Closed Bug 973307 Opened 10 years ago Closed 10 years ago

Intermittent b2g desktop test_InstanceOf.html,test_writable-replaceable.html,test_window_indexing.html | application crashed [@ PL_DHashTableEnumerate(PLDHashTable*, PLDHashOperator (*)(PLDHashTable*, PLDHashEntryHdr*, unsigned int, void*), void*)]

Categories

(Core :: DOM: Core & HTML, defect)

Product:
Core
Component:
DOM: Core & HTML
Platform:
All
Linux
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED FIXED
Milestone:
mozilla30
Tracking Flags:
Tracking Status
firefox28 --- unaffected
firefox29 --- unaffected
firefox30 --- fixed
firefox-esr24 --- unaffected
b2g-v1.3 --- unaffected
b2g-v1.4 --- fixed

People

(Reporter: philor, Assigned: baku)

References

Details

(Keywords: crash, intermittent-failure) 

Vaguely interesting in that these three failure happened at about the same time, on the same things being merged from m-c to fx-team and b2g-inbound, on three of the four Linux desktop builds on those merges. The one build which didn't hit it didn't claim to be a clobber; two of the three which did did claim to be, though "purged clobber" is the most suspicious of the possible claims. Retriggered runs on the original builds did not crash; retriggered clobbered builds produced runs which did not crash.

https://tbpl.mozilla.org/php/getParsedLog.php?id=34753044&tree=Fx-Team
https://tbpl.mozilla.org/php/getParsedLog.php?id=34752816&tree=Fx-Team
https://tbpl.mozilla.org/php/getParsedLog.php?id=34753230&tree=B2g-Inbound
b2g_ubuntu64_vm b2g-inbound opt test mochitest-1 on 2014-02-15 20:32:24 PST for push ea3daa796d70
slave: tst-linux64-spot-489

20:40:45     INFO -  5489 INFO TEST-START | /tests/dom/bindings/test/test_InstanceOf.html
20:40:45  WARNING -  TEST-UNEXPECTED-FAIL | /tests/dom/bindings/test/test_InstanceOf.html | application terminated with exit code 11
20:40:45     INFO -  INFO | runtests.py | Application ran for: 0:06:34.497199
20:40:45     INFO -  INFO | zombiecheck | Reading PID log: /tmp/tmp2Jy1H5pidlog
20:40:45     INFO -  ==> process 2334 launched child process 2376
20:40:45     INFO -  ==> process 2334 launched child process 2418
20:40:45     INFO -  INFO | zombiecheck | Checking for orphan process with PID: 2376
20:40:45     INFO -  INFO | zombiecheck | Checking for orphan process with PID: 2418
20:40:45     INFO -  mozcrash INFO | Downloading symbols from: https://ftp-ssl.mozilla.org/pub/mozilla.org/b2g/tinderbox-builds/b2g-inbound-linux64_gecko/1392518149/en-US/b2g-30.0a1.en-US.linux-x86_64.crashreporter-symbols.zip
20:40:56  WARNING -  PROCESS-CRASH | /tests/dom/bindings/test/test_InstanceOf.html | application crashed [@ PL_DHashTableEnumerate(PLDHashTable*, PLDHashOperator (*)(PLDHashTable*, PLDHashEntryHdr*, unsigned int, void*), void*)]
20:40:56     INFO -  Crash dump filename: /tmp/tmp9bVOcK/minidumps/5d4b23c0-eec9-dc46-6de8b8f6-3b22bbc4.dmp
20:40:56     INFO -  Operating system: Linux
20:40:56     INFO -                    0.0.0 Linux 3.2.0-23-generic #36-Ubuntu SMP Tue Apr 10 20:39:51 UTC 2012 x86_64
20:40:56     INFO -  CPU: amd64
20:40:56     INFO -       family 6 model 45 stepping 7
20:40:56     INFO -       1 CPU
20:40:56     INFO -  Crash reason:  SIGSEGV
20:40:56     INFO -  Crash address: 0x40
20:40:56     INFO -  Thread 0 (crashed)
20:40:56     INFO -   0  libxul.so!PL_DHashTableEnumerate(PLDHashTable*, PLDHashOperator (*)(PLDHashTable*, PLDHashEntryHdr*, unsigned int, void*), void*) [pldhash.cpp:ea3daa796d70 : 625 + 0x0]
20:40:56     INFO -      rbx = 0x0000000000000001   r12 = 0x0000000000000000
20:40:56     INFO -      r13 = 0x00007f16674d1ce0   r14 = 0x0000000000000030
20:40:56     INFO -      r15 = 0x0000000000000001   rip = 0x00007f1666c6c922
20:40:56     INFO -      rsp = 0x00007fff138bbdc0   rbp = 0x00007fff138bbf00
20:40:56     INFO -      Found by: given as instruction pointer in context
20:40:56     INFO -   1  libxul.so!mozilla::dom::URLSearchParams::Serialize(nsAString_internal&) const [nsBaseHashtable.h:ea3daa796d70 : 175 + 0x4]
20:40:56     INFO -      rbx = 0x00007fff138bbe38   r12 = 0x0000000000000000
20:40:56     INFO -      r13 = 0x00007f164044b728   r14 = 0x00007fff138bc601
20:40:56     INFO -      r15 = 0x0000000000000001   rip = 0x00007f16674d22ab
20:40:56     INFO -      rsp = 0x00007fff138bbe20   rbp = 0x00007fff138bbf00
20:40:56     INFO -      Found by: call frame info
20:40:56     INFO -   2  libxul.so!mozilla::dom::URL::URLSearchParamsUpdated() [URL.cpp:ea3daa796d70 : 307 + 0xb]
20:40:56     INFO -      rbx = 0x00007f163ff60f40   r12 = 0x00007f163ea3dc80
20:40:56     INFO -      r13 = 0x00007f164044b728   r14 = 0x00007fff138bc601
20:40:56     INFO -      r15 = 0x0000000000000001   rip = 0x00007f16674d17cd
20:40:56     INFO -      rsp = 0x00007fff138bbf00   rbp = 0x00007f164044b728
20:40:56     INFO -      Found by: call frame info
20:40:56     INFO -   3  libxul.so!mozilla::dom::URLSearchParams::NotifyObservers(mozilla::dom::URLSearchParamsObserver*) [URLSearchParams.cpp:ea3daa796d70 : 347 + 0x5]
20:40:56     INFO -      rbx = 0x0000000000000000   r12 = 0x00007f163ea3dc80
20:40:56     INFO -      r13 = 0x00007f164044b728   r14 = 0x00007fff138bc601
20:40:56     INFO -      r15 = 0x0000000000000001   rip = 0x00007f16674d22ea
20:40:56     INFO -      rsp = 0x00007fff138bbfb0   rbp = 0x00007f164044b728
20:40:56     INFO -      Found by: call frame info
20:40:56     INFO -   4  libxul.so!mozilla::dom::URLSearchParams::ParseInput(nsACString_internal const&, mozilla::dom::URLSearchParamsObserver*) [URLSearchParams.cpp:ea3daa796d70 : 111 + 0xa]
20:40:56     INFO -      rbx = 0x00007fff138bc3b9   r12 = 0x00007f163ea3dc80
20:40:56     INFO -      r13 = 0x00007f164044b728   r14 = 0x00007fff138bc601
20:40:56     INFO -      r15 = 0x0000000000000001   rip = 0x00007f16674d2887
20:40:56     INFO -      rsp = 0x00007fff138bbfd0   rbp = 0x00007fff138bc050
20:40:56     INFO -      Found by: call frame info
20:40:56     INFO -   5  libxul.so!mozilla::dom::Link::UpdateURLSearchParams() [Link.cpp:ea3daa796d70 : 627 + 0x10]
20:40:56     INFO -      rbx = 0x00007f164044b728   r12 = 0x0000000000000001
20:40:56     INFO -      r13 = 0x00007f163ed95100   r14 = 0x00007fff138bc601
20:40:56     INFO -      r15 = 0x0000000000000001   rip = 0x00007f16676550ed
20:40:56     INFO -      rsp = 0x00007fff138bc380   rbp = 0x0000000000000001
20:40:56     INFO -      Found by: call frame info
20:40:56     INFO -   6  libxul.so!mozilla::dom::Link::ResetLinkState(bool, bool) [Link.cpp:ea3daa796d70 : 488 + 0x7]
20:40:56     INFO -      rbx = 0x00007f164044b728   r12 = 0x0000000000000001
20:40:56     INFO -      r13 = 0x00007f163ed95100   r14 = 0x00007fff138bc601
20:40:56     INFO -      r15 = 0x0000000000000001   rip = 0x00007f166765518a
20:40:56     INFO -      rsp = 0x00007fff138bc400   rbp = 0x0000000000000001
20:40:56     INFO -      Found by: call frame info
20:40:56     INFO -   7  libxul.so!mozilla::dom::HTMLAnchorElement::UnbindFromTree(bool, bool) [HTMLAnchorElement.cpp:ea3daa796d70 : 179 + 0x1b]
20:40:56     INFO -      rbx = 0x00007f164044b690   r12 = 0x0000000000000001
20:40:56     INFO -      r13 = 0x00007f163ed95100   r14 = 0x00007fff138bc601
20:40:56     INFO -      r15 = 0x0000000000000001   rip = 0x00007f16676e8313
20:40:56     INFO -      rsp = 0x00007fff138bc440   rbp = 0x00007f164044b728
20:40:56     INFO -      Found by: call frame info
20:40:56     INFO -   8  libxul.so!mozilla::dom::Element::UnbindFromTree(bool, bool) [Element.cpp:ea3daa796d70 : 1351 + 0xa]
20:40:56     INFO -      rbx = 0x00007f163ed950c0   r12 = 0x000000000000000a
20:40:56     INFO -      r13 = 0x00007f163ed95130   r14 = 0x00007fff138bc601
20:40:56     INFO -      r15 = 0x0000000000000001   rip = 0x00007f166764b0aa
20:40:56     INFO -      rsp = 0x00007fff138bc470   rbp = 0x000000000000000f
20:40:56     INFO -      Found by: call frame info
20:40:56     INFO -   9  libxul.so!nsGenericHTMLElement::UnbindFromTree(bool, bool) [nsGenericHTMLElement.cpp:ea3daa796d70 : 645 + 0xf]
20:40:56     INFO -      rbx = 0x00007f163ed950c0   r12 = 0x0000000000000000
20:40:56     INFO -      r13 = 0x00007f163ea23270   r14 = 0x00007fff138bc601
20:40:56     INFO -      r15 = 0x0000000000000001   rip = 0x00007f1667735cdd
20:40:56     INFO -      rsp = 0x00007fff138bc4e0   rbp = 0x0000000000000001
20:40:56     INFO -      Found by: call frame info
20:40:56     INFO -  10  libxul.so!mozilla::dom::Element::UnbindFromTree(bool, bool) [Element.cpp:ea3daa796d70 : 1351 + 0xa]
20:40:56     INFO -      rbx = 0x00007f163ea23200   r12 = 0x0000000000000004
20:40:56     INFO -      r13 = 0x00007f163ea23270   r14 = 0x00007fff138bc601
20:40:56     INFO -      r15 = 0x0000000000000001   rip = 0x00007f166764b0aa
20:40:56     INFO -      rsp = 0x00007fff138bc510   rbp = 0x0000000000000004
20:40:56     INFO -      Found by: call frame info
20:40:56     INFO -  11  libxul.so!nsGenericHTMLElement::UnbindFromTree(bool, bool) [nsGenericHTMLElement.cpp:ea3daa796d70 : 645 + 0xf]
20:40:56     INFO -      rbx = 0x00007f163ea23200   r12 = 0x00007f163ea30b01
20:40:56     INFO -      r13 = 0x00007fff138bc601   r14 = 0x00007fff138bc640
20:40:56     INFO -      r15 = 0x0000000000000001   rip = 0x00007f1667735cdd
20:40:56     INFO -      rsp = 0x00007fff138bc580   rbp = 0x00007f163ea30801
20:40:56     INFO -      Found by: call frame info
20:40:56     INFO -  12  libxul.so!mozilla::dom::HTMLSharedElement::UnbindFromTree(bool, bool) [HTMLSharedElement.cpp:ea3daa796d70 : 290 + 0xb]
20:40:56     INFO -      rbx = 0x00007f163ea23200   r12 = 0x00007f163ea30b01
20:40:56     INFO -      r13 = 0x00007fff138bc601   r14 = 0x00007fff138bc640
20:40:56     INFO -      r15 = 0x0000000000000001   rip = 0x00007f166771e7a9
20:40:56     INFO -      rsp = 0x00007fff138bc5b0   rbp = 0x00007f163ea30800
20:40:56     INFO -      Found by: call frame info
20:40:56     INFO -  13  libxul.so!nsDocument::cycleCollection::Unlink(void*) [nsDocument.cpp:ea3daa796d70 : 1904 + 0x1f]
20:40:56     INFO -      rbx = 0x00007f163ea30800   r12 = 0x00007f163ea30b68
20:40:56     INFO -      r13 = 0x00007fff138bc618   r14 = 0x00007fff138bc640
20:40:56     INFO -      r15 = 0x0000000000000001   rip = 0x00007f166762e0c1
20:40:56     INFO -      rsp = 0x00007fff138bc5e0   rbp = 0x0000000000000001
20:40:56     INFO -      Found by: call frame info
20:40:56     INFO -  14  libxul.so!nsHTMLDocument::cycleCollection::Unlink(void*) [nsHTMLDocument.cpp:ea3daa796d70 : 202 + 0x7]
20:40:56     INFO -      rbx = 0x00007f163ea30800   r12 = 0x00000000000000d7
20:40:56     INFO -      r13 = 0x00007fff138bc618   r14 = 0x00007fff138bc640
20:40:56     INFO -      r15 = 0x0000000000000001   rip = 0x00007f1667749f57
20:40:56     INFO -      rsp = 0x00007fff138bc600   rbp = 0x0000000000000d5a
20:40:56     INFO -      Found by: call frame info
20:40:56     INFO -  15  libxul.so!nsCycleCollector::CollectWhite() [nsCycleCollector.cpp:ea3daa796d70 : 2906 + 0xc]
20:40:56     INFO -      rbx = 0x00007f165e298000   r12 = 0x00000000000000d7
20:40:56     INFO -      r13 = 0x00007fff138bc618   r14 = 0x00007fff138bc640
20:40:56     INFO -      r15 = 0x0000000000000001   rip = 0x00007f1666c7dbbd
20:40:56     INFO -      rsp = 0x00007fff138bc610   rbp = 0x0000000000000d5a
20:40:56     INFO -      Found by: call frame info
Or it could just be yet another grindingly constant b2g failure, there's that possibility too.
Can you look at this Andrea?
Flags: needinfo?(amarchesini)
Summary: Intermittent b2g desktop test_InstanceOf.html | application crashed [@ PL_DHashTableEnumerate(PLDHashTable*, PLDHashOperator (*)(PLDHashTable*, PLDHashEntryHdr*, unsigned int, void*), void*)] → Intermittent b2g desktop test_InstanceOf.html,test_writable-replaceable.html | application crashed [@ PL_DHashTableEnumerate(PLDHashTable*, PLDHashOperator (*)(PLDHashTable*, PLDHashEntryHdr*, unsigned int, void*), void*)]
Summary: Intermittent b2g desktop test_InstanceOf.html,test_writable-replaceable.html | application crashed [@ PL_DHashTableEnumerate(PLDHashTable*, PLDHashOperator (*)(PLDHashTable*, PLDHashEntryHdr*, unsigned int, void*), void*)] → Intermittent b2g desktop test_InstanceOf.html,test_writable-replaceable.html,test_window_indexing.html | application crashed [@ PL_DHashTableEnumerate(PLDHashTable*, PLDHashOperator (*)(PLDHashTable*, PLDHashEntryHdr*, unsigned int, void*), void*)]
Any other suggestions, Kyle? This is happening way too frequently to leave for days without any activity.
Flags: needinfo?(khuey)
My suggestion is for Andrea to look into it.
Flags: needinfo?(khuey)
K, I'll work on bisecting and backing out then.
According to my retriggers, this apparently started crashing on m-c rev 252a41942fc7, which re-enabled two previously-disabled tests: test_transitions.html (bug 967585) and test_input_sanitization.html (bug 968645). These two tests were disabled for a period of about 10 days due to the s/m1.medium/m3.medium slave issues. So maybe this regressed during that 10-day period or maybe it was broken before but we weren't seeing it due to how busted B2G tests were in general by that change.

That said, Kyle noted that bug 965990 landed around that time and is a possible candidate for having caused this. So I've got a backout of that running on Try. If that's green after retriggers, I'll go ahead and push it to inbound.
https://tbpl.mozilla.org/?tree=Try&rev=739580edf6b1
No instances post-backout \m/
Status: NEW → RESOLVED
Closed: 10 years ago
status-b2g-v1.4: wontfix → fixed
Resolution: --- → FIXED
Target Milestone: --- → mozilla30
Flags: needinfo?(amarchesini)
Component: DOM → DOM: Core & HTML
You need to log in before you can comment on or make changes to this bug.