Closed Bug 1648560 Opened 4 years ago Closed 4 years ago

Intermittent SUMMARY: AddressSanitizer: SEGV /builds/worker/workspace/obj-spider/dist/include/mozilla/HashTable.h:2043:66 in rawCapacity

Categories

(Core :: JavaScript: GC, defect, P5)

Product:
Core
Component:
JavaScript: GC
Type:
defect

Tracking

()

Status:
RESOLVED DUPLICATE of bug 1638764

People

(Reporter: intermittent-bug-filer, Unassigned)

References

Details

(Keywords: intermittent-failure)

Filed by: csabou [at] mozilla.com
Parsed log: https://treeherder.mozilla.org/logviewer.html#?job_id=307554651&repo=autoland
Full log: https://firefox-ci-tc.services.mozilla.com/api/queue/v1/task/EpOu6GGFSkWkFyNUGFoxWw/runs/0/artifacts/public/logs/live_backing.log

[task 2020-06-25T18:28:58.343Z] TEST-PASS | js/src/jit-test/tests/gc/bug-1468792.js | Success (code 3, args "--ion-eager --ion-offthread-compile=off --ion-check-range-analysis --ion-extra-checks --no-sse3 --no-threads") [0.2 s]
[task 2020-06-25T18:28:58.387Z] Assertion failure: ptr (Chunk not found in map), at /builds/worker/checkouts/gecko/js/src/gc/Verifier.cpp:637
[task 2020-06-25T18:28:58.387Z] AddressSanitizer:DEADLYSIGNAL
[task 2020-06-25T18:28:58.387Z] =================================================================
[task 2020-06-25T18:28:58.387Z] ==10358==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000000 (pc 0x555556fc51c8 bp 0x7fffffdf9800 sp 0x7fffffdf5080 T0)
[task 2020-06-25T18:28:58.387Z] ==10358==The signal is caused by a WRITE memory access.
[task 2020-06-25T18:28:58.387Z] ==10358==Hint: address points to the zero page.
[task 2020-06-25T18:28:58.387Z] #0 0x555556fc51c7 in rawCapacity /builds/worker/workspace/obj-spider/dist/include/mozilla/HashTable.h:2043:66
[task 2020-06-25T18:28:58.387Z] #1 0x555556fc51c7 in capacity /builds/worker/workspace/obj-spider/dist/include/mozilla/HashTable.h:2045:47
[task 2020-06-25T18:28:58.387Z] #2 0x555556fc51c7 in rehashIfOverloaded /builds/worker/workspace/obj-spider/dist/include/mozilla/HashTable.h:1865:23
[task 2020-06-25T18:28:58.387Z] #3 0x555556fc51c7 in putNew<js::gc::ChainedIter<js::gc::Chunk , js::gc::ChunkPool::Iter, js::gc::ChunkPool::Iter> &, mozilla::UniquePtr<js::gc::ChunkBitmap, JS::DeletePolicy<js::gc::ChunkBitmap> > > /builds/worker/workspace/obj-spider/dist/include/mozilla/HashTable.h:2168:9
[task 2020-06-25T18:28:58.387Z] #4 0x555556fc51c7 in putNew<js::gc::ChainedIter<js::gc::Chunk , js::gc::ChunkPool::Iter, js::gc::ChunkPool::Iter> &, mozilla::UniquePtr<js::gc::ChunkBitmap, JS::DeletePolicy<js::gc::ChunkBitmap> > > /builds/worker/workspace/obj-spider/dist/include/mozilla/HashTable.h:264:18
[task 2020-06-25T18:28:58.387Z] #5 0x555556fc51c7 in js::gc::MarkingValidator::nonIncrementalMark(js::gc::AutoGCSession&) /builds/worker/checkouts/gecko/js/src/gc/Verifier.cpp:522:16
[task 2020-06-25T18:28:58.387Z] #6 0x555556eedb9b in js::gc::GCRuntime::beginSweepPhase(JS::GCReason, js::gc::AutoGCSession&) /builds/worker/checkouts/gecko/js/src/gc/GC.cpp:5508:3
[task 2020-06-25T18:28:58.387Z] #7 0x555556efadca in js::gc::GCRuntime::incrementalSlice(js::SliceBudget&, mozilla::Maybe<JSGCInvocationKind> const&, JS::GCReason, js::gc::AutoGCSession&) /builds/worker/checkouts/gecko/js/src/gc/GC.cpp:6707:7
[task 2020-06-25T18:28:58.387Z] #8 0x555556efe7c8 in js::gc::GCRuntime::gcCycle(bool, js::SliceBudget, mozilla::Maybe<JSGCInvocationKind> const&, JS::GCReason) /builds/worker/checkouts/gecko/js/src/gc/GC.cpp:7124:3
[task 2020-06-25T18:28:58.387Z] #9 0x555556f01fcd in js::gc::GCRuntime::collect(bool, js::SliceBudget, mozilla::Maybe<JSGCInvocationKind> const&, JS::GCReason) /builds/worker/checkouts/gecko/js/src/gc/GC.cpp:7359:9
[task 2020-06-25T18:28:58.387Z] #10 0x555556f0ae53 in js::gc::GCRuntime::runDebugGC() /builds/worker/checkouts/gecko/js/src/gc/GC.cpp:7947:5
[task 2020-06-25T18:28:58.387Z] #11 0x555556e6fb58 in gcIfNeededAtAllocation /builds/worker/checkouts/gecko/js/src/gc/Allocator.cpp:442:5
[task 2020-06-25T18:28:58.387Z] #12 0x555556e6fb58 in checkAllocatorState<js::CanGC> /builds/worker/checkouts/gecko/js/src/gc/Allocator.cpp:404:10
[task 2020-06-25T18:28:58.387Z] #13 0x555556e6fb58 in js::Shape js::Allocate<js::Shape, (js::AllowGC)1>(JSContext) /builds/worker/checkouts/gecko/js/src/gc/Allocator.cpp:329:28
[task 2020-06-25T18:28:58.388Z] #14 0x5555564f9c68 in js::NativeObject::toDictionaryMode(JSContext*, JS::Handle<js::NativeObject*>) /builds/worker/checkouts/gecko/js/src/vm/Shape.cpp:505:47
[task 2020-06-25T18:28:58.388Z] #15 0x555556508fb3 in js::NativeObject::maybeToDictionaryModeForPut(JSContext*, JS::Handle<js::NativeObject*>, JS::MutableHandle<js::Shape*>) /builds/worker/checkouts/gecko/js/src/vm/Shape.cpp:994:8
[task 2020-06-25T18:28:58.388Z] #16 0x555556509f74 in js::NativeObject::putDataProperty(JSContext*, JS::Handle<js::NativeObject*>, JS::Handle<JS::PropertyKey>, unsigned int) /builds/worker/checkouts/gecko/js/src/vm/Shape.cpp:1062:8
[task 2020-06-25T18:28:58.388Z] #17 0x55555639d381 in AddOrChangeProperty<IsAddOrChange::AddOrChange> /builds/worker/checkouts/gecko/js/src/vm/NativeObject.cpp:1459:15
[task 2020-06-25T18:28:58.388Z] #18 0x55555639d381 in js::NativeDefineProperty(JSContext*, JS::Handle<js::NativeObject*>, JS::Handle<JS::PropertyKey>, JS::Handle<JS::PropertyDescriptor>, JS::ObjectOpResult&) /builds/worker/checkouts/gecko/js/src/vm/NativeObject.cpp:1903:8
[task 2020-06-25T18:28:58.388Z] #19 0x5555562f8cd8 in DefineDataProperty /builds/worker/checkouts/gecko/js/src/vm/JSObject.cpp:2742:10
[task 2020-06-25T18:28:58.388Z] #20 0x5555562f8cd8 in js::DefineDataProperty(JSContext*, JS::Handle<JSObject*>, JS::Handle<JS::PropertyKey>, JS::Handle<JS::Value>, unsigned int) /builds/worker/checkouts/gecko/js/src/vm/JSObject.cpp:2763:8
[task 2020-06-25T18:28:58.388Z] #21 0x5555562ccb79 in js::DefineDataProperty(JSContext*, JS::Handle<JSObject*>, js::PropertyName*, JS::Handle<JS::Value>, unsigned int) /builds/worker/checkouts/gecko/js/src/vm/JSObject.cpp:2777:10
[task 2020-06-25T18:28:58.388Z] #22 0x5555560aeecf in js::LinkConstructorAndPrototype(JSContext*, JSObject*, JSObject*, unsigned int, unsigned int) /builds/worker/checkouts/gecko/js/src/vm/GlobalObject.cpp:950:10
[task 2020-06-25T18:28:58.388Z] #23 0x5555560ad2e1 in js::GlobalObject::resolveConstructor(JSContext*, JS::Handle<js::GlobalObject*>, JSProtoKey, js::GlobalObject::IfClassIsDisabled) /builds/worker/checkouts/gecko/js/src/vm/GlobalObject.cpp:374:17
[task 2020-06-25T18:28:58.388Z] #24 0x555556450b08 in ensureConstructor /builds/worker/checkouts/gecko/js/src/vm/GlobalObject.h:180:12
[task 2020-06-25T18:28:58.388Z] #25 0x555556450b08 in getOrCreateSavedFramePrototype /builds/worker/checkouts/gecko/js/src/vm/GlobalObject.h:423:10
[task 2020-06-25T18:28:58.388Z] #26 0x555556450b08 in js::SavedFrame::create(JSContext*) /builds/worker/checkouts/gecko/js/src/vm/SavedStacks.cpp:557:22
[task 2020-06-25T18:28:58.388Z] #27 0x555556468e28 in createFrameFromLookup /builds/worker/checkouts/gecko/js/src/vm/SavedStacks.cpp:1767:30
[task 2020-06-25T18:28:58.388Z] #28 0x555556468e28 in js::SavedStacks::getOrCreateSavedFrame(JSContext*, JS::Handle<js::SavedFrame::Lookup>) /builds/worker/checkouts/gecko/js/src/vm/SavedStacks.cpp:1753:30
[task 2020-06-25T18:28:58.388Z] #29 0x5555564605e0 in js::SavedStacks::insertFrames(JSContext*, JS::MutableHandle<js::SavedFrame*>, mozilla::Variant<JS::AllFrames, JS::MaxFrames, JS::FirstSubsumedFrame>&&) /builds/worker/checkouts/gecko/js/src/vm/SavedStacks.cpp:1590:15
[task 2020-06-25T18:28:58.388Z] #30 0x55555645d51a in js::SavedStacks::saveCurrentStack(JSContext*, JS::MutableHandle<js::SavedFrame*>, mozilla::Variant<JS::AllFrames, JS::MaxFrames, JS::FirstSubsumedFrame>&&) /builds/worker/checkouts/gecko/js/src/vm/SavedStacks.cpp:1307:10
[task 2020-06-25T18:28:58.388Z] #31 0x555555ea6610 in CaptureCurrentStack /builds/worker/checkouts/gecko/js/src/jsapi.cpp:5828:29
[task 2020-06-25T18:28:58.388Z] #32 0x555555ea6610 in js::CaptureStack(JSContext*, JS::MutableHandle<JSObject*>) /builds/worker/checkouts/gecko/js/src/jsexn.cpp:219:10
[task 2020-06-25T18:28:58.388Z] #33 0x555555ea7b6d in js::ErrorToException(JSContext*, JSErrorReport*, JSErrorFormatString const* ()(void, unsigned int), void*) /builds/worker/checkouts/gecko/js/src/jsexn.cpp:329:8
[task 2020-06-25T18:28:58.388Z] #34 0x55555608a008 in ReportError /builds/worker/checkouts/gecko/js/src/vm/ErrorReporting.cpp:164:3
[task 2020-06-25T18:28:58.388Z] #35 0x55555608a008 in js::ReportErrorNumberVA(JSContext*, js::IsWarning, JSErrorFormatString const* ()(void, unsigned int), void*, unsigned int, js::ErrorArgumentsType, __va_list_tag*) /builds/worker/checkouts/gecko/js/src/vm/ErrorReporting.cpp:477:3
[task 2020-06-25T18:28:58.388Z] #36 0x555555e53477 in JS_ReportErrorNumberASCIIVA /builds/worker/checkouts/gecko/js/src/jsapi.cpp:4753:3
[task 2020-06-25T18:28:58.389Z] #37 0x555555e53477 in JS_ReportErrorNumberASCII(JSContext*, JSErrorFormatString const* ()(void, unsigned int), void*, unsigned int, ...) /builds/worker/checkouts/gecko/js/src/jsapi.cpp:4743:3
[task 2020-06-25T18:28:58.389Z] #38 0x555556261f5d in js::ReportOverRecursed(JSContext*, unsigned int) /builds/worker/checkouts/gecko/js/src/vm/JSContext.cpp:299:7
[task 2020-06-25T18:28:58.389Z] #39 0x555555c6e320 in CheckRecursionLimit /builds/worker/checkouts/gecko/js/src/jsfriendapi.h:995:5
[task 2020-06-25T18:28:58.389Z] #40 0x555555c6e320 in CheckRecursionLimit /builds/worker/checkouts/gecko/js/src/jsfriendapi.h:1021:10
[task 2020-06-25T18:28:58.389Z] #41 0x555555c6e320 in js::RunScript(JSContext*, js::RunState&) /builds/worker/checkouts/gecko/js/src/vm/Interpreter.cpp:418:8
[task 2020-06-25T18:28:58.389Z] #42 0x555555ca15f8 in js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason) /builds/worker/checkouts/gecko/js/src/vm/Interpreter.cpp:611:13
[task 2020-06-25T18:28:58.389Z] #43 0x5555571749d9 in js::jit::DoCallFallback(JSContext*, js::jit::BaselineFrame*, js::jit::ICCall_Fallback*, unsigned int, JS::Value*, JS::MutableHandle<JS::Value>) /builds/worker/checkouts/gecko/js/src/jit/BaselineIC.cpp:2992:10
[task 2020-06-25T18:28:58.389Z] #44 0x14a322eedbc7 (<unknown module>)
[task 2020-06-25T18:28:58.389Z]
[task 2020-06-25T18:28:58.389Z] AddressSanitizer can not provide additional info.
[task 2020-06-25T18:28:58.389Z] SUMMARY: AddressSanitizer: SEGV /builds/worker/workspace/obj-spider/dist/include/mozilla/HashTable.h:2043:66 in rawCapacity
[task 2020-06-25T18:28:58.390Z] ==10358==ABORTING
[task 2020-06-25T18:28:58.391Z] Exit code: 1
[task 2020-06-25T18:28:58.392Z] FAIL - gc/bug-1459860.js
[task 2020-06-25T18:28:58.393Z] TEST-UNEXPECTED-FAIL | js/src/jit-test/tests/gc/bug-1459860.js | Assertion failure: ptr (Chunk not found in map), at /builds/worker/checkouts/gecko/js/src/gc/Verifier.cpp:637 (code 1, args "") [0.8 s]
[task 2020-06-25T18:28:58.393Z] INFO exit-status : 1
[task 2020-06-25T18:28:58.394Z] INFO timed-out : False
[task 2020-06-25T18:28:58.395Z] INFO stderr 2> Assertion failure: ptr (Chunk not found in map), at /builds/worker/checkouts/gecko/js/src/gc/Verifier.cpp:637
[task 2020-06-25T18:28:58.396Z] INFO stderr 2> AddressSanitizer:DEADLYSIGNAL
[task 2020-06-25T18:28:58.396Z] INFO stderr 2> =================================================================
[task 2020-06-25T18:28:58.397Z] INFO stderr 2> ==10358==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000000 (pc 0x555556fc51c8 bp 0x7fffffdf9800 sp 0x7fffffdf5080 T0)
[task 2020-06-25T18:28:58.398Z] INFO stderr 2> ==10358==The signal is caused by a WRITE memory access.
[task 2020-06-25T18:28:58.399Z] INFO stderr 2> ==10358==Hint: address points to the zero page.
[task 2020-06-25T18:28:58.399Z] INFO stderr 2> #0 0x555556fc51c7 in rawCapacity /builds/worker/workspace/obj-spider/dist/include/mozilla/HashTable.h:2043:66
[task 2020-06-25T18:28:58.400Z] INFO stderr 2> #1 0x555556fc51c7 in capacity /builds/worker/workspace/obj-spider/dist/include/mozilla/HashTable.h:2045:47
[task 2020-06-25T18:28:58.401Z] INFO stderr 2> #2 0x555556fc51c7 in rehashIfOverloaded /builds/worker/workspace/obj-spider/dist/include/mozilla/HashTable.h:1865:23
[task 2020-06-25T18:28:58.402Z] INFO stderr 2> #3 0x555556fc51c7 in putNew<js::gc::ChainedIter<js::gc::Chunk , js::gc::ChunkPool::Iter, js::gc::ChunkPool::Iter> &, mozilla::UniquePtr<js::gc::ChunkBitmap, JS::DeletePolicy<js::gc::ChunkBitmap> > > /builds/worker/workspace/obj-spider/dist/include/mozilla/HashTable.h:2168:9
[task 2020-06-25T18:28:58.402Z] INFO stderr 2> #4 0x555556fc51c7 in putNew<js::gc::ChainedIter<js::gc::Chunk , js::gc::ChunkPool::Iter, js::gc::ChunkPool::Iter> &, mozilla::UniquePtr<js::gc::ChunkBitmap, JS::DeletePolicy<js::gc::ChunkBitmap> > > /builds/worker/workspace/obj-spider/dist/include/mozilla/HashTable.h:264:18
[task 2020-06-25T18:28:58.403Z] INFO stderr 2> #5 0x555556fc51c7 in js::gc::MarkingValidator::nonIncrementalMark(js::gc::AutoGCSession&) /builds/worker/checkouts/gecko/js/src/gc/Verifier.cpp:522:16
[task 2020-06-25T18:28:58.404Z] INFO stderr 2> #6 0x555556eedb9b in js::gc::GCRuntime::beginSweepPhase(JS::GCReason, js::gc::AutoGCSession&) /builds/worker/checkouts/gecko/js/src/gc/GC.cpp:5508:3
[task 2020-06-25T18:28:58.405Z] INFO stderr 2> #7 0x555556efadca in js::gc::GCRuntime::incrementalSlice(js::SliceBudget&, mozilla::Maybe<JSGCInvocationKind> const&, JS::GCReason, js::gc::AutoGCSession&) /builds/worker/checkouts/gecko/js/src/gc/GC.cpp:6707:7
[task 2020-06-25T18:28:58.405Z] INFO stderr 2> #8 0x555556efe7c8 in js::gc::GCRuntime::gcCycle(bool, js::SliceBudget, mozilla::Maybe<JSGCInvocationKind> const&, JS::GCReason) /builds/worker/checkouts/gecko/js/src/gc/GC.cpp:7124:3
[task 2020-06-25T18:28:58.406Z] INFO stderr 2> #9 0x555556f01fcd in js::gc::GCRuntime::collect(bool, js::SliceBudget, mozilla::Maybe<JSGCInvocationKind> const&, JS::GCReason) /builds/worker/checkouts/gecko/js/src/gc/GC.cpp:7359:9
[task 2020-06-25T18:28:58.407Z] INFO stderr 2> #10 0x555556f0ae53 in js::gc::GCRuntime::runDebugGC() /builds/worker/checkouts/gecko/js/src/gc/GC.cpp:7947:5
[task 2020-06-25T18:28:58.407Z] INFO stderr 2> #11 0x555556e6fb58 in gcIfNeededAtAllocation /builds/worker/checkouts/gecko/js/src/gc/Allocator.cpp:442:5
[task 2020-06-25T18:28:58.408Z] INFO stderr 2> #12 0x555556e6fb58 in checkAllocatorState<js::CanGC> /builds/worker/checkouts/gecko/js/src/gc/Allocator.cpp:404:10
[task 2020-06-25T18:28:58.409Z] INFO stderr 2> #13 0x555556e6fb58 in js::Shape js::Allocate<js::Shape, (js::AllowGC)1>(JSContext) /builds/worker/checkouts/gecko/js/src/gc/Allocator.cpp:329:28
[task 2020-06-25T18:28:58.410Z] INFO stderr 2> #14 0x5555564f9c68 in js::NativeObject::toDictionaryMode(JSContext*, JS::Handle<js::NativeObject*>) /builds/worker/checkouts/gecko/js/src/vm/Shape.cpp:505:47
[task 2020-06-25T18:28:58.410Z] INFO stderr 2> #15 0x555556508fb3 in js::NativeObject::maybeToDictionaryModeForPut(JSContext*, JS::Handle<js::NativeObject*>, JS::MutableHandle<js::Shape*>) /builds/worker/checkouts/gecko/js/src/vm/Shape.cpp:994:8
[task 2020-06-25T18:28:58.411Z] INFO stderr 2> #16 0x555556509f74 in js::NativeObject::putDataProperty(JSContext*, JS::Handle<js::NativeObject*>, JS::Handle<JS::PropertyKey>, unsigned int) /builds/worker/checkouts/gecko/js/src/vm/Shape.cpp:1062:8
[task 2020-06-25T18:28:58.411Z] INFO stderr 2> #17 0x55555639d381 in AddOrChangeProperty<IsAddOrChange::AddOrChange> /builds/worker/checkouts/gecko/js/src/vm/NativeObject.cpp:1459:15
[task 2020-06-25T18:28:58.411Z] INFO stderr 2> #18 0x55555639d381 in js::NativeDefineProperty(JSContext*, JS::Handle<js::NativeObject*>, JS::Handle<JS::PropertyKey>, JS::Handle<JS::PropertyDescriptor>, JS::ObjectOpResult&) /builds/worker/checkouts/gecko/js/src/vm/NativeObject.cpp:1903:8
[task 2020-06-25T18:28:58.411Z] INFO stderr 2> #19 0x5555562f8cd8 in DefineDataProperty /builds/worker/checkouts/gecko/js/src/vm/JSObject.cpp:2742:10
[task 2020-06-25T18:28:58.411Z] INFO stderr 2> #20 0x5555562f8cd8 in js::DefineDataProperty(JSContext*, JS::Handle<JSObject*>, JS::Handle<JS::PropertyKey>, JS::Handle<JS::Value>, unsigned int) /builds/worker/checkouts/gecko/js/src/vm/JSObject.cpp:2763:8
[task 2020-06-25T18:28:58.411Z] INFO stderr 2> #21 0x5555562ccb79 in js::DefineDataProperty(JSContext*, JS::Handle<JSObject*>, js::PropertyName*, JS::Handle<JS::Value>, unsigned int) /builds/worker/checkouts/gecko/js/src/vm/JSObject.cpp:2777:10
[task 2020-06-25T18:28:58.411Z] INFO stderr 2> #22 0x5555560aeecf in js::LinkConstructorAndPrototype(JSContext*, JSObject*, JSObject*, unsigned int, unsigned int) /builds/worker/checkouts/gecko/js/src/vm/GlobalObject.cpp:950:10
[task 2020-06-25T18:28:58.411Z] INFO stderr 2> #23 0x5555560ad2e1 in js::GlobalObject::resolveConstructor(JSContext*, JS::Handle<js::GlobalObject*>, JSProtoKey, js::GlobalObject::IfClassIsDisabled) /builds/worker/checkouts/gecko/js/src/vm/GlobalObject.cpp:374:17
[task 2020-06-25T18:28:58.411Z] INFO stderr 2> #24 0x555556450b08 in ensureConstructor /builds/worker/checkouts/gecko/js/src/vm/GlobalObject.h:180:12
[task 2020-06-25T18:28:58.411Z] INFO stderr 2> #25 0x555556450b08 in getOrCreateSavedFramePrototype /builds/worker/checkouts/gecko/js/src/vm/GlobalObject.h:423:10
[task 2020-06-25T18:28:58.411Z] INFO stderr 2> #26 0x555556450b08 in js::SavedFrame::create(JSContext*) /builds/worker/checkouts/gecko/js/src/vm/SavedStacks.cpp:557:22
[task 2020-06-25T18:28:58.411Z] INFO stderr 2> #27 0x555556468e28 in createFrameFromLookup /builds/worker/checkouts/gecko/js/src/vm/SavedStacks.cpp:1767:30
[task 2020-06-25T18:28:58.411Z] INFO stderr 2> #28 0x555556468e28 in js::SavedStacks::getOrCreateSavedFrame(JSContext*, JS::Handle<js::SavedFrame::Lookup>) /builds/worker/checkouts/gecko/js/src/vm/SavedStacks.cpp:1753:30
[task 2020-06-25T18:28:58.411Z] INFO stderr 2> #29 0x5555564605e0 in js::SavedStacks::insertFrames(JSContext*, JS::MutableHandle<js::SavedFrame*>, mozilla::Variant<JS::AllFrames, JS::MaxFrames, JS::FirstSubsumedFrame>&&) /builds/worker/checkouts/gecko/js/src/vm/SavedStacks.cpp:1590:15
[task 2020-06-25T18:28:58.412Z] INFO stderr 2> #30 0x55555645d51a in js::SavedStacks::saveCurrentStack(JSContext*, JS::MutableHandle<js::SavedFrame*>, mozilla::Variant<JS::AllFrames, JS::MaxFrames, JS::FirstSubsumedFrame>&&) /builds/worker/checkouts/gecko/js/src/vm/SavedStacks.cpp:1307:10
[task 2020-06-25T18:28:58.412Z] INFO stderr 2> #31 0x555555ea6610 in CaptureCurrentStack /builds/worker/checkouts/gecko/js/src/jsapi.cpp:5828:29
[task 2020-06-25T18:28:58.412Z] INFO stderr 2> #32 0x555555ea6610 in js::CaptureStack(JSContext*, JS::MutableHandle<JSObject*>) /builds/worker/checkouts/gecko/js/src/jsexn.cpp:219:10
[task 2020-06-25T18:28:58.412Z] INFO stderr 2> #33 0x555555ea7b6d in js::ErrorToException(JSContext*, JSErrorReport*, JSErrorFormatString const* ()(void, unsigned int), void*) /builds/worker/checkouts/gecko/js/src/jsexn.cpp:329:8
[task 2020-06-25T18:28:58.412Z] INFO stderr 2> #34 0x55555608a008 in ReportError /builds/worker/checkouts/gecko/js/src/vm/ErrorReporting.cpp:164:3
[task 2020-06-25T18:28:58.412Z] INFO stderr 2> #35 0x55555608a008 in js::ReportErrorNumberVA(JSContext*, js::IsWarning, JSErrorFormatString const* ()(void, unsigned int), void*, unsigned int, js::ErrorArgumentsType, __va_list_tag*) /builds/worker/checkouts/gecko/js/src/vm/ErrorReporting.cpp:477:3
[task 2020-06-25T18:28:58.412Z] INFO stderr 2> #36 0x555555e53477 in JS_ReportErrorNumberASCIIVA /builds/worker/checkouts/gecko/js/src/jsapi.cpp:4753:3
[task 2020-06-25T18:28:58.412Z] INFO stderr 2> #37 0x555555e53477 in JS_ReportErrorNumberASCII(JSContext*, JSErrorFormatString const* ()(void, unsigned int), void*, unsigned int, ...) /builds/worker/checkouts/gecko/js/src/jsapi.cpp:4743:3
[task 2020-06-25T18:28:58.412Z] INFO stderr 2> #38 0x555556261f5d in js::ReportOverRecursed(JSContext*, unsigned int) /builds/worker/checkouts/gecko/js/src/vm/JSContext.cpp:299:7
[task 2020-06-25T18:28:58.412Z] INFO stderr 2> #39 0x555555c6e320 in CheckRecursionLimit /builds/worker/checkouts/gecko/js/src/jsfriendapi.h:995:5
[task 2020-06-25T18:28:58.412Z] INFO stderr 2> #40 0x555555c6e320 in CheckRecursionLimit /builds/worker/checkouts/gecko/js/src/jsfriendapi.h:1021:10
[task 2020-06-25T18:28:58.412Z] INFO stderr 2> #41 0x555555c6e320 in js::RunScript(JSContext*, js::RunState&) /builds/worker/checkouts/gecko/js/src/vm/Interpreter.cpp:418:8
[task 2020-06-25T18:28:58.413Z] INFO stderr 2> #42 0x555555ca15f8 in js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason) /builds/worker/checkouts/gecko/js/src/vm/Interpreter.cpp:611:13
[task 2020-06-25T18:28:58.413Z] INFO stderr 2> #43 0x5555571749d9 in js::jit::DoCallFallback(JSContext*, js::jit::BaselineFrame*, js::jit::ICCall_Fallback*, unsigned int, JS::Value*, JS::MutableHandle<JS::Value>) /builds/worker/checkouts/gecko/js/src/jit/BaselineIC.cpp:2992:10
[task 2020-06-25T18:28:58.413Z] INFO stderr 2> #44 0x14a322eedbc7 (<unknown module>)
[task 2020-06-25T18:28:58.413Z] INFO stderr 2>
[task 2020-06-25T18:28:58.413Z] INFO stderr 2> AddressSanitizer can not provide additional info.
[task 2020-06-25T18:28:58.413Z] INFO stderr 2> SUMMARY: AddressSanitizer: SEGV /builds/worker/workspace/obj-spider/dist/include/mozilla/HashTable.h:2043:66 in rawCapacity
[task 2020-06-25T18:28:58.413Z] INFO stderr 2> ==10358==ABORTING
[task 2020-06-25T18:28:58.413Z] TEST-PASS | js/src/jit-test/tests/gc/bug-1468792.js | Success (code 3, args "--blinterp-eager") [0.1 s]

Jon, is this related to changes in bug 1638764?

Flags: needinfo?(jcoppeard)

Yes, the assertion added in that bug is now failing which confirms what I thought was happening. I still don't know why though.

Status: NEW → RESOLVED
Closed: 4 years ago
Flags: needinfo?(jcoppeard)
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.