[e10s] crash in js::jit::LInstructionVisitor::visitModPowTwoI(js::jit::LModPowTwoI*)

RESOLVED WORKSFORME

Status

()

Core
JavaScript Engine: JIT
--
critical
RESOLVED WORKSFORME
4 years ago
3 years ago

People

(Reporter: juanb, Unassigned)

Tracking

({crash})

35 Branch
All
Windows NT
crash
Points:
---

Firefox Tracking Flags

(e10sm5+, firefox35 affected)

Details

(crash signature)

(Reporter)

Description

4 years ago
This bug was filed from the Socorro interface and is 
report bp-1b9d3039-9f8e-4206-b41c-b8f722141001.
=============================================================

Currently #39 in the list of top crashers on Firefox 35.0a1. This is happening mostly on Windows 8.1 and Windows 7. The "Build" column in crash-stats only lists builds from 20141001030205. There are several dupes. Crash-stats didn't list any add-on correlations, but looking at several reports I seem to have noticed a couple of them appeared frequently: DownloadHelper and Easy Youtube Video Downloader Express. There are no comments in the reports yet.

This seems to be related to e10s being enabled.

More reports at: https://crash-stats.mozilla.com/report/list?product=Firefox&signature=js%3A%3Ajit%3A%3ALInstructionVisitor%3A%3AvisitModPowTwoI%28js%3A%3Ajit%3A%3ALModPowTwoI%2A%29

0 	mozjs.dll 	js::jit::LInstructionVisitor::visitModPowTwoI(js::jit::LModPowTwoI*) 	js/src/jit/Recover.cpp
1 	mozjs.dll 	js::Proxy::regexp_toShared(JSContext*, JS::Handle<JSObject*>, js::RegExpGuard*) 	js/src/proxy/Proxy.cpp
2 	mozjs.dll 	js::str_match(JSContext*, unsigned int, JS::Value*) 	js/src/jsstr.cpp
3 	mozjs.dll 	js::Invoke(JSContext*, JS::CallArgs, js::MaybeConstruct) 	js/src/vm/Interpreter.cpp
4 	mozjs.dll 	Interpret 	js/src/vm/Interpreter.cpp
5 	mozjs.dll 	js::RunScript(JSContext*, js::RunState&) 	js/src/vm/Interpreter.cpp
6 	mozjs.dll 	js::Invoke(JSContext*, JS::CallArgs, js::MaybeConstruct) 	js/src/vm/Interpreter.cpp
7 	mozjs.dll 	js::Invoke(JSContext*, JS::Value const&, JS::Value const&, unsigned int, JS::Value const*, JS::MutableHandle<JS::Value>) 	js/src/vm/Interpreter.cpp
8 	mozjs.dll 	js::CrossCompartmentWrapper::call(JSContext*, JS::Handle<JSObject*>, JS::CallArgs const&) 	js/src/proxy/CrossCompartmentWrapper.cpp
9 	mozjs.dll 	js::Proxy::call(JSContext*, JS::Handle<JSObject*>, JS::CallArgs const&) 	js/src/proxy/Proxy.cpp
10 	mozjs.dll 	js::proxy_Call(JSContext*, unsigned int, JS::Value*) 	js/src/proxy/Proxy.cpp
11 	mozjs.dll 	js::Invoke(JSContext*, JS::CallArgs, js::MaybeConstruct) 	js/src/vm/Interpreter.cpp
12 	mozjs.dll 	Interpret 	js/src/vm/Interpreter.cpp
13 	mozjs.dll 	js::RunScript(JSContext*, js::RunState&) 	js/src/vm/Interpreter.cpp
14 	mozjs.dll 	js::Invoke(JSContext*, JS::CallArgs, js::MaybeConstruct) 	js/src/vm/Interpreter.cpp
15 	mozjs.dll 	js::Invoke(JSContext*, JS::Value const&, JS::Value const&, unsigned int, JS::Value const*, JS::MutableHandle<JS::Value>) 	js/src/vm/Interpreter.cpp
16 	mozjs.dll 	JS::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>) 	js/src/jsapi.cpp
17 	xul.dll 	mozilla::dom::EventHandlerNonNull::Call(JSContext*, JS::Handle<JS::Value>, mozilla::dom::Event&, JS::MutableHandle<JS::Value>, mozilla::ErrorResult&) 	obj-firefox/dom/bindings/EventHandlerBinding.cpp
18 	xul.dll 	mozilla::dom::EventHandlerNonNull::Call<nsISupports*>(nsISupports* const&, mozilla::dom::Event&, JS::MutableHandle<JS::Value>, mozilla::ErrorResult&, mozilla::dom::CallbackObject::ExceptionHandling) 	obj-firefox/dist/include/mozilla/dom/EventHandlerBinding.h
19 	xul.dll 	mozilla::JSEventHandler::HandleEvent(nsIDOMEvent*) 	dom/events/JSEventHandler.cpp
20 	xul.dll 	mozilla::EventListenerManager::HandleEventSubType(mozilla::EventListenerManager::Listener*, nsIDOMEvent*, mozilla::dom::EventTarget*) 	dom/events/EventListenerManager.cpp
21 	xul.dll 	mozilla::EventListenerManager::HandleEventInternal(nsPresContext*, mozilla::WidgetEvent*, nsIDOMEvent**, mozilla::dom::EventTarget*, nsEventStatus*) 	dom/events/EventListenerManager.cpp
22 	xul.dll 	mozilla::EventTargetChainItem::HandleEvent(mozilla::EventChainPostVisitor&, mozilla::ELMCreationDetector&) 	dom/events/EventDispatcher.cpp
23 	xul.dll 	mozilla::EventTargetChainItem::HandleEventTargetChain(nsTArray<mozilla::EventTargetChainItem>&, mozilla::EventChainPostVisitor&, mozilla::EventDispatchingCallback*, mozilla::ELMCreationDetector&) 	dom/events/EventDispatcher.cpp
24 	xul.dll 	mozilla::EventDispatcher::Dispatch(nsISupports*, nsPresContext*, mozilla::WidgetEvent*, nsIDOMEvent*, nsEventStatus*, mozilla::EventDispatchingCallback*, nsCOMArray<mozilla::dom::EventTarget>*) 	dom/events/EventDispatcher.cpp
25 	xul.dll 	mozilla::EventDispatcher::DispatchDOMEvent(nsISupports*, mozilla::WidgetEvent*, nsIDOMEvent*, nsPresContext*, nsEventStatus*) 	dom/events/EventDispatcher.cpp
26 	xul.dll 	nsINode::DispatchDOMEvent(mozilla::WidgetEvent*, nsIDOMEvent*, nsPresContext*, nsEventStatus*) 	dom/events/DOMEventTargetHelper.cpp
27 	xul.dll 	nsDOMFileReader::DispatchDOMEvent(mozilla::WidgetEvent*, nsIDOMEvent*, nsPresContext*, nsEventStatus*) 	content/base/src/nsDOMDataChannel.h
28 	xul.dll 	nsXMLHttpRequest::ChangeState(unsigned int, bool) 	content/base/src/nsXMLHttpRequest.cpp
29 	xul.dll 	nsXMLHttpRequest::ChangeStateToDone() 	content/base/src/nsXMLHttpRequest.cpp
30 	xul.dll 	nsXMLHttpRequest::OnStopRequest(nsIRequest*, nsISupports*, tag_nsresult) 	content/base/src/nsXMLHttpRequest.cpp
31 	xul.dll 	nsStreamListenerTee::OnStopRequest(nsIRequest*, nsISupports*, tag_nsresult) 	netwerk/base/src/nsStreamListenerTee.cpp
32 	xul.dll 	mozilla::net::nsHttpChannel::OnStopRequest(nsIRequest*, nsISupports*, tag_nsresult) 	netwerk/protocol/http/nsHttpChannel.cpp
33 	xul.dll 	nsInputStreamPump::OnStateStop() 	netwerk/base/src/nsInputStreamPump.cpp
34 	xul.dll 	nsInputStreamPump::OnInputStreamReady(nsIAsyncInputStream*) 	netwerk/base/src/nsInputStreamPump.cpp
35 	xul.dll 	nsOutputStreamReadyEvent::Run() 	xpcom/io/nsStreamUtils.cpp
36 	xul.dll 	nsThread::ProcessNextEvent(bool, bool*) 	xpcom/threads/nsThread.cpp
37 	xul.dll 	NS_ProcessNextEvent(nsIThread*, bool) 	xpcom/glue/nsThreadUtils.cpp
38 	xul.dll 	mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) 	ipc/glue/MessagePump.cpp
39 	xul.dll 	MessageLoop::RunHandler() 	ipc/chromium/src/base/message_loop.cc
40 	xul.dll 	MessageLoop::Run() 	ipc/chromium/src/base/message_loop.cc
41 	xul.dll 	nsBaseAppShell::Run() 	widget/xpwidgets/nsBaseAppShell.cpp
42 	xul.dll 	nsAppShell::Run() 	widget/windows/nsAppShell.cpp
43 	xul.dll 	nsAppStartup::Run() 	toolkit/components/startup/nsAppStartup.cpp
44 	xul.dll 	XREMain::XRE_mainRun() 	toolkit/xre/nsAppRunner.cpp
45 	xul.dll 	XREMain::XRE_main(int, char** const, nsXREAppData const*) 	toolkit/xre/nsAppRunner.cpp
46 	xul.dll 	XRE_main 	toolkit/xre/nsAppRunner.cpp
47 	firefox.exe 	do_main 	browser/app/nsBrowserApp.cpp
48 	firefox.exe 	NS_internal_main(int, char**) 	browser/app/nsBrowserApp.cpp
49 	firefox.exe 	wmain 	toolkit/xre/nsWindowsWMain.cpp
50 	firefox.exe 	__tmainCRTStartup 	f:/dd/vctools/crt_bld/self_64_amd64/crt/src/crt0.c:278
51 	kernel32.dll 	BaseThreadInitThunk 	
52 	ntdll.dll 	RtlUserThreadStart 	
53 	kernel32.dll 	BasepReportFault 	
54 	kernel32.dll 	BasepReportFault
(Reporter)

Updated

4 years ago
Summary: crash in js::jit::LInstructionVisitor::visitModPowTwoI(js::jit::LModPowTwoI*) → [e10s] crash in js::jit::LInstructionVisitor::visitModPowTwoI(js::jit::LModPowTwoI*)

Updated

4 years ago
tracking-e10s: ? → m5+
no reports in the last 7 days
Status: NEW → RESOLVED
Last Resolved: 3 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.