1048758 - Firefox crash in [@ jemalloc_crash | malloc_usable_size | nsUrlClassifierPrefixSet::SizeOfIncludingThis(unsigned long (*)(void const*)) ]

Status: RESOLVED WONTFIX

(Toolkit :: General, defect)

Description

[Daniel Gherasim]

Firefox version affected: Firefox 32 (Beta) 20140804164216

This happened on our mozmill endurance testrun, in this test:
https://hg.mozilla.org/qa/mozmill-tests/file/da4922c06ddc/firefox/tests/endurance/testFlash_SWFVideoURL/test1.js

We basically open/close multiple times a page with flash content inside.

This happened on linux x86 (13.10) and here this is the thread:

> 0 firefox jemalloc_crash  memory/mozjemalloc/jemalloc.c
> 1 firefox malloc_usable_size  memory/mozjemalloc/jemalloc.c
> 2 libxul.so nsUrlClassifierPrefixSet::SizeOfIncludingThis(unsigned long (*)(void const*)) obj-firefox/dist/include/nsTArray.h
> 3 libxul.so nsUrlClassifierPrefixSet::CollectReports(nsIMemoryReporterCallback*, nsISupports*)  toolkit/components/url-classifier/nsUrlClassifierPrefixSet.cpp
> 4 libxul.so nsMemoryReporterManager::GetReportsForThisProcessExtended(nsIMemoryReporterCallback*, nsISupports*, nsAString_internal const&)  xpcom/base/nsMemoryReporterManager.cpp
> 5 libxul.so nsMemoryReporterManager::GetReportsForThisProcess(nsIMemoryReporterCallback*, nsISupports*) xpcom/base/nsMemoryReporterManager.cpp
> 6 libxul.so nsMemoryReporterManager::GetExplicit(long*) xpcom/base/nsMemoryReporterManager.cpp
> 7 libxul.so NS_InvokeByIndex  xpcom/reflect/xptcall/src/md/unix/xptcinvoke_x86_64_unix.cpp
> 8 libxul.so XPCWrappedNative::CallMethod(XPCCallContext&, XPCWrappedNative::CallMode) js/xpconnect/src/XPCWrappedNative.cpp
> 9 libxul.so XPC_WN_GetterSetter(JSContext*, unsigned int, JS::Value*) js/xpconnect/src/xpcprivate.h
> 10  libxul.so js::Invoke(JSContext*, JS::CallArgs, js::MaybeConstruct)  js/src/jscntxtinlines.h
> 11  libxul.so js::Invoke(JSContext*, JS::Value const&, JS::Value const&, unsigned int, JS::Value const*, JS::MutableHandle<JS::Value>)  js/src/vm/Interpreter.cpp
> 12  libxul.so js::InvokeGetterOrSetter(JSContext*, JSObject*, JS::Value, unsigned int, JS::Value*, JS::MutableHandle<JS::Value>)  js/src/vm/Interpreter.cpp
> 13  libxul.so js::baseops::GetProperty(JSContext*, JS::Handle<JSObject*>, JS::Handle<JSObject*>, JS::Handle<jsid>, JS::MutableHandle<JS::Value>)  js/src/vm/Shape-inl.h
> 14  libxul.so Interpret js/src/jsobj.h
> 15  libxul.so js::RunScript(JSContext*, js::RunState&)  js/src/vm/Interpreter.cpp
> 16  libxul.so js::Invoke(JSContext*, JS::CallArgs, js::MaybeConstruct)  js/src/vm/Interpreter.cpp
> 17  libxul.so js::Invoke(JSContext*, JS::Value const&, JS::Value const&, unsigned int, JS::Value const*, JS::MutableHandle<JS::Value>)  js/src/vm/Interpreter.cpp
> 18  libxul.so js::DirectProxyHandler::call(JSContext*, JS::Handle<JSObject*>, JS::CallArgs const&)  js/src/jsproxy.cpp
> 19  libxul.so js::CrossCompartmentWrapper::call(JSContext*, JS::Handle<JSObject*>, JS::CallArgs const&) js/src/jswrapper.cpp
> 20  libxul.so js::Proxy::call(JSContext*, JS::Handle<JSObject*>, JS::CallArgs const&) js/src/jsproxy.cpp

Comment 1

[Sylvestre Ledru [:Sylvestre]]

Closing because no crash reported since 12 weeks.