867196 - Intermittent 609560-1.xhtml,795892-1.html | Exited with code -6 during test run ("firefox-bin(382,0x7fff7106ecc0) malloc: *** error for object 0x129efa408: incorrect checksum for freed object - object was probably modified after being freed.")

Status: RESOLVED WORKSFORME

(Core :: DOM: Core & HTML, defect)

Description

[Ed Morley [:emorley]]

Rev4 MacOSX Snow Leopard 10.6 mozilla-central debug test crashtest on 2013-04-30 07:09:50 PDT for push 3fb2370f4871

slave: talos-r4-snow-074

https://tbpl.mozilla.org/php/getParsedLog.php?id=22412038&tree=Mozilla-Central

{
07:13:53     INFO -  REFTEST TEST-START | file:///Users/cltbld/talos-slave/test/build/tests/reftest/tests/dom/base/crashtests/601247.html | 521 / 2354 (22%)
07:13:53     INFO -  ++DOMWINDOW == 38 (0x12d103450) [serial = 1200] [outer = 0x10c526800]
07:13:53     INFO -  --DOCSHELL 0x12b573c50 == 3 [id = 71]
07:13:53     INFO -  REFTEST TEST-PASS | file:///Users/cltbld/talos-slave/test/build/tests/reftest/tests/dom/base/crashtests/601247.html | (LOAD ONLY)
07:13:53     INFO -  REFTEST INFO | Loading a blank page
07:13:53     INFO -  ++DOMWINDOW == 39 (0x12b573d00) [serial = 1201] [outer = 0x10c526800]
07:13:53     INFO -  REFTEST TEST-START | file:///Users/cltbld/talos-slave/test/build/tests/reftest/tests/dom/base/crashtests/609560-1.xhtml | 522 / 2354 (22%)
07:13:53     INFO -  ++DOMWINDOW == 40 (0x128038d40) [serial = 1202] [outer = 0x10c526800]
07:13:53     INFO -  ++DOCSHELL 0x14936ed30 == 4 [id = 73]
07:13:53     INFO -  ++DOMWINDOW == 41 (0x12b83af60) [serial = 1203] [outer = 0x0]
07:13:53     INFO -  WARNING: Subdocument container has no frame: file ../../../layout/base/nsDocumentViewer.cpp, line 2381
07:13:53     INFO -  ++DOMWINDOW == 42 (0x12b208840) [serial = 1204] [outer = 0x12b83af60]
07:13:53     INFO -  WARNING: NS_ENSURE_SUCCESS(rv, rv) failed with result 0x80040111: file ../../../../content/base/src/nsFrameLoader.cpp, line 375
07:13:53     INFO -  WARNING: failed to load URL: file ../../../../../content/html/content/src/nsGenericHTMLFrameElement.cpp, line 166
07:13:53     INFO -  firefox-bin(382,0x7fff7106ecc0) malloc: *** error for object 0x129efa408: incorrect checksum for freed object - object was probably modified after being freed.
07:13:53     INFO -  *** set a breakpoint in malloc_error_break to debug
07:13:57  WARNING -  TEST-UNEXPECTED-FAIL | file:///Users/cltbld/talos-slave/test/build/tests/reftest/tests/dom/base/crashtests/609560-1.xhtml | Exited with code -6 during test run
}

See also bug 824046.

Comment 1

[Mats Palmgren (inactive)]

"object was probably modified after being freed" sounds like possibly sec-critical.

Comment 2

[Daniel Veditz [:dveditz]]

Christian: when you did ASAN runs of our test files did you ever see a problem with this test? You probably only ran that on Linux, but if it's a nsGenericHTMLFrameElement it might trigger there too.

Comment 3

[Ryan VanderMeulen [:RyanVM]]

https://tbpl.mozilla.org/php/getParsedLog.php?id=22634557&tree=Mozilla-Inbound

Comment 4

[Christian Holler (:decoder)]

(In reply to Daniel Veditz [:dveditz] from comment #2)
> Christian: when you did ASAN runs of our test files did you ever see a
> problem with this test? You probably only ran that on Linux, but if it's a
> nsGenericHTMLFrameElement it might trigger there too.

Nope, I haven't seen any problems here. I'll try to run the tests locally though, maybe something shows up.

Comment 5

[Andrew McCreight [:mccr8]]

I'm going to mark this sec-other until it happens more than once in two weeks.

Comment 6

[Ed Morley [:emorley]]

(OrangeWFM for bugs not modified in > 2 months)