559901 - Firefox Crashes [@ js_FoldConstants ]

Status: RESOLVED INCOMPLETE

(Core :: JavaScript Engine, defect)

Description

[chris hofmann]

some analysis of crashes in particular source files found this hot spot of  about 350 crashes per day on this signature.

stack looks like

http://crash-stats.mozilla.com/report/index/e0ff3d9b-51b6-4d20-9023-e7ab22100416

Frame  	Module  	Signature [Expand]  	Source
0 	js3250.dll 	js_FoldConstants 	js/src/jsparse.cpp:8666
1 	js3250.dll 	js_FoldConstants 	js/src/jsparse.cpp:8689
2 	js3250.dll 	js_FoldConstants 	js/src/jsparse.cpp:8689
3 	js3250.dll 	js_FoldConstants 	js/src/jsparse.cpp:8771
4 	js3250.dll 	js_FoldConstants 	js/src/jsparse.cpp:8674
5 	js3250.dll 	js_FoldConstants 	js/src/jsparse.cpp:8764
6 	js3250.dll 	js_FoldConstants 	js/src/jsparse.cpp:8689
7 	js3250.dll 	js_FoldConstants 	js/src/jsparse.cpp:8689
8 	js3250.dll 	js_FoldConstants 	js/src/jsparse.cpp:8764
9 	js3250.dll 	JSCompiler::compileScript 	js/src/jsparse.cpp:902
10 	js3250.dll 	JS_EvaluateUCScriptForPrincipals 	js/src/jsapi.cpp:5065
11 	xul.dll 	nsJSContext::EvaluateString 	dom/base/nsJSEnvironment.cpp:1713
12 	xul.dll 	nsScriptLoader::EvaluateScript 	content/base/src/nsScriptLoader.cpp:711
13 	xul.dll 	nsScriptLoader::ProcessRequest 	content/base/src/nsScriptLoader.cpp:625
14 	xul.dll 	nsCOMArray_base::RemoveObject 	obj-firefox/xpcom/build/nsCOMArray.cpp:129
15 	xul.dll 	nsScriptLoader::ProcessPendingRequests

more reports at

http://crash-stats.mozilla.com/report/list?range_value=2&range_unit=weeks&signature=js_FoldConstants

found back across many releases, and it looks mostly on winXP but found cross platform.  about 1/2 of the crashes are inside 3 minutes after startup.

checking --- js_FoldConstants 20100415-crashdata.csv
found in: 3.6.3 3.5.9 3.6 3.6.2 3.0.19 3.5.7 3.5.8 3.5.5 3.6b5 3.6b1 3.6.3plugin1 3.5 3.1b3 3.0.5 3.6b4 3.6b2 3.5b99 3.5b4 3.5.6 3.5.2 3.0.8 
3.0.4 3.0.15 3.0
release total-crashes
              js_FoldConstants crashes
                         pct.
all     351003  352     0.00100284
3.6.3   242386  229     0.000944774
3.5.9   31706   45      0.00141929
3.6     19351   30      0.00155031
3.6.2   8682    8       0.000921447
3.0.19  10321   7       0.000678229
3.5.7   2348    5       0.00212947

os breakdown
js_FoldConstantsTotal 352
Win5.1  0.84
Win6.0  0.08
Win6.1  0.07
Mac10.4 0.01
Mac10.5 0.01
Mac10.6 0.00
Lin2.4  0.00

domains of sites look like general browsing

  41 http://www.youtube.com
  28 \N//
  24 //
  19 https://mail.google.com
  19 http://www.facebook.com
  15 http://apps.facebook.com
   9 about:blank//
   8 http://www.orkut.com.br
   6 http://talkgadget.google.com
   4 http://www.google.com
   3 http://www.jappy.de
<long tail snipped>

  1 http://www.youtube.com/watch?v=wSoprFd-Dug&feature=related
   1 http://www.youtube.com/watch?v=tM6_W6U-j7w&feature=related
   1 http://www.youtube.com/watch?v=qSivmjlw46o&feature=related
   1 http://www.youtube.com/watch?v=p0F8x4i5GYE&feature=related

Comment 1

[Marcia Knous [:marcia]]

http://crash-stats.mozilla.com/report/index/e0ff3d9b-51b6-4d20-9023-e7ab22100416 - that person looks to be using the Farmville app. When I last logged in I was prompted to install the Zynga toolbar from http://www.conduit.com. I wonder if that could be the source of some of the crashes. Will install it on 3.6.x and see if I can repro anything.

Comment 2

[Wayne Mery (:wsmwk)]

I didn't check to see if stack is same, but there are some FF9 crashes (only 10 in one month). none for version 10

https://crash-stats.mozilla.com/report/list?product=Thunderbird&query_search=signature&query_type=exact&query=js_FoldConstants&reason_type=contains&date=02%2F27%2F2012%2015%3A40%3A45&range_value=4&range_unit=weeks&hang_type=any&process_type=all&do_query=1&signature=js_FoldConstants

Comment 3

[Terrence Cole [:terrence]]

No crashes since 9 for foldConstants and no STR in any case. Please re-open if this is still an issue.