Closed Bug 1292666 Opened 9 years ago Closed 9 years ago

Intermittent test_standards.py TestStandardsUnits.test_units | application crashed [@ js::LifoAlloc::getOrCreateChunk(unsigned long)]

Categories

(Core :: JavaScript Engine, defect, P3)

Product:
Core
Component:
JavaScript Engine
Type:
defect

Tracking

()

Status:
RESOLVED DUPLICATE of bug 1287411

People

(Reporter: intermittent-bug-filer, Unassigned)

References

Details

(Keywords: crash, intermittent-failure)

First 10 frames of the stacktrace: 10:06:15 INFO - Crash reason: EXC_BAD_ACCESS / KERN_INVALID_ADDRESS 10:06:15 INFO - Crash address: 0x0 10:06:15 INFO - Process uptime: 163 seconds 10:06:15 INFO - Thread 0 (crashed) 10:06:15 INFO - 0 XUL!js::LifoAlloc::getOrCreateChunk(unsigned long) [LifoAlloc.cpp:4859180937d3 : 105 + 0x0] 10:06:15 INFO - rax = 0x0000000000000000 rdx = 0x00007fff749af1f8 10:06:15 INFO - rcx = 0x0000000000000000 rbx = 0x00007fff749afc50 10:06:15 INFO - rsi = 0x0004df000004df00 rdi = 0x0004de000004df03 10:06:15 INFO - rbp = 0x00007fff592e5360 rsp = 0x00007fff592e5340 10:06:15 INFO - r8 = 0x00007fff592e52f0 r9 = 0x00007fff749b7300 10:06:15 INFO - r10 = 0x0000000000000000 r11 = 0x0000000000000246 10:06:15 INFO - r12 = 0x000000012e356000 r13 = 0x000000012e35e008 10:06:15 INFO - r14 = 0x0000000000000030 r15 = 0x0000000000008000 10:06:15 INFO - rip = 0x000000010b9b9d44 10:06:15 INFO - Found by: given as instruction pointer in context 10:06:15 INFO - 1 XUL!js::LifoAlloc::allocImpl(unsigned long) [LifoAlloc.h:4859180937d3 : 225 + 0xb] 10:06:15 INFO - rbx = 0x000000012e35dfd8 rbp = 0x00007fff592e53a0 10:06:15 INFO - rsp = 0x00007fff592e5370 r12 = 0x000000012e356000 10:06:15 INFO - r13 = 0x000000012e35e008 r14 = 0x0000000000000030 10:06:15 INFO - r15 = 0x0000000124f41440 rip = 0x000000010b73de47 10:06:15 INFO - Found by: call frame info 10:06:15 INFO - 2 XUL!js::TypeSet::ObjectKey::hasFlags(js::CompilerConstraintList*, unsigned int) [LifoAlloc.h:4859180937d3 : 285 + 0xd] 10:06:15 INFO - rbx = 0x0000000000000000 rbp = 0x00007fff592e5400 10:06:15 INFO - rsp = 0x00007fff592e53b0 r12 = 0x0000000004000000 10:06:15 INFO - r13 = 0x0000000136b96430 r14 = 0x00000001272af228 10:06:15 INFO - r15 = 0x0000000124f41440 rip = 0x000000010b84ccd7 10:06:15 INFO - Found by: call frame info 10:06:15 INFO - 3 XUL!<name omitted> [TypeInference.cpp:4859180937d3 : 1785 + 0xa] 10:06:15 INFO - rbx = 0x0000000000000002 rbp = 0x00007fff592e5410 10:06:15 INFO - rsp = 0x00007fff592e5410 r12 = 0x00007fff592e5830 10:06:15 INFO - r13 = 0x0000000000000001 r14 = 0x000000012e358d90 10:06:15 INFO - r15 = 0x000000012f35a381 rip = 0x000000010b84cdfe 10:06:15 INFO - Found by: call frame info 10:06:15 INFO - 4 XUL!js::jit::PropertyReadOnPrototypeNeedsTypeBarrier(js::jit::IonBuilder*, js::jit::MDefinition*, js::PropertyName*, js::TemporaryTypeSet*) [MIR.cpp:4859180937d3 : 5921 + 0x8] 10:06:15 INFO - rbx = 0x0000000000000002 rbp = 0x00007fff592e5470 10:06:15 INFO - rsp = 0x00007fff592e5420 r12 = 0x00007fff592e5830 10:06:15 INFO - r13 = 0x0000000000000001 r14 = 0x000000012e358d90 10:06:15 INFO - r15 = 0x000000012f35a381 rip = 0x000000010b33b21d 10:06:15 INFO - Found by: call frame info 10:06:15 INFO - 5 XUL!js::jit::IonBuilder::getPropTryCache(bool*, js::jit::MDefinition*, js::PropertyName*, js::jit::BarrierKind, js::TemporaryTypeSet*) [IonBuilder.cpp:4859180937d3 : 12399 + 0x12] 10:06:15 INFO - rbx = 0x0000000000000002 rbp = 0x00007fff592e54e0 10:06:15 INFO - rsp = 0x00007fff592e5480 r12 = 0x0000000000000000 10:06:15 INFO - r13 = 0x00007fff592e5830 r14 = 0x0000000116693c88 10:06:15 INFO - r15 = 0x000000012e358d90 rip = 0x000000010b24d552 10:06:15 INFO - Found by: call frame info 10:06:15 INFO - 6 XUL!js::jit::IonBuilder::jsop_getprop(js::PropertyName*) [IonBuilder.cpp:4859180937d3 : 11477 + 0x14] 10:06:15 INFO - rbx = 0x0000000000000000 rbp = 0x00007fff592e5520 10:06:15 INFO - rsp = 0x00007fff592e54f0 r12 = 0x000000012e358930 10:06:15 INFO - r13 = 0x00007fff592e5830 r14 = 0x000000012e358d90 10:06:15 INFO - r15 = 0x0000000116693c88 rip = 0x000000010b22ae41 10:06:15 INFO - Found by: call frame info 10:06:15 INFO - 7 XUL!js::jit::IonBuilder::inspectOpcode(JSOp) [IonBuilder.cpp:4859180937d3 : 2057 + 0xb] 10:06:15 INFO - rbx = 0x00000000000000b8 rbp = 0x00007fff592e5610 10:06:15 INFO - rsp = 0x00007fff592e5530 r12 = 0x00000000000000b8 10:06:15 INFO - r13 = 0xfff9000000000000 r14 = 0x00007fff592e5830 10:06:15 INFO - r15 = 0x0000000116693c88 rip = 0x000000010b21d9e9 10:06:15 INFO - Found by: call frame info 10:06:15 INFO - 8 XUL!js::jit::IonBuilder::traverseBytecode() [IonBuilder.cpp:4859180937d3 : 1540 + 0xb] 10:06:15 INFO - rbx = 0x00007fff592e5830 rbp = 0x00007fff592e5740 10:06:15 INFO - rsp = 0x00007fff592e5620 r12 = 0x00000000000000b8 10:06:15 INFO - r13 = 0x000000012e358930 r14 = 0x00007fff592e6240 10:06:15 INFO - r15 = 0x0000000000000001 rip = 0x000000010b219a82 10:06:15 INFO - Found by: call frame info 10:06:15 INFO - 9 XUL!js::jit::IonBuilder::buildInline(js::jit::IonBuilder*, js::jit::MResumePoint*, js::jit::CallInfo&) [IonBuilder.cpp:4859180937d3 : 1096 + 0x8] 10:06:15 INFO - rbx = 0x00007fff592e6240 rbp = 0x00007fff592e57c0 10:06:15 INFO - rsp = 0x00007fff592e5750 r12 = 0x0000000000000002 10:06:15 INFO - r13 = 0x00007fff592e5830 r14 = 0x00007fff592e6240 10:06:15 INFO - r15 = 0xfff9000000000000 rip = 0x000000010b21b062 10:06:15 INFO - Found by: call frame info 10:06:15 INFO - 10 XUL!js::jit::IonBuilder::inlineScriptedCall(js::jit::CallInfo&, JSFunction*) [IonBuilder.cpp:4859180937d3 : 5228 + 0x15] 10:06:15 INFO - rbx = 0x00007fff592e5830 rbp = 0x00007fff592e6180 10:06:15 INFO - rsp = 0x00007fff592e57d0 r12 = 0x000000012e358d38 10:06:15 INFO - r13 = 0x00000001272af050 r14 = 0x00007fff592e6650 10:06:15 INFO - r15 = 0x00007fff592e6240 rip = 0x000000010b236ed7 10:06:15 INFO - Found by: call frame info
Severity: normal → critical
Keywords: crash
I will look into it later.
Blocks: 1264948
Flags: needinfo?(nicolas.b.pierron)
Bulk assigning P3 to all open intermittent bugs without a priority set in Firefox components per bug 1298978.
Priority: -- → P3
Based on the stack trace this is likely a duplicate of Bug 1287411, which got fixed on inbound a few hours before this bug got reported on autoland. As I have seen no other reported failures on treeherder, I suggest to mark this one as a duplicate for the moment.
Status: NEW → RESOLVED
Closed: 9 years ago
Flags: needinfo?(nicolas.b.pierron)
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.