Last Comment Bug 717173 - Crash @ JS_ReportPendingException
: Crash @ JS_ReportPendingException
Status: RESOLVED FIXED
: crash, regression
Product: Core
Classification: Components
Component: DOM (show other bugs)
: Trunk
: All All
: -- critical (vote)
: mozilla12
Assigned To: Ben Turner (not reading bugmail, use the needinfo flag!)
:
:
Mentors:
Depends on:
Blocks: 713069
  Show dependency treegraph
 
Reported: 2012-01-10 23:51 PST by Scoobidiver (away)
Modified: 2012-01-13 01:09 PST (History)
4 users (show)
See Also:
Crash Signature:
QA Whiteboard:
Iteration: ---
Points: ---
Has Regression Range: ---
Has STR: ---


Attachments
Patch, v1 (611 bytes, patch)
2012-01-11 08:08 PST, Ben Turner (not reading bugmail, use the needinfo flag!)
no flags Details | Diff | Splinter Review
Patch, v2 (1.02 KB, patch)
2012-01-11 16:23 PST, Ben Turner (not reading bugmail, use the needinfo flag!)
khuey: review+
Details | Diff | Splinter Review

Description Scoobidiver (away) 2012-01-10 23:51:23 PST
It's a new crash signature that first appeared in 12.0a1/20120101.
The regression window is:
http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=8f658d460c3d&tochange=d77b056ed4bd

Stacks are various:
Frame 	Module 	Signature [Expand] 	Source
0 	XUL 	JS_ReportPendingException 	js/src/jsapi.cpp:6497
1 	XUL 	mozilla::dom::workers::WorkerRunnable::Dispatch 	dom/workers/WorkerPrivate.cpp:1545
2 	XUL 	mozilla::dom::workers::WorkerPrivateParent<mozilla::dom::workers::WorkerPrivate>::NotifyPrivate 	dom/workers/WorkerPrivate.cpp:1869
3 	XUL 	mozilla::dom::workers::WorkerPrivateParent<mozilla::dom::workers::WorkerPrivate>::FinalizeInstance
...

Frame 	Module 	Signature [Expand] 	Source
0 	xul.dll 	JS_ReportPendingException 	js/src/jsapi.cpp:6497
1 	mozutils.dll 	arena_run_dalloc 	memory/jemalloc/jemalloc.c:3776
2 	xul.dll 	mozilla::dom::workers::WorkerRunnable::PostDispatch 	dom/workers/WorkerPrivate.cpp:1620
3 	xul.dll 	mozilla::dom::workers::WorkerRunnable::Dispatch 	dom/workers/WorkerPrivate.cpp:1545
4 	nspr4.dll 	MD_CURRENT_THREAD 	nsprpub/pr/src/md/windows/w95thred.c:308
5 	mozutils.dll 	je_malloc 	memory/jemalloc/jemalloc.c:6306
6 	xul.dll 	mozilla::dom::workers::WorkerControlRunnable::WorkerControlRunnable 	dom/workers/WorkerPrivate.h:168
7 	mozutils.dll 	je_realloc 	memory/jemalloc/jemalloc.c:6525
8 	xul.dll 	nsRefPtr<mozilla::dom::indexedDB::IDBKeyRange>::nsRefPtr<mozilla::dom::indexedDB::IDBKeyRange> 	obj-firefox/dist/include/nsAutoPtr.h:931
9 	xul.dll 	mozilla::dom::workers::WorkerPrivateParent<mozilla::dom::workers::WorkerPrivate>::NotifyPrivate 	dom/workers/WorkerPrivate.cpp:1869
10 	xul.dll 	mozilla::dom::workers::WorkerPrivateParent<mozilla::dom::workers::WorkerPrivate>::FinalizeInstance
...

Frame 	Module 	Signature [Expand] 	Source
0 	mozjs.dll 	JS_ReportPendingException 	js/src/jsapi.cpp:6483
1 	xul.dll 	mozilla::dom::workers::WorkerRunnable::PostDispatch 	dom/workers/WorkerPrivate.cpp:1620
2 	xul.dll 	mozilla::dom::workers::WorkerRunnable::Dispatch 	dom/workers/WorkerPrivate.cpp:1545
3 	xul.dll 	mozilla::dom::workers::WorkerPrivateParent<mozilla::dom::workers::WorkerPrivate>::NotifyPrivate 	dom/workers/WorkerPrivate.cpp:1869
4 	xul.dll 	mozilla::dom::workers::WorkerPrivateParent<mozilla::dom::workers::WorkerPrivate>::TerminatePrivate 	dom/workers/WorkerPrivate.h:251
5 	xul.dll 	mozilla::dom::workers::WorkerPrivateParent<mozilla::dom::workers::WorkerPrivate>::FinalizeInstance 	dom/workers/WorkerPrivate.cpp:1961
6 	xul.dll 	`anonymous namespace'::ChromeWorker::Finalize 	dom/workers/Worker.cpp:402
...

More reports at:
https://crash-stats.mozilla.com/report/list?signature=JS_ReportPendingException
Comment 1 Kyle Huey [:khuey] (Exited; not receiving bugmail, email if necessary) 2012-01-11 00:12:09 PST
We're calling JS_SetPendingException with a null cx.

https://crash-stats.mozilla.com/report/index/a8c43be6-a0c2-4133-935e-674442120110 has a nice stack.
Comment 2 Ben Turner (not reading bugmail, use the needinfo flag!) 2012-01-11 08:08:04 PST
Created attachment 587702 [details] [diff] [review]
Patch, v1

Oops.
Comment 3 Kyle Huey [:khuey] (Exited; not receiving bugmail, email if necessary) 2012-01-11 08:16:13 PST
Comment on attachment 587702 [details] [diff] [review]
Patch, v1

Review of attachment 587702 [details] [diff] [review]:
-----------------------------------------------------------------

We want to avoid calling ModifyBusyCount with a null cx too, no?
Comment 4 Ben Turner (not reading bugmail, use the needinfo flag!) 2012-01-11 16:23:44 PST
Created attachment 587870 [details] [diff] [review]
Patch, v2

Yeah, I thought they were safe, but they aren't.
Comment 5 Ben Turner (not reading bugmail, use the needinfo flag!) 2012-01-12 08:56:27 PST
https://hg.mozilla.org/integration/mozilla-inbound/rev/b3b6bca8a02a
Comment 6 Marco Bonardo [::mak] 2012-01-13 01:09:27 PST
https://hg.mozilla.org/mozilla-central/rev/b3b6bca8a02a

Note You need to log in before you can comment on or make changes to this bug.