1026655 - crash in jemalloc_crash | arena_dalloc | je_free | free | moz_free | XPCNativeInterface::DestroyInstance(XPCNativeInterface*)

Status: RESOLVED INACTIVE

(Core :: XPConnect, defect)

Description

[Naoki Hirata :nhirata (please use needinfo instead of cc)]

This bug was filed from the Socorro interface and is 
report bp-e2fd6bae-cec5-45a9-88f3-9701a2140612.
=============================================================
Frame 	Module 	Signature 	Source
0 	libmozglue.so 	jemalloc_crash 	/home/geeksphone/FOS/peak/gecko/memory/mozjemalloc/jemalloc.c:1570
1 	libmozglue.so 	arena_dalloc 	/home/geeksphone/FOS/peak/gecko/memory/mozjemalloc/jemalloc.c:4444
2 	libmozglue.so 	je_free 	/home/geeksphone/FOS/peak/gecko/memory/mozjemalloc/jemalloc.c:6502
3 	libmozglue.so 	free 	/home/geeksphone/FOS/peak/gecko/memory/build/replace_malloc.c:200
4 	libxul.so 	moz_free 	/home/geeksphone/FOS/peak/gecko/memory/mozalloc/mozalloc.cpp:46
5 	libxul.so 	XPCNativeInterface::DestroyInstance(XPCNativeInterface*) 	/home/geeksphone/FOS/peak/objdir-gecko/js/xpconnect/src/../../../dist/include/mozilla/mozalloc.h:237
6 	libxul.so 	NativeInterfaceSweeper 	/home/geeksphone/FOS/peak/gecko/js/xpconnect/src/XPCJSRuntime.cpp:110
7 	libxul.so 	PL_DHashTableEnumerate(PLDHashTable*, PLDHashOperator (*)(PLDHashTable*, PLDHashEntryHdr*, unsigned int, void*), void*) 	/home/geeksphone/FOS/peak/gecko/xpcom/glue/pldhash.cpp:662
8 	libxul.so 	XPCJSRuntime::FinalizeCallback(JSFreeOp*, JSFinalizeStatus, bool, void*) 	/home/geeksphone/FOS/peak/gecko/js/xpconnect/src/XPCMaps.h:271
9 	libxul.so 	js::gc::GCRuntime::endSweepPhase(js::JSGCInvocationKind, bool) 	/home/geeksphone/FOS/peak/gecko/js/src/jsgc.cpp:4284
10 	libxul.so 	js::gc::GCRuntime::incrementalCollectSlice(long long, JS::gcreason::Reason, js::JSGCInvocationKind) 	/home/geeksphone/FOS/peak/gecko/js/src/jsgc.cpp:4745
11 	libxul.so 	js::gc::GCRuntime::gcCycle(bool, long long, js::JSGCInvocationKind, JS::gcreason::Reason) 	/home/geeksphone/FOS/peak/gecko/js/src/jsgc.cpp:4862
12 	libxul.so 	js::gc::GCRuntime::collect(bool, long long, js::JSGCInvocationKind, JS::gcreason::Reason) 	/home/geeksphone/FOS/peak/gecko/js/src/jsgc.cpp:4995
13 	libxul.so 	js::gc::GCIfNeeded(JSContext*) 	/home/geeksphone/FOS/peak/gecko/js/src/jsgc.cpp:5046
14 	libxul.so 	js::Invoke(JSContext*, JS::CallArgs, js::MaybeConstruct) 	/home/geeksphone/FOS/peak/gecko/js/src/vm/Interpreter.cpp:409
15 	libxul.so 	js::Invoke 	/home/geeksphone/FOS/peak/gecko/js/src/vm/Interpreter.cpp:511
16 	libxul.so 	js::jit::DoCallFallback 	/home/geeksphone/FOS/peak/gecko/js/src/jit/BaselineIC.cpp:8140
17 		@0x42e00166 	

Note:
1. crashes seem to start from 20140612041620

Comment 1

[Naoki Hirata :nhirata (please use needinfo instead of cc)]

More crashes: https://crash-stats.mozilla.com/report/list?product=B2G&signature=jemalloc_crash+|+arena_dalloc+|+je_free+|+free+|+moz_free+|+XPCNativeInterface%3A%3ADestroyInstance%28XPCNativeInterface*%29#tab-reports

Comment 2

[Naoki Hirata :nhirata (please use needinfo instead of cc)]

It looks like it's not just geeksphone : 
https://crash-stats.mozilla.com/report/index/9a63cb01-756a-45ec-a637-26d182140714

I think this might be a buri/hamachi start up that failed.

Comment 3

[BMO Automation]

Per policy at https://wiki.mozilla.org/Bug_Triage/Projects/Bug_Handling/Bug_Husbandry#Inactive_Bugs. If this bug is not an enhancement request or a bug not present in a supported release of Firefox, then it may be reopened.