Closed Bug 731905 Opened 12 years ago Closed 12 years ago

Intermittent emptyspan-2.html | Exited with code 1 from a crash [@ js::BaseShape::finalize]

Categories

(Core :: JavaScript Engine, defect)

Product:
Core
Component:
JavaScript Engine
Platform:
x86_64
macOS
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED WORKSFORME

People

(Reporter: philor, Unassigned)

References

Details

(Keywords: crash, intermittent-failure)

Crash Data

https://tbpl.mozilla.org/php/getParsedLog.php?id=9733983&tree=Mozilla-Inbound
Rev4 MacOSX Snow Leopard 10.6 mozilla-inbound debug test reftest on 2012-02-29 19:10:24 PST for push 1820c723a6ad

TEST-UNEXPECTED-FAIL | file:///Users/cltbld/talos-slave/test/build/reftest/tests/layout/reftests/ib-split/emptyspan-2.html | Exited with code 1 during test run
INFO | automation.py | Application ran for: 0:15:34.925088
INFO | automation.py | Reading PID log: /var/folders/Hs/HsDn6a9SG8idoIya6p9mtE+++TI/-Tmp-/tmpaXYdiLpidlog
PROCESS-CRASH | file:///Users/cltbld/talos-slave/test/build/reftest/tests/layout/reftests/ib-split/emptyspan-2.html | application crashed (minidump found)
Crash dump filename: /var/folders/Hs/HsDn6a9SG8idoIya6p9mtE+++TI/-Tmp-/tmplMa_we/minidumps/4C57EB8B-F071-4AFA-A9AE-89B270963DBE.dmp
Operating system: Mac OS X
                  10.6.8 10K549
CPU: amd64
     family 6 model 23 stepping 10
     2 CPUs

Crash reason:  EXC_BAD_ACCESS / KERN_INVALID_ADDRESS
Crash address: 0x10

Thread 0 (crashed)
 0  XUL!js::BaseShape::finalize [Utility.h : 152 + 0x0]
    rbx = 0x00165e20   r12 = 0x00000000   r13 = 0x28fcb548   r14 = 0x28f00000
    r15 = 0x00000038   rip = 0x03a15593   rsp = 0x5fbfc120   rbp = 0x5fbfc140
    Found by: given as instruction pointer in context
 1  XUL!js::gc::Arena::finalize<js::BaseShape> [jsgc.cpp:1820c723a6ad : 364 + 0x14]
    rbx = 0x0000065a   r12 = 0x000196a9   r13 = 0x28fcb548   r14 = 0x28f00000
    r15 = 0x00000038   rip = 0x03905893   rsp = 0x5fbfc150   rbp = 0x5fbfc230
    Found by: call frame info
 2  XUL!js::gc::FinalizeArenas [jsgc.cpp:1820c723a6ad : 411 + 0x13]
    rbx = 0x28fcb000   r12 = 0x00ccfe30   r13 = 0x0000000e   r14 = 0x00165e20
    r15 = 0x00ccfe30   rip = 0x038f67dc   rsp = 0x5fbfc240   rbp = 0x5fbfc2b0
    Found by: call frame info
 3  XUL!SweepPhase [jsgc.cpp:1820c723a6ad : 1572 + 0x17]
    rbx = 0x00ccfc10   r12 = 0x00ccfc00   r13 = 0x016f71a0   r14 = 0x016f7280
    r15 = 0x05bae318   rip = 0x038f76be   rsp = 0x5fbfc2c0   rbp = 0x5fbfc350
    Found by: call frame info
 4  XUL!IncrementalGCSlice [jsgc.cpp:1820c723a6ad : 3530 + 0x11]
    rbx = 0x016f7280   r12 = 0x016f7278   r13 = 0x016f7280   r14 = 0x016f7280
    r15 = 0x00000001   rip = 0x038f836d   rsp = 0x5fbfc360   rbp = 0x5fbfc400
    Found by: call frame info
 5  XUL!GCCycle [jsgc.cpp:1820c723a6ad : 3678 + 0x18]
    rbx = 0x24c34d40   r12 = 0x24c34d40   r13 = 0x00000014   r14 = 0x280b2000
    r15 = 0x24c34c00   rip = 0x038f8a83   rsp = 0x5fbfc410   rbp = 0x5fbfc590
    Found by: call frame info
 6  XUL!Collect [jsgc.cpp:1820c723a6ad : 3741 + 0x11]
    rbx = 0x05bae000   r12 = 0x00165e20   r13 = 0x00000000   r14 = 0x05bb0978
    r15 = 0x00000000   rip = 0x038fde6d   rsp = 0x5fbfc5a0   rbp = 0x5fbfc610
    Found by: call frame info
 7  XUL!nsXPConnect::Collect [nsXPConnect.cpp:1820c723a6ad : 426 + 0xa]
    rbx = 0x00165e20   r12 = 0x00000002   r13 = 0x00000013   r14 = 0x5fbfc640
    r15 = 0x5fbfc720   rip = 0x02ad3b88   rsp = 0x5fbfc620   rbp = 0x5fbfc770
    Found by: call frame info
 8  XUL!nsXPConnect::GarbageCollect [nsXPConnect.cpp:1820c723a6ad : 436 + 0x8]
    rbx = 0x0101c200   r12 = 0x00000002   r13 = 0x00000013   r14 = 0x00000000
    r15 = 0xf3b01aa6   rip = 0x02acfe1d   rsp = 0x5fbfc780   rbp = 0x5fbfc780
    Found by: call frame info
 9  XUL!nsJSContext::GarbageCollectNow [nsJSEnvironment.cpp:1820c723a6ad : 3156 + 0xe]
    rbx = 0x0101c200   r12 = 0x00000002   r13 = 0x00000013   r14 = 0x00000000
    r15 = 0xf3b01aa6   rip = 0x02474938   rsp = 0x5fbfc790   rbp = 0x5fbfc7b0
Blocks: 438871
Whiteboard: [orange]
Severity: normal → critical
Crash Signature: [@ js::BaseShape::finalize]
Keywords: crash
Status: NEW → RESOLVED
Closed: 12 years ago
Resolution: --- → WORKSFORME
Whiteboard: [orange]
You need to log in before you can comment on or make changes to this bug.