559422 - During regress-382981.js, "Assertion failure: slot < OBJ_SCOPE(obj2)->freeslot" at jsops.cpp:2306

Status: RESOLVED WORKSFORME

(Core :: JavaScript Engine, defect)

Description

[Timothy Nikkel (:tnikkel)]

http://tinderbox.mozilla.org/showlog.cgi?log=Firefox/1271275877.1271277366.20141.gz
Rev3 Fedora 12 mozilla-central debug test jsreftest on 2010/04/14 13:11:17
s: talos-r3-fed-011


REFTEST INFO | Loading file:///home/cltbld/talos-slave/mozilla-central-fedora-debug-u-jsreftest/build/jsreftest/tests/jsreftest.html?test=js1_8/decompilation/regress-382981.js
++DOMWINDOW == 20 (0x99ff0a0) [serial = 5047] [outer = 0x8e5a370]
begin test: js1_8/decompilation/regress-382981.js
BUGNUMBER: 382981
STATUS: decompilation of expcio body with delete ++x
expect:
 function ( ) ( ++ x , true )
actual:
 function ( ) ( ++ x , true )
 PASSED! decompilation of expcio body with delete ++x
expect:
 function ( ) ( * , true )
actual:
 function ( ) ( * , true )
 PASSED! decompilation of expcio body with delete ++x
Assertion failure: slot < OBJ_SCOPE(obj2)->freeslot, at /builds/slave/mozilla-central-linux-debug/build/js/src/jsops.cpp:2306
NEXT ERROR TEST-UNEXPECTED-FAIL | automation.py | Exited with code 6 during test run
INFO | automation.py | Application ran for: 0:20:01.552842
INFO | automation.py | Reading PID log: /tmp/tmpAqqA-Ppidlog
PROCESS-CRASH | automation.py | application crashed (minidump found)
Operating system: Linux
                  0.0.0 Linux 2.6.31.5-127.fc12.i686.PAE #1 SMP Sat Nov 7 21:25:57 EST 2009 i686
CPU: x86
     GenuineIntel family 6 model 23 stepping 10
     1 CPU

Crash reason:  SIGABRT
Crash address: 0x793

Thread 0 (crashed)
 0  linux-gate.so + 0x424
    eip = 0x00459424   esp = 0xbfdd1830   ebp = 0xbfdd1848   ebx = 0x00000793
    esi = 0x09aace0c   edi = 0x00c7cff4   eax = 0x00000000   ecx = 0x00000793
    edx = 0x00000006   efl = 0x00000206
    Found by: given as instruction pointer in context
 1  libmozjs.so!JS_Assert [jsutil.cpp:482709fada6c : 78 + 0xb]
    eip = 0x00251b23   esp = 0xbfdd1850   ebp = 0xbfdd1868
    Found by: previous frame's frame pointer
 2  libmozjs.so!js_Interpret [jsops.cpp:482709fada6c : 2306 + 0x3a]
    eip = 0x001a91c8   esp = 0xbfdd1870   ebp = 0xbfdd1de8   ebx = 0x0034f074
    Found by: call frame info
 3  libmozjs.so!js_Invoke [jsinterp.cpp:482709fada6c : 843 + 0xa]
    eip = 0x001bc5ad   esp = 0xbfdd1df0   ebp = 0xbfdd1ed8   ebx = 0x0034f074
    esi = 0x00000000   edi = 0x011ecd4e
    Found by: call frame info
 4  libxul.so!nsXPCWrappedJSClass::CallMethod [xpcwrappedjsclass.cpp:482709fada6c : 1696 + 0x2a]
    eip = 0x00faf895   esp = 0xbfdd1ee0   ebp = 0xbfdd2298   ebx = 0x02aa79f0
    esi = 0x00000000   edi = 0x011ecd4e
    Found by: call frame info
 5  libxul.so!nsXPCWrappedJS::CallMethod [xpcwrappedjs.cpp:482709fada6c : 570 + 0x35]
    eip = 0x00fa6049   esp = 0xbfdd22a0   ebp = 0xbfdd22c8   ebx = 0x02aa79f0
    esi = 0x00fae3f4   edi = 0x00fa5fe8
    Found by: call frame info
 6  libxul.so!PrepareAndDispatch [xptcstubs_gcc_x86_unix.cpp:482709fada6c : 95 + 0x3a]
    eip = 0x02342cd4   esp = 0xbfdd22d0   ebp = 0xbfdd23c8   ebx = 0x02aa79f0
    esi = 0x00000003   edi = 0x00fa5fe8
    Found by: call frame info
 7  libxul.so!nsTimerImpl::Fire [nsTimerImpl.cpp:482709fada6c : 430 + 0x18]
    eip = 0x0232c8c7   esp = 0xbfdd23d0   ebp = 0xbfdd2418   ebx = 0x02aa79f0
    esi = 0x00000003   edi = 0x0218df34
    Found by: call frame info
 8  libxul.so!nsTimerEvent::Run [nsTimerImpl.cpp:482709fada6c : 519 + 0x12]
    eip = 0x0232cadd   esp = 0xbfdd2420   ebp = 0xbfdd2448   ebx = 0x02aa79f0
    esi = 0x00000003   edi = 0x0218df34
    Found by: call frame info
 9  libxul.so!nsThread::ProcessNextEvent [nsThread.cpp:482709fada6c : 527 + 0x18]
    eip = 0x0232555b   esp = 0xbfdd2450   ebp = 0xbfdd24b8   ebx = 0x02aa79f0
    esi = 0x08c2959c   edi = 0x0218df34
    Found by: call frame info
10  libxul.so!NS_ProcessNextEvent_P [nsThreadUtils.cpp : 250 + 0x1f]
    eip = 0x022b8a74   esp = 0xbfdd24c0   ebp = 0xbfdd24f8   ebx = 0x02aa79f0
    esi = 0x00000001   edi = 0x0218df34
    Found by: call frame info
11  libxul.so!mozilla::ipc::MessagePump::Run [MessagePump.cpp:482709fada6c : 118 + 0x15]
    eip = 0x02201546   esp = 0xbfdd2500   ebp = 0xbfdd2548   ebx = 0x02aa79f0
    esi = 0x00000001   edi = 0x0218df34
    Found by: call frame info
12  libxul.so!MessageLoop::RunInternal [message_loop.cc:482709fada6c : 216 + 0x22]
    eip = 0x0239b86b   esp = 0xbfdd2550   ebp = 0xbfdd2578   ebx = 0x02aa79f0
    esi = 0x08a84078   edi = 0x0218df34
    Found by: call frame info
13  libxul.so!MessageLoop::RunHandler [message_loop.cc:482709fada6c : 199 + 0xa]
    eip = 0x0239b88f   esp = 0xbfdd2580   ebp = 0xbfdd2588   ebx = 0x02aa79f0
    esi = 0x08a84078   edi = 0x0218df34
    Found by: call frame info
14  libxul.so!MessageLoop::Run [message_loop.cc:482709fada6c : 173 + 0xa]
    eip = 0x0239b913   esp = 0xbfdd2590   ebp = 0xbfdd25b8   ebx = 0x02aa79f0
    esi = 0x08a84078   edi = 0x0218df34
    Found by: call frame info
15  libxul.so!nsBaseAppShell::Run [nsBaseAppShell.cpp:482709fada6c : 174 + 0xc]
    eip = 0x020ace34   esp = 0xbfdd25c0   ebp = 0xbfdd25f8   ebx = 0x02aa79f0
    esi = 0x08a84078   edi = 0x0218df34
    Found by: call frame info
16  libxul.so!nsAppStartup::Run [nsAppStartup.cpp:482709fada6c : 182 + 0x1b]
    eip = 0x01e0125d   esp = 0xbfdd2600   ebp = 0xbfdd2638   ebx = 0x02aa79f0
    esi = 0x08a84078   edi = 0x0218df34
    Found by: call frame info
17  libxul.so!XRE_main [nsAppRunner.cpp:482709fada6c : 3519 + 0x1b]
    eip = 0x00f34024   esp = 0xbfdd2640   ebp = 0xbfdd2bb8   ebx = 0x02aa79f0
    esi = 0x08a84078   edi = 0x0218df34
    Found by: call frame info
18  firefox-bin!main [nsBrowserApp.cpp:482709fada6c : 158 + 0x1d]
    eip = 0x08048e42   esp = 0xbfdd2bc0   ebp = 0xbfdd2c28   ebx = 0x0804bafc
    esi = 0x084b76f8   edi = 0x0230f74c
    Found by: call frame info
19  libc-2.11.so + 0x16bb5
    eip = 0x00afebb6   esp = 0xbfdd2c40   ebp = 0xbfdd2cb8   ebx = 0x00c58ff4
    esi = 0x00000000   edi = 0x00000000
    Found by: call frame info
20  firefox-bin + 0x9f0
    eip = 0x080489f1   esp = 0xbfdd2cc0   ebp = 0x00000000
    Found by: previous frame's frame pointer
21  firefox-bin!Output [nsBrowserApp.cpp:482709fada6c : 77 + 0x5]
    eip = 0x08048b42   esp = 0xbfdd2cc4   ebp = 0x00000000
    Found by: stack scanning
22  ld-2.11.so + 0xecef
    eip = 0x00ad4cf0   esp = 0xbfdd2cd8   ebp = 0x00000000
    Found by: stack scanning

Same assertion as bug 557647.

Comment 1

[Ryan VanderMeulen [:RyanVM]]

This test is still running and it hasn't happened in almost 2 years. Calling
this WFM.