754811 - Intermittent crash during tp5row [@ js::gc::PushMarkStack]

Status: RESOLVED WORKSFORME

(Core :: JavaScript Engine, defect)

Description

[Ed Morley [:emorley]]

Rev4 MacOSX Snow Leopard 10.6 profiling talos tprow on 2012-05-11 13:14:29 PDT for push 79fca16e047b

slave: talos-r4-snow-066

https://tbpl.mozilla.org/php/getParsedLog.php?id=11685680&tree=Profiling

{
NOISE: MOZ_EVENT_TRACE sample 1336768328082 71
NOISE: MOZ_EVENT_TRACE sample 1336768328421 339
NOISE: MOZ_EVENT_TRACE sample 1336768328457 35
NOISE: MOZ_EVENT_TRACE sample 1336768328481 23
NOISE: MOZ_EVENT_TRACE sample 1336768328609 127
NOISE: MOZ_EVENT_TRACE sample 1336768328636 27
NOISE: MOZ_EVENT_TRACE sample 1336768328685 48
NOISE: MOZ_EVENT_TRACE sample 1336768328758 72
NOISE: MOZ_EVENT_TRACE sample 1336768328790 32
NOISE: Cycle 1(4): loaded http://localhost/page_load_test/tp5/bild.de/www.bild.de/index.html (next: http://localhost/page_load_test/tp5/guardian.co.uk/www.guardian.co.uk/index.html)
NOISE: 
NOISE: __FAILbrowser non-zero return code (256)__FAIL
NOISE: Found crashdump: /var/folders/Hs/HsDn6a9SG8idoIya6p9mtE+++TI/-Tmp-/tmpwSOAk4/profile/minidumps/E31961C0-A60C-403E-9175-3123CF739672.dmp
Operating system: Mac OS X
                  10.6.8 10K549
CPU: amd64
     family 6 model 23 stepping 10
     2 CPUs

Crash reason:  EXC_BAD_ACCESS / 0x0000000d
Crash address: 0x0

Thread 0 (crashed)
 0  XUL!js::gc::PushMarkStack [Heap.h : 677 + 0x0]
    rbx = 0x479960b0   r12 = 0x06a5a188   r13 = 0x442003c0   r14 = 0x46428550
    r15 = 0x06a90168   rip = 0x0257d904   rsp = 0x5fbfb160   rbp = 0x5fbfb190
 1  XUL!js::gc::ScanShape [Marking.cpp : 539 + 0xa]
    rbx = 0x479960b0   r12 = 0x06a5a188   r13 = 0x1be30e48   r14 = 0x46428550
    r15 = 0x06a90168   rip = 0x0257deeb   rsp = 0x5fbfb1a0   rbp = 0x5fbfb1d0
 2  XUL!js::GCMarker::drainMarkStack [Marking.cpp : 519 + 0xa]
    rbx = 0x479969c0   r12 = 0x06a5a188   r13 = 0x1be30e48   r14 = 0x46428550
    r15 = 0x06a90168   rip = 0x0257f341   rsp = 0x5fbfb1e0   rbp = 0x5fbfb240
 3  XUL!EndMarkPhase [jsgc.cpp : 3008 + 0xb]
    rbx = 0x06a5a188   r12 = 0x06a5a218   r13 = 0x06a5a000   r14 = 0x5fbfb278
    r15 = 0x06a5a258   rip = 0x023e0350   rsp = 0x5fbfb250   rbp = 0x5fbfb2b0
 4  XUL!GCCycle [jsgc.cpp : 3277 + 0xb]
    rbx = 0x00000000   r12 = 0x06a5a258   r13 = 0x00000000   r14 = 0x00000000
    r15 = 0x00000000   rip = 0x023e3177   rsp = 0x5fbfb2c0   rbp = 0x5fbfb370
 5  XUL!Collect [jsgc.cpp : 3719 + 0x11]
    rbx = 0x06a5a000   r12 = 0x06a5a258   r13 = 0x06a5aa10   r14 = 0x00000000
    r15 = 0x00000000   rip = 0x023e36e9   rsp = 0x5fbfb380   rbp = 0x5fbfb3c0
 6  XUL!nsXPConnect::GarbageCollect [nsXPConnect.cpp : 427 + 0x8]
    rbx = 0x00000000   r12 = 0x00368000   r13 = 0x00000001   r14 = 0x00000015
    r15 = 0x1b96bb80   rip = 0x01a640ad   rsp = 0x5fbfb3d0   rbp = 0x5fbfb3d0
 7  XUL!nsJSContext::GarbageCollectNow [nsJSEnvironment.cpp : 3002 + 0xd]
    rbx = 0x00000000   r12 = 0x00368000   r13 = 0x00000001   r14 = 0x00000015
    r15 = 0x1b96bb80   rip = 0x016ecd5e   rsp = 0x5fbfb3e0   rbp = 0x5fbfb400
 8  XUL!nsDOMWindowUtils::GarbageCollect [nsDOMWindowUtils.cpp : 1005 + 0x10]
    rbx = 0x00368000   r12 = 0x00000000   r13 = 0x00000000   r14 = 0x5fbfb4b0
    r15 = 0x1b96bb80   rip = 0x016e8961   rsp = 0x5fbfb410   rbp = 0x5fbfb440
 9  XUL!NS_InvokeByIndex_P [xptcinvoke_x86_64_unix.cpp : 195 + 0x1]
    rbx = 0x00000003   r12 = 0x00000000   r13 = 0x02000650   r14 = 0x5fbfb4b0
    r15 = 0x1b96bb80   rip = 0x02000763   rsp = 0x5fbfb450   rbp = 0x5fbfb520
10  XUL!XPCWrappedNative::CallMethod [XPCWrappedNative.cpp : 3106 + 0x18]
    rbx = 0x5fbfbe18   r12 = 0x5fbfbe00   r13 = 0x00000001   r14 = 0x00000002
    r15 = 0x00000002   rip = 0x01a9cba2   rsp = 0x5fbfb530   rbp = 0x5fbfbf10
11  XUL!XPC_WN_CallMethod [XPCWrappedNativeJSOps.cpp : 1541 + 0x9]
    rbx = 0x06b00250   r12 = 0x1ba7fe20   r13 = 0x0032de00   r14 = 0x19b167c0
    r15 = 0x5fbfbf60   rip = 0x01aa3c11   rsp = 0x5fbfbf20   rbp = 0x5fbfc080
12  XUL!js::InvokeKernel [jscntxtinlines.h : 426 + 0x13]
    rbx = 0x06b00260   r12 = 0x00000000   r13 = 0x0032de00   r14 = 0xffffffff
    r15 = 0x06b00250   rip = 0x02419e54   rsp = 0x5fbfc090   rbp = 0x5fbfc170
}