Closed
Bug 1516971
Opened 5 years ago
Closed 5 years ago
Intermittent tools/profiler/tests/chrome/test_profile_worker.html | application crashed [@ js::jit::TraceCacheIRStub<js::jit::ICStub>(JSTracer*, js::jit::ICStub*, js::jit::CacheIRStubInfo const*)]
Categories
(Core :: JavaScript: GC, defect, P5)
Core
JavaScript: GC
Tracking
()
RESOLVED
INCOMPLETE
People
(Reporter: intermittent-bug-filer, Unassigned)
Details
(Keywords: crash, intermittent-failure)
Crash Data
Filed by: btara [at] mozilla.com https://treeherder.mozilla.org/logviewer.html#?job_id=219379582&repo=mozilla-inbound https://queue.taskcluster.net/v1/task/ff5kNj-gRp6h0FGcK8C25w/runs/0/artifacts/public/logs/live_backing.log [task 2018-12-31T12:23:46.830Z] 12:23:46 INFO - mozcrash Saved app info as /builds/worker/workspace/build/blobber_upload_dir/7a1fb73f-6132-8a43-ea2b-731fd1d32775.extra [task 2018-12-31T12:23:46.833Z] 12:23:46 WARNING - PROCESS-CRASH | tools/profiler/tests/chrome/test_profile_worker.html | application crashed [@ js::jit::TraceCacheIRStub<js::jit::ICStub>(JSTracer*, js::jit::ICStub*, js::jit::CacheIRStubInfo const*)] [task 2018-12-31T12:23:46.833Z] 12:23:46 INFO - Crash dump filename: /tmp/tmpEwFSq7/7a1fb73f-6132-8a43-ea2b-731fd1d32775.dmp [task 2018-12-31T12:23:46.834Z] 12:23:46 INFO - Operating system: Android [task 2018-12-31T12:23:46.834Z] 12:23:46 INFO - 0.0.0 Linux 2.6.29-gea477bb #1 Wed Sep 26 11:04:45 PDT 2012 armv7l [task 2018-12-31T12:23:46.834Z] 12:23:46 INFO - CPU: arm [task 2018-12-31T12:23:46.834Z] 12:23:46 INFO - ARMv7 ARM Cortex-A8 features: swp,half,thumb,fastmult,vfpv2,edsp,neon,vfpv3 [task 2018-12-31T12:23:46.834Z] 12:23:46 INFO - 1 CPU [task 2018-12-31T12:23:46.834Z] 12:23:46 INFO - GPU: UNKNOWN [task 2018-12-31T12:23:46.834Z] 12:23:46 INFO - Crash reason: SIGSEGV /SEGV_MAPERR [task 2018-12-31T12:23:46.834Z] 12:23:46 INFO - Crash address: 0x660193 [task 2018-12-31T12:23:46.834Z] 12:23:46 INFO - Process uptime: not available [task 2018-12-31T12:23:46.835Z] 12:23:46 INFO - Thread 11 (crashed) [task 2018-12-31T12:23:46.835Z] 12:23:46 INFO - 0 libxul.so!void js::jit::TraceCacheIRStub<js::jit::ICStub>(JSTracer*, js::jit::ICStub*, js::jit::CacheIRStubInfo const*) [CacheIRCompiler.h:9f2d4be8d8c808cb4549549ac41ab023a4dde91e : 960 + 0x4] [task 2018-12-31T12:23:46.835Z] 12:23:46 INFO - r0 = 0x00660193 r1 = 0x68609210 r2 = 0x66019361 r3 = 0x00001000 [task 2018-12-31T12:23:46.836Z] 12:23:46 INFO - r4 = 0x5a008de8 r5 = 0x00000000 r6 = 0x00000000 r7 = 0x52cfdef0 [task 2018-12-31T12:23:46.836Z] 12:23:46 INFO - r8 = 0x5a008de8 r9 = 0x68609210 r10 = 0x66019361 r12 = 0x00000000 [task 2018-12-31T12:23:46.837Z] 12:23:46 INFO - fp = 0x55fd3ad2 sp = 0x52cfdec8 lr = 0x551fadb5 pc = 0x55270b4a [task 2018-12-31T12:23:46.837Z] 12:23:46 INFO - Found by: given as instruction pointer in context [task 2018-12-31T12:23:46.837Z] 12:23:46 INFO - 1 libxul.so!js::jit::ICStub::trace(JSTracer*) [BaselineIC.h:9f2d4be8d8c808cb4549549ac41ab023a4dde91e : 0 + 0x7] [task 2018-12-31T12:23:46.838Z] 12:23:46 INFO - r4 = 0x5a008de8 r5 = 0x68609210 r6 = 0x68609050 r7 = 0x52cfdf10 [task 2018-12-31T12:23:46.838Z] 12:23:46 INFO - r8 = 0x00000000 r9 = 0x5a013000 r10 = 0x67b1fc40 fp = 0x00000002 [task 2018-12-31T12:23:46.838Z] 12:23:46 INFO - sp = 0x52cfdef8 lr = 0x551fadb5 pc = 0x551fadb5 [task 2018-12-31T12:23:46.839Z] 12:23:46 INFO - Found by: call frame info [task 2018-12-31T12:23:46.839Z] 12:23:46 INFO - 2 libxul.so!js::jit::ICFallbackStub::unlinkStub(JS::Zone*, js::jit::ICStub*, js::jit::ICStub*) [BaselineIC.cpp:9f2d4be8d8c808cb4549549ac41ab023a4dde91e : 924 + 0x5] [task 2018-12-31T12:23:46.839Z] 12:23:46 INFO - r4 = 0x68609210 r5 = 0x68609050 r6 = 0x68609050 r7 = 0x52cfdf20 [task 2018-12-31T12:23:46.840Z] 12:23:46 INFO - r8 = 0x00000000 r9 = 0x5a013000 r10 = 0x67b1fc40 fp = 0x00000002 [task 2018-12-31T12:23:46.840Z] 12:23:46 INFO - sp = 0x52cfdf18 lr = 0x551fd19d pc = 0x551fd19d [task 2018-12-31T12:23:46.840Z] 12:23:46 INFO - Found by: call frame info [task 2018-12-31T12:23:46.841Z] 12:23:46 INFO - 3 libxul.so!js::jit::ICScript::purgeOptimizedStubs(JSScript*) [BaselineJIT.cpp:9f2d4be8d8c808cb4549549ac41ab023a4dde91e : 1046 + 0xb] [task 2018-12-31T12:23:46.841Z] 12:23:46 INFO - r4 = 0x68609214 r5 = 0x68609210 r6 = 0x68609050 r7 = 0x52cfdf48 [task 2018-12-31T12:23:46.842Z] 12:23:46 INFO - r8 = 0x00000000 r9 = 0x5a013000 r10 = 0x67b1fc40 fp = 0x00000002 [task 2018-12-31T12:23:46.842Z] 12:23:46 INFO - sp = 0x52cfdf28 lr = 0x55259a2b pc = 0x55259a2b
Comment 1•5 years ago
|
||
nbp told me to move this to GC or JIT, so here it is :-)
Component: Gecko Profiler → JavaScript: GC
Priority: P5 → --
Comment 2•5 years ago
|
||
The corresponding crash signature on Socorro is: "js::jit::TraceCacheIRStub<T>".
Crash Signature: [@ js::jit::TraceCacheIRStub<js::jit::ICStub>(JSTracer*, js::jit::ICStub*, js::jit::CacheIRStubInfo const*)] → [@ js::jit::TraceCacheIRStub<T>]
Comment hidden (Intermittent Failures Robot) |
Comment 4•5 years ago
|
||
Jan, any idea whether something changed in the JIT that might have caused this?
Flags: needinfo?(jdemooij)
Comment 5•5 years ago
|
||
(In reply to Jon Coppeard (:jonco) from comment #4)
Jan, any idea whether something changed in the JIT that might have caused this?
Not that I know of. Could be the generic LifoAlloc corruption issue. It's probably not really actionable unless we hit this more than once.
Flags: needinfo?(jdemooij)
Comment 6•5 years ago
|
||
Status: NEW → RESOLVED
Closed: 5 years ago
Resolution: --- → INCOMPLETE
You need to log in
before you can comment on or make changes to this bug.
Description
•