Closed Bug 808411 Opened 13 years ago Closed 13 years ago

Intermittent crash in test_richtext2.html, test_input_attributes_reflection.html, test_smilCSSFromTo.xhtml, test_bug560112.html, [@ js::ion::AutoFlushCache::updateTop] [@ js::ion::AutoFlushCache::update]

Categories

(Core :: JavaScript Engine, defect)

Product:
Core
Component:
JavaScript Engine
Platform:
ARM
Android
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED FIXED
Milestone:
mozilla19
Tracking Flags:
Tracking Status
firefox18 --- fixed
firefox19 --- fixed

People

(Reporter: philor, Assigned: mjrosenb)

References

Details

(Keywords: crash, intermittent-failure, Whiteboard: [ion:p1])

Crash Data

+++ This bug was initially created as a clone of Bug #792873 +++ Out of summary room for test filenames in bug 792873. https://tbpl.mozilla.org/php/getParsedLog.php?id=16734545&tree=Profiling Android Tegra 250 profiling opt test mochitest-8 on 2012-11-03 23:10:10 PDT for push 5ec0bb746f01 slave: tegra-217 PROCESS-CRASH | /tests/editor/libeditor/html/tests/browserscope/test_richtext2.html | application crashed (minidump found) Crash dump filename: /tmp/tmp19tIzn/4a4627ec-4a76-a68a-02a90945-4642a273.dmp Operating system: Android 0.0.0 Linux 2.6.32.9-00002-gd8084dc-dirty #1 SMP PREEMPT Wed Feb 2 11:32:06 PST 2011 armv7l nvidia/harmony/harmony/harmony:2.2/FRF91/20110202.102810:eng/test-keys CPU: arm 0 CPUs Crash reason: SIGSEGV Crash address: 0x58 Thread 4 (crashed) 0 libxul.so!js::ion::AutoFlushCache::updateTop(unsigned int, unsigned int) [Ion.cpp : 1869 + 0xa] r4 = 0x00000004 r5 = 0x5443b82c r6 = 0x4e820b84 r7 = 0x5b780000 r8 = 0x5598a62c r9 = 0x5598a62c r10 = 0x5573f24c fp = 0x4e820bd8 sp = 0x4e820b30 lr = 0x44b7879b pc = 0x553fd90a Found by: given as instruction pointer in context 1 libxul.so!js::ion::Assembler::patchWrite_NearCall(js::ion::CodeLocationLabel, js::ion::CodeLocationLabel) [Assembler-arm.cpp : 2277 + 0x3] r4 = 0x4e820c00 r5 = 0x57ca6400 r6 = 0x4e820b84 r7 = 0x5b780000 r8 = 0x5598a62c r9 = 0x5598a62c r10 = 0x5573f24c fp = 0x4e820bd8 sp = 0x4e820b40 pc = 0x5545cc1f Found by: call frame info 2 libxul.so!js::ion::InvalidateAll(js::FreeOp*, JSCompartment*) [Ion.cpp : 1689 + 0x3] r4 = 0x4e820c00 r5 = 0x57ca6400 r6 = 0x4e820b84 r7 = 0x5b780000 r8 = 0x5598a62c r9 = 0x5598a62c r10 = 0x5573f24c fp = 0x4e820bd8 sp = 0x4e820b48 pc = 0x55401a71 Found by: call frame info 3 libxul.so!JSCompartment::sweep(js::FreeOp*, bool) [jscompartment.cpp : 501 + 0x7] r4 = 0x4e820ed0 r5 = 0x50c311d8 r6 = 0x4e820dc8 r7 = 0x57ca6400 r8 = 0x56adbb64 r9 = 0x4e820ed0 r10 = 0x7fa7640a fp = 0x00000001 sp = 0x4e820c30 pc = 0x5523ba31 Found by: call frame info 4 libxul.so!IncrementalCollectSlice [jsgc.cpp : 3763 + 0x7] r4 = 0x50c31000 r5 = 0x56adbaf4 r6 = 0x4e820dc8 r7 = 0x0000001b r8 = 0x56adbb64 r9 = 0x4e820ed0 r10 = 0x7fa7640a fp = 0x0004cd9f sp = 0x4e820d70 pc = 0x55264c53 Found by: call frame info 5 libxul.so!GCCycle [jsgc.cpp : 4452 + 0x11] r4 = 0x50c31000 r5 = 0x000c1000 r6 = 0x00000000 r7 = 0x557356ec r8 = 0x00000000 r9 = 0x00000000 r10 = 0x50c31000 fp = 0x50c311d8 sp = 0x4e820f38 pc = 0x55266199 Found by: call frame info 6 libxul.so!js::GCSlice [jsgc.cpp : 4566 + 0xd] r4 = 0x50c31000 r5 = 0x50c311d8 r6 = 0x00000005 r7 = 0x00000000 r8 = 0x00000000 r9 = 0x00000000 r10 = 0x00002710 fp = 0x00000000 sp = 0x4e820f68 pc = 0x552673fd Found by: call frame info 7 libxul.so!js_HandleExecutionInterrupt(JSContext*) [jscntxt.cpp : 1205 + 0x13] r4 = 0x57ced900 r5 = 0x50c31000 r6 = 0xffffff87 r7 = 0x5767ff10 r8 = 0x55389511 r9 = 0x57697280 r10 = 0x50e006a8 fp = 0x00000000 sp = 0x4e820f98 pc = 0x552368f7
https://tbpl.mozilla.org/php/getParsedLog.php?id=16791342&tree=Fx-Team
Summary: Intermittent crash in test_richtext2.html, [@ js::ion::AutoFlushCache::updateTop] [@ js::ion::AutoFlushCache::update] → Intermittent crash in test_richtext2.html, test_input_attributes_reflection.html [@ js::ion::AutoFlushCache::updateTop] [@ js::ion::AutoFlushCache::update]
Summary: Intermittent crash in test_richtext2.html, test_input_attributes_reflection.html [@ js::ion::AutoFlushCache::updateTop] [@ js::ion::AutoFlushCache::update] → Intermittent crash in test_richtext2.html, test_input_attributes_reflection.html, test_smilCSSFromTo.xhtml [@ js::ion::AutoFlushCache::updateTop] [@ js::ion::AutoFlushCache::update]
https://tbpl.mozilla.org/php/getParsedLog.php?id=16806649&tree=Mozilla-Inbound
Summary: Intermittent crash in test_richtext2.html, test_input_attributes_reflection.html, test_smilCSSFromTo.xhtml [@ js::ion::AutoFlushCache::updateTop] [@ js::ion::AutoFlushCache::update] → Intermittent crash in test_richtext2.html, test_input_attributes_reflection.html, test_smilCSSFromTo.xhtml, test_bug560112.html, [@ js::ion::AutoFlushCache::updateTop] [@ js::ion::AutoFlushCache::update]
Assignee: general → mrosenberg
Fixed in bug 792873.
Status: NEW → RESOLVED
Closed: 13 years ago
Resolution: --- → FIXED
I told m-cMerge to resolve this one too...
https://hg.mozilla.org/mozilla-central/rev/8a726e298171
Flags: in-testsuite+
Target Milestone: --- → mozilla19
Whiteboard: [orange][ion:p1] → [ion:p1]
You need to log in before you can comment on or make changes to this bug.