665838 - (Enter)MethodJIT crash while opening e-mails in the new Yahoo Mail interface

Status: RESOLVED WORKSFORME

(Core :: JavaScript Engine, defect)

Description

[Herbie D]

User-Agent:       Mozilla/5.0 (Windows NT 6.1; WOW64; rv:2.0.1) Gecko/20100101 Firefox/4.0.1
Build Identifier: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:2.0.1) Gecko/20100101 Firefox/4.0.1

CheckStackAndEnterMethodJIT
mozilla-2.0 - annotate - js/src/methodjit/MethodJIT.cpp

Reproducible: Always

Steps to Reproduce:
1.Open messages in Yahoo Mail
2.
3.

Actual Results:  
My browser has crashed 21 times in the past 30 days, and the vast majority of them, 17 are the same signature.

Comment 1

[Herbie D]

Attachment: RAW DUMP

Comment 2

[Thomas Ahlblom]

Link to the crash described in attachment 540691 [details]:
https://crash-stats.mozilla.com/report/index/70c1054c-71f3-4406-96ab-31c5c2110619

Duplicate of bug 595351?

Comment 3

[Herbie D]

(In reply to comment #2)
> Link to the crash described in attachment 540691 [details]:
> https://crash-stats.mozilla.com/report/index/70c1054c-71f3-4406-96ab-
> 31c5c2110619
> 
> Duplicate of bug 595351?

Sort of, here is why I posted it separatelyL

--- Comment #83 from Scoobidiver <[e-mail]> 2011-06-19 23:57:39 PDT ---
Herbie D,
This bug is a tracking bug because there are many different causes for this
kind of crash, each one requiring a specific patch.
If you have reliable steps to reproduce, file a new bug with your crash
signature in the Summary and Crash Signature fields and put 595351 in the
Blocks field.

Comment 4

[Scoobidiver (away)]

Does it happens at each e-mail opening?
When did it start? After you installed Firefox? With the new Yahoo Mail interface?

Comment 5

[Herbie D]

(In reply to comment #4)
> Does it happens at each e-mail opening?
> When did it start? After you installed Firefox? With the new Yahoo Mail
> interface?

It happens at most e-mail openings with the new Yahoo Mail interface. I changed in about:config image.mem.min_discard_timeout_ms from 200000 to 10000 then 50000. It has not crashed since them, and my memory leakage has reduced. I do not know it the two are related.

Comment 6

[Scoobidiver (away)]

Herbie, could you provide here the requested minidump (very large binary file) asked by dmandelin in bug 595351?
For instructions on how to get minidumps, see:
https://developer.mozilla.org/en/Capturing_a_minidump

Comment 7

[Herbie D]

(In reply to comment #6)
> Herbie, could you provide here the requested minidump (very large binary
> file) asked by dmandelin in bug 595351?
> For instructions on how to get minidumps, see:
> https://developer.mozilla.org/en/Capturing_a_minidump

Downloading it now, this will take a while, I believe I can only run it during an actual crash, could be a few days hence.

Comment 8

[David Mandelin [:dmandelin]]

(In reply to comment #7)
> (In reply to comment #6)
> > Herbie, could you provide here the requested minidump (very large binary
> > file) asked by dmandelin in bug 595351?
> > For instructions on how to get minidumps, see:
> > https://developer.mozilla.org/en/Capturing_a_minidump
> 
> Downloading it now, this will take a while, I believe I can only run it
> during an actual crash, could be a few days hence.

Don't worry about doing that. I got the minidump from Socorro. It does have the x86 code near the point of the crash--we'll see what we can learn from it.

(By the way, what I was requesting earlier was not minidumps, but rather full core dumps. That's because previous reporters were on Linux/Mac, where minidumps are less/not useful. For a Windows crash, the minidump at least has something. A full core dump would have more, but we'll see if we need it.)

Comment 9

[Fernando Hartmann]

happened two times now FF 6 beta !

ID: 43923879-8bf4-4477-ac20-01cd32110709
Signature: js::mjit::JaegerShot(JSContext*)

ID: f456c4dc-22c2-45b7-81c7-b842d2110709
Signature: js::mjit::JaegerShot(JSContext*)

Comment 10

[David Anderson [:dvander] - inactive, e-mail if emergency]

(In reply to comment #9)
> happened two times now FF 6 beta !
> 
> ID: 43923879-8bf4-4477-ac20-01cd32110709
> Signature: js::mjit::JaegerShot(JSContext*)
> 
> ID: f456c4dc-22c2-45b7-81c7-b842d2110709
> Signature: js::mjit::JaegerShot(JSContext*)

This is a separate bug that is already fixed in 7 and in the next beta for 6.

Comment 11

[David Anderson [:dvander] - inactive, e-mail if emergency]

Sorry, actually, this report is probably the same bug - can anyone reproduce the Yahoo mail crash on Aurora (7) or nightlies?

Comment 12

[Scoobidiver (away)]

Herbie D, does it still happen in Firefox 20 and Nightly with not JIT engine (http://nightly.mozilla.org/)?

Comment 13

[Herbie D]

Sorry about the delay. I thought this was solved years ago and it turned out to be so. I haven't had any problems on this module for a while. Thanks.