712111 - Intermittent "Assertion failure: pos == wholeChars + wholeLength" in ecma_5/JSON/parse-mega-huge-array.js

Status: RESOLVED WORKSFORME

(Core :: JavaScript Engine, defect)

Description

[Matt Brubeck (:mbrubeck)]

https://tbpl.mozilla.org/php/getParsedLog.php?id=8031232&tree=Mozilla-Inbound
Rev4 MacOSX Snow Leopard 10.6 mozilla-inbound debug test jsreftest on 2011-12-19 06:11:58 PST for push 72954076df86

REFTEST TEST-PASS | file:///Users/cltbld/talos-slave/test/build/jsreftest/tests/jsreftest.html?test=ecma_5/JSON/parse-crockford-01.js |   item 1
REFTEST INFO | Loading a blank page
++DOMWINDOW == 45 (0x1247e0d18) [serial = 2737] [outer = 0x11f801a80]
REFTEST TEST-START | file:///Users/cltbld/talos-slave/test/build/jsreftest/tests/jsreftest.html?test=ecma_5/JSON/parse-mega-huge-array.js | 1411 / 3380 (41%)
++DOMWINDOW == 46 (0x12364ff08) [serial = 2738] [outer = 0x11f801a80]
667527: JSON.parse should parse arrays of essentially unlimited size
Assertion failure: pos == wholeChars + wholeLength, at /builds/slave/m-in-osx64-dbg/build/js/src/vm/String.cpp:242
TEST-UNEXPECTED-FAIL | file:///Users/cltbld/talos-slave/test/build/jsreftest/tests/jsreftest.html?test=ecma_5/JSON/parse-mega-huge-array.js | Exited with code 1 during test run
INFO | automation.py | Application ran for: 0:04:56.720879
INFO | automation.py | Reading PID log: /var/folders/Hs/HsDn6a9SG8idoIya6p9mtE+++TI/-Tmp-/tmpq_IzS8pidlog
PROCESS-CRASH | file:///Users/cltbld/talos-slave/test/build/jsreftest/tests/jsreftest.html?test=ecma_5/JSON/parse-mega-huge-array.js | application crashed (minidump found)
Crash dump filename: /var/folders/Hs/HsDn6a9SG8idoIya6p9mtE+++TI/-Tmp-/tmpLjUq59/minidumps/A1CB5E84-8081-4ED1-832D-F0646DEEEE0A.dmp
Operating system: Mac OS X
                  10.6.8 10K549
CPU: amd64
     family 6 model 23 stepping 10
     2 CPUs

Crash reason:  EXC_BAD_ACCESS / KERN_INVALID_ADDRESS
Crash address: 0x0

Thread 0 (crashed)
 0  XUL + 0x1a5e4
    rbx = 0x205e0ef4   r12 = 0x00000004   r13 = 0x44a2b1c0   r14 = 0x45500002
    r15 = 0x44a2b1c0   rip = 0x0101a5e4   rsp = 0x5fbfb7c0   rbp = 0x5fbfb7c0
    Found by: given as instruction pointer in context
 1  XUL + 0x2285be8
    rip = 0x03285be9   rsp = 0x5fbfb7d0
    Found by: stack scanning
 2  XUL + 0x24b3f87
    rip = 0x034b3f88   rsp = 0x5fbfb7f8
    Found by: stack scanning
 3  XUL + 0x215ad84
    rip = 0x0315ad85   rsp = 0x5fbfb830
    Found by: stack scanning
 4  XUL + 0x215acef
    rip = 0x0315acf0   rsp = 0x5fbfb870
    Found by: stack scanning
 5  XUL + 0x210c838
    rip = 0x0310c839   rsp = 0x5fbfb880
    Found by: stack scanning
 6  XUL + 0x24b3f87
    rip = 0x034b3f88   rsp = 0x5fbfb8a0
    Found by: stack scanning
 7  XUL + 0x2684693
    rip = 0x03684694   rsp = 0x5fbfb8a8
    Found by: stack scanning
 8  XUL + 0x20876bc
    rip = 0x030876bd   rsp = 0x5fbfb8c0
    Found by: stack scanning
 9  XUL + 0x20c0a9d
    rip = 0x030c0a9e   rsp = 0x5fbfb940
    Found by: stack scanning
10  XUL + 0x20e4776
    rip = 0x030e4777   rsp = 0x5fbfb9c0
    Found by: stack scanning
11  XUL + 0x12331
    rip = 0x01012332   rsp = 0x5fbfba10
    Found by: stack scanning

Comment 1

[Ed Morley [:emorley]]

Mass marking whiteboard:[orange] bugs WFM (to clean up TBPL bug suggestions) that:
* Haven't changed in > 6months
* Whose whiteboard contains none of the strings: {disabled,marked,random,fuzzy,todo,fails,failing,annotated,leave open,time-bomb}
* Passed a (quick) manual inspection of bug summary/whiteboard to ensure they weren't a false positive.

I've also gone through and searched for cases where the whiteboard wasn't labelled correctly after test disabling, by using attachment description & basic comment searches. However if the test for which this bug was about has in fact been disabled/annotated/..., please accept my apologies & reopen/mark the whiteboard appropriately so this doesn't get re-closed in the future (and please ping me via IRC or email so I can try to tweak the saved searches to avoid more edge cases).

Sorry for the spam! Filter on: #FFA500