566805 - Intermittent crash [@ ClaimTitle] in test_characterdataindexsizeerrdeletedataoffsetgreater.html

Status: RESOLVED WORKSFORME

(Core :: JavaScript Engine, defect)

Description

[Phil Ringnalda (:philor)]

Attachment: Full crashdump

http://tinderbox.mozilla.org/showlog.cgi?log=Firefox/1274247697.1274249213.30874.gz
Rev3 MacOSX Leopard 10.5.8 mozilla-central opt test mochitests-2/5 on 2010/05/18 22:41:37
s: talos-r3-leopard-020

6004 INFO Running /tests/dom/tests/mochitest/dom-level1-core/test_characterdataindexsizeerrdeletedataoffsetgreater.html...
TEST-UNEXPECTED-FAIL | automation.py | Exited with code 1 during test run

Crash reason:  EXC_BAD_ACCESS / KERN_INVALID_ADDRESS
Crash address: 0xffffffffc17b7740

Thread 0 (crashed)
 0  libmozjs.dylib!ClaimTitle [jslock.cpp:bb8801a4ac33 : 419 + 0x8]
    eip = 0x0027366b   esp = 0xbfff9f70   ebp = 0xbfff9fa8   ebx = 0x00273b04
    esi = 0x18d7cfa0   edi = 0x003a1ca0   eax = 0xc17b7740   ecx = 0x04fe1600
    edx = 0x005d0000   efl = 0x00210282
    Found by: given as instruction pointer in context
 1  libmozjs.dylib!js_LockTitle [jslock.cpp:bb8801a4ac33 : 1216 + 0xd]
    eip = 0x00273b36   esp = 0xbfff9fb0   ebp = 0xbfff9fe8
    Found by: previous frame's frame pointer
 2  libmozjs.dylib + 0x68fce
    eip = 0x00273fcf   esp = 0xbfff9ff0   ebp = 0xbfffa018
    Found by: previous frame's frame pointer
 3  libmozjs.dylib!js_NewRegExpObject [jsobjinlines.h:bb8801a4ac33 : 471 + 0x10]
    eip = 0x002c9eae   esp = 0xbfffa020   ebp = 0xbfffa0b8
    Found by: previous frame's frame pointer
 4  libmozjs.dylib!js::Parser::primaryExpr(js::TokenKind, int) [jsparse.cpp:bb8801a4ac33 : 8390 + 0x1d]
    eip = 0x002b18a3   esp = 0xbfffa0c0   ebp = 0xbfffa1c8
    Found by: previous frame's frame pointer
 5  libmozjs.dylib!js::Parser::memberExpr(int) [jsparse.cpp:bb8801a4ac33 : 6951 + 0x16]
    eip = 0x002b4958   esp = 0xbfffa1d0   ebp = 0xbfffa248
    Found by: previous frame's frame pointer
 6  libmozjs.dylib!js::Parser::unaryExpr() [jsparse.cpp:bb8801a4ac33 : 6318 + 0xf]
    eip = 0x002b551e   esp = 0xbfffa250   ebp = 0xbfffa2f8
    Found by: previous frame's frame pointer
 7  libmozjs.dylib!js::Parser::mulExpr() [jsparse.cpp:bb8801a4ac33 : 6157 + 0x7]
    eip = 0x002b5c03   esp = 0xbfffa300   ebp = 0xbfffa338
    Found by: previous frame's frame pointer
 8  libmozjs.dylib!js::Parser::addExpr() [jsparse.cpp:bb8801a4ac33 : 6139 + 0x7]
    eip = 0x002b5dc3   esp = 0xbfffa340   ebp = 0xbfffa378
    Found by: previous frame's frame pointer
 9  libmozjs.dylib!js::Parser::relExpr() [jsparse.cpp:bb8801a4ac33 : 6124 + 0x7]
    eip = 0x002b5fa8   esp = 0xbfffa380   ebp = 0xbfffa3d8
    Found by: previous frame's frame pointer
10  libmozjs.dylib + 0xa0c22
    eip = 0x002abc23   esp = 0xbfffa3e0   ebp = 0xbfffa428
    Found by: previous frame's frame pointer
11  libmozjs.dylib + 0xa1012
    eip = 0x002ac013   esp = 0xbfffa430   ebp = 0xbfffa468
    Found by: previous frame's frame pointer
12  libmozjs.dylib!js::Parser::condExpr() [jsparse.cpp:bb8801a4ac33 : 6019 + 0x7]
    eip = 0x002ac2f3   esp = 0xbfffa470   ebp = 0xbfffa4a8
    Found by: previous frame's frame pointer
13  libmozjs.dylib!js::Parser::assignExpr() [jsparse.cpp:bb8801a4ac33 : 5901 + 0x7]
    eip = 0x002ac6e4   esp = 0xbfffa4b0   ebp = 0xbfffa538
    Found by: previous frame's frame pointer
14  libmozjs.dylib!js::Parser::argumentList(JSParseNode*) [jsparse.cpp:bb8801a4ac33 : 6865 + 0x7]
    eip = 0x002b43e4   esp = 0xbfffa540   ebp = 0xbfffa588
    Found by: previous frame's frame pointer
15  libmozjs.dylib!js::Parser::memberExpr(int) [jsparse.cpp:bb8801a4ac33 : 7103 + 0xe]
    eip = 0x002b4ad9   esp = 0xbfffa590   ebp = 0xbfffa608
    Found by: previous frame's frame pointer

Comment 1

[Phil Ringnalda (:philor)]

No ClaimTitle no cry.