498776 - Entire PC hangs and must be restarted if the URL is visited with JIT compilation enabled

Status: RESOLVED WORKSFORME

(Core :: JavaScript Engine, defect)

Description

[Dennis McCunney]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1b99) Gecko/20090605 Firefox/3.5b99 (.NET CLR 3.5.30729) Mnenhy/0.7.6.0
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1b99) Gecko/20090605 Firefox/3.5b99 (.NET CLR 3.5.30729) Mnenhy/0.7.6.0

If the referenced URL is visited with TraceMonkey JIT compilation enabled
(javascript.options.jit.chrome and javascript.options.jit.content set to True), the entire PC will hang and must be restarted.



Reproducible: Always

Steps to Reproduce:
1. Enable TraceMonkey JIT compilation
2. Visit http://www.theittybittykittycommittee.com/
3. *hang*
Actual Results:  
The PC hangs, and must be cycled using the reset switch.

Expected Results:  
The website should have loaded and displayed normally.  If JIT compilation is *not* enabled, it does.

The host PC has a 1.8ghz Celeron CPU with 2GB of RAM, running Windows XP SP3 with all current patches.

Firefox has the following configuration:

Generated: Tue Jun 16 2009 19:26:56 GMT-0400 (Eastern Daylight Time)
User Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1b99) Gecko/20090605 Firefox/3.5b99 (.NET CLR 3.5.30729) Mnenhy/0.7.6.0
Build ID: 20090605162636

Enabled Extensions: [18]
- All-in-One Sidebar 0.7.10: http://firefox.exxile.net/aios
- CuteMenus - Crystal SVG 1.9.3: http://www.cutemenuproject.com/
- Dict 0.6.75: http://dict.mozdev.org/
- Firebug 1.4X.0a31: http://www.getfirebug.com/
- Firesomething 1.8.0: http://www.cosmicat.com/
- Gmail Notifier 0.6.3.11: http://www.nexgenmedia.net/extensions/
- Greasemonkey 0.8.20090123.1: http://www.greasespot.net/
- iMacros for Firefox 6.2.3.0: http://www.iopus.com/imacros/firefox
- Image Zoom 0.3.1: http://imagezoom.yellowgorilla.net/
- Java Console 6.0.07: http://www.google.com/search?q=Firefox%20Java%20Console
- Java Console 6.0.14: http://www.google.com/search?q=Firefox%20Java%20Console
- Java Quick Starter 1.0: http://www.google.com/search?q=Firefox%20Java%20Quick%20Starter
- MR Tech Toolkit 6.0.3.3: http://www.mrtech.com/extensions/
- NoScript 1.9.3.3: http://noscript.net
- Personal Menu 4.1.4: https://addons.mozilla.org/firefox/addon/3895/
- Prism for Firefox 1.0b1: http://wiki.mozilla.org/Prism
- Stylish 1.0.2: http://userstyles.org/
- Tab Mix Plus 0.3.7.4pre.090404: http://tmp.garyr.net

Installed Themes: [1]
- Default: http://www.mozilla.org/

Installed Plugins: (17)
- Adobe Acrobat
- Google Update
- Java Deployment Toolkit 6.0.140.8
- Java(TM) Platform SE 6 U14
- Microsoft Office Live Plug-in for Firefox
- Microsoft® DRM
- Mozilla Default Plug-in
- Picasa
- QuickTime Plug-in 7.6.2
- RealJukebox NS Plugin
- RealPlayer Version Plugin
- RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) 
- Shockwave Flash
- Shockwave for Director
- Silverlight Plug-In
- Windows Media Player Plug-in Dynamic Link Library
- Windows Presentation Foundation

Domains referenced in the URL that produces the hang are whitelisted in NoScript.

Comment 1

[Ryan VanderMeulen [:RyanVM]]

WFM with 3.5b99 on XPSP3. Have you tried disabling addons? I'd say to try safe mode, but I think JIT is disabled in safe mode.

Comment 2

[Dennis McCunney]

I figured it might work for someone else.  :-(

I'll try more testing, selectively disabling one or the other JIT options, and turn off extensions.  Right now, I just know my entire machine hangs on the site if JIT is on.  I watched the Firefox process in Process Explorer last time, and PE was reporting FF taking about 48% of the CPU at the moment it hung.  I was expecting it to spike to 100%.

Next step is probably to grab a nightly build and try to generate a stack trace, but I won't get around to that immediately.
______
Dennis
This far, that's the only URL I've encountered with problems that can be traced to turning on JIT.  As mentioned, it doesn't happen if that's off.
 
______
Dennis

Comment 3

[Dennis McCunney]

Okay, color me confused, but I may owe Firefox 3.5b99 an apology.

I tried again with several different configurations.  The first disabled all extensions, but kept JIT on for Chrome and Content.  Immediate *hang* and reset.

Try again, with extensions disabled, and JIT for Chrome set to True and Content set to False. Hang and reset.

Try a third time with extensions disabled, JIT for Content set to True and Chrome set to false.  Hang and reset.

Try a fourth time with extensions disabled and JIT turned off.  Hang and reset.  (And I recall having that site work before without JIT on.)

Just to be sure, I ran FF 3.0.10, which has essentially the same config as 3.5b99, and visited the site.  Hang and reset.

I don't know what's going on, but I'm starting to suspect a flaky hardware problem in my PC, probably RAM related.  Time for some memory tests...
______
Dennis

Comment 4

[Mike Beltzner [:beltzner, not reading bugmail]]

--> Core::JS

Comment 5

[Mike Beltzner [:beltzner, not reading bugmail]]

Can we get anyone to reproduce this? carrying over blocking nomination flag

Comment 6

[Mike Shaver (:shaver emeritus)]

Minusing based on comment 3, and the fact that the OS hangs as well -- that's not something we should be able to cause even with the worst of JIT bugs.

Comment 7

[Matthias Versen [:Matti]]

If the OS hangs or crashes then it's the fault of the os, if Firefox hangs or crashes it's Firefox fault of the fault of a plugin/addon. The reason: Firefox is a userspace application and can not crash or hang the os.

There is one exception: If Firefox allocates all available memory then it could look like an OS hang while it only takes ages to respond. This is easy to test if you open the taskmanager before testing and let it be in front. You can watch the Firefox memory usage and you can always kill the process.

I would mark this invalid but there are enough other people here who should decide this.

Comment 8

[Dennis McCunney]

I wasn't aware this was still open.

Since posting that report, I've changed motherboards and video. I was having a different issue with Firefox hanging the entire machine and requiring a reset to get it back when accessing pages with large images.  (I don't believe Firefox actually crashed Windows XP, but the result was the same.)

The old mobo used a Via chipset with integrated S3 video.  The new one uses an Intel chipset with Intel integrated video.  Firefox has been rock solid with hardware acceleration enabled.  I currently run FF 8 beta, Aurora, and Nightly, switching between them using a common profile, and everything works fine.

I'll have to chalk up both this and the hang on accessing large images to flaky hardware.

Marking as RESOLVED and WORKSFORME.
______
Dennis