Closed Bug 627712 Opened 13 years ago Closed 11 years ago

Crash in js::mjit::JITScript::purgePICs @ js::mjit::ic::BasePolyIC::releasePools

Categories

(Core :: JavaScript Engine, defect)

x86
Windows 7
defect
Not set
critical

Tracking

()

RESOLVED INVALID

People

(Reporter: scoobidiver, Unassigned)

References

Details

(Keywords: crash)

Crash Data

It is a new crash signature in the trunk.
It is #108 top crasher in 4.0b9 for the last week.

Signature	js::mjit::ic::BasePolyIC::releasePools()
UUID	bbe93bc3-7666-4578-a02e-ca3db2110117
Time 	2011-01-17 08:20:30.563125
Uptime	63762
Last Crash	146311 seconds (1.7 days) before submission
Install Age	146292 seconds (1.7 days) since version was first installed.
Product	Firefox
Version	4.0b9
Build ID	20110110191547
Branch	2.0
OS	Windows NT
OS Version	6.1.7600
CPU	x86
CPU Info	AuthenticAMD family 16 model 4 stepping 3
Crash Reason	EXCEPTION_ACCESS_VIOLATION_WRITE
Crash Address	0x2000
App Notes 	AdapterVendorID: 10de, AdapterDeviceID: 0615

Frame 	Module 	Signature [Expand] 	Source
0 	mozjs.dll 	js::mjit::ic::BasePolyIC::releasePools 	js/src/methodjit/PolyIC.h:287
1 	mozjs.dll 	js::mjit::JITScript::purgePICs 	js/src/methodjit/PolyIC.cpp:2773
2 	mozjs.dll 	JSCompartment::purge 	js/src/jscompartment.cpp:476
3 	mozjs.dll 	PreGCCleanup 	js/src/jsgc.cpp:2261
4 	mozjs.dll 	GCUntilDone 	js/src/jsgc.cpp:2725
5 	mozjs.dll 	JS_GC 	js/src/jsapi.cpp:2547
6 	xul.dll 	nsXPConnect::Collect 	js/src/xpconnect/src/nsXPConnect.cpp:407
7 	xul.dll 	nsXPConnect::GarbageCollect 	js/src/xpconnect/src/nsXPConnect.cpp:415
8 	xul.dll 	nsJSContext::CC 	dom/base/nsJSEnvironment.cpp:3630
9 	xul.dll 	nsThread::ProcessNextEvent 	xpcom/threads/nsThread.cpp:649
10 	xul.dll 	mozilla::ipc::MessagePump::Run 	ipc/glue/MessagePump.cpp:134
11 	xul.dll 	xul.dll@0xb20297 	
12 	xul.dll 	MessageLoop::RunInternal 	ipc/chromium/src/base/message_loop.cc:219
13 	xul.dll 	MessageLoop::RunHandler 	ipc/chromium/src/base/message_loop.cc:202
14 	mozcrt19.dll 	_VEC_memzero 	
15 	xul.dll 	xul.dll@0x35dcad 	
16 	firefox.exe 	firefox.exe@0x1bb7 	
17 	ntdll.dll 	WinSqmSetIfMaxDWORD 	
18 	ntdll.dll 	_RtlUserThreadStart 	
19 	firefox.exe 	firefox.exe@0x186f 	
20 	firefox.exe 	firefox.exe@0x186f 

More reports at:
http://crash-stats.mozilla.com/report/list?range_value=4&range_unit=weeks&signature=js%3A%3Amjit%3A%3Aic%3A%3ABasePolyIC%3A%3AreleasePools%28%29&version=Firefox%3A4.0b9
Crash Signature: [@ js::mjit::ic::BasePolyIC::releasePools() ]
In Firefox, it's a low volume crash.

The stack now looks like:
rame 	Module 	Signature [Expand] 	Source
0 	mozjs.dll 	js::mjit::ic::BasePolyIC::releasePools 	js/src/methodjit/PolyIC.h:187
1 	mozjs.dll 	js::mjit::JITScript::purgePICs 	js/src/methodjit/PolyIC.cpp:3260
2 	mozjs.dll 	js::mjit::ic::PurgePICs 	js/src/methodjit/PolyIC.cpp:3275
3 	mozjs.dll 	JSCompartment::sweep 	js/src/jscompartment.cpp:561
4 	mozjs.dll 	SweepPhase 	js/src/jsgc.cpp:2313
5 	mozjs.dll 	MarkAndSweep 	js/src/jsgc.cpp:2406
6 	mozjs.dll 	GCCycle 	js/src/jsgc.cpp:2649
7 	mozjs.dll 	js_GC 	js/src/jsgc.cpp:2735
8 	mozjs.dll 	JS_CompartmentGC 	js/src/jsapi.cpp:2616
9 	mozjs.dll 	JS_GC 	js/src/jsapi.cpp:2623
10 	xul.dll 	nsXPConnect::Collect 	js/src/xpconnect/src/nsXPConnect.cpp:415
11 	xul.dll 	nsXPConnect::GarbageCollect 	js/src/xpconnect/src/nsXPConnect.cpp:423
12 	xul.dll 	nsJSContext::GarbageCollectNow 	dom/base/nsJSEnvironment.cpp:3189
13 	xul.dll 	nsTimerImpl::Fire 	xpcom/threads/nsTimerImpl.cpp:424
14 	xul.dll 	nsTimerEvent::Run 	xpcom/threads/nsTimerImpl.cpp:520

More reports at:
https://crash-stats.mozilla.com/report/list?signature=js%3A%3Amjit%3A%3Aic%3A%3ABasePolyIC%3A%3AreleasePools%28%29
Summary: Crash [@ js::mjit::ic::BasePolyIC::releasePools() ] → Crash in js::mjit::JITScript::purgePICs @ js::mjit::ic::BasePolyIC::releasePools
JM is gone.
Status: NEW → RESOLVED
Closed: 11 years ago
Resolution: --- → INVALID
You need to log in before you can comment on or make changes to this bug.