Closed Bug 1292925 Opened 8 years ago Closed 3 years ago

Crash in CCGraphBuilder::NoteJSChild

Categories

(Core :: XPCOM, defect, P3)

Product:
Core
Component:
XPCOM
Platform:
Unspecified
Windows 10
Type:
defect

Tracking

()

Status:
RESOLVED WORKSFORME
Tracking Flags:
Tracking Status
firefox49 --- affected
firefox-esr45 --- affected
firefox50 --- affected
firefox51 --- affected
firefox52 --- wontfix

People

(Reporter: jchen, Unassigned)

Details

(Keywords: crash)

Crash Data

This bug was filed from the Socorro interface and is 
report bp-bb7391d4-f035-44d2-a067-7495b2160806.
=============================================================

Very low volume crash (#28 crash for the 08-04 nightly with 5 crashes). There are several different stacks in the individual crash reports, so I'm not sure if they all have the same cause.

One stack is,

> CCGraphBuilder::NoteJSChild(JS::GCCellPtr)
> nsScriptObjectTracer::NoteJSChild(JS::GCCellPtr, char const*, void*)
> mozilla::dom::CallbackObject::cycleCollection::Trace(void*, TraceCallbacks const&, void*)
> ...

Another one is,

> CCGraphBuilder::NoteJSChild(JS::GCCellPtr)
> DispatchToTracer<JS::Value>(JSTracer*, JS::Value*, char const*)
> js::TraceRange<JS::Value>(JSTracer*, unsigned __int64, js::WriteBarrieredBase<JS::Value>*, char const*)
> ...

Another one is,

> CCGraphBuilder::NoteJSChild(JS::GCCellPtr)
> js::DispatchTyped<DoCallbackFunctor<JS::Value>, JS::CallbackTracer*&, char const*&>(DoCallbackFunctor<JS::Value>, JS::Value const&, JS::CallbackTracer*&, char const*&)
> DispatchToTracer<JS::Value>(JSTracer*, JS::Value*, char const*)
> ...

Several crashes have this stack,

> CCGraphBuilder::NoteJSChild(JS::GCCellPtr)
> TraversalTracer::onChild(JS::GCCellPtr const&)
> JS::CallbackTracer::onObjectEdge(JSObject**)
> ...
Moving to XPCOM since this is in the cycle collector.
Component: JavaScript: GC → XPCOM
Priority: -- → P3
Crash volume for signature 'CCGraphBuilder::NoteJSChild':
 - nightly (version 51): 8 crashes from 2016-08-01.
 - aurora  (version 50): 10 crashes from 2016-08-01.
 - beta    (version 49): 247 crashes from 2016-08-02.
 - release (version 48): 0 crashes from 2016-07-25.
 - esr     (version 45): 1 crash from 2016-05-02.

Crash volume on the last weeks (Week N is from 08-22 to 08-28):
            W. N-1  W. N-2  W. N-3
 - nightly       2       1       5
 - aurora        3       4       2
 - beta         87      89      33
 - release       0       0       0
 - esr           1       0       0

Affected platforms: Windows, Mac OS X, Linux

Crash rank on the last 7 days:
           Browser   Content     Plugin
 - nightly           #335
 - aurora  #858      #182
 - beta    #275      #134
 - release
 - esr
status-firefox49: --- → affected
status-firefox50: --- → affected
status-firefox51: --- → affected
status-firefox-esr45: --- → affected
Crash volume for signature 'CCGraphBuilder::NoteJSChild':
 - nightly (version 52): 1 crash from 2016-09-19.
 - aurora  (version 51): 7 crashes from 2016-09-19.
 - beta    (version 50): 431 crashes from 2016-09-20.
 - release (version 49): 1009 crashes from 2016-09-05.
 - esr     (version 45): 0 crashes from 2016-07-25.

Crash volume on the last weeks (Week N is from 10-17 to 10-23):
            W. N-1  W. N-2  W. N-3  W. N-4
 - nightly       1       0       0       0
 - aurora        1       2       3       1
 - beta        130     145      93      30
 - release     295     299     258      66
 - esr           0       0       0       0

Affected platforms: Windows, Linux

Crash rank on the last 7 days:
           Browser   Content     Plugin
 - nightly           #302
 - aurora
 - beta    #140      #135
 - release #337      #93
 - esr
status-firefox52: --- → affected
Mass wontfix for bugs affecting firefox 52.
status-firefox52: affected → wontfix

(In reply to Wayne Mery (:wsmwk) from comment #5)

This signature virtually nonexistent for any current version in the last 6 months

New crash report:
https://crash-stats.mozilla.com/report/index/bp-4e82da0a-b6be-4a95-a265-debfb0200914

Marking this as Resolved > Works for me since there are no more crashes in the past 6 months with this signature.

Status: NEW → RESOLVED
Closed: 3 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.