1254155 - Crash when waiting too long at breakpoint in Marionette [@ JSAutoCompartment::JSAutoCompartment]

Status: RESOLVED DUPLICATE of bug 1225160

(Core :: JavaScript Engine, defect)

Description

[Henrik Skupin [:whimboo][⌚️UTC+1]]

When I'm running our firefox-ui-tests with the --jsdebugger argument and are waiting too long at a formerly set breakpoint, Firefox crashes.

Steps:
1. mach firefox-ui-test --jsdebugger
2. Set breakpoint in marionette/driver.js in switchToWindow (line 1470) at this.getWinEnumerator()
3. Click the ok button of the modal dialog to start the tests
4. When the breakpoint is hit just wait about 10s - then Firefox crashes

Crash info from yesterdays Nightly build:

Operating system: Linux
                  0.0.0 Linux 4.2.0-27-generic #32-Ubuntu SMP Fri Jan 22 04:49:08 UTC 2016 x86_64
CPU: amd64
     family 6 model 58 stepping 9
     4 CPUs

Crash reason:  SIGSEGV
Crash address: 0x0
Process uptime: not available

Thread 0 (crashed)
 0  libxul.so!JSAutoCompartment::JSAutoCompartment(JSContext*, JSObject*) [jscompartment.cpp:46210f3ae078 : 1219 + 0x0]
    rax = 0x0000000000000000   rdx = 0x0000000000000000
    rcx = 0x00007f9f9dc42670   rbx = 0x00007f9f95f1ec00
    rsi = 0x00007f9f95f1ec00   rdi = 0x00007fffb365a030
    rbp = 0x00007fffb3659f00   rsp = 0x00007fffb3659f00
     r8 = 0x00007f9f9dc42708    r9 = 0x00007f9f9dc42670
    r10 = 0x00007f9f9dc42670   r11 = 0x00007f9faf83adf0
    r12 = 0x00007f9f95f1ec68   r13 = 0x00007fffb365a050
    r14 = 0x00007f9f9dc73848   r15 = 0x00007f9f6aa48230
    rip = 0x00007f9fa0a1428f
    Found by: given as instruction pointer in context
 1  libxul.so!mozJSComponentLoader::ImportInto(nsACString_internal const&, JS::Handle<JSObject*>, JSContext*, JS::MutableHandle<JSObject*>) [mozJSComponentLoader.cpp:46210f3ae078 : 1220 + 0x5]
    rbx = 0x00007f9f95f1ec00   rbp = 0x00007fffb365a250
    rsp = 0x00007fffb3659f10   r12 = 0x00007f9f95f1ec68
    r13 = 0x00007fffb365a050   r14 = 0x00007f9f9dc73848
    r15 = 0x00007f9f6aa48230   rip = 0x00007f9fa086ed26
    Found by: call frame info
 2  libxul.so!mozJSComponentLoader::Import(nsACString_internal const&, JS::Handle<JS::Value>, JSContext*, unsigned char, JS::MutableHandle<JS::Value>) [mozJSComponentLoader.cpp:46210f3ae078 : 1052 + 0x8]
    rbx = 0x00007fffb365a2a0   rbp = 0x00007fffb365a330
    rsp = 0x00007fffb365a260   r12 = 0x00007fffb365a2f0
    r13 = 0x00007f9f9dc737c0   r14 = 0x00007f9f95f1ec00
    r15 = 0x00007fffb365a748   rip = 0x00007f9fa086f44f
    Found by: call frame info
 3  libxul.so!nsXPCComponents_Utils::Import(nsACString_internal const&, JS::Handle<JS::Value>, JSContext*, unsigned char, JS::MutableHandle<JS::Value>) [XPCComponents.cpp:46210f3ae078 : 2499 + 0x13]
    rbx = 0x00007f9f9c4219e0   rbp = 0x00007fffb365a380
    rsp = 0x00007fffb365a340   r12 = 0x00007fffb365a700
    r13 = 0x00007f9f95f1ec00   r14 = 0x0000000000000001
    r15 = 0x0000000000000018   rip = 0x00007f9fa08700b7
    Found by: call frame info
 4  libxul.so!NS_InvokeByIndex [xptcinvoke_x86_64_unix.cpp:46210f3ae078 : 182 + 0x39]
    rbx = 0x00007f9fa2e91f58   rbp = 0x00007fffb365a420
    rsp = 0x00007fffb365a390   r12 = 0x00007f9fa0b722c8
    r13 = 0x00007fffb365a660   r14 = 0x0000000000000002
    r15 = 0x0000000000000018   rip = 0x00007f9fa0b72210
    Found by: call frame info
 5  libxul.so!XPCWrappedNative::CallMethod(XPCCallContext&, XPCWrappedNative::CallMode) [XPCWrappedNative.cpp:46210f3ae078 : 2083 + 0x5]
    rbx = 0x00007fffb365a748   rbp = 0x00007fffb365a7f0
    rsp = 0x00007fffb365a430   r12 = 0x00007fffb365a6e0
    r13 = 0x00007fffb365a660   r14 = 0x0000000000000002
    r15 = 0x0000000000000018   rip = 0x00007f9fa087dce8
    Found by: call frame info
 6  libxul.so!XPC_WN_CallMethod(JSContext*, unsigned int, JS::Value*) [XPCWrappedNativeJSOps.cpp:46210f3ae078 : 1115 + 0xa]
    rbx = 0x00003fcfc8e23444   rbp = 0x00007fffb365a960
    rsp = 0x00007fffb365a800   r12 = 0x00007f9f8dc9d658
    r13 = 0x00007f9f93271670   r14 = 0x0000000000000005
    r15 = 0x00007fffb365a880   rip = 0x00007f9fa08807c1
    Found by: call frame info
 7  libxul.so!js::Invoke(JSContext*, JS::CallArgs const&, js::MaybeConstruct) [jscntxtinlines.h:46210f3ae078 : 235 + 0x13]
    rbx = 0x00007f9f95f1ec00   rbp = 0x00007fffb365aa20
    rsp = 0x00007fffb365a970   r12 = 0x00007fffb365ad20
    r13 = 0x00007f9fa0880610   r14 = 0x00007f9f95f13000
    r15 = 0x00007fffb365a98c   rip = 0x00007f9fa0a6a13c
    Found by: call frame info
 8  libxul.so!Interpret [Interpreter.cpp:46210f3ae078 : 2802 + 0x11]
    rbx = 0x00007f9f95f1ec00   rbp = 0x00007fffb365b2d0
    rsp = 0x00007fffb365aa30   r12 = 0x00007fffb365b3f0
    r13 = 0x0000000000000000   r14 = 0x0000000000000000
    r15 = 0x00007f9fa4fa12c0   rip = 0x00007f9fa0a5dcba
    Found by: call frame info
 9  libxul.so!js::RunScript(JSContext*, js::RunState&) [Interpreter.cpp:46210f3ae078 : 428 + 0xb]
    rbx = 0x00007f9f95f1ec00   rbp = 0x00007fffb365b3a0
    rsp = 0x00007fffb365b2e0   r12 = 0x00007fffb365b3f0
    r13 = 0x00007fffb365b320   r14 = 0x00007fffb365b310
    r15 = 0x00007fffb365b470   rip = 0x00007f9fa0a6a033
    Found by: call frame info
10  libxul.so!js::Invoke(JSContext*, JS::CallArgs const&, js::MaybeConstruct) [Interpreter.cpp:46210f3ae078 : 496 + 0x5]
    rbx = 0x00007f9f95f1ec00   rbp = 0x00007fffb365b460
    rsp = 0x00007fffb365b3b0   r12 = 0x00007f9fa4fac770
    r13 = 0x0000000000000000   r14 = 0x00007f9f95f13000
    r15 = 0x0000000000000000   rip = 0x00007f9fa0a6a219

Comment 1

[Henrik Skupin [:whimboo][⌚️UTC+1]]

I should have checked crash-stats first. Looks like to be a dupe of bug 1225160.