Open Bug 1297317 Opened 3 years ago Updated 2 years ago

Crash in memcpy | js::TenuringTracer::moveObjectToTenured

Categories

(Core :: JavaScript: GC, defect, P3, critical)

x86
Windows 7
defect

Tracking

()

Tracking Status
firefox49 --- affected
firefox50 --- affected
firefox51 --- affected
firefox52 --- wontfix

People

(Reporter: ting, Unassigned, NeedInfo)

Details

(Keywords: crash, triage-deferred)

Crash Data

This bug was filed from the Socorro interface and is 
report bp-a6929de9-9b14-4111-8dea-ee9142160822.
=============================================================

#16 of 0821 Nightly on Windows, 7 crashes from 6 installations.
Crash volume for signature 'memcpy | js::TenuringTracer::moveObjectToTenured':
 - nightly (version 51): 26 crashes from 2016-08-01.
 - aurora  (version 50): 0 crashes from 2016-08-01.
 - beta    (version 49): 12 crashes from 2016-08-02.
 - release (version 48): 0 crashes from 2016-07-25.
 - esr     (version 45): 0 crashes from 2016-05-02.

Crash volume on the last weeks (Week N is from 08-22 to 08-28):
            W. N-1  W. N-2  W. N-3
 - nightly      11       1       0
 - aurora        0       0       0
 - beta          4       2       2
 - release       0       0       0
 - esr           0       0       0

Affected platform: Windows

Crash rank on the last 7 days:
           Browser   Content     Plugin
 - nightly #63       #54
 - aurora
 - beta    #4061     #2661
 - release
 - esr
Crash volume for signature 'memcpy | js::TenuringTracer::moveObjectToTenured':
 - nightly (version 52): 40 crashes from 2016-09-19.
 - aurora  (version 51): 210 crashes from 2016-09-19.
 - beta    (version 50): 1 crash from 2016-09-20.
 - release (version 49): 14 crashes from 2016-09-05.
 - esr     (version 45): 0 crashes from 2016-06-01.

Crash volume on the last weeks (Week N is from 10-03 to 10-09):
            W. N-1  W. N-2
 - nightly      14      26
 - aurora      186      24
 - beta          1       0
 - release       9       5
 - esr           0       0

Affected platform: Windows

Crash rank on the last 7 days:
           Browser   Content     Plugin
 - nightly #221      #94
 - aurora  #19       #12
 - beta    #11155
 - release #3765     #2464
 - esr
I found that the crash always happens when running then benchmark http://browserbench.org/JetStream/ (when Running iteration 3 of 3)
I'm also still sometimes seeing this crash while running Octane locally (might need the patches in bug 1306972 to show up, but either way it's intermittent).

A similar problem to bug 1306972 maybe?
Hi :sfink,
Not sure if you are the right dev for this issue. Can you help shed some light here?
Flags: needinfo?(sphink)
Too late for firefox 52, mass-wontfix.
Keywords: triage-deferred
Priority: -- → P3
You need to log in before you can comment on or make changes to this bug.