Closed Bug 781820 Opened 12 years ago Closed 12 years ago

Intermittent crash in jsreftest.html?test=e4x/XML/regress-324422-1.js [@ js::gc::MarkObject]

Categories

(Core :: JavaScript Engine, defect)

16 Branch
x86_64
macOS
defect
Not set
critical

Tracking

()

RESOLVED INVALID

People

(Reporter: emorley, Unassigned)

References

Details

(Keywords: crash, intermittent-failure)

Crash Data

Rev4 MacOSX Snow Leopard 10.6 try opt test jsreftest on 2012-06-22 13:37:14 PDT for push 41c8607264be

slave: talos-r4-snow-041

https://tbpl.mozilla.org/php/getParsedLog.php?id=12910725&tree=Try#error2

{
REFTEST TEST-START | file:///Users/cltbld/talos-slave/test/build/jsreftest/tests/jsreftest.html?test=e4x/XML/regress-638982.js | 240 / 3410 (7%)
REFTEST TEST-PASS | file:///Users/cltbld/talos-slave/test/build/jsreftest/tests/jsreftest.html?test=e4x/XML/regress-638982.js | Section 0 of test - Mark properties of XML.prototype as unknown  item 1
REFTEST INFO | Loading a blank page
REFTEST TEST-KNOWN-FAIL | file:///Users/cltbld/talos-slave/test/build/jsreftest/tests/jsreftest.html?test=e4x/XML/13.4.4.1.js | (SKIP)
REFTEST TEST-KNOWN-FAIL | file:///Users/cltbld/talos-slave/test/build/jsreftest/tests/jsreftest.html?test=e4x/XML/regress-324422-2.js | (SKIP)
REFTEST TEST-KNOWN-FAIL | file:///Users/cltbld/talos-slave/test/build/jsreftest/tests/jsreftest.html?test=e4x/XML/regress-324688.js | (SKIP)
REFTEST TEST-START | file:///Users/cltbld/talos-slave/test/build/jsreftest/tests/jsreftest.html?test=e4x/XML/regress-324422-1.js | 244 / 3410 (7%)
BUGNUMBER: 324422
STATUS: Do not crash creating XML object with long initialiser
--- NOTE: IN THIS TESTCASE, WE EXPECT EXIT CODE 0 ---
--- NOTE: IN THIS TESTCASE, WE EXPECT EXIT CODE 5 ---
STATUS: 10485760
TEST-UNEXPECTED-FAIL | file:///Users/cltbld/talos-slave/test/build/jsreftest/tests/jsreftest.html?test=e4x/XML/regress-324422-1.js | Exited with code 1 during test run
INFO | automation.py | Application ran for: 0:00:36.782232
INFO | automation.py | Reading PID log: /var/folders/Hs/HsDn6a9SG8idoIya6p9mtE+++TI/-Tmp-/tmpRN61DNpidlog
Downloading symbols from: http://ftp.mozilla.org/pub/mozilla.org/firefox/try-builds/wmccloskey@mozilla.com-41c8607264be/try-macosx64/firefox-16.0a1.en-US.mac.crashreporter-symbols.zip
PROCESS-CRASH | file:///Users/cltbld/talos-slave/test/build/jsreftest/tests/jsreftest.html?test=e4x/XML/regress-324422-1.js | application crashed (minidump found)
Crash dump filename: /var/folders/Hs/HsDn6a9SG8idoIya6p9mtE+++TI/-Tmp-/tmpBsg4nG/minidumps/0F378A35-9301-4B44-8AD4-21B8044588C3.dmp
Operating system: Mac OS X
                  10.6.8 10K549
CPU: amd64
     family 6 model 23 stepping 10
     2 CPUs

Crash reason:  EXC_BAD_ACCESS / KERN_INVALID_ADDRESS
Crash address: 0xffffffff82219000

Thread 0 (crashed)
 0  XUL!js::gc::MarkObject [Heap.h : 824 + 0x9]
    rbx = 0x05e7e188   r12 = 0x8221b560   r13 = 0x05e7e188   r14 = 0x8221b560
    r15 = 0x05e7e188   rip = 0x0266a249   rsp = 0x5fbfbd00   rbp = 0x5fbfbd10
    Found by: given as instruction pointer in context
 1  XUL!js_TraceXML [jsxml.cpp : 7344 + 0x13]
    rbx = 0x822195b8   r12 = 0x8221b560   r13 = 0x05e7e188   r14 = 0x8221b560
    r15 = 0x05e7e188   rip = 0x025ba228   rsp = 0x5fbfbd20   rbp = 0x5fbfbd40
    Found by: call frame info
 2  XUL!js::GCMarker::processMarkStackOther [Marking.cpp : 880 + 0x7]
    rbx = 0x822195b8   r12 = 0x05e7e188   r13 = 0x5fbfbee0   r14 = 0x8221b560
    r15 = 0x05e7e188   rip = 0x0266bd0c   rsp = 0x5fbfbd50   rbp = 0x5fbfbde0
    Found by: call frame info
 3  XUL!js::GCMarker::drainMarkStack [Marking.cpp : 1129 + 0xe]
    rbx = 0x822195b8   r12 = 0x05e7e188   r13 = 0x822195b8   r14 = 0x2c0836a0
    r15 = 0x515000c8   rip = 0x0266ce6a   rsp = 0x5fbfbdf0   rbp = 0x5fbfbe50
    Found by: call frame info
 4  XUL!GCCycle [jsgc.cpp : 3630 + 0xb]
    rbx = 0xffffffff   r12 = 0x05e7e188   r13 = 0x05e7ea20   r14 = 0x05e7e000
    r15 = 0x05e7e258   rip = 0x024c3614   rsp = 0x5fbfbe60   rbp = 0x5fbfbf50
    Found by: call frame info
 5  XUL!Collect [jsgc.cpp : 3894 + 0x14]
    rbx = 0x05e7e000   r12 = 0x05e7e258   r13 = 0x00000006   r14 = 0x00000001
    r15 = 0x00000000   rip = 0x024c40d2   rsp = 0x5fbfbf60   rbp = 0x5fbfbfa0
    Found by: call frame info
 6  XUL!js_HandleExecutionInterrupt [jscntxt.cpp : 908 + 0xc]
    rbx = 0x00378d50   r12 = 0x2664ccbf   r13 = 0x00000005   r14 = 0x00378d50
    r15 = 0x2638dd00   rip = 0x024993ad   rsp = 0x5fbfbfb0   rbp = 0x5fbfbfc0
    Found by: call frame info
 7  XUL!js::Interpret [jsinterp.cpp : 1572 + 0x7]
    rbx = 0x06d61200   r12 = 0x2664ccbf   r13 = 0x00000005   r14 = 0x00378d50
    r15 = 0x2638dd00   rip = 0x024f4ec5   rsp = 0x5fbfbfd0   rbp = 0x5fbfc750
    Found by: call frame info
 8  XUL!js::RunScript [jsinterp.cpp : 267 + 0xc]
    rbx = 0x06d61030   r12 = 0x00378d50   r13 = 0x2c0cbde0   r14 = 0x00378d50
    r15 = 0x28379b68   rip = 0x024fb226   rsp = 0x5fbfc760   rbp = 0x5fbfc780
    Found by: call frame info
 9  XUL!js::ExecuteKernel [jsinterp.cpp : 455 + 0xa]
    rbx = 0x28339800   r12 = 0x00000000   r13 = 0x2c0cbde0   r14 = 0x00378d50
    r15 = 0x28379b68   rip = 0x024fb62b   rsp = 0x5fbfc790   rbp = 0x5fbfc880
}
Rev4 MacOSX Snow Leopard 10.6 mozilla-inbound debug test jsreftest on 2012-08-10 07:39:38 PDT for push 4483bada42be

slave: talos-r4-snow-041

https://tbpl.mozilla.org/php/getParsedLog.php?id=14293830&tree=Mozilla-Inbound

{
TEST-UNEXPECTED-FAIL | file:///Users/cltbld/talos-slave/test/build/jsreftest/tests/jsreftest.html?test=e4x/XML/regress-324422-1.js | Exited with code 1 during test run
INFO | automation.py | Application ran for: 0:01:07.889569
INFO | automation.py | Reading PID log: /var/folders/Hs/HsDn6a9SG8idoIya6p9mtE+++TI/-Tmp-/tmptH3Fpbpidlog
Downloading symbols from: http://ftp.mozilla.org/pub/mozilla.org/firefox/tinderbox-builds/mozilla-inbound-macosx64-debug/1344607665/firefox-17.0a1.en-US.mac64.crashreporter-symbols.zip
PROCESS-CRASH | file:///Users/cltbld/talos-slave/test/build/jsreftest/tests/jsreftest.html?test=e4x/XML/regress-324422-1.js | application crashed (minidump found)
Crash dump filename: /var/folders/Hs/HsDn6a9SG8idoIya6p9mtE+++TI/-Tmp-/tmp4pQNtF/minidumps/9C4594CA-E422-4F40-B8A7-29D580875462.dmp
Operating system: Mac OS X
                  10.6.8 10K549
CPU: amd64
     family 6 model 23 stepping 10
     2 CPUs

Crash reason:  EXC_BAD_ACCESS / KERN_INVALID_ADDRESS
Crash address: 0xffffffff8ed55000

Thread 0 (crashed)
 0  XUL!js::gc::MarkInternal<JSObject> [Heap.h : 1010 + 0x0]
    rbx = 0x8ed55000   r12 = 0x06864268   r13 = 0x06864268   r14 = 0x8ed55a00
    r15 = 0x8ed58578   rip = 0x03649b6b   rsp = 0x5fbf7960   rbp = 0x5fbf7990
    Found by: given as instruction pointer in context
 1  XUL!js_TraceXML [jsxml.cpp : 7256 + 0xe]
    rip = 0x03596c63   rsp = 0x5fbf79a0
    Found by: stack scanning
 2  XUL!js::GCMarker::processMarkStackOther [Marking.cpp : 903 + 0xa]
    rip = 0x0364803b   rsp = 0x5fbf79d0
    Found by: stack scanning
 3  XUL!js::GCMarker::processMarkStackTop [Marking.cpp : 1162 + 0x9]
    rip = 0x0364cb39   rsp = 0x5fbf79f0
    Found by: stack scanning
 4  XUL!js::GCMarker::drainMarkStack [Marking.cpp : 1249 + 0xa]
    rip = 0x036486bf   rsp = 0x5fbf7a40
    Found by: stack scanning
 5  XUL!IncrementalCollectSlice [jsgc.cpp : 3862 + 0xb]
    rip = 0x03463f98   rsp = 0x5fbf7a70
    Found by: stack scanning
 6  libSystem.B.dylib + 0x405c9
    rip = 0x87f125ca   rsp = 0x5fbf7ac0
    Found by: stack scanning
 7  libSystem.B.dylib + 0x405c9
    rip = 0x87f125ca   rsp = 0x5fbf7b40
    Found by: stack scanning
 8  libSystem.B.dylib + 0x405c9
    rip = 0x87f125ca   rsp = 0x5fbf7b70
    Found by: stack scanning
 9  libSystem.B.dylib + 0x13c55f
    rip = 0x8800e560   rsp = 0x5fbf7bb0
    Found by: stack scanning
10  libSystem.B.dylib + 0x18166f
    rip = 0x88053670   rsp = 0x5fbf7bc0
    Found by: stack scanning
11  libSystem.B.dylib + 0x13c586
    rip = 0x8800e587   rsp = 0x5fbf7bd0
    Found by: stack scanning
12  0x7fff87ed1fff
    rip = 0x87ed2000   rsp = 0x5fbf7be0
}
Sorry ignore comment 2, wrong bug.
Rev4 MacOSX Snow Leopard 10.6 mozilla-inbound opt test jsreftest on 2012-06-23 23:48:18 PDT for push 8cd2ae931ba8

slave: talos-r4-snow-041

https://tbpl.mozilla.org/php/getParsedLog.php?id=12946912&tree=Mozilla-Inbound

{
REFTEST TEST-START | file:///Users/cltbld/talos-slave/test/build/jsreftest/tests/jsreftest.html?test=e4x/XML/regress-324422-1.js | 244 / 3410 (7%)
BUGNUMBER: 324422
STATUS: Do not crash creating XML object with long initialiser
--- NOTE: IN THIS TESTCASE, WE EXPECT EXIT CODE 0 ---
--- NOTE: IN THIS TESTCASE, WE EXPECT EXIT CODE 5 ---
STATUS: 10485760
TEST-UNEXPECTED-FAIL | file:///Users/cltbld/talos-slave/test/build/jsreftest/tests/jsreftest.html?test=e4x/XML/regress-324422-1.js | Exited with code 1 during test run
INFO | automation.py | Application ran for: 0:00:38.745259
INFO | automation.py | Reading PID log: /var/folders/Hs/HsDn6a9SG8idoIya6p9mtE+++TI/-Tmp-/tmplE2F2Ppidlog
Downloading symbols from: http://ftp.mozilla.org/pub/mozilla.org/firefox/tinderbox-builds/mozilla-inbound-macosx64/1340518843/firefox-16.0a1.en-US.mac.crashreporter-symbols.zip
PROCESS-CRASH | file:///Users/cltbld/talos-slave/test/build/jsreftest/tests/jsreftest.html?test=e4x/XML/regress-324422-1.js | application crashed (minidump found)
Crash dump filename: /var/folders/Hs/HsDn6a9SG8idoIya6p9mtE+++TI/-Tmp-/tmp5AG4zD/minidumps/9FC73039-0D78-4AF2-9B42-3B2AEAEC3617.dmp
Operating system: Mac OS X
                  10.6.8 10K549
CPU: amd64
     family 6 model 23 stepping 10
     2 CPUs

Crash reason:  EXC_BAD_ACCESS / KERN_INVALID_ADDRESS
Crash address: 0x0

Thread 0 (crashed)
 0  XUL!js::gc::MarkObject [Heap.h : 824 + 0x9]
    rbx = 0x05e7e188   r12 = 0x80852560   r13 = 0x05e7e188   r14 = 0x80852560
    r15 = 0x05e7e188   rip = 0x0266b429   rsp = 0x5fbfbcf0   rbp = 0x5fbfbd00
    Found by: given as instruction pointer in context
 1  XUL!js_TraceXML [jsxml.cpp : 7344 + 0x13]
    rbx = 0x808506b8   r12 = 0x80852560   r13 = 0x05e7e188   r14 = 0x80852560
    r15 = 0x05e7e188   rip = 0x025bb418   rsp = 0x5fbfbd10   rbp = 0x5fbfbd30
    Found by: call frame info
 2  XUL!js::GCMarker::processMarkStackOther [Marking.cpp : 880 + 0x7]
    rbx = 0x808506b8   r12 = 0x05e7e188   r13 = 0x5fbfbed0   r14 = 0x80852560
    r15 = 0x05e7e188   rip = 0x0266ceec   rsp = 0x5fbfbd40   rbp = 0x5fbfbdd0
    Found by: call frame info
 3  XUL!js::GCMarker::drainMarkStack [Marking.cpp : 1129 + 0xe]
    rbx = 0x808506b8   r12 = 0x05e7e188   r13 = 0x808506b8   r14 = 0x2c3156a0
    r15 = 0x519000c0   rip = 0x0266e05d   rsp = 0x5fbfbde0   rbp = 0x5fbfbe40
    Found by: call frame info
 4  XUL!GCCycle [jsgc.cpp : 3630 + 0xb]
    rbx = 0xffffffff   r12 = 0x05e7e188   r13 = 0x05e7ea20   r14 = 0x05e7e000
    r15 = 0x05e7e258   rip = 0x024c3c74   rsp = 0x5fbfbe50   rbp = 0x5fbfbf40
    Found by: call frame info
 5  XUL!Collect [jsgc.cpp : 3895 + 0x14]
    rbx = 0x05e7e000   r12 = 0x05e7e258   r13 = 0x00000006   r14 = 0x00000001
    r15 = 0x00000000   rip = 0x024c4732   rsp = 0x5fbfbf50   rbp = 0x5fbfbf90
    Found by: call frame info
 6  XUL!js_HandleExecutionInterrupt [jscntxt.cpp : 908 + 0xc]
    rbx = 0x00378d50   r12 = 0x28aa03ef   r13 = 0x00000005   r14 = 0x00378d50
    r15 = 0x2628de00   rip = 0x02499a4d   rsp = 0x5fbfbfa0   rbp = 0x5fbfbfb0
    Found by: call frame info
 7  XUL!js::Interpret [jsinterp.cpp : 1572 + 0x7]
    rbx = 0x06d61200   r12 = 0x28aa03ef   r13 = 0x00000005   r14 = 0x00378d50
    r15 = 0x2628de00   rip = 0x024f56b1   rsp = 0x5fbfbfc0   rbp = 0x5fbfc750
    Found by: call frame info
 8  XUL!js::RunScript [jsinterp.cpp : 267 + 0xc]
    rbx = 0x06d61030   r12 = 0x00378d50   r13 = 0x2c3e9de0   r14 = 0x00378d50
    r15 = 0x081a0368   rip = 0x024fb946   rsp = 0x5fbfc760   rbp = 0x5fbfc780
    Found by: call frame info
 9  XUL!js::ExecuteKernel [jsinterp.cpp : 455 + 0xa]
    rbx = 0x2399a800   r12 = 0x00000000   r13 = 0x2c3e9de0   r14 = 0x00378d50
    r15 = 0x081a0368   rip = 0x024fbd4b   rsp = 0x5fbfc790   rbp = 0x5fbfc880
}
This bug was observed only on one or more of the six machines listed in
bug 787281 comment 11, which seem likely to have bad memory, disk, or
other hardware problem, based on the rate of failures on those machines
and the types of failures observed.

Therefore I'm marking this bug invalid, though it should be reopened if
it occurs on other (more reliable) hardware.
Status: NEW → RESOLVED
Closed: 12 years ago
Resolution: --- → INVALID
Whiteboard: [orange]
You need to log in before you can comment on or make changes to this bug.