Open Bug 1819503 Opened 2 years ago Updated 1 year ago

ThreadSanitizer: lock-order-inversion (potential deadlock) [@ mozilla::RecursiveMutex::LockInternal]

Categories

(Core :: Graphics: Text, defect)

defect

Tracking

()

Tracking Status
firefox-esr102 --- unaffected
firefox-esr115 --- affected
firefox110 --- wontfix
firefox111 --- wontfix
firefox112 --- wontfix
firefox113 --- wontfix
firefox114 --- wontfix
firefox116 --- wontfix
firefox117 --- wontfix
firefox118 --- wontfix

People

(Reporter: tsmith, Unassigned, NeedInfo)

References

(Blocks 2 open bugs, Regression)

Details

(Keywords: regression, testcase, Whiteboard: [bugmon:bisected,confirmed])

Attachments

(1 file)

Attached file testcase.html (deleted) —

Found while fuzzing m-c 20230131-351f3b41f9fb (--enable-thread-sanitizer --enable-fuzzing)

To reproduce via Grizzly Replay:

$ pip install fuzzfetch grizzly-framework
$ python -m fuzzfetch -t --fuzzing -n firefox
$ python -m grizzly.replay ./firefox/firefox testcase.html --headless

I'm not sure if this is related to or a dupe of bug 1813811.

WARNING: ThreadSanitizer: lock-order-inversion (potential deadlock) (pid=82636)
  Cycle in lock order graph: M0 (0x7b44000c63a8) => M1 (0x7b7800003c38) => M0

  Mutex M1 acquired here while holding mutex M0 in main thread:
    #0 pthread_mutex_lock /builds/worker/fetches/llvm-project/compiler-rt/lib/tsan/rtl/../../sanitizer_common/sanitizer_common_interceptors.inc:4457:3 (firefox-bin+0xdfdaa) (BuildId: 37c99b2952eae96f12c0a09626886034e8b46038)
    #1 mozilla::RecursiveMutex::LockInternal() /builds/worker/checkouts/gecko/xpcom/threads/RecursiveMutex.cpp:71:3 (libxul.so+0x42f7105) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #2 Lock /builds/worker/workspace/obj-build/dist/include/mozilla/RecursiveMutex.h:31:42 (libxul.so+0x59af0aa) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #3 RecursiveMutexAutoLock /builds/worker/workspace/obj-build/dist/include/mozilla/RecursiveMutex.h:80:22 (libxul.so+0x59af0aa)
    #4 gfxPlatformFontList::FindCharMap(gfxCharacterMap*) /builds/worker/checkouts/gecko/gfx/thebes/gfxPlatformFontList.cpp:1890:12 (libxul.so+0x59af0aa)
    #5 mozilla::dom::FontFaceImpl::GetUnicodeRangeAsCharacterMap() /builds/worker/checkouts/gecko/layout/style/FontFaceImpl.cpp:729:50 (libxul.so+0x960221f) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #6 mozilla::dom::FontFaceImpl::GetAttributes(gfxUserFontAttributes&) /builds/worker/checkouts/gecko/layout/style/FontFaceImpl.cpp:640:26 (libxul.so+0x96007b8) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #7 mozilla::dom::FontFaceSetDocumentImpl::InsertRuleFontFace(mozilla::dom::FontFaceImpl*, mozilla::dom::FontFace*, mozilla::StyleOrigin, nsTArray<mozilla::dom::FontFaceSetImpl::FontFaceRecord>&, bool&) /builds/worker/checkouts/gecko/layout/style/FontFaceSetDocumentImpl.cpp:524:19 (libxul.so+0x960c0f4) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #8 mozilla::dom::FontFaceSetDocumentImpl::UpdateRules(nsTArray<nsFontFaceRuleContainer> const&) /builds/worker/checkouts/gecko/layout/style/FontFaceSetDocumentImpl.cpp:450:5 (libxul.so+0x960b83d) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #9 mozilla::dom::FontFaceSet::UpdateRules(nsTArray<nsFontFaceRuleContainer> const&) /builds/worker/checkouts/gecko/layout/style/FontFaceSet.cpp:371:17 (libxul.so+0x96069cb) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #10 mozilla::dom::Document::FlushUserFontSet() /builds/worker/checkouts/gecko/dom/base/Document.cpp:16017:31 (libxul.so+0x5e2c141) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #11 mozilla::PresShell::DoFlushPendingNotifications(mozilla::ChangesToFlush) /builds/worker/checkouts/gecko/layout/base/PresShell.cpp:4336:18 (libxul.so+0x970657b) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #12 mozilla::PresShell::FlushPendingNotifications(mozilla::ChangesToFlush) /builds/worker/workspace/obj-build/dist/include/mozilla/PresShell.h:1463:5 (libxul.so+0x96c10c7) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #13 nsRefreshDriver::Tick(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp, nsRefreshDriver::IsExtraTick) /builds/worker/checkouts/gecko/layout/base/nsRefreshDriver.cpp:2603:22 (libxul.so+0x96bc832) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #14 TickDriver /builds/worker/checkouts/gecko/layout/base/nsRefreshDriver.cpp:373:13 (libxul.so+0x96c70ee) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #15 mozilla::RefreshDriverTimer::TickRefreshDrivers(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp, nsTArray<RefPtr<nsRefreshDriver>>&) /builds/worker/checkouts/gecko/layout/base/nsRefreshDriver.cpp:351:7 (libxul.so+0x96c70ee)
    #16 mozilla::RefreshDriverTimer::Tick(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp) /builds/worker/checkouts/gecko/layout/base/nsRefreshDriver.cpp:367:5 (libxul.so+0x96c6ef6) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #17 mozilla::VsyncRefreshDriverTimer::RunRefreshDrivers(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp) /builds/worker/checkouts/gecko/layout/base/nsRefreshDriver.cpp:911:5 (libxul.so+0x96c6cfe) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #18 mozilla::VsyncRefreshDriverTimer::TickRefreshDriver(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp) /builds/worker/checkouts/gecko/layout/base/nsRefreshDriver.cpp:825:5 (libxul.so+0x96c630c) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #19 mozilla::VsyncRefreshDriverTimer::NotifyVsyncOnMainThread(mozilla::VsyncEvent const&) /builds/worker/checkouts/gecko/layout/base/nsRefreshDriver.cpp:746:5 (libxul.so+0x96c5b26) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #20 mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver::NotifyVsyncTimerOnMainThread() /builds/worker/checkouts/gecko/layout/base/nsRefreshDriver.cpp:592:14 (libxul.so+0x96c5517) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #21 mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver::NotifyVsync(mozilla::VsyncEvent const&) /builds/worker/checkouts/gecko/layout/base/nsRefreshDriver.cpp:549:9 (libxul.so+0x96c529b) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #22 mozilla::dom::VsyncMainChild::RecvNotify(mozilla::VsyncEvent const&, float const&) /builds/worker/checkouts/gecko/dom/ipc/VsyncMainChild.cpp:66:15 (libxul.so+0x8a86f48) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #23 mozilla::dom::PVsyncChild::OnMessageReceived(IPC::Message const&) /builds/worker/workspace/obj-build/ipc/ipdl/PVsyncChild.cpp:220:78 (libxul.so+0x8ce66ff) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #24 mozilla::ipc::PBackgroundChild::OnMessageReceived(IPC::Message const&) /builds/worker/workspace/obj-build/ipc/ipdl/PBackgroundChild.cpp:6305:32 (libxul.so+0x506d53f) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #25 mozilla::ipc::MessageChannel::DispatchAsyncMessage(mozilla::ipc::ActorLifecycleProxy*, IPC::Message const&) /builds/worker/checkouts/gecko/ipc/glue/MessageChannel.cpp:1800:25 (libxul.so+0x500c8fc) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #26 mozilla::ipc::MessageChannel::DispatchMessage(mozilla::ipc::ActorLifecycleProxy*, mozilla::UniquePtr<IPC::Message, mozilla::DefaultDelete<IPC::Message>>) /builds/worker/checkouts/gecko/ipc/glue/MessageChannel.cpp:1725:9 (libxul.so+0x500acb7) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #27 mozilla::ipc::MessageChannel::RunMessage(mozilla::ipc::ActorLifecycleProxy*, mozilla::ipc::MessageChannel::MessageTask&) /builds/worker/checkouts/gecko/ipc/glue/MessageChannel.cpp:1525:3 (libxul.so+0x500b36b) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #28 mozilla::ipc::MessageChannel::MessageTask::Run() /builds/worker/checkouts/gecko/ipc/glue/MessageChannel.cpp:1623:14 (libxul.so+0x500bf0e) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #29 mozilla::RunnableTask::Run() /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:539:16 (libxul.so+0x43040af) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #30 mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&) /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:852:26 (libxul.so+0x42fd67d) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #31 mozilla::TaskController::ExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&) /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:684:15 (libxul.so+0x42fbbf6) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #32 mozilla::TaskController::ProcessPendingMTTask(bool) /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:462:36 (libxul.so+0x42fbfd0) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #33 operator() /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:191:37 (libxul.so+0x4306aca) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #34 mozilla::detail::RunnableFunction<mozilla::TaskController::InitializeInternal()::$_3>::Run() /builds/worker/workspace/obj-build/dist/include/nsThreadUtils.h:546:5 (libxul.so+0x4306aca)
    #35 nsThread::ProcessNextEvent(bool, bool*) /builds/worker/checkouts/gecko/xpcom/threads/nsThread.cpp:1197:16 (libxul.so+0x431d450) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #36 NS_ProcessNextEvent(nsIThread*, bool) /builds/worker/checkouts/gecko/xpcom/threads/nsThreadUtils.cpp:477:10 (libxul.so+0x4323ec6) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #37 mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) /builds/worker/checkouts/gecko/ipc/glue/MessagePump.cpp:107:5 (libxul.so+0x501118c) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #38 mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*) /builds/worker/checkouts/gecko/ipc/glue/MessagePump.cpp:268:30 (libxul.so+0x5011c3b) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #39 RunInternal /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:381:10 (libxul.so+0x4f2ab17) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #40 RunHandler /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:374:3 (libxul.so+0x4f2ab17)
    #41 MessageLoop::Run() /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:356:3 (libxul.so+0x4f2ab17)
    #42 nsBaseAppShell::Run() /builds/worker/checkouts/gecko/widget/nsBaseAppShell.cpp:148:27 (libxul.so+0x92d6756) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #43 XRE_RunAppShell() /builds/worker/checkouts/gecko/toolkit/xre/nsEmbedFunctions.cpp:742:20 (libxul.so+0xbdec9cc) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #44 mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*) /builds/worker/checkouts/gecko/ipc/glue/MessagePump.cpp:235:9 (libxul.so+0x5011bed) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #45 RunInternal /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:381:10 (libxul.so+0x4f2ab17) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #46 RunHandler /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:374:3 (libxul.so+0x4f2ab17)
    #47 MessageLoop::Run() /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:356:3 (libxul.so+0x4f2ab17)
    #48 XRE_InitChildProcess(int, char**, XREChildData const*) /builds/worker/checkouts/gecko/toolkit/xre/nsEmbedFunctions.cpp:675:34 (libxul.so+0xbdec619) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #49 mozilla::BootstrapImpl::XRE_InitChildProcess(int, char**, XREChildData const*) /builds/worker/checkouts/gecko/toolkit/xre/Bootstrap.cpp:67:12 (libxul.so+0xbdf6b22) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #50 content_process_main /builds/worker/checkouts/gecko/browser/app/../../ipc/contentproc/plugin-container.cpp:57:28 (firefox-bin+0x142da3) (BuildId: 37c99b2952eae96f12c0a09626886034e8b46038)
    #51 main /builds/worker/checkouts/gecko/browser/app/nsBrowserApp.cpp:353:18 (firefox-bin+0x142da3)

    Hint: use TSAN_OPTIONS=second_deadlock_stack=1 to get more informative warning message

  Mutex M0 acquired here while holding mutex M1 in main thread:
    #0 pthread_mutex_lock /builds/worker/fetches/llvm-project/compiler-rt/lib/tsan/rtl/../../sanitizer_common/sanitizer_common_interceptors.inc:4457:3 (firefox-bin+0xdfdaa) (BuildId: 37c99b2952eae96f12c0a09626886034e8b46038)
    #1 mozilla::RecursiveMutex::LockInternal() /builds/worker/checkouts/gecko/xpcom/threads/RecursiveMutex.cpp:71:3 (libxul.so+0x42f7105) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #2 Lock /builds/worker/workspace/obj-build/dist/include/mozilla/RecursiveMutex.h:31:42 (libxul.so+0x960f6d0) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #3 RecursiveMutexAutoLock /builds/worker/workspace/obj-build/dist/include/mozilla/RecursiveMutex.h:80:22 (libxul.so+0x960f6d0)
    #4 mozilla::dom::FontFaceSetImpl::OnFontFaceStatusChanged(mozilla::dom::FontFaceImpl*) /builds/worker/checkouts/gecko/layout/style/FontFaceSetImpl.cpp:716:26 (libxul.so+0x960f6d0)
    #5 SetStatus /builds/worker/checkouts/gecko/layout/style/FontFaceImpl.cpp:384:19 (libxul.so+0x9602d4b) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #6 mozilla::dom::FontFaceImpl::Entry::SetLoadState(gfxUserFontEntry::UserFontLoadState) /builds/worker/checkouts/gecko/layout/style/FontFaceImpl.cpp:758:13 (libxul.so+0x9602d4b)
    #7 LoadNextSrc /builds/worker/checkouts/gecko/gfx/thebes/gfxUserFontSet.cpp:354:5 (libxul.so+0x59c475b) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #8 gfxUserFontEntry::Load() /builds/worker/checkouts/gecko/gfx/thebes/gfxUserFontSet.cpp:790:5 (libxul.so+0x59c475b)
    #9 gfxFontGroup::GetFontAt(int, unsigned int, bool*) /builds/worker/checkouts/gecko/gfx/thebes/gfxTextRun.cpp:2089:14 (libxul.so+0x59c450b) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #10 GetFontAt /builds/worker/checkouts/gecko/gfx/thebes/gfxTextRun.h:1476:12 (libxul.so+0x59e7ade) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #11 void gfxFontGroup::ComputeRanges<char16_t>(nsTArray<gfxFontGroup::TextRange>&, char16_t const*, unsigned int, mozilla::intl::Script, mozilla::gfx::ShapedTextFlags) /builds/worker/checkouts/gecko/gfx/thebes/gfxTextRun.cpp:3525:17 (libxul.so+0x59e7ade)
    #12 void gfxFontGroup::InitScriptRun<char16_t>(mozilla::gfx::DrawTarget*, gfxTextRun*, char16_t const*, unsigned int, unsigned int, mozilla::intl::Script, gfxMissingFontRecorder*) /builds/worker/checkouts/gecko/gfx/thebes/gfxTextRun.cpp:2771:3 (libxul.so+0x59e58a9) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #13 void gfxFontGroup::InitTextRun<char16_t>(mozilla::gfx::DrawTarget*, gfxTextRun*, char16_t const*, unsigned int, gfxMissingFontRecorder*) /builds/worker/checkouts/gecko/gfx/thebes/gfxTextRun.cpp:2693:9 (libxul.so+0x59ca4bb) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #14 gfxFontGroup::MakeTextRun(char16_t const*, unsigned int, gfxTextRunFactory::Parameters const*, mozilla::gfx::ShapedTextFlags, nsTextFrameUtils::Flags, gfxMissingFontRecorder*) /builds/worker/checkouts/gecko/gfx/thebes/gfxTextRun.cpp:2569:3 (libxul.so+0x59c9ded) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #15 MakeTextRun<char16_t> /builds/worker/workspace/obj-build/dist/include/gfxTextRun.h:1011:12 (libxul.so+0x730e638) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #16 mozilla::dom::CanvasBidiProcessor::SetText(char16_t const*, int, mozilla::intl::BidiDirection) /builds/worker/checkouts/gecko/dom/canvas/CanvasRenderingContext2D.cpp:3709:26 (libxul.so+0x730e638)
    #17 nsBidiPresUtils::ProcessText(char16_t const*, unsigned long, mozilla::intl::BidiEmbeddingLevel, nsPresContext*, nsBidiPresUtils::BidiProcessor&, nsBidiPresUtils::Mode, nsBidiPositionResolve*, int, int*, mozilla::intl::Bidi*) /builds/worker/checkouts/gecko/layout/base/nsBidiPresUtils.cpp:2232:18 (libxul.so+0x974a23b) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #18 mozilla::dom::CanvasRenderingContext2D::DrawOrMeasureText(nsTSubstring<char16_t> const&, float, float, mozilla::dom::Optional<double> const&, mozilla::dom::CanvasRenderingContext2D::TextDrawOperation, mozilla::ErrorResult&) /builds/worker/checkouts/gecko/dom/canvas/CanvasRenderingContext2D.cpp:4089:12 (libxul.so+0x726fac9) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #19 mozilla::dom::CanvasRenderingContext2D::MeasureText(nsTSubstring<char16_t> const&, mozilla::ErrorResult&) /builds/worker/checkouts/gecko/dom/canvas/CanvasRenderingContext2D.cpp:3654:10 (libxul.so+0x7270549) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #20 mozilla::dom::CanvasRenderingContext2D_Binding::measureText(JSContext*, JS::Handle<JSObject*>, void*, JSJitMethodCallArgs const&) /builds/worker/workspace/obj-build/dom/bindings/CanvasRenderingContext2DBinding.cpp:6544:78 (libxul.so+0x67bdf69) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #21 bool mozilla::dom::binding_detail::GenericMethod<mozilla::dom::binding_detail::NormalThisPolicy, mozilla::dom::binding_detail::ThrowExceptions>(JSContext*, unsigned int, JS::Value*) /builds/worker/checkouts/gecko/dom/bindings/BindingUtils.cpp:3308:13 (libxul.so+0x71853b4) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #22 CallJSNative /builds/worker/checkouts/gecko/js/src/vm/Interpreter.cpp:459:13 (libxul.so+0xc05de6b) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #23 js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason) /builds/worker/checkouts/gecko/js/src/vm/Interpreter.cpp:547:12 (libxul.so+0xc05de6b)
    #24 InternalCall /builds/worker/checkouts/gecko/js/src/vm/Interpreter.cpp:614:10 (libxul.so+0xc053f7c) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #25 CallFromStack /builds/worker/checkouts/gecko/js/src/vm/Interpreter.cpp:619:10 (libxul.so+0xc053f7c)
    #26 Interpret(JSContext*, js::RunState&) /builds/worker/checkouts/gecko/js/src/vm/Interpreter.cpp:3362:16 (libxul.so+0xc053f7c)
    #27 js::RunScript(JSContext*, js::RunState&) /builds/worker/checkouts/gecko/js/src/vm/Interpreter.cpp:431:13 (libxul.so+0xc04725f) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #28 js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason) /builds/worker/checkouts/gecko/js/src/vm/Interpreter.cpp:579:13 (libxul.so+0xc05df40) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #29 InternalCall /builds/worker/checkouts/gecko/js/src/vm/Interpreter.cpp:614:10 (libxul.so+0xc05ebf3) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #30 js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>, js::CallReason) /builds/worker/checkouts/gecko/js/src/vm/Interpreter.cpp:646:8 (libxul.so+0xc05ebf3)
    #31 JS::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>) /builds/worker/checkouts/gecko/js/src/vm/CallAndConstruct.cpp:117:10 (libxul.so+0xc0f2c8b) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #32 mozilla::dom::EventListener::HandleEvent(mozilla::dom::BindingCallContext&, JS::Handle<JS::Value>, mozilla::dom::Event&, mozilla::ErrorResult&) /builds/worker/workspace/obj-build/dom/bindings/EventListenerBinding.cpp:62:8 (libxul.so+0x6eb54a7) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #33 HandleEvent<mozilla::dom::EventTarget *> /builds/worker/workspace/obj-build/dist/include/mozilla/dom/EventListenerBinding.h:65:12 (libxul.so+0x780e8d8) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #34 mozilla::EventListenerManager::HandleEventSubType(mozilla::EventListenerManager::Listener*, mozilla::dom::Event*, mozilla::dom::EventTarget*) /builds/worker/checkouts/gecko/dom/events/EventListenerManager.cpp:1308:43 (libxul.so+0x780e8d8)
    #35 mozilla::EventListenerManager::HandleEventInternal(nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event**, mozilla::dom::EventTarget*, nsEventStatus*, bool) /builds/worker/checkouts/gecko/dom/events/EventListenerManager.cpp:1504:17 (libxul.so+0x780f6d2) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #36 HandleEvent /builds/worker/checkouts/gecko/dom/events/EventListenerManager.h:395:5 (libxul.so+0x7804232) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #37 mozilla::EventTargetChainItem::HandleEvent(mozilla::EventChainPostVisitor&, mozilla::ELMCreationDetector&) /builds/worker/checkouts/gecko/dom/events/EventDispatcher.cpp:347:17 (libxul.so+0x7804232)
    #38 mozilla::EventTargetChainItem::HandleEventTargetChain(nsTArray<mozilla::EventTargetChainItem>&, mozilla::EventChainPostVisitor&, mozilla::EventDispatchingCallback*, mozilla::ELMCreationDetector&) /builds/worker/checkouts/gecko/dom/events/EventDispatcher.cpp:549:16 (libxul.so+0x7803604) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #39 mozilla::EventDispatcher::Dispatch(nsISupports*, nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event*, nsEventStatus*, mozilla::EventDispatchingCallback*, nsTArray<mozilla::dom::EventTarget*>*) /builds/worker/checkouts/gecko/dom/events/EventDispatcher.cpp:1122:11 (libxul.so+0x7806325) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #40 mozilla::EventDispatcher::DispatchDOMEvent(nsISupports*, mozilla::WidgetEvent*, mozilla::dom::Event*, nsPresContext*, nsEventStatus*) /builds/worker/checkouts/gecko/dom/events/EventDispatcher.cpp (libxul.so+0x7809500) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #41 nsINode::DispatchEvent(mozilla::dom::Event&, mozilla::dom::CallerType, mozilla::ErrorResult&) /builds/worker/checkouts/gecko/dom/base/nsINode.cpp:1373:17 (libxul.so+0x5fb95d8) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #42 nsContentUtils::DispatchEvent(mozilla::dom::Document*, nsISupports*, nsTSubstring<char16_t> const&, mozilla::CanBubble, mozilla::Cancelable, mozilla::Composed, mozilla::Trusted, bool*, mozilla::ChromeOnlyDispatch) /builds/worker/checkouts/gecko/dom/base/nsContentUtils.cpp:4579:28 (libxul.so+0x5c55201) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #43 nsContentUtils::DispatchTrustedEvent(mozilla::dom::Document*, nsISupports*, nsTSubstring<char16_t> const&, mozilla::CanBubble, mozilla::Cancelable, mozilla::Composed, bool*) /builds/worker/checkouts/gecko/dom/base/nsContentUtils.cpp:4549:10 (libxul.so+0x5c550ec) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #44 mozilla::dom::Document::DispatchContentLoadedEvents() /builds/worker/checkouts/gecko/dom/base/Document.cpp:7909:3 (libxul.so+0x5e02783) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #45 applyImpl<mozilla::dom::Document, void (mozilla::dom::Document::*)()> /builds/worker/workspace/obj-build/dist/include/nsThreadUtils.h:1162:12 (libxul.so+0x5e7c049) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #46 apply<mozilla::dom::Document, void (mozilla::dom::Document::*)()> /builds/worker/workspace/obj-build/dist/include/nsThreadUtils.h:1168:12 (libxul.so+0x5e7c049)
    #47 mozilla::detail::RunnableMethodImpl<mozilla::dom::Document*, void (mozilla::dom::Document::*)(), true, (mozilla::RunnableKind)0>::Run() /builds/worker/workspace/obj-build/dist/include/nsThreadUtils.h:1215:13 (libxul.so+0x5e7c049)
    #48 mozilla::SchedulerGroup::Runnable::Run() /builds/worker/checkouts/gecko/xpcom/threads/SchedulerGroup.cpp:114:20 (libxul.so+0x42f782f) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #49 mozilla::RunnableTask::Run() /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:539:16 (libxul.so+0x43040af) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #50 mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&) /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:852:26 (libxul.so+0x42fd67d) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #51 mozilla::TaskController::ExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&) /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:684:15 (libxul.so+0x42fbbf6) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #52 mozilla::TaskController::ProcessPendingMTTask(bool) /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:462:36 (libxul.so+0x42fbfd0) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #53 operator() /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:188:37 (libxul.so+0x4306a67) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #54 mozilla::detail::RunnableFunction<mozilla::TaskController::InitializeInternal()::$_2>::Run() /builds/worker/workspace/obj-build/dist/include/nsThreadUtils.h:546:5 (libxul.so+0x4306a67)
    #55 nsThread::ProcessNextEvent(bool, bool*) /builds/worker/checkouts/gecko/xpcom/threads/nsThread.cpp:1197:16 (libxul.so+0x431d450) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #56 NS_ProcessNextEvent(nsIThread*, bool) /builds/worker/checkouts/gecko/xpcom/threads/nsThreadUtils.cpp:477:10 (libxul.so+0x4323ec6) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #57 mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) /builds/worker/checkouts/gecko/ipc/glue/MessagePump.cpp:85:21 (libxul.so+0x501110b) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #58 mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*) /builds/worker/checkouts/gecko/ipc/glue/MessagePump.cpp:268:30 (libxul.so+0x5011c3b) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #59 RunInternal /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:381:10 (libxul.so+0x4f2ab17) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #60 RunHandler /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:374:3 (libxul.so+0x4f2ab17)
    #61 MessageLoop::Run() /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:356:3 (libxul.so+0x4f2ab17)
    #62 nsBaseAppShell::Run() /builds/worker/checkouts/gecko/widget/nsBaseAppShell.cpp:148:27 (libxul.so+0x92d6756) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #63 XRE_RunAppShell() /builds/worker/checkouts/gecko/toolkit/xre/nsEmbedFunctions.cpp:742:20 (libxul.so+0xbdec9cc) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #64 mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*) /builds/worker/checkouts/gecko/ipc/glue/MessagePump.cpp:235:9 (libxul.so+0x5011bed) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #65 RunInternal /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:381:10 (libxul.so+0x4f2ab17) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #66 RunHandler /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:374:3 (libxul.so+0x4f2ab17)
    #67 MessageLoop::Run() /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:356:3 (libxul.so+0x4f2ab17)
    #68 XRE_InitChildProcess(int, char**, XREChildData const*) /builds/worker/checkouts/gecko/toolkit/xre/nsEmbedFunctions.cpp:675:34 (libxul.so+0xbdec619) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #69 mozilla::BootstrapImpl::XRE_InitChildProcess(int, char**, XREChildData const*) /builds/worker/checkouts/gecko/toolkit/xre/Bootstrap.cpp:67:12 (libxul.so+0xbdf6b22) (BuildId: 3f86e42adebc841c3871cacd0dee459977511766)
    #70 content_process_main /builds/worker/checkouts/gecko/browser/app/../../ipc/contentproc/plugin-container.cpp:57:28 (firefox-bin+0x142da3) (BuildId: 37c99b2952eae96f12c0a09626886034e8b46038)
    #71 main /builds/worker/checkouts/gecko/browser/app/nsBrowserApp.cpp:353:18 (firefox-bin+0x142da3)
Flags: in-testsuite?

Verified bug as reproducible on mozilla-central 20230228085339-bc3bdd8c19f8.
The bug appears to have been introduced in the following build range:

Start: 3561c62b435cd2dd223423a7d2e58ddf55d63f87 (20220707210957)
End: 558ec2a25702bc061426d6bad45ecbc77c179843 (20220707223355)
Pushlog: https://hg.mozilla.org/integration/autoland/pushloghtml?fromchange=3561c62b435cd2dd223423a7d2e58ddf55d63f87&tochange=558ec2a25702bc061426d6bad45ecbc77c179843

Keywords: regression
Whiteboard: [bugmon:bisected,confirmed]
Blocks: tsan
Regressed by: 1072107

Set release status flags based on info from the regressing bug 1072107

Bugmon was unable reproduce this issue.
Removing bugmon keyword as no further action possible. Please review the bug and re-add the keyword for further analysis.

Keywords: bugmon
Keywords: bugmon

A change to the Taskcluster build definitions over the weekend caused Bugmon to fail when reproducing issues. This issue has been corrected. Re-enabling bugmon.

Unable to reproduce bug 1819503 using build mozilla-central 20230131210346-351f3b41f9fb. Without a baseline, bugmon is unable to analyze this bug.
Removing bugmon keyword as no further action possible. Please review the bug and re-add the keyword for further analysis.

Keywords: bugmon
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: