Closed Bug 675605 Opened 13 years ago Closed 12 years ago

intermittent crash in /tests/security/ssl/bugs/test_bug480509.html | Exited with code 1 (or -10) during test run [@nsXPCWrappedJS::cycleCollection::Traverse]

Categories

(Core :: Security, defect)

Product:
Core
Component:
Security
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED WORKSFORME

People

(Reporter: mak, Unassigned)

References

Details

(Keywords: intermittent-failure) 

http://tinderbox.mozilla.org/showlog.cgi?log=Mozilla-Inbound/1312200958.1312201134.7003.gz

2 INFO TEST-START | /tests/security/ssl/bugs/test_bug480509.html
WARNING: NS_ENSURE_TRUE(mState == STATE_TRANSFERRING) failed: file /builds/slave/m-in-osx-dbg/build/netwerk/base/src/nsSocketTransport2.cpp, line 1891
WARNING: NS_ENSURE_TRUE(mState == STATE_TRANSFERRING) failed: file /builds/slave/m-in-osx-dbg/build/netwerk/base/src/nsSocketTransport2.cpp, line 1891
++DOMWINDOW == 13 (0x20e3d8b8) [serial = 15] [outer = 0xc229230]
WARNING: NS_ENSURE_TRUE(mState == STATE_TRANSFERRING) failed: file /builds/slave/m-in-osx-dbg/build/netwerk/base/src/nsSocketTransport2.cpp, line 1891
WARNING: NS_ENSURE_TRUE(mState == STATE_TRANSFERRING) failed: file /builds/slave/m-in-osx-dbg/build/netwerk/base/src/nsSocketTransport2.cpp, line 1891
pldhash: for the table at address 0xfa7c68, the given entrySize of 48 probably favors chaining over double hashing.
++DOCSHELL 0xfa7c00 == 7
++DOMWINDOW == 14 (0x20ea59f8) [serial = 16] [outer = 0x0]
++DOMWINDOW == 15 (0x20ec1888) [serial = 17] [outer = 0x20ea59b0]
++DOMWINDOW == 16 (0x21d16118) [serial = 18] [outer = 0x20ea59b0]
3 INFO TEST-PASS | /tests/security/ssl/bugs/test_bug480509.html | Incorrect subject recognized - "CN = www.bank1.com\\00www.bad-guy.com\n" should equal "CN = www.bank1.com\\00www.bad-guy.com\n"
NEXT ERROR TEST-UNEXPECTED-FAIL | /tests/security/ssl/bugs/test_bug480509.html | Exited with code 1 during test run
INFO | automation.py | Application ran for: 0:00:27.591830
INFO | automation.py | Reading PID log: /var/folders/Xr/Xr--yJnSEY0U11ET5NZuMU+++TM/-Tmp-/tmpj9KIDfpidlog
PROCESS-CRASH | /tests/security/ssl/bugs/test_bug480509.html | application crashed (minidump found)
Crash dump filename: /var/folders/Xr/Xr--yJnSEY0U11ET5NZuMU+++TM/-Tmp-/tmpaoWoIQ/minidumps/69990F66-77E1-48FC-9C48-F8F16D6FE31C.dmp
Operating system: Mac OS X
                  10.5.8 9L31a
CPU: x86
     GenuineIntel family 6 model 23 stepping 10
     2 CPUs

Crash reason:  EXC_BAD_ACCESS / KERN_PROTECTION_FAILURE
Crash address: 0x0

Thread 2 (crashed)
 0  0x0
    eip = 0x00000000   esp = 0xb0102b8c   ebp = 0xb0102bb8   ebx = 0x0401cf14
    esi = 0x038f7ef4   edi = 0x00000000   eax = 0x21d535f8   ecx = 0x21d535f8
    edx = 0x00000000   efl = 0x00010286
    Found by: given as instruction pointer in context
 1  XUL!nsXPCWrappedJS::cycleCollection::Traverse [xpcwrappedjs.cpp:4bee2ba4ec8a : 58 + 0x11]
    eip = 0x038f7f1d   esp = 0xb0102bc0   ebp = 0xb0102c58
    Found by: previous frame's frame pointer
 2  XUL!GCGraphBuilder::Traverse [nsCycleCollector.cpp:4bee2ba4ec8a : 1619 + 0x24]
    eip = 0x040a877f   esp = 0xb0102c60   ebp = 0xb0102c88   ebx = 0x040a8723
    esi = 0x038f7ef4
    Found by: call frame info
 3  XUL!nsCycleCollector::MarkRoots [nsCycleCollector.cpp:4bee2ba4ec8a : 1864 + 0x11]
    eip = 0x040a87f8   esp = 0xb0102c90   ebp = 0xb0102cc8   ebx = 0x040abc22
    esi = 0x00000000
    Found by: call frame info
 4  XUL!nsCycleCollector::BeginCollection [nsCycleCollector.cpp:4bee2ba4ec8a : 2760 + 0x14]
    eip = 0x040a8990   esp = 0xb0102cd0   ebp = 0xb0102d98   ebx = 0x040abc22
    esi = 0x00000000
    Found by: call frame info
 5  XUL!nsCycleCollectorRunner::Run [nsCycleCollector.cpp:4bee2ba4ec8a : 3482 + 0x17]
    eip = 0x040abd29   esp = 0xb0102da0   ebp = 0xb0102de8   ebx = 0x040abc22
    esi = 0x00000000
    Found by: call frame info
 6  XUL!nsThread::ProcessNextEvent [nsThread.cpp:4bee2ba4ec8a : 631 + 0x18]
    eip = 0x0408da44   esp = 0xb0102df0   ebp = 0xb0102e98   ebx = 0x0408d6c6
    esi = 0x00000000
    Found by: call frame info
 7  XUL!NS_ProcessNextEvent_P [nsThreadUtils.cpp:4bee2ba4ec8a : 245 + 0x1f]
    eip = 0x0401c5e4   esp = 0xb0102ea0   ebp = 0xb0102ee8   ebx = 0x0401c56e
    esi = 0x00000000
    Found by: call frame info
 8  XUL!nsThread::ThreadFunc [nsThread.cpp:4bee2ba4ec8a : 272 + 0x12]
    eip = 0x0408e61f   esp = 0xb0102ef0   ebp = 0xb0102f48   ebx = 0x0408e525
    esi = 0x00000000
    Found by: call frame info
 9  libnspr4.dylib!_pt_root [ptthread.c:4bee2ba4ec8a : 187 + 0x10]
    eip = 0x0006cc8d   esp = 0xb0102f50   ebp = 0xb0102f78   ebx = 0x0006cb77
    esi = 0xb0103000
    Found by: call frame info
10  libSystem.B.dylib + 0x32154
    eip = 0x9384e155   esp = 0xb0102f80   ebp = 0xb0102fc8   ebx = 0x9384e028
    esi = 0xb0103000
    Found by: call frame info
11  libSystem.B.dylib + 0x32011
    eip = 0x9384e012   esp = 0xb0102fd0   ebp = 0xb0102fec
    Found by: previous frame's frame pointer
From a try run:

###!!! ASSERTION: You can't dereference a NULL nsCOMPtr with operator->().: 'mRawPtr != 0', file ../../dist/include/nsCOMPtr.h, line 809
nsCOMPtr<nsINodeInfo>::operator-> [nsCOMPtr.h:810]
nsINode::NodeName [nsINode.h:453]
nsGenericElement::GetTagName [content/base/src/nsGenericElement.cpp:2500]
nsSVGTextElement::GetTagName [content/svg/content/src/nsSVGTextElement.cpp:90]
nsXPCOMCycleCollectionParticipant::CheckForRightISupports [obj-firefox/xpcom/build/nsCycleCollectionParticipant.cpp:104]
nsXPCWrappedJS::cycleCollection::Traverse [js/src/xpconnect/src/xpcwrappedjs.cpp:58]
GCGraphBuilder::Traverse [xpcom/base/nsCycleCollector.cpp:1615]
nsCycleCollector::MarkRoots [xpcom/base/nsCycleCollector.cpp:1870]
nsCycleCollector::BeginCollection [xpcom/base/nsCycleCollector.cpp:2786]
nsCycleCollectorRunner::Run [xpcom/base/nsCycleCollector.cpp:3491]
nsThread::ProcessNextEvent [xpcom/threads/nsThread.cpp:631]
NS_ProcessNextEvent_P [obj-firefox/xpcom/build/nsThreadUtils.cpp:245]
nsThread::ThreadFunc [xpcom/threads/nsThread.cpp:271]
_pt_root [nsprpub/pr/src/pthreads/ptthread.c:190]
libSystem.B.dylib + 0x32155
libSystem.B.dylib + 0x32012
Depends on: 684711
OS: Windows 7 → All
Hardware: x86_64 → All
Summary: intermittent crash in /tests/security/ssl/bugs/test_bug480509.html | Exited with code 1 during test run [@nsXPCWrappedJS::cycleCollection::Traverse] → intermittent crash in /tests/security/ssl/bugs/test_bug480509.html | Exited with code 1 (or -10) during test run [@nsXPCWrappedJS::cycleCollection::Traverse]
Mass marking whiteboard:[orange] bugs WFM (to clean up TBPL bug suggestions) that:
* Haven't changed in > 6months
* Whose whiteboard contains none of the strings: {disabled,marked,random,fuzzy,todo,fails,failing,annotated,leave open,time-bomb}
* Passed a (quick) manual inspection of bug summary/whiteboard to ensure they weren't a false positive.

I've also gone through and searched for cases where the whiteboard wasn't labelled correctly after test disabling, by using attachment description & basic comment searches. However if the test for which this bug was about has in fact been disabled/annotated/..., please accept my apologies & reopen/mark the whiteboard appropriately so this doesn't get re-closed in the future (and please ping me via IRC or email so I can try to tweak the saved searches to avoid more edge cases).

Sorry for the spam! Filter on: #FFA500
Status: NEW → RESOLVED
Closed: 12 years ago
Resolution: --- → WORKSFORME
Whiteboard: [orange]
You need to log in before you can comment on or make changes to this bug.