Closed Bug 602809 Opened 15 years ago Closed 10 years ago

crash [@ js::gc::MarkKind ]

Categories

(Core :: JavaScript Engine, defect)

Product:
Core
Component:
JavaScript Engine
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED WORKSFORME

People

(Reporter: scoobidiver, Unassigned)

Details

(Keywords: crash, regression)

Crash Data

Build: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:2.0b8pre) Gecko/20101007 Firefox/4.0b8pre This is a new crash signature. Crashes first appeared in b7pre/20100929 build. It is #103 top crasher in b7pre build for the last week. Signature js::gc::MarkKind UUID 1f163197-e097-495a-bc92-0bace2101007 Time 2010-10-07 11:14:58.403501 Uptime 5895 Last Crash 5906 seconds (1.6 hours) before submission Install Age 5895 seconds (1.6 hours) since version was first installed. Product Firefox Version 4.0b8pre Build ID 20101007042624 Branch 2.0 OS Windows NT OS Version 6.1.7600 CPU x86 CPU Info GenuineIntel family 6 model 30 stepping 5 Crash Reason EXCEPTION_ACCESS_VIOLATION_READ Crash Address 0xfb008 App Notes AdapterVendorID: 10de, AdapterDeviceID: 0e22 Frame Module Signature [Expand] Source 0 mozjs.dll js::gc::MarkKind js/src/jsgcinlines.h:391 1 mozjs.dll JS_CallTracer js/src/jsapi.cpp:2068 2 xul.dll WrappedNativeJSGCThingTracer js/src/xpconnect/src/xpcwrappednativescope.cpp:376 3 mozjs.dll JS_DHashTableEnumerate js/src/jsdhash.cpp:743 4 xul.dll XPCWrappedNativeScope::TraceJS js/src/xpconnect/src/xpcwrappednativescope.cpp:393 5 mozjs.dll mozjs.dll@0x478f The regression range is: http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=c257bfb8cad0&tochange=a60414d076b5 More reports at: http://crash-stats.mozilla.com/report/list?product=Firefox&query_search=signature&query_type=exact&query=&range_value=4&range_unit=weeks&hang_type=any&process_type=any&plugin_field=&plugin_query_type=&plugin_query=&do_query=1&admin=&signature=js%3A%3Agc%3A%3AMarkKind
The signatures of the GC function have changed in this regression range. This is also true for other bugs that were filed today. It would be good to know if this is a new crash or a pre-existing one where just the signature has changed. Is there a way to search for older crashes beginning with frame 1?
(In reply to comment #1) > Is there a way to search for older crashes beginning with frame 1? not really, but hope to have something like that soon. see bug https://bugzilla.mozilla.org/show_bug.cgi?id=480503 there is a temporary hack at http://people.mozilla.com/crash_stacks/ but that doesn't have historical data. maybe checking the beta 6 report against the beta 7 report would help to confirm stack shifts. http://people.mozilla.com/crash_stacks/stack-summary-4.0b6.txt http://people.mozilla.com/crash_stacks/stack-summary-4.0b7.txt
Crash Signature: [@ js::gc::MarkKind ]
Still exists. Low volume but still there.
It happens at a very low volume: * 36 crashes in 22.0 * 2 in 23.0b9 More reports at: https://crash-stats.mozilla.com/report/list?product=Firefox&signature=js%3A%3Agc%3A%3AMarkKind%28JSTracer*%2C+void**%2C+JSGCTraceKind%29
Crash Signature: [@ js::gc::MarkKind ] → [@ js::gc::MarkKind ] [@ js::gc::MarkKind(JSTracer*, void**, JSGCTraceKind) ]
Assignee: general → nobody
You need to log in before you can comment on or make changes to this bug.