If you think a bug might affect users in the 57 release, please set the correct tracking and status flags for Release Management.

Crashes in test_interfaces.html and test_worker_interfaces.html [@ JS_ResolveStandardClass(JSContext*, JS::Handle<JSObject*>, JS::Handle<jsid>, bool*)] when Gecko 36 merges to Aurora

VERIFIED FIXED in Firefox 36

Status

()

Core
JavaScript Engine
--
critical
VERIFIED FIXED
3 years ago
3 years ago

People

(Reporter: RyanVM, Assigned: lth)

Tracking

({crash})

Trunk
mozilla36
crash
Points:
---

Firefox Tracking Flags

(firefox36+ verified)

Details

(Reporter)

Description

3 years ago
[Tracking Requested - why for this release]: Will cause mass test failures when Gecko 36 is uplifted to Aurora.

Looks like it's dying right after a SIMD-related check?

https://treeherder.mozilla.org/ui/logviewer.html#?job_id=2981203&repo=try

00:35:16 INFO - 4598 INFO TEST-PASS | /tests/dom/tests/mochitest/general/test_interfaces.html | SharedArrayBuffer should NOT be defined on the global scope
00:35:16 INFO - 4599 INFO TEST-PASS | /tests/dom/tests/mochitest/general/test_interfaces.html | SharedInt8Array should NOT be defined on the global scope
00:35:16 INFO - 4600 INFO TEST-PASS | /tests/dom/tests/mochitest/general/test_interfaces.html | SharedUint8Array should NOT be defined on the global scope
00:35:16 INFO - 4601 INFO TEST-PASS | /tests/dom/tests/mochitest/general/test_interfaces.html | SharedUint8ClampedArray should NOT be defined on the global scope
00:35:16 INFO - 4602 INFO TEST-PASS | /tests/dom/tests/mochitest/general/test_interfaces.html | SharedInt16Array should NOT be defined on the global scope
00:35:16 INFO - 4603 INFO TEST-PASS | /tests/dom/tests/mochitest/general/test_interfaces.html | SharedUint16Array should NOT be defined on the global scope
00:35:16 INFO - 4604 INFO TEST-PASS | /tests/dom/tests/mochitest/general/test_interfaces.html | SharedInt32Array should NOT be defined on the global scope
00:35:16 INFO - 4605 INFO TEST-PASS | /tests/dom/tests/mochitest/general/test_interfaces.html | SharedUint32Array should NOT be defined on the global scope
00:35:16 INFO - 4606 INFO TEST-PASS | /tests/dom/tests/mochitest/general/test_interfaces.html | SharedFloat32Array should NOT be defined on the global scope
00:35:16 INFO - 4607 INFO TEST-PASS | /tests/dom/tests/mochitest/general/test_interfaces.html | SharedFloat64Array should NOT be defined on the global scope
00:35:16 INFO - 4608 INFO TEST-PASS | /tests/dom/tests/mochitest/general/test_interfaces.html | SIMD should NOT be defined on the global scope
00:35:16 INFO - 4609 ERROR TEST-UNEXPECTED-FAIL | /tests/dom/tests/mochitest/general/test_interfaces.html | application terminated with exit code 11 
00:35:33 WARNING - PROCESS-CRASH | /tests/dom/tests/mochitest/general/test_interfaces.html | application crashed [@ JS_ResolveStandardClass(JSContext*, JS::Handle<JSObject*>, JS::Handle<jsid>, bool*)]
00:35:33 INFO - Crash dump filename: /tmp/tmpzUMpEP.mozrunner/minidumps/233ba6d9-13ca-d01d-5e124d00-541df5c0.dmp
00:35:33 INFO - Operating system: Linux
00:35:33 INFO - 0.0.0 Linux 3.2.0-23-generic-pae #36-Ubuntu SMP Tue Apr 10 22:19:09 UTC 2012 i686
00:35:33 INFO - CPU: x86
00:35:33 INFO - GenuineIntel family 6 model 44 stepping 2
00:35:33 INFO - 1 CPU
00:35:33 INFO - Crash reason: SIGSEGV
00:35:33 INFO - Crash address: 0x6
00:35:33 INFO - Thread 0 (crashed)
00:35:33 INFO - 0 libxul.so!JS_ResolveStandardClass(JSContext*, JS::Handle<JSObject*>, JS::Handle<jsid>, bool*) [jsapi.cpp:198e5ae4b9d7 : 1272 + 0x8]
00:35:33 INFO - eip = 0xb35440a9 esp = 0xbfe7e230 ebp = 0xb723a800 ebx = 0xb6ea4dac
00:35:33 INFO - esi = 0xb58da730 edi = 0x9d15d700 eax = 0x00000000 ecx = 0xb6ea4dac
00:35:33 INFO - edx = 0x00000450 efl = 0x00210286
00:35:33 INFO - Found by: given as instruction pointer in context
00:35:33 INFO - 1 libxul.so!mozilla::dom::ResolveGlobal(JSContext*, JS::Handle<JSObject*>, JS::Handle<jsid>, JS::MutableHandle<JSObject*>) [BindingUtils.cpp:198e5ae4b9d7 : 2298 + 0x1f]
00:35:33 INFO - eip = 0xb33e2a94 esp = 0xbfe7e2a0 ebp = 0xbfe7e388 ebx = 0xb6ea4dac
00:35:33 INFO - esi = 0xbfe7e37c edi = 0xbfe7e37c
00:35:33 INFO - Found by: call frame info
00:35:33 INFO - 2 libxul.so!mozilla::dom::WindowBinding::_newResolve [WindowBinding.cpp:198e5ae4b9d7 : 13092 + 0x17]
00:35:33 INFO - eip = 0xb33e1ab6 esp = 0xbfe7e2d0 ebp = 0xbfe7e388 ebx = 0xb6ea4dac
00:35:33 INFO - esi = 0x9d15d700 edi = 0xbfe7e37c
00:35:33 INFO - Found by: call frame info
00:35:33 INFO - 3 libxul.so!bool js::baseops::LookupProperty<(js::AllowGC)1>(js::ExclusiveContext*, js::MaybeRooted<js::NativeObject*, (js::AllowGC)1>::HandleType, js::MaybeRooted<jsid, (js::AllowGC)1>::HandleType, js::MaybeRooted<JSObject*, (js::AllowGC)1>::MutableHandleType, js::MaybeRooted<js::Shape*, (js::AllowGC)1>::MutableHandleType) [NativeObject-inl.h:198e5ae4b9d7 : 511 + 0x10]
00:35:33 INFO - eip = 0xb35a1b25 esp = 0xbfe7e330 ebp = 0x9d15d700 ebx = 0xb6ea4dac
00:35:33 INFO - esi = 0xbfe7e388 edi = 0xb33e1a80
00:35:33 INFO - Found by: call frame info
00:35:33 INFO - 4 libxul.so!JSObject::lookupGeneric(JSContext*, JS::Handle<JSObject*>, JS::Handle<jsid>, JS::MutableHandle<JSObject*>, JS::MutableHandle<js::Shape*>) [jsobj.cpp:198e5ae4b9d7 : 3064 + 0x27]
00:35:33 INFO - eip = 0xb356a1e9 esp = 0xbfe7e3c0 ebp = 0xbfe7e5b4 ebx = 0xb6ea4dac
00:35:33 INFO - esi = 0x9d15d700 edi = 0xbfe7e45c
00:35:33 INFO - Found by: call frame info
00:35:33 INFO - 5 libxul.so!JS_HasPropertyById(JSContext*, JS::Handle<JSObject*>, JS::Handle<jsid>, bool*) [jsapi.cpp:198e5ae4b9d7 : 2606 + 0x1f]
00:35:33 INFO - eip = 0xb354493b esp = 0xbfe7e3f0 ebp = 0xbfe7e5b4 ebx = 0xb6ea4dac
00:35:33 INFO - esi = 0x9d15d700 edi = 0xbfe7e45c
00:35:33 INFO - Found by: call frame info
00:35:33 INFO - 6 libxul.so!js::DirectProxyHandler::has(JSContext*, JS::Handle<JSObject*>, JS::Handle<jsid>, bool*) const [DirectProxyHandler.cpp:198e5ae4b9d7 : 210 + 0x14]
00:35:33 INFO - eip = 0xb529668b esp = 0xbfe7e440 ebp = 0xbfe7e5b4 ebx = 0xb6ea4dac
00:35:33 INFO - esi = 0xb6cfd77c edi = 0xbfe7e60c
00:35:33 INFO - Found by: call frame info
00:35:33 INFO - 7 libxul.so!nsOuterWindowProxy::has(JSContext*, JS::Handle<JSObject*>, JS::Handle<jsid>, bool*) const [nsGlobalWindow.cpp:198e5ae4b9d7 : 879 + 0x1f]
00:35:33 INFO - eip = 0xb3d83307 esp = 0xbfe7e470 ebp = 0xbfe7e5b4 ebx = 0xb6ea4dac
00:35:33 INFO - esi = 0xb6cfd77c edi = 0xbfe7e60c
00:35:33 INFO - Found by: call frame info
00:35:33 INFO - 8 libxul.so!js::Proxy::has(JSContext*, JS::Handle<JSObject*>, JS::Handle<jsid>, bool*) [Proxy.cpp:198e5ae4b9d7 : 276 + 0x20]
00:35:33 INFO - eip = 0xb3589de7 esp = 0xbfe7e4c0 ebp = 0xb6cfd77c ebx = 0xb6ea4dac
00:35:33 INFO - esi = 0xbfe7e60c edi = 0x9d15d700
00:35:33 INFO - Found by: call frame info
00:35:33 INFO - 9 libxul.so!js::proxy_LookupGeneric(JSContext*, JS::Handle<JSObject*>, JS::Handle<jsid>, JS::MutableHandle<JSObject*>, JS::MutableHandle<js::Shape*>) [Proxy.cpp:198e5ae4b9d7 : 587 + 0x1f]
00:35:33 INFO - eip = 0xb3589f08 esp = 0xbfe7e520 ebp = 0xbfe7e6d8 ebx = 0xb6ea4dac
00:35:33 INFO - esi = 0xbfe7e60c edi = 0xbfe7e60c
00:35:33 INFO - Found by: call frame info
00:35:33 INFO - 10 libxul.so!JSObject::lookupGeneric(JSContext*, JS::Handle<JSObject*>, JS::Handle<jsid>, JS::MutableHandle<JSObject*>, JS::MutableHandle<js::Shape*>) [jsobj.cpp:198e5ae4b9d7 : 3063 + 0x24]
00:35:33 INFO - eip = 0xb356a215 esp = 0xbfe7e550 ebp = 0xbfe7e6d8 ebx = 0xb6ea4dac
00:35:33 INFO - esi = 0x9d15d700 edi = 0xbfe7e60c
00:35:33 INFO - Found by: call frame info
(Reporter)

Comment 1

3 years ago
Sounds like this may be fixed by bug 1095282 based on Lars' comments there.
Depends on: 1095282
(Reporter)

Comment 2

3 years ago
Confirmed fixed by bug 1095282.
Assignee: nobody → lhansen
Status: NEW → RESOLVED
Last Resolved: 3 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla36
(Reporter)

Updated

3 years ago
Status: RESOLVED → VERIFIED
status-firefox36: --- → verified
tracking-firefox36: ? → +
You need to log in before you can comment on or make changes to this bug.