Closed Bug 1010179 Opened 10 years ago Closed 3 years ago

Firefox 29.0.1 crash at js::jit::BaselineScript::nativeCodeForPC

Categories

(Core :: JavaScript Engine: JIT, defect)

Product:
Core
Component:
JavaScript Engine: JIT
Platform:
x86_64
Windows 7
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED WORKSFORME
Tracking Flags:
Tracking Status
firefox47 --- affected
firefox48 --- affected
firefox49 --- affected
firefox-esr45 --- affected
firefox50 --- affected

People

(Reporter: aditi.avalkar, Unassigned, NeedInfo)

References

Details

(Keywords: crash)

Crash Data

Attachments

(1 file)

crash.png
29.54 KB, image/png
Details
Attached image crash.png — 
User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:28.0) Gecko/20100101 Firefox/28.0 (Beta/Release)
Build ID: 20140314220517

Steps to reproduce:

1.Open firefox
2.visit any website, explore multiple options
3.Issue reproduced by fast switching of tabs or even if a browser left open for long time


Actual results:

Firefox get crashed
Signature in report:Signature  js::jit::BaselineScript::nativeCodeForPC(JSScript*, unsigned char*, js::jit::PCMappingSlotInfo*)


Expected results:

Firefox should not get crashed
Based on public crash report, doesn't need to be security-private.

When filing a crash, please always include the crash report IDs:
https://developer.mozilla.org/en-US/docs/How_to_get_a_stacktrace_for_a_bug_report

Do you have any addons installed, and have you tried disabling them (manually or using Safe Mode)?

The JIT team may have more debugging questions.
Group: core-security
Component: Untriaged → JavaScript Engine: JIT
Flags: needinfo?(aditi.avalkar)
Product: Firefox → Core
Summary: Firefox 29.0.1 crash → Firefox 29.0.1 crash at js::jit::BaselineScript::nativeCodeForPC
Please check required details:
ID: bp-627dbcaa-22a1-4015-aaf3-7cfd22140514
    bp-23f56633-45fa-4131-acac-150c82140514
Yes addons are installed, not tried to disabled during test
Flags: needinfo?(aditi.avalkar)
Version: 28 Branch → 29 Branch
aditi.alvalkar, it would be very helpful to know whether you still experience the crash with your addons disabled. Can you please try that? Also it would helpful to know if you still see the crash using a nightly build (from http://nightly.mozilla.org)

jandem, this is probably a null script* at http://hg.mozilla.org/releases/mozilla-release/annotate/0cd2e9a8ba6f/js/src/jit/BaselineJIT.cpp#l657

Does this look familiar to you at all?
Flags: needinfo?(jdemooij)
(In reply to Benjamin Smedberg  [:bsmedberg] from comment #3)
> jandem, this is probably a null script* at
> http://hg.mozilla.org/releases/mozilla-release/annotate/0cd2e9a8ba6f/js/src/
> jit/BaselineJIT.cpp#l657
> 
> Does this look familiar to you at all?

Yes, it'll likely be fixed by bug 1005306.

aditi.alvalkar, it's a bit surprising that you're hitting this so frequently. Do you have steps to reproduce this with some public URL we can access? I agree with Benjamin, testing with addons disabled would be very helpful.
Depends on: 1005306
Flags: needinfo?(jdemooij)
HI Team, 

I used nightly build but didn't reproduced this issue on this build(with and without addons disabled), Addons I required in daily use so cant disabled it for long time..

Thanks
Crash Signature: [@ js::jit::BaselineScript::nativeCodeForPC(JSScript*, unsigned char*, js::jit::PCMappingSlotInfo*) ]
Keywords: crash
This seems to be alive and kicking on Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0 ID:20140728030201 CSet: de8c0f0e74a2 so marking NEW.
Status: UNCONFIRMED → NEW
Ever confirmed: true
Version: 29 Branch → Trunk
¡Hola Aaron!

Do you happen to have steps that reproduce the crash?

¡Gracias!
Flags: needinfo?(aaron.peschel)
I have not found a discernible pattern or reproducible steps at this time.
Flags: needinfo?(aaron.peschel)
Facing this issue again with firefox version 31.0
ID: 6cd110a8-224c-41ed-a4d9-41ecf2140908
¡Hola Aditi!

I don't know why your latest crash was not linkyfied, so here it is https://crash-stats.mozilla.com/report/index/6cd110a8-224c-41ed-a4d9-41ecf2140908

Firefox was recently updated, see https://www.mozilla.org/en-US/firefox/32.0/releasenotes/

Please update https://support.mozilla.org/en-US/kb/update-firefox-latest-version

Would it be possible for you to test a Nightly from https://nightly.mozilla.org/ and see if the crash goes away?

¡Gracias!
Flags: needinfo?(aditi.avalkar)
Crash Signature: [@ js::jit::BaselineScript::nativeCodeForPC(JSScript*, unsigned char*, js::jit::PCMappingSlotInfo*) ] → [@ js::jit::BaselineScript::nativeCodeForPC(JSScript*, unsigned char*, js::jit::PCMappingSlotInfo*) ] [@ js::jit::BaselineScript::nativeCodeForPC ]
Crash volume for signature 'js::jit::BaselineScript::nativeCodeForPC':
 - nightly(version 50):4 crashes from 2016-06-06.
 - aurora (version 49):10 crashes from 2016-06-07.
 - beta   (version 48):45 crashes from 2016-06-06.
 - release(version 47):190 crashes from 2016-05-31.
 - esr    (version 45):16 crashes from 2016-04-07.

Crash volume on the last weeks:
            W. N-1  W. N-2  W. N-3  W. N-4  W. N-5  W. N-6  W. N-7
 - nightly       1       1       0       0       2       0       0
 - aurora        1       2       2       1       1       0       3
 - beta         11       5       6       6       4       8       5
 - release      10      15      43      15      35      35      30
 - esr           1       1       2       0       0       1       3

Affected platforms: Windows, Mac OS X, Linux
status-firefox47: --- → affected
status-firefox48: --- → affected
status-firefox49: --- → affected
status-firefox50: --- → affected
status-firefox-esr45: --- → affected
This is still happening: https://crash-stats.mozilla.com/report/index/17278086-b13e-4aee-a675-f853e2161018#tab-details

This particular crash happened on the line MOZ_CRASH("No native code for this pc");. Jan, any ideas?
Flags: needinfo?(jdemooij)
Markus, are you still seeing this?

Looking at crash-stats, almost all crashes in the past 7 days are with older Firefox versions so I'm pretty sure this got much better at some point. There are some crashes on 57 and 58, but very different stacks and I'm not sure what's going on there.
Flags: needinfo?(jdemooij)
I haven't seen this in a while, but I've also stopped having the profiler running all the time.
Status: NEW → RESOLVED
Closed: 3 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: