Closed Bug 781816 Opened 13 years ago Closed 13 years ago

Intermittent crash in jsreftest.html?test=e4x/XML/regress-324422-1.js [@ js::gc::MarkInternal<JSObject>]

Categories

(Core :: JavaScript Engine, defect)

Product:
Core
Component:
JavaScript Engine
Version:
14 Branch
Platform:
x86_64
macOS
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED INVALID

People

(Reporter: emorley, Unassigned)

References

Details

(Keywords: crash, intermittent-failure)

Crash Data

Rev4 MacOSX Snow Leopard 10.6 mozilla-beta debug test jsreftest on 2012-06-12 01:39:57 PDT for push 62cad754d390 slave: talos-r4-snow-041 https://tbpl.mozilla.org/php/getParsedLog.php?id=12579925&tree=Mozilla-Beta { REFTEST TEST-START | file:///Users/cltbld/talos-slave/test/build/jsreftest/tests/jsreftest.html?test=e4x/XML/regress-324422-1.js | 244 / 3406 (7%) ++DOMWINDOW == 26 (0x124021158) [serial = 440] [outer = 0x107ec7c80] BUGNUMBER: 324422 STATUS: Do not crash creating XML object with long initialiser --- NOTE: IN THIS TESTCASE, WE EXPECT EXIT CODE 0 --- --- NOTE: IN THIS TESTCASE, WE EXPECT EXIT CODE 5 --- STATUS: 10485760 TEST-UNEXPECTED-FAIL | file:///Users/cltbld/talos-slave/test/build/jsreftest/tests/jsreftest.html?test=e4x/XML/regress-324422-1.js | Exited with code 1 during test run INFO | automation.py | Application ran for: 0:01:08.063605 INFO | automation.py | Reading PID log: /var/folders/Hs/HsDn6a9SG8idoIya6p9mtE+++TI/-Tmp-/tmp4vWmVKpidlog Downloading symbols from: http://ftp.mozilla.org/pub/mozilla.org/firefox/tinderbox-builds/mozilla-beta-macosx64-debug/1339489705/firefox-14.0.en-US.mac64.crashreporter-symbols.zip PROCESS-CRASH | file:///Users/cltbld/talos-slave/test/build/jsreftest/tests/jsreftest.html?test=e4x/XML/regress-324422-1.js | application crashed (minidump found) Crash dump filename: /var/folders/Hs/HsDn6a9SG8idoIya6p9mtE+++TI/-Tmp-/tmpLO1v3y/minidumps/762EBF68-166A-4F29-BD01-E699729351AE.dmp Operating system: Mac OS X 10.6.8 10K549 CPU: amd64 family 6 model 23 stepping 10 2 CPUs Crash reason: EXC_BAD_ACCESS / KERN_INVALID_ADDRESS Crash address: 0x0 Thread 0 (crashed) 0 XUL!js::gc::MarkInternal<JSObject> [jsgcmark.cpp : 80 + 0x0] rbx = 0x91374560 r12 = 0x05383228 r13 = 0x00000000 r14 = 0x00000000 r15 = 0x91374578 rip = 0x03a4131b rsp = 0x5fbfb6b0 rbp = 0x5fbfb700 Found by: given as instruction pointer in context 1 XUL!js_TraceXML [jsxml.cpp : 7329 + 0x13] rbx = 0x91374560 r12 = 0x91374560 r13 = 0x05383228 r14 = 0x05383228 r15 = 0x05383000 rip = 0x03bbafa8 rsp = 0x5fbfb710 rbp = 0x5fbfb730 Found by: call frame info 2 XUL!js::GCMarker::processMarkStackOther [jsgcmark.cpp : 821 + 0xa] rbx = 0x91374560 r12 = 0x5fbfb840 r13 = 0x05383260 r14 = 0x05383228 r15 = 0x05383000 rip = 0x03a3aee0 rsp = 0x5fbfb740 rbp = 0x5fbfb7b0 Found by: call frame info 3 XUL!js::GCMarker::drainMarkStack [jsgcmark.cpp : 1131 + 0xa] rbx = 0x05383228 r12 = 0x5fbfb840 r13 = 0x05383260 r14 = 0x05383000 r15 = 0x05383000 rip = 0x03a3b8eb rsp = 0x5fbfb7c0 rbp = 0x5fbfb7e0 Found by: call frame info 4 XUL!GCCycle [jsgc.cpp : 3249 + 0x12] rbx = 0x011d9740 r12 = 0x00000014 r13 = 0x0748d000 r14 = 0x011d9610 r15 = 0x05383000 rip = 0x03a261fe rsp = 0x5fbfb7f0 rbp = 0x5fbfb8d0 Found by: call frame info 5 XUL!Collect [jsgc.cpp : 3692 + 0x11] rbx = 0x05383318 r12 = 0x05383000 r13 = 0x053839f8 r14 = 0x00000001 r15 = 0x5fbfb900 rip = 0x03a26f3e rsp = 0x5fbfb8e0 rbp = 0x5fbfb940 Found by: call frame info 6 XUL!js_InvokeOperationCallback [jscntxt.cpp : 870 + 0x11] rbx = 0x00000005 r12 = 0x05383000 r13 = 0x07ec8100 r14 = 0x06d721f8 r15 = 0x5fbfbd30 rip = 0x039c5992 rsp = 0x5fbfb950 rbp = 0x5fbfb970 Found by: call frame info 7 XUL!js_HandleExecutionInterrupt [jscntxt.cpp : 886 + 0x4] rbx = 0x00000005 r12 = 0x00000005 r13 = 0x07477e00 r14 = 0x06d721f8 r15 = 0x5fbfbd30 rip = 0x039c59b7 rsp = 0x5fbfb980 rbp = 0x5fbfb980 Found by: call frame info 8 XUL!js::Interpret [jsinterp.cpp : 1901 + 0x7] rbx = 0x00000005 r12 = 0x00000005 r13 = 0x07477e00 r14 = 0x06d721f8 r15 = 0x5fbfbd30 rip = 0x03a83f61 rsp = 0x5fbfb990 rbp = 0x5fbfc560 Found by: call frame info 9 XUL!js::RunScript [jsinterp.cpp : 475 + 0xc] rbx = 0x27a5cce0 r12 = 0x07ec8100 r13 = 0x06d72030 r14 = 0x074f42e0 r15 = 0x06d72030 rip = 0x03a9481d rsp = 0x5fbfc570 rbp = 0x5fbfc5c0 }
Rev4 MacOSX Snow Leopard 10.6 mozilla-aurora debug test jsreftest on 2012-06-14 11:47:51 PDT for push 2c15c260e7b9 slave: talos-r4-snow-041 https://tbpl.mozilla.org/php/getParsedLog.php?id=12668487&tree=Mozilla-Aurora { REFTEST TEST-START | file:///Users/cltbld/talos-slave/test/build/jsreftest/tests/jsreftest.html?test=e4x/XML/regress-324422-1.js | 244 / 3409 (7%) ++DOMWINDOW == 24 (0x11e4f83e0) [serial = 440] [outer = 0x1088f30d0] BUGNUMBER: 324422 STATUS: Do not crash creating XML object with long initialiser --- NOTE: IN THIS TESTCASE, WE EXPECT EXIT CODE 0 --- --- NOTE: IN THIS TESTCASE, WE EXPECT EXIT CODE 5 --- STATUS: 10485760 TEST-UNEXPECTED-FAIL | file:///Users/cltbld/talos-slave/test/build/jsreftest/tests/jsreftest.html?test=e4x/XML/regress-324422-1.js | Exited with code 1 during test run INFO | automation.py | Application ran for: 0:01:07.268822 INFO | automation.py | Reading PID log: /var/folders/Hs/HsDn6a9SG8idoIya6p9mtE+++TI/-Tmp-/tmpiY3Eiupidlog Downloading symbols from: http://ftp.mozilla.org/pub/mozilla.org/firefox/tinderbox-builds/mozilla-aurora-macosx64-debug/1339694549/firefox-15.0a2.en-US.mac64.crashreporter-symbols.zip PROCESS-CRASH | file:///Users/cltbld/talos-slave/test/build/jsreftest/tests/jsreftest.html?test=e4x/XML/regress-324422-1.js | application crashed (minidump found) Crash dump filename: /var/folders/Hs/HsDn6a9SG8idoIya6p9mtE+++TI/-Tmp-/tmp7qvFcE/minidumps/08920A6C-3E2F-4A96-B5EA-79F7709EAA50.dmp Operating system: Mac OS X 10.6.8 10K549 CPU: amd64 family 6 model 23 stepping 10 2 CPUs Crash reason: EXC_BAD_ACCESS / KERN_INVALID_ADDRESS Crash address: 0x0 Thread 0 (crashed) 0 XUL!js::gc::MarkInternal<JSObject> [Marking.cpp : 84 + 0x0] rbx = 0x060e3230 r12 = 0x060e3230 r13 = 0x00000000 r14 = 0x00000000 r15 = 0x90bbe578 rip = 0x03e703bb rsp = 0x5fbfb6e0 rbp = 0x5fbfb730 Found by: given as instruction pointer in context 1 XUL!js_TraceXML [jsxml.cpp : 7290 + 0x13] rbx = 0x060e3230 r12 = 0x90bbe560 r13 = 0x060e3230 r14 = 0x5fbfb8d0 r15 = 0x060e3000 rip = 0x03d48e78 rsp = 0x5fbfb740 rbp = 0x5fbfb760 Found by: call frame info 2 XUL!js::GCMarker::processMarkStackOther [Marking.cpp : 879 + 0xe] rbx = 0x060e3230 r12 = 0x90bbe560 r13 = 0x060e3268 r14 = 0x5fbfb8d0 r15 = 0x060e3000 rip = 0x03e68bed rsp = 0x5fbfb770 rbp = 0x5fbfb840 Found by: call frame info 3 XUL!js::GCMarker::drainMarkStack [Marking.cpp : 1224 + 0xa] rbx = 0x060e3230 r12 = 0x5fbfb8d0 r13 = 0x060e3268 r14 = 0x060e3000 r15 = 0x060e3000 rip = 0x03e69e7b rsp = 0x5fbfb850 rbp = 0x5fbfb870 Found by: call frame info 4 XUL!GCCycle [jsgc.cpp : 3345 + 0x12] rbx = 0x00bd2340 r12 = 0x00000014 r13 = 0x2895f000 r14 = 0x00bd2210 r15 = 0x060e3000 rip = 0x03badaae rsp = 0x5fbfb880 rbp = 0x5fbfb960 Found by: call frame info 5 XUL!Collect [jsgc.cpp : 3802 + 0x11] rbx = 0x060e3320 r12 = 0x060e3000 r13 = 0x00000001 r14 = 0x5fbfb990 r15 = 0x000000e3 rip = 0x03bae841 rsp = 0x5fbfb970 rbp = 0x5fbfb9d0 Found by: call frame info 6 XUL!js_InvokeOperationCallback [jscntxt.cpp : 908 + 0x11] rbx = 0x00000005 r12 = 0x060e3000 r13 = 0x088f34e0 r14 = 0x25baeb00 r15 = 0x07b4d949 rip = 0x03b45a82 rsp = 0x5fbfb9e0 rbp = 0x5fbfba00 Found by: call frame info 7 XUL!js_HandleExecutionInterrupt [jscntxt.cpp : 924 + 0x4] rbx = 0x00000005 r12 = 0x28953a00 r13 = 0x00000005 r14 = 0x25baeb00 r15 = 0x07b4d949 rip = 0x03b45aa7 rsp = 0x5fbfba10 rbp = 0x5fbfba10 Found by: call frame info 8 XUL!js::Interpret [jsinterp.cpp : 1651 + 0x7] rbx = 0x00000005 r12 = 0x28953a00 r13 = 0x00000005 r14 = 0x25baeb00 r15 = 0x07b4d949 rip = 0x03bfdd3e rsp = 0x5fbfba20 rbp = 0x5fbfc5c0 Found by: call frame info 9 XUL!js::RunScript [jsinterp.cpp : 266 + 0xc] rbx = 0x289bd060 r12 = 0x088f34e0 r13 = 0x28949f70 r14 = 0x070bb030 r15 = 0x070bb030 rip = 0x03c0c7bd rsp = 0x5fbfc5d0 rbp = 0x5fbfc620 }
talos-r4-snow-041 again... Rev4 MacOSX Snow Leopard 10.6 mozilla-inbound debug test jsreftest on 2012-08-10 07:39:38 PDT for push 4483bada42be slave: talos-r4-snow-041 https://tbpl.mozilla.org/php/getParsedLog.php?id=14293830&tree=Mozilla-Inbound
This bug was observed only on one or more of the six machines listed in bug 787281 comment 11, which seem likely to have bad memory, disk, or other hardware problem, based on the rate of failures on those machines and the types of failures observed. Therefore I'm marking this bug invalid, though it should be reopened if it occurs on other (more reliable) hardware.
Status: NEW → RESOLVED
Closed: 13 years ago
Resolution: --- → INVALID
Whiteboard: [orange]
You need to log in before you can comment on or make changes to this bug.