780129 - Intermittent dromaeo crash in dom-query.html [@ ContentUnbinder::UnbindSubtree]

Status: RESOLVED INVALID

(Core :: DOM: Core & HTML, defect)

Description

[Ed Morley [:emorley]]

Rev4 MacOSX Snow Leopard 10.6 ux talos dromaeo on 2012-08-02 15:09:01 PDT for push 980d8540850e

slave: talos-r4-snow-013

https://tbpl.mozilla.org/php/getParsedLog.php?id=14080490&tree=UX

{
Running test dromaeo_dom: 
		Started Thu, 02 Aug 2012 15:35:37
	Screen width/height:1600/1200
	colorDepth:24
	Browser inner width/height: 1024/681


browser_name:Firefox
browser_version:undefined
buildID:20120802135938

NOISE: RSS: Main: 97087488
NOISE: 
NOISE: Cycle 1(1): loaded http://localhost/page_load_test/dromaeo/dom-attr.html (next: http://localhost/page_load_test/dromaeo/dom-modify.html)
NOISE: RSS: Main: 209072128
NOISE: 
NOISE: Cycle 1(1): loaded http://localhost/page_load_test/dromaeo/dom-modify.html (next: http://localhost/page_load_test/dromaeo/dom-query.html)
NOISE: 
NOISE: __FAILbrowser non-zero return code (256)__FAIL
NOISE: RSS: Main: 97087488
NOISE: 
NOISE: Cycle 1(1): loaded http://localhost/page_load_test/dromaeo/dom-attr.html (next: http://localhost/page_load_test/dromaeo/dom-modify.html)
NOISE: RSS: Main: 209072128
NOISE: 
NOISE: Cycle 1(1): loaded http://localhost/page_load_test/dromaeo/dom-modify.html (next: http://localhost/page_load_test/dromaeo/dom-query.html)
NOISE: 
NOISE: __FAILbrowser non-zero return code (256)__FAIL
NOISE: Found crashdump: /var/folders/Hs/HsDn6a9SG8idoIya6p9mtE+++TI/-Tmp-/tmptkkGvi/profile/minidumps/14D5CF9D-7393-42BA-B09F-C908E3123D89.dmp
Operating system: Mac OS X
                  10.6.8 10K549
CPU: amd64
     family 6 model 23 stepping 10
     2 CPUs

Crash reason:  EXC_BAD_ACCESS / KERN_INVALID_ADDRESS
Crash address: 0x58643d40

Thread 0 (crashed)
 0  XUL!ContentUnbinder::UnbindSubtree [nsAttrAndChildArray.h : 53 + 0x9]
    rbx = 0x58403980   r12 = 0x78403960   r13 = 0x00000000   r14 = 0x4f66a000
    r15 = 0x58403980   rip = 0x014715d1   rsp = 0x5fbf3c10   rbp = 0x5fbf3c40

Thread 1
 0  libSystem.B.dylib + 0x19c0a
    rbx = 0x000cde50   r12 = 0x70ac5998   r13 = 0x70ac5d68   r14 = 0xffffffff
    r15 = 0x70ac5da8   rip = 0x857a6c0a   rsp = 0x000cdce8   rbp = 0x000cde90

Thread 2
 0  libSystem.B.dylib + 0x19c0a
    rbx = 0x00000000   r12 = 0x00392000   r13 = 0x00000000   r14 = 0x003b1280
    r15 = 0x00386400   rip = 0x857a6c0a   rsp = 0x05603bb8   rbp = 0x05603c00

Thread 3
 0  libSystem.B.dylib + 0x3ba6a
    rbx = 0x05581000   r12 = 0x003a3a08   r13 = 0x003a5b40   r14 = 0x00000001
    r15 = 0x00000000   rip = 0x857c8a6a   rsp = 0x05580ce8   rbp = 0x05580d60

Thread 4
 0  libSystem.B.dylib + 0x44932
    rbx = 0x00000001   r12 = 0x03e7fc18   r13 = 0x00000000   r14 = 0x00000002
    r15 = 0x06380ad0   rip = 0x857d1932   rsp = 0x063808c8   rbp = 0x06380a80

Thread 5
 0  libSystem.B.dylib + 0x3ba6a
    rbx = 0x06404000   r12 = 0x06086148   r13 = 0x060883c0   r14 = 0x00000001
    r15 = 0x00000000   rip = 0x857c8a6a   rsp = 0x06403d98   rbp = 0x06403e10

Thread 6
 0  libSystem.B.dylib + 0x3ba6a
    rbx = 0x071e2000   r12 = 0x0609cd88   r13 = 0x06089a40   r14 = 0x00000001
    r15 = 0x00000000   rip = 0x857c8a6a   rsp = 0x071e1dc8   rbp = 0x071e1e40

Thread 7
 0  libSystem.B.dylib + 0x3ba6a
    rbx = 0x07781000   r12 = 0x06260088   r13 = 0x0608a340   r14 = 0x00000001
    r15 = 0x00000000   rip = 0x857c8a6a   rsp = 0x07780d48   rbp = 0x07780dc0
}

Comment 1

[David Baron :dbaron: 🏴󠁵󠁳󠁣󠁡󠁿 ⌚UTC-8]

This bug was observed only on one or more of the six machines listed in
bug 787281 comment 11, which seem likely to have bad memory, disk, or
other hardware problem, based on the rate of failures on those machines
and the types of failures observed.

Therefore I'm marking this bug invalid, though it should be reopened if
it occurs on other (more reliable) hardware.