Open Bug 1895810 Opened 2 years ago Updated 14 days ago

Intermittent crash/assertion-failure in IndexedDB tests, in nsAutoOwningThread::AssertCurrentThreadOwnsMe

Categories

(Core :: Storage: IndexedDB, defect)

Product:
Core
Component:
Storage: IndexedDB
Type:
defect

Tracking

()

People

(Reporter: dholbert, Unassigned)

References

Details

(Keywords: assertion, Whiteboard: dom-lws-bugdash-triage)

I hit a thread-safety assertion-failure in some IndexedDB mochitests in a try push (where my changes had nothing to do with IndexedDB or threading).

Log:
https://firefoxci.taskcluster-artifacts.net/U15DlSCGSqiw7m2FvL2Dmg/0/public/logs/live_backing.log

This happened to be an ASAN task so ASAN reports it using its own scary-sounding annotations:

AddressSanitizer:DEADLYSIGNAL
[...]
ERROR: AddressSanitizer: SEGV on unknown address 0x000000000001

...but really it was just a fatal assertion failure, which intentionally crashes, and ASAN is telling us that we crashed. :)

Here's the backtrace:

#0 0x7f18826977c2 in MOZ_Crash /builds/worker/workspace/obj-build/dist/include/mozilla/Assertions.h:317:3
#1 0x7f18826977c2 in nsAutoOwningThread::AssertCurrentThreadOwnsMe(char const*) const /builds/worker/checkouts/gecko/xpcom/base/nsISupportsImpl.cpp:43:5
#2 0x7f188bc2d27c in AssertOwnership<36> /builds/worker/workspace/obj-build/dist/include/nsISupportsImpl.h:59:5
#3 0x7f188bc2d27c in Release /builds/worker/checkouts/gecko/dom/indexedDB/ActorsParent.cpp:4708:3
#4 0x7f188bc2d27c in Release /builds/worker/workspace/obj-build/dist/include/mozilla/RefPtr.h:49:40
#5 0x7f188bc2d27c in Release /builds/worker/workspace/obj-build/dist/include/mozilla/RefPtr.h:409:36
#6 0x7f188bc2d27c in ~RefPtr /builds/worker/workspace/obj-build/dist/include/mozilla/RefPtr.h:80:7
#7 0x7f188bc2d27c in mozilla::dom::indexedDB::(anonymous namespace)::Factory::~Factory() /builds/worker/checkouts/gecko/dom/indexedDB/ActorsParent.cpp:8783:52
#8 0x7f188bc2d396 in Release /builds/worker/workspace/obj-build/dist/include/mozilla/dom/SafeRefPtr.h:81:7
#9 0x7f188bc2d396 in mozilla::dom::indexedDB::(anonymous namespace)::Factory::Release() /builds/worker/checkouts/gecko/dom/indexedDB/ActorsParent.cpp:2011:3
#10 0x7f188bc458f8 in ~FactoryRequestOp /builds/worker/checkouts/gecko/dom/indexedDB/ActorsParent.cpp:3119:7
#11 0x7f188bc458f8 in mozilla::dom::indexedDB::(anonymous namespace)::OpenDatabaseOp::~OpenDatabaseOp() /builds/worker/checkouts/gecko/dom/indexedDB/ActorsParent.cpp:3167:63
#12 0x7f188bc4596d in mozilla::dom::indexedDB::(anonymous namespace)::OpenDatabaseOp::~OpenDatabaseOp() /builds/worker/checkouts/gecko/dom/indexedDB/ActorsParent.cpp:3167:30
#13 0x7f1882881204 in mozilla::Runnable::Release() /builds/worker/checkouts/gecko/xpcom/threads/nsThreadUtils.cpp:66:1
#14 0x7f18828a02e7 in Release /builds/worker/workspace/obj-build/dist/include/mozilla/RefPtr.h:49:40
#15 0x7f18828a02e7 in assign_assuming_AddRef /builds/worker/workspace/obj-build/dist/include/nsCOMPtr.h:322:7
#16 0x7f18828a02e7 in operator= /builds/worker/workspace/obj-build/dist/include/nsCOMPtr.h:597:5
#17 0x7f18828a02e7 in nsThread::ProcessNextEvent(bool, bool*) /builds/worker/checkouts/gecko/xpcom/threads/nsThread.cpp:1210:13
#18 0x7f18828ad9da in NS_ProcessNextEvent(nsIThread*, bool) /builds/worker/checkouts/gecko/xpcom/threads/nsThreadUtils.cpp:480:10
#19 0x7f18843da2aa in mozilla::ipc::MessagePumpForNonMainThreads::Run(base::MessagePump::Delegate*) /builds/worker/checkouts/gecko/ipc/glue/MessagePump.cpp:330:5
#20 0x7f188421d39a in RunInternal /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:370:10
#21 0x7f188421d39a in RunHandler /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:363:3
#22 0x7f188421d39a in MessageLoop::Run() /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:345:3
#23 0x7f188289692e in nsThread::ThreadFunc(void*) /builds/worker/checkouts/gecko/xpcom/threads/nsThread.cpp:370:10
#24 0x7f18aabee11f in _pt_root /builds/worker/checkouts/gecko/nsprpub/pr/src/pthreads/ptthread.c:201:5
#25 0x56102d79860a in asan_thread_start(void*) /builds/worker/fetches/llvm-project/compiler-rt/lib/asan/asan_interceptors.cpp:225:31
#26 0x7f18aa9166da in start_thread /tmp/glibc/nptl/pthread_create.c:463
#27 0x7f18a96d9a3e in __clone /tmp/glibc/misc/../sysdeps/unix/sysv/linux/x86_64/clone.S:95
See Also: → 1728042
Severity: -- → S3
Whiteboard: dom-lws-bugdash-triage

This might be the same issue as bug 1892875.

You need to log in before you can comment on or make changes to this bug.