1297317 - Crash in memcpy | js::TenuringTracer::moveObjectToTenured

Status: RESOLVED WORKSFORME

(Core :: JavaScript: GC, defect, P3)

Description

[Ting-Yu Chou [:ting] (away)]

This bug was filed from the Socorro interface and is 
report bp-a6929de9-9b14-4111-8dea-ee9142160822.
=============================================================

#16 of 0821 Nightly on Windows, 7 crashes from 6 installations.

Comment 1

[BugBot [:suhaib / :marco/ :calixte]]

Crash volume for signature 'memcpy | js::TenuringTracer::moveObjectToTenured':
 - nightly (version 51): 26 crashes from 2016-08-01.
 - aurora  (version 50): 0 crashes from 2016-08-01.
 - beta    (version 49): 12 crashes from 2016-08-02.
 - release (version 48): 0 crashes from 2016-07-25.
 - esr     (version 45): 0 crashes from 2016-05-02.

Crash volume on the last weeks (Week N is from 08-22 to 08-28):
            W. N-1  W. N-2  W. N-3
 - nightly      11       1       0
 - aurora        0       0       0
 - beta          4       2       2
 - release       0       0       0
 - esr           0       0       0

Affected platform: Windows

Crash rank on the last 7 days:
           Browser   Content     Plugin
 - nightly #63       #54
 - aurora
 - beta    #4061     #2661
 - release
 - esr

Comment 2

[BugBot [:suhaib / :marco/ :calixte]]

Crash volume for signature 'memcpy | js::TenuringTracer::moveObjectToTenured':
 - nightly (version 52): 40 crashes from 2016-09-19.
 - aurora  (version 51): 210 crashes from 2016-09-19.
 - beta    (version 50): 1 crash from 2016-09-20.
 - release (version 49): 14 crashes from 2016-09-05.
 - esr     (version 45): 0 crashes from 2016-06-01.

Crash volume on the last weeks (Week N is from 10-03 to 10-09):
            W. N-1  W. N-2
 - nightly      14      26
 - aurora      186      24
 - beta          1       0
 - release       9       5
 - esr           0       0

Affected platform: Windows

Crash rank on the last 7 days:
           Browser   Content     Plugin
 - nightly #221      #94
 - aurora  #19       #12
 - beta    #11155
 - release #3765     #2464
 - esr

Comment 3

[xunxun]

I found that the crash always happens when running then benchmark http://browserbench.org/JetStream/ (when Running iteration 3 of 3)

Comment 4

[Emanuel Hoogeveen [:ehoogeveen]]

I'm also still sometimes seeing this crash while running Octane locally (might need the patches in bug 1306972 to show up, but either way it's intermittent).

A similar problem to bug 1306972 maybe?

Comment 5

[Gerry Chang [:gchang]]

Hi :sfink,
Not sure if you are the right dev for this issue. Can you help shed some light here?

Comment 6

[Julien Cristau [:jcristau]]

Too late for firefox 52, mass-wontfix.

Comment 7

[BugBot [:suhaib / :marco/ :calixte]]

Closing because no crashes reported for 12 weeks.