751906 - crash in js_SweepAtomState

Status: RESOLVED DUPLICATE of bug 660272

(Core :: JavaScript Engine, defect)

Description

[Marcia Knous [:marcia]]

This bug was filed from the Socorro interface and is 
report bp-7b2d9cf5-bac1-4ce6-9920-4c1632120504 .
============================================================= 

Seen while looking at FF 13 B1 crash stats. https://crash-stats.mozilla.com/report/list?signature=%20js_SweepAtomState%28JSRuntime*%29. Some percentage of the crashes are startup crashes. First starting showing up in build 2012041404, 13.0a2,

Manual correlations:
js_SweepAtomState(JSRuntime*)|EXCEPTION_ACCESS_VIOLATION_READ (39 crashes)
    100% (39/39) vs.  77% (17274/22481) [e-mail] (Mozilla Labs - Test Pilot, https://addons.mozilla.org/addon/13661)
     18% (7/39) vs.   1% (297/22481) {73a6fe31-595d-460b-a920-fcc0f8843232} (NoScript, https://addons.mozilla.org/addon/722)
     18% (7/39) vs.   1% (335/22481) {9AA46F4F-4DC7-4c06-97AF-5035170634FE} (ImTranslator, https://addons.mozilla.org/addon/2257)
     15% (6/39) vs.   0% (7/22481) longurlplease@tseng
     15% (6/39) vs.   0% (8/22481) [e-mail]
     15% (6/39) vs.   0% (8/22481) [e-mail] (TrashMail.net, https://addons.mozilla.org/addon/1813)
     15% (6/39) vs.   0% (13/22481) [e-mail]
     15% (6/39) vs.   0% (16/22481) {d49175b3-3fd8-43b8-b28e-da5d47f3c398}
     15% (6/39) vs.   0% (16/22481) {99B98C2C-7274-45a3-A640-D9DF1A1C8460} (CookieCuller, https://addons.mozilla.org/addon/82)
     15% (6/39) vs.   0% (19/22481) [e-mail] (Click&Clean, https://addons.mozilla.org/addon/3100)
     15% (6/39) vs.   0% (30/22481) [e-mail] (gui:config, https://addons.mozilla.org/addon/5523)
     15% (6/39) vs.   0% (31/22481) [e-mail]
     15% (6/39) vs.   0% (79/22481) jid1-F9UJ2thwoAm5gQ@jetpack
     15% (6/39) vs.   0% (110/22481) {1A2D0EC4-75F5-4c91-89C4-3656F6E44B68} (Image Zoom, https://addons.mozilla.org/addon/139)
     15% (6/39) vs.   1% (114/22481) {3d7eb24f-2740-49df-8937-200b1cc08f8a} (Flashblock, https://addons.mozilla.org/addon/433)
     15% (6/39) vs.   1% (149/22481) {1BC9BA34-1EED-42ca-A505-6D2F1A935BBB}
     15% (6/39) vs.   1% (277/22481) [e-mail]
     15% (6/39) vs.   1% (301/22481) {4ED1F68A-5463-4931-9384-8FFF5ED91D92}
     15% (6/39) vs.   2% (429/22481) {a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} (WOT, https://addons.mozilla.org/addon/3456)
     18% (7/39) vs.   5% (1026/22481) {b9db16a4-6edc-47ec-a1f4-b86292ed211d} (Video DownloadHelper, https://addons.mozilla.org/addon/3006)
     21% (8/39) vs.   9% (1996/22481) {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} (Adblock Plus, https://addons.mozilla.org/addon/1865)
    100% (39/39) vs.  92% (20648/22481) {972ce4c6-7e08-4474-a285-3208198ce6fd} (Default, https://addons.mozilla.org/addon/8150)


Frame 	Module 	Signature 	Source
0 	mozjs.dll 	js_SweepAtomState 	js/src/jsatom.cpp:421
1 	mozjs.dll 	SweepPhase 	js/src/jsgc.cpp:3185
2 	mozjs.dll 	MarkAndSweep 	js/src/jsgc.cpp:3287
3 	mozjs.dll 	GCCycle 	js/src/jsgc.cpp:3635
4 	mozjs.dll 	Collect 	js/src/jsgc.cpp:3717
5 	mozjs.dll 	js::GCSlice 	js/src/jsgc.cpp:3743
6 	mozjs.dll 	js::IncrementalGC 	js/src/jsfriendapi.cpp:158
7 	xul.dll 	nsXPConnect::Collect 	js/xpconnect/src/nsXPConnect.cpp:422
8 	xul.dll 	nsXPConnect::GarbageCollect 	js/xpconnect/src/nsXPConnect.cpp:432
9 	xul.dll 	nsJSContext::GarbageCollectNow 	dom/base/nsJSEnvironment.cpp:3059
10 	xul.dll 	GCTimerFired 	dom/base/nsJSEnvironment.cpp:3181
11 	xul.dll 	nsTimerImpl::Fire 	xpcom/threads/nsTimerImpl.cpp:508
12 	xul.dll 	nsTimerEvent::Run 	xpcom/threads/nsTimerImpl.cpp:591
13 	xul.dll 	nsThread::ProcessNextEvent 	xpcom/threads/nsThread.cpp:657
14 	nspr4.dll 	_MD_CURRENT_THREAD 	nsprpub/pr/src/md/windows/w95thred.c:308
15 	xul.dll 	AncestorFilter::PushAncestor 	layout/style/nsCSSRuleProcessor.cpp:3320
16 	xul.dll 	MessageLoop::RunHandler 	ipc/chromium/src/base/message_loop.cc:201
17 	xul.dll 	MessageLoop::Run 	ipc/chromium/src/base/message_loop.cc:175
18 	xul.dll 	nsBaseAppShell::Run 	widget/xpwidgets/nsBaseAppShell.cpp:189
19 	xul.dll 	nsAppShell::Run 	widget/windows/nsAppShell.cpp:252
20 	xul.dll 	nsAppStartup::Run 	toolkit/components/startup/nsAppStartup.cpp:295
21 	xul.dll 	XRE_main 	toolkit/xre/nsAppRunner.cpp:3703
22 	msvcr100.dll 	msvcr100.dll@0x8b581 	
23 	firefox.exe 	wmain 	toolkit/xre/nsWindowsWMain.cpp:107
24 	msvcr100.dll 	_initterm 	f:\dd\vctools\crt_bld\self_x86\crt\src\crt0dat.c:872
25 	firefox.exe 	__tmainCRTStartup 	crtexe.c:552
26 	firefox.exe 	_SEH_epilog4 	
27 	kernel32.dll 	BaseProcessStart 	
28 	kernel32.dll 	GetCodePageFileInfo 	
29 	kernel32.dll 	BaseProcessStart 	
30 	firefox.exe 	pre_c_init

Comment 1

[Marcia Knous [:marcia]]

Some similarity to Bug 660272, but this one seems to be confined to FF 13.

Comment 2

[Bill McCloskey [inactive unless it's an emergency] (:billm)]

Yeah, it's the same bug. We just changed the parameter from a JSContext* to a JSRuntime*.