Closed Bug 1306923 Opened 3 years ago Closed 3 years ago

Assertion failure: strcmp(eventText(id), eventText(prev)) == 0, at js/src/vm/TraceLogging.cpp:550

Categories

(Core :: JavaScript Engine, defect, critical)

x86_64
macOS
defect
Not set
critical

Tracking

()

RESOLVED WORKSFORME
Tracking Status
firefox52 --- wontfix

People

(Reporter: gkw, Unassigned)

References

(Blocks 2 open bugs)

Details

(Keywords: assertion, jsbugmon, testcase, Whiteboard: [jsbugmon:ignore])

Attachments

(2 files)

The following testcase crashes on mozilla-central revision f7d5008ee2ab (build with --enable-debug --enable-more-deterministic, run with --fuzzing-safe --gc-zeal=9 --no-threads --ion-eager --ion-inlining=off):

See attachment.

Backtrace:

0   libsystem_kernel.dylib        	0x00007fff8b3c5f72 mach_msg_trap + 10
1   libsystem_kernel.dylib        	0x00007fff8b3c53b3 mach_msg + 55
2   js-dbg-64-dm-clang-darwin-f7d5008ee2ab	0x00000001075b9b62 MachExceptionHandlerThread(JSRuntime*) + 418 (WasmSignalHandlers.cpp:960)
3   js-dbg-64-dm-clang-darwin-f7d5008ee2ab	0x00000001075dd4ef js::detail::ThreadTrampoline<void (&)(JSRuntime*), JSRuntime*&>::Start(void*) + 15 (Utility.h:382)
4   libsystem_pthread.dylib       	0x00007fff8eeb499d _pthread_body + 131
5   libsystem_pthread.dylib       	0x00007fff8eeb491a _pthread_start + 168
/snip

For detailed crash information, see attachment.
Attached file Testcase
autoBisect shows this is probably related to the following changeset:

The first bad revision is:
changeset:   https://hg.mozilla.org/mozilla-central/rev/9bf32cd7b3e5
user:        Hannes Verschore
date:        Fri Sep 02 18:19:27 2016 +0200
summary:     Bug 1298541: Tracelogger: Part 1: Add debugging to check start and stop correspond, r=bbouvier

Hannes, is bug 1298541 a likely regressor?

Note that this can be intermittent, so attaching the full testcase.
Blocks: 1298541
Flags: needinfo?(hv1989)
(In reply to Gary Kwong [:gkw] [:nth10sd] from comment #3)
> autoBisect shows this is probably related to the following changeset:
> 
> The first bad revision is:
> changeset:   https://hg.mozilla.org/mozilla-central/rev/9bf32cd7b3e5
> user:        Hannes Verschore
> date:        Fri Sep 02 18:19:27 2016 +0200
> summary:     Bug 1298541: Tracelogger: Part 1: Add debugging to check start
> and stop correspond, r=bbouvier
> 
> Hannes, is bug 1298541 a likely regressor?

Yes. Thanks!
Bug 1332594 has a patch called "Silently fail the logger when not-recoverable". Can you test if that fixes it? I tried it locally on the given revision and with given compile/run flags, but couldn't reproduce.
Flags: needinfo?(hv1989) → needinfo?(gary)
Could also be that bug 1322614 has fixed this already.
autoBisect shows this is probably related to the following changeset:

The first good revision is:
changeset:   https://hg.mozilla.org/mozilla-central/rev/528f093ec47b
user:        Andreas Pehrson
date:        Wed Sep 21 17:18:25 2016 +0200
summary:     Bug 1284102 - Guard against double-deallocating devices in release. r=jib

Unsure what actually fixed this, is the fix bisection range accurate?
Flags: needinfo?(gary) → needinfo?(hv1989)
Don't think the bisection range is accurate. But okay to close this and opening a new bug if this assertion failure pops up again?
Flags: needinfo?(hv1989)
Too late for firefox 52, mass-wontfix.
Resolving WFM for now - will file a new bug when I see future instances.
Status: NEW → RESOLVED
Closed: 3 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.