1071506 - crash in CCGraphBuilder::NoteWeakMapping(void*, void*, void*, void*)

Status: RESOLVED INCOMPLETE

(Core :: XPCOM, defect)

Description

[Andrei Eftimie]

This bug was filed from the Socorro interface and is 
report bp-eac56cc1-bb00-4e75-855c-b6de42140923.
=============================================================

See this during a mozmill testrun.

Nothing helpful in the log:
> 00:24:10 TEST-START | testSecurity/testSafeBrowsingNotificationBar.js | setupModule
> 00:24:10 TEST-START | testSecurity/testSafeBrowsingNotificationBar.js | testNotificationBar
> 00:24:21 
> 00:24:21 ###!!! [Child][MessageChannel::SendAndWait] Error: Channel error: cannot send/recv
> 00:24:21 mozcrash INFO | Saved minidump as /home/mozauto/.mozilla/firefox/Crash Reports/pending/2c982acc-77a8-5cde-5e1d4bbf-5cc3b067.dmp
> 00:24:21 mozcrash INFO | Saved app info as /home/mozauto/.mozilla/firefox/Crash Reports/pending/2c982acc-77a8-5cde-5e1d4bbf-5cc3b067.extra
> 00:24:25 PROCESS-CRASH | /home/mozauto/jenkins/workspace/release-mozilla-beta_remote/data/mozmill-tests/firefox/tests/remote/testSecurity/testSafeBrowsingNotificationBar.js | application crashed [unknown top frame]
> 00:24:25 Crash dump filename: /home/mozauto/jenkins/workspace/release-mozilla-beta_remote/data/profile/minidumps/2c982acc-77a8-5cde-5e1d4bbf-5cc3b067.dmp
> 00:24:25 No symbols path given, can't process dump.
> 00:24:25 MINIDUMP_STACKWALK not set, can't process dump.

Comment 1

[Henrik Skupin [:whimboo][⌚️UTC+2]]

Crash Reason 	SIGSEGV
Crash Address 	0xf00d5ee1

Top 10 frames from the stack:

0 		@0xf00d5ee1 	
1 	libxul.so 	CCGraphBuilder::NoteWeakMapping(void*, void*, void*, void*) 	obj-firefox/dist/include/nsTArray.h
2 	libxul.so 	js::WeakMap<js::PreBarriered<JSObject*>, js::RelocatablePtr<JS::Value>, js::DefaultHasher<js::PreBarriered<JSObject*> > >::traceMappings(js::WeakMapTracer*) 	js/src/jsweakmap.h
3 	libxul.so 	js::WeakMapBase::traceAllMappings(js::WeakMapTracer*) 	js/src/jsweakmap.cpp
4 	libxul.so 	js::TraceWeakMaps(js::WeakMapTracer*) 	js/src/jsfriendapi.cpp
5 	libxul.so 	mozilla::CycleCollectedJSRuntime::TraverseRoots(nsCycleCollectionNoteRootCallback&) 	xpcom/base/CycleCollectedJSRuntime.cpp
6 	libxul.so 	nsCycleCollector::BeginCollection(ccType, nsICycleCollectorListener*) 	xpcom/base/nsCycleCollector.cpp
7 	libxul.so 	nsCycleCollector::Collect(ccType, js::SliceBudget&, nsICycleCollectorListener*) 	xpcom/base/nsCycleCollector.cpp
8 	libxul.so 	nsCycleCollector_collectSlice(long) 	xpcom/base/nsCycleCollector.cpp
9 	libxul.so 	nsJSContext::RunCycleCollectorSlice() 	dom/base/nsJSEnvironment.cpp
10 	libxul.so 	CCTimerFired 	dom/base/nsJSEnvironment.cpp

Comment 2

[Andrew McCreight [:mccr8]]

There's not too much to go on there.