452753 - TM: Crash when loading a document in Google Docs [@ nanojit::ExprFilter::ins2]

Status: RESOLVED WORKSFORME

(Core :: JavaScript Engine, defect)

Description

[Sławomir Chyłek]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1a2pre) Gecko/20080823152556 Minefield/3.1a2pre
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1a2pre) Gecko/20080823152556 Minefield/3.1a2pre

With Tracemonkey turned on (javascript.options.jit.content - true) FF crashes just after logging into http://docs.google.com/. No crash report is generated. With javascript.options.jit.content set false there is no problem.


Reproducible: Always

Steps to Reproduce:
1. Set javascript.options.jit.content true.
2. Go to http://docs.google.com/ and log in.
3.

Comment 1

[Sławomir Chyłek]

Attachment: Stack trace from gdb.

Comment 2

[Sławomir Chyłek]

Attachment: Build config

Comment 3

[Aaron Kaluszka]

Confirmed on Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.1a2pre) Gecko/20080828071729 Minefield/3.1a2pre

Comment 4

[George]

Confirmed on Mozilla/5.0 (Windows; U; Windows NT 5.1; ru; rv:1.9.1b1pre) Gecko/20080901033305 Minefield/3.1b1pre - Build ID: 20080901033305

Comment 5

[Robert Sayre]

WFM

Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.1b1pre) Gecko/20080907020345 Minefield/3.1b1pre

Comment 6

[Aaron Kaluszka]

Still crashes for me on Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.1b1pre) Gecko/20080909032504 Minefield/3.1b1pre

Robert: did you actually load a Google Doc or just go to the main URL?  You have to actually load a document before it will crash.

Comment 7

[Robert Sayre]

Huh, tha(In reply to comment #6)
> Still crashes for me on Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US;
> rv:1.9.1b1pre) Gecko/20080909032504 Minefield/3.1b1pre
> 
> Robert: did you actually load a Google Doc or just go to the main URL?  You
> have to actually load a document before it will crash.

Well, that is not the STR, but I just tried and it didn't crash. Leaving open since others still see crashing.

Comment 8

[Brendan Eich [:brendan]]

Aaron: can you get a crash report through, or run a build with symbols under a debugger? If you crash with a different signature than the one in the summary, then this bug should stay closed and a new one filed with the new [@ ...] sig. Thanks,

/be

Comment 9

[Andreas Gal :gal]

WFM with current tracemonkey build. Please re-open if you still see this.

Comment 10

[gyuyoung kim]

As firefox turned on tracemonkey, with tracemonkey turned on fennec also crash after logging into google docs. (javascript.options.jit.content - true)

Comment 11

[gyuyoung kim]

Brendan:

I tested this bug again with TM-enabled FF, I confirm that FF does not crash any more on logging into google doc on desktop PC. However, Fennec still comes to crash after logging into google docs.

Thanks.

Steps to Reproduce:
  1. hg clone http://hg.mozilla.org/tracemonkey 
  2. Make -f client.mk build on diablo scratchbox
  3. Make fennec package
  4. Run fennec on N810
  5. Enable "javascript.options.jit.content" to true on about:config
  6. Go to http://docs.google.com and log in

Test Date: 27-Sep.-2008

Comment 12

[Brendan Eich [:brendan]]

Can you verify that the Fennec build is using the same js/src/*.cpp files and so on? Hate to chase an old bug down. Sorry if this is not the right idea, I have no idea how Fennec is built.

Any details on the Fennec crash would be helpful. Is it crashing in the same place? Probably a new bug should be filed.

/be

Comment 13

[:Gavin Sharp [email: [e-mail]]]

(In reply to comment #12)
> Can you verify that the Fennec build is using the same js/src/*.cpp files and
> so on? Sorry if this is not the right idea, I have no idea how Fennec is built.

It's just a normal xulrunner app, and we pull directly from mozilla-central (we don't have any forked files).

Comment 14

[Andreas Gal :gal]

Is this Fennec on an ARM processor?