Closed Bug 808411 Opened 12 years ago Closed 12 years ago

Intermittent crash in test_richtext2.html, test_input_attributes_reflection.html, test_smilCSSFromTo.xhtml, test_bug560112.html, [@ js::ion::AutoFlushCache::updateTop] [@ js::ion::AutoFlushCache::update]

Categories

(Core :: JavaScript Engine, defect)

Product:
Core
Component:
JavaScript Engine
Platform:
ARM
Android
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED FIXED
Milestone:
mozilla19
Tracking Flags:
Tracking Status
firefox18 --- fixed
firefox19 --- fixed

People

(Reporter: philor, Assigned: mjrosenb)

References

Details

(Keywords: crash, intermittent-failure, Whiteboard: [ion:p1])

Crash Data

+++ This bug was initially created as a clone of Bug #792873 +++

Out of summary room for test filenames in bug 792873.

https://tbpl.mozilla.org/php/getParsedLog.php?id=16734545&tree=Profiling
Android Tegra 250 profiling opt test mochitest-8 on 2012-11-03 23:10:10 PDT for push 5ec0bb746f01
slave: tegra-217

PROCESS-CRASH | /tests/editor/libeditor/html/tests/browserscope/test_richtext2.html | application crashed (minidump found)
Crash dump filename: /tmp/tmp19tIzn/4a4627ec-4a76-a68a-02a90945-4642a273.dmp
Operating system: Android
                  0.0.0 Linux 2.6.32.9-00002-gd8084dc-dirty #1 SMP PREEMPT Wed Feb 2 11:32:06 PST 2011 armv7l nvidia/harmony/harmony/harmony:2.2/FRF91/20110202.102810:eng/test-keys
CPU: arm
     0 CPUs

Crash reason:  SIGSEGV
Crash address: 0x58

Thread 4 (crashed)
 0  libxul.so!js::ion::AutoFlushCache::updateTop(unsigned int, unsigned int) [Ion.cpp : 1869 + 0xa]
     r4 = 0x00000004    r5 = 0x5443b82c    r6 = 0x4e820b84    r7 = 0x5b780000
     r8 = 0x5598a62c    r9 = 0x5598a62c   r10 = 0x5573f24c    fp = 0x4e820bd8
     sp = 0x4e820b30    lr = 0x44b7879b    pc = 0x553fd90a
    Found by: given as instruction pointer in context
 1  libxul.so!js::ion::Assembler::patchWrite_NearCall(js::ion::CodeLocationLabel, js::ion::CodeLocationLabel) [Assembler-arm.cpp : 2277 + 0x3]
     r4 = 0x4e820c00    r5 = 0x57ca6400    r6 = 0x4e820b84    r7 = 0x5b780000
     r8 = 0x5598a62c    r9 = 0x5598a62c   r10 = 0x5573f24c    fp = 0x4e820bd8
     sp = 0x4e820b40    pc = 0x5545cc1f
    Found by: call frame info
 2  libxul.so!js::ion::InvalidateAll(js::FreeOp*, JSCompartment*) [Ion.cpp : 1689 + 0x3]
     r4 = 0x4e820c00    r5 = 0x57ca6400    r6 = 0x4e820b84    r7 = 0x5b780000
     r8 = 0x5598a62c    r9 = 0x5598a62c   r10 = 0x5573f24c    fp = 0x4e820bd8
     sp = 0x4e820b48    pc = 0x55401a71
    Found by: call frame info
 3  libxul.so!JSCompartment::sweep(js::FreeOp*, bool) [jscompartment.cpp : 501 + 0x7]
     r4 = 0x4e820ed0    r5 = 0x50c311d8    r6 = 0x4e820dc8    r7 = 0x57ca6400
     r8 = 0x56adbb64    r9 = 0x4e820ed0   r10 = 0x7fa7640a    fp = 0x00000001
     sp = 0x4e820c30    pc = 0x5523ba31
    Found by: call frame info
 4  libxul.so!IncrementalCollectSlice [jsgc.cpp : 3763 + 0x7]
     r4 = 0x50c31000    r5 = 0x56adbaf4    r6 = 0x4e820dc8    r7 = 0x0000001b
     r8 = 0x56adbb64    r9 = 0x4e820ed0   r10 = 0x7fa7640a    fp = 0x0004cd9f
     sp = 0x4e820d70    pc = 0x55264c53
    Found by: call frame info
 5  libxul.so!GCCycle [jsgc.cpp : 4452 + 0x11]
     r4 = 0x50c31000    r5 = 0x000c1000    r6 = 0x00000000    r7 = 0x557356ec
     r8 = 0x00000000    r9 = 0x00000000   r10 = 0x50c31000    fp = 0x50c311d8
     sp = 0x4e820f38    pc = 0x55266199
    Found by: call frame info
 6  libxul.so!js::GCSlice [jsgc.cpp : 4566 + 0xd]
     r4 = 0x50c31000    r5 = 0x50c311d8    r6 = 0x00000005    r7 = 0x00000000
     r8 = 0x00000000    r9 = 0x00000000   r10 = 0x00002710    fp = 0x00000000
     sp = 0x4e820f68    pc = 0x552673fd
    Found by: call frame info
 7  libxul.so!js_HandleExecutionInterrupt(JSContext*) [jscntxt.cpp : 1205 + 0x13]
     r4 = 0x57ced900    r5 = 0x50c31000    r6 = 0xffffff87    r7 = 0x5767ff10
     r8 = 0x55389511    r9 = 0x57697280   r10 = 0x50e006a8    fp = 0x00000000
     sp = 0x4e820f98    pc = 0x552368f7
https://tbpl.mozilla.org/php/getParsedLog.php?id=16791342&tree=Fx-Team
Summary: Intermittent crash in test_richtext2.html, [@ js::ion::AutoFlushCache::updateTop] [@ js::ion::AutoFlushCache::update] → Intermittent crash in test_richtext2.html, test_input_attributes_reflection.html [@ js::ion::AutoFlushCache::updateTop] [@ js::ion::AutoFlushCache::update]
Summary: Intermittent crash in test_richtext2.html, test_input_attributes_reflection.html [@ js::ion::AutoFlushCache::updateTop] [@ js::ion::AutoFlushCache::update] → Intermittent crash in test_richtext2.html, test_input_attributes_reflection.html, test_smilCSSFromTo.xhtml [@ js::ion::AutoFlushCache::updateTop] [@ js::ion::AutoFlushCache::update]
https://tbpl.mozilla.org/php/getParsedLog.php?id=16806649&tree=Mozilla-Inbound
Summary: Intermittent crash in test_richtext2.html, test_input_attributes_reflection.html, test_smilCSSFromTo.xhtml [@ js::ion::AutoFlushCache::updateTop] [@ js::ion::AutoFlushCache::update] → Intermittent crash in test_richtext2.html, test_input_attributes_reflection.html, test_smilCSSFromTo.xhtml, test_bug560112.html, [@ js::ion::AutoFlushCache::updateTop] [@ js::ion::AutoFlushCache::update]
Assignee: general → mrosenberg
Fixed in bug 792873.
Status: NEW → RESOLVED
Closed: 12 years ago
Resolution: --- → FIXED
I told m-cMerge to resolve this one too...
https://hg.mozilla.org/mozilla-central/rev/8a726e298171
Flags: in-testsuite+
Target Milestone: --- → mozilla19
Whiteboard: [orange][ion:p1] → [ion:p1]
You need to log in before you can comment on or make changes to this bug.