21914 - SIGFPE in jsapi and jsnum on FreeBSD

Status: VERIFIED DUPLICATE of bug 9967

(Core :: JavaScript Engine, defect, P3)

Description

[Pascal Hofstee]

Platform: FreeBSD-4.0-CURRENT
Compiler: gcc-2.95.2 (native)

When starting ./mozilla -g (with .gdbinit configured according to Mozilla
Debugging FAQ) mozilla generates 8 to 9 SIGFPE's all in the exact same
functions.


Culprit:
jsnum.c:490    if (JSDOUBLE_IS_INT(d, i) && INT_FITS_IN_JSVAL(i)) {

where-output:
#0  0x280f0fec in js_NewNumberValue (cx=0x80d7600, d=1.7976931348623157e+308,
    rval=0xbfbff4c8) at ../../../js/src/jsnum.c:490
#1  0x280b9154 in JS_DefineConstDoubles (cx=0x80d7600, obj=0x8137718,
    cds=0x28131fec) at ../../../js/src/jsapi.c:1566
#2  0x280f0e3f in js_InitNumberClass (cx=0x80d7600, obj=0x81372c8)
    at ../../../js/src/jsnum.c:437
#3  0x280b7ce7 in JS_InitStandardClasses (cx=0x80d7600, obj=0x81372c8)
    at ../../../js/src/jsapi.c:977
#4  0x288f389c in ?? () from /usr/local/src/bin/components/libpref.so
#5  0x288f8749 in ?? () from /usr/local/src/bin/components/libpref.so
#6  0x288f850d in ?? () from /usr/local/src/bin/components/libpref.so
#7  0x288fab25 in ?? () from /usr/local/src/bin/components/libpref.so
#8  0x281b1024 in ?? () from /usr/local/src/bin/libxpcom.so
#9  0x281ae4c9 in ?? () from /usr/local/src/bin/libxpcom.so
#10 0x281b7017 in ?? () from /usr/local/src/bin/libxpcom.so
#11 0x281b808a in ?? () from /usr/local/src/bin/libxpcom.so
#12 0x281b8847 in ?? () from /usr/local/src/bin/libxpcom.so
#13 0x281b768f in ?? () from /usr/local/src/bin/libxpcom.so
#14 0x8053363 in nsCOMPtr<nsIPref>::assign_from_helper (this=0xbfbff830,
    helper=@0xbfbff820, aIID=@0x80590c4) at ../../dist/include/nsCOMPtr.h:768
#15 0x8053e33 in nsCOMPtr<nsIPref>::nsCOMPtr (this=0xbfbff830,
    helper=@0xbfbff820) at ../../dist/include/nsCOMPtr.h:496
#16 0x286646c4 in ?? () from /usr/local/src/bin/libwidget_gtk.so
#17 0x2866497f in ?? () from /usr/local/src/bin/libwidget_gtk.so
#18 0x285343bf in ?? () from /usr/local/src/bin/libnsappshell.so
#19 0x804bd4b in main1 (argc=1, argv=0xbfbffaa4)
    at ../../../xpfe/bootstrap/nsAppRunner.cpp:540
#20 0x804c739 in main (argc=1, argv=0xbfbffaa4)
    at ../../../xpfe/bootstrap/nsAppRunner.cpp:677
#21 0x804a9e9 in _start ()

Comment 1

[Pascal Hofstee]

Before the SIGFPE occurs there always seems to be the following sequence in
calling js_NewNumberValue (the function which triggers the SIGFPE)

Breakpoint 2, js_NewNumberValue (cx=0x832d400, d=NaN(0xfffffffffffff),
    rval=0xbfbfec1c) at ../../../js/src/jsnum.c:490
490         if (JSDOUBLE_IS_INT(d, i) && INT_FITS_IN_JSVAL(i)) {
(gdb)
Continuing.
Breakpoint 2, js_NewNumberValue (cx=0x832d400, d=Inf, rval=0xbfbfec1c)
    at ../../../js/src/jsnum.c:490
490         if (JSDOUBLE_IS_INT(d, i) && INT_FITS_IN_JSVAL(i)) {
(gdb)
Continuing.

Breakpoint 2, js_NewNumberValue (cx=0x832d400, d=-Inf, rval=0xbfbfec1c)
    at ../../../js/src/jsnum.c:490
490         if (JSDOUBLE_IS_INT(d, i) && INT_FITS_IN_JSVAL(i)) {
(gdb)
Continuing.

Breakpoint 2, js_NewNumberValue (cx=0x832d400, d=1.7976931348623157e+308,
    rval=0xbfbfec1c) at ../../../js/src/jsnum.c:490
490         if (JSDOUBLE_IS_INT(d, i) && INT_FITS_IN_JSVAL(i)) {
(gdb)
Continuing.

Program received signal SIGFPE, Arithmetic exception.



Notice the "NaN, Inf, -Inf, bogus-number" sequence

Comment 2

[Pascal Hofstee]

*** This bug has been marked as a duplicate of 9967 ***

Comment 3

[edwin]

Verified as a duplicate per
http://www.mozilla.org/quality/duplicate-resolved-bugs.html