718765 - crash js::mjit::ImmutableSync::allocReg

Status: VERIFIED FIXED

(Firefox for Android Graveyard :: General, defect)

Description

[Axel Hecht [:Pike]]

This bug was filed from the Socorro interface and is 
report bp-bfdabfc9-001e-497a-9428-1c1472120117 .
============================================================= 

This is a 100% reproducable crash on nightly on the web-facing entry page of http://www.spiegel.de/

I'm only seeing this today, so I think it's gotta be a regression in the last few days.

Comment 1

[Naoki Hirata :nhirata (please use needinfo instead of cc)]

no previous reports: https://crash-stats.mozilla.com/query/query?product=FennecAndroid&version=ALL%3AALL&range_value=30&range_unit=days&date=01%2F17%2F2012+12%3A27%3A15&query_search=signature&query_type=contains&query=js%3A%3Amjit%3A%3AImmutableSync%3A%3AallocReg&reason=&build_id=&process_type=any&hang_type=any&do_query=1

Comment 2

[Naoki Hirata :nhirata (please use needinfo instead of cc)]

Loads on yesterday's build 20120116.  regression range between yesterday and today.

Comment 4

[Naoki Hirata :nhirata (please use needinfo instead of cc)]

www.sunshine-live.de is another site to check.

Comment 5

[Scoobidiver (away)]

Here is the Windows version of this crash (no STR, 5 crashes in 9.0.1 over the last four weeks): bp-93fa14f1-c45e-48f5-9a81-b0cc62120113

Comment 6

[Mark Finkle (:mfinkle) (use needinfo?)]

We have a suspicion that this was caused by bug 708303. I just backed it out. We should watch crashes to see if they go away.

Comment 7

[Scoobidiver (away)]

It's #1 top crasher in 12.0a1.

(In reply to Mark Finkle (:mfinkle) from comment #6)
> We have a suspicion that this was caused by bug 708303. I just backed it
> out.
It will land in 12.0a1/20120119.

Comment 8

[Naoki Hirata :nhirata (please use needinfo instead of cc)]

Tinderbox Build : 

https://tbpl.mozilla.org/php/getParsedLog.php?id=8637431&tree=Firefox
http://ftp.mozilla.org/pub/mozilla.org/mobile/tinderbox-builds/mozilla-central-android/1326899412/

Site is painted bad, but it's no longer crashing with the tinderbox build.

Comment 9

[Cristian Nicolae (:xti)]

I was able to reproduce this issue on the latest Nightly build.

STR:
1. Go to news.google.com
2. Long tap on a news title and open it in a new tab
3. Switch to the new opened tab
4. Wait until the page is loaded

ER:
No crash should occur after step 4.

AR:
After step 4, Fennec crashes. Please see the attached crash log.
https://crash-stats.mozilla.com/report/index/bp-130f701d-daf3-4b4d-af45-d41982120119

Note:
This STR works just for this news so far: http://news.google.com/m/url?ei=R9gXT7HhBIOV8gPGTA&q=http://www.boston.com/news/nation/washington/articles/2012/01/19/a_qa_on_contested_internet_anti_piracy_bills/&site=news&usg=AFQjCNGGScnWr8qRxgAjse3W5ZAGYre5Pg


--
Mozilla/5.0 (Android;Linux armv7l;rv:12.0a1)Gecko/20120118
Firefox/12.0a1 Fennec/12.0a1
Device: Samsung Galaxy S
OS: Android 2.2

Comment 10

[Cristian Nicolae (:xti)]

Attachment: crash log

Comment 11

[Cristian Nicolae (:xti)]

(In reply to Naoki Hirata :nhirata from comment #8)
> Tinderbox Build : 
> 
> https://tbpl.mozilla.org/php/getParsedLog.php?id=8637431&tree=Firefox
> http://ftp.mozilla.org/pub/mozilla.org/mobile/tinderbox-builds/mozilla-
> central-android/1326899412/
> 
> Site is painted bad, but it's no longer crashing with the tinderbox build.

Seem that's working fine on this tinderbox build.

Comment 12

[Valentin Gosu [:valentin] (he/him)]

I get this crash by visiting the following website: http://www.ubervu.com/

Comment 13

[Scoobidiver (away)]

For those who can reproduce this crash reliably, can you test your STR in 12.0a1/20120119031105 where bug 708303 has been back out?

Comment 14

[Valentin Gosu [:valentin] (he/him)]

(In reply to Scoobidiver from comment #13)
> For those who can reproduce this crash reliably, can you test your STR in
> 12.0a1/20120119031105 where bug 708303 has been back out?

I can confirm that ubervu.com works on today's build of Firefox. Thanks!

Comment 15

[Naoki Hirata :nhirata (please use needinfo instead of cc)]

1/19/2012 build works for me.  Waiting to hear back from xti.

Comment 16

[Scoobidiver (away)]

The latest crashes occurred in 12.0a1/20120118031059, so it's fixed by the backout of bug 708303:
https://crash-stats.mozilla.com/report/list?signature=js%3A%3Amjit%3A%3AImmutableSync%3A%3AallocReg

Comment 17

[Cristian Nicolae (:xti)]

(In reply to Naoki Hirata :nhirata from comment #15)
> 1/19/2012 build works for me.  Waiting to hear back from xti.

It works for me too, on the latest Nightly build. I will mark this bug as verified fixed.

--
Mozilla/5.0 (Android;Linux armv7l;rv:12.0a1)Gecko/20120119
Firefox/12.0a1 Fennec/12.0a1
Device: Samsung Galaxy S
OS: Android 2.2

Comment 18

[Naoki Hirata :nhirata (please use needinfo instead of cc)]

Crash Stats show before the 1/19th build: https://crash-stats.mozilla.com/report/list?range_value=7&range_unit=days&date=2012-01-29&signature=js%3A%3Amjit%3A%3AImmutableSync%3A%3AallocReg&version=FennecAndroid%3A12.0a1

I think it's safe to ignore those builds.  Need to broadcast to update to 19th build or later.