Closed Bug 1360011 Opened 7 years ago Closed 5 years ago

Crash in moz_abort | arena_run_split | arena_malloc_large | malloc_impl | js::LifoAlloc::getOrCreateChunk | js::jit::MBasicBlock::New

Categories

(Core :: JavaScript Engine: JIT, defect, P3)

Product:
Core
Component:
JavaScript Engine: JIT
Version:
55 Branch
Platform:
Unspecified
Windows 10
Type:
defect

Tracking

()

Status:
RESOLVED WORKSFORME
Tracking Flags:
Tracking Status
firefox55 --- affected

People

(Reporter: marcia, Unassigned)

References

Details

(Keywords: crash)

Crash Data

This bug was filed from the Socorro interface and is 
report bp-7e8d9717-5388-4390-b49b-edf442170307.
=============================================================

Seen while looking at nightly crash stats - 55 crashes started using 20170307030205: http://bit.ly/2pnbCBD

It looks as if there are also some crashes when nightly was in 54.
Flags: needinfo?(nicolas.b.pierron)
These reports are kind of strange, apparently there is enough physical memory available, but we seems to be failing to commit the pages to memory, if I understand correctly.

Emanuel, any idea what might be going on?
Flags: needinfo?(nicolas.b.pierron) → needinfo?(emanuel.hoogeveen)
Sorry about the delay, I've been in the middle of a big move so things have been kind of crazy. Unfortunately I don't know what could be going on here, either; I don't see anything to indicate what might be going wrong in the crash report.
Flags: needinfo?(emanuel.hoogeveen)
Crash Signature: [@ moz_abort | arena_run_split | arena_malloc_large | malloc_impl | js::LifoAlloc::getOrCreateChunk | js::jit::MBasicBlock::New] → [@ moz_abort | arena_run_split | arena_malloc_large | malloc_impl | js::LifoAlloc::getOrCreateChunk | js::jit::MBasicBlock::New] [@ moz_abort | arena_run_split | arena_malloc_large | malloc_impl | js::LifoAlloc::getOrCreateChunk | js::jit::MBasicBlock::i…
Crash Signature: js::jit::MBasicBlock::inherit] [@ moz_abort | arena_run_split | arena_malloc_large | malloc_impl | js::LifoAlloc::getOrCreateChunk | js::jit::IonBuilder::visitBlock] → js::jit::MBasicBlock::inherit] [@ moz_abort | arena_run_split | arena_malloc_large | malloc_impl | js::LifoAlloc::getOrCreateChunk | js::jit::IonBuilder::visitBlock] [@ moz_abort | arena_run_split | arena_malloc_large | malloc_impl | js::LifoAlloc::get…
I don't know if this is just a signature change or what, but here's another JIT overcommit signature. I'll just lump it in here because it doesn't sound like this is very actionable.
[@ moz_abort | arena_run_split | arena_malloc_large | malloc_impl | js::LifoAlloc::getOrCreateChunk | js::jit::IonCompile ]
Crash Signature: js::LifoAlloc::getOrCreateChunk | js::jit::TempAllocator::allocate] → js::LifoAlloc::getOrCreateChunk | js::jit::TempAllocator::allocate] [@ moz_abort | arena_run_split | arena_malloc_large | malloc_impl | js::LifoAlloc::getOrCreateChunk | js::jit::IonCompile ]
Priority: -- → P3
Crash Signature: js::LifoAlloc::getOrCreateChunk | js::jit::TempAllocator::allocate] [@ moz_abort | arena_run_split | arena_malloc_large | malloc_impl | js::LifoAlloc::getOrCreateChunk | js::jit::IonCompile ] → js::LifoAlloc::getOrCreateChunk | js::jit::TempAllocator::allocate] [@ moz_abort | arena_run_split | arena_malloc_large | malloc_impl | js::LifoAlloc::getOrCreateChunk | js::jit::IonCompile ] [@ arena_run_split | arena_malloc_large | je_malloc | js::Lif…

Closing because no crashes reported for 12 weeks.

Status: NEW → RESOLVED
Closed: 5 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.