Closed Bug 1032252 Opened 10 years ago Closed 10 years ago

crash in js::detail::HashTable<js::HashMapEntry<js::CrossCompartmentKey, js::ReadBarriered<JS::Value> >, js::HashMap<js::CrossCompartmentKey, js::ReadBarriered<JS::Value>, js::WrapperHasher, js::SystemAllocPolicy>::MapHashPolicy, js::SystemAllocPolicy>...

Categories

(Core :: JavaScript Engine, defect)

33 Branch
ARM
Gonk (Firefox OS)
defect
Not set
critical

Tracking

()

RESOLVED WORKSFORME

People

(Reporter: nhirata, Unassigned)

Details

(Keywords: crash)

Crash Data

This bug was filed from the Socorro interface and is 
report bp-a1b9e536-f1db-4115-805a-0ced02140623.
=============================================================
Crashing Thread
Frame 	Module 	Signature 	Source
0 	libxul.so 	js::detail::HashTable<js::HashMapEntry<js::CrossCompartmentKey, js::ReadBarriered<JS::Value> >, js::HashMap<js::CrossCompartmentKey, js::ReadBarriered<JS::Value>, js::WrapperHasher, js::SystemAllocPolicy>::MapHashPolicy, js::SystemAllocPolicy>::lookup(js::CrossCompartmentKey const&, unsigned int, unsigned int) const 	/home/geeksphone/FOS/peak/objdir-gecko/js/src/../../dist/include/js/HashTable.h:712
1 	libxul.so 	JSCompartment::wrap(JSContext*, JS::MutableHandle<JS::Value>, JS::Handle<JSObject*>) 	/home/geeksphone/FOS/peak/objdir-gecko/js/src/../../dist/include/js/HashTable.h:1505
2 	libxul.so 	JS_WrapValue(JSContext*, JS::MutableHandle<JS::Value>) 	/home/geeksphone/FOS/peak/gecko/js/src/jsapi.cpp:1038
3 	libxul.so 	mozJSComponentLoader::ImportInto(nsACString_internal const&, JS::Handle<JSObject*>, JSContext*, JS::MutableHandle<JSObject*>) 	/home/geeksphone/FOS/peak/gecko/js/xpconnect/loader/mozJSComponentLoader.cpp:1376
4 	libxul.so 	mozJSComponentLoader::Import(nsACString_internal const&, JS::Handle<JS::Value>, JSContext*, unsigned char, JS::MutableHandle<JS::Value>) 	/home/geeksphone/FOS/peak/gecko/js/xpconnect/loader/mozJSComponentLoader.cpp:1180
5 	libxul.so 	nsXPCComponents_Utils::Import(nsACString_internal const&, JS::Handle<JS::Value>, JSContext*, unsigned char, JS::MutableHandle<JS::Value>) 	/home/geeksphone/FOS/peak/gecko/js/xpconnect/src/XPCComponents.cpp:2725
6 	libxul.so 	NS_InvokeByIndex 	/home/geeksphone/FOS/peak/gecko/xpcom/reflect/xptcall/src/md/unix/xptcinvoke_arm.cpp:164
7 	libxul.so 	XPCWrappedNative::CallMethod(XPCCallContext&, XPCWrappedNative::CallMode) 	/home/geeksphone/FOS/peak/gecko/js/xpconnect/src/XPCWrappedNative.cpp:2395
8 	libxul.so 	XPC_WN_CallMethod(JSContext*, unsigned int, JS::Value*) 	/home/geeksphone/FOS/peak/gecko/js/xpconnect/src/XPCWrappedNativeJSOps.cpp:1272
9 	libxul.so 	js::Invoke(JSContext*, JS::CallArgs, js::MaybeConstruct) 	/home/geeksphone/FOS/peak/gecko/js/src/jscntxtinlines.h:241
10 	libxul.so 	Interpret 	/home/geeksphone/FOS/peak/gecko/js/src/vm/Interpreter.cpp:2566
11 	libxul.so 	js::RunScript(JSContext*, js::RunState&) 	/home/geeksphone/FOS/peak/gecko/js/src/vm/Interpreter.cpp:402
12 	libxul.so 	js::Invoke(JSContext*, JS::CallArgs, js::MaybeConstruct) 	/home/geeksphone/FOS/peak/gecko/js/src/vm/Interpreter.cpp:474
13 	libxul.so 	js::Invoke(JSContext*, JS::Value const&, JS::Value const&, unsigned int, JS::Value const*, JS::MutableHandle<JS::Value>) 	/home/geeksphone/FOS/peak/gecko/js/src/vm/Interpreter.cpp:511
14 	libxul.so 	JS_CallFunction(JSContext*, JS::Handle<JSObject*>, JS::Handle<JSFunction*>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>) 	/home/geeksphone/FOS/peak/gecko/js/src/jsapi.cpp:5060
15 	libxul.so 	mozJSSubScriptLoader::DoLoadSubScriptWithOptions(nsAString_internal const&, LoadSubScriptOptions&, JSContext*, JS::MutableHandle<JS::Value>) 	/home/geeksphone/FOS/peak/gecko/js/xpconnect/loader/mozJSSubScriptLoader.cpp:353
16 	libxul.so 	mozJSSubScriptLoader::LoadSubScript(nsAString_internal const&, JS::Handle<JS::Value>, nsAString_internal const&, JSContext*, JS::MutableHandle<JS::Value>) 	/home/geeksphone/FOS/peak/gecko/js/xpconnect/loader/mozJSSubScriptLoader.cpp:204
17 	libxul.so 	NS_InvokeByIndex 	/home/geeksphone/FOS/peak/gecko/xpcom/reflect/xptcall/src/md/unix/xptcinvoke_arm.cpp:164
18 	libxul.so 	XPCWrappedNative::CallMethod(XPCCallContext&, XPCWrappedNative::CallMode) 	/home/geeksphone/FOS/peak/gecko/js/xpconnect/src/XPCWrappedNative.cpp:2395
19 	libxul.so 	XPC_WN_CallMethod(JSContext*, unsigned int, JS::Value*) 	/home/geeksphone/FOS/peak/gecko/js/xpconnect/src/XPCWrappedNativeJSOps.cpp:1272
20 	libxul.so 	js::Invoke(JSContext*, JS::CallArgs, js::MaybeConstruct) 	/home/geeksphone/FOS/peak/gecko/js/src/jscntxtinlines.h:241
21 	libxul.so 	Interpret 	/home/geeksphone/FOS/peak/gecko/js/src/vm/Interpreter.cpp:2566
22 	libxul.so 	js::RunScript(JSContext*, js::RunState&) 	/home/geeksphone/FOS/peak/gecko/js/src/vm/Interpreter.cpp:402
23 	libxul.so 	js::Invoke(JSContext*, JS::CallArgs, js::MaybeConstruct) 	/home/geeksphone/FOS/peak/gecko/js/src/vm/Interpreter.cpp:474
24 	libxul.so 	js::Invoke(JSContext*, JS::Value const&, JS::Value const&, unsigned int, JS::Value const*, JS::MutableHandle<JS::Value>) 	/home/geeksphone/FOS/peak/gecko/js/src/vm/Interpreter.cpp:511
25 	libxul.so 	js::DirectProxyHandler::call(JSContext*, JS::Handle<JSObject*>, JS::CallArgs const&) 	/home/geeksphone/FOS/peak/gecko/js/src/jsproxy.cpp:448
26 	libxul.so 	js::CrossCompartmentWrapper::call(JSContext*, JS::Handle<JSObject*>, JS::CallArgs const&) 	/home/geeksphone/FOS/peak/gecko/js/src/jswrapper.cpp:462
27 	libxul.so 	js::Proxy::call(JSContext*, JS::Handle<JSObject*>, JS::CallArgs const&) 	/home/geeksphone/FOS/peak/gecko/js/src/jsproxy.cpp:2540
28 	libxul.so 	js::proxy_Call(JSContext*, unsigned int, JS::Value*) 	/home/geeksphone/FOS/peak/gecko/js/src/jsproxy.cpp:2927
29 	libxul.so 	js::Invoke(JSContext*, JS::CallArgs, js::MaybeConstruct) 	/home/geeksphone/FOS/peak/gecko/js/src/jscntxtinlines.h:241
30 	libxul.so 	Interpret 	/home/geeksphone/FOS/peak/gecko/js/src/vm/Interpreter.cpp:2566
31 	libxul.so 	js::RunScript(JSContext*, js::RunState&) 	/home/geeksphone/FOS/peak/gecko/js/src/vm/Interpreter.cpp:402
32 	libxul.so 	js::Invoke(JSContext*, JS::CallArgs, js::MaybeConstruct) 	/home/geeksphone/FOS/peak/gecko/js/src/vm/Interpreter.cpp:474
33 	libxul.so 	js_fun_apply(JSContext*, unsigned int, JS::Value*) 	/home/geeksphone/FOS/peak/gecko/js/src/jsfun.cpp:1139
34 	libxul.so 	js::Invoke(JSContext*, JS::CallArgs, js::MaybeConstruct) 	/home/geeksphone/FOS/peak/gecko/js/src/jscntxtinlines.h:241
35 	libxul.so 	js::Invoke(JSContext*, JS::Value const&, JS::Value const&, unsigned int, JS::Value const*, JS::MutableHandle<JS::Value>) 	/home/geeksphone/FOS/peak/gecko/js/src/vm/Interpreter.cpp:511
36 	libxul.so 	js::DirectProxyHandler::call(JSContext*, JS::Handle<JSObject*>, JS::CallArgs const&) 	/home/geeksphone/FOS/peak/gecko/js/src/jsproxy.cpp:448
37 	libxul.so 	js::CrossCompartmentWrapper::call(JSContext*, JS::Handle<JSObject*>, JS::CallArgs const&) 	/home/geeksphone/FOS/peak/gecko/js/src/jswrapper.cpp:462
38 	libxul.so 	js::Proxy::call(JSContext*, JS::Handle<JSObject*>, JS::CallArgs const&) 	/home/geeksphone/FOS/peak/gecko/js/src/jsproxy.cpp:2540
39 	libxul.so 	js::proxy_Call(JSContext*, unsigned int, JS::Value*) 	/home/geeksphone/FOS/peak/gecko/js/src/jsproxy.cpp:2927
40 	libxul.so 	js::Invoke(JSContext*, JS::CallArgs, js::MaybeConstruct) 	/home/geeksphone/FOS/peak/gecko/js/src/jscntxtinlines.h:241
41 	libxul.so 	Interpret 	/home/geeksphone/FOS/peak/gecko/js/src/vm/Interpreter.cpp:2566
42 	libxul.so 	js::RunScript(JSContext*, js::RunState&) 	/home/geeksphone/FOS/peak/gecko/js/src/vm/Interpreter.cpp:402
43 	libxul.so 	js::Invoke(JSContext*, JS::CallArgs, js::MaybeConstruct) 	/home/geeksphone/FOS/peak/gecko/js/src/vm/Interpreter.cpp:474
44 	libxul.so 	js::CallOrConstructBoundFunction(JSContext*, unsigned int, JS::Value*) 	/home/geeksphone/FOS/peak/gecko/js/src/jsfun.cpp:1401
45 	libxul.so 	js::Invoke(JSContext*, JS::CallArgs, js::MaybeConstruct) 	/home/geeksphone/FOS/peak/gecko/js/src/jscntxtinlines.h:241
46 	libxul.so 	js::Invoke(JSContext*, JS::Value const&, JS::Value const&, unsigned int, JS::Value const*, JS::MutableHandle<JS::Value>) 	/home/geeksphone/FOS/peak/gecko/js/src/vm/Interpreter.cpp:511
47 	libxul.so 	js::DirectProxyHandler::call(JSContext*, JS::Handle<JSObject*>, JS::CallArgs const&) 	/home/geeksphone/FOS/peak/gecko/js/src/jsproxy.cpp:448
48 	libxul.so 	js::CrossCompartmentWrapper::call(JSContext*, JS::Handle<JSObject*>, JS::CallArgs const&) 	/home/geeksphone/FOS/peak/gecko/js/src/jswrapper.cpp:462
49 	libxul.so 	js::Proxy::call(JSContext*, JS::Handle<JSObject*>, JS::CallArgs const&) 	/home/geeksphone/FOS/peak/gecko/js/src/jsproxy.cpp:2540
50 	libxul.so 	js::proxy_Call(JSContext*, unsigned int, JS::Value*) 	/home/geeksphone/FOS/peak/gecko/js/src/jsproxy.cpp:2927
51 	libxul.so 	js::Invoke(JSContext*, JS::CallArgs, js::MaybeConstruct) 	/home/geeksphone/FOS/peak/gecko/js/src/jscntxtinlines.h:241
52 	libxul.so 	js::Invoke(JSContext*, JS::Value const&, JS::Value const&, unsigned int, JS::Value const*, JS::MutableHandle<JS::Value>) 	/home/geeksphone/FOS/peak/gecko/js/src/vm/Interpreter.cpp:511
53 	libxul.so 	JS_CallFunctionValue(JSContext*, JS::Handle<JSObject*>, JS::Handle<JS::Value>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>) 	/home/geeksphone/FOS/peak/gecko/js/src/jsapi.cpp:5095
54 	libxul.so 	nsFrameMessageManager::ReceiveMessage(nsISupports*, nsAString_internal const&, bool, mozilla::dom::StructuredCloneData const*, CpowHolder*, nsIPrincipal*, nsTArray<nsString>*) 	/home/geeksphone/FOS/peak/gecko/content/base/src/nsFrameMessageManager.cpp:1074
55 	libxul.so 	nsSameProcessAsyncMessageBase::ReceiveMessage(nsISupports*, nsFrameMessageManager*) 	/home/geeksphone/FOS/peak/gecko/content/base/src/nsFrameMessageManager.cpp:1981
56 	libxul.so 	nsAsyncMessageToParent::Run() 	/home/geeksphone/FOS/peak/gecko/content/base/src/nsInProcessTabChildGlobal.cpp:77
57 	libxul.so 	nsThread::ProcessNextEvent(bool, bool*) 	/home/geeksphone/FOS/peak/gecko/xpcom/threads/nsThread.cpp:766
58 	libxul.so 	NS_ProcessNextEvent(nsIThread*, bool) 	/home/geeksphone/FOS/peak/gecko/xpcom/glue/nsThreadUtils.cpp:263
59 	libxul.so 	nsThread::Shutdown() 	/home/geeksphone/FOS/peak/gecko/xpcom/threads/nsThread.cpp:598
60 	libxul.so 	nsRunnableMethodImpl<unsigned int (mozilla::MediaDecoderReader::*)(), void, true>::Run() 	
61 	libxul.so 	nsThread::ProcessNextEvent(bool, bool*) 	/home/geeksphone/FOS/peak/gecko/xpcom/threads/nsThread.cpp:766
62 	libxul.so 	NS_ProcessNextEvent(nsIThread*, bool) 	/home/geeksphone/FOS/peak/gecko/xpcom/glue/nsThreadUtils.cpp:263
63 	libxul.so 	mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) 	/home/geeksphone/FOS/peak/gecko/ipc/glue/MessagePump.cpp:95
64 	libxul.so 	MessageLoop::RunInternal() 	/home/geeksphone/FOS/peak/gecko/ipc/chromium/src/base/message_loop.cc:229
65 	libxul.so 	MessageLoop::Run() 	/home/geeksphone/FOS/peak/gecko/ipc/chromium/src/base/message_loop.cc:222
66 	libxul.so 	nsBaseAppShell::Run() 	/home/geeksphone/FOS/peak/gecko/widget/xpwidgets/nsBaseAppShell.cpp:164
67 	libxul.so 	nsAppStartup::Run() 	/home/geeksphone/FOS/peak/gecko/toolkit/components/startup/nsAppStartup.cpp:278
68 	libxul.so 	XREMain::XRE_mainRun() 	/home/geeksphone/FOS/peak/gecko/toolkit/xre/nsAppRunner.cpp:4011
69 	libxul.so 	XREMain::XRE_main(int, char**, nsXREAppData const*) 	/home/geeksphone/FOS/peak/gecko/toolkit/xre/nsAppRunner.cpp:4082
70 	libxul.so 	XRE_main 	/home/geeksphone/FOS/peak/gecko/toolkit/xre/nsAppRunner.cpp:4296
71 	b2g 	main 	/home/geeksphone/FOS/peak/gecko/b2g/app/nsBrowserApp.cpp:163
72 	libc.so 	__libc_init 	/home/geeksphone/FOS/keon_nightly/bionic/libc/bionic/libc_init_dynamic.c:114
73 	b2g 	NS_StringSetData

More reports : https://crash-stats.mozilla.com/report/list?product=B2G&signature=js%3A%3Adetail%3A%3AHashTable%3Cjs%3A%3AHashMapEntry%3Cjs%3A%3ACrossCompartmentKey%2C+js%3A%3AReadBarriered%3CJS%3A%3AValue%3E+%3E%2C+js%3A%3AHashMap%3Cjs%3A%3ACrossCompartmentKey%2C+js%3A%3AReadBarriered%3CJS%3A%3AValue%3E%2C+js%3A%3AWrapperHasher%2C+js%3A%3ASystemAllocPolicy%3E%3A%3AMapHashPolicy%2C+js%3A%3ASystemAllocPolicy%3E%3A%3Alookup%28...

Bug 1017788 may be similar; it could possibly be like  bug 1011281 and be a garbage stack OOM issue...
Looks like the only build affected is 20140619041538 on peak... closing bug out for now.
Status: NEW → RESOLVED
Closed: 10 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.