Closed Bug 754946 Opened 8 years ago Closed 7 years ago

Intermittent crash in test_Prototype.html, browser_tabview_dragdrop.js, Shutdown | Exited with code -1073741819 during test run [@ js::gc::ArenaHeader::getAllocKind()] [@ js::gc::MarkKind(JSTracer *,void * *,JSGCTraceKind)]

Categories

(Core :: JavaScript Engine, defect, critical)

x86
Windows 7
defect
Not set
critical

Tracking

()

RESOLVED WORKSFORME

People

(Reporter: emorley, Unassigned)

References

Details

(Keywords: crash, intermittent-failure, Whiteboard: [js:t])

Crash Data

Rev3 WINNT 6.1 fx-team debug test mochitests-3/5 on 2012-05-12 12:57:23 PDT for push c758cc9b60e5

slave: talos-r3-w7-049

https://tbpl.mozilla.org/php/getParsedLog.php?id=11708229&tree=Fx-Team

{
2297 INFO TEST-START | /tests/dom/tests/mochitest/ajax/prototype/test_Prototype.html
++DOMWINDOW == 60 (16A9A7D8) [serial = 692] [outer = 07C80800]
++DOCSHELL 169473B0 == 13 [id = 303]
++DOMWINDOW == 61 (16A9BD80) [serial = 693] [outer = 00000000]
++DOMWINDOW == 62 (1116E300) [serial = 694] [outer = 16A9BD30]
++DOMWINDOW == 63 (110803D0) [serial = 695] [outer = 16A9BD30]
Assertion failure: allocated(), at e:\builds\moz2_slave\fx-team-w32-dbg\build\js\src\gc/Heap.h:497
TEST-UNEXPECTED-FAIL | /tests/dom/tests/mochitest/ajax/prototype/test_Prototype.html | Exited with code -1073741819 during test run
INFO | automation.py | Application ran for: 0:02:28.999000
INFO | automation.py | Reading PID log: c:\users\cltbld\appdata\local\temp\tmpqk8axzpidlog
Downloading symbols from: http://ftp.mozilla.org/pub/mozilla.org/firefox/tinderbox-builds/fx-team-win32-debug/1336846068/firefox-15.0a1.en-US.win32.crashreporter-symbols.zip
PROCESS-CRASH | /tests/dom/tests/mochitest/ajax/prototype/test_Prototype.html | application crashed (minidump found)
Crash dump filename: c:\users\cltbld\appdata\local\temp\tmpijdtqr\minidumps\59b58442-d2e8-495d-96b9-76535d3d75ce.dmp
Operating system: Windows NT
                  6.1.7600 
CPU: x86
     GenuineIntel family 6 model 23 stepping 10
     2 CPUs

Crash reason:  EXCEPTION_ACCESS_VIOLATION_WRITE
Crash address: 0x0

Thread 0 (crashed)
 0  mozjs.dll!js::gc::ArenaHeader::getAllocKind() [Heap.h:c758cc9b60e5 : 497 + 0x44]
    eip = 0x6e454014   esp = 0x002dad58   ebp = 0x002dad64   ebx = 0x12e95640
    esi = 0x6e301440   edi = 0x02f818c8   eax = 0x00000000   ecx = 0xdeb8bd2f
    edx = 0x6e3fe4d8   efl = 0x00210206
    Found by: given as instruction pointer in context
 1  mozjs.dll!js::gc::MarkKind(JSTracer *,void * *,JSGCTraceKind) [Marking.cpp:c758cc9b60e5 : 230 + 0x10]
    eip = 0x6e6b18ca   esp = 0x002dad60   ebp = 0x002dad64
    Found by: stack scanning
 2  mozjs.dll!js::gc::MarkValueInternal [Marking.cpp:c758cc9b60e5 : 329 + 0x17]
    eip = 0x6e6b1b64   esp = 0x002dad6c   ebp = 0x002dad8c
    Found by: call frame info
 3  mozjs.dll!js::gc::MarkCrossCompartmentSlot(JSTracer *,js::HeapSlot *,char const *) [Marking.cpp:c758cc9b60e5 : 427 + 0x1a]
    eip = 0x6e6b2238   esp = 0x002dad94   ebp = 0x002dada4
    Found by: call frame info
 4  mozjs.dll!js::CrossCompartmentWrapper::trace(JSTracer *,JSObject *) [jswrapper.cpp:c758cc9b60e5 : 899 + 0x18]
    eip = 0x6e5f900c   esp = 0x002dadac   ebp = 0x002dadb8
    Found by: call frame info
 5  mozjs.dll!proxy_TraceObject [jsproxy.cpp:c758cc9b60e5 : 1259 + 0x1a]
    eip = 0x6e5825bf   esp = 0x002dadc0   ebp = 0x002dadd0
    Found by: call frame info
 6  mozjs.dll!js::GCMarker::processMarkStackTop(js::SliceBudget &) [Marking.cpp:c758cc9b60e5 : 1092 + 0x3]
    eip = 0x6e6b0a5c   esp = 0x002dadd8   ebp = 0x002dae04
    Found by: call frame info
 7  mozjs.dll!js::GCMarker::drainMarkStack(js::SliceBudget &) [Marking.cpp:c758cc9b60e5 : 1136 + 0x7]
    eip = 0x6e6b0e88   esp = 0x002dae0c   ebp = 0x002dae20
    Found by: call frame info
 8  mozjs.dll!IncrementalMarkSlice [jsgc.cpp:c758cc9b60e5 : 3471 + 0x12]
    eip = 0x6e4f6cb7   esp = 0x002dae28   ebp = 0x002dae60
}

The top couple of frames are different, but the rest seems similar (to my untrained eyes) to bug 754856.
Assignee: nobody → general
Component: DOM → JavaScript Engine
QA Contact: general → general
Whiteboard: [orange] → [js:t][orange]
https://tbpl.mozilla.org/php/getParsedLog.php?id=15485714&tree=Mozilla-Inbound

Assertion failure: allocated(), at e:\builds\moz2_slave\m-in-w32-dbg\build\js\src\gc/Heap.h:513
...
PROCESS-CRASH | Shutdown | application crashed (minidump found)
Crash dump filename: c:\docume~1\cltbld\locals~1\temp\tmpes9i4d\minidumps\59f873ff-c26c-441d-a750-881038226bf2.dmp
Operating system: Windows NT
                  5.1.2600 Service Pack 2
CPU: x86
     GenuineIntel family 6 model 23 stepping 10
     2 CPUs

Crash reason:  EXCEPTION_BREAKPOINT
Crash address: 0xa246c1

Thread 0 (crashed)
 0  mozjs.dll!js::gc::ArenaHeader::getAllocKind() [Heap.h:e42062ef7433 : 513 + 0x90]
    eip = 0x00a246c1   esp = 0x0012bad0   ebp = 0x0012bae4   ebx = 0x7c801e16
    esi = 0x10261440   edi = 0x4a4ef000   eax = 0x00000000   ecx = 0x98ef46d1
    edx = 0x10361f48   efl = 0x00200212
    Found by: given as instruction pointer in context
 1  mozjs.dll!js::gc::GetGCThingTraceKind(void const *) [jsgcinlines.h:e42062ef7433 : 30 + 0x12]
    eip = 0x00ac5b0c   esp = 0x0012bae0   ebp = 0x0012bae4
    Found by: stack scanning
 2  xul.dll + 0xc6fe27
    eip = 0x0289fe28   esp = 0x0012baec   ebp = 0x0012baf0
    Found by: call frame info
etc.
Summary: Intermittent crash in test_Prototype.html | Exited with code -1073741819 during test run [@ js::gc::ArenaHeader::getAllocKind()] [@ js::gc::MarkKind(JSTracer *,void * *,JSGCTraceKind)] → Intermittent crash in test_Prototype.html, shutdown | Exited with code -1073741819 during test run [@ js::gc::ArenaHeader::getAllocKind()] [@ js::gc::MarkKind(JSTracer *,void * *,JSGCTraceKind)]
Whiteboard: [js:t][orange] → [js:t]
https://tbpl.mozilla.org/php/getParsedLog.php?id=20147880&tree=Mozilla-Inbound
Summary: Intermittent crash in test_Prototype.html, shutdown | Exited with code -1073741819 during test run [@ js::gc::ArenaHeader::getAllocKind()] [@ js::gc::MarkKind(JSTracer *,void * *,JSGCTraceKind)] → Intermittent crash in test_Prototype.html, browser_tabview_dragdrop.js, Shutdown | Exited with code -1073741819 during test run [@ js::gc::ArenaHeader::getAllocKind()] [@ js::gc::MarkKind(JSTracer *,void * *,JSGCTraceKind)]
Resolving WFM keyword:intermittent-failure bugs last modified >3 months ago, whose whiteboard contains none of:
{random,disabled,marked,fuzzy,todo,fails,failing,annotated,time-bomb,leave open}

There will inevitably be some false positives; for that (and the bugspam) I apologise. Filter on orangewfm.
Status: NEW → RESOLVED
Closed: 7 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.