1562710 - Crash in [@ js::AtomsTable::tracePinnedAtoms]

Status: RESOLVED DUPLICATE of bug 1555936

(Core :: JavaScript Engine, defect)

Description

[Marcia Knous [:marcia]]

This bug is for crash report bp-f3b98294-01ec-47c5-8fdb-df19c0190701.

Seen while looking at 68 crash data. Windows and Linux crash which appears more prominently in 68 crash data as we have moved through the 68 cycle. Also visible in 69.

Some correlations:

(83.84% in signature vs 00.67% overall) address = 0x1
(100.0% in signature vs 28.00% overall) contains_memory_report = null
(100.0% in signature vs 30.21% overall) reason = EXCEPTION_ACCESS_VIOLATION_READ
(39.39% in signature vs 99.12% overall) plugin_name = null
(51.52% in signature vs 00.86% overall) adapter_subsys_id = 2a428086 [60.24% vs 01.32% if process_type = content]
(51.52% in signature vs 02.62% overall) adapter_device_id = 0x2a42 [60.24% vs 02.84% if process_type = content]
(72.73% in signature vs 18.59% overall) moz_crash_reason = null
(61.62% in signature vs 13.91% overall) CPU Info = GenuineIntel family 6 model 23 stepping 10 [73.49% vs 19.53% if cpu_arch = x86]
(47.47% in signature vs 02.37% overall) adapter_driver_version = 8.15.10.2869 [55.42% vs 03.35% if process_type = content]
(47.47% in signature vs 02.37% overall) adapter_driver_version_clean = 2869 [55.42% vs 03.35% if process_type = content]
(77.78% in signature vs 37.23% overall) bios_manufacturer = American Megatrends Inc. [83.13% vs 41.06% if process_type = content]

Top 10 frames of crashing thread:

0 xul.dll js::AtomsTable::tracePinnedAtoms js/src/vm/JSAtom.cpp:412
1 xul.dll js::TraceAtoms js/src/vm/JSAtom.cpp:422
2 xul.dll js::gc::GCRuntime::traceRuntimeForMajorGC js/src/gc/RootMarking.cpp:281
3 xul.dll js::gc::GCRuntime::beginMarkPhase js/src/gc/GC.cpp:4412
4 xul.dll js::gc::GCRuntime::incrementalSlice js/src/gc/GC.cpp:7038
5 xul.dll js::gc::GCRuntime::gcCycle js/src/gc/GC.cpp:7482
6 xul.dll js::gc::GCRuntime::collect js/src/gc/GC.cpp:7654
7 xul.dll js::gc::GCRuntime::startGC js/src/gc/GC.cpp
8 xul.dll JS::StartIncrementalGC js/src/gc/GC.cpp:8585
9 xul.dll nsJSContext::GarbageCollectNow dom/base/nsJSEnvironment.cpp:1144

Comment 1

[Steven DeTar [:sdetar]]

Jon, would this be an issue in GC? Who would be a good person to look at this?