788323 - crash in JSCompartment::sweep

Status: RESOLVED WORKSFORME

(Core :: JavaScript Engine, defect)

Description

[Marcia Knous [:marcia]]

This bug was filed from the Socorro interface and is 
report bp-922a6ea8-78d0-47d3-bb19-b04b92120904 .
============================================================= 

Seen while looking at Beta crash stats, but has occurred in other versions as well. https://crash-stats.mozilla.com/report/list?signature=JSCompartment::sweep%28js::FreeOp*,%20bool%29. Currently on FF 16b1 it ranks #64 in Windows crashes. Higher percentage of crashes on Windows XP:

Windows XP 	68.745 %	937
Windows 7 	25.825 %	352
Windows Vista 	4.549 %	         62
Windows 8 	0.587 %	          8
Windows Unknown 0.293 %	          4 

Nothing jumps out as far as correlations, but will dig a little deeper.

Frame 	Module 	Signature 	Source
0 	mozjs.dll 	JSCompartment::sweep 	js/src/jscompartment.cpp:496
1 	mozjs.dll 	SweepPhase 	js/src/jsgc.cpp:3449
2 	mozjs.dll 	GCCycle 	js/src/jsgc.cpp:3900
3 	mozjs.dll 	Collect 	js/src/jsgc.cpp:4004
4 	mozjs.dll 	js::IncrementalGC 	js/src/jsfriendapi.cpp:161
5 	xul.dll 	nsJSContext::GarbageCollectNow 	dom/base/nsJSEnvironment.cpp:2902
6 	xul.dll 	GCTimerFired 	dom/base/nsJSEnvironment.cpp:3197
7 	xul.dll 	nsTimerImpl::Fire 	xpcom/threads/nsTimerImpl.cpp:473
8 	xul.dll 	nsThread::ProcessNextEvent 	xpcom/threads/nsThread.cpp:624
9 	nspr4.dll 	_MD_CURRENT_THREAD 	nsprpub/pr/src/md/windows/w95thred.c:312
10 	xul.dll 	mozilla::ipc::MessagePump::Run 	ipc/glue/MessagePump.cpp:116
11 	xul.dll 	MessageLoop::RunHandler 	ipc/chromium/src/base/message_loop.cc:201
12 	xul.dll 	nsCSSFrameConstructor::FindSVGData 	layout/base/nsCSSFrameConstructor.cpp:4986

Comment 1

[Marcia Knous [:marcia]]

Some correlations, but not many crashes from yesterday's manual correlations:

JSCompartment::sweep(js::FreeOp*, bool)|EXCEPTION_ACCESS_VIOLATION_READ (39 crashes)
     13% (5/39) vs.   6% (3224/50025) {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} (Adblock Plus, https://addons.mozilla.org/addon/1865)
     13% (5/39) vs.   7% (3447/50025) {635abd67-4fe9-1b23-4f01-e679fa7484c1} (Yahoo! Toolbar, https://addons.mozilla.org/addon/2032)
      5% (2/39) vs.   0% (26/50025) {3C9A65A6-9563-4485-BA4A-4BCD698BCFB4} (Back to Top, https://addons.mozilla.org/addon/658)
      5% (2/39) vs.   0% (28/50025) {899DF1F8-2F43-4394-8315-37F6744E6319} (NewsFox, https://addons.mozilla.org/addon/629)
      5% (2/39) vs.   0% (35/50025) [e-mail] (Imgur uploader, https://addons.mozilla.org/addon/14389)

URLs seem to be mostly facebook and youtube.com.

Comment 2

[Scoobidiver (away)]

It's #23 browser crasher in 22.0, #16 in 23.0b7, #27 in 24.0a2, and #119 in 25.0a1.

Comment 3

[Virtual_ManPL [:Virtual] 🇵🇱 - (please needinfo? me - so I will see your comment/message/reply/question/etc.)]

I'm marking this bug as WORKSFORME as bug crashlog signature didn't appear from a long time (over half year) in Firefox (except some obsolete Fx <35, no crashes started since Fx 35).