Closed Bug 387187 Opened 17 years ago Closed 17 years ago

Assertion failure: !chain->dormantNext during cycle collection (?)

Categories

(Core :: XPCOM, defect)

x86
Linux
defect
Not set
critical

Tracking

()

RESOLVED DUPLICATE of bug 387725

People

(Reporter: skrulx, Unassigned)

References

Details

(Keywords: regression)

Attachments

(1 file)

User-Agent:       Mozilla/5.0 (X11; U; Linux i686 (x86_64); en-US; rv:1.8.1) Gecko/20061010 Firefox/2.0
Build Identifier: 

This is using trunk build of xulrunner from 2007-07-06 on linux x86_64.  I get this crash when I run the entire Songbird test suite (which is just a series of js files that are run via a command line handler).  However, it does not happen when I run each test individually.  Right before the crash I see:

WARNING: NS_ENSURE_TRUE(mCacheEntry) failed: file /builds/xulrunner/xr_trunk_jefferson/mozilla/netwerk/protocol/http/src/nsHttpChannel.cpp, line 1918
Assertion failure: !chain->dormantNext, at /builds/xulrunner/xr_trunk_jefferson/mozilla/js/src/jsgc.c:2436

Here is a partial stack, I'll attach a full stack.

#0  0x00002aaaaec5c11d in raise () from /lib/libc.so.6
#1  0x00002aaaaec5d84e in abort () from /lib/libc.so.6
#2  0x00002aaaaadcc911 in JS_Assert (s=0x2aaaaadf3bbf "!chain->dormantNext",
    file=0x2aaaaadf2ef8 "/builds/xulrunner/xr_trunk_jefferson/mozilla/js/src/jsgc.c", ln=2436)
    at /builds/xulrunner/xr_trunk_jefferson/mozilla/js/src/jsutil.c:63
#3  0x00002aaaaad45543 in js_TraceContext (trc=0x7fffffbf5160, acx=0x128bd70) at /builds/xulrunner/xr_trunk_jefferson/mozilla/js/src/jsgc.c:2436
#4  0x00002aaaaad45b35 in js_TraceRuntime (trc=0x7fffffbf5160, allAtoms=0) at /builds/xulrunner/xr_trunk_jefferson/mozilla/js/src/jsgc.c:2520
#5  0x00002aaaaad46227 in js_GC (cx=0x2aaab6402bb0, gckind=GC_NORMAL) at /builds/xulrunner/xr_trunk_jefferson/mozilla/js/src/jsgc.c:2746
#6  0x00002aaaaad0ffaf in js_DestroyContext (cx=0x2aaab6402bb0, mode=JSDCM_FORCE_GC)
    at /builds/xulrunner/xr_trunk_jefferson/mozilla/js/src/jscntxt.c:432
#7  0x00002aaaaacfb80e in JS_DestroyContext (cx=0x2aaab6402bb0) at /builds/xulrunner/xr_trunk_jefferson/mozilla/js/src/jsapi.c:984
#8  0x00002aaaab4918de in nsXPConnect::ReleaseJSContext (this=0x62d3b0, aJSContext=0x2aaab6402bb0, noGC=0)
    at /builds/xulrunner/xr_trunk_jefferson/mozilla/js/src/xpconnect/src/nsXPConnect.cpp:1823
#9  0x00002aaaabbc8036 in ~nsJSContext (this=0x2aaab64ec3b0) at /builds/xulrunner/xr_trunk_jefferson/mozilla/dom/src/base/nsJSEnvironment.cpp:1010
#10 0x00002aaaabbc1144 in nsJSContext::Release (this=0x2aaab64ec3b0)
    at /builds/xulrunner/xr_trunk_jefferson/mozilla/dom/src/base/nsJSEnvironment.cpp:1077
#11 0x00002aaaac39b168 in nsXPCOMCycleCollectionParticipant::Unroot (this=0x2aaaacdfe118, p=0x2aaab64ec3b0)
    at /builds/xulrunner/xr_trunk_jefferson/mozilla/xpcom/base/nsCycleCollectionParticipant.cpp:59
#12 0x00002aaaac399623 in nsCycleCollector::CollectWhite (this=0x2aaab0d13010, graph=@0x7fffffbf5470)
    at /builds/xulrunner/xr_trunk_jefferson/mozilla/xpcom/base/nsCycleCollector.cpp:1466
#13 0x00002aaaac399e17 in nsCycleCollector::Collect (this=0x2aaab0d13010, aTryCollections=1)
    at /builds/xulrunner/xr_trunk_jefferson/mozilla/xpcom/base/nsCycleCollector.cpp:2127
#14 0x00002aaaac399ec3 in nsCycleCollector_collect () at /builds/xulrunner/xr_trunk_jefferson/mozilla/xpcom/base/nsCycleCollector.cpp:2545
#15 0x00002aaaabbc29c1 in nsJSContext::Notify (this=0x3556e50, timer=0x25bac70)
    at /builds/xulrunner/xr_trunk_jefferson/mozilla/dom/src/base/nsJSEnvironment.cpp:3207


Reproducible: Always
Attached file bt full
I have also seen this a few times today, it seems like a very recent
regression (last couple of days?)
Severity: normal → critical
Status: UNCONFIRMED → NEW
Ever confirmed: true
Keywords: regression
This was fixed in bug 387725, right?
Yeah, it should be. Duping forwards.
Status: NEW → RESOLVED
Closed: 17 years ago
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: