Closed Bug 937897 Opened 11 years ago Closed 10 years ago

Intermittent ASAN command timed out: 7200 seconds elapsed, attempting to kill | due to ERROR: AddressSanitizer: heap-use-after-free on address 0x60300013edd8 at pc 0x7f4534ba7fdd bp 0x7fffcb5952f0 sp 0x7fffcb5952e8 in the log

Categories

(Add-on SDK Graveyard :: General, defect, P2)

Product:
Add-on SDK Graveyard
Component:
General
Platform:
x86_64
Linux
Type:
defect

Tracking

(Not tracked)

Status:
RESOLVED WONTFIX

People

(Reporter: KWierso, Unassigned)

Details

(Keywords: intermittent-failure) 

https://tbpl.mozilla.org/php/getParsedLog.php?id=30497689&full=1&branch=mozilla-inbound#error0
slave: tst-linux64-ec2-146


2 of 2 tests passed.
Total time: 9.257195 seconds
Program terminated successfully.
Testing l10n...
Using binary at 'firefox/firefox-bin'.
Using profile at '/tmp/tmpXw78nc.mozrunner'.
Xlib:  extension "RANDR" missing on display ":0".
=================================================================
==2383==ERROR: AddressSanitizer: heap-use-after-free on address 0x60300013edd8 at pc 0x7f4534ba7fdd bp 0x7fffcb5952f0 sp 0x7fffcb5952e8
READ of size 8 at 0x60300013edd8 thread T0
    #0 0x7f4534ba7fdc (/builds/slave/test/build/firefox/libxul.so+0x30eefdc)
    #1 0x7f4534b9bd12 (/builds/slave/test/build/firefox/libxul.so+0x30e2d12)
    #2 0x7f4534b9b731 (/builds/slave/test/build/firefox/libxul.so+0x30e2731)
    #3 0x7f4534b8e94c (/builds/slave/test/build/firefox/libxul.so+0x30d594c)
    #4 0x7f4534b8dde5 (/builds/slave/test/build/firefox/libxul.so+0x30d4de5)
    #5 0x7f4534b8e559 (/builds/slave/test/build/firefox/libxul.so+0x30d5559)
    #6 0x7f4532ef38f7 (/builds/slave/test/build/firefox/libxul.so+0x143a8f7)
    #7 0x7f45334698e7 (/builds/slave/test/build/firefox/libxul.so+0x19b08e7)
    #8 0x7f4533469a29 (/builds/slave/test/build/firefox/libxul.so+0x19b0a29)
    #9 0x7f4532e736a5 (/builds/slave/test/build/firefox/libxul.so+0x13ba6a5)
    #10 0x7f4532e71e03 (/builds/slave/test/build/firefox/libxul.so+0x13b8e03)
    #11 0x7f45373ea274 (/builds/slave/test/build/firefox/libxul.so+0x5931274)
    #12 0x7f453741e114 (/builds/slave/test/build/firefox/libxul.so+0x5965114)
    #13 0x7f453734a371 (/builds/slave/test/build/firefox/libxul.so+0x5891371)
    #14 0x7f4535e9b511 (/builds/slave/test/build/firefox/libxul.so+0x43e2511)
    #15 0x7f453751be63 (/builds/slave/test/build/firefox/libxul.so+0x5a62e63)
    #16 0x7f4535c73bac (/builds/slave/test/build/firefox/libxul.so+0x41babac)
    #17 0x7f45356787ce (/builds/slave/test/build/firefox/libxul.so+0x3bbf7ce)
    #18 0x7f4532baf185 (/builds/slave/test/build/firefox/libxul.so+0x10f6185)
    #19 0x7f4532bb00ba (/builds/slave/test/build/firefox/libxul.so+0x10f70ba)
    #20 0x7f4532bb0feb (/builds/slave/test/build/firefox/libxul.so+0x10f7feb)
    #21 0x459dcd (/builds/slave/test/build/firefox/firefox-bin+0x459dcd)
    #22 0x7f454292f76c (/lib/x86_64-linux-gnu/libc.so.6+0x2176c)
    #23 0x45934c (/builds/slave/test/build/firefox/firefox-bin+0x45934c)
0x60300013edd8 is located 24 bytes inside of 32-byte region [0x60300013edc0,0x60300013ede0)
freed by thread T15 (DOM Worker) here:
    #0 0x44653b (/builds/slave/test/build/firefox/firefox-bin+0x44653b)
    #1 0x7f453c8f765e (/builds/slave/test/build/firefox/libmozalloc.so+0x165e)
previously allocated by thread T15 (DOM Worker) here:
    #0 0x44653b (/builds/slave/test/build/firefox/firefox-bin+0x44653b)
    #1 0x7f453c8f765e (/builds/slave/test/build/firefox/libmozalloc.so+0x165e)
Thread T15 (DOM Worker) created by T0 here:
    #0 0x437801 (/builds/slave/test/build/firefox/firefox-bin+0x437801)
    #1 0x7f45403d2b35 (/builds/slave/test/build/firefox/libnspr4.so+0x6ab35)
    #2 0x7f45403d2687 (/builds/slave/test/build/firefox/libnspr4.so+0x6a687)
Shadow bytes around the buggy address:
  0x0c068001fd60: fd fd fa fa 00 00 00 00 fa fa 00 00 00 00 fa fa
  0x0c068001fd70: 00 00 00 00 fa fa 00 00 00 fa fa fa fd fd fd fa
  0x0c068001fd80: fa fa fd fd fd fd fa fa 00 00 00 00 fa fa 00 00
  0x0c068001fd90: 00 00 fa fa 00 00 00 fa fa fa 00 00 00 00 fa fa
  0x0c068001fda0: 00 00 00 fa fa fa 00 00 00 00 fa fa 00 00 00 00
=>0x0c068001fdb0: fa fa 00 00 00 00 fa fa fd fd fd[fd]fa fa fd fd
  0x0c068001fdc0: fd fa fa fa fd fd fd fd fa fa fd fd fd fd fa fa
  0x0c068001fdd0: 00 00 00 00 fa fa fd fd fd fd fa fa 00 00 00 00
  0x0c068001fde0: fa fa 00 00 00 00 fa fa 00 00 00 00 fa fa 00 00
  0x0c068001fdf0: 00 00 fa fa 00 00 00 00 fa fa 00 00 00 00 fa fa
  0x0c068001fe00: 00 00 00 00 fa fa 00 00 00 fa fa fa 00 00 00 fa
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:           00
  Partially addressable: 01 02 03 04 05 06 07 
  Heap left redzone:     fa
  Heap right redzone:    fb
  Freed heap region:     fd
  Stack left redzone:    f1
  Stack mid redzone:     f2
  Stack right redzone:   f3
  Stack partial redzone: f4
  Stack after return:    f5
  Stack use after scope: f8
  Global redzone:        f9
  Global init order:     f6
  Poisoned by user:      f7
  ASan internal:         fe
==2383==ABORTING

command timed out: 7200 seconds elapsed, attempting to kill
process killed by signal 9
program finished with exit code -1
elapsedTime=7200.029373
We haven't seen this error in > 2 months.
Status: NEW → RESOLVED
Closed: 10 years ago
Resolution: --- → WONTFIX
You need to log in before you can comment on or make changes to this bug.