Closed Bug 779021 Opened 12 years ago Closed 12 years ago

IonMonkey: Random, intermittent crashes in AutoCopyFreeListToArenas

Categories

(Core :: JavaScript Engine, defect)

Product:
Core
Component:
JavaScript Engine
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED WORKSFORME

People

(Reporter: dvander, Unassigned)

References

(
URL
)

Details

(Whiteboard: [ion:p1:fx18]) 

This happens on random mochitest columns on what seems like every build. It started happening after a recent merge that changed how sweeping works. A sample failure log is in the URL field.

 0  libxul.so!AutoCopyFreeListToArenas::AutoCopyFreeListToArenas [jsgc.h : 325 + 0x18]
    eip = 0x02410e0f   esp = 0xbfac6ac0   ebp = 0xbfac6af8   ebx = 0x02d261b8
    esi = 0x00000003   edi = 0x0aeffb34   eax = 0x00000000   ecx = 0x0028232c
    edx = 0x00000000   efl = 0x00010246
    Found by: given as instruction pointer in context
 1  libxul.so!IncrementalCollectSlice [jsgc.cpp : 3935 + 0x14]
    eip = 0x02422e55   esp = 0xbfac6b00   ebp = 0xbfac6bc8   ebx = 0x02d261b8
    esi = 0x00000000   edi = 0x00000000
    Found by: call frame info
 2  libxul.so!ResetIncrementalGC [jsgc.cpp : 3838 + 0x23]
    eip = 0x02424d2f   esp = 0xbfac6bd0   ebp = 0xbfac6c18   ebx = 0x02d261b8
    esi = 0x097c96b8   edi = 0x097c8ebc
    Found by: call frame info
Status: NEW → RESOLVED
Closed: 12 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.