Closed
Bug 1553380
Opened 5 years ago
Closed 5 years ago
Crash in [@ nsXPTType::IsDependent] on Intel CPU family 6 model 122 stepping 1
Categories
(Core :: XPCOM, defect, P1)
Tracking
()
RESOLVED
WORKSFORME
People
(Reporter: pascalc, Unassigned)
References
Details
(Keywords: crash, topcrash)
Crash Data
This bug is for crash report bp-a16c5db6-bb24-4963-9ccd-93c0a0190522.
Top 1 frames of crashing thread:
0 xul.dll bool nsXPTType::IsDependent xpcom/reflect/xptinfo/xptinfo.h:256
This is a new crash signature that is spiking with the 67.0 release
|
Reporter | |
Comment 1•5 years ago
|
||
Tracking as a new crash with significant volume on release.
tracking-firefox67:
--- → +
Priority: -- → P1
|
||
Comment 2•5 years ago
|
||
all reports show family 6 model 122 stepping 1 as cpu info (that's an entry-level intel gemini lake cpu).
we have already had build specific crash signatures spiking up in the past with this particular cpu every now and then: bug 1524257, bug 1544192
|
||
Comment 3•5 years ago
|
||
That looks pretty strange. These are mostly EXCEPTION_ACCESS_VIOLATION_WRITE crashes, but the function is something that reads from static data.
|
||
Comment 4•5 years ago
|
||
This crash started in 67.0rc2. Any chance a change between RC1 and RC2 that might have triggered this? Philipp notes in Comment 2 that we have seen this before as a build specific crash. Some of the comments mention crashing so frequently that they cannot use the browser.
|
|
||
Comment 5•5 years ago
|
||
Here are the changes between RC1 and RC2 - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1551455%2C1551347%2C1535699%2C1548795%2C1550582%2C1552156
|
|
||
Comment 6•5 years ago
|
||
Hello Nathan - At least one of the crash reports mentions "Nice update you did, this never happened until you did a update to firefox." Is it possible that something in the changeset in Comment 5 might have caused this? Thanks.
Flags: needinfo?(nfroyd)
|
||
Comment 7•5 years ago
|
||
(In reply to Marcia Knous [:marcia - needinfo? me] from comment #6)
Hello Nathan - At least one of the crash reports mentions "Nice update you did, this never happened until you did a update to firefox." Is it possible that something in the changeset in Comment 5 might have caused this? Thanks.
Nothing in comment 5 stands out. Bug 1548795 looks like the likeliest possibility, but none of those bugs come anywhere near nsXPTType, so anything is really a shot in the dark. Having terrible crash stacks doesn't help, either.
Flags: needinfo?(nfroyd)
|
|
||
Comment 8•5 years ago
|
||
If it really is strongly correlated with the CPU type, as comment 2 suggests, do we have CPU errata that might point the way as to what our code might be doing to trigger buggy behavior?
|
|
||
Comment 9•5 years ago
|
||
We are approaching almost 8K crashes on 67 release. Nathan - I am not sure what you are asking for in Comment 8 - is it something like https://www3.intel.com/content/dam/www/public/us/en/documents/specification-updates/desktop-6th-gen-core-family-spec-update.pdf?
Flags: needinfo?(nfroyd)
|
|
||
Comment 10•5 years ago
|
||
Hello Brindusa - Do you have a test machine that has this CPU: (100.0% in signature vs 05.87% overall) CPU Info = family 6 model 122 stepping 1? If so can you try to reproduce?
Flags: needinfo?(brindusa.tot)
|
||
Comment 11•5 years ago
|
||
Hi Marcia,
Investigated a little on our side and also discussed with our IT guy, but seems that we don't have any test machine with this CPU.
Flags: needinfo?(brindusa.tot)
|
|
||
Comment 12•5 years ago
|
||
(In reply to Marcia Knous [:marcia - needinfo? me] from comment #9)
We are approaching almost 8K crashes on 67 release. Nathan - I am not sure what you are asking for in Comment 8 - is it something like https://www3.intel.com/content/dam/www/public/us/en/documents/specification-updates/desktop-6th-gen-core-family-spec-update.pdf?
Yes, that'd be the sort of document comment 8 wants. But nothing jumps out reading through the errata.
Flags: needinfo?(nfroyd)
|
|
||
Comment 13•5 years ago
|
||
Staring at stacks and disassembly says we're crashing at:
https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/xpcom/reflect/xptinfo/xptinfo.h#l256
256 return (Tag() == TD_ARRAY && InnermostType().IsDependent()) ||
7ff9f3f67067: 0f 92 c0 setb al
^^^^^^^^^^^^^^^^ ^^^^^^^^^^^^^^^^^^^^^ ^^^^^^^
And the stack pointer is 0x34bcdfadf0, the memory around which is:
0x0000e4bcdfac40 xul.dll!bool nsXPTType::IsDependent() [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/xpcom/reflect/xptinfo/xptinfo.h#l256 + 11]
0x0000e4bcdfacd0 xul.dll!bool nsXPTType::IsDependent() [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/xpcom/reflect/xptinfo/xptinfo.h#l256 + 11]
0x0000e4bcdfade8 xul.dll!static void JS::StructGCPolicy<CallMethodHelper>::trace(class JSTracer *, class CallMethodHelper *, const char *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/public/GCPolicyAPI.h#l73 + 0]
0x0000e4bcdfadf0 STACK POINTER
0x0000e4bcdfae38 xul.dll!static bool XPCWrappedNative::CallMethod(class XPCCallContext & const, XPCWrappedNative::CallMode) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/xpconnect/src/XPCWrappedNative.cpp#l1144 + 38]
0x0000e4bcdfaea8 xul.dll!trunc + 0x3b5a10
0x0000e4bcdfaec8 xul.dll!static void JS::StructGCPolicy<CallMethodHelper>::trace(class JSTracer *, class CallMethodHelper *, const char *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/public/GCPolicyAPI.h#l73 + 0]
0x0000e4bcdfaee0 xul.dll!trunc + 0x1bd144
0x0000e4bcdfaee8 xul.dll!trunc + 0x186220
0x0000e4bcdfaf30 xul.dll!trunc + 0x152892
0x0000e4bcdfaf98 xul.dll!trunc + 0x273538
0x0000e4bcdfafa8 xul.dll!static bool mozilla::dom::DOMRect_Binding::get_width(struct JSContext *, class JS::Handle<JSObject *>, class mozilla::dom::DOMRect *, class JSJitGetterCallArgs) [DOMRectBinding.cpp: : 389 + 13]
0x0000e4bcdfafc8 xul.dll!js::CheckedUnwrapDynamic(JSObject *,JSContext *,bool) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/src/proxy/Wrapper.cpp#l393 + 0]
0x0000e4bcdfafd0 xul.dll!trunc + 0x13598
0x0000e4bcdfb078 xul.dll!trunc + 0x273538
0x0000e4bcdfb088 xul.dll!static bool XPC_WN_CallMethod(struct JSContext *, unsigned int, union JS::Value *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/xpconnect/src/XPCWrappedNativeJSOps.cpp#l941 + 10]
0x0000e4bcdfb0a8 xul.dll!js::jit::CallNativeGetter(JSContext *,JS::Handle<JSFunction *>,JS::Handle<JSObject *>,JS::MutableHandle<JS::Value>) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/src/jit/VMFunctions.cpp#l1528 + 13]
0x0000e4bcdfb0b0 xul.dll!trunc + 0x13598
0x0000e4bcdfb0d8 xul.dll!trunc + 0x26fc10
0x0000e4bcdfb3e8 xul.dll!js::jit::MaybeEnterJit(JSContext *,js::RunState &) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/src/jit/Jit.cpp#l169 + 16]
which suggests we're somewhere in the GC. mccr8, jonco, nika, does anything there (trying to trace array types) ring any bells? Anything that might have changed in the 67 cycle?
Flags: needinfo?(nika)
Flags: needinfo?(jcoppeard)
Flags: needinfo?(continuation)
|
|
||
Comment 14•5 years ago
|
||
The stack doesn't entirely make sense to me. The mixture of WebIDL generated code (get_width) and XPCWN stuff is weird. I can't see how get_width would call into any of the rest of that.
Flags: needinfo?(continuation)
|
||
Comment 15•5 years ago
|
||
(In reply to Nathan Froyd [:froydnj] from comment #13)
Having StructGCPolicy<CallMethodHelper>::trace on the stack probably means there's a Rooted<CallMethodHelper> on the stack, because for structures like CallMethodHelper Rooted<> stores a function pointer to call if it needs to trace the contents. So that points to us being in XPCWrappedNative::CallMethod rather than in the GC here.
Flags: needinfo?(jcoppeard)
|
|
||
Comment 16•5 years ago
|
||
Nika was poking at this, and wanted more information about the stack:
0x0000e4bcdf9e58 ntdll.dll!RtlSetLastWin32Error + 0x40
0x0000e4bcdf9e78 xul.dll!nsTArray_base<nsTArrayInfallibleAllocator,nsTArray_CopyWithConstructors<regiondetails::Band> >::SwapArrayElements<nsTArrayInfallibleAllocator,nsTArrayInfallibleAllocator>(nsTArray_base<nsTArrayInfallibleAllocator,nsTArray_CopyWithConstructors<regiondetails::Band> > &,unsigned __int64,unsigned __int64) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/xpcom/ds/nsTArray-inl.h#l482 + 16]
0x0000e4bcdf9ec8 xul.dll!static void mozilla::layers::AddTransformedRegion(class mozilla::gfx::IntRegionTyped<mozilla::gfx::UnknownUnits> & const, const class mozilla::gfx::IntRegionTyped<mozilla::gfx::UnknownUnits> & const, const class mozilla::gfx::Matrix4x4TypedFlagged<mozilla::gfx::UnknownUnits,mozilla::gfx::UnknownUnits> & const) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/gfx/layers/LayerTreeInvalidation.cpp#l106 + 26]
0x0000e4bcdf9ee8 xul.dll!bool google_breakpad::ExceptionHandler::WriteMinidumpOnHandlerThread(struct _EXCEPTION_POINTERS *, struct MDRawAssertionInfo *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/toolkit/crashreporter/breakpad-client/windows/handler/exception_handler.cc#l723 + 0]
0x0000e4bcdf9f38 xul.dll!static long google_breakpad::ExceptionHandler::HandleException(struct _EXCEPTION_POINTERS *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/toolkit/crashreporter/breakpad-client/windows/handler/exception_handler.cc#l506 + 14]
0x0000e4bcdf9f48 xul.dll!RuntimeFunctionCallback(unsigned __int64,void *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/src/jit/ProcessExecutableMemory.cpp#l770 + 5]
0x0000e4bcdf9f88 xul.dll!static long CrashReporter::JitExceptionHandler(void *, void *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/toolkit/crashreporter/nsExceptionHandler.cpp#l368 + 6]
0x0000e4bcdf9fd8 ntdll.dll!RtlpExecuteHandlerForException + 0xf
0x0000e4bcdf9fe0 xul.dll!trunc + 0xba7110
0x0000e4bcdfa008 ntdll.dll!RtlDispatchException + 0x40f
0x0000e4bcdfa020 xul.dll!trunc + 0xbab418
0x0000e4bcdfa058 xul.dll!nsTArray_base<nsTArrayInfallibleAllocator,nsTArray_CopyWithConstructors<regiondetails::Band> >::EnsureNotUsingAutoArrayBuffer<nsTArrayInfallibleAllocator>(unsigned __int64) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/xpcom/ds/nsTArray-inl.h#l511 + 13]
0x0000e4bcdfa068 mozglue.dll!arena_t::DallocSmall(arena_chunk_t *,void *,arena_chunk_map_t *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/memory/build/mozjemalloc.cpp#l3234 + 0]
0x0000e4bcdfa0d8 xul.dll!nsTArray_base<nsTArrayInfallibleAllocator,nsTArray_CopyWithConstructors<regiondetails::Band> >::SwapArrayElements<nsTArrayInfallibleAllocator,nsTArrayInfallibleAllocator>(nsTArray_base<nsTArrayInfallibleAllocator,nsTArray_CopyWithConstructors<regiondetails::Band> > &,unsigned __int64,unsigned __int64) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/xpcom/ds/nsTArray-inl.h#l482 + 16]
0x0000e4bcdfa118 mozglue.dll!je_free [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/memory/build/malloc_decls.h#l41 + 0]
0x0000e4bcdfa200 xul.dll!trunc + 0xadbd60
0x0000e4bcdfa228 xul.dll!nsIFrame::ClearInvalidationStateBits() [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/layout/generic/nsFrame.cpp#l6910 + 0]
0x0000e4bcdfa318 xul.dll!trunc + 0xadbd68
0x0000e4bcdfa338 xul.dll!nsTArray_base<nsTArrayInfallibleAllocator,nsTArray_CopyWithConstructors<regiondetails::Band> >::ShrinkCapacity(unsigned __int64,unsigned __int64) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/xpcom/ds/nsTArray-inl.h#l248 + 13]
0x0000e4bcdfa378 mozglue.dll!arena_t::DallocSmall(arena_chunk_t *,void *,arena_chunk_map_t *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/memory/build/mozjemalloc.cpp#l3234 + 0]
0x0000e4bcdfa390 xul.dll!trunc + 0xadbd60
0x0000e4bcdfa3a8 ntdll.dll!RtlpProtectHeap + 0x61
0x0000e4bcdfa3b8 xul.dll!static bool HandleTrap(struct _CONTEXT *, bool, struct JSContext *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/src/wasm/WasmSignalHandlers.cpp#l733 + 13]
0x0000e4bcdfa418 ntdll.dll!RtlFreeMemoryBlockLookaside + 0x61260
0x0000e4bcdfa428 ntdll.dll!RtlFreeMemoryBlockLookaside + 0x4dda1
0x0000e4bcdfa438 ntdll.dll!RtlProtectHeap + 0xbd
0x0000e4bcdfa448 ntdll.dll!RtlFreeMemoryBlockLookaside + 0x4dda1
0x0000e4bcdfa468 ntdll.dll!RtlpCallVectoredHandlers + 0x186
0x0000e4bcdfa470 ntdll.dll!RtlFreeMemoryBlockLookaside + 0x61258
0x0000e4bcdfa478 ntdll.dll!RtlFreeMemoryBlockLookaside + 0x4de70
0x0000e4bcdfa480 ntdll.dll!RtlFreeMemoryBlockLookaside + 0x4de70
0x0000e4bcdfa4d8 xul.dll!trunc + 0x180900
0x0000e4bcdfa4e0 xul.dll!trunc + 0x186220
0x0000e4bcdfa4f0 xul.dll!trunc + 0x1811c1
0x0000e4bcdfa508 ntdll.dll!RtlDispatchException + 0xf9
0x0000e4bcdfa540 xul.dll!trunc + 0xadbd60
0x0000e4bcdfa630 xul.dll!trunc + 0xbab448
0x0000e4bcdfa640 xul.dll!trunc + 0xbab424
0x0000e4bcdfa650 xul.dll!trunc + 0xbab418
0x0000e4bcdfa698 xul.dll!nsIFrame::GetTransformMatrix(nsIFrame const *,nsIFrame * *,unsigned int) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/layout/generic/nsFrame.cpp#l6771 + 0]
0x0000e4bcdfa6a8 xul.dll!JS::WeakCache<JS::GCHashSet<js::InitialShapeEntry,js::InitialShapeEntry,js::SystemAllocPolicy> >::lookupForAdd(js::InitialShapeEntry::Lookup const &) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/public/GCHashTable.h#l638 + 16]
0x0000e4bcdfa6c8 xul.dll!static unsigned int js::MovableCellHasher<JSObject *>::hash(class JSObject * & const) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/src/gc/Barrier.cpp#l131 + 13]
0x0000e4bcdfa710 xul.dll!trunc + 0x180900
0x0000e4bcdfa718 xul.dll!trunc + 0x186220
0x0000e4bcdfa728 xul.dll!trunc + 0x1811c1
0x0000e4bcdfa738 ntdll.dll!KiUserExceptionDispatch + 0x2e
0x0000e4bcdfa760 xul.dll!trunc + 0x7738
0x0000e4bcdfa7c0 xul.dll!trunc + 0x1811c1
0x0000e4bcdfa7e8 xul.dll!trunc + 0x1811c1
0x0000e4bcdfa818 xul.dll!trunc + 0x186220
0x0000e4bcdfa820 xul.dll!trunc + 0x180900
0x0000e4bcdfa838 xul.dll!bool nsXPTType::IsDependent() [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/xpcom/reflect/xptinfo/xptinfo.h#l256 + 11]
0x0000e4bcdfa9f8 xul.dll!js::NewObjectWithGivenTaggedProto(JSContext *,js::Class const *,JS::Handle<js::TaggedProto>,js::gc::AllocKind,js::NewObjectKind,unsigned int) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/src/vm/JSObject.cpp#l881 + 13]
0x0000e4bcdfaa18 xul.dll!static void js::BarrierMethods<JSObject *>::exposeToJS(class JSObject *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/public/RootingAPI.h#l693 + 13]
0x0000e4bcdfaa20 xul.dll!trunc + 0x1931e0
0x0000e4bcdfaa58 xul.dll!mozilla::dom::GetPerInterfaceObjectHandle(JSContext *,unsigned __int64,void (*)(JSContext *,JS::Handle<JSObject *>,mozilla::dom::ProtoAndIfaceCache &,bool),bool) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/dom/bindings/BindingUtils.cpp#l4056 + 0]
0x0000e4bcdfaa70 xul.dll!trunc + 0x1931e0
0x0000e4bcdfaa80 xul.dll!trunc + 0x331f0
0x0000e4bcdfaa90 xul.dll!trunc + 0x1c4ed0
0x0000e4bcdfaaa8 xul.dll!JS_NewObjectWithGivenProto(JSContext *,JSClass const *,JS::Handle<JSObject *>) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/src/jsapi.cpp#l1715 + 0]
0x0000e4bcdfaab0 xul.dll!trunc + 0x1931e0
0x0000e4bcdfaae8 xul.dll!mozilla::dom::DOMRect_Binding::Wrap(JSContext *,mozilla::dom::DOMRect *,nsWrapperCache *,JS::Handle<JSObject *>,JS::MutableHandle<JSObject *>) [DOMRectBinding.cpp: : 854 + 0]
0x0000e4bcdfab88 xul.dll!nsWrapperCache::GetWrapper() [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/dom/base/nsWrapperCacheInlines.h#l31 + 13]
0x0000e4bcdfabd8 xul.dll!static bool WrapDOMObject<mozilla::dom::DOMRect>(struct JSContext *, void *, class JS::MutableHandle<JS::Value>) [xptdata.cpp: : 48 + 13]
0x0000e4bcdfac40 xul.dll!bool nsXPTType::IsDependent() [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/xpcom/reflect/xptinfo/xptinfo.h#l256 + 11]
0x0000e4bcdfacd0 xul.dll!bool nsXPTType::IsDependent() [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/xpcom/reflect/xptinfo/xptinfo.h#l256 + 11]
0x0000e4bcdfade8 xul.dll!static void JS::StructGCPolicy<CallMethodHelper>::trace(class JSTracer *, class CallMethodHelper *, const char *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/public/GCPolicyAPI.h#l73 + 0]
0x0000e4bcdfae38 xul.dll!static bool XPCWrappedNative::CallMethod(class XPCCallContext & const, XPCWrappedNative::CallMode) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/xpconnect/src/XPCWrappedNative.cpp#l1144 + 38]
0x0000e4bcdfaea8 xul.dll!trunc + 0x3b5a10
0x0000e4bcdfaec8 xul.dll!static void JS::StructGCPolicy<CallMethodHelper>::trace(class JSTracer *, class CallMethodHelper *, const char *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/public/GCPolicyAPI.h#l73 + 0]
0x0000e4bcdfaee0 xul.dll!trunc + 0x1bd144
0x0000e4bcdfaee8 xul.dll!trunc + 0x186220
0x0000e4bcdfaf30 xul.dll!trunc + 0x152892
0x0000e4bcdfaf98 xul.dll!trunc + 0x273538
0x0000e4bcdfafa8 xul.dll!static bool mozilla::dom::DOMRect_Binding::get_width(struct JSContext *, class JS::Handle<JSObject *>, class mozilla::dom::DOMRect *, class JSJitGetterCallArgs) [DOMRectBinding.cpp: : 389 + 13]
0x0000e4bcdfafc8 xul.dll!js::CheckedUnwrapDynamic(JSObject *,JSContext *,bool) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/src/proxy/Wrapper.cpp#l393 + 0]
0x0000e4bcdfafd0 xul.dll!trunc + 0x13598
0x0000e4bcdfb078 xul.dll!trunc + 0x273538
0x0000e4bcdfb088 xul.dll!static bool XPC_WN_CallMethod(struct JSContext *, unsigned int, union JS::Value *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/xpconnect/src/XPCWrappedNativeJSOps.cpp#l941 + 10]
0x0000e4bcdfb0a8 xul.dll!js::jit::CallNativeGetter(JSContext *,JS::Handle<JSFunction *>,JS::Handle<JSObject *>,JS::MutableHandle<JS::Value>) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/src/jit/VMFunctions.cpp#l1528 + 13]
0x0000e4bcdfb0b0 xul.dll!trunc + 0x13598
0x0000e4bcdfb0d8 xul.dll!trunc + 0x26fc10
0x0000e4bcdfb3e8 xul.dll!js::jit::MaybeEnterJit(JSContext *,js::RunState &) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/src/jit/Jit.cpp#l169 + 16]
0x0000e4bcdfb4c8 mozglue.dll!je_free [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/memory/build/malloc_decls.h#l41 + 0]
0x0000e4bcdfb618 xul.dll!js::jit::MaybeEnterJit(JSContext *,js::RunState &) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/src/jit/Jit.cpp#l168 + 389]
0x0000e4bcdfb6d0 xul.dll!JS::StructGCPolicy<js::LiveSavedFrameCache>::trace(JSTracer *,js::LiveSavedFrameCache *,char const *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/public/GCPolicyAPI.h#l73 + 0]
0x0000e4bcdfb758 xul.dll!mozilla::dom::AutoJSAPI::InitInternal(nsIGlobalObject *,JSObject *,JSContext *,bool) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/dom/script/ScriptSettings.cpp#l378 + 0]
0x0000e4bcdfb778 xul.dll!nsGlobalWindowInner::GetGlobalJSObject() [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/dom/base/nsGlobalWindowInner.cpp#l1561 + 13]
0x0000e4bcdfb7b8 xul.dll!trunc + 0x8967ce
0x0000e4bcdfb7f8 xul.dll!mozilla::dom::AutoEntryScript::~AutoEntryScript() [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/dom/script/ScriptSettings.cpp#l596 + 110]
0x0000e4bcdfb838 xul.dll!nsXPCWrappedJSClass::DelegatedQueryInterface(nsXPCWrappedJS *,nsID const &,void * *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/xpconnect/src/XPCWrappedJSClass.cpp#l502 + 16]
0x0000e4bcdfb860 xul.dll!trunc + 0x13598
0x0000e4bcdfb8e0 xul.dll!trunc + 0x26fc10
0x0000e4bcdfb9b8 xul.dll!JSScript::ensureNonLazyCanonicalFunction() [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/src/vm/JSScript-inl.h#l86 + 65]
0x0000e4bcdfb9d0 xul.dll!mozilla::dom::WarningOnlyErrorReporter(JSContext *,JSErrorReport *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/dom/script/ScriptSettings.cpp#l447 + 0]
0x0000e4bcdfba08 xul.dll!nsXPCWrappedJS::Release() [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/xpconnect/src/XPCWrappedJS.cpp#l296 + 13]
0x0000e4bcdfba68 xul.dll!nsBindingManager::GetBindingImplementation(nsIContent *,nsID const &,void * *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/dom/xbl/nsBindingManager.cpp#l587 + 16]
0x0000e4bcdfba98 xul.dll!JSScript::ensureNonLazyCanonicalFunction() [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/src/vm/JSScript-inl.h#l90 + 13]
0x0000e4bcdfbab0 xul.dll!static bool ClassInfo2NativeSetMap::Entry::Match(const struct PLDHashEntryHdr *, const void *) + 0x0
0x0000e4bcdfbb08 xul.dll!js::RunScript(JSContext *,js::RunState &) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/src/vm/Interpreter.cpp#l408 + 0]
0x0000e4bcdfbb88 xul.dll!js::InternalCallOrConstruct(JSContext *,JS::CallArgs const &,js::MaybeConstruct) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/src/vm/Interpreter.cpp#l562 + 13]
0x0000e4bcdfbba8 xul.dll!mozilla::dom::AutoJSAPI::ReportException() [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/dom/script/ScriptSettings.cpp#l538 + 16]
0x0000e4bcdfbc18 xul.dll!js::Atomize(JSContext *,char const *,unsigned __int64,js::PinningBehavior,mozilla::Maybe<unsigned int> const &) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/src/vm/JSAtom.cpp#l1008 + 16]
0x0000e4bcdfbc48 xul.dll!trunc + 0x1a828
0x0000e4bcdfbc68 xul.dll!static bool InternalCall(struct JSContext *, const class js::AnyInvokeArgs & const) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/src/vm/Interpreter.cpp#l589 + 14]
0x0000e4bcdfbcc8 xul.dll!js::Call(JSContext *,JS::Handle<JS::Value>,JS::Handle<JS::Value>,js::AnyInvokeArgs const &,JS::MutableHandle<JS::Value>) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/src/vm/Interpreter.cpp#l605 + 8]
0x0000e4bcdfbcf8 xul.dll!JS_CallFunctionValue(JSContext *,JS::Handle<JSObject *>,JS::Handle<JS::Value>,JS::HandleValueArray const &,JS::MutableHandle<JS::Value>) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/src/jsapi.cpp#l2560 + 21]
0x0000e4bcdfbd00 xul.dll!JS::StructGCPolicy<JS::PropertyResult>::trace(JSTracer *,JS::PropertyResult *,char const *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/public/GCPolicyAPI.h#l73 + 0]
0x0000e4bcdfbd08 xul.dll!XPCConvert::NativeData2JS(JS::MutableHandle<JS::Value>,void const *,nsXPTType const &,nsID const *,unsigned int,nsresult *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/xpconnect/src/XPCConvert.cpp#l426 + 16]
0x0000e4bcdfbd68 xul.dll!JS::StructGCPolicy<JS::GCVector<JS::Value,8,js::TempAllocPolicy> >::trace(JSTracer *,JS::GCVector<JS::Value,8,js::TempAllocPolicy> *,char const *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/public/GCPolicyAPI.h#l73 + 0]
0x0000e4bcdfbdb8 xul.dll!JS_GetPropertyById(JSContext *,JS::Handle<JSObject *>,JS::Handle<JS::PropertyKey>,JS::MutableHandle<JS::Value>) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/src/jsapi.cpp#l2344 + 0]
0x0000e4bcdfbdc8 xul.dll!INTERNED_STRING_TO_JSID(JSContext *,JSString *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/src/jsapi.cpp#l4247 + 13]
0x0000e4bcdfbde8 xul.dll!trunc + 0x180900
0x0000e4bcdfbe18 xul.dll!nsresult nsXPCWrappedJSClass::CallMethod(class nsXPCWrappedJS *, unsigned short, const struct nsXPTMethodInfo *, struct nsXPTCMiniVariant *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/xpconnect/src/XPCWrappedJSClass.cpp#l1015 + 0]
0x0000e4bcdfbe30 xul.dll!trunc + 0x19a8ae
0x0000e4bcdfbe68 xul.dll!trunc + 0x18c778
0x0000e4bcdfbe80 xul.dll!trunc + 0x19df04
0x0000e4bcdfbf80 xul.dll!trunc + 0x26fc10
0x0000e4bcdfc098 xul.dll!JS::StructGCPolicy<JS::GCVector<JS::Value,8,js::TempAllocPolicy> >::trace(JSTracer *,JS::GCVector<JS::Value,8,js::TempAllocPolicy> *,char const *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/public/GCPolicyAPI.h#l73 + 0]
0x0000e4bcdfc0d8 xul.dll!PrepareAndDispatch [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/xpcom/reflect/xptcall/md/win32/xptcstubs_x86_64.cpp#l187 + 16]
0x0000e4bcdfc148 xul.dll!mozilla::dom::WarningOnlyErrorReporter(JSContext *,JSErrorReport *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/dom/script/ScriptSettings.cpp#l447 + 0]
0x0000e4bcdfc198 xul.dll!mozilla::dom::WarningOnlyErrorReporter(JSContext *,JSErrorReport *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/dom/script/ScriptSettings.cpp#l447 + 0]
0x0000e4bcdfc238 xul.dll!trunc + 0x18c778
0x0000e4bcdfc248 xul.dll!nsresult nsXPCWrappedJS::CallMethod(unsigned short, const struct nsXPTMethodInfo *, struct nsXPTCMiniVariant *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/xpconnect/src/XPCWrappedJS.cpp#l612 + 0]
0x0000e4bcdfc278 xul.dll!PrepareAndDispatch [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/xpcom/reflect/xptcall/md/win32/xptcstubs_x86_64.cpp#l181 + 24]
0x0000e4bcdfc328 xul.dll!SharedStub + 0x49
0x0000e4bcdfc378 xul.dll!SharedStub + 0x49
0x0000e4bcdfc398 xul.dll!struct already_AddRefed<nsIAutoCompletePopup> nsAutoCompleteController::GetPopup() [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/toolkit/components/autocomplete/nsAutoCompleteController.h#l101 + 13]
0x0000e4bcdfc3e8 xul.dll!nsresult nsAutoCompleteController::ProcessResult(int, class nsIAutoCompleteResult *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/toolkit/components/autocomplete/nsAutoCompleteController.cpp#l1395 + 0]
0x0000e4bcdfc3f8 xul.dll!XPCConvert::JSObject2NativeInterface(JSContext *,void * *,JS::Handle<JSObject *>,nsID const *,nsISupports *,nsresult *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/xpconnect/src/XPCConvert.cpp#l1160 + 13]
0x0000e4bcdfc408 xul.dll!trunc + 0x26fc10
0x0000e4bcdfc470 xul.dll!trunc + 0x181cef
0x0000e4bcdfc4a8 xul.dll!XPCConvert::JSData2Native(JSContext *,void *,JS::Handle<JS::Value>,nsXPTType const &,nsID const *,unsigned int,nsresult *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/xpconnect/src/XPCConvert.cpp#l0 + 31]
0x0000e4bcdfc4d8 xul.dll!trunc + 0x1882d0
0x0000e4bcdfc4e0 xul.dll!trunc + 0x180900
0x0000e4bcdfc4f8 xul.dll!nsresult nsAutoCompleteController::OnSearchResult(class nsIAutoCompleteSearch *, class nsIAutoCompleteResult *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/toolkit/components/autocomplete/nsAutoCompleteController.cpp#l821 + 0]
0x0000e4bcdfc548 xul.dll!trunc + 0x181cef
0x0000e4bcdfc558 xul.dll!XPTC__InvokebyIndex + 0x72
0x0000e4bcdfc580 xul.dll!trunc + 0x181cef
0x0000e4bcdfc588 xul.dll!trunc + 0x1882d0
0x0000e4bcdfc590 xul.dll!trunc + 0x180900
0x0000e4bcdfc5a8 xul.dll!static bool XPCWrappedNative::CallMethod(class XPCCallContext & const, XPCWrappedNative::CallMode) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/xpconnect/src/XPCWrappedNative.cpp#l1144 + 660]
0x0000e4bcdfc5f8 xul.dll!static bool InternalCall(struct JSContext *, const class js::AnyInvokeArgs & const) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/src/vm/Interpreter.cpp#l589 + 29]
0x0000e4bcdfc638 xul.dll!static void JS::StructGCPolicy<CallMethodHelper>::trace(class JSTracer *, class CallMethodHelper *, const char *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/public/GCPolicyAPI.h#l73 + 0]
0x0000e4bcdfc650 xul.dll!trunc + 0x1be59c
0x0000e4bcdfc658 xul.dll!trunc + 0x1882d0
0x0000e4bcdfc668 xul.dll!trunc + 0x178113
0x0000e4bcdfc718 xul.dll!js::jit::DoGetNameFallback(JSContext *,js::jit::BaselineFrame *,js::jit::ICGetName_Fallback *,JS::Handle<JSObject *>,JS::MutableHandle<JS::Value>) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/src/jit/BaselineIC.cpp#l2607 + 0]
0x0000e4bcdfc738 xul.dll!js::CheckedUnwrapDynamic(JSObject *,JSContext *,bool) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/src/proxy/Wrapper.cpp#l393 + 0]
0x0000e4bcdfc748 xul.dll!JS::Compartment::sweepRealms(js::FreeOp *,bool,bool) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/src/gc/GC.cpp#l3793 + 42]
0x0000e4bcdfc7e8 xul.dll!trunc + 0x273538
0x0000e4bcdfc7f8 xul.dll!static bool XPC_WN_CallMethod(struct JSContext *, unsigned int, union JS::Value *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/xpconnect/src/XPCWrappedNativeJSOps.cpp#l941 + 10]
0x0000e4bcdfc808 xul.dll!static bool XPC_WN_CallMethod(struct JSContext *, unsigned int, union JS::Value *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/xpconnect/src/XPCWrappedNativeJSOps.cpp#l942 + 0]
0x0000e4bcdfc820 xul.dll!trunc + 0x13598
0x0000e4bcdfc848 xul.dll!trunc + 0x26fc10
0x0000e4bcdfca58 xul.dll!trunc + 0x1343c0
0x0000e4bcdfcdb8 xul.dll!static bool ResolvePromise(struct JSContext *, class JS::Handle<js::PromiseObject *>, class JS::Handle<JS::Value>, JS::PromiseState) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/src/builtin/Promise.cpp#l1142 + 0]
0x0000e4bcdfcf08 xul.dll!js::jit::MaybeEnterJit(JSContext *,js::RunState &) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/src/jit/Jit.cpp#l168 + 389]
0x0000e4bcdfcf18 xul.dll!PLDHashTable::Add(void const *,std::nothrow_t const &) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/xpcom/ds/PLDHashTable.cpp#l578 + 13]
0x0000e4bcdfcfc0 xul.dll!JS::StructGCPolicy<js::LiveSavedFrameCache>::trace(JSTracer *,js::LiveSavedFrameCache *,char const *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/public/GCPolicyAPI.h#l73 + 0]
0x0000e4bcdfd038 xul.dll!mozilla::CycleCollectedJSContext::enqueuePromiseJob(JSContext *,JS::Handle<JSObject *>,JS::Handle<JSObject *>,JS::Handle<JSObject *>,JS::Handle<JSObject *>) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/xpcom/base/CycleCollectedJSContext.cpp#l280 + 0]
0x0000e4bcdfd0b8 xul.dll!js::Nursery::allocate(unsigned __int64) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/src/gc/Nursery.cpp#l391 + 13]
0x0000e4bcdfd0c8 xul.dll!PLDHashTable::Add(void const *,std::nothrow_t const &) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/xpcom/ds/PLDHashTable.cpp#l578 + 13]
0x0000e4bcdfd108 xul.dll!bool mozilla::HashSet<js::gc::StoreBuffer::CellPtrEdge,js::gc::StoreBuffer::PointerEdgeHasher<js::gc::StoreBuffer::CellPtrEdge>,js::SystemAllocPolicy>::put<js::gc::StoreBuffer::CellPtrEdge &>(struct js::gc::StoreBuffer::CellPtrEdge & const) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/mfbt/HashTable.h#l537 + 13]
0x0000e4bcdfd178 xul.dll!trunc + 0xaa4f48
0x0000e4bcdfd188 xul.dll!mozilla::cyclecollector::HoldJSObjectsImpl(nsISupports *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/xpcom/base/HoldDropJSObjects.cpp#l30 + 13]
0x0000e4bcdfd198 xul.dll!mozilla::CycleCollectedJSContext::DispatchToMicroTask(already_AddRefed<mozilla::MicroTaskRunnable>) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/xpcom/base/CycleCollectedJSContext.cpp#l521 + 0]
0x0000e4bcdfd1b0 xul.dll!trunc + 0xaa4f48
0x0000e4bcdfd1e8 xul.dll!mozilla::CycleCollectedJSContext::enqueuePromiseJob(JSContext *,JS::Handle<JSObject *>,JS::Handle<JSObject *>,JS::Handle<JSObject *>,JS::Handle<JSObject *>) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/xpcom/base/CycleCollectedJSContext.cpp#l280 + 0]
0x0000e4bcdfd2a8 xul.dll!JSRuntime::enqueuePromiseJob(JSContext *,JS::Handle<JSFunction *>,JS::Handle<JSObject *>,JS::Handle<js::GlobalObject *>) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/src/vm/Runtime.cpp#l624 + 0]
0x0000e4bcdfd348 xul.dll!static bool EnqueuePromiseReactionJob(struct JSContext *, class JS::Handle<JSObject *>, class JS::Handle<JS::Value>, JS::PromiseState) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/src/builtin/Promise.cpp#l1091 + 0]
0x0000e4bcdfd380 xul.dll!trunc + 0x1c4ed0
0x0000e4bcdfd388 xul.dll!JSScript::ensureNonLazyCanonicalFunction() [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/src/vm/JSScript-inl.h#l90 + 13]
0x0000e4bcdfd3f8 xul.dll!js::RunScript(JSContext *,js::RunState &) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/src/vm/Interpreter.cpp#l408 + 0]
0x0000e4bcdfd478 xul.dll!js::InternalCallOrConstruct(JSContext *,JS::CallArgs const &,js::MaybeConstruct) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/src/vm/Interpreter.cpp#l562 + 13]
0x0000e4bcdfd558 xul.dll!static bool InternalCall(struct JSContext *, const class js::AnyInvokeArgs & const) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/src/vm/Interpreter.cpp#l589 + 14]
0x0000e4bcdfd568 xul.dll!static bool FulfillMaybeWrappedPromise(struct JSContext *, class JS::Handle<JSObject *>, class JS::Handle<JS::Value>) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/src/builtin/Promise.cpp#l1176 + 0]
0x0000e4bcdfd5b8 xul.dll!js::Call(JSContext *,JS::Handle<JS::Value>,JS::Handle<JS::Value>,js::AnyInvokeArgs const &,JS::MutableHandle<JS::Value>) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/src/vm/Interpreter.cpp#l605 + 8]
0x0000e4bcdfd5e8 xul.dll!static bool PromiseReactionJob(struct JSContext *, unsigned int, union JS::Value *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/src/builtin/Promise.cpp#l1660 + 146]
0x0000e4bcdfd5f8 xul.dll!js::LookupNameNoGC(JSContext *,js::PropertyName *,JSObject *,JSObject * *,JSObject * *,JS::PropertyResult *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/src/vm/JSObject.cpp#l2398 + 13]
0x0000e4bcdfd720 xul.dll!static bool PromiseReactionJob(struct JSContext *, unsigned int, union JS::Value *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/src/builtin/Promise.cpp#l1576 + 0]
0x0000e4bcdfd758 xul.dll!js::InternalCallOrConstruct(JSContext *,JS::CallArgs const &,js::MaybeConstruct) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/src/vm/Interpreter.cpp#l534 + 145]
0x0000e4bcdfd798 xul.dll!js::NativeObject::initializeSlotRange(unsigned int,unsigned int) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/src/vm/NativeObject.cpp#l255 + 13]
0x0000e4bcdfd7f0 xul.dll!trunc + 0x129a0
0x0000e4bcdfd838 xul.dll!static bool InternalCall(struct JSContext *, const class js::AnyInvokeArgs & const) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/src/vm/Interpreter.cpp#l589 + 14]
0x0000e4bcdfd848 xul.dll!static bool ResolvePromise(struct JSContext *, class JS::Handle<js::PromiseObject *>, class JS::Handle<JS::Value>, JS::PromiseState) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/src/builtin/Promise.cpp#l1142 + 0]
0x0000e4bcdfd850 xul.dll!trunc + 0x129a0
0x0000e4bcdfd858 xul.dll!js::Nursery::allocate(unsigned __int64) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/src/gc/Nursery.cpp#l391 + 13]
0x0000e4bcdfd888 xul.dll!trunc + 0x2e5b8
0x0000e4bcdfd898 xul.dll!js::Call(JSContext *,JS::Handle<JS::Value>,JS::Handle<JS::Value>,js::AnyInvokeArgs const &,JS::MutableHandle<JS::Value>) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/src/vm/Interpreter.cpp#l605 + 8]
0x0000e4bcdfd8c8 xul.dll!JS::Call(JSContext *,JS::Handle<JS::Value>,JS::Handle<JS::Value>,JS::HandleValueArray const &,JS::MutableHandle<JS::Value>) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/src/jsapi.cpp#l2623 + 24]
0x0000e4bcdfd8d8 xul.dll!static void js::BarrierMethods<JSObject *>::exposeToJS(class JSObject *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/public/RootingAPI.h#l693 + 13]
0x0000e4bcdfd928 xul.dll!JS::StructGCPolicy<JS::GCVector<JS::Value,8,js::TempAllocPolicy> >::trace(JSTracer *,JS::GCVector<JS::Value,8,js::TempAllocPolicy> *,char const *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/public/GCPolicyAPI.h#l73 + 0]
0x0000e4bcdfd968 xul.dll!trunc + 0x272711
0x0000e4bcdfd978 xul.dll!trunc + 0x854eb7
0x0000e4bcdfd9a0 xul.dll!trunc + 0x272711
0x0000e4bcdfd9b0 xul.dll!trunc + 0x2e5b8
0x0000e4bcdfd9d8 xul.dll!void mozilla::PromiseJobRunnable::Run(class mozilla::AutoSlowOperation & const) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/xpcom/base/CycleCollectedJSContext.cpp#l235 + 244]
0x0000e4bcdfd9f8 xul.dll!static void js::BarrierMethods<JSObject *>::exposeToJS(class JSObject *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/public/RootingAPI.h#l693 + 13]
0x0000e4bcdfdab8 mozglue.dll!RedBlackTree<arena_chunk_map_t,ArenaRunTreeTrait>::Remove(RedBlackTree<arena_chunk_map_t,ArenaRunTreeTrait>::TreeNode) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/memory/build/rb.h#l419 + 38]
0x0000e4bcdfdac8 xul.dll!class JSObject * mozilla::dom::ProgressEvent::WrapObjectInternal(struct JSContext *, class JS::Handle<JSObject *>) [ProgressEvent.cpp: : 39 + 659]
0x0000e4bcdfdad0 xul.dll!static void MozCrashWarningReporter(struct JSContext *, class JSErrorReport *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/xpcom/base/CycleCollectedJSRuntime.cpp#l468 + 0]
0x0000e4bcdfdad8 xul.dll!JS::Call(JSContext *,JS::Handle<JS::Value>,JS::Handle<JS::Value>,JS::HandleValueArray const &,JS::MutableHandle<JS::Value>) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/src/jsapi.cpp#l2619 + 171]
0x0000e4bcdfdbb8 xul.dll![thunk]:mozilla::a11y::xpcAccessibleHyperText::AddRef`adjustor{64}' () + 0x1ccad
0x0000e4bcdfdbc8 xul.dll!nsresult XPCWrappedNative::QueryInterface(const struct nsID & const, void * *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/xpconnect/src/XPCWrappedNative.cpp#l664 + 9]
0x0000e4bcdfdc78 xul.dll!mozilla::CycleCollectedJSContext::PerformMicroTaskCheckPoint(bool) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/xpcom/base/CycleCollectedJSContext.cpp#l595 + 11]
0x0000e4bcdfdc98 xul.dll!mozilla::dom::AutoEntryScript::~AutoEntryScript() [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/dom/script/ScriptSettings.cpp#l596 + 110]
0x0000e4bcdfdd38 xul.dll!nsresult mozilla::EventListenerManager::HandleEventSubType(struct mozilla::EventListenerManager::Listener *, class mozilla::dom::Event *, class mozilla::dom::EventTarget *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/dom/events/EventListenerManager.cpp#l1022 + 0]
0x0000e4bcdfdde8 xul.dll!mozilla::dom::PopupBlocker::GetEventPopupControlState(mozilla::WidgetEvent *,mozilla::dom::Event *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/dom/base/PopupBlocker.cpp#l185 + 3]
0x0000e4bcdfddf0 xul.dll!static void MozCrashWarningReporter(struct JSContext *, class JSErrorReport *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/xpcom/base/CycleCollectedJSRuntime.cpp#l468 + 0]
0x0000e4bcdfded8 xul.dll!nsresult mozilla::dom::XMLHttpRequestMainThread::QueryInterface(const struct nsID & const, void * *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/dom/xhr/XMLHttpRequestMainThread.cpp#l382 + 64]
0x0000e4bcdfdee8 xul.dll!js::jit::MaybeEnterJit(JSContext *,js::RunState &) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/src/jit/Jit.cpp#l169 + 16]
0x0000e4bcdfdef0 xul.dll!JS::StructGCPolicy<js::LiveSavedFrameCache>::trace(JSTracer *,js::LiveSavedFrameCache *,char const *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/js/public/GCPolicyAPI.h#l73 + 0]
0x0000e4bcdfdf78 xul.dll!void mozilla::EventListenerManager::HandleEventInternal(class nsPresContext *, class mozilla::WidgetEvent *, class mozilla::dom::Event * *, class mozilla::dom::EventTarget *, nsEventStatus *, bool) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/dom/events/EventListenerManager.cpp#l1238 + 27]
0x0000e4bcdfe058 xul.dll!static void mozilla::EventTargetChainItem::HandleEventTargetChain(class nsTArray<mozilla::EventTargetChainItem> & const, class mozilla::EventChainPostVisitor & const, class mozilla::EventDispatchingCallback *, class mozilla::ELMCreationDetector & const) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/dom/events/EventDispatcher.cpp#l641 + 16]
0x0000e4bcdfe078 xul.dll!nsTArray_base<nsTArrayInfallibleAllocator,nsTArray_CopyWithMemutils>::SwapArrayElements<nsTArrayInfallibleAllocator,nsTArrayInfallibleAllocator>(nsTArray_base<nsTArrayInfallibleAllocator,nsTArray_CopyWithMemutils> &,unsigned __int64,unsigned __int64) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/xpcom/ds/nsTArray-inl.h#l482 + 12]
0x0000e4bcdfe088 xul.dll!mozilla::DOMEventTargetHelper::Release() [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/dom/events/Clipboard.cpp#l219 + 13]
0x0000e4bcdfe0e8 xul.dll!static void mozilla::EventTargetChainItem::HandleEventTargetChain(class nsTArray<mozilla::EventTargetChainItem> & const, class mozilla::EventChainPostVisitor & const, class mozilla::EventDispatchingCallback *, class mozilla::ELMCreationDetector & const) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/dom/events/EventDispatcher.cpp#l641 + 16]
0x0000e4bcdfe158 xul.dll!void mozilla::EventTargetChainItem::HandleEvent(class mozilla::EventChainPostVisitor & const, class mozilla::ELMCreationDetector & const) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/dom/events/EventDispatcher.cpp#l351 + 28]
0x0000e4bcdfe198 xul.dll!void mozilla::EventTargetChainItem::HandleEvent(class mozilla::EventChainPostVisitor & const, class mozilla::ELMCreationDetector & const) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/dom/events/EventDispatcher.cpp#l351 + 28]
0x0000e4bcdfe1c8 xul.dll!static void mozilla::EventTargetChainItem::HandleEventTargetChain(class nsTArray<mozilla::EventTargetChainItem> & const, class mozilla::EventChainPostVisitor & const, class mozilla::EventDispatchingCallback *, class mozilla::ELMCreationDetector & const) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/dom/events/EventDispatcher.cpp#l555 + 0]
0x0000e4bcdfe288 xul.dll!static bool mozilla::ShouldClearTargets(class mozilla::WidgetEvent *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/dom/events/EventDispatcher.cpp#l710 + 13]
0x0000e4bcdfe298 xul.dll!nsresult mozilla::dom::XMLHttpRequestMainThread::QueryInterface(const struct nsID & const, void * *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/dom/xhr/XMLHttpRequestMainThread.cpp#l382 + 61]
0x0000e4bcdfe2e8 xul.dll!mozilla::EventDispatcher::Dispatch(nsISupports *,nsPresContext *,mozilla::WidgetEvent *,mozilla::dom::Event *,nsEventStatus *,mozilla::EventDispatchingCallback *,nsTArray<mozilla::dom::EventTarget *> *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/dom/events/EventDispatcher.cpp#l1051 + 0]
0x0000e4bcdfe3e0 xul.dll!trunc + 0xadbd60
0x0000e4bcdfe408 xul.dll!nsTArray_base<nsTArrayInfallibleAllocator,nsTArray_CopyWithMemutils>::SwapArrayElements<nsTArrayInfallibleAllocator,nsTArrayInfallibleAllocator>(nsTArray_base<nsTArrayInfallibleAllocator,nsTArray_CopyWithMemutils> &,unsigned __int64,unsigned __int64) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/xpcom/ds/nsTArray-inl.h#l482 + 16]
0x0000e4bcdfe4a8 xul.dll!mozilla::DOMEventTargetHelper::Release() [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/dom/events/Clipboard.cpp#l219 + 13]
0x0000e4bcdfe568 xul.dll!trunc + 0xb9f880
0x0000e4bcdfe5b8 xul.dll!mozilla::EventDispatcher::DispatchDOMEvent(nsISupports *,mozilla::WidgetEvent *,mozilla::dom::Event *,nsPresContext *,nsEventStatus *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/dom/events/EventDispatcher.cpp#l1152 + 0]
0x0000e4bcdfe5d8 xul.dll!mozilla::dom::Event::InitEvent(nsTSubstring<char16_t> const &,mozilla::CanBubble,mozilla::Cancelable,mozilla::Composed) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/dom/events/Event.cpp#l486 + 13]
0x0000e4bcdfe628 xul.dll!mozilla::DOMEventTargetHelper::DispatchEvent(mozilla::dom::Event &,mozilla::dom::CallerType,mozilla::ErrorResult &) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/dom/base/nsWindowRoot.cpp#l76 + 0]
0x0000e4bcdfe648 xul.dll!mozilla::dom::Event::ConstructorInit(mozilla::dom::EventTarget *,nsPresContext *,mozilla::WidgetEvent *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/dom/events/Event.cpp#l90 + 6]
0x0000e4bcdfe688 xul.dll!void mozilla::dom::XMLHttpRequestMainThread::DispatchOrStoreEvent(class mozilla::DOMEventTargetHelper *, class mozilla::dom::Event *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/dom/xhr/XMLHttpRequestMainThread.cpp#l1279 + 31]
0x0000e4bcdfe698 nss3.dll!PR_Now [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/nsprpub/pr/src/md/windows/ntmisc.c#l323 + 7]
0x0000e4bcdfe6e8 xul.dll!void mozilla::dom::XMLHttpRequestMainThread::DispatchProgressEvent(class mozilla::DOMEventTargetHelper *, const mozilla::dom::XMLHttpRequestMainThread::ProgressEventType, __int64, __int64) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/dom/xhr/XMLHttpRequestMainThread.cpp#l1224 + 0]
0x0000e4bcdfe778 xul.dll!void mozilla::dom::XMLHttpRequestMainThread::ChangeStateToDone() [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/dom/xhr/XMLHttpRequestMainThread.cpp#l2278 + 0]
0x0000e4bcdfe7b8 xul.dll!nsresult mozilla::dom::XMLHttpRequestMainThread::OnStopRequest(class nsIRequest *, nsresult) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/dom/xhr/XMLHttpRequestMainThread.cpp#l2219 + 0]
0x0000e4bcdfe7e8 xul.dll!trunc + 0x842fac
0x0000e4bcdfe7f8 mozglue.dll!BaseAllocator::malloc(unsigned __int64) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/memory/build/mozjemalloc.cpp#l3935 + 14]
0x0000e4bcdfe838 xul.dll!static class `anonymous namespace'::KeyedHistogram * `anonymous namespace'::internal_GetKeyedHistogramById(mozilla::Telemetry::HistogramID, mozilla::Telemetry::ProcessID, bool) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/toolkit/components/telemetry/core/TelemetryHistogram.cpp#l466 + 13]
0x0000e4bcdfe848 mozglue.dll!moz_xmalloc [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/memory/mozalloc/mozalloc.cpp#l74 + 13]
0x0000e4bcdfe858 ntdll.dll!RtlpWakeConditionVariable + 0xb6
0x0000e4bcdfe868 ntdll.dll!RtlpWakeSRWLock + 0x8f
0x0000e4bcdfe8c8 xul.dll!TelemetryHistogram::Accumulate(mozilla::Telemetry::HistogramID,nsTString<char> const &,unsigned int) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/toolkit/components/telemetry/core/TelemetryHistogram.cpp#l2589 + 16]
0x0000e4bcdfe8d8 xul.dll!unsigned __int64 base::Histogram::BucketIndex(int) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/ipc/chromium/src/base/histogram.cc#l269 + 12]
0x0000e4bcdfe8e8 xul.dll!nsTimerImpl::InitCommon(mozilla::BaseTimeDuration<mozilla::TimeDurationValueCalculator> const &,unsigned int,nsTimerImpl::Callback &&) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/xpcom/threads/nsTimerImpl.cpp#l318 + 58]
0x0000e4bcdfe8f8 xul.dll!nsTArray_base<nsTArrayInfallibleAllocator,nsTArray_CopyWithMemutils>::SwapArrayElements<nsTArrayInfallibleAllocator,nsTArrayInfallibleAllocator>(nsTArray_base<nsTArrayInfallibleAllocator,nsTArray_CopyWithMemutils> &,unsigned __int64,unsigned __int64) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/xpcom/ds/nsTArray-inl.h#l482 + 16]
0x0000e4bcdfe928 xul.dll!`anonymous namespace'::internal_HistogramAdd(mozilla::BaseAutoLock<mozilla::AnyStaticMutex> const &,`anonymous namespace'::Histogram &,BaseAutoLock<mozilla::AnyStaticMutex>::Telemetry::HistogramID,unsigned int,BaseAutoLock<mozilla::AnyStaticMutex>::A0xDA962EE7::ProcessID) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/toolkit/components/telemetry/core/TelemetryHistogram.cpp#l689 + 18]
0x0000e4bcdfe938 xul.dll!nsTimerImpl::InitCommon(mozilla::BaseTimeDuration<mozilla::TimeDurationValueCalculator> const &,unsigned int,nsTimerImpl::Callback &&) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/xpcom/threads/nsTimerImpl.cpp#l318 + 13]
0x0000e4bcdfe990 ntdll.dll!RtlpAllocateHeap + 0x24a1
0x0000e4bcdfe9a8 xul.dll!nsresult mozilla::net::nsHTTPCompressConv::OnStopRequest(class nsIRequest *, nsresult) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/netwerk/streamconv/converters/nsHTTPCompressConv.cpp#l169 + 12]
0x0000e4bcdfe9c8 xul.dll!mozilla::net::HttpBaseChannel::GetPerformanceStorage() [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/netwerk/protocol/http/HttpBaseChannel.cpp#l4245 + 13]
0x0000e4bcdfea18 xul.dll!nsresult mozilla::net::nsHttpChannel::ContinueOnStopRequest(nsresult, bool, bool) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/netwerk/protocol/http/nsHttpChannel.cpp#l8028 + 0]
0x0000e4bcdfea28 xul.dll!trunc + 0xadbd60
0x0000e4bcdfea68 mozglue.dll!BaseAllocator::malloc(unsigned __int64) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/memory/build/mozjemalloc.cpp#l3935 + 14]
0x0000e4bcdfea88 mozglue.dll!arena_t::DallocSmall(arena_chunk_t *,void *,arena_chunk_map_t *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/memory/build/mozjemalloc.cpp#l3234 + 0]
0x0000e4bcdfea98 xul.dll!trunc + 0xadbd60
0x0000e4bcdfeac0 xul.dll!trunc + 0x83835a
0x0000e4bcdfead8 xul.dll!trunc + 0xb9f880
0x0000e4bcdfeb30 ntdll.dll!RtlpAllocateHeap + 0x24a1
0x0000e4bcdfeb48 xul.dll!nsresult mozilla::net::nsHttpChannel::OnStopRequest(class nsIRequest *, nsresult) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/netwerk/protocol/http/nsHttpChannel.cpp#l7797 + 0]
0x0000e4bcdfeb60 ntdll.dll!RtlLeaveCriticalSection + 0x0
0x0000e4bcdfeb78 mozglue.dll!BaseAllocator::free(void *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/memory/build/mozjemalloc.cpp#l4028 + 90]
0x0000e4bcdfeb88 mozglue.dll!arena_t::DallocSmall(arena_chunk_t *,void *,arena_chunk_map_t *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/memory/build/mozjemalloc.cpp#l3234 + 0]
0x0000e4bcdfebd0 ntdll.dll!RtlLeaveCriticalSection + 0x0
0x0000e4bcdfebe8 mozglue.dll!BaseAllocator::free(void *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/memory/build/mozjemalloc.cpp#l4028 + 90]
0x0000e4bcdfec08 xul.dll!void mozilla::net::CacheEntryHandle::~CacheEntryHandle() [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/netwerk/cache2/CacheEntry.cpp#l81 + 0]
0x0000e4bcdfec18 xul.dll!trunc + 0xadbd60
0x0000e4bcdfec30 xul.dll!trunc + 0xadbd60
0x0000e4bcdfec38 mozglue.dll!je_free [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/memory/build/malloc_decls.h#l41 + 0]
0x0000e4bcdfec60 ntdll.dll!RtlLeaveCriticalSection + 0x0
0x0000e4bcdfec78 xul.dll!void mozilla::net::CacheFile::Unlock() [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/netwerk/cache2/CacheFile.cpp#l1343 + 13]
0x0000e4bcdfec88 xul.dll!void mozilla::net::CacheFileInputStream::ReleaseChunk() [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/netwerk/cache2/CacheFileInputStream.cpp#l530 + 0]
0x0000e4bcdfec98 xul.dll!trunc + 0xadbd60
0x0000e4bcdfed00 xul.dll!trunc + 0xadbd60
0x0000e4bcdfed30 ntdll.dll!RtlLeaveCriticalSection + 0x0
0x0000e4bcdfed48 xul.dll!unsigned int nsInputStreamPump::OnStateStop() [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/netwerk/base/nsInputStreamPump.cpp#l656 + 0]
0x0000e4bcdfedb8 ntdll.dll!RtlEnterCriticalSection + 0x0
0x0000e4bcdfedc8 xul.dll!nsresult nsInputStreamPump::OnInputStreamReady(class nsIAsyncInputStream *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/netwerk/base/nsInputStreamPump.cpp#l403 + 8]
0x0000e4bcdfee78 xul.dll!nsresult nsInputStreamReadyEvent::Run() [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/xpcom/io/nsStreamUtils.cpp#l93 + 0]
0x0000e4bcdfeea8 xul.dll!nsThread::ProcessNextEvent(bool,bool *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/xpcom/threads/nsThread.cpp#l1163 + 0]
0x0000e4bcdfef08 xul.dll!nsresult TimerThread::RemoveTimer(class nsTimerImpl *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/xpcom/threads/TimerThread.cpp#l557 + 0]
0x0000e4bcdfefa0 mozglue.dll!moz_xmalloc [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/memory/mozalloc/mozalloc.cpp#l67 + 0]
0x0000e4bcdfefb8 xul.dll!NS_ProcessNextEvent(nsIThread *,bool) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/xpcom/threads/nsThreadUtils.cpp#l482 + 13]
0x0000e4bcdfefd8 xul.dll!nsresult nsTimer::Cancel() [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/xpcom/threads/nsTimerImpl.h#l235 + 0]
0x0000e4bcdff008 xul.dll!void mozilla::ipc::MessagePump::Run(class base::MessagePump::Delegate *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/ipc/glue/MessagePump.cpp#l88 + 10]
0x0000e4bcdff018 xul.dll!nsTArray_base<nsTArrayInfallibleAllocator,nsTArray_CopyWithMemutils>::EnsureCapacity<nsTArrayInfallibleAllocator>(unsigned __int64,unsigned __int64) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/xpcom/ds/nsTArray-inl.h#l145 + 0]
0x0000e4bcdff028 xul.dll!trunc + 0x178c96
0x0000e4bcdff078 xul.dll!MessageLoop::RunHandler() [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/ipc/chromium/src/base/message_loop.cc#l309 + 0]
0x0000e4bcdff088 xul.dll!static class RefPtr<imgRequestProxy> * nsTArray_Impl<RefPtr<imgRequestProxy>,nsTArrayInfallibleAllocator>::AppendElement<imgRequestProxy *&,nsTArrayInfallibleAllocator>(class imgRequestProxy * & const) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/xpcom/ds/nsTArray.h#l2394 + 19]
0x0000e4bcdff090 xul.dll!trunc + 0x4c9910
0x0000e4bcdff098 nss3.dll!PR_GetThreadPrivate [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/nsprpub/pr/src/threads/prtpd.c#l204 + 21]
0x0000e4bcdff0c8 xul.dll!MessageLoop::Run() [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/ipc/chromium/src/base/message_loop.cc#l291 + 0]
0x0000e4bcdff0d8 xul.dll!nsresult mozilla::dom::power::PowerManagerService::AddWakeLockListener(class nsIDOMMozWakeLockListener *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/dom/power/PowerManagerService.cpp#l95 + 13]
0x0000e4bcdff118 xul.dll!nsBaseAppShell::Run() [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/widget/nsBaseAppShell.cpp#l139 + 0]
0x0000e4bcdff158 xul.dll!nsAppShell::Run() [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/widget/windows/nsAppShell.cpp#l411 + 8]
0x0000e4bcdff168 xul.dll!nsToolkitProfileService::CompleteStartup() [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/toolkit/profile/nsToolkitProfileService.cpp#l417 + 22]
0x0000e4bcdff178 nss3.dll!PR_GetEnv [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/nsprpub/pr/src/misc/prenv.c#l70 + 0]
0x0000e4bcdff188 xul.dll!nsresult nsAppStartup::Run() [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/toolkit/components/startup/nsAppStartup.cpp#l272 + 0]
0x0000e4bcdff1b8 xul.dll!nsresult XREMain::XRE_mainRun() [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/toolkit/xre/nsAppRunner.cpp#l4598 + 6]
0x0000e4bcdff230 xul.dll!trunc + 0x91ccf7
0x0000e4bcdff248 xul.dll!mozilla::BackgroundHangMonitor::Startup() [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/toolkit/components/backgroundhangmonitor/BackgroundHangMonitor.cpp#l602 + 5]
0x0000e4bcdff278 xul.dll!NS_InitXPCOM [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/xpcom/build/XPCOMInit.cpp#l509 + 16]
0x0000e4bcdff288 xul.dll!trunc + 0x9efdc6
0x0000e4bcdff2a8 xul.dll!trunc + 0x84d4a7
0x0000e4bcdff310 mozglue.dll!moz_xmalloc [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/memory/mozalloc/mozalloc.cpp#l67 + 0]
0x0000e4bcdff328 mozglue.dll!BaseAllocator::malloc(unsigned __int64) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/memory/build/mozjemalloc.cpp#l3935 + 14]
0x0000e4bcdff340 xul.dll!trunc + 0x7cfb50
0x0000e4bcdff3c8 xul.dll!int XREMain::XRE_main(int, char * *, const struct mozilla::BootstrapConfig & const) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/toolkit/xre/nsAppRunner.cpp#l4736 + 8]
0x0000e4bcdff438 mozglue.dll!BaseAllocator::malloc(unsigned __int64) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/memory/build/mozjemalloc.cpp#l3935 + 14]
0x0000e4bcdff478 xul.dll!XRE_main(int,char * * const,mozilla::BootstrapConfig const &) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/toolkit/xre/nsAppRunner.cpp#l4820 + 16]
0x0000e4bcdff488 mozglue.dll!je_malloc [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/memory/build/malloc_decls.h#l38 + 0]
0x0000e4bcdff490 mozglue.dll!moz_xmalloc [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/memory/mozalloc/mozalloc.cpp#l67 + 0]
0x0000e4bcdff498 ntdll.dll!RtlSetLastWin32Error + 0x40
0x0000e4bcdff4e0 xul.dll!trunc + 0x799d40
0x0000e4bcdff4e8 xul.dll!trunc + 0x799d70
0x0000e4bcdff4f0 xul.dll!trunc + 0x799da0
0x0000e4bcdff550 xul.dll!trunc + 0xadbd60
0x0000e4bcdff578 firefox.exe!Init_thread_footer [thread_safe_statics.cpp : 249 + 0]
0x0000e4bcdff580 firefox.exe!memmove + 0xcf58
0x0000e4bcdff5a8 firefox.exe!mozilla::sandboxing::PermissionsService::GetInstance() [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/security/sandbox/chromium-shim/sandbox/win/permissionsService.cpp#l90 + 20]
0x0000e4bcdff5e8 firefox.exe!static int do_main(int, char * *, char * *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/browser/app/nsBrowserApp.cpp#l0 + 0]
0x0000e4bcdff618 mozglue.dll!arena_t::DallocSmall(arena_chunk_t *,void *,arena_chunk_map_t *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/memory/build/mozjemalloc.cpp#l3234 + 0]
0x0000e4bcdff628 firefox.exe!memmove + 0xcf08
0x0000e4bcdff630 firefox.exe!memmove + 0x15e0
0x0000e4bcdff638 firefox.exe!memmove + 0x384e
0x0000e4bcdff658 ucrtbase.dll!common_get_or_create_environment_nolock<char> + 0xb
0x0000e4bcdff660 xul.dll!trunc + 0x8e7f28
0x0000e4bcdff670 xul.dll!trunc + 0x8e7f28
0x0000e4bcdff678 mozglue.dll!BaseAllocator::free(void *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/memory/build/mozjemalloc.cpp#l4028 + 90]
0x0000e4bcdff680 xul.dll!trunc + 0x8e7f28
0x0000e4bcdff688 ucrtbase.dll!common_getenv_nolock<char> + 0x17
0x0000e4bcdff698 nss3.dll!PR_NewThreadPrivateIndex [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/nsprpub/pr/src/threads/prtpd.c#l103 + 5]
0x0000e4bcdff6b8 ucrtbase.dll!common_getenv<char> + 0x4e
0x0000e4bcdff6c8 xul.dll!trunc + 0x8e7f28
0x0000e4bcdff6e8 nss3.dll!PR_GetEnv [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/nsprpub/pr/src/misc/prenv.c#l70 + 0]
0x0000e4bcdff708 xul.dll!void mozilla::BootstrapImpl::XRE_StartupTimelineRecord(int, class mozilla::TimeStamp) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/toolkit/xre/Bootstrap.cpp#l35 + 0]
0x0000e4bcdff728 xul.dll!XRE_EnableSameExecutableForContentProc() [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/toolkit/xre/nsAppRunner.cpp#l5090 + 13]
0x0000e4bcdff758 firefox.exe!static int NS_internal_main(int, char * *, char * *) [https://hg.mozilla.org/releases/mozilla-release/annotate/2a7896ba9aa5d982abe01f859d771d411fda8101/browser/app/nsBrowserApp.cpp#l293 + 13]
0x0000e4bcdff778 ucrtbase.dll!__crt_state_management::get_current_state_index() + 0x61
|
|
||
Comment 17•5 years ago
|
||
I'm still not sure what's happening here. I think we are hitting a call path that looks like js::jit::CallNativeGetter -> XPC_WN_CallMethod -> XPCWrappedNative::CallMethod -> nsXPTType::IsDependent (with lots of inlining), but I'm not totally sure.
|
|
||
Comment 18•5 years ago
|
||
More peculiarities: all the instances of xul.dll!bool nsXPTType::IsDependent() on the stack happen to have the address 0x7ff9f3f67067. You'll note from comment 13 that this happens to be the exact address of the instruction that is crashing. That address is not a return target, though. So how in the world is it winding up there? It's certainly possible it's winding up there entirely by chance, but that seems...very suspicious.
|
||
Comment 19•5 years ago
|
||
(In reply to Nathan Froyd [:froydnj] from comment #18)
More peculiarities: all the instances of
xul.dll!bool nsXPTType::IsDependent()on the stack happen to have the address 0x7ff9f3f67067. You'll note from comment 13 that this happens to be the exact address of the instruction that is crashing. That address is not a return target, though. So how in the world is it winding up there? It's certainly possible it's winding up there entirely by chance, but that seems...very suspicious.
That is super duper weird. Seems like some object got its vtable mixed up with a field or something earlier on, causing pointers into text to be misinterpreted as object pointers or something like that?
Given that this pointer exists in the stack a bunch, there's a good chance that this method isn't actually being called intentionally as a function, but rather being misinterpreted and invoked through a corrupted stack somehow?
I'm genuinely not sure how actionable this is, but there's a chance that this particular symptom is very specific to the build of Firefox 67 currently on release, given that if this is actually caused by stack misinterpretation, the crash location might move around as the binary's layout changes in memory.
Flags: needinfo?(nika)
|
|
||
Comment 20•5 years ago
|
||
OK, bother, apparently the particular CPU that all these crashes are happening on is some sort of low-end Intel chip (extended model 0x7, model 0xA in the small cores table):
https://en.wikichip.org/wiki/intel/cpuid#Small_Cores
https://en.wikichip.org/wiki/intel/microarchitectures/goldmont_plus
and the errata document from comment 9 is for a different microarchitecture (extended model 0x5 and 0x4, model 0xA in the small cores table):
https://en.wikichip.org/wiki/intel/cpuid#Small_Cores
https://en.wikichip.org/wiki/intel/microarchitectures/silvermont
We actually want the errata document for "Pentium Silver and Celeron":
which, don't ask me why, I can view inline in my browser but not with my desktop PDF viewer on Linux.
Unfortunately, that document cites even fewer processor errata than the one from comment 9, and all of the errata are nowhere even remotely related to the crashes we're seeing here.
|
|
||
Comment 21•5 years ago
|
||
The crash address is always equal to the rax register. I bet something is going on within this model cpu that is incorrectly interpreting that setb instruction as a "mov [rax], ...".
I checked all possible single-bit flips, and none of them would result in such a mov. But if the problem is inside the cpu, then it may not have to be a single-bit error (imagine a bad lookup in a table for instance).
|
|
||
Comment 22•5 years ago
|
||
jld pointed at https://bugs.chromium.org/p/chromium/issues/detail?id=968683 where Chrome is seeing several crashes that are all on the specific model associated with the crashes here. Speculation is that a microcode update is causing the crashes; this seems possible to me, but a bit unlikely, as the microcode versions associated with the crashes we're seeing are all over the place.
|
||
Updated•5 years ago
|
|
|
||
Comment 23•5 years ago
|
||
The disassembly of nsXPTType::IsDependent is identical between 67.0b19 and the 67 release, so it would make more sense if this were a microcode update rather than something in our build. I'm not sure I entirely trust our microcode version reporting code, maybe there's some notion of a patch level that isn't reflected in the regkey.
|
|
||
Updated•5 years ago
|
|
||
Comment 25•5 years ago
|
||
Appears to have gone away on its own. Please reopen if I'm missing something.
Status: NEW → RESOLVED
Closed: 5 years ago
Resolution: --- → WORKSFORME
|
|
||
Comment 26•5 years ago
|
||
The chromium bug went quiet too.
|
||
Updated•4 years ago
|
Summary: Crash in [@ nsXPTType::IsDependent] → Crash in [@ nsXPTType::IsDependent] on Intel CPU family 6 model 122 stepping 1
You need to log in
before you can comment on or make changes to this bug.
Description
•