check-in comment, or tests included in
the patch paint a bulls-eye on the security problem?

I don’t think so, but the commit message is empty per Freddy’s recommendation. The second patch has a commit message indicating that it’s protecting against loading twice. This happens intermittently, and only when service worker is cached, and it’s cached load is interrupted by a cancellation.

Which older supported branches are affected by this flaw?

Nightly 104 should be the only one

If not all supported branches, which bug introduced the flaw?

https://bugzilla.mozilla.org/show_bug.cgi?id=1742438, the exact diff is the one related to moving the cache to scriptLoadInfo

Do you have backports for the affected branches? If not, how
different, hard to create, and risky will they be?

No other branches affected

How likely is this patch to cause regressions; how much testing does
it need?

Unlikely. Though doing a full try auto test would be nice? I’ve tested the devtools code where this was failing.

As this is Nightly-only, it doesn't need sec-approval, and I'm not worried about landing under pretense, I think whatever seems most logical to you, Yulia, is fine.

Ok, I’ll wait for asuth to approve

See Also: → 1780019

Copying crash signatures from duplicate bugs.

Crash Signature: [@ mozilla::dom::workerinternals::loader::WorkerScriptLoader::OnStreamComplete(JS::loader::ScriptLoadRequest*, nsresult)] → [@ mozilla::dom::workerinternals::loader::WorkerScriptLoader::OnStreamComplete(JS::loader::ScriptLoadRequest*, nsresult)] [@ JS::loader::ScriptLoadRequest::GetWorkerLoadContext()]
Crash Signature: [@ mozilla::dom::workerinternals::loader::WorkerScriptLoader::OnStreamComplete(JS::loader::ScriptLoadRequest*, nsresult)] [@ JS::loader::ScriptLoadRequest::GetWorkerLoadContext()] → [@ mozilla::dom::workerinternals::loader::WorkerScriptLoader::OnStreamComplete(JS::loader::ScriptLoadRequest*, nsresult)] [@ JS::loader::ScriptLoadRequest::GetWorkerLoadContext()]

Accidentally didn't clear ni

Flags: needinfo?(tom)
Group: core-security-release
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: