Closed Bug 1026978 Opened 10 years ago Closed 9 years ago

Intermittent 720103-1.svg | application crashed [@ js::gc::IsAboutToBeFinalized<js::Shape>]

Categories

(Core :: JavaScript: GC, defect)

x86
macOS
defect
Not set
normal

Tracking

()

RESOLVED WORKSFORME

People

(Reporter: cbook, Unassigned)

References

()

Details

(Keywords: crash, intermittent-failure)

Rev4 MacOSX Snow Leopard 10.6 fx-team opt test crashtest on 2014-06-17 14:56:10 PDT for push 0d19c3ec7b2b

slave: t-snow-r4-0029

https://tbpl.mozilla.org/php/getParsedLog.php?id=41902859&tree=Fx-Team

14:59:27  WARNING -  PROCESS-CRASH | file:///builds/slave/talos-slave/test/build/tests/reftest/tests/dom/smil/crashtests/720103-1.svg | application crashed [@ js::gc::IsAboutToBeFinalized<js::Shape>]

14:59:27     INFO -  Operating system: Mac OS X
14:59:27     INFO -                    10.6.8 10K549
14:59:27     INFO -  CPU: amd64
14:59:27     INFO -       family 6 model 23 stepping 10
14:59:27     INFO -       2 CPUs
14:59:27     INFO -  Crash reason:  EXC_BAD_ACCESS / KERN_INVALID_ADDRESS
14:59:27     INFO -  Crash address: 0xffff8
14:59:27     INFO -  Thread 0 (crashed)
14:59:27     INFO -   0  XUL!js::gc::IsAboutToBeFinalized<js::Shape> [Heap.h:0d19c3ec7b2b : 1023 + 0x0]
14:59:27     INFO -      rbx = 0x0000000000000000   r12 = 0x0000000000000001
14:59:27     INFO -      r13 = 0x0000000156a76c00   r14 = 0x00007fff5fbfcb50
14:59:27     INFO -      r15 = 0x0000000000000000   rip = 0x00000001041759ca
14:59:27     INFO -      rsp = 0x00007fff5fbfcaa0   rbp = 0x00007fff5fbfcac0
14:59:27     INFO -      Found by: given as instruction pointer in context
14:59:27     INFO -   1  XUL!js::gc::IsShapeAboutToBeFinalized(js::Shape**) [Marking.cpp:0d19c3ec7b2b : 566 + 0x4]
14:59:27     INFO -      rbx = 0x00000001304bae98   r12 = 0x0000000000000001
14:59:27     INFO -      r13 = 0x0000000156a76c00   r14 = 0x0000000156a76060
14:59:27     INFO -      r15 = 0x000000011b4e1000   rip = 0x00000001041759a9
14:59:27     INFO -      rsp = 0x00007fff5fbfcad0   rbp = 0x00007fff5fbfcad0
14:59:27     INFO -      Found by: call frame info
14:59:27     INFO -   2  XUL!JSCompartment::sweepInitialShapeTable() [Shape.cpp:0d19c3ec7b2b : 1825 + 0x4]
14:59:27     INFO -      rbx = 0x00000001304bae98   r12 = 0x0000000000000001
14:59:27     INFO -      r13 = 0x0000000156a76c00   r14 = 0x0000000156a76060
14:59:27     INFO -      r15 = 0x000000011b4e1000   rip = 0x00000001044f60b1
14:59:27     INFO -      rsp = 0x00007fff5fbfcae0   rbp = 0x00007fff5fbfcbc0
14:59:27     INFO -      Found by: call frame info
14:59:27     INFO -   3  XUL!JSCompartment::sweep(js::FreeOp*, bool) [jscompartment.cpp:0d19c3ec7b2b : 598 + 0x7]
14:59:27     INFO -      rbx = 0x00007fff5fbfcc58   r12 = 0x000000014f60f000
14:59:27     INFO -      r13 = 0x000000012a692618   r14 = 0x000000011b4e1620
14:59:27     INFO -      r15 = 0x000000011b4e1000   rip = 0x00000001043b7c55
14:59:27     INFO -      rsp = 0x00007fff5fbfcbd0   rbp = 0x00007fff5fbfcc10
14:59:27     INFO -      Found by: call frame info
14:59:27     INFO -   4  XUL!js::gc::GCRuntime::beginSweepingZoneGroup() [Zone.h:0d19c3ec7b2b : 349 + 0xd]
14:59:27     INFO -      rbx = 0x000000011b4e1620   r12 = 0x0004fc0f4005f06c
14:59:27     INFO -      r13 = 0x000000012a692618   r14 = 0x000000012a692570
14:59:27     INFO -      r15 = 0x0000000100374800   rip = 0x00000001043d6498
14:59:27     INFO -      rsp = 0x00007fff5fbfcc20   rbp = 0x00007fff5fbfcc90
14:59:27     INFO -      Found by: call frame info
Component: JavaScript Engine → JavaScript: GC
Inactive; closing (see bug 1180138).
Status: NEW → RESOLVED
Closed: 9 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.