Attachment 8920312 Details for Bug 1408017

asan log.txt

asan log.txt (text/plain), 14.07 KB, created by Oriol Brufau [:Oriol]

(hide)

Description:

Filename:

MIME Type:

Creator: Oriol Brufau [:Oriol]

Size: 14.07 KB

patch

obsolete

>=================================================================
>==7449==ERROR: AddressSanitizer: heap-use-after-free on address 0x6030002e35d8 at pc 0x7fdec10b0186 bp 0x7ffeca0d49b0 sp 0x7ffeca0d49a8
>WRITE of size 8 at 0x6030002e35d8 thread T0
>    #0 0x7fdec10b0185  (/home/oriol/apps/firefox-asan/libxul.so+0xcd7a185)
>    #1 0x7fdeb64dbb26  (/home/oriol/apps/firefox-asan/libxul.so+0x21a5b26)
>    #2 0x7fdeb7cc0e69  (/home/oriol/apps/firefox-asan/libxul.so+0x398ae69)
>    #3 0x7fdeb654e781  (/home/oriol/apps/firefox-asan/libxul.so+0x2218781)
>    #4 0x7fdeb7d394d0  (/home/oriol/apps/firefox-asan/libxul.so+0x3a034d0)
>    #5 0x7fdeb7d4025f  (/home/oriol/apps/firefox-asan/libxul.so+0x3a0a25f)
>    #6 0x7fdec12d57d4  (/home/oriol/apps/firefox-asan/libxul.so+0xcf9f7d4)
>    #7 0x7fdec12bfe3c  (/home/oriol/apps/firefox-asan/libxul.so+0xcf89e3c)
>    #8 0x7fdec12a6a3a  (/home/oriol/apps/firefox-asan/libxul.so+0xcf70a3a)
>    #9 0x7fdec12d86f6  (/home/oriol/apps/firefox-asan/libxul.so+0xcfa26f6)
>    #10 0x7fdec2128f41  (/home/oriol/apps/firefox-asan/libxul.so+0xddf2f41)
>    #11 0x7fdec215e7f9  (/home/oriol/apps/firefox-asan/libxul.so+0xde287f9)
>    #12 0x7fdec215f0e1  (/home/oriol/apps/firefox-asan/libxul.so+0xde290e1)
>    #13 0x7fdec12d57d4  (/home/oriol/apps/firefox-asan/libxul.so+0xcf9f7d4)
>    #14 0x7fdec12d67c2  (/home/oriol/apps/firefox-asan/libxul.so+0xcfa07c2)
>    #15 0x7fdec1fd01be  (/home/oriol/apps/firefox-asan/libxul.so+0xdc9a1be)
>    #16 0x7fdec1f847e5  (/home/oriol/apps/firefox-asan/libxul.so+0xdc4e7e5)
>    #17 0x7fdec1fafb33  (/home/oriol/apps/firefox-asan/libxul.so+0xdc79b33)
>    #18 0x7fdec1fb2607  (/home/oriol/apps/firefox-asan/libxul.so+0xdc7c607)
>    #19 0x7fdec12d5b53  (/home/oriol/apps/firefox-asan/libxul.so+0xcf9fb53)
>    #20 0x7fdec12bfe3c  (/home/oriol/apps/firefox-asan/libxul.so+0xcf89e3c)
>    #21 0x7fdec12a6a3a  (/home/oriol/apps/firefox-asan/libxul.so+0xcf70a3a)
>    #22 0x7fdec12d58d3  (/home/oriol/apps/firefox-asan/libxul.so+0xcf9f8d3)
>    #23 0x7fdec12bfe3c  (/home/oriol/apps/firefox-asan/libxul.so+0xcf89e3c)
>    #24 0x7fdec12a6a3a  (/home/oriol/apps/firefox-asan/libxul.so+0xcf70a3a)
>    #25 0x7fdec12d58d3  (/home/oriol/apps/firefox-asan/libxul.so+0xcf9f8d3)
>    #26 0x7fdec12d67c2  (/home/oriol/apps/firefox-asan/libxul.so+0xcfa07c2)
>    #27 0x7fdec1dc3393  (/home/oriol/apps/firefox-asan/libxul.so+0xda8d393)
>    #28 0x7fdec12d57d4  (/home/oriol/apps/firefox-asan/libxul.so+0xcf9f7d4)
>    #29 0x7fdec12bfe3c  (/home/oriol/apps/firefox-asan/libxul.so+0xcf89e3c)
>    #30 0x7fdec12a6a3a  (/home/oriol/apps/firefox-asan/libxul.so+0xcf70a3a)
>    #31 0x7fdec12d58d3  (/home/oriol/apps/firefox-asan/libxul.so+0xcf9f8d3)
>    #32 0x7fdec12d67c2  (/home/oriol/apps/firefox-asan/libxul.so+0xcfa07c2)
>    #33 0x7fdec1dc3393  (/home/oriol/apps/firefox-asan/libxul.so+0xda8d393)
>    #34 0x7fdec12d57d4  (/home/oriol/apps/firefox-asan/libxul.so+0xcf9f7d4)
>    #35 0x7fdec12bfe3c  (/home/oriol/apps/firefox-asan/libxul.so+0xcf89e3c)
>    #36 0x7fdec12a6a3a  (/home/oriol/apps/firefox-asan/libxul.so+0xcf70a3a)
>    #37 0x7fdec12d58d3  (/home/oriol/apps/firefox-asan/libxul.so+0xcf9f8d3)
>    #38 0x7fdec12d67c2  (/home/oriol/apps/firefox-asan/libxul.so+0xcfa07c2)
>    #39 0x7fdec1d1d443  (/home/oriol/apps/firefox-asan/libxul.so+0xd9e7443)
>    #40 0x7fdeb7d1fd93  (/home/oriol/apps/firefox-asan/libxul.so+0x39e9d93)
>    #41 0x7fdeb654fe6a  (/home/oriol/apps/firefox-asan/libxul.so+0x2219e6a)
>    #42 0x7fdeb654ee46  (/home/oriol/apps/firefox-asan/libxul.so+0x2218e46)
>    #43 0x7fdeb65240c6  (/home/oriol/apps/firefox-asan/libxul.so+0x21ee0c6)
>    #44 0x7fdeb653e588  (/home/oriol/apps/firefox-asan/libxul.so+0x2208588)
>    #45 0x7fdeb7314471  (/home/oriol/apps/firefox-asan/libxul.so+0x2fde471)
>    #46 0x7fdeb727393b  (/home/oriol/apps/firefox-asan/libxul.so+0x2f3d93b)
>    #47 0x7fdebcc8614f  (/home/oriol/apps/firefox-asan/libxul.so+0x895014f)
>    #48 0x7fdec0e2d621  (/home/oriol/apps/firefox-asan/libxul.so+0xcaf7621)
>    #49 0x7fdec10207cb  (/home/oriol/apps/firefox-asan/libxul.so+0xccea7cb)
>    #50 0x7fdec1022395  (/home/oriol/apps/firefox-asan/libxul.so+0xccec395)
>    #51 0x7fdec1023746  (/home/oriol/apps/firefox-asan/libxul.so+0xcced746)
>    #52 0x4ec4ec  (/home/oriol/apps/firefox-asan/firefox+0x4ec4ec)
>    #53 0x7fded4a093f0  (/lib/x86_64-linux-gnu/libc.so.6+0x203f0)
>    #54 0x41dbc8  (/home/oriol/apps/firefox-asan/firefox+0x41dbc8)
>
>0x6030002e35d8 is located 8 bytes inside of 24-byte region [0x6030002e35d0,0x6030002e35e8)
>freed by thread T0 here:
>    #0 0x4bc0fb  (/home/oriol/apps/firefox-asan/firefox+0x4bc0fb)
>    #1 0x7fdec10b0167  (/home/oriol/apps/firefox-asan/libxul.so+0xcd7a167)
>    #2 0x7fdeb64dbb26  (/home/oriol/apps/firefox-asan/libxul.so+0x21a5b26)
>    #3 0x7fdeb7cc0e69  (/home/oriol/apps/firefox-asan/libxul.so+0x398ae69)
>    #4 0x7fdeb654e781  (/home/oriol/apps/firefox-asan/libxul.so+0x2218781)
>    #5 0x7fdeb7d394d0  (/home/oriol/apps/firefox-asan/libxul.so+0x3a034d0)
>    #6 0x7fdeb7d4025f  (/home/oriol/apps/firefox-asan/libxul.so+0x3a0a25f)
>    #7 0x7fdec12d57d4  (/home/oriol/apps/firefox-asan/libxul.so+0xcf9f7d4)
>    #8 0x7fdec12bfe3c  (/home/oriol/apps/firefox-asan/libxul.so+0xcf89e3c)
>    #9 0x7fdec12a6a3a  (/home/oriol/apps/firefox-asan/libxul.so+0xcf70a3a)
>    #10 0x7fdec12d86f6  (/home/oriol/apps/firefox-asan/libxul.so+0xcfa26f6)
>    #11 0x7fdec2128f41  (/home/oriol/apps/firefox-asan/libxul.so+0xddf2f41)
>    #12 0x7fdec215e7f9  (/home/oriol/apps/firefox-asan/libxul.so+0xde287f9)
>    #13 0x7fdec215f0e1  (/home/oriol/apps/firefox-asan/libxul.so+0xde290e1)
>    #14 0x7fdec12d57d4  (/home/oriol/apps/firefox-asan/libxul.so+0xcf9f7d4)
>    #15 0x7fdec12d67c2  (/home/oriol/apps/firefox-asan/libxul.so+0xcfa07c2)
>    #16 0x7fdec1fd01be  (/home/oriol/apps/firefox-asan/libxul.so+0xdc9a1be)
>    #17 0x7fdec1f847e5  (/home/oriol/apps/firefox-asan/libxul.so+0xdc4e7e5)
>    #18 0x7fdec1fafb33  (/home/oriol/apps/firefox-asan/libxul.so+0xdc79b33)
>    #19 0x7fdec1fb2607  (/home/oriol/apps/firefox-asan/libxul.so+0xdc7c607)
>    #20 0x7fdec12d5b53  (/home/oriol/apps/firefox-asan/libxul.so+0xcf9fb53)
>    #21 0x7fdec12bfe3c  (/home/oriol/apps/firefox-asan/libxul.so+0xcf89e3c)
>    #22 0x7fdec12a6a3a  (/home/oriol/apps/firefox-asan/libxul.so+0xcf70a3a)
>    #23 0x7fdec12d58d3  (/home/oriol/apps/firefox-asan/libxul.so+0xcf9f8d3)
>    #24 0x7fdec12bfe3c  (/home/oriol/apps/firefox-asan/libxul.so+0xcf89e3c)
>    #25 0x7fdec12a6a3a  (/home/oriol/apps/firefox-asan/libxul.so+0xcf70a3a)
>    #26 0x7fdec12d58d3  (/home/oriol/apps/firefox-asan/libxul.so+0xcf9f8d3)
>    #27 0x7fdec12d67c2  (/home/oriol/apps/firefox-asan/libxul.so+0xcfa07c2)
>    #28 0x7fdec1dc3393  (/home/oriol/apps/firefox-asan/libxul.so+0xda8d393)
>    #29 0x7fdec12d57d4  (/home/oriol/apps/firefox-asan/libxul.so+0xcf9f7d4)
>
>previously allocated by thread T0 here:
>    #0 0x4bc44c  (/home/oriol/apps/firefox-asan/firefox+0x4bc44c)
>    #1 0x4ed85d  (/home/oriol/apps/firefox-asan/firefox+0x4ed85d)
>    #2 0x7fdec10b00a1  (/home/oriol/apps/firefox-asan/libxul.so+0xcd7a0a1)
>    #3 0x7fdeb64dbb26  (/home/oriol/apps/firefox-asan/libxul.so+0x21a5b26)
>    #4 0x7fdeb7cc0e69  (/home/oriol/apps/firefox-asan/libxul.so+0x398ae69)
>    #5 0x7fdeb654e781  (/home/oriol/apps/firefox-asan/libxul.so+0x2218781)
>    #6 0x7fdeb7d394d0  (/home/oriol/apps/firefox-asan/libxul.so+0x3a034d0)
>    #7 0x7fdeb7d4025f  (/home/oriol/apps/firefox-asan/libxul.so+0x3a0a25f)
>    #8 0x7fdec12d57d4  (/home/oriol/apps/firefox-asan/libxul.so+0xcf9f7d4)
>    #9 0x7fdec12bfe3c  (/home/oriol/apps/firefox-asan/libxul.so+0xcf89e3c)
>    #10 0x7fdec12a6a3a  (/home/oriol/apps/firefox-asan/libxul.so+0xcf70a3a)
>    #11 0x7fdec12d86f6  (/home/oriol/apps/firefox-asan/libxul.so+0xcfa26f6)
>    #12 0x7fdec2128f41  (/home/oriol/apps/firefox-asan/libxul.so+0xddf2f41)
>    #13 0x7fdec215e7f9  (/home/oriol/apps/firefox-asan/libxul.so+0xde287f9)
>    #14 0x7fdec215f0e1  (/home/oriol/apps/firefox-asan/libxul.so+0xde290e1)
>    #15 0x7fdec12d57d4  (/home/oriol/apps/firefox-asan/libxul.so+0xcf9f7d4)
>    #16 0x7fdec12d67c2  (/home/oriol/apps/firefox-asan/libxul.so+0xcfa07c2)
>    #17 0x7fdec1fd01be  (/home/oriol/apps/firefox-asan/libxul.so+0xdc9a1be)
>    #18 0x7fdec1f847e5  (/home/oriol/apps/firefox-asan/libxul.so+0xdc4e7e5)
>    #19 0x7fdec1fafb33  (/home/oriol/apps/firefox-asan/libxul.so+0xdc79b33)
>    #20 0x7fdec1fb2607  (/home/oriol/apps/firefox-asan/libxul.so+0xdc7c607)
>    #21 0x7fdec12d5b53  (/home/oriol/apps/firefox-asan/libxul.so+0xcf9fb53)
>    #22 0x7fdec12bfe3c  (/home/oriol/apps/firefox-asan/libxul.so+0xcf89e3c)
>    #23 0x7fdec12a6a3a  (/home/oriol/apps/firefox-asan/libxul.so+0xcf70a3a)
>    #24 0x7fdec12d58d3  (/home/oriol/apps/firefox-asan/libxul.so+0xcf9f8d3)
>    #25 0x7fdec12bfe3c  (/home/oriol/apps/firefox-asan/libxul.so+0xcf89e3c)
>    #26 0x7fdec12a6a3a  (/home/oriol/apps/firefox-asan/libxul.so+0xcf70a3a)
>    #27 0x7fdec12d58d3  (/home/oriol/apps/firefox-asan/libxul.so+0xcf9f8d3)
>    #28 0x7fdec12d67c2  (/home/oriol/apps/firefox-asan/libxul.so+0xcfa07c2)
>    #29 0x7fdec1dc3393  (/home/oriol/apps/firefox-asan/libxul.so+0xda8d393)
>
>SUMMARY: AddressSanitizer: heap-use-after-free (/home/oriol/apps/firefox-asan/libxul.so+0xcd7a185) 
>Shadow bytes around the buggy address:
>  0x0c0680054660: fd fd fd fa fa fa 00 00 00 fa fa fa 00 00 03 fa
>  0x0c0680054670: fa fa 00 00 00 fa fa fa 00 00 00 fa fa fa 00 00
>  0x0c0680054680: 00 fa fa fa fd fd fd fa fa fa 00 00 00 fa fa fa
>  0x0c0680054690: fd fd fd fd fa fa fd fd fd fd fa fa fd fd fd fa
>  0x0c06800546a0: fa fa fd fd fd fd fa fa fd fd fd fd fa fa 00 00
>=>0x0c06800546b0: 00 00 fa fa 00 00 00 00 fa fa fd[fd]fd fa fa fa
>  0x0c06800546c0: fd fd fd fa fa fa fd fd fd fa fa fa fd fd fd fd
>  0x0c06800546d0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa 00 00
>  0x0c06800546e0: 00 fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
>  0x0c06800546f0: fd fd fd fd fa fa 00 00 00 fa fa fa fa fa fa fa
>  0x0c0680054700: fa fa 00 00 00 fa fa fa fa fa fa fa fa fa fa fa
>Shadow byte legend (one shadow byte represents 8 application bytes):
>  Addressable:           00
>  Partially addressable: 01 02 03 04 05 06 07 
>  Heap left redzone:       fa
>  Heap right redzone:      fb
>  Freed heap region:       fd
>  Stack left redzone:      f1
>  Stack mid redzone:       f2
>  Stack right redzone:     f3
>  Stack partial redzone:   f4
>  Stack after return:      f5
>  Stack use after scope:   f8
>  Global redzone:          f9
>  Global init order:       f6
>  Poisoned by user:        f7
>  Container overflow:      fc
>  Array cookie:            ac
>  Intra object redzone:    bb
>  ASan internal:           fe
>  Left alloca redzone:     ca
>  Right alloca redzone:    cb
>==7449==ABORTING
>ASAN:DEADLYSIGNAL
>=================================================================
>oriol@oriol-linux:~$ ==7543==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000000 (pc 0x7fb1481b9127 bp 0x7fb144274380 sp 0x7fb144274360 T2)
>Crash Annotation GraphicsCriticalError: |[C0][GFX1-]: Receive IPC close with reason=AbnormalShutdown (t=7.66035) ==7543==The signal is caused by a WRITE memory access.
>==7543==Hint: address points to the zero page.
>ASAN:DEADLYSIGNAL
>=================================================================
>==7487==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000000 (pc 0x7fcb51f21127 bp 0x7fcb4dfdc380 sp 0x7fcb4dfdc360 T2)
>==7487==The signal is caused by a WRITE memory access.
>==7487==Hint: address points to the zero page.
>    #0 0x7fb1481b9126  (/home/oriol/apps/firefox-asan/libxul.so+0x2fd9126)
>    #1 0x7fb1481bddf7  (/home/oriol/apps/firefox-asan/libxul.so+0x2fdddf7)
>    #2 0x7fb14816b771  (/home/oriol/apps/firefox-asan/libxul.so+0x2f8b771)
>    #3 0x7fb148162ed9  (/home/oriol/apps/firefox-asan/libxul.so+0x2f82ed9)
>    #4 0x7fb1481229bd  (/home/oriol/apps/firefox-asan/libxul.so+0x2f429bd)
>    #5 0x7fb14811d93b  (/home/oriol/apps/firefox-asan/libxul.so+0x2f3d93b)
>    #6 0x7fb14813c489  (/home/oriol/apps/firefox-asan/libxul.so+0x2f5c489)
>    #7 0x7fb14812c6ac  (/home/oriol/apps/firefox-asan/libxul.so+0x2f4c6ac)
>    #0 0x7fcb51f21126  (/home/oriol/apps/firefox-asan/libxul.so+0x2fd9126)
>    #8 0x7fb1669156d9  (/lib/x86_64-linux-gnu/libpthread.so.0+0x76d9)
>    #1 0x7fcb51f25df7  (/home/oriol/apps/firefox-asan/libxul.so+0x2fdddf7)
>    #9 0x7fb16599bd7e  (/lib/x86_64-linux-gnu/libc.so.6+0x108d7e)
>    #2 0x7fcb51ed3771  (/home/oriol/apps/firefox-asan/libxul.so+0x2f8b771)
>
>    #3 0x7fcb51ecaed9  (/home/oriol/apps/firefox-asan/libxul.so+0x2f82ed9)
>AddressSanitizer can not provide additional info.
>    #4 0x7fcb51e8a9bd  (/home/oriol/apps/firefox-asan/libxul.so+0x2f429bd)
>SUMMARY: AddressSanitizer: SEGV (/home/oriol/apps/firefox-asan/libxul.so+0x2fd9126) 
>    #5 0x7fcb51e8593b  (/home/oriol/apps/firefox-asan/libxul.so+0x2f3d93b)
>Thread T2 (Chrome_~dThread) created by T0 (Web Content) here:
>    #6 0x7fcb51ea4489  (/home/oriol/apps/firefox-asan/libxul.so+0x2f5c489)
>    #0 0x4a4826  (/home/oriol/apps/firefox-asan/firefox+0x4a4826)
>    #7 0x7fcb51e946ac  (/home/oriol/apps/firefox-asan/libxul.so+0x2f4c6ac)
>    #1 0x7fb14812b98c  (/home/oriol/apps/firefox-asan/libxul.so+0x2f4b98c)
>    #8 0x7fcb7067d6d9  (/lib/x86_64-linux-gnu/libpthread.so.0+0x76d9)
>    #2 0x7fb14813bece  (/home/oriol/apps/firefox-asan/libxul.so+0x2f5bece)
>    #9 0x7fcb6f703d7e  (/lib/x86_64-linux-gnu/libc.so.6+0x108d7e)
>    #3 0x7fb1481bfbe7  (/home/oriol/apps/firefox-asan/libxul.so+0x2fdfbe7)
>
>    #4 0x7fb151ed1ead  (/home/oriol/apps/firefox-asan/libxul.so+0xccf1ead)
>AddressSanitizer can not provide additional info.
>    #5 0x4ec2de  (/home/oriol/apps/firefox-asan/firefox+0x4ec2de)
>SUMMARY: AddressSanitizer: SEGV (/home/oriol/apps/firefox-asan/libxul.so+0x2fd9126) 
>    #6 0x7fb1658b33f0  (/lib/x86_64-linux-gnu/libc.so.6+0x203f0)
>Thread T2 (Chrome_~dThread) created by T0 (Web Content) here:
>
>    #0 0x4a4826  (/home/oriol/apps/firefox-asan/firefox+0x4a4826)
>==7543==ABORTING
>    #1 0x7fcb51e9398c  (/home/oriol/apps/firefox-asan/libxul.so+0x2f4b98c)
>Crash Annotation GraphicsCriticalError: |[C0][GFX1-]: Receive IPC close with reason=AbnormalShutdown (t=8.66569)     #2 0x7fcb51ea3ece  (/home/oriol/apps/firefox-asan/libxul.so+0x2f5bece)
>    #3 0x7fcb51f27be7  (/home/oriol/apps/firefox-asan/libxul.so+0x2fdfbe7)
>    #4 0x7fcb5bc39ead  (/home/oriol/apps/firefox-asan/libxul.so+0xccf1ead)
>    #5 0x4ec2de  (/home/oriol/apps/firefox-asan/firefox+0x4ec2de)
>    #6 0x7fcb6f61b3f0  (/lib/x86_64-linux-gnu/libc.so.6+0x203f0)
>
>==7487==ABORTING
>

Actions: View

Attachments on bug 1408017: 8920312 | 8920343 | 8920640

Bugzilla

Quick Search

Attachment 8920312 Details for Bug 1408017