Open Bug 1842477 Opened 2 years ago Updated 1 day ago

Intermittent application crashed [@ None + None] | single tracking bug

Categories

(Core :: JavaScript Engine: JIT, defect, P5)

defect

Tracking

()

REOPENED

People

(Reporter: intermittent-bug-filer, Unassigned)

References

(Blocks 1 open bug)

Details

(Keywords: intermittent-failure, intermittent-testcase, Whiteboard: [stockwell unknown])

Crash Data

Attachments

(1 obsolete file)

Filed by: ctuns [at] mozilla.com
Parsed log: https://treeherder.mozilla.org/logviewer?job_id=422047121&repo=autoland
Full log: https://firefox-ci-tc.services.mozilla.com/api/queue/v1/task/IV3O92cjT8mt2RvAu75ZUA/runs/0/artifacts/public/logs/live_backing.log


[task 2023-07-09T16:42:40.687Z] 16:42:40     INFO - TEST-PASS | dom/events/test/pointerevents/test_wpt_pointerevent_attributes_nohover_pointers-manual.html | Mismatched touchstart/touchend caught. 
[task 2023-07-09T16:42:40.703Z] 16:42:40     INFO - GECKO(8680) | MEMORY STAT | vsize 2103821MB | vsizeMaxContiguous 71873568MB | residentFast 115MB | heapAllocated 23MB
[task 2023-07-09T16:42:41.030Z] 16:42:41     INFO - GECKO(8680) | [GPU 3412, IPC I/O Child] WARNING: [5C76435E2B675A66.5256D3076A025DB0]: Ignoring message 'EVENT_MESSAGE' to peer 1.1 due to a missing broker: file /builds/worker/checkouts/gecko/ipc/glue/NodeController.cpp:352
[task 2023-07-09T16:42:41.030Z] 16:42:41     INFO - GECKO(8680) | [GPU 3412, IPC I/O Child] WARNING: [5C76435E2B675A66.5256D3076A025DB0]: Ignoring message 'EVENT_MESSAGE' to peer 1.1 due to a missing broker: file /builds/worker/checkouts/gecko/ipc/glue/NodeController.cpp:352
[task 2023-07-09T16:42:41.030Z] 16:42:41     INFO - GECKO(8680) | [GPU 3412, IPC I/O Child] WARNING: [5C76435E2B675A66.5256D3076A025DB0]: Ignoring message 'EVENT_MESSAGE' to peer 1.1 due to a missing broker: file /builds/worker/checkouts/gecko/ipc/glue/NodeController.cpp:352
[task 2023-07-09T16:42:41.030Z] 16:42:41     INFO - GECKO(8680) | [GPU 3412, IPC I/O Child] WARNING: [5C76435E2B675A66.5256D3076A025DB0]: Ignoring message 'EVENT_MESSAGE' to peer 1.1 due to a missing broker: file /builds/worker/checkouts/gecko/ipc/glue/NodeController.cpp:352
[task 2023-07-09T16:42:41.030Z] 16:42:41     INFO - GECKO(8680) | [GPU 3412, IPC I/O Child] WARNING: [5C76435E2B675A66.5256D3076A025DB0]: Ignoring message 'EVENT_MESSAGE' to peer 1.1 due to a missing broker: file /builds/worker/checkouts/gecko/ipc/glue/NodeController.cpp:352
[task 2023-07-09T16:42:41.030Z] 16:42:41     INFO - GECKO(8680) | [GPU 3412, IPC I/O Child] WARNING: [5C76435E2B675A66.5256D3076A025DB0]: Ignoring message 'EVENT_MESSAGE' to peer 1.1 due to a missing broker: file /builds/worker/checkouts/gecko/ipc/glue/NodeController.cpp:352
[task 2023-07-09T16:42:41.030Z] 16:42:41     INFO - GECKO(8680) | [GPU 3412, IPC I/O Child] WARNING: [5C76435E2B675A66.5256D3076A025DB0]: Ignoring message 'EVENT_MESSAGE' to peer 1.1 due to a missing broker: file /builds/worker/checkouts/gecko/ipc/glue/NodeController.cpp:352
[task 2023-07-09T16:42:41.030Z] 16:42:41     INFO - GECKO(8680) | [GPU 3412, Compositor] WARNING: IPC message 'PCompositorWidget::Msg_UnobserveVsync' discarded: actor cannot send: file /builds/worker/checkouts/gecko/ipc/glue/ProtocolUtils.cpp:508
[task 2023-07-09T16:42:41.046Z] 16:42:41     INFO - GECKO(8680) | [Child 692, IPC I/O Child] WARNING: [560D6CBB6B84BC74.9ECCAF768E89645F]: Ignoring message 'EVENT_MESSAGE' to peer 1.1 due to a missing broker: file /builds/worker/checkouts/gecko/ipc/glue/NodeController.cpp:352
[task 2023-07-09T16:42:41.046Z] 16:42:41     INFO - GECKO(8680) | Exiting due to channel error.
[task 2023-07-09T16:42:41.046Z] 16:42:41     INFO - GECKO(8680) | [GPU 3412, Main Thread] WARNING: Shutting down GPU process early due to a crash!: file /builds/worker/checkouts/gecko/gfx/ipc/GPUParent.cpp:665
[task 2023-07-09T16:42:41.102Z] 16:42:41     INFO - TEST-INFO | Main app process: exit 1
[task 2023-07-09T16:42:41.104Z] 16:42:41     INFO - Buffered messages finished
[task 2023-07-09T16:42:41.104Z] 16:42:41     INFO - runtests.py | Application ran for: 0:00:27.639799
[task 2023-07-09T16:42:41.105Z] 16:42:41     INFO - zombiecheck | Reading PID log: C:\Users\task_168891755568424\AppData\Local\Temp\tmpe2ctfwmmpidlog
[task 2023-07-09T16:42:41.106Z] 16:42:41     INFO - ==> process 5592 launched child process 3412 ("Z:\task_168891755568424\build\application\firefox\firefox.exe" -contentproc --channel=2204 -parentBuildID 20230709161427 -prefsHandle 2140 -prefMapHandle 2132 -prefsLen 22196 -prefMapSize 250944 -appDir "Z:\task_168891755568424\build\application\firefox\browser" - {525f8cad-6186-4ca8-ab91-36fa8aaaf163} 5592 "\\.\pipe\gecko-crash-server-pipe.5592" 199697f4b48 gpu)
[task 2023-07-09T16:42:41.106Z] 16:42:41     INFO - ==> process 5592 launched child process 8880 ("Z:\task_168891755568424\build\application\firefox\firefox.exe" -contentproc --channel=2700 -childID 1 -isForBrowser -prefsHandle 2880 -prefMapHandle 2876 -prefsLen 21965 -prefMapSize 250944 -jsInitHandle 1332 -jsInitLen 286928 -parentBuildID 20230709161427 -win32kLockedDown -appDir "Z:\task_168891755568424\build\application\firefox\browser" - {ed2f369e-2815-45d8-a951-81f28686a729} 5592 "\\.\pipe\gecko-crash-server-pipe.5592" 1996dd13b48 tab)
[task 2023-07-09T16:42:41.107Z] 16:42:41     INFO - ==> process 5592 launched child process 3964 ("Z:\task_168891755568424\build\application\firefox\firefox.exe" -contentproc --channel=3320 -childID 2 -isForBrowser -prefsHandle 3312 -prefMapHandle 3308 -prefsLen 23507 -prefMapSize 250944 -jsInitHandle 1332 -jsInitLen 286928 -parentBuildID 20230709161427 -win32kLockedDown -appDir "Z:\task_168891755568424\build\application\firefox\browser" - {bccaeba4-e621-4d24-be23-6f39f6bbbade} 5592 "\\.\pipe\gecko-crash-server-pipe.5592" 1996c140948 tab)
[task 2023-07-09T16:42:41.108Z] 16:42:41     INFO - ==> process 5592 launched child process 6376 ("Z:\task_168891755568424\build\application\firefox\firefox.exe" -contentproc --channel=3560 -childID 3 -isForBrowser -prefsHandle 3552 -prefMapHandle 3548 -prefsLen 23162 -prefMapSize 250944 -jsInitHandle 1332 -jsInitLen 286928 -parentBuildID 20230709161427 -win32kLockedDown -appDir "Z:\task_168891755568424\build\application\firefox\browser" - {444e5f6f-d2f9-48cf-8647-5856d297cb9e} 5592 "\\.\pipe\gecko-crash-server-pipe.5592" 1996ee88248 tab)
[task 2023-07-09T16:42:41.109Z] 16:42:41     INFO - ==> process 5592 launched child process 6836 ("Z:\task_168891755568424\build\application\firefox\firefox.exe" -contentproc --channel=2884 -childID 4 -isForBrowser -prefsHandle 2652 -prefMapHandle 2672 -prefsLen 23390 -prefMapSize 250944 -jsInitHandle 1332 -jsInitLen 286928 -parentBuildID 20230709161427 -win32kLockedDown -appDir "Z:\task_168891755568424\build\application\firefox\browser" - {a3af7dab-6b52-4c0b-98df-260819061ca8} 5592 "\\.\pipe\gecko-crash-server-pipe.5592" 1996dd70148 tab)
[task 2023-07-09T16:42:41.110Z] 16:42:41     INFO - ==> process 5592 launched child process 9088 ("Z:\task_168891755568424\build\application\firefox\firefox.exe" -contentproc --channel=3172 -childID 5 -isForBrowser -prefsHandle 2904 -prefMapHandle 2960 -prefsLen 23390 -prefMapSize 250944 -jsInitHandle 1332 -jsInitLen 286928 -parentBuildID 20230709161427 -win32kLockedDown -appDir "Z:\task_168891755568424\build\application\firefox\browser" - {38cafe6b-12db-42c3-9c08-aab7ecdeaf6d} 5592 "\\.\pipe\gecko-crash-server-pipe.5592" 19971228c48 tab)
[task 2023-07-09T16:42:41.111Z] 16:42:41     INFO - ==> process 5592 launched child process 7696 ("Z:\task_168891755568424\build\application\firefox\firefox.exe" -contentproc --channel=3964 -childID 6 -isForBrowser -prefsHandle 4084 -prefMapHandle 4088 -prefsLen 23390 -prefMapSize 250944 -jsInitHandle 1332 -jsInitLen 286928 -parentBuildID 20230709161427 -win32kLockedDown -appDir "Z:\task_168891755568424\build\application\firefox\browser" - {e876ad26-4809-4f80-b20c-206ed0655368} 5592 "\\.\pipe\gecko-crash-server-pipe.5592" 1996da9bf48 tab)
[task 2023-07-09T16:42:41.112Z] 16:42:41     INFO - ==> process 5592 launched child process 5964 ("Z:\task_168891755568424\build\application\firefox\firefox.exe" -contentproc --channel=4700 -parentBuildID 20230709161427 -sandboxingKind 0 -prefsHandle 4692 -prefMapHandle 4596 -prefsLen 31775 -prefMapSize 250944 -win32kLockedDown -appDir "Z:\task_168891755568424\build\application\firefox\browser" - {e0e7988d-94c8-49e6-8d2d-555d98a6c9ee} 5592 "\\.\pipe\gecko-crash-server-pipe.5592" 19973cfee48 utility)
[task 2023-07-09T16:42:41.113Z] 16:42:41     INFO - ==> process 5592 launched child process 6332 ("Z:\task_168891755568424\build\application\firefox\firefox.exe" -contentproc --channel=4920 -childID 7 -isForBrowser -prefsHandle 4912 -prefMapHandle 4868 -prefsLen 31775 -prefMapSize 250944 -jsInitHandle 1332 -jsInitLen 286928 -parentBuildID 20230709161427 -win32kLockedDown -appDir "Z:\task_168891755568424\build\application\firefox\browser" - {6c373e50-9ea1-47e9-975c-426d95d689af} 5592 "\\.\pipe\gecko-crash-server-pipe.5592" 19973cfbb48 tab)
[task 2023-07-09T16:42:41.113Z] 16:42:41     INFO - ==> process 5592 launched child process 8360 ("Z:\task_168891755568424\build\application\firefox\firefox.exe" -contentproc --channel=5264 -childID 8 -isForBrowser -prefsHandle 5260 -prefMapHandle 5272 -prefsLen 29056 -prefMapSize 250944 -jsInitHandle 1332 -jsInitLen 286928 -parentBuildID 20230709161427 -win32kLockedDown -appDir "Z:\task_168891755568424\build\application\firefox\browser" - {f7ffe082-64fd-4ede-8539-98af3fdf83ce} 5592 "\\.\pipe\gecko-crash-server-pipe.5592" 1995a58b248 tab)
[task 2023-07-09T16:42:41.114Z] 16:42:41     INFO - ==> process 5592 launched child process 8024 ("Z:\task_168891755568424\build\application\firefox\firefox.exe" -contentproc --channel=3172 -childID 9 -isForBrowser -prefsHandle 5864 -prefMapHandle 5868 -prefsLen 29295 -prefMapSize 250944 -jsInitHandle 1332 -jsInitLen 286928 -parentBuildID 20230709161427 -win32kLockedDown -appDir "Z:\task_168891755568424\build\application\firefox\browser" - {cafa2f2a-f171-41c2-ba9f-0ededbe9e311} 5592 "\\.\pipe\gecko-crash-server-pipe.5592" 199742fb548 tab)
[task 2023-07-09T16:42:41.115Z] 16:42:41     INFO - ==> process 5592 launched child process 692 ("Z:\task_168891755568424\build\application\firefox\firefox.exe" -contentproc --channel=4564 -childID 10 -isForBrowser -prefsHandle 4100 -prefMapHandle 3776 -prefsLen 29295 -prefMapSize 250944 -jsInitHandle 1332 -jsInitLen 286928 -parentBuildID 20230709161427 -win32kLockedDown -appDir "Z:\task_168891755568424\build\application\firefox\browser" - {d34806cd-57c5-4672-9889-08951fbdb0dd} 5592 "\\.\pipe\gecko-crash-server-pipe.5592" 19971327248 tab)
[task 2023-07-09T16:42:41.116Z] 16:42:41     INFO - ==> process 5592 launched child process 4552 ("Z:\task_168891755568424\build\application\firefox\firefox.exe" -contentproc --channel=5908 -childID 11 -isForBrowser -prefsHandle 5916 -prefMapHandle 5920 -prefsLen 29295 -prefMapSize 250944 -jsInitHandle 1332 -jsInitLen 286928 -parentBuildID 20230709161427 -win32kLockedDown -appDir "Z:\task_168891755568424\build\application\firefox\browser" - {4fd87c6a-20fa-4a46-8efa-3831739ad8fa} 5592 "\\.\pipe\gecko-crash-server-pipe.5592" 19971326948 tab)
[task 2023-07-09T16:42:41.117Z] 16:42:41     INFO - zombiecheck | Checking for orphan process with PID: 9088
[task 2023-07-09T16:42:41.117Z] 16:42:41     INFO - zombiecheck | Checking for orphan process with PID: 6376
[task 2023-07-09T16:42:41.117Z] 16:42:41     INFO - zombiecheck | Checking for orphan process with PID: 8360
[task 2023-07-09T16:42:41.118Z] 16:42:41     INFO - zombiecheck | Checking for orphan process with PID: 4552
[task 2023-07-09T16:42:41.118Z] 16:42:41     INFO - zombiecheck | Checking for orphan process with PID: 5964
[task 2023-07-09T16:42:41.119Z] 16:42:41     INFO - zombiecheck | Checking for orphan process with PID: 8880
[task 2023-07-09T16:42:41.119Z] 16:42:41     INFO - zombiecheck | Checking for orphan process with PID: 7696
[task 2023-07-09T16:42:41.119Z] 16:42:41     INFO - zombiecheck | Checking for orphan process with PID: 6332
[task 2023-07-09T16:42:41.120Z] 16:42:41     INFO - zombiecheck | Checking for orphan process with PID: 6836
[task 2023-07-09T16:42:41.120Z] 16:42:41     INFO - zombiecheck | Checking for orphan process with PID: 3412
[task 2023-07-09T16:42:41.121Z] 16:42:41     INFO - zombiecheck | Checking for orphan process with PID: 692
[task 2023-07-09T16:42:41.121Z] 16:42:41     INFO - zombiecheck | Checking for orphan process with PID: 8024
[task 2023-07-09T16:42:41.122Z] 16:42:41     INFO - zombiecheck | Checking for orphan process with PID: 3964
[task 2023-07-09T16:42:41.123Z] 16:42:41     INFO - mozcrash Copy/paste: Z:/task_168891755568424/fetches\minidump-stackwalk\minidump-stackwalk.exe --symbols-url=https://symbols.mozilla.org/ --cyborg=C:\Users\task_168891755568424\AppData\Local\Temp\tmpkr0av8vo\fd8302d2-4050-4b41-8375-16e247bf4ef3.trace C:\Users\task_168891755568424\AppData\Local\Temp\tmp44pa_m6w.mozrunner\minidumps\fd8302d2-4050-4b41-8375-16e247bf4ef3.dmp Z:\task_168891755568424\build\symbols
[task 2023-07-09T16:42:50.513Z] 16:42:50     INFO - mozcrash Saved minidump as Z:\task_168891755568424\build\blobber_upload_dir\fd8302d2-4050-4b41-8375-16e247bf4ef3.dmp
[task 2023-07-09T16:42:50.524Z] 16:42:50     INFO - mozcrash Saved app info as Z:\task_168891755568424\build\blobber_upload_dir\fd8302d2-4050-4b41-8375-16e247bf4ef3.extra
[task 2023-07-09T16:42:51.145Z] 16:42:51     INFO - PROCESS-CRASH | application crashed [@ None + None] | dom/events/test/pointerevents/test_wpt_pointerevent_attributes_nohover_pointers-manual.html 
[task 2023-07-09T16:42:51.145Z] 16:42:51     INFO - Process type: main
[task 2023-07-09T16:42:51.145Z] 16:42:51     INFO - Process pid: 5592
[task 2023-07-09T16:42:51.145Z] 16:42:51     INFO - Crash dump filename: C:\Users\task_168891755568424\AppData\Local\Temp\tmp44pa_m6w.mozrunner\minidumps\fd8302d2-4050-4b41-8375-16e247bf4ef3.dmp
[task 2023-07-09T16:42:51.145Z] 16:42:51     INFO - Operating system: Windows NT
[task 2023-07-09T16:42:51.151Z] 16:42:51     INFO -                   10.0.19045
[task 2023-07-09T16:42:51.151Z] 16:42:51     INFO - CPU: amd64
[task 2023-07-09T16:42:51.151Z] 16:42:51     INFO -      family 6 model 106 stepping 6
[task 2023-07-09T16:42:51.151Z] 16:42:51     INFO -      8 CPUs
[task 2023-07-09T16:42:51.151Z] 16:42:51     INFO - 
[task 2023-07-09T16:42:51.151Z] 16:42:51     INFO - Crash reason:  EXCEPTION_ACCESS_VIOLATION_READ
[task 2023-07-09T16:42:51.151Z] 16:42:51     INFO - Crash address: 0x48
[task 2023-07-09T16:42:51.151Z] 16:42:51     INFO - Crashing instruction: `mov rdx, qword [rax]`
[task 2023-07-09T16:42:51.151Z] 16:42:51     INFO - Memory accessed by instruction:
[task 2023-07-09T16:42:51.151Z] 16:42:51     INFO -   0. Address: 0x0000000000000048
[task 2023-07-09T16:42:51.151Z] 16:42:51     INFO -      Size: 8
[task 2023-07-09T16:42:51.151Z] 16:42:51     INFO - Process uptime: 27 seconds
[task 2023-07-09T16:42:51.151Z] 16:42:51     INFO - 
[task 2023-07-09T16:42:51.151Z] 16:42:51     INFO - Thread 0 MainThread (crashed)
[task 2023-07-09T16:42:51.151Z] 16:42:51     INFO -  0  0x14c9972eaaa
[task 2023-07-09T16:42:51.151Z] 16:42:51     INFO -      rax = 0x0000000000000048    rdx = 0x0000019968f67a10
[task 2023-07-09T16:42:51.151Z] 16:42:51     INFO -      rcx = 0x0000000000000001    rbx = 0xfffe000000000048
[task 2023-07-09T16:42:51.151Z] 16:42:51     INFO -      rsi = 0x0000000000000000    rdi = 0x0000019975b68ac0
[task 2023-07-09T16:42:51.151Z] 16:42:51     INFO -      rbp = 0x000000854d3fd080    rsp = 0x000000854d3fcff8
[task 2023-07-09T16:42:51.151Z] 16:42:51     INFO -       r8 = 0x0000000000000000     r9 = 0x00000000000001d8
[task 2023-07-09T16:42:51.151Z] 16:42:51     INFO -      r10 = 0x00000ffff309dbd2    r11 = 0xfffe000000000000
[task 2023-07-09T16:42:51.152Z] 16:42:51     INFO -      r12 = 0x0000000000000008    r13 = 0x000000854d3fdf30
[task 2023-07-09T16:42:51.152Z] 16:42:51     INFO -      r14 = 0x0000019969d28f44    r15 = 0x0000000000000006
[task 2023-07-09T16:42:51.152Z] 16:42:51     INFO -      rip = 0x0000014c9972eaaa
[task 2023-07-09T16:42:51.152Z] 16:42:51     INFO -     Found by: given as instruction pointer in context
[task 2023-07-09T16:42:51.152Z] 16:42:51     INFO -  1  xul.dll!_tailMerge_hid.dll + 0x5d27fe
[task 2023-07-09T16:42:51.152Z] 16:42:51     INFO -      rsp = 0x000000854d3fd130    rip = 0x00007fffa1925cb0
[task 2023-07-09T16:42:51.152Z] 16:42:51     INFO -     Found by: stack scanning
[task 2023-07-09T16:42:51.152Z] 16:42:51     INFO -  2  xul.dll!mozilla::dom::WrapObject<nsIURI>(JSContext*, nsIURI*, nsWrapperCache*, nsID const*, JS::MutableHandle<JS::Value>) [BindingUtils.h:38657e8c266f862cee349b298d0679f6617a8a63 : 1501 + 0xc]
[task 2023-07-09T16:42:51.152Z] 16:42:51     INFO -      rsp = 0x000000854d3fd160    rip = 0x00007fff99307468
[task 2023-07-09T16:42:51.152Z] 16:42:51     INFO -     Found by: stack scanning
[task 2023-07-09T16:42:51.152Z] 16:42:51     INFO -  3  0xfffe23acafd4f087
[task 2023-07-09T16:42:51.152Z] 16:42:51     INFO -      rbx = 0x0000000000000001    rsi = 0xfffe311792ee0538
[task 2023-07-09T16:42:51.152Z] 16:42:51     INFO -      rdi = 0xfff88000ffffffff    rsp = 0x000000854d3fd200
[task 2023-07-09T16:42:51.152Z] 16:42:51     INFO -      r14 = 0xfff9000000000001    r15 = 0xfffb14301bb34620
[task 2023-07-09T16:42:51.152Z] 16:42:51     INFO -      rip = 0xfffe23acafd4f088
[task 2023-07-09T16:42:51.152Z] 16:42:51     INFO -     Found by: call frame info
[task 2023-07-09T16:42:51.153Z] 16:42:51     INFO - 
[task 2023-07-09T16:42:51.153Z] 16:42:51     INFO - Thread 1 BrokerEvent
Duplicate of this bug: 1841675
Duplicate of this bug: 1842405

also these tests:
/encoding/legacy-mb-tchinese/big5/big5-encode-form-errors-pua.html?5001-6000 (wpt)
/encoding/legacy-mb-korean/euc-kr/euckr-encode-form-ks_c_5601-1987.html?7001-8000 (wpt)

Duplicate of this bug: 1842414
Duplicate of this bug: 1824330

Copying crash signatures from duplicate bugs.

Crash Signature: [@ None + None]

Update

There have been 33 failures within the last 7 days:

  • 5 failures on Android 7.0 x86-64 WebRender debug
  • 7 failures on Linux 18.04 x64 WebRender debug/opt
  • 5 failures on Linux 18.04 x64 WebRender Shippable opt
  • 3 failures on OS X 10.15 WebRender opt/debug
  • 4 failures on Windows 11 x86 22H2 MinGW WebRender debug
  • 2 failures on Windows 11 x64 22H2 MinGW WebRender debug
  • 7 failures on Windows 11 x64 22H2 WebRender debug/opt

Recent failure log: https://treeherder.mozilla.org/logviewer?job_id=425796060&repo=autoland&lineNumber=17885

Joel, do you know to whom we can assign this?
Thank you.

Flags: needinfo?(jmaher)
Whiteboard: [stockwell needswork:owner]

:jandem- looking for JS help here- going over what I see in the stacks, it often see xul.dll!js::PropMapTable::lookupInCache:

[task 2023-08-10T19:48:53.523Z] 19:48:53     INFO - Crash address: 0x304967a00008
[task 2023-08-10T19:48:53.523Z] 19:48:53     INFO - Crashing instruction: `mov rdx, qword [rdx + 0x20]`
[task 2023-08-10T19:48:53.523Z] 19:48:53     INFO - Memory accessed by instruction:
[task 2023-08-10T19:48:53.523Z] 19:48:53     INFO -   0. Address: 0x0000304967a00008
[task 2023-08-10T19:48:53.523Z] 19:48:53     INFO -      Size: 8
[task 2023-08-10T19:48:53.523Z] 19:48:53     INFO - Process uptime: 9 seconds
[task 2023-08-10T19:48:53.524Z] 19:48:53     INFO - 
[task 2023-08-10T19:48:53.524Z] 19:48:53     INFO - Thread 0 MainThread (crashed)
[task 2023-08-10T19:48:53.524Z] 19:48:53     INFO -  0  0xa28aa51447
[task 2023-08-10T19:48:53.524Z] 19:48:53     INFO -      rax = 0xfff9000000000001    rdx = 0x00003049679fffe8
[task 2023-08-10T19:48:53.524Z] 19:48:53     INFO -      rcx = 0xfff9000000000001    rbx = 0x000000a28a8b8b00
[task 2023-08-10T19:48:53.524Z] 19:48:53     INFO -      rsi = 0x000001f8a299a000    rdi = 0x000001f8a8259ee0
[task 2023-08-10T19:48:53.524Z] 19:48:53     INFO -      rbp = 0x000000ddc85fb0a8    rsp = 0x000000ddc85fb060
[task 2023-08-10T19:48:53.524Z] 19:48:53     INFO -       r8 = 0x0000000000000000     r9 = 0x000031a94ea30240
[task 2023-08-10T19:48:53.524Z] 19:48:53     INFO -      r10 = 0x000000ddc85faf40    r11 = 0xfffe000000000000
[task 2023-08-10T19:48:53.524Z] 19:48:53     INFO -      r12 = 0x0000000000000008    r13 = 0x000000ddc85fb880
[task 2023-08-10T19:48:53.524Z] 19:48:53     INFO -      r14 = 0x000001f8a6650be8    r15 = 0x0000000000000002
[task 2023-08-10T19:48:53.524Z] 19:48:53     INFO -      rip = 0x000000a28aa51447
[task 2023-08-10T19:48:53.524Z] 19:48:53     INFO -     Found by: given as instruction pointer in context
[task 2023-08-10T19:48:53.524Z] 19:48:53     INFO -  1  xul.dll!js::PropMapTable::lookupInCache(JS::PropertyKey, js::MapAndIndex<js::PropMap>*) const [PropMap.h:fae9c8496544fb4597f4094d95b81fdefec01628 : 343 + 0xc]
[task 2023-08-10T19:48:53.524Z] 19:48:53     INFO -      rsp = 0x000000ddc85fb110    rip = 0x00007ff8949f2739
[task 2023-08-10T19:48:53.524Z] 19:48:53     INFO -     Found by: stack scanning
[task 2023-08-10T19:48:53.524Z] 19:48:53     INFO - 

sometimes I see xul.dll!EnterJit:

[task 2023-08-12T02:03:25.971Z] 02:03:25     INFO - Crash reason:  EXCEPTION_ACCESS_VIOLATION_READ
[task 2023-08-12T02:03:25.972Z] 02:03:25     INFO - Crash address: 0x15d002c00008
[task 2023-08-12T02:03:25.972Z] 02:03:25     INFO - Crashing instruction: `mov rdx, qword [rdx + 0x20]`
[task 2023-08-12T02:03:25.972Z] 02:03:25     INFO - Memory accessed by instruction:
[task 2023-08-12T02:03:25.972Z] 02:03:25     INFO -   0. Address: 0x000015d002c00008
[task 2023-08-12T02:03:25.972Z] 02:03:25     INFO -      Size: 8
[task 2023-08-12T02:03:25.972Z] 02:03:25     INFO - Process uptime: 7 seconds
[task 2023-08-12T02:03:25.972Z] 02:03:25     INFO - 
[task 2023-08-12T02:03:25.972Z] 02:03:25     INFO - Thread 0 MainThread (crashed)
[task 2023-08-12T02:03:25.972Z] 02:03:25     INFO -  0  0xb182bd0837
[task 2023-08-12T02:03:25.972Z] 02:03:25     INFO -      rax = 0xfff9000000000001    rdx = 0x000015d002bfffe8
[task 2023-08-12T02:03:25.972Z] 02:03:25     INFO -      rcx = 0xfff9000000000001    rbx = 0x000000b182a18b00
[task 2023-08-12T02:03:25.972Z] 02:03:25     INFO -      rsi = 0x0000020c1d19a000    rdi = 0x0000020c28664f28
[task 2023-08-12T02:03:25.972Z] 02:03:25     INFO -      rbp = 0x000000827e5fb4c8    rsp = 0x000000827e5fb480
[task 2023-08-12T02:03:25.972Z] 02:03:25     INFO -       r8 = 0x0000000000000000     r9 = 0x00000bef2440f2e0
[task 2023-08-12T02:03:25.972Z] 02:03:25     INFO -      r10 = 0x000000827e5fb360    r11 = 0xfffe000000000000
[task 2023-08-12T02:03:25.973Z] 02:03:25     INFO -      r12 = 0x0000000000000008    r13 = 0x000000827e5fbca0
[task 2023-08-12T02:03:25.973Z] 02:03:25     INFO -      r14 = 0x0000020c1e897098    r15 = 0x0000000000000002
[task 2023-08-12T02:03:25.973Z] 02:03:25     INFO -      rip = 0x000000b182bd0837
[task 2023-08-12T02:03:25.973Z] 02:03:25     INFO -     Found by: given as instruction pointer in context
[task 2023-08-12T02:03:25.973Z] 02:03:25     INFO -  1  xul.dll!EnterJit(JSContext*, js::RunState&, unsigned char*) [Jit.cpp:9adf1877ada764a40d69001e7464d78efc4db218 : 104]
[task 2023-08-12T02:03:25.973Z] 02:03:25     INFO -     Found by: inlining
[task 2023-08-12T02:03:25.973Z] 02:03:25     INFO -  2  xul.dll!js::jit::MaybeEnterJit(JSContext*, js::RunState&) [Jit.cpp:9adf1877ada764a40d69001e7464d78efc4db218 : 213 + 0x3c4]
[task 2023-08-12T02:03:25.973Z] 02:03:25     INFO -      rsp = 0x000000827e5fb660    rip = 0x00007ffd08fa24e2
[task 2023-08-12T02:03:25.973Z] 02:03:25     INFO -     Found by: stack scanning
[task 2023-08-12T02:03:25.973Z] 02:03:25     INFO -  3  xul.dll!js::RunScript(JSContext*, js::RunState&) [Interpreter.cpp:9adf1877ada764a40d69001e7464d78efc4db218 : 448 + 0xa]
[task 2023-08-12T02:03:25.973Z] 02:03:25     INFO -      rbx = 0x0000000000000000    rsi = 0x0000020c1cc31100
[task 2023-08-12T02:03:25.973Z] 02:03:25     INFO -      rdi = 0x000000827e5fbb00    rbp = 0x0000000000000000
[task 2023-08-12T02:03:25.973Z] 02:03:25     INFO -      rsp = 0x000000827e5fba00    r12 = 0x000000827e5fbb30
[task 2023-08-12T02:03:25.973Z] 02:03:25     INFO -      r13 = 0x00007ffd0b6e76f8    r14 = 0x0000020c0f34a080
[task 2023-08-12T02:03:25.974Z] 02:03:25     INFO -      r15 = 0xaaaaaaaaaaaaaaaa    rip = 0x00007ffd08c1129d
[task 2023-08-12T02:03:25.974Z] 02:03:25     INFO -     Found by: call frame info

any thoughts on how to move forward here? This is out of my area of expertise.

Flags: needinfo?(jmaher) → needinfo?(jdemooij)

I looked at a minidump for one of the crashes in CI with the mov rdx, qword [rdx + 0x20] instruction.

Disassembling the code with get-minidump-instructions, I think I've tracked it down to bug 1824051. In D182382 (that has since been backed out) we have this to check for a resolve hook:

  loadPtr(Address(obj, JSObject::offsetOfShape()), scratch);
  loadPtr(Address(scratch, Shape::offsetOfBaseShape()), scratch);
  loadPtr(Address(scratch, offsetof(JSClass, cOps)), scratch);
  loadPtr(Address(scratch, offsetof(JSClassOps, resolve)), scratch);

We need to emit an extra load for BaseShape::clasp. We should also add a test for this.

Component: DOM: UI Events & Focus Handling → JavaScript Engine: JIT
Flags: needinfo?(jdemooij) → needinfo?(dothayer)

There are also very different crashes with the same signature, so this might be a bit of a catch-all for JIT and other weird crashes.

Attachment #9385770 - Attachment is obsolete: true
Flags: needinfo?(dothayer)
Status: NEW → RESOLVED
Closed: 8 months ago
Resolution: --- → INCOMPLETE
Status: RESOLVED → REOPENED
Resolution: INCOMPLETE → ---
Status: REOPENED → RESOLVED
Closed: 8 months ago5 months ago
Resolution: --- → INCOMPLETE
Status: RESOLVED → REOPENED
Resolution: INCOMPLETE → ---
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: