Closed Bug 1026978 Opened 10 years ago Closed 9 years ago

Intermittent 720103-1.svg | application crashed [@ js::gc::IsAboutToBeFinalized<js::Shape>]

Categories

(Core :: JavaScript: GC, defect)

Product:
Core
Component:
JavaScript: GC
Platform:
x86
macOS
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED WORKSFORME

People

(Reporter: cbook, Unassigned)

References

(
URL
)

Details

(Keywords: crash, intermittent-failure)

Rev4 MacOSX Snow Leopard 10.6 fx-team opt test crashtest on 2014-06-17 14:56:10 PDT for push 0d19c3ec7b2b slave: t-snow-r4-0029 https://tbpl.mozilla.org/php/getParsedLog.php?id=41902859&tree=Fx-Team 14:59:27 WARNING - PROCESS-CRASH | file:///builds/slave/talos-slave/test/build/tests/reftest/tests/dom/smil/crashtests/720103-1.svg | application crashed [@ js::gc::IsAboutToBeFinalized<js::Shape>] 14:59:27 INFO - Operating system: Mac OS X 14:59:27 INFO - 10.6.8 10K549 14:59:27 INFO - CPU: amd64 14:59:27 INFO - family 6 model 23 stepping 10 14:59:27 INFO - 2 CPUs 14:59:27 INFO - Crash reason: EXC_BAD_ACCESS / KERN_INVALID_ADDRESS 14:59:27 INFO - Crash address: 0xffff8 14:59:27 INFO - Thread 0 (crashed) 14:59:27 INFO - 0 XUL!js::gc::IsAboutToBeFinalized<js::Shape> [Heap.h:0d19c3ec7b2b : 1023 + 0x0] 14:59:27 INFO - rbx = 0x0000000000000000 r12 = 0x0000000000000001 14:59:27 INFO - r13 = 0x0000000156a76c00 r14 = 0x00007fff5fbfcb50 14:59:27 INFO - r15 = 0x0000000000000000 rip = 0x00000001041759ca 14:59:27 INFO - rsp = 0x00007fff5fbfcaa0 rbp = 0x00007fff5fbfcac0 14:59:27 INFO - Found by: given as instruction pointer in context 14:59:27 INFO - 1 XUL!js::gc::IsShapeAboutToBeFinalized(js::Shape**) [Marking.cpp:0d19c3ec7b2b : 566 + 0x4] 14:59:27 INFO - rbx = 0x00000001304bae98 r12 = 0x0000000000000001 14:59:27 INFO - r13 = 0x0000000156a76c00 r14 = 0x0000000156a76060 14:59:27 INFO - r15 = 0x000000011b4e1000 rip = 0x00000001041759a9 14:59:27 INFO - rsp = 0x00007fff5fbfcad0 rbp = 0x00007fff5fbfcad0 14:59:27 INFO - Found by: call frame info 14:59:27 INFO - 2 XUL!JSCompartment::sweepInitialShapeTable() [Shape.cpp:0d19c3ec7b2b : 1825 + 0x4] 14:59:27 INFO - rbx = 0x00000001304bae98 r12 = 0x0000000000000001 14:59:27 INFO - r13 = 0x0000000156a76c00 r14 = 0x0000000156a76060 14:59:27 INFO - r15 = 0x000000011b4e1000 rip = 0x00000001044f60b1 14:59:27 INFO - rsp = 0x00007fff5fbfcae0 rbp = 0x00007fff5fbfcbc0 14:59:27 INFO - Found by: call frame info 14:59:27 INFO - 3 XUL!JSCompartment::sweep(js::FreeOp*, bool) [jscompartment.cpp:0d19c3ec7b2b : 598 + 0x7] 14:59:27 INFO - rbx = 0x00007fff5fbfcc58 r12 = 0x000000014f60f000 14:59:27 INFO - r13 = 0x000000012a692618 r14 = 0x000000011b4e1620 14:59:27 INFO - r15 = 0x000000011b4e1000 rip = 0x00000001043b7c55 14:59:27 INFO - rsp = 0x00007fff5fbfcbd0 rbp = 0x00007fff5fbfcc10 14:59:27 INFO - Found by: call frame info 14:59:27 INFO - 4 XUL!js::gc::GCRuntime::beginSweepingZoneGroup() [Zone.h:0d19c3ec7b2b : 349 + 0xd] 14:59:27 INFO - rbx = 0x000000011b4e1620 r12 = 0x0004fc0f4005f06c 14:59:27 INFO - r13 = 0x000000012a692618 r14 = 0x000000012a692570 14:59:27 INFO - r15 = 0x0000000100374800 rip = 0x00000001043d6498 14:59:27 INFO - rsp = 0x00007fff5fbfcc20 rbp = 0x00007fff5fbfcc90 14:59:27 INFO - Found by: call frame info
Component: JavaScript Engine → JavaScript: GC
Inactive; closing (see bug 1180138).
Status: NEW → RESOLVED
Closed: 9 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.