Closed Bug 1263916 Opened 10 years ago Closed 9 years ago

OOM crash in js::ObjectGroup::sweep

Categories

(Core :: JavaScript: GC, defect)

x86
Windows NT
defect
Not set
critical

Tracking

()

RESOLVED DUPLICATE of bug 1112741
Tracking Status
firefox46 + wontfix
firefox47 --- wontfix
firefox48 --- affected
firefox49 --- affected
firefox-esr45 --- affected
firefox50 --- affected
firefox51 --- affected
firefox52 --- affected
firefox53 --- affected

People

(Reporter: jimm, Unassigned)

References

Details

(Keywords: crash)

This bug was filed from the Socorro interface and is report bp-95e58494-991a-4784-8dda-124ad2160406. =============================================================
#6 e10s beta 46 experiment crash signature with a higher than normal correlation to e10s (1.4 vs. 0.97).
Terrence, do you know what could be going on at this point to cause a crash? Is this an OOM? If so, why isn't it failing with one of the JS engine OOM crash annotations? (Bug 1263028 is the generic bug for this crash.)
Flags: needinfo?(terrence)
See Also: → 1263028
I'm not sure if this is an OOM or a busted pointer. Forwarding ni? to the author.
Flags: needinfo?(terrence) → needinfo?(bhackett1024)
This is still the #11 crash in very late beta 46 - without e10s enabled.
I don't think there's any OOM going on here, this looks the same as bug 1112741. It's hard to tell exactly where it's crashing, is there a (simple) way to get the disassembly around the crash site?
Summary: OOM crash in js::ObjectGroup::sweep under e10s → OOM crash in js::ObjectGroup::sweep
No longer blocks: e10s-oom
Crash volume for signature 'js::ObjectGroup::sweep': - esr (version 45): 1119 crashes from 2016-04-07. Crash volume on the last 7 days: 2016-07-21 2016-07-20 2016-07-19 2016-07-18 2016-07-17 2016-07-16 2016-07-15 - esr 35 30 21 40 4 7 29 Affected platforms: Windows, Mac OS X, Linux
Crash volume for signature 'js::ObjectGroup::sweep': - nightly (version 51): 84 crashes from 2016-08-01. - aurora (version 50): 110 crashes from 2016-08-01. - beta (version 49): 4621 crashes from 2016-08-02. - release (version 48): 5786 crashes from 2016-07-25. - esr (version 45): 1810 crashes from 2016-05-02. Crash volume on the last weeks (Week N is from 08-22 to 08-28): W. N-1 W. N-2 W. N-3 - nightly 19 28 23 - aurora 44 40 6 - beta 1512 1614 538 - release 1959 1625 960 - esr 168 158 159 Affected platforms: Windows, Mac OS X, Linux Crash rank on the last 7 days: Browser Content Plugin - nightly #149 #30 - aurora #72 #26 - beta #6 #5 - release #11 #8 - esr #54
Crash volume for signature 'js::ObjectGroup::sweep': - nightly (version 52): 52 crashes from 2016-09-19. - aurora (version 51): 54 crashes from 2016-09-19. - beta (version 50): 1430 crashes from 2016-09-20. - release (version 49): 1190 crashes from 2016-09-05. - esr (version 45): 2471 crashes from 2016-06-01. Crash volume on the last weeks (Week N is from 10-03 to 10-09): W. N-1 W. N-2 - nightly 41 11 - aurora 46 8 - beta 1078 352 - release 930 259 - esr 159 166 Affected platforms: Windows, Mac OS X, Linux Crash rank on the last 7 days: Browser Content Plugin - nightly #72 #41 - aurora #44 #53 - beta #13 #10 - release #66 #48 - esr #77
It doesn't look like this is an OOM, only 0.56% of the crashes have contains_memory_report=1.
Crash volume for signature 'js::ObjectGroup::sweep': - nightly (version 53): 190 crashes from 2016-11-14. - aurora (version 52): 202 crashes from 2016-11-14. - beta (version 51): 4858 crashes from 2016-11-14. - release (version 50): 24428 crashes from 2016-11-01. - esr (version 45): 4289 crashes from 2016-07-06. Crash volume on the last weeks (Week N is from 01-02 to 01-08): W. N-1 W. N-2 W. N-3 W. N-4 W. N-5 W. N-6 W. N-7 - nightly 22 36 38 22 25 29 17 - aurora 31 39 32 17 35 31 1 - beta 236 278 728 1410 1073 932 114 - release 4620 4713 4912 4803 2647 936 366 - esr 150 176 213 215 120 112 182 Affected platforms: Windows, Mac OS X, Linux Crash rank on the last 7 days: Browser Content Plugin - nightly #132 #38 - aurora #180 #46 - beta #17 #13 - release #12 #9 - esr #78
Status: NEW → RESOLVED
Crash Signature: [@ js::ObjectGroup::sweep]
Closed: 9 years ago
Resolution: --- → DUPLICATE
Flags: needinfo?(bhackett1024)
You need to log in before you can comment on or make changes to this bug.