Closed Bug 1292666 Opened 7 years ago Closed 7 years ago

Intermittent test_standards.py TestStandardsUnits.test_units | application crashed [@ js::LifoAlloc::getOrCreateChunk(unsigned long)]

Categories

(Core :: JavaScript Engine, defect, P3)

Product:
Core
Component:
JavaScript Engine
Type:
defect

Tracking

()

Status:
RESOLVED DUPLICATE of bug 1287411

People

(Reporter: intermittent-bug-filer, Unassigned)

References

Details

(Keywords: crash, intermittent-failure) 

First 10 frames of the stacktrace:

10:06:15     INFO -  Crash reason:  EXC_BAD_ACCESS / KERN_INVALID_ADDRESS
10:06:15     INFO -  Crash address: 0x0
10:06:15     INFO -  Process uptime: 163 seconds
10:06:15     INFO -  Thread 0 (crashed)
10:06:15     INFO -   0  XUL!js::LifoAlloc::getOrCreateChunk(unsigned long) [LifoAlloc.cpp:4859180937d3 : 105 + 0x0]
10:06:15     INFO -      rax = 0x0000000000000000   rdx = 0x00007fff749af1f8
10:06:15     INFO -      rcx = 0x0000000000000000   rbx = 0x00007fff749afc50
10:06:15     INFO -      rsi = 0x0004df000004df00   rdi = 0x0004de000004df03
10:06:15     INFO -      rbp = 0x00007fff592e5360   rsp = 0x00007fff592e5340
10:06:15     INFO -       r8 = 0x00007fff592e52f0    r9 = 0x00007fff749b7300
10:06:15     INFO -      r10 = 0x0000000000000000   r11 = 0x0000000000000246
10:06:15     INFO -      r12 = 0x000000012e356000   r13 = 0x000000012e35e008
10:06:15     INFO -      r14 = 0x0000000000000030   r15 = 0x0000000000008000
10:06:15     INFO -      rip = 0x000000010b9b9d44
10:06:15     INFO -      Found by: given as instruction pointer in context
10:06:15     INFO -   1  XUL!js::LifoAlloc::allocImpl(unsigned long) [LifoAlloc.h:4859180937d3 : 225 + 0xb]
10:06:15     INFO -      rbx = 0x000000012e35dfd8   rbp = 0x00007fff592e53a0
10:06:15     INFO -      rsp = 0x00007fff592e5370   r12 = 0x000000012e356000
10:06:15     INFO -      r13 = 0x000000012e35e008   r14 = 0x0000000000000030
10:06:15     INFO -      r15 = 0x0000000124f41440   rip = 0x000000010b73de47
10:06:15     INFO -      Found by: call frame info
10:06:15     INFO -   2  XUL!js::TypeSet::ObjectKey::hasFlags(js::CompilerConstraintList*, unsigned int) [LifoAlloc.h:4859180937d3 : 285 + 0xd]
10:06:15     INFO -      rbx = 0x0000000000000000   rbp = 0x00007fff592e5400
10:06:15     INFO -      rsp = 0x00007fff592e53b0   r12 = 0x0000000004000000
10:06:15     INFO -      r13 = 0x0000000136b96430   r14 = 0x00000001272af228
10:06:15     INFO -      r15 = 0x0000000124f41440   rip = 0x000000010b84ccd7
10:06:15     INFO -      Found by: call frame info
10:06:15     INFO -   3  XUL!<name omitted> [TypeInference.cpp:4859180937d3 : 1785 + 0xa]
10:06:15     INFO -      rbx = 0x0000000000000002   rbp = 0x00007fff592e5410
10:06:15     INFO -      rsp = 0x00007fff592e5410   r12 = 0x00007fff592e5830
10:06:15     INFO -      r13 = 0x0000000000000001   r14 = 0x000000012e358d90
10:06:15     INFO -      r15 = 0x000000012f35a381   rip = 0x000000010b84cdfe
10:06:15     INFO -      Found by: call frame info
10:06:15     INFO -   4  XUL!js::jit::PropertyReadOnPrototypeNeedsTypeBarrier(js::jit::IonBuilder*, js::jit::MDefinition*, js::PropertyName*, js::TemporaryTypeSet*) [MIR.cpp:4859180937d3 : 5921 + 0x8]
10:06:15     INFO -      rbx = 0x0000000000000002   rbp = 0x00007fff592e5470
10:06:15     INFO -      rsp = 0x00007fff592e5420   r12 = 0x00007fff592e5830
10:06:15     INFO -      r13 = 0x0000000000000001   r14 = 0x000000012e358d90
10:06:15     INFO -      r15 = 0x000000012f35a381   rip = 0x000000010b33b21d
10:06:15     INFO -      Found by: call frame info
10:06:15     INFO -   5  XUL!js::jit::IonBuilder::getPropTryCache(bool*, js::jit::MDefinition*, js::PropertyName*, js::jit::BarrierKind, js::TemporaryTypeSet*) [IonBuilder.cpp:4859180937d3 : 12399 + 0x12]
10:06:15     INFO -      rbx = 0x0000000000000002   rbp = 0x00007fff592e54e0
10:06:15     INFO -      rsp = 0x00007fff592e5480   r12 = 0x0000000000000000
10:06:15     INFO -      r13 = 0x00007fff592e5830   r14 = 0x0000000116693c88
10:06:15     INFO -      r15 = 0x000000012e358d90   rip = 0x000000010b24d552
10:06:15     INFO -      Found by: call frame info
10:06:15     INFO -   6  XUL!js::jit::IonBuilder::jsop_getprop(js::PropertyName*) [IonBuilder.cpp:4859180937d3 : 11477 + 0x14]
10:06:15     INFO -      rbx = 0x0000000000000000   rbp = 0x00007fff592e5520
10:06:15     INFO -      rsp = 0x00007fff592e54f0   r12 = 0x000000012e358930
10:06:15     INFO -      r13 = 0x00007fff592e5830   r14 = 0x000000012e358d90
10:06:15     INFO -      r15 = 0x0000000116693c88   rip = 0x000000010b22ae41
10:06:15     INFO -      Found by: call frame info
10:06:15     INFO -   7  XUL!js::jit::IonBuilder::inspectOpcode(JSOp) [IonBuilder.cpp:4859180937d3 : 2057 + 0xb]
10:06:15     INFO -      rbx = 0x00000000000000b8   rbp = 0x00007fff592e5610
10:06:15     INFO -      rsp = 0x00007fff592e5530   r12 = 0x00000000000000b8
10:06:15     INFO -      r13 = 0xfff9000000000000   r14 = 0x00007fff592e5830
10:06:15     INFO -      r15 = 0x0000000116693c88   rip = 0x000000010b21d9e9
10:06:15     INFO -      Found by: call frame info
10:06:15     INFO -   8  XUL!js::jit::IonBuilder::traverseBytecode() [IonBuilder.cpp:4859180937d3 : 1540 + 0xb]
10:06:15     INFO -      rbx = 0x00007fff592e5830   rbp = 0x00007fff592e5740
10:06:15     INFO -      rsp = 0x00007fff592e5620   r12 = 0x00000000000000b8
10:06:15     INFO -      r13 = 0x000000012e358930   r14 = 0x00007fff592e6240
10:06:15     INFO -      r15 = 0x0000000000000001   rip = 0x000000010b219a82
10:06:15     INFO -      Found by: call frame info
10:06:15     INFO -   9  XUL!js::jit::IonBuilder::buildInline(js::jit::IonBuilder*, js::jit::MResumePoint*, js::jit::CallInfo&) [IonBuilder.cpp:4859180937d3 : 1096 + 0x8]
10:06:15     INFO -      rbx = 0x00007fff592e6240   rbp = 0x00007fff592e57c0
10:06:15     INFO -      rsp = 0x00007fff592e5750   r12 = 0x0000000000000002
10:06:15     INFO -      r13 = 0x00007fff592e5830   r14 = 0x00007fff592e6240
10:06:15     INFO -      r15 = 0xfff9000000000000   rip = 0x000000010b21b062
10:06:15     INFO -      Found by: call frame info
10:06:15     INFO -  10  XUL!js::jit::IonBuilder::inlineScriptedCall(js::jit::CallInfo&, JSFunction*) [IonBuilder.cpp:4859180937d3 : 5228 + 0x15]
10:06:15     INFO -      rbx = 0x00007fff592e5830   rbp = 0x00007fff592e6180
10:06:15     INFO -      rsp = 0x00007fff592e57d0   r12 = 0x000000012e358d38
10:06:15     INFO -      r13 = 0x00000001272af050   r14 = 0x00007fff592e6650
10:06:15     INFO -      r15 = 0x00007fff592e6240   rip = 0x000000010b236ed7
10:06:15     INFO -      Found by: call frame info
Severity: normal → critical
Keywords: crash
I will look into it later.
Blocks: 1264948
Flags: needinfo?(nicolas.b.pierron)
Bulk assigning P3 to all open intermittent bugs without a priority set in Firefox components per bug 1298978.
Priority: -- → P3
Based on the stack trace this is likely a duplicate of Bug 1287411, which got fixed on inbound a few hours before this bug got reported on autoland.

As I have seen no other reported failures on treeherder, I suggest to mark this one as a duplicate for the moment.
Status: NEW → RESOLVED
Closed: 7 years ago
Flags: needinfo?(nicolas.b.pierron)
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.