jsreftests - Crash [@ GetAndCacheLocalTime ]

RESOLVED FIXED

Status

()

RESOLVED FIXED
9 years ago
7 years ago

People

(Reporter: bc, Unassigned)

Tracking

({crash, regression, testcase})

Trunk
x86
All
crash, regression, testcase
Points:
---
Bug Flags:
in-testsuite +

Firefox Tracking Flags

(Not tracked)

Details

(Whiteboard: fixed-in-tracemonkey, crash signature)

(Reporter)

Description

9 years ago
e4x/XMLList/regress-373072.js browser crashes opt/debug on mac tracemonkey at least.
Flags: in-testsuite+
(Reporter)

Comment 1

9 years ago
Not specific to that test, but it does crash after finishing e4x/XMLList

Program received signal EXC_BAD_ACCESS, Could not access memory.
Reason: KERN_PROTECTION_FAILURE at address: 0x00000000
0x002c80d9 in GetAndCacheLocalTime (cx=0x1099200, obj=0x15064d40, vp=0x0, dp=0xbfffca80) at /work/mozilla/builds/1.9.3-tracemonkey/mozilla/js/src/jsdate.cpp:1254
1254	    jsdouble result = *JSVAL_TO_DOUBLE(*vp);
(gdb) bt
#0  0x002c80d9 in GetAndCacheLocalTime (cx=0x1099200, obj=0x15064d40, vp=0x0, dp=0xbfffca80) at /work/mozilla/builds/1.9.3-tracemonkey/mozilla/js/src/jsdate.cpp:1254
#1  0x002c8a26 in date_getTimezoneOffset (cx=0x1099200, argc=0, vp=0x14d0300) at /work/mozilla/builds/1.9.3-tracemonkey/mozilla/js/src/jsdate.cpp:1508
#2  0x00318fd0 in js_Interpret (cx=0x1099200) at jsops.cpp:2271
#3  0x0032bb72 in js_Execute (cx=0x1099200, chain=0x150a1aa0, script=0x2225ec00, down=0x0, flags=0, result=0x0) at jsinterp.cpp:1616
#4  0x002a0dc3 in JS_EvaluateUCScriptForPrincipals (cx=0x1099200, obj=0x150a1aa0, principals=0x2074c424, chars=0x17dd0008, length=15638, filename=0x1ad4ec28 "file:///work/mozilla/builds/1.9.3-tracemonkey/mozilla/js/src/tests/ecma/shell.js", lineno=1, rval=0x0) at /work/mozilla/builds/1.9.3-tracemonkey/mozilla/js/src/jsapi.cpp:5070
#5  0x12339086 in nsJSContext::EvaluateString (this=0x836ff0, aScript=@0x1ad336a4, aScopeObject=0x150a1aa0, aPrincipal=0x2074c420, aURL=0x1ad4ec28 "file:///work/mozilla/builds/1.9.3-tracemonkey/mozilla/js/src/tests/ecma/shell.js", aLineNo=1, aVersion=150, aRetValue=0x0, aIsUndefined=0xbfffd384) at /work/mozilla/builds/1.9.3-tracemonkey/mozilla/dom/base/nsJSEnvironment.cpp:1683
#6  0x120ec9fe in nsScriptLoader::EvaluateScript (this=0x1914ffa0, aRequest=0x1ad33690, aScript=@0x1ad336a4) at /work/mozilla/builds/1.9.3-tracemonkey/mozilla/content/base/src/nsScriptLoader.cpp:690
#7  0x120ecca4 in nsScriptLoader::ProcessRequest (this=0x1914ffa0, aRequest=0x1ad33690) at /work/mozilla/builds/1.9.3-tracemonkey/mozilla/content/base/src/nsScriptLoader.cpp:604
#8  0x120ecd30 in nsScriptLoader::ProcessPendingRequests (this=0x1914ffa0) at /work/mozilla/builds/1.9.3-tracemonkey/mozilla/content/base/src/nsScriptLoader.cpp:744
#9  0x120ed040 in nsScriptLoader::OnStreamComplete (this=0x1914ffa0, aLoader=0x1ad33630, aContext=0x1ad33690, aStatus=0, aStringLen=15638, aString=0x17dcc000 "/* -*- Mode: C++; tab-width: 2; indent-tabs-mode: nil; c-basic-offset: 2 -*- */\n/* ***** BEGIN LICENSE BLOCK *****\n * Version: MPL 1.1/GPL 2.0/LGPL 2.1\n *\n * The contents of this file are subject to t"...) at /work/mozilla/builds/1.9.3-tracemonkey/mozilla/content/base/src/nsScriptLoader.cpp:931
#10 0x13bd975b in nsStreamLoader::OnStopRequest (this=0x1ad33630, request=0x1ad4ed90, ctxt=0x1ad33690, aStatus=0) at /work/mozilla/builds/1.9.3-tracemonkey/mozilla/netwerk/base/src/nsStreamLoader.cpp:127
#11 0x13b90ce9 in nsBaseChannel::OnStopRequest (this=0x1ad4ed60, request=0x1ad4ece0, ctxt=0x0, status=0) at /work/mozilla/builds/1.9.3-tracemonkey/mozilla/netwerk/base/src/nsBaseChannel.cpp:680
#12 0x13ba4002 in nsInputStreamPump::OnStateStop (this=0x1ad4ece0) at /work/mozilla/builds/1.9.3-tracemonkey/mozilla/netwerk/base/src/nsInputStreamPump.cpp:576
#13 0x13ba4122 in nsInputStreamPump::OnInputStreamReady (this=0x1ad4ece0, stream=0x1ad4f16c) at /work/mozilla/builds/1.9.3-tracemonkey/mozilla/netwerk/base/src/nsInputStreamPump.cpp:401
#14 0x005836d6 in nsInputStreamReadyEvent::Run (this=0x1ad4f380) at /work/mozilla/builds/1.9.3-tracemonkey/mozilla/xpcom/io/nsStreamUtils.cpp:112
#15 0x005b6eea in nsThread::ProcessNextEvent (this=0x81a220, mayWait=0, result=0xbfffd724) at /work/mozilla/builds/1.9.3-tracemonkey/mozilla/xpcom/threads/nsThread.cpp:527
#16 0x0053bdae in NS_ProcessPendingEvents_P (thread=0x81a220, timeout=20) at nsThreadUtils.cpp:180
#17 0x14b02d35 in nsBaseAppShell::NativeEventCallback (this=0x1538b1c0) at /work/mozilla/builds/1.9.3-tracemonkey/mozilla/widget/src/xpwidgets/nsBaseAppShell.cpp:121
#18 0x14ab2972 in nsAppShell::ProcessGeckoEvents (aInfo=0x1538b1c0) at /work/mozilla/builds/1.9.3-tracemonkey/mozilla/widget/src/cocoa/nsAppShell.mm:417
#19 0x96a413c5 in CFRunLoopRunSpecific ()
#20 0x96a41aa8 in CFRunLoopRunInMode ()
#21 0x93ec32ac in RunCurrentEventLoopInMode ()
#22 0x93ec30c5 in ReceiveNextEventCommon ()
#23 0x93ec2f39 in BlockUntilNextEventMatchingListInMode ()
#24 0x941dc6d5 in _DPSNextEvent ()
#25 0x941dbf88 in -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] ()
#26 0x941d4f9f in -[NSApplication run] ()
#27 0x14ab04fc in nsAppShell::Run (this=0x1538b1c0) at /work/mozilla/builds/1.9.3-tracemonkey/mozilla/widget/src/cocoa/nsAppShell.mm:770
#28 0x147d3bd6 in nsAppStartup::Run (this=0x84c920) at /work/mozilla/builds/1.9.3-tracemonkey/mozilla/toolkit/components/startup/src/nsAppStartup.cpp:182
#29 0x0007751c in XRE_main (argc=7, argv=0xbfffec88, aAppData=0x80eb10) at /work/mozilla/builds/1.9.3-tracemonkey/mozilla/toolkit/xre/nsAppRunner.cpp:3471
#30 0x00002863 in main (argc=7, argv=0xbfffec88) at /work/mozilla/builds/1.9.3-tracemonkey/mozilla/browser/app/nsBrowserApp.cpp:156
Summary: Crash - jsreftests - e4x/XMLList/regress-373072.js → jsreftests - Crash [@ GetAndCacheLocalTime ]
(Reporter)

Comment 2

9 years ago
This crash can not be disabled (easily) through disabling a single test.
Blocks: 524121
(Reporter)

Comment 3

9 years ago
all platforms.
OS: Mac OS X → All
(Reporter)

Comment 4

9 years ago
fixed by backout http://hg.mozilla.org/tracemonkey/rev/2909091fb254
tracemonkey only issue.
Blocks: 524346
No longer blocks: 524121
Status: NEW → RESOLVED
Last Resolved: 9 years ago
Resolution: --- → FIXED
Whiteboard: fixed-in-tracemonkey
Crash Signature: [@ GetAndCacheLocalTime ]
You need to log in before you can comment on or make changes to this bug.