493211 - repeated mochitest crashes [@ js_CallTracer ]

Status: RESOLVED WORKSFORME

(Core :: JavaScript Engine, defect)

Description

[(not currently active) Ted Mielczarek]

Mochitest is crashing pretty frequently on 1.9.1. The last test printed in the log is:
*** 29357 INFO Running /tests/dom/src/threads/test/test_regExpStatics.html...

Stack:

Crash reason:  EXCEPTION_ACCESS_VIOLATION
Crash address: 0xff0

Thread 0 (crashed)
 0  js3250.dll!JS_CallTracer [jsgc.cpp:03488659774a : 2712 + 0xb]
    eip = 0x0032f0a4   esp = 0x0012b7e0   ebp = 0x0012b7fc   ebx = 0x00302640
    esi = 0x020f2908   edi = 0x00000000   eax = 0xfffffffe   ecx = 0x00000fff
    edx = 0x063cf9f4   efl = 0x00010206
 1  xul.dll!XPCJSRuntime::TraceXPConnectRoots(JSTracer *,int) [xpcjsruntime.cpp:03488659774a : 363 + 0x11]
    eip = 0x100224ee   esp = 0x0012b804   ebp = 0x00002000
 2  xul.dll!XPCCycleCollectGCCallback [nsXPConnect.cpp:03488659774a : 396 + 0x17]
    eip = 0x100136c4   esp = 0x0012b828   ebp = 0x0012b8cc   ebx = 0x020f2908
 3  js3250.dll!js_GC [jsgc.cpp:03488659774a : 3540 + 0xa]
    eip = 0x00330141   esp = 0x0012b838   ebp = 0x0012b8cc
 4  js3250.dll!JS_GC [jsapi.cpp:03488659774a : 2464 + 0x7]
    eip = 0x00303ace   esp = 0x0012b8d4   ebp = 0x0012b928
 5  xul.dll!nsXPConnect::Collect() [nsXPConnect.cpp:03488659774a : 477 + 0xd]
    eip = 0x10013797   esp = 0x0012b8ec   ebp = 0x0012b928
 6  xul.dll!nsCycleCollector::Collect(unsigned int) [nsCycleCollector.cpp:03488659774a : 2256 + 0x4]
    eip = 0x105e42d3   esp = 0x0012b9a8   ebp = 0x0012ba34   ebx = 0x031fccc0
 7  xul.dll!nsCycleCollector_collect() [nsCycleCollector.cpp:03488659774a : 2904 + 0x10]
    eip = 0x105e437a   esp = 0x0012f854   ebp = 0x0012f89c   ebx = 0x031fccc0
 8  xul.dll!nsJSContext::CC() [nsJSEnvironment.cpp:03488659774a : 3431 + 0x4]
    eip = 0x1024cbe0   esp = 0x0012f85c   ebp = 0x0012f89c
 9  xul.dll!DocumentViewerImpl::LoadComplete(unsigned int) [nsDocumentViewer.cpp:03488659774a : 1047 + 0x4]
    eip = 0x1015a0b9   esp = 0x0012f860   ebp = 0x0012f89c
10  xul.dll!nsDocShell::EndPageLoad(nsIWebProgress *,nsIChannel *,unsigned int) [nsDocShell.cpp:03488659774a : 5274 + 0x11]
    eip = 0x10456059   esp = 0x0012f8a4   ebp = 0x0012f8c0
11  xul.dll!nsWebShell::EndPageLoad(nsIWebProgress *,nsIChannel *,unsigned int) [nsWebShell.cpp:03488659774a : 1013 + 0x10]
    eip = 0x10439fe7   esp = 0x0012f8c8   ebp = 0x0012fa48   ebx = 0x00000000
12  xul.dll!nsDocShell::OnStateChange(nsIWebProgress *,nsIRequest *,unsigned int,unsigned int) [nsDocShell.cpp:03488659774a : 5170 + 0x10]
    eip = 0x10455ec7   esp = 0x0012fabc   ebp = 0x0012fae0
13  xul.dll!nsDocLoader::FireOnStateChange(nsIWebProgress *,nsIRequest *,int,unsigned int) [nsDocLoader.cpp:03488659774a : 1259 + 0x11]
    eip = 0x1043de5f   esp = 0x0012fae8   ebp = 0x0012fb1c
14  xul.dll!nsDocLoader::doStopDocumentLoad(nsIRequest *,unsigned int) [nsDocLoader.cpp:03488659774a : 880 + 0x1f]
    eip = 0x1043e509   esp = 0x0012fb24   ebp = 0x0012fb6c   ebx = 0x00000000
15  xul.dll!nsDocLoader::DocLoaderIsEmpty(int) [nsDocLoader.cpp:03488659774a : 785 + 0xc]
    eip = 0x1043e96c   esp = 0x0012fb40   ebp = 0x0012fb6c
16  xul.dll!nsDocLoader::OnStopRequest(nsIRequest *,nsISupports *,unsigned int) [nsDocLoader.cpp:03488659774a : 680 + 0x8]
    eip = 0x1043ebc6   esp = 0x0012fb74   ebp = 0x0012fb98   ebx = 0x0690c324
17  xul.dll!nsLoadGroup::RemoveRequest(nsIRequest *,nsISupports *,unsigned int) [nsLoadGroup.cpp:03488659774a : 688 + 0xc]
    eip = 0x1006c800   esp = 0x0012fba0   ebp = 0x0012fbd0
18  xul.dll!nsHttpChannel::OnStopRequest(nsIRequest *,nsISupports *,unsigned int) [nsHttpChannel.cpp:03488659774a : 4968 + 0x16]
    eip = 0x100a5e9b   esp = 0x0012fbd8   ebp = 0x0012fbf4
19  xul.dll!nsInputStreamPump::OnStateStop() [nsInputStreamPump.cpp:03488659774a : 576 + 0x17]
    eip = 0x1006bdae   esp = 0x0012fbfc   ebp = 0x0012fc24   ebx = 0x06463df0
20  xul.dll!nsInputStreamPump::OnInputStreamReady(nsIAsyncInputStream *) [nsInputStreamPump.cpp:03488659774a : 401 + 0x7]
    eip = 0x1006c032   esp = 0x0012fc1c   ebp = 0x0012fc24   ebx = 0x00000000
21  xul.dll!nsInputStreamReadyEvent::Run() [nsStreamUtils.cpp:03488659774a : 111 + 0x6]
    eip = 0x105f4dfb   esp = 0x0012fc2c   ebp = 0x0012fc54   ebx = 0x00000000
22  xul.dll!nsThread::ProcessNextEvent(int,int *) [nsThread.cpp:03488659774a : 510 + 0x5]
    eip = 0x105fd447   esp = 0x0012fc3c   ebp = 0x0012fc54
23  xul.dll!NS_ProcessNextEvent_P(nsIThread *,int) [nsThreadUtils.cpp:03488659774a : 227 + 0xc]
    eip = 0x105e284d   esp = 0x0012fc5c   ebp = 0x0012fc68   ebx = 0x00000000
24  xul.dll!nsBaseAppShell::Run() [nsBaseAppShell.cpp:03488659774a : 170 + 0x7]
    eip = 0x1056beee   esp = 0x0012fc70   ebp = 0x0012fea4
25  xul.dll!nsAppStartup::Run() [nsAppStartup.cpp:03488659774a : 193 + 0xc]
    eip = 0x1048e8cf   esp = 0x0012fc84   ebp = 0x0012fea4
26  xul.dll!XRE_main [nsAppRunner.cpp:03488659774a : 3298 + 0xb]
    eip = 0x10008cc7   esp = 0x0012fc90   ebp = 0x0012fea4
27  firefox.exe!NS_internal_main(int,char * *) [nsBrowserApp.cpp:03488659774a : 156 + 0xc]
    eip = 0x0040142c   esp = 0x0012ff18   ebp = 0x0012ff48   ebx = 0x00000000
28  firefox.exe!wmain [nsWindowsWMain.cpp:03488659774a : 110 + 0x8]
    eip = 0x0040153d   esp = 0x0012ff50   ebp = 0x0012ff7c
29  firefox.exe!__tmainCRTStartup [crtexe.c : 594 + 0x16]
    eip = 0x004016f2   esp = 0x0012ff84   ebp = 0x0012ffc0   ebx = 0x00000000



http://tinderbox.mozilla.org/showlog.cgi?tree=Firefox3.5&errorparser=unittest&logfile=1242385089.1242391854.32047.gz&buildtime=1242385089&buildname=WINNT%205.2%20mozilla-1.9.1%20unit%20test&fulltext=1#err1
http://tinderbox.mozilla.org/showlog.cgi?tree=Firefox3.5&errorparser=unittest&logfile=1242381995.1242385761.20397.gz&buildtime=1242381995&buildname=WINNT%205.2%20mozilla-1.9.1%20unit%20test&fulltext=1#err1
http://tinderbox.mozilla.org/showlog.cgi?log=Firefox3.5/1242371547.1242377151.4735.gz&fulltext=1#err1

Comment 1

[Andreas Gal :gal]

I don't see these crashes on TM. What about trunk?

Comment 2

[Andreas Gal :gal]

If this doesn't happen on trunk, I am pretty sure its a dup of bug 487240.

Comment 3

[(not currently active) Ted Mielczarek]

Didn't see it happening on trunk, no. Feel free to dupe. (Just make sure to keep the [ @ js_CallTracer ] bit in the summary.)

Comment 4

[Robert Sayre]

How would we test the branch now? It should be fixed.

Comment 5

[(not currently active) Ted Mielczarek]

If you've seen multiple mochitest runs without a crash, then I think you can resolve it. When I reported this it was almost every other build crashing.

Comment 6

[Andreas Gal :gal]

We got them in the wild too. Looking at this stack I am not so sure any more I understand why we fixed this but if the tinderboxes are happy I guess we did.

http://crash-stats.mozilla.com/report/index/81b16a03-6367-4084-9298-a92532090516