Closed Bug 776222 Opened 13 years ago Closed 13 years ago

Android crash in WeakMap_set

Categories

(Core :: JavaScript Engine, defect)

Product:
Core
Component:
JavaScript Engine
Version:
15 Branch
Platform:
ARM
Android
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED WONTFIX
Tracking Flags:
Tracking Status
firefox15 --- affected
firefox16 --- unaffected

People

(Reporter: scoobidiver, Unassigned)

Details

(Keywords: crash, regression, Whiteboard: [native-crash][js:inv:p1])

Crash Data

It's #30 crasher in 15.0b1 and first appeared in 15.0a2/20120714. The Aurora regression range is: http://hg.mozilla.org/releases/mozilla-aurora/pushloghtml?fromchange=88382a387a66&tochange=7140e39a6427 It might be a regression from bug 771720. Signature WeakMap_set More Reports Search UUID 6a7b1372-e6bc-48c4-951b-238102120721 Date Processed 2012-07-21 05:28:04 Uptime 1481 Install Age 19.3 hours since version was first installed. Install Time 2012-07-20 10:12:13 Product FennecAndroid Version 15.0 Build ID 20120717123509 Release Channel beta OS Linux OS Version 0.0.0 Linux 3.0.15-I9100XWLP7-CL340913 #3 SMP PREEMPT Tue Apr 3 20:01:08 KST 2012 armv7l Build Architecture arm Build Architecture Info Crash Reason SIGSEGV Crash Address 0x198 App Notes AdapterVendorID: smdk4210, AdapterDeviceID: GT-I9100. AdapterDescription: 'Model: 'GT-I9100', Product: 'GT-I9100', Manufacturer: 'samsung', Hardware: 'smdk4210''. EGL? EGL+ GL Context? GL Context+ GL Layers? GL Layers+ samsung GT-I9100 samsung/GT-I9100/GT-I9100:4.0.3/IML74K/XWLP7:user/release-keys EMCheckCompatibility True Adapter Vendor ID smdk4210 Adapter Device ID GT-I9100 Frame Module Signature Source 0 libxul.so WeakMap_set js/src/jscompartment.h:92 1 libxul.so js::InvokeKernel js/src/jscntxtinlines.h:395 2 libxul.so js::Interpret js/src/jsinterp.cpp:2515 3 libxul.so js::RunScript js/src/jsinterp.cpp:266 4 libxul.so js::Invoke js/src/jsinterp.cpp:329 5 libxul.so JS_CallFunctionValue js/src/jsapi.cpp:5515 6 libxul.so nsXPCWrappedJSClass::CallMethod js/xpconnect/src/XPCWrappedJSClass.cpp:1474 7 libxul.so nsXPCWrappedJS::CallMethod js/xpconnect/src/XPCWrappedJS.cpp:579 8 libxul.so PrepareAndDispatch xpcom/reflect/xptcall/src/md/unix/xptcstubs_arm.cpp:105 9 libxul.so libxul.so@0xa5f39f 10 libxul.so nsObserverList::NotifyObservers xpcom/ds/nsObserverList.cpp:99 11 libxul.so nsObserverService::NotifyObservers xpcom/ds/nsObserverService.cpp:149 12 libxul.so nsBeforeFirstPaintDispatcher::Run layout/base/nsPresShell.cpp:499 13 libxul.so nsContentUtils::AddScriptRunner content/base/src/nsContentUtils.cpp:4904 14 libxul.so PresShell::UnsuppressAndInvalidate layout/base/nsPresShell.cpp:3546 15 libxul.so PresShell::UnsuppressPainting layout/base/nsPresShell.cpp:3593 16 libxul.so PresShell::sPaintSuppressionCallback layout/base/nsPresShell.cpp:1743 17 libxul.so nsTimerImpl::Fire xpcom/threads/nsTimerImpl.cpp:473 ... More reports at: https://crash-stats.mozilla.com/report/list?signature=WeakMap_set
Hmm. What was that other weakmap-y crash signature that was filed recently? I wonder if this has a similar range.
bug 774070 is what I meant. Similar, but not the same.
(In reply to Andrew McCreight [:mccr8] from comment #1) > Hmm. What was that other weakmap-y crash signature that was filed recently? > I wonder if this has a similar range. It's bug 774070, but that bug first appeared one build earlier.
A related crash signature started in 15.0a2/20120711 so the regression window in comment 0 is likely wrong. Another possible regression range might be: http://hg.mozilla.org/releases/mozilla-aurora/pushloghtml?fromchange=23c1df05027f&tochange=99faf1860ca5 More reports at: https://crash-stats.mozilla.com/report/list?signature=js%3A%3Agc%3A%3AMarkObjectUnbarriered
Crash Signature: [@ WeakMap_set] → [@ WeakMap_set] [@ js::gc::MarkObjectUnbarriered]
With combined signatures, it's #14 top crasher in 15.0b1. Aurora 16 is unaffected.
tracking-fennec: --- → ?
status-firefox15: --- → affected
status-firefox16: --- → unaffected
Whiteboard: [native-crash] → [native-crash][js:inv:p1]
Doesn't seem to be a top crasher and it's fixed in Fx16
Status: NEW → RESOLVED
Closed: 13 years ago
Resolution: --- → WONTFIX
tracking-fennec: ? → ---
You need to log in before you can comment on or make changes to this bug.