regress-280769-3.js | Exited with code 1 during test run

NEW
Unassigned

Status

()

--
critical
7 years ago
4 years ago

People

(Reporter: mats, Unassigned)

Tracking

({crash})

Trunk
x86_64
Mac OS X
crash
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

(Whiteboard: [js:t])

(Reporter)

Description

7 years ago
This is a Try push (based on mozilla-central rev 64187d60fae7),
but I'm pretty sure it's unrelated to my changes:
https://tbpl.mozilla.org/php/getParsedLog.php?id=11950038&tree=Try


REFTEST TEST-START | file:///Users/cltbld/talos-slave/test/build/jsreftest/tests/jsreftest.html?test=js1_5/Regress/regress-280769-3.js | 1962 / 3409 (57%)
++DOMWINDOW == 10 (0x126174a18) [serial = 3714] [outer = 0x1086bf3e0]
BUGNUMBER: 280769
STATUS: Do not crash on overflow of 64K boundary in number of classes in regexp
TEST-UNEXPECTED-FAIL | file:///Users/cltbld/talos-slave/test/build/jsreftest/tests/jsreftest.html?test=js1_5/Regress/regress-280769-3.js | Exited with code 1 during test run
INFO | automation.py | Application ran for: 0:07:01.996537
INFO | automation.py | Reading PID log: /var/folders/Hs/HsDn6a9SG8idoIya6p9mtE+++TI/-Tmp-/tmpRWeRM0pidlog
Downloading symbols from: http://ftp.mozilla.org/pub/mozilla.org/firefox/try-builds/mpalmgren@mozilla.com-e445217e4d50/try-macosx64-debug/firefox-15.0a1.en-US.mac64.crashreporter-symbols.zip
PROCESS-CRASH | file:///Users/cltbld/talos-slave/test/build/jsreftest/tests/jsreftest.html?test=js1_5/Regress/regress-280769-3.js | application crashed (minidump found)
Crash dump filename: /var/folders/Hs/HsDn6a9SG8idoIya6p9mtE+++TI/-Tmp-/tmpzYkYc7/minidumps/DEA3D465-E0DF-4282-B63B-3C605A9714BE.dmp
Operating system: Mac OS X
                  10.6.8 10K549
CPU: amd64
     family 6 model 23 stepping 10
     2 CPUs

Crash reason:  EXC_BAD_ACCESS / KERN_INVALID_ADDRESS
Crash address: 0x28000000

Thread 0 (crashed)
 0  XUL!JSC::Yarr::YarrGenerator::matchCharacterClass [YarrJIT.cpp : 194 + 0x3]
    rbx = 0x27e04570   r12 = 0x000fdd38   r13 = 0x000fdd38   r14 = 0x27e04510
    r15 = 0x5fbfaae0   rip = 0x03f084a3   rsp = 0x5fbfa5a0   rbp = 0x5fbfa6f0
    Found by: given as instruction pointer in context
 1  XUL!JSC::Yarr::YarrGenerator::generateTerm [YarrJIT.cpp : 879 + 0x10]
    rbx = 0x4087b960   r12 = 0x52d25978   r13 = 0x5fbfa8c0   r14 = 0x5fbfaae0
    r15 = 0x086bf7f0   rip = 0x03f0de8e   rsp = 0x5fbfa700   rbp = 0x5fbfa960
    Found by: call frame info
 2  XUL!JSC::Yarr::YarrGenerator::generate [YarrJIT.cpp : 1169 + 0xe]
    rbx = 0x07b6db80   r12 = 0x5fbfaae8   r13 = 0x52d25978   r14 = 0x5fbfaae0
    r15 = 0x086bf7f0   rip = 0x03f0e2f4   rsp = 0x5fbfa970   rbp = 0x5fbfaa40
    Found by: call frame info
 3  XUL!JSC::Yarr::YarrGenerator::compile [YarrJIT.cpp : 2422 + 0x4]
    rbx = 0x03f69408   r12 = 0x5fbfaae8   r13 = 0x0415f456   r14 = 0x03f69408
    r15 = 0x086bf7f0   rip = 0x03f110a5   rsp = 0x5fbfaa50   rbp = 0x5fbfaad0
    Found by: call frame info
 4  XUL!JSC::Yarr::jitCompile [YarrJIT.cpp : 2463 + 0x7]
    rbx = 0x23e585c8   r12 = 0x5fbfaae0   r13 = 0x086bf7f0   r14 = 0x5fbfb140
    r15 = 0x086bf7f0   rip = 0x03eff84e   rsp = 0x5fbfaae0   rbp = 0x5fbfb130
    Found by: call frame info
 5  XUL!js::detail::RegExpCode::compile [RegExpObject.cpp : 195 + 0xe]
    rbx = 0x23e585c8   r12 = 0x23e585a0   r13 = 0x086bf7f0   r14 = 0x5fbfb140
    r15 = 0x086bf7f0   rip = 0x03d8a9fc   rsp = 0x5fbfb140   rbp = 0x5fbfb240
    Found by: call frame info
 6  XUL!js::RegExpShared::compile [RegExpObject.cpp : 446 + 0xb]
    rbx = 0x0112c658   r12 = 0x23e585a0   r13 = 0x27a3d280   r14 = 0x23e585a0
    r15 = 0x086bf7f0   rip = 0x03d8e3d4   rsp = 0x5fbfb250   rbp = 0x5fbfb300
    Found by: call frame info
 7  XUL!js::RegExpCompartment::get [RegExpObject.cpp : 567 + 0x11]
    rbx = 0x0112c658   r12 = 0x23e585a0   r13 = 0xe9ac33d0   r14 = 0x00000000
    r15 = 0x086bf7f0   rip = 0x03d93fd3   rsp = 0x5fbfb310   rbp = 0x5fbfb3b0
    Found by: call frame info
 8  XUL!js::RegExpObject::createShared [RegExpObject.cpp : 591 + 0x1b]
    rbx = 0x27a3d280   r12 = 0x00000000   r13 = 0x0767fca0   r14 = 0x0767fce8
    r15 = 0x00000000   rip = 0x03d8ec6f   rsp = 0x5fbfb3c0   rbp = 0x5fbfb430
    Found by: call frame info
 9  XUL!ExecuteRegExp [RegExpObject-inl.h : 50 + 0x12]
    rbx = 0x00000000   r12 = 0x0767fca0   r13 = 0x00000001   r14 = 0x06eae0b0
    r15 = 0x00000001   rip = 0x03d9ade4   rsp = 0x5fbfb440   rbp = 0x5fbfb580

...
Whiteboard: [js:t]
(Assignee)

Updated

4 years ago
Assignee: general → nobody
You need to log in before you can comment on or make changes to this bug.