1099387 - Intermittent browser_426329.js | application crashed [@ js::gc::TenuredCell::arenaHeader() const] after "Assertion failure: isTenured(), at js/src/gc/Heap.h:1296"

Status: RESOLVED WORKSFORME

(Core :: JavaScript: GC, defect)

Description

[Ryan VanderMeulen [:RyanVM]]

11:03:59     INFO -  Assertion failure: isTenured(), at /builds/slave/m-in-osx64-d-00000000000000000/build/js/src/gc/Heap.h:1296
11:04:00     INFO -  TEST-INFO | Main app process: killed by SIGHUP
11:04:00  WARNING -  TEST-UNEXPECTED-FAIL | ShutdownLeaks | process() called before end of test suite
11:04:00     INFO -  1373 ERROR TEST-UNEXPECTED-FAIL | chrome://mochitests/content/browser/browser/components/search/test/browser_426329.js | application terminated with exit code 1
11:04:00     INFO -  runtests.py | Application ran for: 0:31:49.013939
11:04:00     INFO -  zombiecheck | Reading PID log: /var/folders/o-/o-r1A8-nEbecY6DO65FkLU+++-k/-Tmp-/tmpk5eRIWpidlog
11:04:23     INFO -  mozcrash Saved minidump as /builds/slave/talos-slave/test/build/blobber_upload_dir/D131A1CC-0A22-4090-B193-7A1000700F6D.dmp
11:04:23     INFO -  mozcrash Saved app info as /builds/slave/talos-slave/test/build/blobber_upload_dir/D131A1CC-0A22-4090-B193-7A1000700F6D.extra
11:04:23  WARNING -  PROCESS-CRASH | chrome://mochitests/content/browser/browser/components/search/test/browser_426329.js | application crashed [@ js::gc::TenuredCell::arenaHeader() const]
11:04:23     INFO -  Crash dump filename: /var/folders/o-/o-r1A8-nEbecY6DO65FkLU+++-k/-Tmp-/tmp2AU_s8.mozrunner/minidumps/D131A1CC-0A22-4090-B193-7A1000700F6D.dmp
11:04:23     INFO -  Operating system: Mac OS X
11:04:23     INFO -                    10.6.8 10K549
11:04:23     INFO -  CPU: amd64
11:04:23     INFO -       family 6 model 23 stepping 10
11:04:23     INFO -       2 CPUs
11:04:23     INFO -  Crash reason:  EXC_BAD_ACCESS / KERN_INVALID_ADDRESS
11:04:23     INFO -  Crash address: 0x0
11:04:23     INFO -  Thread 0 (crashed)
11:04:23     INFO -   0  XUL!js::gc::TenuredCell::arenaHeader() const [HeapAPI.h:d146f4b9606d : 263 + 0x0]
11:04:23     INFO -      rbx = 0x00007fff70b482f8   r12 = 0x00000001773a59c0
11:04:23     INFO -      r13 = 0x00000001090ecce0   r14 = 0x00000001090ecce0
11:04:23     INFO -      r15 = 0x0000000174ccb238   rip = 0x0000000104ff4d67
11:04:23     INFO -      rsp = 0x00007fff5fbf86f0   rbp = 0x00007fff5fbf8700
11:04:23     INFO -      Found by: given as instruction pointer in context
11:04:23     INFO -   1  XUL!PushMarkStack [Heap.h:d146f4b9606d : 1311 + 0x7]
11:04:23     INFO -      rbx = 0x0000000174ccb238   r12 = 0x00000001773a59c0
11:04:23     INFO -      r13 = 0x00000001090ecce0   r14 = 0x00000001090ecce0
11:04:23     INFO -      r15 = 0x0000000174ccb238   rip = 0x0000000104cb93c8
11:04:23     INFO -      rsp = 0x00007fff5fbf8710   rbp = 0x00007fff5fbf8730
11:04:23     INFO -      Found by: call frame info
11:04:23     INFO -   2  XUL!js::GCMarker::processMarkStackTop(js::SliceBudget&) [Marking.cpp:d146f4b9606d : 1780 + 0xa]
11:04:23     INFO -      rbx = 0x0000000174ccb238   r12 = 0x00000001773a59c0
11:04:23     INFO -      r13 = 0x00000001090ecce0   r14 = 0x00007fff5fbf87e0
11:04:23     INFO -      r15 = 0x00000001090ecce0   rip = 0x0000000104cc76da
11:04:23     INFO -      rsp = 0x00007fff5fbf8740   rbp = 0x00007fff5fbf8780
11:04:23     INFO -      Found by: call frame info
11:04:23     INFO -   3  XUL!js::GCMarker::drainMarkStack(js::SliceBudget&) [Marking.cpp:d146f4b9606d : 1859 + 0xa]
11:04:23     INFO -      rbx = 0x00000001090ecce0   r12 = 0x00000001090ec401
11:04:23     INFO -      r13 = 0x00000001090ecce0   r14 = 0x00007fff5fbf87e0
11:04:23     INFO -      r15 = 0x0000000000000000   rip = 0x0000000104cb5fab
11:04:23     INFO -      rsp = 0x00007fff5fbf8790   rbp = 0x00007fff5fbf87a0
11:04:23     INFO -      Found by: call frame info
11:04:23     INFO -   4  XUL!void js::gc::GCRuntime::markWeakReferences<js::CompartmentsIterT<js::gc::GCZonesIter> >(js::gcstats::Phase) [jsgc.cpp:d146f4b9606d : 4035 + 0xb]
11:04:23     INFO -      rbx = 0x00007fff5fbf87f0   r12 = 0x00000001090ec401
11:04:23     INFO -      r13 = 0x00000001090ecce0   r14 = 0x00000001090ec348
11:04:23     INFO -      r15 = 0x0000000000000000   rip = 0x00000001050bfa5e
11:04:23     INFO -      rsp = 0x00007fff5fbf87b0   rbp = 0x00007fff5fbf8840
11:04:23     INFO -      Found by: call frame info

Comment 1

[Legacy TBPL/Treeherder Robot]

submit_timestamp: 2014-11-14T14:01:43
log: https://treeherder.mozilla.org/ui/logviewer.html#?repo=mozilla-inbound&job_id=3913828
repository: mozilla-inbound
who: rvandermeulen[at]mozilla[dot]com
machine: t-snow-r4-0114
buildname: Rev4 MacOSX Snow Leopard 10.6 mozilla-inbound debug test mochitest-browser-chrome-1
revision: d146f4b9606d

Assertion failure: isTenured(), at /builds/slave/m-in-osx64-d-00000000000000000/build/js/src/gc/Heap.h:1296
TEST-UNEXPECTED-FAIL | ShutdownLeaks | process() called before end of test suite
1373 ERROR TEST-UNEXPECTED-FAIL | chrome://mochitests/content/browser/browser/components/search/test/browser_426329.js | application terminated with exit code 1
PROCESS-CRASH | chrome://mochitests/content/browser/browser/components/search/test/browser_426329.js | application crashed [@ js::gc::TenuredCell::arenaHeader() const]
TEST-UNEXPECTED-FAIL | leakcheck | default process: missing output line for total leaks!
Return code: 1
No tests run or test summary not found

Comment 2

[Ed Morley [:emorley]]

Inactive; closing (see bug 1180138).