1143581 - Intermittent v8_7 | application crashed [@ js::ObjectGroup::maybeSweep(js::AutoClearTypeInferenceStateOnOOM*)]

Status: RESOLVED WORKSFORME

(Core :: JavaScript Engine, defect)

Description

[Carsten Book [:Tomcat]]

Rev5 MacOSX Yosemite 10.10 mozilla-inbound talos dromaeojs

https://treeherder.mozilla.org/logviewer.html#?job_id=7638581&repo=mozilla-inbound

16:17:39 INFO - PROCESS-CRASH | v8_7 | application crashed [@ js::ObjectGroup::maybeSweep(js::AutoClearTypeInferenceStateOnOOM*)]
16:17:39 INFO - Crash dump filename: /var/folders/qn/0tq7qsfs55z3zcj458fr0sg000000w/T/tmpapuqpJ/profile/minidumps/1CD2A7B7-8A30-4357-8951-2B1623F9A58F.dmp
16:17:39 INFO - Operating system: Mac OS X
16:17:39 INFO - 10.10.2 14C109
16:17:39 INFO - CPU: amd64
16:17:39 INFO - family 6 model 42 stepping 7
16:17:39 INFO - 8 CPUs
16:17:39 INFO - Crash reason: EXC_BAD_ACCESS / 0x0000000d
16:17:39 INFO - Crash address: 0x0
16:17:39 INFO - Thread 0 (crashed)
16:17:39 INFO - 0 XUL!js::ObjectGroup::maybeSweep(js::AutoClearTypeInferenceStateOnOOM*) [TypeInference.cpp:ce5ecfd4fe1c : 4060 + 0x4]
16:17:39 INFO - rbx = 0x0000000138185070 r12 = 0x0000000000000000
16:17:39 INFO - r13 = 0x0000000138185070 r14 = 0x0000000000000000
16:17:39 INFO - r15 = 0x00000001219e1100 rip = 0x0000000103cf2224
16:17:39 INFO - rsp = 0x00007fff5fbfb2c0 rbp = 0x00007fff5fbfb340
16:17:39 INFO - Found by: given as instruction pointer in context
16:17:39 INFO - 1 XUL!js::jit::BaselineInspector::maybeInfoForPropertyOp(unsigned char*, js::Vector<js::Shape*, 4ul, js::jit::JitAllocPolicy>&, js::Vector<js::ObjectGroup*, 4ul, js::jit::JitAllocPolicy>&, js::Vector<js::ObjectGroup*, 4ul, js::jit::JitAllocPolicy>&) [ObjectGroup.h:ce5ecfd4fe1c : 342 + 0x9]
16:17:39 INFO - rbx = 0x0000000138185070 r12 = 0x00007fff5fbfb408
16:17:39 INFO - r13 = 0x00007fff5fbfb448 r14 = 0x0000000121154a88
16:17:39 INFO - r15 = 0x00007fff5fbfb488 rip = 0x0000000103db6705
16:17:39 INFO - rsp = 0x00007fff5fbfb350 rbp = 0x00007fff5fbfb390
16:17:39 INFO - Found by: call frame info
16:17:39 INFO - 2 XUL!js::jit::IonBuilder::setPropTryInlineAccess(bool*, js::jit::MDefinition*, js::PropertyName*, js::jit::MDefinition*, bool, js::TemporaryTypeSet*) [IonBuilder.cpp:ce5ecfd4fe1c : 11416 + 0x14]
16:17:39 INFO - rbx = 0x00000001171b5218 r12 = 0x00000001171b5218
16:17:39 INFO - r13 = 0x00000001171b9e90 r14 = 0x00000001171b9b40
16:17:39 INFO - r15 = 0x0000000122111e08 rip = 0x0000000103e33b51
16:17:39 INFO - rsp = 0x00007fff5fbfb3a0 rbp = 0x00007fff5fbfb4f0
16:17:39 INFO - Found by: call frame info
16:17:39 INFO - 3 XUL!js::jit::IonBuilder::jsop_setprop(js::PropertyName*) [IonBuilder.cpp:ce5ecfd4fe1c : 11029 + 0x1d]
16:17:39 INFO - rbx = 0x00000001171b5218 r12 = 0x00000001229b82b0
16:17:39 INFO - r13 = 0x00000001171b9e90 r14 = 0x0000000122111e08
16:17:39 INFO - r15 = 0x0000000000000000 rip = 0x0000000103e207d9
16:17:39 INFO - rsp = 0x00007fff5fbfb500 rbp = 0x00007fff5fbfb550
16:17:39 INFO - Found by: call frame info
16:17:39 INFO - 4 XUL!js::jit::IonBuilder::inspectOpcode(JSOp) [IonBuilder.cpp:ce5ecfd4fe1c : 1910 + 0x7]
16:17:39 INFO - rbx = 0x00000001229b6001 r12 = 0x000000010443e520
16:17:39 INFO - r13 = 0x00000001171b5040 r14 = 0x00000001171b5218
16:17:39 INFO - r15 = 0x0000000000000036 rip = 0x0000000103e18227
16:17:39 INFO - rsp = 0x00007fff5fbfb560 rbp = 0x00007fff5fbfb610
16:17:39 INFO - Found by: call frame info
16:17:39 INFO - 5 XUL!js::jit::IonBuilder::traverseBytecode() [IonBuilder.cpp:ce5ecfd4fe1c : 1457 + 0xa]
16:17:39 INFO - rbx = 0x00000001229b6000 r12 = 0x000000010443e520
16:17:39 INFO - r13 = 0x00000001171b5040 r14 = 0x00000001171b5218
16:17:39 INFO - r15 = 0x0000000000000036 rip = 0x0000000103e167c8

Comment 1

[Legacy TBPL/Treeherder Robot]

log: https://treeherder.mozilla.org/logviewer.html#?repo=mozilla-inbound&job_id=7646323
repository: mozilla-inbound
start_time: 2015-03-16T01:15:06
who: tomcat[at]mozilla[dot]com
machine: talos-linux64-ix-041
buildname: Ubuntu HW 12.04 x64 mozilla-inbound talos dromaeojs
revision: bd5ffbaf30a6

JavaScript error: resource:///modules/devtools/gDevTools.jsm, line 488: TypeError: this._telemetry is undefined
JavaScript error: resource:///modules/devtools/gDevTools.jsm, line 488: TypeError: this._telemetry is undefined
JavaScript error: resource:///modules/devtools/gDevTools.jsm, line 488: TypeError: this._telemetry is undefined
JavaScript error: resource:///modules/devtools/gDevTools.jsm, line 488: TypeError: this._telemetry is undefined
PROCESS-CRASH | v8_7 | application crashed [@ js::ObjectGroup::maybeSweep(js::AutoClearTypeInferenceStateOnOOM*)]
Traceback (most recent call last):
Return code: 2
# TBPL FAILURE #

Comment 2

[Legacy TBPL/Treeherder Robot]

log: https://treeherder.mozilla.org/logviewer.html#?repo=mozilla-inbound&job_id=7650540
repository: mozilla-inbound
start_time: 2015-03-16T05:02:16
who: tomcat[at]mozilla[dot]com
machine: tst-linux32-spot-193
buildname: b2g_ubuntu32_vm mozilla-inbound opt test mochitest-1
revision: 090ea06f8c28

[Child 6524] ###!!! ABORT: Aborting on channel error.: file /builds/slave/m-in-linux32_g-000000000000000/build/ipc/glue/MessageChannel.cpp, line 1589
[Child 6524] ###!!! ABORT: Aborting on channel error.: file /builds/slave/m-in-linux32_g-000000000000000/build/ipc/glue/MessageChannel.cpp, line 1589
9655 ERROR TEST-UNEXPECTED-FAIL | layout/style/test/test_garbage_at_end_of_declarations.html | application terminated with exit code 11
PROCESS-CRASH | layout/style/test/test_garbage_at_end_of_declarations.html | application crashed [@ js::ObjectGroup::maybeSweep(js::AutoClearTypeInferenceStateOnOOM*)]
Return code: 1
No tests run or test summary not found

Comment 3

[Legacy TBPL/Treeherder Robot]

log: https://treeherder.mozilla.org/logviewer.html#?repo=mozilla-inbound&job_id=7660585
repository: mozilla-inbound
start_time: 2015-03-16T10:58:06
who: rvandermeulen[at]mozilla[dot]com
machine: talos-linux64-ix-006
buildname: Ubuntu HW 12.04 x64 mozilla-inbound talos dromaeojs
revision: a4a6cc59d1a5

JavaScript error: resource:///modules/devtools/gDevTools.jsm, line 488: TypeError: this._telemetry is undefined
JavaScript error: resource:///modules/devtools/gDevTools.jsm, line 488: TypeError: this._telemetry is undefined
JavaScript error: resource:///modules/devtools/gDevTools.jsm, line 488: TypeError: this._telemetry is undefined
JavaScript error: resource:///modules/devtools/gDevTools.jsm, line 488: TypeError: this._telemetry is undefined
PROCESS-CRASH | v8_7 | application crashed [@ js::ObjectGroup::maybeSweep(js::AutoClearTypeInferenceStateOnOOM*)]
Traceback (most recent call last):
Return code: 2
# TBPL FAILURE #

Comment 4

[David Burns :automatedtester]

[Mass Closure] Closing bug as the WORKSFORME as the intermittent failure has not been seen for 45+ days If this has been closed and you feel that it should Not have been closed, please reopen and add [leave open] to the whiteboard.

Comment 5

[Legacy TBPL/Treeherder Robot]

log: https://treeherder.mozilla.org/logviewer.html#?repo=mozilla-release&job_id=86380
repository: mozilla-release
start_time: 2015-07-13T13:15:33
who: rvandermeulen[at]mozilla[dot]com
machine: panda-0892
buildname: Android 4.0 armv7 API 11+ mozilla-release opt test xpcshell
revision: 76eebbd35504

PROCESS-CRASH | netwerk/test/unit/test_cache2-29-concurrent_read_non-resumable_entry_size_zero.js | application crashed [@ js::ObjectGroup::maybeSweep(js::AutoClearTypeInferenceStateOnOOM*)]
Return code: 1