random crash [@ js_SearchScope] during talos pageload test

RESOLVED WORKSFORME

Status

()

defect
RESOLVED WORKSFORME
10 years ago
7 years ago

People

(Reporter: dbaron, Unassigned)

Tracking

({intermittent-failure})

Trunk
x86
macOS
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

(Whiteboard: [needs js hacker to evaluate stack for usefulness])

The mozilla-central Firefox tinderbox just had a random talos crash in js_SearchScope.  This was a build of "MacOSX Darwin 8.8.1 talos mozilla-central qm-pmac-trunk01" at 2009/03/31 12:45:59.

Log is at http://tinderbox.mozilla.org/showlog.cgi?log=Firefox/1238528759.1238534001.706.gz&fulltext=1

The last test output before the crash was:

NOISE: Cycle 4: loaded http://localhost/page_load_test/pages/www.payserve.com/www.payserve.com/index.html (next: http://localhost/page_load_test/pages/www.macromedia.com/www.adobe.com/index.html)


The crash stack is:

Operating system: Mac OS X
                  10.4.8 8L2127
CPU: x86
     GenuineIntel family 6 model 15 stepping 2
     2 CPUs

Crash reason:  EXC_BAD_ACCESS / KERN_INVALID_ADDRESS
Crash address: 0x280410


Thread 0 (crashed)
 0  libmozjs.dylib!js_SearchScope [jsscope.cpp:e2d57aab6d20 : 318 + 0xa]
    eip = 0x00280410   esp = 0xbfffc514   ebp = 0xbfffc538   ebx = 0x0025022d
    esi = 0x00000004   edi = 0x0000f810   eax = 0x0063a1a4   ecx = 0xf3c5280e
    edx = 0xf3c5280f   efl = 0x00210282
 1  libmozjs.dylib!js_LookupPropertyWithFlags [jsobj.cpp:e2d57aab6d20 : 3851 + 0x16]
    eip = 0x00250331   esp = 0xbfffc540   ebp = 0xbfffc5b8
 2  libmozjs.dylib!js_GetPropertyHelper [jsobj.cpp:e2d57aab6d20 : 4223 + 0x2a]
    eip = 0x00252fff   esp = 0xbfffc5c0   ebp = 0xbfffc618
 3  libmozjs.dylib!with_DefaultValue [jsobj.cpp:e2d57aab6d20 : 4309 + 0x27]
    eip = 0x00253674   esp = 0xbfffc620   ebp = 0xbfffc648
 4  libmozjs.dylib!js_GetClassPrototype [jsobj.cpp:e2d57aab6d20 : 5256 + 0x1f]
    eip = 0x00250c52   esp = 0xbfffc650   ebp = 0xbfffc688
 5  libmozjs.dylib!js_NewObject [jsobj.cpp:e2d57aab6d20 : 3036 + 0x1f]
    eip = 0x00250f0a   esp = 0xbfffc690   ebp = 0xbfffc6d8
 6  libmozjs.dylib!js_Interpret [jsinterp.cpp:e2d57aab6d20 : 6137 + 0x39]
    eip = 0x0023ab32   esp = 0xbfffc6e0   ebp = 0xbfffca28
 7  libmozjs.dylib!js_Invoke [jsinterp.cpp:e2d57aab6d20 : 1376 + 0xa]
    eip = 0x0024538d   esp = 0xbfffca30   ebp = 0xbfffcb18
 8  XUL!nsXPCWrappedJSClass::CallMethod(nsXPCWrappedJS*, unsigned short, XPTMethodDescriptor const*, nsXPTCMiniVariant*) [xpcwrappedjsclass.cpp:e2d57aab6d20 : 1608 + 0x2a]
    eip = 0x0104c121   esp = 0xbfffcb20   ebp = 0xbfffcd78
 9  XUL!nsXPCWrappedJS::CallMethod(unsigned short, XPTMethodDescriptor const*, nsXPTCMiniVariant*) [xpcwrappedjs.cpp:e2d57aab6d20 : 561 + 0x20]
    eip = 0x01046363   esp = 0xbfffcd80   ebp = 0xbfffcda8
10  XUL!PrepareAndDispatch [xptcstubs_unixish_x86.cpp:e2d57aab6d20 : 93 + 0x25]
    eip = 0x01a3c05a   esp = 0xbfffcdb0   ebp = 0xbfffce88
11  XUL!nsXPTCStubBase::Stub15() [xptcstubsdef.inc : 13 + 0x20]
    eip = 0x01a3c596   esp = 0xbfffce90   ebp = 0xbfffceb8
12  XUL!NS_InvokeByIndex_P [xptcinvoke_unixish_x86.cpp:e2d57aab6d20 : 179 + 0x3c]
    eip = 0x01a3bfb8   esp = 0xbfffcec0   ebp = 0xbfffcef8
13  XUL!XPCWrappedNative::CallMethod(XPCCallContext&, XPCWrappedNative::CallMode) [xpcwrappednative.cpp:e2d57aab6d20 : 2480 + 0x2c]
    eip = 0x010509a9   esp = 0xbfffcf00   ebp = 0xbfffd1e8
14  XUL!XPC_WN_CallMethod(JSContext*, JSObject*, unsigned int, long*, long*) [xpcwrappednativejsops.cpp:e2d57aab6d20 : 1585 + 0x15]
    eip = 0x01054baa   esp = 0xbfffd1f0   ebp = 0xbfffd2d8
15  libmozjs.dylib!js_Invoke [jsinterp.cpp:e2d57aab6d20 : 1368 + 0x27]
    eip = 0x00245380   esp = 0xbfffd2e0   ebp = 0xbfffd3c8
16  libmozjs.dylib!js_Interpret [jsinterp.cpp:e2d57aab6d20 : 5061 + 0x20]
    eip = 0x002364ae   esp = 0xbfffd3d0   ebp = 0xbfffd718
17  libmozjs.dylib!js_Invoke [jsinterp.cpp:e2d57aab6d20 : 1376 + 0xa]
    eip = 0x0024538d   esp = 0xbfffd720   ebp = 0xbfffd808
18  XUL!nsXPCWrappedJSClass::CallMethod(nsXPCWrappedJS*, unsigned short, XPTMethodDescriptor const*, nsXPTCMiniVariant*) [xpcwrappedjsclass.cpp:e2d57aab6d20 : 1608 + 0x2a]
    eip = 0x0104c121   esp = 0xbfffd810   ebp = 0xbfffda68
19  XUL!nsXPCWrappedJS::CallMethod(unsigned short, XPTMethodDescriptor const*, nsXPTCMiniVariant*) [xpcwrappedjs.cpp:e2d57aab6d20 : 561 + 0x20]
    eip = 0x01046363   esp = 0xbfffda70   ebp = 0xbfffda98
20  XUL!PrepareAndDispatch [xptcstubs_unixish_x86.cpp:e2d57aab6d20 : 93 + 0x25]
    eip = 0x01a3c05a   esp = 0xbfffdaa0   ebp = 0xbfffdb78
21  XUL!PrepareAndDispatch + 0x44
    eip = 0x01a3c1d6   esp = 0xbfffdb80   ebp = 0xbfffdba8
22  XUL!nsEventListenerManager::HandleEventSubType(nsListenerStruct*, nsIDOMEventListener*, nsIDOMEvent*, nsPIDOMEventTarget*, unsigned int) [nsEventListenerManager.cpp:e2d57aab6d20 : 1090 + 0x14]
    eip = 0x01410e1b   esp = 0xbfffdbb0   ebp = 0xbfffdcc8
23  XUL!nsEventListenerManager::HandleEvent(nsPresContext*, nsEvent*, nsIDOMEvent**, nsPIDOMEventTarget*, unsigned int, nsEventStatus*) [nsEventListenerManager.cpp:e2d57aab6d20 : 1187 + 0x2b]
    eip = 0x014113c5   esp = 0xbfffdcd0   ebp = 0xbfffdd58
24  XUL!nsEventTargetChainItem::HandleEvent(nsEventChainPostVisitor&, unsigned int, int) [nsEventDispatcher.cpp:e2d57aab6d20 : 227 + 0x2d]
    eip = 0x01430b2c   esp = 0xbfffdd60   ebp = 0xbfffdd98
25  XUL!nsEventTargetChainItem::HandleEventTargetChain(nsEventChainPostVisitor&, unsigned int, nsDispatchingCallback*, int) [nsEventDispatcher.cpp:e2d57aab6d20 : 291 + 0x29]
    eip = 0x01430ce1   esp = 0xbfffdda0   ebp = 0xbfffddf8
26  XUL!nsEventDispatcher::Dispatch(nsISupports*, nsPresContext*, nsEvent*, nsIDOMEvent*, nsEventStatus*, nsDispatchingCallback*) [nsEventDispatcher.cpp:e2d57aab6d20 : 508 + 0x12]
    eip = 0x01431a97   esp = 0xbfffde00   ebp = 0xbfffdeb8
27  XUL!nsEventDispatcher::DispatchDOMEvent(nsISupports*, nsEvent*, nsIDOMEvent*, nsPresContext*, nsEventStatus*) [nsEventDispatcher.cpp:e2d57aab6d20 : 570 + 0x2b]
    eip = 0x01431ddf   esp = 0xbfffdec0   ebp = 0xbfffdf18
28  XUL!nsDocument::DispatchEvent(nsIDOMEvent*, int*) [nsDocument.cpp:e2d57aab6d20 : 6145 + 0x17]
    eip = 0x013a5b7a   esp = 0xbfffdf20   ebp = 0xbfffdf58
29  XUL!nsContentUtils::DispatchTrustedEvent(nsIDocument*, nsISupports*, nsAString_internal const&, int, int, int*) [nsContentUtils.cpp:e2d57aab6d20 : 3147 + 0x1c]
    eip = 0x01394fea   esp = 0xbfffdf60   ebp = 0xbfffdf98
30  XUL!nsDocument::DispatchContentLoadedEvents() [nsDocument.cpp:e2d57aab6d20 : 3863 + 0x2a]
    eip = 0x013b2772   esp = 0xbfffdfa0   ebp = 0xbfffe048
31  XUL!nsRunnableMethod<nsDocument, void>::Run() [nsThreadUtils.h : 264 + 0x19]
    eip = 0x013b837b   esp = 0xbfffe050   ebp = 0xbfffe068
32  XUL!nsThread::ProcessNextEvent(int, int*) [nsThread.cpp:e2d57aab6d20 : 510 + 0x7]
    eip = 0x01a2dbca   esp = 0xbfffe070   ebp = 0xbfffe0b8
33  XUL!NS_ProcessPendingEvents_P(nsIThread*, unsigned int) [nsThreadUtils.cpp : 180 + 0x16]
    eip = 0x019ef647   esp = 0xbfffe0c0   ebp = 0xbfffe0f8
34  XUL!nsBaseAppShell::NativeEventCallback() [nsBaseAppShell.cpp:e2d57aab6d20 : 121 + 0x1a]
    eip = 0x01998a22   esp = 0xbfffe100   ebp = 0xbfffe128
35  XUL!nsAppShell::ProcessGeckoEvents(void*) [nsAppShell.mm:e2d57aab6d20 : 412 + 0x7]
    eip = 0x01963c2a   esp = 0xbfffe130   ebp = 0xbfffe208
36  CoreFoundation + 0x21fd1
    eip = 0x90828fd2   esp = 0xbfffe210   ebp = 0xbfffe758
37  CoreFoundation + 0x21b0d
    eip = 0x90828b0e   esp = 0xbfffe760   ebp = 0xbfffe798
38  HIToolbox + 0x9bee
    eip = 0x92dc7bef   esp = 0xbfffe7a0   ebp = 0xbfffe7d8
39  HIToolbox + 0x92fc
    eip = 0x92dc72fd   esp = 0xbfffe7e0   ebp = 0xbfffe848
40  HIToolbox + 0x9153
    eip = 0x92dc7154   esp = 0xbfffe850   ebp = 0xbfffe868
41  AppKit + 0x17464
    eip = 0x9326c465   esp = 0xbfffe870   ebp = 0xbfffeb88
42  AppKit + 0x17055
    eip = 0x9326c056   esp = 0xbfffeb90   ebp = 0xbfffede8
43  AppKit + 0x10dda
    eip = 0x93265ddb   esp = 0xbfffedf0   ebp = 0xbfffeea8
44  XUL!nsAppShell::Run() [nsAppShell.mm:e2d57aab6d20 : 723 + 0x7f]
    eip = 0x0196338a   esp = 0xbfffeeb0   ebp = 0xbfffef38
45  XUL!nsAppStartup::Run() [nsAppStartup.cpp:e2d57aab6d20 : 192 + 0x7]
    eip = 0x018000d7   esp = 0xbfffef40   ebp = 0xbfffef58
46  XUL!XRE_main [nsAppRunner.cpp:e2d57aab6d20 : 3232 + 0x7]
    eip = 0x01010e06   esp = 0xbfffef60   ebp = 0xbffff478
47  firefox-bin!main [nsBrowserApp.cpp:e2d57aab6d20 : 156 + 0x18]
    eip = 0x00002cb8   esp = 0xbffff480   ebp = 0xbffff4d8
48  firefox-bin + 0x1541
    eip = 0x00002542   esp = 0xbffff4e0   ebp = 0xbffff518
49  firefox-bin + 0x1468
    eip = 0x00002469   esp = 0xbffff520   ebp = 0xbffff53c
50  0xb
    eip = 0x0000000c   esp = 0xbffff544   ebp = 0x00000000
Whiteboard: [orange]

Updated

10 years ago
Blocks: 438871

Comment 1

10 years ago
I'm guessing this hasn't shown up on Tinderbox since it was reported.  Please mark as WFM if the stack isn't useful enough to lead to a fix.
Whiteboard: [orange] → [needs js hacker to evaluate stack for usefulness]

Updated

9 years ago
Whiteboard: [needs js hacker to evaluate stack for usefulness] → [orange][needs js hacker to evaluate stack for usefulness]
The offending function has been removed.
Status: NEW → RESOLVED
Last Resolved: 7 years ago
Resolution: --- → WORKSFORME
Whiteboard: [orange][needs js hacker to evaluate stack for usefulness] → [needs js hacker to evaluate stack for usefulness]
You need to log in before you can comment on or make changes to this bug.