crash in memset | js::gc::ArenaLists::unmarkAll()

RESOLVED INCOMPLETE

Status

()

--
critical
RESOLVED INCOMPLETE
4 years ago
2 years ago

People

(Reporter: alex_mayorga, Unassigned)

Tracking

(Blocks: 1 bug, {crash})

Trunk
x86_64
Windows 7
crash
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

(Reporter)

Description

4 years ago
This bug was filed from the Socorro interface and is 
report bp-1c4a4cea-60fa-4421-bb45-7fda52150609.
=============================================================

Crashing Thread
Frame 	Module 	Signature 	Source
0 	msvcr120.dll 	memset 	f:\dd\vctools\crt\crtw32\string\amd64\memset.asm:148
1 	xul.dll 	js::gc::ArenaLists::unmarkAll() 	js/src/jsgc.h
2 	xul.dll 	js::gc::GCRuntime::beginMarkPhase(JS::gcreason::Reason) 	js/src/jsgc.cpp
3 	xul.dll 	js::gc::GCRuntime::incrementalCollectSlice(js::SliceBudget&, JS::gcreason::Reason) 	js/src/jsgc.cpp
4 	xul.dll 	js::gc::GCRuntime::gcCycle(bool, js::SliceBudget&, JS::gcreason::Reason) 	js/src/jsgc.cpp
5 	xul.dll 	js::gc::GCRuntime::collect(bool, js::SliceBudget, JS::gcreason::Reason) 	js/src/jsgc.cpp
6 	xul.dll 	js::gc::GCRuntime::gc(JSGCInvocationKind, JS::gcreason::Reason) 	js/src/jsgc.cpp
7 	xul.dll 	nsXPCComponents_Utils::ForceGC() 	js/xpconnect/src/XPCComponents.cpp
8 	xul.dll 	XPTC__InvokebyIndex 	xpcom/reflect/xptcall/md/win32/xptcinvoke_asm_x86_64.asm
9 		@0x2 	
10 	xul.dll 	XPC_WN_CallMethod(JSContext*, unsigned int, JS::Value*) 	js/xpconnect/src/XPCWrappedNativeJSOps.cpp
11 	xul.dll 	js::Invoke(JSContext*, JS::CallArgs, js::MaybeConstruct) 	js/src/vm/Interpreter.cpp
12 	xul.dll 	Interpret 	js/src/vm/Interpreter.cpp
13 	xul.dll 	js::RunScript(JSContext*, js::RunState&) 	js/src/vm/Interpreter.cpp
14 	xul.dll 	js::Invoke(JSContext*, JS::CallArgs, js::MaybeConstruct) 	js/src/vm/Interpreter.cpp
15 	xul.dll 	nsXPCWrappedJSClass::CallMethod(nsXPCWrappedJS*, unsigned short, XPTMethodDescriptor const*, nsXPTCMiniVariant*) 	js/xpconnect/src/XPCWrappedJSClass.cpp
16 	xul.dll 	nsXPCWrappedJS::CallMethod(unsigned short, XPTMethodDescriptor const*, nsXPTCMiniVariant*) 	js/xpconnect/src/XPCWrappedJS.cpp
17 	xul.dll 	PrepareAndDispatch 	xpcom/reflect/xptcall/md/win32/xptcstubs_x86_64.cpp
18 	xul.dll 	SharedStub 	xpcom/reflect/xptcall/md/win32/xptcstubs_asm_x86_64.asm
19 	xul.dll 	nsObserverList::NotifyObservers(nsISupports*, char const*, wchar_t const*) 	xpcom/ds/nsObserverList.cpp
20 	xul.dll 	nsObserverService::NotifyObservers(nsISupports*, char const*, wchar_t const*) 	xpcom/ds/nsObserverService.cpp
21 	xul.dll 	mozilla::dom::ContentChild::RecvFlushMemory(nsString const&) 	dom/ipc/ContentChild.cpp
22 	xul.dll 	mozilla::dom::PContentChild::OnMessageReceived(IPC::Message const&) 	obj-firefox/ipc/ipdl/PContentChild.cpp
23 	xul.dll 	mozilla::ipc::MessageChannel::OnMaybeDequeueOne() 	ipc/glue/MessageChannel.cpp
24 	xul.dll 	RunnableMethod<mozilla::ipc::MessageChannel, void ( mozilla::ipc::MessageChannel::*)(void), Tuple0>::Run() 	ipc/chromium/src/base/task.h
25 	xul.dll 	MessageLoop::DoWork() 	ipc/chromium/src/base/message_loop.cc
26 	xul.dll 	mozilla::ipc::DoWorkRunnable::Run() 	ipc/glue/MessagePump.cpp
27 	xul.dll 	nsThread::ProcessNextEvent(bool, bool*) 	xpcom/threads/nsThread.cpp
28 	xul.dll 	mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) 	ipc/glue/MessagePump.cpp
29 	xul.dll 	mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*) 	ipc/glue/MessagePump.cpp
30 	xul.dll 	MessageLoop::RunHandler() 	ipc/chromium/src/base/message_loop.cc
31 	xul.dll 	MessageLoop::Run() 	ipc/chromium/src/base/message_loop.cc
32 	xul.dll 	nsBaseAppShell::Run() 	widget/nsBaseAppShell.cpp
33 	xul.dll 	nsAppShell::Run() 	widget/windows/nsAppShell.cpp
34 	xul.dll 	XRE_RunAppShell 	toolkit/xre/nsEmbedFunctions.cpp
35 	xul.dll 	mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*) 	ipc/glue/MessagePump.cpp
36 	xul.dll 	MessageLoop::RunHandler() 	ipc/chromium/src/base/message_loop.cc
37 	xul.dll 	MessageLoop::Run() 	ipc/chromium/src/base/message_loop.cc
38 	xul.dll 	XRE_InitChildProcess 	toolkit/xre/nsEmbedFunctions.cpp
39 	plugin-container.exe 	content_process_main(int, char** const) 	ipc/contentproc/plugin-container.cpp
40 	plugin-container.exe 	wmain 	toolkit/xre/nsWindowsWMain.cpp
41 	plugin-container.exe 	__tmainCRTStartup 	f:/dd/vctools/crt/crtw32/startup/crt0.c:255
42 	kernel32.dll 	BaseThreadInitThunk 	
43 	ntdll.dll 	RtlUserThreadStart
Component: Untriaged → JavaScript: GC
Product: Firefox → Core

Updated

3 years ago
Crash Signature: [@ memset | js::gc::ArenaLists::unmarkAll()] → [@ memset | js::gc::ArenaLists::unmarkAll()] [@ memset | js::gc::ArenaLists::unmarkAll]
Updating crash signature to reflect changes to signature generation made in bug 1269817 (although reports older than a week will not be reprocessed), and adding dependency to ShutDownKill metabug.

(These probably shouldn't all be separate bugs, but I'm not going to fix that up in a mass-change.)
Blocks: 1219672
Crash Signature: [@ memset | js::gc::ArenaLists::unmarkAll()] [@ memset | js::gc::ArenaLists::unmarkAll] → [@ IPCError-browser | ShutDownKill ]
Status: NEW → RESOLVED
Last Resolved: 2 years ago
Resolution: --- → INCOMPLETE
Crash Signature: [@ IPCError-browser | ShutDownKill ]
status-firefox41: affected → ---
You need to log in before you can comment on or make changes to this bug.