Closed Bug 1516971 Opened 5 years ago Closed 5 years ago

Intermittent tools/profiler/tests/chrome/test_profile_worker.html | application crashed [@ js::jit::TraceCacheIRStub<js::jit::ICStub>(JSTracer*, js::jit::ICStub*, js::jit::CacheIRStubInfo const*)]

Categories

(Core :: JavaScript: GC, defect, P5)

defect

Tracking

()

RESOLVED INCOMPLETE

People

(Reporter: intermittent-bug-filer, Unassigned)

Details

(Keywords: crash, intermittent-failure)

Crash Data

Filed by: btara [at] mozilla.com

https://treeherder.mozilla.org/logviewer.html#?job_id=219379582&repo=mozilla-inbound

https://queue.taskcluster.net/v1/task/ff5kNj-gRp6h0FGcK8C25w/runs/0/artifacts/public/logs/live_backing.log

[task 2018-12-31T12:23:46.830Z] 12:23:46     INFO -  mozcrash Saved app info as /builds/worker/workspace/build/blobber_upload_dir/7a1fb73f-6132-8a43-ea2b-731fd1d32775.extra
[task 2018-12-31T12:23:46.833Z] 12:23:46  WARNING -  PROCESS-CRASH | tools/profiler/tests/chrome/test_profile_worker.html | application crashed [@ js::jit::TraceCacheIRStub<js::jit::ICStub>(JSTracer*, js::jit::ICStub*, js::jit::CacheIRStubInfo const*)]
[task 2018-12-31T12:23:46.833Z] 12:23:46     INFO -  Crash dump filename: /tmp/tmpEwFSq7/7a1fb73f-6132-8a43-ea2b-731fd1d32775.dmp
[task 2018-12-31T12:23:46.834Z] 12:23:46     INFO -  Operating system: Android
[task 2018-12-31T12:23:46.834Z] 12:23:46     INFO -                    0.0.0 Linux 2.6.29-gea477bb #1 Wed Sep 26 11:04:45 PDT 2012 armv7l
[task 2018-12-31T12:23:46.834Z] 12:23:46     INFO -  CPU: arm
[task 2018-12-31T12:23:46.834Z] 12:23:46     INFO -       ARMv7 ARM Cortex-A8 features: swp,half,thumb,fastmult,vfpv2,edsp,neon,vfpv3
[task 2018-12-31T12:23:46.834Z] 12:23:46     INFO -       1 CPU
[task 2018-12-31T12:23:46.834Z] 12:23:46     INFO -  GPU: UNKNOWN
[task 2018-12-31T12:23:46.834Z] 12:23:46     INFO -  Crash reason:  SIGSEGV /SEGV_MAPERR
[task 2018-12-31T12:23:46.834Z] 12:23:46     INFO -  Crash address: 0x660193
[task 2018-12-31T12:23:46.834Z] 12:23:46     INFO -  Process uptime: not available
[task 2018-12-31T12:23:46.835Z] 12:23:46     INFO -  Thread 11 (crashed)
[task 2018-12-31T12:23:46.835Z] 12:23:46     INFO -   0  libxul.so!void js::jit::TraceCacheIRStub<js::jit::ICStub>(JSTracer*, js::jit::ICStub*, js::jit::CacheIRStubInfo const*) [CacheIRCompiler.h:9f2d4be8d8c808cb4549549ac41ab023a4dde91e : 960 + 0x4]
[task 2018-12-31T12:23:46.835Z] 12:23:46     INFO -       r0 = 0x00660193    r1 = 0x68609210    r2 = 0x66019361    r3 = 0x00001000
[task 2018-12-31T12:23:46.836Z] 12:23:46     INFO -       r4 = 0x5a008de8    r5 = 0x00000000    r6 = 0x00000000    r7 = 0x52cfdef0
[task 2018-12-31T12:23:46.836Z] 12:23:46     INFO -       r8 = 0x5a008de8    r9 = 0x68609210   r10 = 0x66019361   r12 = 0x00000000
[task 2018-12-31T12:23:46.837Z] 12:23:46     INFO -       fp = 0x55fd3ad2    sp = 0x52cfdec8    lr = 0x551fadb5    pc = 0x55270b4a
[task 2018-12-31T12:23:46.837Z] 12:23:46     INFO -      Found by: given as instruction pointer in context
[task 2018-12-31T12:23:46.837Z] 12:23:46     INFO -   1  libxul.so!js::jit::ICStub::trace(JSTracer*) [BaselineIC.h:9f2d4be8d8c808cb4549549ac41ab023a4dde91e : 0 + 0x7]
[task 2018-12-31T12:23:46.838Z] 12:23:46     INFO -       r4 = 0x5a008de8    r5 = 0x68609210    r6 = 0x68609050    r7 = 0x52cfdf10
[task 2018-12-31T12:23:46.838Z] 12:23:46     INFO -       r8 = 0x00000000    r9 = 0x5a013000   r10 = 0x67b1fc40    fp = 0x00000002
[task 2018-12-31T12:23:46.838Z] 12:23:46     INFO -       sp = 0x52cfdef8    lr = 0x551fadb5    pc = 0x551fadb5
[task 2018-12-31T12:23:46.839Z] 12:23:46     INFO -      Found by: call frame info
[task 2018-12-31T12:23:46.839Z] 12:23:46     INFO -   2  libxul.so!js::jit::ICFallbackStub::unlinkStub(JS::Zone*, js::jit::ICStub*, js::jit::ICStub*) [BaselineIC.cpp:9f2d4be8d8c808cb4549549ac41ab023a4dde91e : 924 + 0x5]
[task 2018-12-31T12:23:46.839Z] 12:23:46     INFO -       r4 = 0x68609210    r5 = 0x68609050    r6 = 0x68609050    r7 = 0x52cfdf20
[task 2018-12-31T12:23:46.840Z] 12:23:46     INFO -       r8 = 0x00000000    r9 = 0x5a013000   r10 = 0x67b1fc40    fp = 0x00000002
[task 2018-12-31T12:23:46.840Z] 12:23:46     INFO -       sp = 0x52cfdf18    lr = 0x551fd19d    pc = 0x551fd19d
[task 2018-12-31T12:23:46.840Z] 12:23:46     INFO -      Found by: call frame info
[task 2018-12-31T12:23:46.841Z] 12:23:46     INFO -   3  libxul.so!js::jit::ICScript::purgeOptimizedStubs(JSScript*) [BaselineJIT.cpp:9f2d4be8d8c808cb4549549ac41ab023a4dde91e : 1046 + 0xb]
[task 2018-12-31T12:23:46.841Z] 12:23:46     INFO -       r4 = 0x68609214    r5 = 0x68609210    r6 = 0x68609050    r7 = 0x52cfdf48
[task 2018-12-31T12:23:46.842Z] 12:23:46     INFO -       r8 = 0x00000000    r9 = 0x5a013000   r10 = 0x67b1fc40    fp = 0x00000002
[task 2018-12-31T12:23:46.842Z] 12:23:46     INFO -       sp = 0x52cfdf28    lr = 0x55259a2b    pc = 0x55259a2b
nbp told me to move this to GC or JIT, so here it is :-)
Component: Gecko Profiler → JavaScript: GC
Priority: P5 → --
The corresponding crash signature on Socorro is: "js::jit::TraceCacheIRStub<T>".
Crash Signature: [@ js::jit::TraceCacheIRStub<js::jit::ICStub>(JSTracer*, js::jit::ICStub*, js::jit::CacheIRStubInfo const*)] → [@ js::jit::TraceCacheIRStub<T>]

Jan, any idea whether something changed in the JIT that might have caused this?

Flags: needinfo?(jdemooij)

(In reply to Jon Coppeard (:jonco) from comment #4)

Jan, any idea whether something changed in the JIT that might have caused this?

Not that I know of. Could be the generic LifoAlloc corruption issue. It's probably not really actionable unless we hit this more than once.

Flags: needinfo?(jdemooij)
Keywords: stalled
Priority: -- → P5
Status: NEW → RESOLVED
Closed: 5 years ago
Resolution: --- → INCOMPLETE
You need to log in before you can comment on or make changes to this bug.