774700 - Intermittent crash during jsreftest.html?test=e4x/extensions/regress-352846-03.js [@ js::gc::MarkInternal<JSXML>]

Status: RESOLVED INVALID

(Core :: JavaScript Engine, defect)

Description

[Ed Morley [:emorley]]

Rev4 MacOSX Snow Leopard 10.6 mozilla-inbound debug test jsreftest on 2012-07-16 16:29:19 PDT for push c3d5bd5996be

slave: talos-r4-snow-013

https://tbpl.mozilla.org/php/getParsedLog.php?id=13586369&tree=Mozilla-Inbound

{
REFTEST TEST-START | file:///Users/cltbld/talos-slave/test/build/jsreftest/tests/jsreftest.html?test=e4x/extensions/regress-352846-02.js | 298 / 3397 (8%)
++DOMWINDOW == 112 (0x12a6dfae0) [serial = 544] [outer = 0x1006a3ad0]
BUGNUMBER: 352846
STATUS: Passing unrooted value to OBJ_DEFAULT_VALUE is GC hazard
REFTEST TEST-PASS | file:///Users/cltbld/talos-slave/test/build/jsreftest/tests/jsreftest.html?test=e4x/extensions/regress-352846-02.js | Section 1 of test - Passing unrooted value to OBJ_DEFAULT_VALUE is GC hazard  item 1
REFTEST INFO | Loading a blank page
++DOMWINDOW == 113 (0x140f268e0) [serial = 545] [outer = 0x1006a3ad0]
REFTEST TEST-START | file:///Users/cltbld/talos-slave/test/build/jsreftest/tests/jsreftest.html?test=e4x/extensions/regress-352846-03.js | 299 / 3397 (8%)
++DOMWINDOW == 114 (0x140f217c0) [serial = 546] [outer = 0x1006a3ad0]
Assertion failure: thing->compartment(), at ../../../js/src/gc/Marking.cpp:86
TEST-UNEXPECTED-FAIL | file:///Users/cltbld/talos-slave/test/build/jsreftest/tests/jsreftest.html?test=e4x/extensions/regress-352846-03.js | Exited with code 1 during test run
INFO | automation.py | Application ran for: 0:01:12.785665
INFO | automation.py | Reading PID log: /var/folders/Hs/HsDn6a9SG8idoIya6p9mtE+++TI/-Tmp-/tmpWiOBCjpidlog
Downloading symbols from: http://ftp.mozilla.org/pub/mozilla.org/firefox/tinderbox-builds/mozilla-inbound-macosx64-debug/1342480046/firefox-17.0a1.en-US.mac64.crashreporter-symbols.zip
PROCESS-CRASH | file:///Users/cltbld/talos-slave/test/build/jsreftest/tests/jsreftest.html?test=e4x/extensions/regress-352846-03.js | application crashed (minidump found)
Crash dump filename: /var/folders/Hs/HsDn6a9SG8idoIya6p9mtE+++TI/-Tmp-/tmpSC5tAo/minidumps/D7B28867-8FD4-4B17-A44D-9FC268BDF4DD.dmp
Operating system: Mac OS X
                  10.6.8 10K549
CPU: amd64
     family 6 model 23 stepping 10
     2 CPUs

Crash reason:  EXC_BAD_ACCESS / KERN_INVALID_ADDRESS
Crash address: 0x0

Thread 0 (crashed)
 0  XUL!js::gc::MarkInternal<JSXML> [Marking.cpp : 86 + 0x18]
    rbx = 0x8158dec0   r12 = 0x061df230   r13 = 0x08f021a0   r14 = 0x8158ded0
    r15 = 0x08f02000   rip = 0x03f1ec9d   rsp = 0x5fbfbb30   rbp = 0x5fbfbb70
    Found by: given as instruction pointer in context
 1  XUL!js_TraceXML [jsxml.cpp : 7338 + 0x13]
    rbx = 0x8158dec0   r12 = 0x8158dec0   r13 = 0x061df230   r14 = 0x061df000
    r15 = 0x5fbfbdc0   rip = 0x03e34c34   rsp = 0x5fbfbb80   rbp = 0x5fbfbba0
    Found by: call frame info
 2  XUL!js::GCMarker::processMarkStackOther [Marking.cpp : 903 + 0xe]
    rbx = 0x8158dec0   r12 = 0x5fbfbcf0   r13 = 0x5fbfbcf0   r14 = 0x061df000
    r15 = 0x5fbfbdc0   rip = 0x03f1bef4   rsp = 0x5fbfbbb0   rbp = 0x5fbfbc60
    Found by: call frame info
 3  XUL!js::GCMarker::drainMarkStack [Marking.cpp : 1249 + 0xa]
    rbx = 0x061df230   r12 = 0x5fbfbcf0   r13 = 0x061df000   r14 = 0x061df000
    r15 = 0x5fbfbdc0   rip = 0x03f1cc3b   rsp = 0x5fbfbc70   rbp = 0x5fbfbc90
    Found by: call frame info
 4  XUL!IncrementalMarkSlice [jsgc.cpp : 3733 + 0xb]
    rbx = 0x061df360   r12 = 0x061dfa60   r13 = 0x061df230   r14 = 0x061df000
    r15 = 0x5fbfbdc0   rip = 0x03cdb617   rsp = 0x5fbfbca0   rbp = 0x5fbfbd40
    Found by: call frame info
 5  XUL!GCCycle [jsgc.cpp : 3884 + 0x16]
    rbx = 0x012af548   r12 = 0x40c50000   r13 = 0x00000014   r14 = 0x40c50000
    r15 = 0x5fbfbdc0   rip = 0x03cdf39f   rsp = 0x5fbfbd50   rbp = 0x5fbfbe10
    Found by: call frame info
 6  XUL!Collect [jsgc.cpp : 3997 + 0x14]
    rbx = 0x061df000   r12 = 0x061df360   r13 = 0x00000001   r14 = 0x0000010c
    r15 = 0x00000009   rip = 0x03cdfc3d   rsp = 0x5fbfbe20   rbp = 0x5fbfbe80
    Found by: call frame info
 7  XUL!JS_TransplantObject [jsapi.cpp : 1583 + 0x9]
    rbx = 0x40c58080   r12 = 0x00000000   r13 = 0x006a3ad0   r14 = 0x40c3e080
    r15 = 0x016c1800   rip = 0x03c4ea20   rsp = 0x5fbfbe90   rbp = 0x5fbfc000
    Found by: call frame info
 8  XUL!nsGlobalWindow::SetNewDocument [nsGlobalWindow.cpp : 1975 + 0x15]
    rbx = 0x40c58080   r12 = 0x00000000   r13 = 0x006a3ad0   r14 = 0x006a3ce0
    r15 = 0x016c1800   rip = 0x0252d34c   rsp = 0x5fbfc010   rbp = 0x5fbfc2f0
    Found by: call frame info
 9  XUL!DocumentViewerImpl::InitInternal [nsDocumentViewer.cpp : 926 + 0xe]
    rbx = 0x00000000   r12 = 0x5fbfc380   r13 = 0x40f1c1e0   r14 = 0x02d60ff0
    r15 = 0x5fbfc3a0   rip = 0x01bcf839   rsp = 0x5fbfc300   rbp = 0x5fbfc410
}

Comment 1

[David Baron :dbaron: (⌚️UTC-4, no longer working on Mozilla)]

This bug was observed only on one or more of the six machines listed in
bug 787281 comment 11, which seem likely to have bad memory, disk, or
other hardware problem, based on the rate of failures on those machines
and the types of failures observed.

Therefore I'm marking this bug invalid, though it should be reopened if
it occurs on other (more reliable) hardware.