Closed Bug 1374742 Opened 7 years ago Closed 5 years ago

Thunderbird crashed while running in the background [@ void js::GCMarker::markAndPush<T>]

Categories

(Core :: JavaScript: GC, defect, P3)

55 Branch
Unspecified
macOS
defect

Tracking

()

RESOLVED WORKSFORME
Tracking Status
firefox57 --- affected

People

(Reporter: whimboo, Unassigned)

References

(Blocks 1 open bug)

Details

(Keywords: crash, Whiteboard: [tbird crash])

Crash Data

At some point it just crashed without any user interaction. So it was not a triggered GC.

Crash details:

Crash Reason 	EXC_BAD_ACCESS / EXC_I386_GPFLT
Crash Address 	0x0

First 20 frames:

Crashing Thread (0)
Frame 	Module 	Signature 	Source
0 	XUL 	void js::GCMarker::markAndPush<JSObject>(js::GCMarker::StackTag, JSObject*) 	js/src/gc/Heap.h:891
1 	XUL 	js::GCMarker::eagerlyMarkChildren(js::Scope*) 	js/src/gc/Marking.cpp:906
2 	XUL 	void js::TraceRange<js::Scope*>(JSTracer*, unsigned long, js::WriteBarrieredBase<js::Scope*>*, char const*) 	js/src/gc/Marking.cpp:531
3 	XUL 	JSScript::traceChildren(JSTracer*) 	js/src/jsscript.cpp:3649
4 	XUL 	js::GCMarker::processMarkStackTop(js::SliceBudget&) 	js/src/gc/Marking.cpp:1656
5 	XUL 	js::GCMarker::drainMarkStack(js::SliceBudget&) 	js/src/gc/Marking.cpp:1550
6 	XUL 	void js::gc::GCRuntime::markWeakReferences<js::gc::GCZoneGroupIter>(js::gcstats::Phase) 	js/src/jsgc.cpp:4004
7 	XUL 	js::gc::GCRuntime::endMarkingZoneGroup() 	js/src/jsgc.cpp:4033
8 	XUL 	js::gc::GCRuntime::beginSweepPhase(bool, js::AutoLockForExclusiveAccess&) 	js/src/jsgc.cpp:5272
9 	XUL 	js::gc::GCRuntime::incrementalCollectSlice(js::SliceBudget&, JS::gcreason::Reason, js::AutoLockForExclusiveAccess&) 	js/src/jsgc.cpp:5954
10 	XUL 	js::gc::GCRuntime::gcCycle(bool, js::SliceBudget&, JS::gcreason::Reason) 	js/src/jsgc.cpp:6242
11 	XUL 	js::gc::GCRuntime::collect(bool, js::SliceBudget, JS::gcreason::Reason) 	js/src/jsgc.cpp:6370
12 	XUL 	JS::GCForReason(JSContext*, JSGCInvocationKind, JS::gcreason::Reason) 	js/src/jsgc.cpp:6438
13 	XUL 	nsXPCComponents_Utils::ForceGC() 	js/xpconnect/src/XPCComponents.cpp:2576
14 	XUL 	NS_InvokeByIndex 	xpcom/reflect/xptcall/md/unix/xptcinvoke_x86_64_unix.cpp:180
15 	XUL 	XPCWrappedNative::CallMethod(XPCCallContext&, XPCWrappedNative::CallMode) 	js/xpconnect/src/XPCWrappedNative.cpp:2058
16 	XUL 	XPC_WN_CallMethod(JSContext*, unsigned int, JS::Value*) 	js/xpconnect/src/XPCWrappedNativeJSOps.cpp:999
17 	XUL 	js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct) 	js/src/jscntxtinlines.h:239
18 	XUL 	Interpret 	js/src/vm/Interpreter.cpp:510
19 	XUL 	js::RunScript(JSContext*, js::RunState&) 	js/src/vm/Interpreter.cpp:405
20 	XUL 	js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct) 	js/src/vm/Interpreter.cpp:477
See Also: → 1288952
Nothing on crash-stats prior to 45.7.0.
Whiteboard: [tbird crash]
Jon please take a look. Is there anything we can do to make this more actionable?
Flags: needinfo?(jcoppeard)
Priority: -- → P2
This isn't actionable as it is, but I'm going to investigate how we can track down crashes like this in bug 1399944.
Flags: needinfo?(jcoppeard)
Blocks: GCCrashes
Moving to p3 because no activity for at least 1 year(s).
See https://github.com/mozilla/bug-handling/blob/master/policy/triage-bugzilla.md#how-do-you-triage for more information
Priority: P2 → P3
Thunderbird crashes with this signature are gone.
Please reopen if you still have a problem
Status: NEW → RESOLVED
Closed: 5 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.