Closed Bug 1440914 Opened 6 years ago Closed 6 years ago

Intermittent Assertion failure: isTenured(), at /builds/worker/workspace/build/src/js/src/gc/Cell.h:182

Categories

(Core :: JavaScript: GC, defect, P5)

Product:
Core
Component:
JavaScript: GC
Type:
defect

Tracking

()

Status:
RESOLVED FIXED
Milestone:
mozilla60
Tracking Flags:
Tracking Status
firefox-esr52 --- unaffected
firefox58 --- unaffected
firefox59 --- unaffected
firefox60 --- fixed

People

(Reporter: intermittent-bug-filer, Assigned: sfink)

References

(
URL
)

Details

(Keywords: assertion, intermittent-failure)

Attachments

(3 files)

cointracking crashreport
158.74 KB, text/plain
Details
cointracking log
209.43 KB, text/plain
Details
Remove tenured string restriction from AssertShouldMarkInZone
824 bytes, patch
jonco
: review+
Details | Diff | Splinter Review 
Filed by: ncsoregi [at] mozilla.com

https://treeherder.mozilla.org/logviewer.html#?job_id=164116271&repo=mozilla-inbound

https://queue.taskcluster.net/v1/task/ap7DmQsmTMqPcXZ3AkJsdA/runs/0/artifacts/public/logs/live_backing.log

https://hg.mozilla.org/mozilla-central/raw-file/tip/layout/tools/reftest/reftest-analyzer.xhtml#logurl=https://queue.taskcluster.net/v1/task/ap7DmQsmTMqPcXZ3AkJsdA/runs/0/artifacts/public/logs/live_backing.log&only_show_unexpected=1

[task 2018-02-24T12:00:37.147Z] 12:00:37     INFO - nsStringStats
[task 2018-02-24T12:00:37.148Z] 12:00:37     INFO -  => mAllocCount:          11191
[task 2018-02-24T12:00:37.148Z] 12:00:37     INFO -  => mReallocCount:          109
[task 2018-02-24T12:00:37.149Z] 12:00:37     INFO -  => mFreeCount:           11191
[task 2018-02-24T12:00:37.150Z] 12:00:37     INFO -  => mShareCount:           6961
[task 2018-02-24T12:00:37.151Z] 12:00:37     INFO -  => mAdoptCount:           1288
[task 2018-02-24T12:00:37.151Z] 12:00:37     INFO -  => mAdoptFreeCount:       1288
[task 2018-02-24T12:00:37.151Z] 12:00:37     INFO -  => Process ID: 996, Thread ID: 4146648832
[task 2018-02-24T12:00:43.639Z] 12:00:43     INFO - Assertion failure: isTenured(), at /builds/worker/workspace/build/src/js/src/gc/Cell.h:182
[task 2018-02-24T12:00:43.640Z] 12:00:43     INFO - ExceptionHandler::GenerateDump cloned child 1050
[task 2018-02-24T12:00:43.640Z] 12:00:43     INFO - ExceptionHandler::SendContinueSignalToChild sent continue signal to child
[task 2018-02-24T12:00:43.641Z] 12:00:43     INFO - ExceptionHandler::WaitForContinueSignal waiting for continue signal...
[task 2018-02-24T12:00:43.848Z] 12:00:43     INFO - Hit MOZ_CRASH(Aborting on channel error.) at /builds/worker/workspace/build/src/ipc/glue/MessageChannel.cpp:2534
[task 2018-02-24T12:00:43.966Z] 12:00:43     INFO - #01: mozilla::ipc::MessageChannel::OnChannelErrorFromLink() (/builds/worker/workspace/build/application/firefox/libxul.so)
[task 2018-02-24T12:00:43.974Z] 12:00:43     INFO - #02: mozilla::ipc::ProcessLink::OnChannelError() (/builds/worker/workspace/build/application/firefox/libxul.so)
[task 2018-02-24T12:00:43.982Z] 12:00:43     INFO - #03: IPC::Channel::ChannelImpl::OnFileCanReadWithoutBlocking(int) [clone .part.144] (/builds/worker/workspace/build/application/firefox/libxul.so)
[task 2018-02-24T12:00:43.990Z] 12:00:43     INFO - #04: .L9132 (/builds/worker/workspace/build/application/firefox/libxul.so)
[task 2018-02-24T12:00:43.998Z] 12:00:43     INFO - #05: event_base_loop (/builds/worker/workspace/build/application/firefox/libxul.so)
[task 2018-02-24T12:00:44.006Z] 12:00:44     INFO - #06: base::MessagePumpLibevent::Run(base::MessagePump::Delegate*) (/builds/worker/workspace/build/application/firefox/libxul.so)
[task 2018-02-24T12:00:44.014Z] 12:00:44     INFO - #07: MessageLoop::RunInternal() (/builds/worker/workspace/build/application/firefox/libxul.so)
[task 2018-02-24T12:00:44.022Z] 12:00:44     INFO - #08: MessageLoop::Run() (/builds/worker/workspace/build/application/firefox/libxul.so)
[task 2018-02-24T12:00:44.030Z] 12:00:44     INFO - #09: base::Thread::ThreadMain() (/builds/worker/workspace/build/application/firefox/libxul.so)
[task 2018-02-24T12:00:44.039Z] 12:00:44     INFO - #10: ThreadFunc(void*) (/builds/worker/workspace/build/application/firefox/libxul.so)
[task 2018-02-24T12:00:44.067Z] 12:00:44     INFO - #11: start_thread (/lib/i386-linux-gnu/libpthread.so.0)
[task 2018-02-24T12:00:44.148Z] 12:00:44    ERROR - TEST-UNEXPECTED-FAIL | reftest | application terminated with exit code 11
[task 2018-02-24T12:00:44.150Z] 12:00:44     INFO - REFTEST INFO | Copy/paste: /usr/local/bin/linux64-minidump_stackwalk /tmp/tmpb5vdK_.mozrunner/minidumps/09056cb1-0b7c-4806-7f26-880ef3322e64.dmp /tmp/tmpn_gffK
[task 2018-02-24T12:00:44.292Z] 12:00:44     INFO - REFTEST INFO | Saved minidump as /builds/worker/workspace/build/blobber_upload_dir/09056cb1-0b7c-4806-7f26-880ef3322e64.dmp
[task 2018-02-24T12:00:44.294Z] 12:00:44     INFO - REFTEST INFO | Saved app info as /builds/worker/workspace/build/blobber_upload_dir/09056cb1-0b7c-4806-7f26-880ef3322e64.extra
[task 2018-02-24T12:00:44.338Z] 12:00:44     INFO - REFTEST PROCESS-CRASH | reftest | application crashed [@ libxul.so + 0x3a61dc0]
Component: Reftest → JavaScript: GC
Product: Testing → Core
Version: Version 3 → unspecified
Bughunter sees this on a couple of urls. https://cointracking.info/bitcoin_analysis.php is fairly reproducible but may take multiple attempts... up to 10 or more in some cases.
URL: https://cointracking.info/bitcoin_ana...
I know what this is, but haven't fixed it yet. It's a now-incorrect DEBUG assertion for the heap verifier, which is assuming that tenured strings' bases will always be tenured. (Which was fine when *all* strings were tenured.)
Assignee: nobody → sphink
Blocks: 1442481
No longer blocks: 903519
I guess the basic patch for this is trivial.
Attachment #8955632 - Flags: review?(jcoppeard)
Attachment #8955632 - Flags: review?(jcoppeard) → review+
Pushed by sfink@mozilla.com:
https://hg.mozilla.org/integration/mozilla-inbound/rev/59edf6c48a0b
Remove tenured string restriction from AssertShouldMarkInZone, r=jonco
https://hg.mozilla.org/mozilla-central/rev/59edf6c48a0b
Status: NEW → RESOLVED
Closed: 6 years ago
status-firefox60: --- → fixed
Resolution: --- → FIXED
Target Milestone: --- → mozilla60
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: