Skip to content

Instantly share code, notes, and snippets.

@metajack
Created October 16, 2013 16:29
Show Gist options
  • Save metajack/7010750 to your computer and use it in GitHub Desktop.
Save metajack/7010750 to your computer and use it in GitHub Desktop.
#0 arena_mapbits_get (pageind=0, chunk=0x0)
at /home/jack/src/servo/src/compiler/rust/src/rt/jemalloc/include/jemalloc/internal/arena.h:504
#1 arena_mapbits_binind_get (pageind=0, chunk=0x0)
at /home/jack/src/servo/src/compiler/rust/src/rt/jemalloc/include/jemalloc/internal/arena.h:545
#2 arena_salloc (demote=false, ptr=0x7)
at /home/jack/src/servo/src/compiler/rust/src/rt/jemalloc/include/jemalloc/internal/arena.h:950
#3 isalloc (demote=false, ptr=0x7)
at include/jemalloc/internal/jemalloc_internal.h:864
#4 free (ptr=0x7)
at /home/jack/src/servo/src/compiler/rust/src/rt/jemalloc/src/jemalloc.c:1267
#5 0x0000000000495ee1 in layout..float_context..FloatContext::glue_drop::hfac047778210dcaaz ()
#6 0x0000000000494cc3 in layout..block..BlockFlowData::glue_drop::h33e53aa061e3dc98ah ()
#7 0x000000000049497b in layout..flow..FlowContext::glue_drop::h6530658b5737bcd0a3 () at /home/jack/src/servo/src/components/main/layout/block.rs:39
#8 0x00000000004dba09 in servo::layout::layout_task::LayoutTask::handle_reflow () at /home/jack/src/servo/src/components/main/layout/layout_task.rs:367
#9 0x00000000004d6811 in fn25861 ()
at /home/jack/src/servo/src/components/main/layout/layout_task.rs:155
#10 fn16119 ()
at /home/jack/src/servo/src/components/main/compositing/mod.rs:477
#11 handle_request ()
at /home/jack/src/servo/src/components/main/layout/layout_task.rs:155
#12 start ()
at /home/jack/src/servo/src/components/main/layout/layout_task.rs:130
#13 fn25737 ()
at /home/jack/src/servo/src/components/main/layout/layout_task.rs:95
#14 0x00007ffff792e665 in task::spawn::spawn_raw::anon::expr_fn::ab ()
from /home/jack/src/servo/build/x86_64-unknown-linux-gnu/src/compiler/rust/x86_64-unknown-linux-gnu/stage2/lib/rustc/x86_64-unknown-linux-gnu/lib/libstd-6c65cf4b443341b1-0.9-pre.so
@larsbergstrom
Copy link

Mine is slightly different but appears to be the same error (using src/test/html/about-mozilla.html):

(gdb) bt
#0  0x00007fff938d3588 in malloc_error_break ()
#1  0x00007fff938d4942 in free ()
#2  0x0000000100089cf1 in layout..float_context..FloatContext::glue_drop::he2f945ae8887792a6 ()
#3  0x0000000100089ab7 in layout..inline..InlineFlowData::glue_drop::h7c71f3f0bcbb798baG ()
#4  0x00000001000887d9 in layout..flow..FlowContext::glue_drop::hd79cbaa8362d49aA ()
#5  0x0000000100088610 in _$UP$extra..dlist..Node$LT$layout..flow..FlowContext$GT$::glue_drop::hc39571451342aedar ()
#6  0x00000001000884eb in extra..dlist..DList$LT$layout..flow..FlowContext$GT$::glue_drop::hc06a2dbab86c8138a1 ()
#7  0x0000000100088aad in layout..block..BlockFlowData::glue_drop::h67a11ff9db41bccaO ()
#8  0x000000010008877e in layout..flow..FlowContext::glue_drop::hd79cbaa8362d49aA ()
#9  0x0000000100088610 in _$UP$extra..dlist..Node$LT$layout..flow..FlowContext$GT$::glue_drop::hc39571451342aedar ()
#10 0x0000000100088510 in extra..dlist..DList$LT$layout..flow..FlowContext$GT$::glue_drop::hc06a2dbab86c8138a1 ()
#11 0x0000000100088aad in layout..block..BlockFlowData::glue_drop::h67a11ff9db41bccaO ()
#12 0x000000010008877e in layout..flow..FlowContext::glue_drop::hd79cbaa8362d49aA ()
#13 0x0000000100088610 in _$UP$extra..dlist..Node$LT$layout..flow..FlowContext$GT$::glue_drop::hc39571451342aedar ()
#14 0x0000000100088510 in extra..dlist..DList$LT$layout..flow..FlowContext$GT$::glue_drop::hc06a2dbab86c8138a1 ()
#15 0x0000000100088aad in layout..block..BlockFlowData::glue_drop::h67a11ff9db41bccaO ()
#16 0x000000010008877e in layout..flow..FlowContext::glue_drop::hd79cbaa8362d49aA ()
#17 0x00000001000cf9a9 in layout::layout_task::LayoutTask::handle_reflow::hcd44708cd63b2749Csaa::v0.1 ()
#18 0x00000001000ca7b1 in layout::layout_task::__extensions__::create::anon::expr_fn::aR ()
#19 0x000000010020f4a5 in task::spawn::spawn_raw::anon::expr_fn::ap ()

@alexcrichton
Copy link

I think that the problem is that we're freeing libc malloc pointers with jemalloc. I ran across this with libuv allocating with libc malloc via strdup, and then freeing via jemalloc's free.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment