1929893 - Crash in [@ OOM | unknown | js::AutoEnterOOMUnsafeRegion::crash_impl | js::CurrentThreadCanAccessRuntime]

Status: RESOLVED WORKSFORME

(Core :: JavaScript: GC, defect, P3)

Description

[Sean Feng [:sefeng211]]

Crash report: https://crash-stats.mozilla.org/report/index/0a5aa3ec-ef9b-4d79-bf80-10de10241106

MOZ_CRASH Reason:

[unhandlable oom] Failed to allocate new chunk during GC

Top 10 frames:

0  xul.dll  MOZ_Crash(char const*, int, char const*)  mfbt/Assertions.h:324
0  xul.dll  js::AutoEnterOOMUnsafeRegion::crash_impl(char const*)  js/src/vm/JSContext.cpp:1348
1  xul.dll  js::CurrentThreadCanAccessRuntime(JSRuntime const*)  js/src/vm/Runtime.cpp:784
1  xul.dll  js::gc::PerformIncrementalPreWriteBarrier(js::gc::TenuredCell*)  js/src/gc/Marking.cpp:952
1  xul.dll  js::gc::PreWriteBarrierImpl(js::gc::TenuredCell*)  js/src/gc/Cell.h:519
1  xul.dll  js::gc::PreWriteBarrierImpl(js::gc::Cell*)  js/src/gc/Cell.h:528
1  xul.dll  js::gc::ValuePreWriteBarrier(JS::Value const&)  js/src/gc/Barrier.h:314
1  xul.dll  js::InternalBarrierMethods<js::HashableValue, void>::preBarrier(js::HashableV...  js/src/builtin/MapObject.h:77
1  xul.dll  js::WriteBarriered<js::HashableValue>::pre()  js/src/gc/Barrier.h:519
1  xul.dll  js::PreBarriered<js::HashableValue>::~PreBarriered()  js/src/gc/Barrier.h:556

Comment 1

[Sean Feng [:sefeng211]]

Looks like an OOM crash with recent spikes?

Comment 2

[Jon Coppeard (:jonco)]

This stack doesn't make sense. CurrentThreadCanAccessRuntime does not do anything to allocate chunks. It should not be possible to get that crash from the lower part of this stack.

Comment 3

[Matthew Gaudet (he/him) [:mgaudet]]

Reported the impossible stacks in Bug 1930705

Comment 4

[BugBot [:suhaib / :marco/ :calixte]]

Closing because no crashes reported for 12 weeks.