New issue
Advanced search Search tips

Issue 663782 link

Starred by 1 user
Status: Assigned
Owner:
yutak@chromium.org
Cc:
yutak@chromium.org
Components:
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: 3
Type: Bug



Sign in to add a comment

ASSERT in PageAllocator

Project Member Reported by svil...@igalia.com, Nov 9 2016 
I'm getting a crash everytime content_shell is started.

Note: it does not occur with the --single-process flag.

Backtrace
---------

ASSERTION FAILED: !ret
../../third_party/WebKit/Source/wtf/allocator/PageAllocator.cpp(245) : void WTF::decommitSystemPages(void*, size_t)
1   0x7f6cb344d8b0
2   0x7f6cb344f92c
3   0x7f6cb344aba6 blink::NormalPageArena::allocatePage()
4   0x7f6cb344ad98 blink::NormalPageArena::outOfLineAllocate(unsigned long, unsigned long)
5   0x48f54b blink::ThreadHeap::allocateOnArenaIndex(blink::ThreadState*, unsigned long, int, unsigned long, char const*)
6   0x7f6cb2c280b4 blink::ChromeClientImpl::create(blink::WebViewImpl*)
7   0x7f6cb2de846a blink::WebViewImpl::WebViewImpl(blink::WebViewClient*, blink::WebPageVisibilityState)
8   0x7f6cb2de97dc blink::WebViewImpl::create(blink::WebViewClient*, blink::WebPageVisibilityState)
9   0x7f6cb795bafb content::RenderViewImpl::Initialize(content::mojom::CreateViewParams const&, bool)
10  0x7f6cb795c9fa content::RenderViewImpl::Create(content::CompositorDependencies*, content::mojom::CreateViewParams const&, bool)
11  0x7f6cb70462e3 content::mojom::RendererStubDispatch::Accept(content::mojom::Renderer*, mojo::internal::SerializationContext*, mojo::Message*)
12  0x7f6cb89cca96 mojo::InterfaceEndpointClient::HandleValidatedMessage(mojo::Message*)
13  0x7f6cb89c9c1d mojo::FilterChain::Accept(mojo::Message*)
14  0x7f6cb89cc9a7 mojo::InterfaceEndpointClient::HandleIncomingMessage(mojo::Message*)
15  0x7f6cb57b150f
16  0x7f6cb57b2058
17  0x7f6cb666be5f base::debug::TaskAnnotator::RunTask(char const*, base::PendingTask*)
18  0x7f6cb3383de3 blink::scheduler::TaskQueueManager::ProcessTaskFromWorkQueue(blink::scheduler::internal::WorkQueue*)
19  0x7f6cb3384a3c blink::scheduler::TaskQueueManager::DoWork(base::TimeTicks, bool)
20  0x7f6cb666be5f base::debug::TaskAnnotator::RunTask(char const*, base::PendingTask*)
21  0x7f6cb66a2b40 base::MessageLoop::RunTask(base::PendingTask*)
22  0x7f6cb66a5e4d base::MessageLoop::DeferOrRunPendingTask(base::PendingTask)
23  0x7f6cb66a706d base::MessageLoop::DoWork()
24  0x7f6cb66a77da base::MessagePumpDefault::Run(base::MessagePump::Delegate*)
25  0x7f6cb66a40f9 base::MessageLoop::RunHandler()
26  0x7f6cb66dae78 base::RunLoop::Run()
27  0x7f6cb797c7a2
28  0x7f6cb7b02711
29  0x7f6cb7b02ceb
30  0x7f6cb7b02dab
31  0x7f6cb7b01fd1 content::ContentMain(content::ContentMainParams const&)

Comment 1 by svil...@igalia.com, Nov 9 2016 

Note: I'm using distro's clang to build the sources, I am *not* using the bundled clang from the tree.

Comment 2 by yutak@chromium.org, Nov 10 2016

Labels: Needs-Feedback
Owner: yutak@chromium.org
The assertion indicates madvise has failed. Can you figure out the exact error
code with ptrace or manual printf?

Comment 3 by svil...@igalia.com, Nov 10 2016 

Sure.

I've checked it and it indeed returns -1. Then I checked errno and what I get is

errno 1: Operation not permitted

I'm using debian's vanilla kernel 4.8. I've heard that it brings some additional restrictions to the information processes could get from the kernel. The PageAllocator should deal with this particular one without crashing.

Comment 4 by yutak@chromium.org, Nov 11 2016 

Does --no-sandbox allow the browser to boot (or go past the assertion at least)?
If so, the syscall is probably blocked by the sandbox.

Comment 5 by svil...@igalia.com, Nov 11 2016 

Yes it passes the assertion, it now returns error 2 "No such file or directory" but the browser does not crash.

Comment 6 by benhenry@chromium.org, Aug 1

Status: Assigned (was: Untriaged)
►

Sign in to add a comment